From 82298cfb4dc1d10c8b12372a79417cfe86d740e0 Mon Sep 17 00:00:00 2001
From: Joakim Repomaa <joakim@repomaa.com>
Date: Mon, 16 Jun 2025 19:39:10 +0300
Subject: [PATCH] simplify hetzner api key handling on freun-dev

---
 hosts/freun-dev/secrets.nix  |   1 -
 modules/services/octodns.nix |   4 ++--
 secrets/hetzner.age          | Bin 481 -> 591 bytes
 3 files changed, 2 insertions(+), 3 deletions(-)

diff --git a/hosts/freun-dev/secrets.nix b/hosts/freun-dev/secrets.nix
index 1e3e2ef..1874cc4 100644
--- a/hosts/freun-dev/secrets.nix
+++ b/hosts/freun-dev/secrets.nix
@@ -17,7 +17,6 @@
           "vaultwarden"
           "donetick"
           "dnote"
-          "octodns"
           "mealie"
           "mosquitto/homie"
           "mosquitto/telegraf"
diff --git a/modules/services/octodns.nix b/modules/services/octodns.nix
index ae365f4..382c9d9 100644
--- a/modules/services/octodns.nix
+++ b/modules/services/octodns.nix
@@ -179,7 +179,7 @@ let
       };
       hetzner = {
         class = "octodns_hetzner.HetznerProvider";
-        token = "env/HETZNER_TOKEN";
+        token = "env/HETZNER_API_KEY";
       };
     };
 
@@ -214,7 +214,7 @@ in
         Type = "oneshot";
         ExecStart = "${octodns}/bin/octodns-sync --config-file ${configFile} --doit";
         DynamicUser = true;
-        EnvironmentFile = secrets.octodns.path;
+        EnvironmentFile = secrets.hetzner.path;
         RemainAfterExit = true;
       };
       wantedBy = lib.optionals config.services.nginx.enable [ "nginx.service" ];
diff --git a/secrets/hetzner.age b/secrets/hetzner.age
index abf0b52e360ad5901c638d5573cb78cf59da91dd..e4167b84680b17af0861c0755461d1204394b636 100644
GIT binary patch
delta 538
zcmaFJe4b^3PJK|Wg-4ZpL57)&XQ^>{a(TE>s<)GCMW}I_k!N5=a#d8Yhkk)?xU;Wg
zI#)@BYg%P^Qc0F!U`~FSv1xLsb9h94QjW8EaI%YOj$w{xT6vL&cUp3(1(&X!LUD11
zZfc5=si~o*f{R;beny}|Wr#_LaY$gXtGQ8nx?@0=lUun(S-3}{d48f<d3kw7NU?EL
zWpIwMSCvsDm$89gg`sbux2LmzsBdOchOt|Kc3O_VYh<ZMv6H!Xh*^QYQ)IYVNQz15
z#E;_jg(d05?iT(|N&4j>m0oTI1|E*CK3+i~p?T>h0Tue$dHOk_S>{>3X<^A+c`1%z
zhVFi;CE=FlAtkQa!HFK(dCvZY899~#<)#Kf-eG~|2I+Zjl_eNH2?#MyOG{VCGz<(i
zG50NYG)>GlF3<H0srRlZbSz0UNer(v%XV{hD@#r_Pfjxl_BIUVGS4%JN(=YNE-Cgi
zHFgRtaH=eDc5=`33{N&UHYv~X*RCuuD9<wr3HJ8n($&>f@X3oXO7|^F_spuO$O=xk
zC=Jfi&Q2-uPtndxNlbK!GAb(a@Uk$<vnX}t`rfv&*JMlRYtPL`?o`ft`u%k4Rp;fY
zH|xtkT#4sbxR>=o{o=&VQk9s^l`n7Yyk3&p(qE7{t2;SD^a=CCEvZbdS(eH#R_t(C
PFTC$*Xx)KQEl(x@_7lJI

delta 427
zcmX@l@{oCgPJL2#eqmy1Zbr6cs=iZjg_ohXU$B!$dWd7bL0L#vMu3N<zhQxysY#Vn
zF_&{*khgwueu{I6Pi}FtmwBOYL3v4rcX^h!vqw%vo@Gfuu3>(Dlx3bpK9{bYLUD11
zZfc5=si~o*f{R;beny~zg}a--w{b|mccGb~fwos+np?WIVPtSxK(>2+P@2AZx`BCl
zhFh|GcyVPiS6P%_p_64nuAh5lT99v2nt!-OUR8-<Vv<>+Pr6~ccA`^Wa<)l%R77R+
z#E;_jUS7rF$@(U_Cg#q*`X&}RZq81I`MxeDnZ<^FS*AvbWl65777^Zt<$<nT+NqhA
z7G{a52IV=9>E8Lig^5YV=AQ1(1!b9rWnpH<<`I>_Wy$_V`T4$Fy1KdwMV0x*dB*u+
z=_vuOuI|Y$S?*>5E=h@n<&|Yo+CiBW9*GfA<%zC_6{-H&T;@`0T}oWqyj!En=AL3X
zHszh9Xk6j0W7BGvDjNtr)MF5LUzi#*a|7pw={c3(<KMpdX7@aqCGYuDw&gQaYCZ4H
XiDKV=&awHZoX6uII;W;8?p+N45eJu#