about summary refs log tree commit diff
diff options
context:
space:
mode:
-rw-r--r--ops/machines/whitby/default.nix1
-rw-r--r--ops/modules/owothia.nix2
-rw-r--r--ops/secrets/owothia.agebin0 -> 427 bytes
-rw-r--r--ops/secrets/secrets.nix3
4 files changed, 4 insertions, 2 deletions
diff --git a/ops/machines/whitby/default.nix b/ops/machines/whitby/default.nix
index 1f146c923e..d6d3004ffc 100644
--- a/ops/machines/whitby/default.nix
+++ b/ops/machines/whitby/default.nix
@@ -209,6 +209,7 @@ in {
     in {
       clbot.file = secretFile "clbot";
       gerrit-queue.file = secretFile "gerrit-queue";
+      owothia.file = secretFile "owothia";
     };
 
   # Automatically collect garbage from the Nix store.
diff --git a/ops/modules/owothia.nix b/ops/modules/owothia.nix
index 9094818737..b2a77cddc2 100644
--- a/ops/modules/owothia.nix
+++ b/ops/modules/owothia.nix
@@ -11,7 +11,7 @@ in {
     secretsFile = lib.mkOption {
       type = lib.types.str;
       description = "File path from which systemd should read secrets";
-      default = "/etc/secrets/owothia";
+      default = "/run/agenix/owothia";
     };
 
     owoChance = lib.mkOption {
diff --git a/ops/secrets/owothia.age b/ops/secrets/owothia.age
new file mode 100644
index 0000000000..57a00504c8
--- /dev/null
+++ b/ops/secrets/owothia.age
Binary files differdiff --git a/ops/secrets/secrets.nix b/ops/secrets/secrets.nix
index ef359cd1cd..308893358d 100644
--- a/ops/secrets/secrets.nix
+++ b/ops/secrets/secrets.nix
@@ -9,6 +9,7 @@ let
   default.publicKeys = tazjin ++ [ whitby ];
 in {
   "besadii.age" = default;
-  "gerrit-queue.age" = default;
   "clbot.age" = default;
+  "gerrit-queue.age" = default;
+  "owothia.age" = default;
 }