From 95a48af46422dd6fad4b255eefebc681a20ae994 Mon Sep 17 00:00:00 2001
From: wi11-holdsworth <83637728+wi11-holdsworth@users.noreply.github.com>
Date: Tue, 29 Jul 2025 14:30:34 +1000
Subject: [PATCH] cleanup porkbun secret

---
 modules/nixos/features/nginx.nix |   6 +++---
 secrets/api-porkbun.age          |   8 --------
 secrets/porkbun-api.age          | Bin 0 -> 499 bytes
 secrets/secrets.nix              |   6 ++++--
 4 files changed, 7 insertions(+), 13 deletions(-)
 delete mode 100644 secrets/api-porkbun.age
 create mode 100644 secrets/porkbun-api.age

diff --git a/modules/nixos/features/nginx.nix b/modules/nixos/features/nginx.nix
index cd8a6bf..b808294 100644
--- a/modules/nixos/features/nginx.nix
+++ b/modules/nixos/features/nginx.nix
@@ -8,8 +8,8 @@ let
 in
 {
   config = lib.mkIf config.${feature}.enable {
-    age.secrets."api-porkbun" = {
-      file = ../../../secrets/api-porkbun.age;
+    age.secrets."porkbun-api" = {
+      file = ../../../secrets/porkbun-api.age;
     };
 
     services.${feature} = {
@@ -36,7 +36,7 @@ in
         group = "${feature}";
         dnsProvider = "porkbun";
         dnsPropagationCheck = true;
-        credentialsFile = config.age.secrets."api-porkbun".path;
+        credentialsFile = config.age.secrets."porkbun-api".path;
       };
     };
 
diff --git a/secrets/api-porkbun.age b/secrets/api-porkbun.age
deleted file mode 100644
index d9c3208..0000000
--- a/secrets/api-porkbun.age
+++ /dev/null
@@ -1,8 +0,0 @@
-age-encryption.org/v1
--> ssh-ed25519 LtK9yQ 3IfuOhEd6O3fwpovZNGe5phUxEyawaNLQaghm2CMICs
-F7V16p9va1ghnBlPxeRgzub2YdGnw0vv8Kb5WfPtl6Y
--> ssh-ed25519 qLT+DQ cL8BORJ2yfk0KFFDNagXi1W7XYZVdKj0cU/XsW7chCs
-fJ0Qd5pH7+i82OAtBUA0WthOOAA8pEaqnxKhpkwCH00
---- sHXToVDlsHDq/eZERrUOAkM+u1tIRpNGzOLjrk1nnYg
-����#t�/!�7e�6�'
G��9[,����:��c�$�ʠ�-ץ+b�6��Ѻ��8j��9���U-e�䝉����޻p����7ilE��R�>�w�ؗQ
�V�q����>#��u�����ν%}�PXL�O迵!~�E��'�h�IGq������N���'jQ��DZ�r&�%+�
-D��i�g�f�����~n��55���
\ No newline at end of file
diff --git a/secrets/porkbun-api.age b/secrets/porkbun-api.age
new file mode 100644
index 0000000000000000000000000000000000000000..79cdb90cbf011c3fb706b4ac8852f9784183b3a2
GIT binary patch
literal 499
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCUlDe<<f3{=Pp_ccu|
z_AL$Y4l|94aLx!xPOowd3(Zf}HV)Pf_6f;IGVn;t4YbsE%;pLX$u7?}E=hJyG6~Mg
zt2FjCNJ}b?bjk7c$gVUpiwG+*wDfQ`4=zir3PrcA&?iLOB~T&Dpu`{`FvQ)@qBzee
z#M8*s-Q6d|Kh!rgz$nVkuc9Q)u_8YyBQr1~%aN-nOFu9)y*#(dvDl}|#XrZ-&B(pf
zB|XA2!lxk7BQP-3*V({4BR{`byO>K?S69JFJJF=XrOL>n+#n@4yg14!O+V8y)WbKx
z%q2V^(>TpJ-_*av%`DM1%#q7+;@QSOsc#r+3(vh>@@@AtyDK)_5|ug=7%ODMws_B}
z`IXaJy-{Uvk<#JKKh=KrTl8$|cXQjm@PbO?(>IUKWctmp<7Dkzw4|AREnAQA&pyph
z8!l+h4rSA^+&5**j9oV(MY3}YCR~2{NbXDLA8pfv-t+DCXKCG<pz0Vfx6(^-<AiOG
zqvw@cs(BVYy)-Sf&EM)z(c81_B}-@Z=DF)zhD!OG-wG1B8f=@h!SUyZN%}qlx^LFK
j)4F*&)U<u!9qA7JXUC0RtKJYl9_R6ewY)BDEo&_RxA4O5

literal 0
HcmV?d00001

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 67f982d..923dc1f 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -2,11 +2,12 @@ let
   srv = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOeV0NxqIGIXXgLYE6ntkHE4PARceZBp1FTI7kKLBbk8";
   will = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPHAnTQP77HQ/8nbf1oX7xftfKYtbH6MSh83wic0qdBy";
   users = [
-    srv    will];
+    srv
+    will
+  ];
 
 in
 {
-  "api-porkbun.age".publicKeys = users;
   "api-miniflux.age".publicKeys = users;
   "borgbackup-server-offsite.age".publicKeys = users;
   "borgbackup-server-onsite.age".publicKeys = users;
@@ -17,6 +18,7 @@ in
   "lidarr.age".publicKeys = users;
   "miniflux-creds.age".publicKeys = users;
   "paperless.age".publicKeys = users;
+  "porkbun-api.age".publicKeys = users;
   "prowlarr.age".publicKeys = users;
   "radarr.age".publicKeys = users;
   "sonarr.age".publicKeys = users;