Ntfy config for Thor and Odin

instances/odin/common_configuration.nix

@@ -1,10 +1,13 @@
 { config, pkgs, lib, ... }:
 {
 
+
   age.secrets = {
-    odin_wg_priv = { file = ../../secrets/odin_wg_priv.age; };
+    ntfy-odin = { file = ../../secrets/ntfy-odin.age; owner = "bertof"; };
+    odin_wg_priv.file = ../../secrets/odin_wg_priv.age;
   };
 
+
   # Use the systemd-boot EFI boot loader.
   boot = {
     # kernelPackages = pkgs.linuxPackages_latest;

instances/thor/configuration.nix

@@ -3,6 +3,7 @@
 
   age.secrets = {
     thor_wg_priv = { file = ../../secrets/thor_wg_priv.age; };
+    ntfy-thor = { file = ../../secrets/ntfy-thor.age; owner = "bertof"; };
   };
 
   boot = {

modules/hm/ntfy.nix

@@ -1,7 +1,9 @@
-{ pkgs, ... }: {
+{ nixosConfig, pkgs, config, ... }:
+let
+  inherit (nixosConfig.networking) hostName;
+in
+{
   home.packages = [ pkgs.ntfy-sh ];
-  xdg.configFile."ntfy/client.yml".text = ''
-    default-host: https://ntfy.bertof.net
-  '';
+  xdg.configFile."ntfy/client.yml".source = config.lib.file.mkOutOfStoreSymlink nixosConfig.age.secrets."ntfy-${hostName}".path;
 }
 

secrets/ntfy-thor.age

@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> ssh-ed25519 hGQASA rGz3KIFwbIda+VM7YMzRvXBJvVHuE2cJ0nLGiJD7siI
+nEVPRhQzoiBlGRQag6eTUtZua/MTFx/06BIvMgR/tNg
+-> ssh-ed25519 4behFA voJaWXy/ftgRIulnXvqVgBQR5P09mU0XrsaG+uSpZU4
+6FrzXmBt4ofDRNKjsQw/L36422UPNFjz6X0X9PFfxbw
+-> ssh-ed25519 v7O/FA fJ/ZYJuR405nK6HmsD9fNJJsyffv68ypNe0aovmmOmY
+ymMtzf0QWZ8g91iVuE0zAE2rh7lhtVUfD7OrUkwUZG8
+--- 1UUB/m9RHtEs0trMLq0ArNTTr/2/zuCJJGLNus/dnqs
+ói~&ãM¡•Î[Í×<ŠÅÙwr­Ž@nÔx<C394>$r)e<>	´,ú.ö0…[aã”0W鑸
¦¿×
öûÓŠY"œíGi¬:¸ø§YÊrQZ—*9V;ŽŠ·æ()wœ¤$rÆ^ëþçÍå¥YŒÊJ<05>Ì$š

secrets/secrets.nix

@@ -14,20 +14,22 @@ let
 in
 {
   # "oauth_proxy_client_credentials.age".publicKeys = devUsers ++ systems;
-  "spotify_password.age".publicKeys = devUsers ++ systems;
-  "garage_rpc_secret.age".publicKeys = devUsers ++ systems;
+  "baldur_wg_priv.age".publicKeys = devUsers ++ systems;
   "garage_bertof_baldur_key.age".publicKeys = devUsers ++ [ baldur ];
   "garage_bertof_freya_key.age".publicKeys = devUsers ++ [ freya ];
   "garage_bertof_loki_key.age".publicKeys = devUsers ++ [ loki ];
   "garage_bertof_odin_key.age".publicKeys = devUsers ++ [ odin ];
   "garage_bertof_thor_key.age".publicKeys = devUsers ++ [ thor ];
+  "garage_rpc_secret.age".publicKeys = devUsers ++ systems;
   "garage_tiziano_baldur_key.age".publicKeys = devUsers ++ [ baldur ];
   "garage_tiziano_loki_key.age".publicKeys = devUsers ++ [ loki ];
+  "kavita_token.age".publicKeys = devUsers ++ [ loki ];
   "nextcloud_admin_secret.age".publicKeys = devUsers ++ [ freya ];
-  "baldur_wg_priv.age".publicKeys = devUsers ++ systems;
+  "ntfy-odin.age".publicKeys = devUsers ++ [ odin ];
+  "ntfy-thor.age".publicKeys = devUsers ++ [ thor ];
   "odin_wg_priv.age".publicKeys = devUsers ++ [ odin ];
   "oppo_wg_priv.age".publicKeys = devUsers ++ systems;
+  "spotify_password.age".publicKeys = devUsers ++ systems;
   "thor_wg_priv.age".publicKeys = devUsers ++ [ thor ];
   "wg_psk.age".publicKeys = devUsers ++ systems;
-  "kavita_token.age".publicKeys = devUsers ++ [ loki ];
 }