applications/grafana.nix

@@ -54,12 +54,16 @@ in {
       "${name}.skynet.ie"
     ];
 
+    age.secrets.grafana_pw.file = ../secrets/grafana/pw.age;
+
     services.grafana = {
       enable = true;
       domain = "${name}.skynet.ie";
       port = port;
       addr = cfg.host.ip;
 
+      settings.security.admin_password = "$__file{${config.age.secrets.grafana_pw.path}}";
+
       provision = {
         enable = true;
         datasources.settings.datasources = [

secrets/grafana/pw.age

@@ -0,0 +1,13 @@
+age-encryption.org/v1
+-> ssh-ed25519 V1pwNA ly/9CnXtgQlXTbKcK+gD+v0Ck7rmGtNrA/S9XfBdg3s
+6skVNVJTgCf/EWlDbH6urfr4CUibVH/N+HcfIYPkzTo
+-> ssh-ed25519 4PzZog 7+Fc9ec8zvlKP6VGKJa3MRN6p9bUrA07/BlL8rSnp3w
+YgALG1b8QOmMqWuqr9iVxAal9cWFf8me0KT1Mg0onko
+-> ssh-ed25519 5Nd93w /lx/evI9jsXzHMxXYQMoavWucTMiGMXwxACpjXYFZlU
+nVWhQydOO8eaTYcR66u1MeH/glmwTDJnJM0I9tXUvV0
+-> ssh-ed25519 q8eJgg wYOxbUUXrTgY9XkUz02qtW8TaYJfNej9VBdwvfUWrT8
+/47DLKQGt1M3fJWDHo2Eg2ij4jCGd17ieYZ8gA/uYjY
+-> ssh-ed25519 IzAMqA FfUA/kyLBOFIHFUO+PSsdTwaRjGvfsq7OTMXYo7/WjM
+jEn8y+mncrOPmDzvsK90X2D/m8ZxmuIL8H0h27YP3hM
+--- ibLXLaT49j/Mb8CwbcL+Gjwy5GJ5YDX31JQFqfOIXRw
+ºôag9Òa“Yâ«Ò<C2AB>öä”<C3A4>GADóðgûÅi°^ýUaß±Fà YÏã@4>
<01>¬óÐàò£Ý*‚Š?úÉ„5»F-íã8à