From 0807ff83df9af029cf0c582854ee8d15b45935fa Mon Sep 17 00:00:00 2001
From: Isabella Bastaja <isabella@sorre.xyz>
Date: Sat, 22 Aug 2026 13:35:17 +0200
Subject: tower: move secrets directory into /var/lib

---
 hosts/tower/web/caddy.nix       | 4 ++--
 hosts/tower/web/vaultwarden.nix | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

(limited to 'hosts')

diff --git a/hosts/tower/web/caddy.nix b/hosts/tower/web/caddy.nix
index 394699b..fa5d7b7 100644
--- a/hosts/tower/web/caddy.nix
+++ b/hosts/tower/web/caddy.nix
@@ -69,8 +69,8 @@ in
       fi
     '';
     serviceConfig.LoadCredential = [
-      "sagittarius.crt:/var/secrets/certs/sagittarius.crt"
-      "sagittarius.key:/var/secrets/certs/sagittarius.key"
+      "sagittarius.crt:/var/lib/secrets/certs/sagittarius.crt"
+      "sagittarius.key:/var/lib/secrets/certs/sagittarius.key"
     ];
   };
 }
diff --git a/hosts/tower/web/vaultwarden.nix b/hosts/tower/web/vaultwarden.nix
index d356e36..2b773ab 100644
--- a/hosts/tower/web/vaultwarden.nix
+++ b/hosts/tower/web/vaultwarden.nix
@@ -27,7 +27,7 @@ in
     serviceConfig.EnvironmentFile = [
       # For admin token.
       # Leave disabled unless you need the /admin page.
-      # "/var/secrets/vaultwarden.env"
+      # "/var/lib/secrets/vaultwarden.env"
     ];
   };
 
-- 
cgit v1.3.1