hosts/monitoring-3/alertmanager.nix

@@ -1,14 +1,9 @@
-{ config, pkgs, ... }:
+{ pkgs, ... }:
 {
-  age.secrets.xmpp-password = {
-    owner = "solid-xmpp-alarm";
-    group = "solid-xmpp-alarm";
-  };
-
   services.solid-xmpp-alarm = {
     enable = true;
     jid = "feuer@fem-net.de";
-    passwordFile = config.age.secrets.xmpp-password.path;
+    passwordFile = "/var/src/secrets/xmpp-alert/password";
     receiver = "clerie@fem-net.de";
   };
 

hosts/storage-2/mixcloud.nix

@@ -1,4 +1,4 @@
-{ config, lib, pkgs, ... }:
+{ lib, pkgs, ... }:
 
 with lib;
 
@@ -52,7 +52,7 @@ in {
       forceSSL = true;
       locations."/" = {
         alias = "/data/mixcloud/";
-        basicAuthFile = config.age.secrets.mixcloud-htpasswd.path;
+        basicAuthFile = "/var/src/secrets/nginx/mixcloud.htpasswd";
         extraConfig = ''
           autoindex on;
           autoindex_exact_size off;
@@ -60,7 +60,7 @@ in {
       };
       locations."/media/" = {
         alias = "/data/media/";
-        basicAuthFile = config.age.secrets.mixcloud-htpasswd.path;
+        basicAuthFile = "/var/src/secrets/nginx/mixcloud.htpasswd";
         extraConfig = ''
           autoindex on;
           autoindex_exact_size off;

hosts/storage-2/secrets/mixcloud-htpasswd.age

@@ -1,10 +0,0 @@
-age-encryption.org/v1
--> ssh-ed25519 HwR33w Q6P3HFyTE3FEsrjnBx3TWIdv16GYLdAmnTZE2W5uex4
-A30r0PifK1ioVSgCTQen0gOlwKtbsAiD5YJPkQ98dIA
--> ssh-ed25519 pI7EWw pFiBE+L4RrpIdOZH7EFHtQ+pVXSDMCtGbewbGAKDlkk
-5jicuCBcbH2Ob1jtoZrrm+jNNgw94Co3/A2tRrrNgxY
--> :7)u]4Em-grease Xe>q ~'eWf Vx;#t
-fJtUbOaM0w5wrhpUl3dvjZ9BXimgrjK5eYs3g358AIEs/+BbuuR4ogCZsLyv9bXd
-smyFqW2xoxiANWGWWGY
---- ba8304R6wM3M05dDRmIwZkwgrLUzwlrSGU3cGTpi00w
-~Hî±aÒHgÇÀcÞ¬|<05>vðÔ|Js-β}Áš„€VF¤ÄÙL
ï”»tme%ûrqxCñöÝõ;Ò’âÀÆÖ‹7è

hosts/web-2/radicale.nix

@@ -1,11 +1,6 @@
-{ config, ... }:
+{ ... }:
 
 {
-  age.secrets.radicale-htpasswd = {
-    owner = "radicale";
-    group = "radicale";
-  };
-
   services.radicale = {
     enable = true;
     settings = {
@@ -14,7 +9,7 @@
       };
       auth = {
         type = "htpasswd";
-        htpasswd_filename = config.age.secrets.radicale-htpasswd.path;
+        htpasswd_filename = "/var/src/secrets/radicale/htpasswd";
         htpasswd_encryption = "bcrypt";
       };
       storage = {

hosts/web-2/secrets/radicale-htpasswd.age

@@ -1,11 +0,0 @@
-age-encryption.org/v1
--> ssh-ed25519 HwR33w +w13fgMLBeHKig0VX67/mlhQb0EPSJAFTu//velYNRY
-irMedsePNfFFOYhKksrqLcLdNdYHMxFy4iTPneIOtWU
--> ssh-ed25519 1nn+0Q KpFGP/y4zZ8E8Jut8Gpea1DLH6rXGKODLE3IPTbzOUo
-p28M4shr97sqqTBAxB1fQRNCj2E+xio3TboKZ/6smb8
--> rXRB4)-grease
-t3CdM1EbN2yfSeKURCJRMTZ4w9FtXu6+Y8PWxo2RTV0fyv6XJdrq1jn1n4IflQLP
-CV3H9FlQp4Lg/bdqVZDqDoMJ6dprVWK4rACnF6/tRRkZR4Ndfk4JRRWtWBOfR/ax
-GWNb
---- yNRoOEai4ypvo0uGZYI1q/qwzS4wIZFXQEGYcW+H/wc
-Ñî	³Z¼ÿ<C2BC>·îe0±<30>ä_îÀD@äΕÃ>¸[ñKOQBuP÷9TGgŽ×(€9´pœŒZ@1†&RZÁOŸªC›p$kr¿ô®¤èò‘’lg!\‹«„—èÑÄ=W׃×(ìVq