hosts/web-2: radicale use secrets

hosts/web-2/radicale.nix

@@ -1,6 +1,11 @@
-{ ... }:
+{ config, ... }:
 
 {
+  age.secrets.radicale-htpasswd = {
+    owner = "radicale";
+    group = "radicale";
+  };
+
   services.radicale = {
     enable = true;
     settings = {
@@ -9,7 +14,7 @@
       };
       auth = {
         type = "htpasswd";
-        htpasswd_filename = "/var/src/secrets/radicale/htpasswd";
+        htpasswd_filename = config.age.secrets.radicale-htpasswd.path;
         htpasswd_encryption = "bcrypt";
       };
       storage = {

hosts/web-2/secrets/radicale-htpasswd.age

@@ -0,0 +1,11 @@
+age-encryption.org/v1
+-> ssh-ed25519 HwR33w +w13fgMLBeHKig0VX67/mlhQb0EPSJAFTu//velYNRY
+irMedsePNfFFOYhKksrqLcLdNdYHMxFy4iTPneIOtWU
+-> ssh-ed25519 1nn+0Q KpFGP/y4zZ8E8Jut8Gpea1DLH6rXGKODLE3IPTbzOUo
+p28M4shr97sqqTBAxB1fQRNCj2E+xio3TboKZ/6smb8
+-> rXRB4)-grease
+t3CdM1EbN2yfSeKURCJRMTZ4w9FtXu6+Y8PWxo2RTV0fyv6XJdrq1jn1n4IflQLP
+CV3H9FlQp4Lg/bdqVZDqDoMJ6dprVWK4rACnF6/tRRkZR4Ndfk4JRRWtWBOfR/ax
+GWNb
+--- yNRoOEai4ypvo0uGZYI1q/qwzS4wIZFXQEGYcW+H/wc
+<EFBFBD><EFBFBD>	<09>Z<><5A><EFBFBD><08><>e0<65><30><EFBFBD>_<EFBFBD><5F>D@<40>Ε<EFBFBD>><3E>[<5B>KOQBuP<75>9TGg<47><67>(<28>9<EFBFBD>p<EFBFBD><70>Z@1<>&RZ<52>O<EFBFBD><4F>C<EFBFBD>p$kr<6B><72><EFBFBD><EFBFBD><EFBFBD><13><0F><>lg!\<5C><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>=W׃<57>(<28>Vq