sagittarius: move porkun config into sops

3 files changed, 20 insertions, 2 deletions

diff --git a/hosts/sagittarius/sops.nix b/hosts/sagittarius/sops.nix
index db70d49..5f9b89f 100644
--- a/hosts/sagittarius/sops.nix
+++ b/hosts/sagittarius/sops.nix
@@ -13,6 +13,10 @@
         sopsFile = ../../secrets/storage-box-rclone.ini;
         format = "ini";
       };
+      "porkbun-acme-conf" = {
+        sopsFile = ../../secrets/porkbun.env;
+        format = "dotenv";
+      };
     };
   };
 }
diff --git a/hosts/sagittarius/web/acme.nix b/hosts/sagittarius/web/acme.nix
index 0d27f29..e296507 100644
--- a/hosts/sagittarius/web/acme.nix
+++ b/hosts/sagittarius/web/acme.nix
@@ -1,11 +1,11 @@
-{ ... }:
+{ config, ... }:
 {
   security.acme = {
     acceptTerms = true;
     defaults = {
       email = "miran.bastaja04@gmail.com";
       dnsProvider = "porkbun";
-      credentialsFile = "/var/secrets/porkbun.env";
+      credentialsFile = config.sops.secrets."porbun-acme-conf".path;
     };
   };
 }
diff --git a/secrets/porkbun.env b/secrets/porkbun.env
new file mode 100644
index 0000000..214875c
--- /dev/null
+++ b/secrets/porkbun.env
@@ -0,0 +1,14 @@
+PORKBUN_API_KEY=ENC[AES256_GCM,data:dkF6Y5I2J3KlV0+iB+FXR0Qxhyk/8sntAkphw9fa9lOJeDcaE+JIMp+7C75crVyMyJcgSRE3LY/KSwonhmOeEAMCtGI=,iv:caJyCVy8QbjN8ca7qxIr7QOfIVUfZgSc5FQMyuX+jf8=,tag:trJ0Ov3yDRZ4xm5Mm9lmSQ==,type:str]
+PORKBUN_SECRET_API_KEY=ENC[AES256_GCM,data:MpBURMMSI7PIv2yvHB0XhnlxSBx7Yjk5KkPtnacfoyCZByvjbMTP3WAFr5TzUO9YHK34hL2gBndcrnzDqv8euFAbb8s=,iv:lMgT6etsLjvJnO/pyv9xOFvFuwPmX7CPNejoHvSvq2g=,tag:JbHmWoQZnFybi7D4Pm5wKA==,type:str]
+sops_age__list_0__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArMjdRQ1M3c1ZiMHI0dnJ0\nNmpzNDBrcVBlYmdPcU5QcmN3cGFwSGtYQlZnCmRJaUhOcVhzWCtBVGY0dStWNTNK\nak1MekRBeTMvL0grenV4QXJHVFNobmcKLS0tIDg2a1NlcFNzU2xvb3NPNDNwZWZ5\nVXRZQ2VxS0c4UmJlcjArbUhIY2ExT1UKBHHXLwrOMnsrr/XHZclZLs5mdsT+ceNi\nLTgQuNwB+RVX2ZJZisn9fxRJxml+ttul7Pbe0GTAXHH0G+SIjey4/g==\n-----END AGE ENCRYPTED FILE-----\n
+sops_age__list_0__map_recipient=age1l088h7umwuxp0sw8wk0stfup0empdnldczxvrhueu7n0vxd0c57q9zvwsk
+sops_age__list_1__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4T1FaM2xobkpxUERIa1dZ\nNWhaaGJKMFdMREJnalVxTW9waXExdUI2SlFrCms5TkFRSm5oS21tUlBVSG0ySUdV\nSy9qQUVLVmJlbzRRSVVWRnMwYXlQZUkKLS0tIGRNSXVTcFNUNTF0R3RNdVhVTG1p\nTHpFbE9CWmxDNXJ3TUk0cmQ1NUJzczAK9VJdJwIKDUeKdEJpgYRn/YjTgzEMiLF5\nsxpriV+p/DSIcPbz9RXEmvc52AQB0qC2F7wBH2IuPTS/oykjgvdYHw==\n-----END AGE ENCRYPTED FILE-----\n
+sops_age__list_1__map_recipient=age1xzqshnlstewfha28sqjp4lf97mm43axyrhga0vkjmt5zx6eydqhsvlsasc
+sops_age__list_2__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBWk9HQmFTcWdIT3BLU1Vv\nU3JKMUI4dE5vQ0RCQ1dJL1ZWbk93K0oyZmxRCnFQaHcyN1A1ajNNSEFGK3hubWor\ndm1UcFlvOG9rNlBMMjVoeUlUZDJYdVUKLS0tIC9TYnFGSCs4aTBnWE02QzlEM09H\nTVFzRWVickJpdDhtdFJnMlgwejU3NUUKhH7JWEds+sbllz60QLuj0mlyTgmiN4Da\ntVuPrBc069CsdaG7qEERP6Zk4mMfhZuO9//F3L1rRPxNHVJ6FJnaHA==\n-----END AGE ENCRYPTED FILE-----\n
+sops_age__list_2__map_recipient=age1jmpdssn7555g0pht7zwqq2dvrvzxyu65w6cf2su8pp2fz0zvaykq0jgern
+sops_age__list_3__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1TjNQRlZ2RWxraXc5eWkv\nYjBLaFo5ZWxYYjFNZkZ0S1FWOCtGSEFYYndNCjNQQjdlcUtzRUo1UkhQdi93cTQz\ncFk0V3pZdi9wY2wydVlZeE5UWnhMakkKLS0tIEJmWUZtcU9PcEo2OTd1T0ZlelEv\nYlJTdDhiM0txZ0x1b09idEJCSWtxUmsKxrx6sUZRVFoeFr99giKu7L3PWaHJWlt6\nN0q5I94SC56BkuGPUSXQ12brwSxz2j1T8sn6WnK/5rzjzaZnBez0Gw==\n-----END AGE ENCRYPTED FILE-----\n
+sops_age__list_3__map_recipient=age1sffhunmeqmeey29lnvuds59mn74jfpctd3wm0t6svca0fztgvd4qnretc6
+sops_lastmodified=2024-10-29T07:23:52Z
+sops_mac=ENC[AES256_GCM,data:NI4mNcwo5NWQYPRb8vnZBeiTR/P4kTnJLbfIZjdHV4cIrVBdTFntjSX/4U+2D/JltqaorBRIBxenyL3gHuGL+lzKH1NTCjGRexn1dJLn0tpmlZo9OxDMIa+VzVDFAwbNGlBPLuZ5hLCvlrLxyIy//sbHkZ8tHb6yp7hT+kKlEiw=,iv:fGkucRdmyMwLdSVpFUR/R0wbu9XXtSb2setDJB4MM6k=,tag:KIOTI7Kvlhk7DEYBc18p2w==,type:str]
+sops_unencrypted_suffix=_unencrypted
+sops_version=3.9.1