From 0818303bc626a6ca6d0d1a903a0db59cf933507c Mon Sep 17 00:00:00 2001
From: randogoth <kflux@posteo.de>
Date: Sat, 11 Jul 2026 13:29:40 +0300
Subject: [PATCH] oberon: read entitlements from Adapty (ADAPTY_SECRET_KEY
 secret)

---
 modules/services/oberon.nix | 2 ++
 secrets/bucur.yaml          | 5 +++--
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/modules/services/oberon.nix b/modules/services/oberon.nix
index 1abf602..c30e850 100644
--- a/modules/services/oberon.nix
+++ b/modules/services/oberon.nix
@@ -25,6 +25,7 @@ let
     export FAX_OUTBOUND_NOSTR_PRIVKEY=$(cat ${config.sops.secrets.oberon_outbound_privkey.path})
     export OFFICIAL_FAX_NUMBER=$(cat ${config.sops.secrets.oberon_official_number.path})
     export CDN_APP_SECRET=$(cat ${config.sops.secrets.oberon_cdn_app_secret.path})
+    export ADAPTY_SECRET_KEY=$(cat ${config.sops.secrets.oberon_adapty_secret_key.path})
     exec ${pkg}/bin/oberon
   '';
 in
@@ -40,6 +41,7 @@ in
   sops.secrets.oberon_outbound_privkey  = { owner = "oberon"; };
   sops.secrets.oberon_official_number   = { owner = "oberon"; };
   sops.secrets.oberon_cdn_app_secret    = { owner = "oberon"; };
+  sops.secrets.oberon_adapty_secret_key = { owner = "oberon"; };
 
   users.users.oberon = {
     isSystemUser = true;
diff --git a/secrets/bucur.yaml b/secrets/bucur.yaml
index aedff82..15dfb92 100644
--- a/secrets/bucur.yaml
+++ b/secrets/bucur.yaml
@@ -19,6 +19,7 @@ oberon_sinch_key_id: ENC[AES256_GCM,data:3RF/RAN6p+/P3JSGdMKD66w5c+NgQYtEc9NRN1J
 oberon_sinch_key_secret: ENC[AES256_GCM,data:q3uM+J29WdnQNOjMT7Pns6MkBTb1UEQTlLU=,iv:T4S4rQ9dmIfzF+EQk2xjwriwtZ/IpdJhgC9SKva2aXs=,tag:/Eoeo9D4fiQpiBYrZadJXA==,type:str]
 oberon_cdn_app_secret: ENC[AES256_GCM,data:L6VrUwEQjlNQt/xBk9rqf1DxvkBxxGQLZ59c0zKQtEb4NNWvsIv4U28f7f3thAItL7EASy18qvWjn0chp5l+ag==,iv:9VEi9zj4Txr7eC5AGmHsFxeHaWKRJzKc+2zmhUoMY+g=,tag:5ekK2g8pS1hB+Au9SzhGyQ==,type:str]
 oberon_sinch_service_id: ENC[AES256_GCM,data:bK0iEo1HmCo3VC58ZqFwBFUpvFF9HE3QUV0=,iv:tcIMdl/6Of40BdkhvfZ7qgRboKKfkjkmPwoKuRvqZ0I=,tag:Tra+XkrpShPj0cZzBL0aPA==,type:str]
+oberon_adapty_secret_key: ENC[AES256_GCM,data:wEEk3GO+jH6glkjZL+eDIfHLqhmuzU4wWAVBuFXJytowY2QVFtIlnwtp7R8vx9gv9TAA3VA=,iv:BQJffiTm7l8gRT4PcUcWaevBzLxXgQzUsCEeCz6sNu4=,tag:wmrMWDhrhdpxb+tu28vWYw==,type:str]
 sops:
     age:
         - recipient: age1647c5f46njylggj33h26t6twhq57n5qeaza04l845uy0fksv0ucsq82c3d
@@ -30,7 +31,7 @@ sops:
             U0x1ZmtzLytSL1Y3cVo1ZVJ2Ymtob1EKTpgjSymQx14wLSuUhh5Txq++3DrLS4Bs
             x8vVtQgcXZgv1q0OMGup6DT4bkY6UiNbn9bAt4rHCaRPeb15x4ZKNw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-07-04T15:38:08Z"
-    mac: ENC[AES256_GCM,data:0AEk6k5ArJhU4Z682BowJ141yYU9uOH3YTD4TXbBaLCH49IfX+jh7hvuOVtRTIFvk97L2vrWBJLW1X1iPviCyRd4p63fxGk8C2a4qkqEFiwh57OPqU1jkWK58GDlcuw25PLFtHZahPde+v0msltY1ybkGY57tWUx6RGZYXQaS38=,iv:fzmuWOYEqx+4GFh8SHqfGZH2UxkxHDP175Xxhbrhpak=,tag:r17yPZTyxYfnisxN/keXkA==,type:str]
+    lastmodified: "2026-07-11T10:18:16Z"
+    mac: ENC[AES256_GCM,data:9zBBjzPQ8A6C98WCMzJYmDh5V2D8DwkDllnPZC3eO/bqxeb0qTSfaFO290DSbagL33Loj5/MaVbG2rSA4uBtOF7xZt+HbI4Qtc5I9mkcuUQVO6Fkp2pBcoZT5i+iSW8TyIqUW8ZLBon7++m4kHgiuxyUFBZjHm9+4tMOWZMBY0s=,iv:F2wOBWkxCV1uDv1ImChxHZ6dV/7dY8JS6N8rc9+xFkY=,tag:2+bqyM4P6CMwscRI2+xytA==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.11.0