router: services: add secret for grafana key

2026-10-11 11:39:40 -07:00
parent 6aa799c05d
commit 7351194fee
2 changed files with 7 additions and 0 deletions
@@ -29,10 +29,12 @@ in
  };

  # https://wiki.nixos.org/wiki/Grafana#Declarative_configuration
+  secrix.services.grafana.secrets.security-key.encrypted.file = ./secrets/grafana-secret-key.age;
  services.grafana = {
    enable = true;
    settings = {
      security.allow_embedding = true;
+      security.secret_key = "$__file{${config.secrix.services.grafana.secrets.security-key.decrypted.path}}";
      server = {
        http_port = 3001;
        domain = "grouter.${domain}";