feat(nixos/ddclient): Proper secrets management

modules/nixos/services/ddclient/default.nix

@@ -8,10 +8,12 @@ in {
   options.marleyos.services.ddclient.enable = lib.mkEnableOption "ddclient";
 
   config = lib.mkIf cfg.enable {
+    age.secrets.ddclient.file = ../../../../secrets/ddclient.conf.age;
+
     services.ddclient = {
       enable = true;
 
-      configFile = "/home/marley/ddclient.conf";
+      configFile = config.age.secrets.ddclient.path;
     };
   };
 }

readme.md

@@ -23,6 +23,7 @@ publicly released, therefore things are likely to break.
 
 - [Snowfall Lib](https://snowfall.org/guides/lib/quickstart/)
 - [Home Manager](https://nix-community.github.io/home-manager/)
+- [Agenix](https://github.com/ryantm/agenix)
 - [Stylix](https://codewith.babesonthe.net/punkfairie/rose-pine-nix)
 
 ## 🐣 Outputs

secrets/secrets.nix

@@ -7,6 +7,9 @@ let
   marleycentre = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEA86DphSL36GsvatkXgFU1ONzt53UzXdUaQN1EBWeCD root@nixos";
   marleynet = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIArAAwU4JX7wa5X3Un3q5b+ZD52j0nCnNsGEybWf/7SB root@nixos";
   systems = [nyx marleycentre marleynet];
+
+  defaultKeys = users ++ systems;
 in {
-  "babeshare-pass.age".publicKeys = users ++ systems;
+  "babeshare-pass.age".publicKeys = defaultKeys;
+  "ddclient.conf.age".publicKeys = defaultKeys;
 }