refactor(ops): Move owothia secret into agenix r/3175

Relates to b/161

Change-Id: I25445281b0dd3c3f3660f8bb0d8337506a1e427b

4 files changed, 4 insertions, 2 deletions

diff --git a/ops/machines/whitby/default.nix b/ops/machines/whitby/default.nix
index 1f146c923ebb..d6d3004ffc34 100644
--- a/ops/machines/whitby/default.nix
+++ b/ops/machines/whitby/default.nix
@@ -209,6 +209,7 @@ in {
     in {
       clbot.file = secretFile "clbot";
       gerrit-queue.file = secretFile "gerrit-queue";
+      owothia.file = secretFile "owothia";
     };
 
   # Automatically collect garbage from the Nix store.
diff --git a/ops/modules/owothia.nix b/ops/modules/owothia.nix
index 909481873704..b2a77cddc2dd 100644
--- a/ops/modules/owothia.nix
+++ b/ops/modules/owothia.nix
@@ -11,7 +11,7 @@ in {
     secretsFile = lib.mkOption {
       type = lib.types.str;
       description = "File path from which systemd should read secrets";
-      default = "/etc/secrets/owothia";
+      default = "/run/agenix/owothia";
     };
 
     owoChance = lib.mkOption {
diff --git a/ops/secrets/owothia.age b/ops/secrets/owothia.age
new file mode 100644
index 000000000000..57a00504c8f3
--- /dev/null
+++ b/ops/secrets/owothia.age
Binary files differdiff --git a/ops/secrets/secrets.nix b/ops/secrets/secrets.nix
index ef359cd1cd1b..308893358dc9 100644
--- a/ops/secrets/secrets.nix
+++ b/ops/secrets/secrets.nix
@@ -9,6 +9,7 @@ let
   default.publicKeys = tazjin ++ [ whitby ];
 in {
   "besadii.age" = default;
-  "gerrit-queue.age" = default;
   "clbot.age" = default;
+  "gerrit-queue.age" = default;
+  "owothia.age" = default;
 }