From 48d3f66855fb57379351fb9a458a95cf28522916 Mon Sep 17 00:00:00 2001
From: stuebinm
Date: Tue, 11 Apr 2023 18:37:20 +0200
Subject: manage secrets with sops

not sure if i like this yet, but it seems worth trying it out.
---
 flora/services/mail.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'flora/services/mail.nix')

diff --git a/flora/services/mail.nix b/flora/services/mail.nix
index d41f0e8..e43e56f 100644
--- a/flora/services/mail.nix
+++ b/flora/services/mail.nix
@@ -3,7 +3,7 @@
 {
   imports = [ inputs.simple-nixos-mailserver.nixosModule ];
 
-
+  sops.secrets."mail/hashedPassword" = {};
 
   mailserver = {
     enable = true;
@@ -14,7 +14,7 @@
     # nix run nixpkgs.apacheHttpd -c htpasswd -nbB "" "super secret password" | cut -d: -f2
     loginAccounts = {
         "hello@stuebinm.eu" = {
-            hashedPasswordFile = "/var/mailstate/hello-password";
+            hashedPasswordFile = "/run/secrets/mail/hashedPassword";
             aliases = ["postmaster@stuebinm.eu" "abuse@stuebinm.eu"];
         };
     };
-- 
cgit v1.2.3