feat: Use Grafana secretKey

2026-02-24 13:24:30 +05:30
parent 30a54caa03
commit ea7707d050
2 changed files with 6 additions and 2 deletions
--- a/nixos/tako/services/monitoring.nix
+++ b/nixos/tako/services/monitoring.nix
@@ -23,6 +23,9 @@
    caddy = 2019;
  };
 in {
+  sops.secrets."grafana.secretKey" = {
+    owner = "grafana";
+  };
  # Grafana configuration with Authelia integration
  services.grafana = {
    enable = true;
@@ -54,6 +57,7 @@ in {
      security = {
        disable_gravatar = true;
        cookie_secure = true;
+        secret_key = ''$__file{${config.sops.secrets."grafana.secretKey".path}}'';
      };

      analytics = {