From 3e48779929cf2b1c8c72f8a3d3de8d67d11907d4 Mon Sep 17 00:00:00 2001
From: Rouven Seifert <rouven@rfive.de>
Date: Tue, 30 Apr 2024 15:02:46 +0200
Subject: [PATCH] seafile: put secret on nuc

---
 hosts/nuc/modules/seafile/default.nix |   7 +------
 secrets.nix                           |   1 -
 secrets/nuc/seafile/oidc-secret.age   | Bin 355 -> 0 bytes
 3 files changed, 1 insertion(+), 7 deletions(-)
 delete mode 100644 secrets/nuc/seafile/oidc-secret.age

diff --git a/hosts/nuc/modules/seafile/default.nix b/hosts/nuc/modules/seafile/default.nix
index 0ec6ef0..44833ba 100644
--- a/hosts/nuc/modules/seafile/default.nix
+++ b/hosts/nuc/modules/seafile/default.nix
@@ -3,11 +3,6 @@ let
   domain = "seafile.${config.networking.domain}";
 in
 {
-  age.secrets."seafile/oidc-secret" = {
-    file = ../../../../secrets/nuc/seafile/oidc-secret.age;
-    mode = "0440";
-    group = "seafile";
-  };
   services.seafile = {
     enable = true;
     adminEmail = "admin@rfive.de";
@@ -20,7 +15,7 @@ in
       OAUTH_ENABLE_INSECURE_TRANSPORT = True
 
       OAUTH_CLIENT_ID = "seafile"
-      with open('${config.age.secrets."seafile/oidc-secret".path}') as f:
+      with open('/var/lib/seafile/.oidcSecret') as f:
         OAUTH_CLIENT_SECRET = f.readline().rstrip()
       OAUTH_REDIRECT_URL = 'https://seafile.rfive.de/oauth/callback/'
  
diff --git a/secrets.nix b/secrets.nix
index 8e11522..f73f67b 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -22,7 +22,6 @@ in
   "secrets/nuc/vaultwarden.age".publicKeys = [ rouven nuc ];
   "secrets/nuc/keycloak/db.age".publicKeys = [ rouven nuc ];
   "secrets/nuc/cache.age".publicKeys = [ rouven nuc ];
-  "secrets/nuc/seafile/oidc-secret.age".publicKeys = [ rouven nuc ];
   "secrets/nuc/borg/passphrase.age".publicKeys = [ rouven nuc ];
   "secrets/nuc/borg/key.age".publicKeys = [ rouven nuc ];
 
diff --git a/secrets/nuc/seafile/oidc-secret.age b/secrets/nuc/seafile/oidc-secret.age
deleted file mode 100644
index 07c0f6c537b97d0f92f609ac82793c3b75418881..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 355
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCSH4Nr3P2vi8r&Nav>
zDG2fLiuChytO_YKO)bf=OssIs$}5N{hzR!Zu5fnBNy{^GO6CgI_IIqz3n=t4_lSz}
zb#u=1$p~_<NHi(&PqQ>H3H3<x^A0!hN)J!ZC`Y%=C?qH)B3+>}FWogbHzy;=Bf`kj
zrAphpJkmYPH>%Rzz^EuVJHjcrs3<ccBRAbRJ&-HN(lgQ1$vD%{#lW+u!YInJI6W~c
z*DTq>zbvabG9)zLF-PCq(<#!+Cz(rES69K@+0WU>!>6JwEypy<!^qIb*CV_lHzKGq
z(ygqx+|V*P(?2lZCparB$AIgV_VU(E6O0qSbI2~6Jav~5!)(q^`PMBlp~qINDZc*e
oNP>b<l6U!o!!K9AK7OdEVQ=J~`;z>&m-VmQ`NR9%q5I@p0G|nfrT_o{