hosts/app-01: define sops env file

2025-09-01 09:29:31 -07:00
parent d3a9644f8d
commit 04a90584b5
1 changed files with 11 additions and 1 deletions
--- a/hosts/app-01/default.nix
+++ b/hosts/app-01/default.nix
@@ -16,9 +16,19 @@
  qemu.enable = true;
  spice.enable = true;

+  sops.secrets."SEARXNG_SECRETS" = {
+    sopsFile = ../../secrets/app-01_searxng.env;
+    format = "binary";
+    owner = "searxng";
+    mode = 0400;
+  };
+
  appserver.enable = true;
  radicale.enable = true;
-  searxng.enable = true;
+  searxng = {
+    enable = true;
+    environmentFile = sops.secrets."SEARXNG_SECRETS".path;
+  };

  services.traefik = {
    staticConfigOptions = {