feat(peertube): make secrets configurable

3 files changed, 10 insertions, 3 deletions

diff --git a/modules/by-name/pe/peertube/secrets/general.age b/hosts/by-name/server3/secrets/peertube/general.age
index f3cba8b..f3cba8b 100644
--- a/modules/by-name/pe/peertube/secrets/general.age
+++ b/hosts/by-name/server3/secrets/peertube/general.age
diff --git a/modules/by-name/pe/peertube/secrets/smtp.age b/hosts/by-name/server3/secrets/peertube/smtp.age
index e0af2d1..e0af2d1 100644
--- a/modules/by-name/pe/peertube/secrets/smtp.age
+++ b/hosts/by-name/server3/secrets/peertube/smtp.age
diff --git a/modules/by-name/pe/peertube/module.nix b/modules/by-name/pe/peertube/module.nix
index a37ff03..e65e0b5 100644
--- a/modules/by-name/pe/peertube/module.nix
+++ b/modules/by-name/pe/peertube/module.nix
@@ -1,7 +1,6 @@
 {
   config,
   lib,
-  pkgs,
   ...
 }: let
   cfg = config.vhack.peertube;
@@ -10,6 +9,14 @@ in {
     enable = lib.mkEnableOption ''
       the peertube video platform.
     '';
+    peertubeGeneral = lib.mkOption {
+      type = lib.types.path;
+      description = "The age encrypted general secret file passed to agenix";
+    };
+    smtpPasswordFile = lib.mkOption {
+      type = lib.types.path;
+      description = "The age encrypted smtp password file passed to agenix";
+    };
   };
 
   config = lib.mkIf cfg.enable {
@@ -86,13 +93,13 @@ in {
 
     age.secrets = {
       peertubeGeneral = {
-        file = ./secrets/general.age;
+        file = cfg.peertubeGeneral;
         mode = "700";
         owner = "peertube";
         group = "peertube";
       };
       peertubeSmtp = {
-        file = ./secrets/smtp.age;
+        file = cfg.smtpPasswordFile;
         mode = "700";
         owner = "peertube";
         group = "peertube";