From 5c406e75a94bc8a2ce4d5fb3305c018bd6cc2a22 Mon Sep 17 00:00:00 2001 From: s-prechtl Date: Tue, 24 Mar 2026 12:17:41 +0100 Subject: [PATCH] feat: oauth secret? --- hosts/hitsugibune/immich.nix | 4 ++-- secrets/immich.age | Bin 907 -> 880 bytes 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/hosts/hitsugibune/immich.nix b/hosts/hitsugibune/immich.nix index af2d81b..45c49d7 100644 --- a/hosts/hitsugibune/immich.nix +++ b/hosts/hitsugibune/immich.nix @@ -3,7 +3,7 @@ let domain = "immich.sprechtl.me"; in { - age.secrets.immich = { + age.secrets.immich-oauth-secret = { file = ../../secrets/immich.age; owner = "immich"; group = "immich"; @@ -19,7 +19,7 @@ in enabled = true; issuerUrl = "https://auth.sprechtl.me/application/o/immich/.well-known/openid-configuration"; clientId = "EXMPaB2SoZYSSWu56ebB6CYV8W1hQS2eTwLdFBDw"; - # clientSecret = ""; saved in secrets file + clientSecret._secret = config.age.secrets.immich-oauth-secret.path; scope = "openid email profile"; buttonText = "Login with Authentik"; autoRegister = true; diff --git a/secrets/immich.age b/secrets/immich.age index 2273d4c0214743b1c34bc6ab54a656bb4938c53c..c667228fbf2ff6947538a8e9580343710a059618 100644 GIT binary patch delta 831 zcmeBX|G+juC)6S|(YUIt(y`oI+r!Ml)u6;R#Guesza+xQ$tT3U(mgLSIY`^tJD|WY zlB+PvBiG#}%qPbvz_7~6OFKIxBB?aT%`M0>yD;0Z($zdH%q*qKD7}1QqiB6$MqzrD ztDBj(Q-y0%zIJA)nT45OVnA_taAsI&c!Xm~l9RT6KvbEwYoM25WMZCYiL1GHRbgqA zp;K_Uhi4_1LAg_*Q$R*&WI?$_acNOuu!*^TMxdvgQKWgehjEmpw_B!BxNAg!Po=NF zNoHP1L}s{ah_8NNRalTmiC=w5B3DFFaH)4dX@rM!ad}p%m!WoYPIyUXU_oVwS%$m2 zwttXcSYDomPg1sLUU89UQJ{aOUt)lHS!hIhx`m%vP!5-Ql0iU0VW?xNf4*0~pIKF9 zc%?;3zGb+lQB_jDWu$Roq;bAaQITVwb3jOutD%=?fpJNOVYZ_|fM0z^RET2*S4p~K zikU$~fSXrHxtC|DOQ=hhmt(ejwohqjNOE#XZlrTcxPMMTezuE;PfAF!kEgz~QE662 zK$UY~iMer35tnwjhij#4NoAn3lXF0chqsw&U}}J`m!Wg0k#|vkim|?1Wth2BL2#t2 zU#NG!PoQ~zW|(heN>zP&Xp&<^rnezip@p`Qi-k*Ssh_#Oud`d8L4Z+Gg_nzYg-1b( zWlnakPkKd4MR7?^sbQvPq_I zuCA_vv4@3INOo|Rf4E6ba=N*{p=pFqV1B7%ia~*yU$LK8mWyY3hLc5=0f(yJPC{%cr9Dm2cU-!T#c$;AL;4 zZmRG|FVyrThSiddW delta 858 zcmeys*3CXaC)Ci=I4~g7vLeO2z$+u&*EzVNs4^qcJ0RQ7ATT1sUBALO(?8v~#JH$3 zpUX?XG~2thqOv&IH{ICJz|bSywInUd#68{Lr>ZQ+yUN+m-_$QVCBkB2qiB6bcy?q; zfMJERZ(^pYWkpt$k#~7kK!LA*uBBI4T7+SSca?UEb68NCYjU`^QL&+SnVYtDsCRai zMT(F@Nnm1?TcuB7W=3{Fa8;pCd17W*vbJetM2Sb5u~Bl4S5$dure&0orFmtx zSFXQ#szH{%zfV!Qc0{&*cuIY~2UnD{BmXV`pxM`S0hI3(o zQ?Xl`r(;n`SW0e$tB0$8d0u{{ccfp2mutD1eyN39U{IxgnO~`gc7A<@ez})FmvLT- zhk<{ZMXrlwc!*zAeXaQXjq{|kVmAsg`;t3l5@Fnrje6Ns(xX*r+ZkTe^Pc%T5xVgen?26 zb55ncV|aQGRK7X}YnGo1=e8sk=qCe^jcmvss{9Zh4A1S5dfjx_61CTUx0_xl4LV zhO@V`xuch}v1hPPW|l#swwZ~WcaX1zkEvNfd0BvIcvfUcUS@rOnOQ_eVOFk*TM8GK zuCA_vSGvA|S6Z;IcDa$8X?bcvX_RqgL7t~^sJ>fNzNuGYnqO*^X_S$Bai$~JiE7Ex zobL7iQeGLp_{+v3ZpLy(cl&cD$;Xx%*@Y9O9ND=m<*S-rn0b8OC=)DPXi#^3%Gb>G znP*kw8#}Y#x2AeLuToIiGJESi#t+jsZqA>|x>MNsUHu$gv7F*1A__aQ&xJ5N-Ldl& zxAsrg35(}Vb9>Y}>&)ZCPa6aEUU@I7`_deky>6Mohf2;P*-HKs+nznF`ycQ7a{A;} rW+h(F-`DnEO*?vcmtuWL`!h4f#UC^~XJv&HGgnOfV$sfBKkp9!g9bMI