From 23f77caef60dc506217631b99975d83e0af31301 Mon Sep 17 00:00:00 2001
From: Brendan Golden <git@brendan.ie>
Date: Thu, 23 May 2024 02:39:36 +0100
Subject: [PATCH] feat: setup the password for grafana

---
 applications/grafana.nix |  4 ++++
 secrets/grafana/pw.age   | 13 +++++++++++++
 2 files changed, 17 insertions(+)
 create mode 100644 secrets/grafana/pw.age

diff --git a/applications/grafana.nix b/applications/grafana.nix
index beb66a8..84af996 100644
--- a/applications/grafana.nix
+++ b/applications/grafana.nix
@@ -54,12 +54,16 @@ in {
       "${name}.skynet.ie"
     ];
 
+    age.secrets.grafana_pw.file = ../secrets/grafana/pw.age;
+
     services.grafana = {
       enable = true;
       domain = "${name}.skynet.ie";
       port = port;
       addr = cfg.host.ip;
 
+      settings.security.admin_password = "$__file{${config.age.secrets.grafana_pw.path}}";
+
       provision = {
         enable = true;
         datasources.settings.datasources = [
diff --git a/secrets/grafana/pw.age b/secrets/grafana/pw.age
new file mode 100644
index 0000000..6a01432
--- /dev/null
+++ b/secrets/grafana/pw.age
@@ -0,0 +1,13 @@
+age-encryption.org/v1
+-> ssh-ed25519 V1pwNA ly/9CnXtgQlXTbKcK+gD+v0Ck7rmGtNrA/S9XfBdg3s
+6skVNVJTgCf/EWlDbH6urfr4CUibVH/N+HcfIYPkzTo
+-> ssh-ed25519 4PzZog 7+Fc9ec8zvlKP6VGKJa3MRN6p9bUrA07/BlL8rSnp3w
+YgALG1b8QOmMqWuqr9iVxAal9cWFf8me0KT1Mg0onko
+-> ssh-ed25519 5Nd93w /lx/evI9jsXzHMxXYQMoavWucTMiGMXwxACpjXYFZlU
+nVWhQydOO8eaTYcR66u1MeH/glmwTDJnJM0I9tXUvV0
+-> ssh-ed25519 q8eJgg wYOxbUUXrTgY9XkUz02qtW8TaYJfNej9VBdwvfUWrT8
+/47DLKQGt1M3fJWDHo2Eg2ij4jCGd17ieYZ8gA/uYjY
+-> ssh-ed25519 IzAMqA FfUA/kyLBOFIHFUO+PSsdTwaRjGvfsq7OTMXYo7/WjM
+jEn8y+mncrOPmDzvsK90X2D/m8ZxmuIL8H0h27YP3hM
+--- ibLXLaT49j/Mb8CwbcL+Gjwy5GJ5YDX31JQFqfOIXRw
+��ag9�a�Y�ҍ�䔁GAD��g��i�^�Ua��F�Y��@4>
�������*��?�Ʉ5�F-��8� 
\ No newline at end of file