feat(nixos/mounts): Keep babeshare pwd a secret

modules/nixos/mounts/babeshare/default.nix

@@ -12,8 +12,7 @@
     else 1000;
 
   options = lib.concatStringsSep "," [
-    "username=marley"
-    "password=granola chaos lend splendid"
+    "credentials=${config.age.secrets.babeshare-pass.path}"
     "uid=${toString uid}"
     "gid=${toString config.users.groups."wheel".gid}"
     "nofail"
@@ -26,6 +25,8 @@ in {
       cifs = true;
     };
 
+    age.secrets.babeshare-pass.file = ../../../../secrets/babeshare-pass.age;
+
     systemd = {
       mounts = [
         {

secrets/babeshare-pass.age

@@ -0,0 +1,11 @@
+age-encryption.org/v1
+-> ssh-ed25519 Ut1iyA KXGzzzRoLVxe16enj/VGaD5HBLyljoTdQAR9Ff/l8lU
+oUj7ihNyWdCyvO7a0DTJTPkNfr0A/iNNnOzU8Jp0jUw
+-> ssh-ed25519 SC7Q6w pjLBLuF9W1uHR/q3zU1LeYeLIEBvrOVF0FZscPt57ls
+EIHJ7xuzGUZe76pe7WuQZA9AmYbA3q4OpT8y44opmSA
+-> ssh-ed25519 sGewVg aDBi8bigO379VAjytsX1aYHxnIYVJaCXCo4t1igEbxg
+ITCito+Bqn9lCYfB51OO4w8xcoMf3gGkTrJp3tiKzfw
+-> ssh-ed25519 kvP6pA eIb3SsUX6/zwNfhOB7zRAtpgOotSyuwiYvyalbZVJB8
+U/PMCYU6fvUrWUZXTNyXjmusTA/NWROGITlGAz2WqtQ
+--- UoYT5EnmwtSQlxnLdmGnLIAQaPzsb2W72AaQWzid8SY
+Ô?sækÝ­ùãB.-e‹õ‚ßâÑ<15>ìãÖÇ<C396>•Ùfum
ì=zcÖ>]Bicçò–Eƒ*ŠÒF¬.-m\J

secrets/secrets.nix

@@ -8,4 +8,5 @@ let
   marleynet = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIArAAwU4JX7wa5X3Un3q5b+ZD52j0nCnNsGEybWf/7SB root@nixos";
   systems = [nyx marleycentre marleynet];
 in {
+  "babeshare-pass.age".publicKeys = users ++ systems;
 }