bicep/minecraft-heatmap: change postgres password, add to sops

2025-08-25 14:30:52 +02:00
parent b821d36f40
commit 9e68287f1b
2 changed files with 8 additions and 3 deletions
--- a/hosts/bicep/services/minecraft-heatmap.nix
+++ b/hosts/bicep/services/minecraft-heatmap.nix
@@ -7,6 +7,10 @@ in
    mode = "600";
  };

+  sops.secrets."minecraft-heatmap/postgres-passwd" = {
+    mode = "600";
+  };
+
  services.minecraft-heatmap = {
    enable = true;
    database = {
@@ -14,7 +18,7 @@ in
      port = 5432;
      name = "minecraft_heatmap";
      user = "minecraft_heatmap";
-      passwordFile = pkgs.writeText "minecraft-heatmap-password.txt" "1234";
+      passwordFile = config.sops.secrets."minecraft-heatmap/postgres-passwd".path;
    };
  };