From b1108821a9dbc617f02a4437c9300f5b0bdca479 Mon Sep 17 00:00:00 2001 From: Vincent Ambo Date: Fri, 10 Dec 2021 15:55:08 +0300 Subject: refactor(ops): Move grafana secret into agenix Change-Id: Id141758135c796881e91d20b950dae74c40d9ab3 --- ops/machines/whitby/default.nix | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'ops/machines/whitby') diff --git a/ops/machines/whitby/default.nix b/ops/machines/whitby/default.nix index 41b53fa98445..88c0aa9d03c4 100644 --- a/ops/machines/whitby/default.nix +++ b/ops/machines/whitby/default.nix @@ -209,6 +209,7 @@ in { in { clbot.file = secretFile "clbot"; gerrit-queue.file = secretFile "gerrit-queue"; + grafana.file = secretFile "grafana"; irccat.file = secretFile "irccat"; owothia.file = secretFile "owothia"; @@ -517,7 +518,7 @@ in { }; }; # Contains GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET. - systemd.services.grafana.serviceConfig.EnvironmentFile = "/etc/secrets/grafana"; + systemd.services.grafana.serviceConfig.EnvironmentFile = "/run/agenix/grafana"; security.sudo.extraRules = [ { -- cgit 1.4.1