n8n-env

hosts/lkk-nix-1/default.nix

@@ -32,8 +32,8 @@
       mj-smtp-user.file = ../../secrets/mj-smtp-user.age;
       mj-smtp-pass.file = ../../secrets/mj-smtp-pass.age;
 
-      billbee-api-key = {
+      n8n-env = {
-        file = ../../secrets/billbee-api-key.age;
+        file = ../../secrets/n8n-env.age;
         mode = "770";
       };
 

hosts/lkk-nix-1/services/containers/wireguard.nix

@@ -1,6 +1,6 @@
 { config, outputs, ... }: {
   virtualisation.oci-containers.containers."wireguard" = {
-    image = "weejewel/wg-easy";
+    image = "docker.io/weejewel/wg-easy";
     environment = { WG_HOST = "wg.lanakk.com"; WG_DEFAULT_DNS = "10.88.0.1"; };
     ports = [ "3007:51821/tcp" "51820:51820/udp" ];
     volumes = [ "wireguard_data:/etc/wireguard" ];

hosts/lkk-nix-1/services/n8n.nix

@@ -8,11 +8,7 @@
       host = "https://wf.lanakk.com";
     };
   };
-  systemd.services.n8n.environment = {
+  systemd.services.n8n.serviceConfig = {
-    BILLBEE_API_KEY =
+    EnvironmentFile = "${config.age.secrets.n8n-env.path}";
-      config.age.secrets.billbee-api-key.path; # TODO env file for systemd service
-  };
-  systemd.services.traefik.serviceConfig = {
-    EnvironmentFile = "${config.age.secrets.traefik-env.path}";
   };
 }

secrets.nix

@@ -4,7 +4,7 @@ in {
   "mj-smtp-user.age".publicKeys = [ root ];
   "mj-smtp-pass.age".publicKeys = [ root ];
 
-  "billbee-api-key.age".publicKeys = [ root ];
+  "n8n-env.age".publicKeys = [ root ];
 
   "godaddy-api-key.age".publicKeys = [ root ];
   "godaddy-api-secret.age".publicKeys = [ root ];

secrets/billbee-api-key.age

@@ -1,16 +0,0 @@
-age-encryption.org/v1
--> ssh-rsa DQlE7w
-OtpKyKFBd86zVAvGIZuBYZuKO3y79nq9Ak6h08j8f8xPSwXtEtcAJBfgBXQCYdV2
-Z+pY7rMpKx/0rx+nG4/Axl2WwuCIhYrB4ypNxYOAdtrgBGdGQueQfZAcq5aV1aRt
-KZF1dlcxy3P8CYpodmLZQW+djjGtoDQDIjlNpf/1WPjKEF86Dd+3ihnnGFzIHib5
-9hxIc7iwIEVp6atEoqd9I/Cp/kpwUksAhuX906l0vIvCz1YyuW0oWugGa4uN1ruK
-cfCcv4iWqZb/dJg0m/tUH6xXC/njjFs4xh3kauomtYf+PkJ66BK0BfAJenIGwHsm
-/t5sI9TzumMm3lfJMjjxqRUfI9Etp9VSe5OcAbeNZkAk84JmU1vddyQ9cQKmJ4il
-TUtdRHAYqh1HKdihY0Kf3p/Cua7zNu0PRDRF52zUP06wZ9LLMBokeD6lOVsh5sWb
-PcpRQgZxEbgbkSi7XEncSHUWuyhtfRMie3jaFfaNb/Eq1J+U1puHaahG2RboubNl
-
--> *#,oB|-grease q:S"z3 $yJt<Ihx dX S^C[i
-QwYCVTkVaOPWgAdaB4lT+On0G5iSIth64mvqOukhpd1pfJEqbErK2shdLAgeGqnV
-LcGBGnBHTeZxkLK0dUojZU4EowyATgg7Xza/bog
---- SY/yTo1kwFsPe35ej/YJa2D+OADxOlzE5zSO7MD/ges
-ÝÝ/u$›g,çÆy¶Yª­~Ò¢öÅ9ì÷ÒÇ|]5ˆ%¼ž
Ô<>²¸V›KºmGš”.kòQ¬wÙªÕp_Çù“P

secrets/n8n-env.age

@@ -0,0 +1,18 @@
+age-encryption.org/v1
+-> ssh-rsa DQlE7w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+-> .dT-grease A*GUV/ T/r;`j vKnh,
+CYhrbINrEK5L/fHeAa8ByXmVLdDI/yRsw9X2joAVUJCmlBGrkisf4pgq72qg8beS
+2lvcaaiwVzvE8OgM1h6AflcwOg
+--- h4QG5/e/TWLc6VdYP46Cd6a+lJtB7ek6mankxxwQsvY
+)€KÎ( :à²1×ãȺ@ùZ*åeß <20>Dök’Œˆ©tÜ<74>¹¿ù{%>&ôˆX¡¹ßàÞQY–F&ÏÀ*HA<48>MHnã3ÉP—t_û3ôû”ãLLZo"<22>ÎÍi]ÓOi>ÖÞ
òc³—`rÞäÕ2©¿p<C2BF>>ûÔé˜MA-Å;¶Èm˜·ïO3£Ë¯I‰h+ƒ‰úJµC«wÁD·{¸.$Žö¬Šá£á­Þº“Æ\±%‚Êž¬}éOΖODö84îÌH«,b<>¡rÑW)²­ZvŸs?ì…f@Ó÷ÈÕáqÅŽRúE¨¬x¨÷¢3_}<7D>lAÏÕZðYFÊó<C38A>q=?mäœ]<5D>'|¢‡W_f!¾l2’žR3kàÜÌF
+bÆMütî<74>ÏÀö[2°G†P„¡öÚ•`5œ:’#:§±
+A­KFW^’Ò²Rç?a—Š­\ôâ4`ñœÀÓ¶