diff options
| -rw-r--r-- | ops/machines/whitby/default.nix | 3 | ||||
| -rw-r--r-- | ops/secrets/grafana.age | bin | 0 -> 529 bytes | |||
| -rw-r--r-- | ops/secrets/secrets.nix | 1 |
3 files changed, 3 insertions, 1 deletions
diff --git a/ops/machines/whitby/default.nix b/ops/machines/whitby/default.nix index 41b53fa98445..88c0aa9d03c4 100644 --- a/ops/machines/whitby/default.nix +++ b/ops/machines/whitby/default.nix @@ -209,6 +209,7 @@ in { in { clbot.file = secretFile "clbot"; gerrit-queue.file = secretFile "gerrit-queue"; + grafana.file = secretFile "grafana"; irccat.file = secretFile "irccat"; owothia.file = secretFile "owothia"; @@ -517,7 +518,7 @@ in { }; }; # Contains GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET. - systemd.services.grafana.serviceConfig.EnvironmentFile = "/etc/secrets/grafana"; + systemd.services.grafana.serviceConfig.EnvironmentFile = "/run/agenix/grafana"; security.sudo.extraRules = [ { diff --git a/ops/secrets/grafana.age b/ops/secrets/grafana.age new file mode 100644 index 000000000000..197fe9485607 --- /dev/null +++ b/ops/secrets/grafana.age Binary files differdiff --git a/ops/secrets/secrets.nix b/ops/secrets/secrets.nix index 75cc80cc9137..66176c3b9ef3 100644 --- a/ops/secrets/secrets.nix +++ b/ops/secrets/secrets.nix @@ -17,6 +17,7 @@ in { "clbot-ssh.age" = default; "clbot.age" = default; "gerrit-queue.age" = default; + "grafana.age" = default; "irccat.age" = default; "owothia.age" = default; } |