containers/fluorite: setup env file

containers/fluorite/configuration.nix

@@ -9,6 +9,7 @@
   services.slskd = {
     enable = true;
     domain = null;
+    environmentFile = "/binds/slskd_env";
     settings = {
       directories.downloads = "/persist/slskd/Downloads";
       shares.downloads = "/binds/shared/";

containers/fluorite/flake.nix

@@ -23,7 +23,7 @@
     nixosConfigurations.container = nixpkgs.lib.nixosSystem {
       inherit modules;
     };
-    nixosModule = { ... }: {
+    nixosModule = { config, ... }: {
       services.nginx.virtualHosts."${fqdn}" = {
         useACMEHost = "lava.moe";
         forceSSL = true;
@@ -55,6 +55,11 @@
           mountPoint = "/binds/shared";
           isReadOnly = true;
         };
+        bindMounts."slskd_env" = {
+          hostPath = config.age.secrets.slskd_env.path;
+          mountPoint = "/binds/slskd_env";
+          isReadOnly = true;
+        };
         # flake = "path:" + ./.;
       };
     };

hosts/anemone/default.nix

@@ -5,6 +5,7 @@
 
   nixpkgs.overlays = [ inputs.neovim-nightly.overlays.default ];
   age.secrets = {
+    slskd_env.file = ../../secrets/slskd_env.age;
     wg_anemone.file = ../../secrets/wg_anemone.age;
     passwd.file = ../../secrets/passwd.age;
   };

secrets.nix

@@ -10,6 +10,7 @@ in {
   "secrets/wpa_conf.age".publicKeys = [ blossom rin ];
 
   "secrets/acme_dns.age".publicKeys = [ dandelion hazel rin ];
+  "secrets/slskd_env.age".publicKeys = [ anemone dandelion rin ];
   "secrets/warden_admin.age".publicKeys = [ rin ];
   "secrets/wg_anemone.age".publicKeys = [ anemone rin ];
   "secrets/wg_dandelion.age".publicKeys = [ dandelion rin ];