From c29ad5d32375f7ef700a8dcd1e8a7ef23beebf18 Mon Sep 17 00:00:00 2001
From: Joseph Hanson <joe@veri.dev>
Date: Tue, 30 Apr 2024 18:32:38 -0500
Subject: [PATCH] Update 1password secret

---
 nixos/telperion/configuration.nix | 9 ++++-----
 secrets.yaml                      | 6 +++---
 2 files changed, 7 insertions(+), 8 deletions(-)

diff --git a/nixos/telperion/configuration.nix b/nixos/telperion/configuration.nix
index 393fb95..9b094d1 100644
--- a/nixos/telperion/configuration.nix
+++ b/nixos/telperion/configuration.nix
@@ -21,9 +21,8 @@
         owner = config.users.users.named.name;
         inherit (config.users.users.named) group;
       };
-      "onepassword-credentials-json" = {
-        owner = "nm-iodine";
-        group = "nscd";
+      "1password-credentials.json" = {
+        mode = "0444";
       };
     };
   };
@@ -150,7 +149,7 @@
       autoStart = true;
       ports = [ "8080:8080" ];
       volumes = [
-        "${config.sops.secrets."onepassword-credentials-json".path}:/home/opuser/.op/1password-credentials.json"
+        "${config.sops.secrets."1password-credentials.json".path}:/home/opuser/.op/1password-credentials.json"
         "/var/lib/onepassword-connect:/home/opuser/.op/data"
       ];
     };
@@ -160,7 +159,7 @@
       autoStart = true;
       ports = [ "8081:8080" ];
       volumes = [
-        "${config.sops.secrets."onepassword-credentials-json".path}:/home/opuser/.op/1password-credentials.json"
+        "${config.sops.secrets."1password-credentials.json".path}:/home/opuser/.op/1password-credentials.json"
         "/var/lib/onepassword-connect:/home/opuser/.op/data"
       ];
     };
diff --git a/secrets.yaml b/secrets.yaml
index 8df060e..cb14774 100644
--- a/secrets.yaml
+++ b/secrets.yaml
@@ -1,4 +1,4 @@
-onepassword-credentials-json: ENC[AES256_GCM,data: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,iv:TGggiOwAdKPakf2+vDO3uWL0Y6/jT7fgMg8sZz0OFFU=,tag:LdYKzoE6ZT08qT8jrQnC5g==,type:str]
+1password-credentials.json: ENC[AES256_GCM,data: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,iv:jW0DRHr9Q0DzsAq0V5sZlnpCI3hjfE377SzlU7Xew00=,tag:q/hfk04RQMDSUT6F62LTDw==,type:str]
 bind:
     rndc-keys:
         main: ENC[AES256_GCM,data:kHDSEJ9bX8vugV923GXRIibrnx3vRjdvzv5VtDaam3GSI8CSjJd9aIT5K70sJXRRkh+en5dLJlUO/LHPjwIybwQgZpj5DgOcyE0ks3FEyJsgpxYRXrQtGtUb83c5CaY07f4vL9oy,iv:rENbmwqpsos6lBIo8B6gp8XE+dYA/eWWH+4dv6tK/Rc=,tag:Jgr12K+nIPzc2P+RtBRlRA==,type:str]
@@ -29,8 +29,8 @@ sops:
             SHZmN3JDL1ExVHZ5K2txM2h6MzRKWE0KbS3kO9teIcRDY4hnb54LgWzcRQu7aGGf
             TjnTJzqKqmRRMLOs5be6wbrxBiRe9p5nCN/WJ9nqhr7rfNNMUiZePw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-04-30T21:03:59Z"
-    mac: ENC[AES256_GCM,data:FSJr15N5RDrX+5Mnth+Rti5opEdbkON4faBIZw1D7C1O7G6c7FAqijCh/NhQAkqOutaUWQ7E/BAO1gZ/h0sPdi37WH5fg6sfPkY5zOZ0qf1DiWWu6JHMO3JJhI3wfJMLmmbeLsZjKSEfRyExAPZa4qrZM4+FWA/GyY87T4ZMGu4=,iv:sW98vMQrTRWy7S8ybm24lhIZTm41FlbttT4nVxXOEI8=,tag:ezvRbQwVhJL71kq6OBZ26g==,type:str]
+    lastmodified: "2024-04-30T23:29:09Z"
+    mac: ENC[AES256_GCM,data:x4ElnDRzdwcSf1qNZ6MNPzqDJwtAvQyc/ugrfxpdGyS/PxfhZPcTKshdl1xS6dhAfARVa2Wo343vKJ5fOA/9XNPqa4JL2i9bv1qmd23hgPkz4fFtZ1y5eWUKf2/yaRJrssi1CBQqZWMPPLgggokE80cGOMvD/F5KtcdIhnZjBQI=,iv:VrOtAFB8+Jm7H0JBlo6FsWKXmBZSOkGKuAfIZPbfDy4=,tag:qYJenhFym4iCeXLJqATu0Q==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.8.1