Set grafana secret key

Author: stackptr

hosts/spore/secrets/grafana-secret-key.age

@@ -10,6 +10,13 @@
     group = "grafana";
   };
 
+  age.secrets.grafana-secret-key = {
+    file = ./../secrets/grafana-secret-key.age;
+    mode = "440";
+    owner = "grafana";
+    group = "grafana";
+  };
+
   services.grafana = {
     enable = true;
     settings = {
@@ -39,6 +46,7 @@
       security = {
         admin_user = "corey@zx.dev";
         admin_email = "corey@zx.dev";
+        secret_key = "$__file{${config.age.secrets.grafana-secret-key.path}}";
       };
     };
     provision = {

hosts/spore/services/grafana.nix

@@ -4,6 +4,7 @@ in {
   "hosts/spore/secrets/cloudflare-dns.age".publicKeys = keys;
   "hosts/spore/secrets/homepage-env.age".publicKeys = keys;
   "hosts/spore/secrets/grafana-client-secret.age".publicKeys = keys;
+  "hosts/spore/secrets/grafana-secret-key.age".publicKeys = keys;
   "hosts/spore/secrets/mastodon-s3-env.age".publicKeys = keys;
   "hosts/spore/secrets/mastodon-secret-key-base.age".publicKeys = keys;
   "hosts/spore/secrets/mastodon-vapid-public-key.age".publicKeys = keys;