From 4a335335d52a05078935fb50db2ffe8fc824ac0d Mon Sep 17 00:00:00 2001
From: uku <hi@uku.moe>
Date: Wed, 27 Nov 2024 09:43:23 +0100
Subject: [PATCH] fix(server): set vmagent token via LoadCredential

fixes stuff not working thanks to the brand new and awesome config
checker added a few days ago
---
 configs/server.nix             |  4 ++--
 secrets/shared/vmAuthToken.age | 31 ++++++++++++++++---------------
 2 files changed, 18 insertions(+), 17 deletions(-)

diff --git a/configs/server.nix b/configs/server.nix
index f254b6d..b2545cc 100644
--- a/configs/server.nix
+++ b/configs/server.nix
@@ -52,7 +52,7 @@ in {
     vmagent = {
       enable = true;
       remoteWrite.url = "https://metrics.uku3lig.net/api/v1/write";
-      extraArgs = ["-remoteWrite.bearerToken $VM_AUTH_TOKEN"];
+      extraArgs = ["-remoteWrite.bearerTokenFile=\${CREDENTIALS_DIRECTORY}/vm_auth_token"];
       prometheusConfig = {
         global.scrape_interval = "15s";
 
@@ -73,7 +73,7 @@ in {
   };
 
   systemd = {
-    services.vmagent.serviceConfig.EnvironmentFile = secrets.get "vmAuthToken";
+    services.vmagent.serviceConfig.LoadCredential = ["vm_auth_token:${secrets.get "vmAuthToken"}"];
 
     # For more detail, see:
     #   https://0pointer.de/blog/projects/watchdog.html
diff --git a/secrets/shared/vmAuthToken.age b/secrets/shared/vmAuthToken.age
index 05b733d..b084739 100644
--- a/secrets/shared/vmAuthToken.age
+++ b/secrets/shared/vmAuthToken.age
@@ -1,17 +1,18 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCaTI0Qm9kL2VSZFlQdlla
-bnJOVElDMGFFM0tDVHVpb0hZcDVKUDFmNndJClMyYytuc01yY0E1MGJncjRuNWRV
-U2JsMzJtdWY2L2EyRjRHMk91em9ITzgKLT4gWDI1NTE5IDhEbGR2ZTFydmcrdE8y
-V0p4V20yMXN0S250cDJFS2lYWnpRYWRwQk9oQjQKc2E4WHQ3OVdmdUE1TjJhU3Vn
-ckJ5aXVNbmJ3WEh4U3VHMFpKVW9vYUIwWQotPiBYMjU1MTkgYXBJcGlOdmlXaHlR
-bVlBazRyeUhMZ0NBNFl5UUM0SmhLNEZGd0RWNndnbwpIRFBsa1ZFMlNReEJIMWsz
-OEFjQUoyR1M0NVpVRzdodlFNK2VRcm55a09BCi0+IFgyNTUxOSB4bDVGTERBaXRG
-ZXo0V0ZkdmtMTlBhaWhvWDQ1UzVoRVZoeWlQYWlpWlhFCkVKNVFSOE0vMHMvNFBj
-eUxSZk10UTZxSzN5OXVHVHpCUFRNYUVkbFlLaTgKLS0tIFVpa05XQmhWeGtEa0Nr
-ZUYwMmg5cExiVndYcVppQlRIS0JNMGliTHQvREkKpwP8aD6RCqL/rKZ3YF4pG245
-2jeBRoLLWP5uYMvBDURL27LvvfI4WdXtvDXAoWU4bpxQU+o6Vixc2MKE0cNeCrhX
-vQt4x5csJXN+jqWqI5JEKasI2p1nSWv3TNS7yAS+K8fCXv+x2pUD2vLR+fcQqpkM
-X/5deZFdMWa4zmGE5sPR4oaZjGu7gLvLEm6JBZrG+pU+Kabwk1HOekjuSelsW2Tg
-cGn8nJ2yNSX7s2a+8tTFxnd+mor+TuKBr+czvjY6mhDLvCgQs79IfK5Id7K95i87
-XC28zxHyHP0t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 -----END AGE ENCRYPTED FILE-----