Move secrets and keys into agenix

Signed-off-by: Mel <einebeere@gmail.com>

1 files changed, 6 insertions, 3 deletions

diff --git a/services/pds.nix b/services/pds.nix
index 55dc157..45be843 100644
--- a/services/pds.nix
+++ b/services/pds.nix
@@ -1,4 +1,4 @@
-{ pkgs, auxiliaryPkgs, ... }:
+{ config, pkgs, auxiliaryPkgs, ... }:
 
 let
   inherit (pkgs) dockerTools glibc;
@@ -25,6 +25,10 @@ let
 
 in
 {
+  age.secrets.pds-secrets = {
+    file = ../secrets/pds-secrets.age;
+  };
+
   foundation.services.pds = {
     image = { imageFile = pdsImage; image = "pds:${pds.version}"; };
     ports = [ [ pdsLocalPort 3000 ] ];
@@ -51,8 +55,7 @@ in
       LOG_ENABLED = "true";
     };
 
-    # TODO: use age
-    environmentFiles = [ /srv/pds/secret.env ];
+    environmentFiles = [ config.age.secrets.pds-secrets.path ];
 
     workdir = "/pds";
     entrypoint = "${pds}/bin/pds";