From 47533f119e21b444c8ee62a3ab985ad4551886bd Mon Sep 17 00:00:00 2001
From: Bruno BELANYI <bruno@belanyi.fr>
Date: Mon, 17 Jul 2023 10:58:29 +0000
Subject: [PATCH] modules: services: monitoring: add 'secretKeyFile'

---
 hosts/nixos/porthos/services.nix        | 1 +
 modules/services/monitoring/default.nix | 7 +++++++
 2 files changed, 8 insertions(+)

diff --git a/hosts/nixos/porthos/services.nix b/hosts/nixos/porthos/services.nix
index 76ea1ee..e4cae5e 100644
--- a/hosts/nixos/porthos/services.nix
+++ b/hosts/nixos/porthos/services.nix
@@ -80,6 +80,7 @@ in
       enable = true;
       grafana = {
         passwordFile = secrets."monitoring/password".path;
+        secretKeyFile = secrets."monitoring/secret-key".path;
       };
     };
     # FLOSS music streaming server
diff --git a/modules/services/monitoring/default.nix b/modules/services/monitoring/default.nix
index ece6cc1..829bfe0 100644
--- a/modules/services/monitoring/default.nix
+++ b/modules/services/monitoring/default.nix
@@ -27,6 +27,12 @@ in
         example = "/var/lib/grafana/password.txt";
         description = "Admin password stored in a file";
       };
+
+      secretKeyFile = mkOption {
+        type = types.str;
+        example = "/var/lib/grafana/secret_key.txt";
+        description = "Secret key stored in a file";
+      };
     };
 
     prometheus = {
@@ -61,6 +67,7 @@ in
         security = {
           admin_user = cfg.grafana.username;
           admin_password = "$__file{${cfg.grafana.passwordFile}}";
+          secret_key = "$__file{${cfg.grafana.secretKeyFile}}";
         };
       };