diff --git a/configuration.nix b/configuration.nix index 9930585..fa9ed53 100644 --- a/configuration.nix +++ b/configuration.nix @@ -210,6 +210,11 @@ with pkgs; owner = "inadyn"; group = "inadyn"; }; + secrets.inadyn-porkbun-secret = { + file = secrets/inadyn-porkbun-secret.age; + owner = "inadyn"; + group = "inadyn"; + }; secrets.acme-duckdns = { file = secrets/acme-duckdns.age; owner = "acme"; diff --git a/modules/networking.nix b/modules/networking.nix index 72350eb..dc99b9b 100644 --- a/modules/networking.nix +++ b/modules/networking.nix @@ -47,11 +47,9 @@ in # NOTE Temporary workaround until Inadyn fixes the Porkbun module services.oink = { enable = true; - settings = { - apiKey = "PLACEHOLDER"; - secretApiKey = "PLACEHOLDER"; - interval = 1800; - }; + apiKeyFile = config.age.secrets.inadyn-porkbun.path; + secretApiKeyFile = config.age.secrets.inadyn-porkbun-secret.path; + settings.interval = 1800; domains = [ { domain = "psydnd.org"; @@ -59,8 +57,6 @@ in } ]; }; - # NOTE Load credentials using environment variables - systemd.services.oink.serviceConfig.EnvironmentFile = config.age.secrets.inadyn-porkbun.path; # Firewall configuration networking.firewall = { diff --git a/secrets/inadyn-porkbun-secret.age b/secrets/inadyn-porkbun-secret.age new file mode 100644 index 0000000..79825d1 --- /dev/null +++ b/secrets/inadyn-porkbun-secret.age @@ -0,0 +1,5 @@ +age-encryption.org/v1 +-> ssh-ed25519 iUaRGg paS5BxWWicriSLAZyCBKd2xylLAp4/LcHmogO7me8yQ +MWW/Pkvn+4G4YeYXY9ZPXC92TbcFXQMyHJ2ltFzXpZs +--- ZdFfQ7tHfEo+u/0MmigCNh6OIxkd2bimRN30rMUs1ks +򵳵Y$B祍X锸絙貽'J盃S'5!UM石-v苖彙抗8%|R,媬I廁G浕VQE0D:Qv<婢) %fc邱XZ展 7+yB \ No newline at end of file diff --git a/secrets/inadyn-porkbun.age b/secrets/inadyn-porkbun.age index 3e00a89..65b4337 100644 Binary files a/secrets/inadyn-porkbun.age and b/secrets/inadyn-porkbun.age differ diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 1a6b1cd..4fb35e1 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -17,6 +17,7 @@ in "signal.age".publicKeys = [ zion ]; "inadyn-duckdns.age".publicKeys = [ zion ]; "inadyn-porkbun.age".publicKeys = [ zion ]; + "inadyn-porkbun-secret.age".publicKeys = [ zion ]; "acme-duckdns.age".publicKeys = [ zion ]; "acme-porkbun.age".publicKeys = [ zion ]; "microbin.age".publicKeys = [ zion ];