diff --git a/modules/nixos/services/mopidy/default.nix b/modules/nixos/services/mopidy/default.nix index cafa7e7..c82ee22 100644 --- a/modules/nixos/services/mopidy/default.nix +++ b/modules/nixos/services/mopidy/default.nix @@ -9,13 +9,18 @@ in { options.marleyos.services.mopidy.enable = lib.mkEnableOption "mopidy"; config = lib.mkIf cfg.enable { + age.secrets."mopidy-jellyfin.conf" = { + file = ../../../../secrets/mopidy-jellyfin.conf.age; + owner = "mopidy"; + mode = "600"; + }; + services.mopidy = { enable = true; extensionPackages = with pkgs; [ mopidy-mpd - # TODO: Enable once we have secrets (requires password in config) - # mopidy-jellyfin + mopidy-jellyfin ]; configuration = @@ -24,6 +29,10 @@ in { [mpd] hostname = :: ''; + + extraConfigFiles = [ + config.age.secrets."mopidy-jellyfin.conf".path + ]; }; }; } diff --git a/secrets/mopidy-jellyfin.conf.age b/secrets/mopidy-jellyfin.conf.age new file mode 100644 index 0000000..f4ce70b --- /dev/null +++ b/secrets/mopidy-jellyfin.conf.age @@ -0,0 +1,10 @@ +age-encryption.org/v1 +-> ssh-ed25519 Ut1iyA 1KhOCqrugrIdjc8dW4QxEB11PKRT5RfknA4RXG/BKHQ +cmEOrOz3ARBjx7Rm0qlesMCyjdP0DnobGuePBbwzyvY +-> ssh-ed25519 SC7Q6w NLUNvK+nY8RVnQ9DKoEzAPp2KmvLeb360Slu+A2AqWI +qM0cA3x1waTfiKHs0W+n3rX9IcSX2mhrLg2spR2sgF0 +--- oQsZS55o1/Mnb+gEIOZtFebum6bob+cRJnnF7DKEmKE +!Ec۩@`f +l +@ZJ-d۾6aIg%XLm&w]!YTѼ6)lHV5R.K 3rL!ZuДϝyE Qdw +G\]kZ]m3` \ No newline at end of file diff --git a/secrets/secrets.nix b/secrets/secrets.nix index a46de88..d2f1546 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -12,4 +12,5 @@ let in { "babeshare-pass.age".publicKeys = defaultKeys; "ddclient.conf.age".publicKeys = defaultKeys; + "mopidy-jellyfin.conf.age".publicKeys = [marley nyx]; }