randogoth/bucur
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

oberon: read entitlements from Adapty (ADAPTY_SECRET_KEY secret)

Browse source
This commit is contained in:
randogoth 2026-07-11 13:29:40 +03:00
parent 5ec03967ab
commit 0818303bc6
2 changed files with 5 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
modules/services/oberon.nix
View file

@ -25,6 +25,7 @@ let
export FAX_OUTBOUND_NOSTR_PRIVKEY=$(cat ${config.sops.secrets.oberon_outbound_privkey.path})
export OFFICIAL_FAX_NUMBER=$(cat ${config.sops.secrets.oberon_official_number.path})
export CDN_APP_SECRET=$(cat ${config.sops.secrets.oberon_cdn_app_secret.path})
export ADAPTY_SECRET_KEY=$(cat ${config.sops.secrets.oberon_adapty_secret_key.path})
exec ${pkg}/bin/oberon
'';
in
@ -40,6 +41,7 @@ in
sops.secrets.oberon_outbound_privkey = { owner = "oberon"; };
sops.secrets.oberon_official_number = { owner = "oberon"; };
sops.secrets.oberon_cdn_app_secret = { owner = "oberon"; };
sops.secrets.oberon_adapty_secret_key = { owner = "oberon"; };
users.users.oberon = {
isSystemUser = true;

5
secrets/bucur.yaml
View file

@ -19,6 +19,7 @@ oberon_sinch_key_id: ENC[AES256_GCM,data:3RF/RAN6p+/P3JSGdMKD66w5c+NgQYtEc9NRN1J
oberon_sinch_key_secret: ENC[AES256_GCM,data:q3uM+J29WdnQNOjMT7Pns6MkBTb1UEQTlLU=,iv:T4S4rQ9dmIfzF+EQk2xjwriwtZ/IpdJhgC9SKva2aXs=,tag:/Eoeo9D4fiQpiBYrZadJXA==,type:str]
oberon_cdn_app_secret: ENC[AES256_GCM,data:L6VrUwEQjlNQt/xBk9rqf1DxvkBxxGQLZ59c0zKQtEb4NNWvsIv4U28f7f3thAItL7EASy18qvWjn0chp5l+ag==,iv:9VEi9zj4Txr7eC5AGmHsFxeHaWKRJzKc+2zmhUoMY+g=,tag:5ekK2g8pS1hB+Au9SzhGyQ==,type:str]
oberon_sinch_service_id: ENC[AES256_GCM,data:bK0iEo1HmCo3VC58ZqFwBFUpvFF9HE3QUV0=,iv:tcIMdl/6Of40BdkhvfZ7qgRboKKfkjkmPwoKuRvqZ0I=,tag:Tra+XkrpShPj0cZzBL0aPA==,type:str]
oberon_adapty_secret_key: ENC[AES256_GCM,data:wEEk3GO+jH6glkjZL+eDIfHLqhmuzU4wWAVBuFXJytowY2QVFtIlnwtp7R8vx9gv9TAA3VA=,iv:BQJffiTm7l8gRT4PcUcWaevBzLxXgQzUsCEeCz6sNu4=,tag:wmrMWDhrhdpxb+tu28vWYw==,type:str]
sops:
age:
- recipient: age1647c5f46njylggj33h26t6twhq57n5qeaza04l845uy0fksv0ucsq82c3d
@ -30,7 +31,7 @@ sops:
U0x1ZmtzLytSL1Y3cVo1ZVJ2Ymtob1EKTpgjSymQx14wLSuUhh5Txq++3DrLS4Bs
x8vVtQgcXZgv1q0OMGup6DT4bkY6UiNbn9bAt4rHCaRPeb15x4ZKNw==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2026-07-04T15:38:08Z"
mac: ENC[AES256_GCM,data:0AEk6k5ArJhU4Z682BowJ141yYU9uOH3YTD4TXbBaLCH49IfX+jh7hvuOVtRTIFvk97L2vrWBJLW1X1iPviCyRd4p63fxGk8C2a4qkqEFiwh57OPqU1jkWK58GDlcuw25PLFtHZahPde+v0msltY1ybkGY57tWUx6RGZYXQaS38=,iv:fzmuWOYEqx+4GFh8SHqfGZH2UxkxHDP175Xxhbrhpak=,tag:r17yPZTyxYfnisxN/keXkA==,type:str]
lastmodified: "2026-07-11T10:18:16Z"
mac: ENC[AES256_GCM,data:9zBBjzPQ8A6C98WCMzJYmDh5V2D8DwkDllnPZC3eO/bqxeb0qTSfaFO290DSbagL33Loj5/MaVbG2rSA4uBtOF7xZt+HbI4Qtc5I9mkcuUQVO6Fkp2pBcoZT5i+iSW8TyIqUW8ZLBon7++m4kHgiuxyUFBZjHm9+4tMOWZMBY0s=,iv:F2wOBWkxCV1uDv1ImChxHZ6dV/7dY8JS6N8rc9+xFkY=,tag:2+bqyM4P6CMwscRI2+xytA==,type:str]
unencrypted_suffix: _unencrypted
version: 3.11.0