video9

hosts/m3-kratos/default.nix

@@ -36,6 +36,7 @@
   imports = [
     ../common
     ./configuration.nix
+    ./secrets.nix
     ./services
   ];
 

hosts/m3-kratos/secrets.nix

@@ -0,0 +1,13 @@
+{
+  age = {
+    secrets = {
+      secret1 = {
+        file = ../../secrets/secret1.age;
+      };
+      m3tam3re-secrets = {
+        file = ../../secrets/m3tam3re-secrets.age;
+        owner = "m3tam3re";
+      };
+    };
+  };
+}

hosts/m3-kratos/services/containers/default.nix

@@ -1,5 +1,6 @@
 {
   imports = [
     ./echo.nix
+    ./nginx.nix
   ];
 }

hosts/m3-kratos/services/containers/nginx.nix

@@ -0,0 +1,8 @@
+{config, ...}: {
+  virtualisation.oci-containers.containers."nginx" = {
+    image = "docker.io/nginx:alpine";
+    environmentFiles = [
+      config.age.secrets.secret1.path
+    ];
+  };
+}