nixos-infra/services/searxng/secrets.nix
Rustam Efimov 4ad607bd49
Some checks failed
Nix CI / build (push) Has been cancelled
feat(services/searxng): add secret key
2026-04-12 18:43:43 +03:00

23 lines
449 B
Nix

{
config,
lib,
...
}:
let
cfg = config.machine.searxng;
in
with lib;
mkIf cfg.enable {
sops.secrets = {
"searxng/secretKey" = {
sopsFile = ./../../secrets/common.yaml;
owner = config.users.users.matrix-synapse.name;
inherit (config.users.users.matrix-synapse) group;
};
};
sops.templates.searxng-env = {
content = ''
SEARXNG_SECRET_KEY=${config.sops.placeholder."searxng/secretKey"};
'';
};
}