m3tam3re/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(talk): read API key from agenix file instead of env var

Browse Source 
Primary: /run/agenix/elevenlabs-key (read via 'read -r' which strips
the trailing newline agenix files contain).
Fallback: ELEVENLABS_API_KEY env var (backwards compatible).

No need to export the key in shell environment anymore — if the
agenix secret exists, talk picks it up automatically.

Override path via ELEVENLABS_KEY_FILE env var if needed.
This commit is contained in:
m3ta-chiron
2026-07-02 20:14:45 +02:00
parent 3d6b3160b2
commit e7765ee39f
2 changed files with 28 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkgs/talk/README.md
+16 -5
View File
@@ -22,10 +22,13 @@ pi -p "Fasse zusammen" | talk
| Variable | Required | Default | Description |
|---|---|---|---|
| `ELEVENLABS_API_KEY` | ✅ | — | API key for ElevenLabs |
| `ELEVENLABS_API_KEY` | ⚠️ | — | Fallback if agenix file is absent |
| `ELEVENLABS_KEY_FILE` | ❌ | `/run/agenix/elevenlabs-key` | Path to agenix secrets file (preferred) |
| `ELEVENLABS_VOICE_ID` | ❌ | `KXxZd16DiBqt82nbarJx` | Voice ID to use |
| `VOICE_NOTIFY` | ❌ | `1` | Set to `0` to silence all output |
The API key is read from the agenix file at `/run/agenix/elevenlabs-key` by default. The file should contain just the key (trailing newline is stripped automatically via `read -r`). If the file doesn't exist, `talk` falls back to the `ELEVENLABS_API_KEY` environment variable.
## How It Works
1. Sends text to ElevenLabs `text-to-speech` API → receives MP3
@@ -72,12 +75,20 @@ crunch ai pi daily "08:00" "Fasse Basecamp Todos zusammen"
```nix
# home-manager
home.packages = [ pkgs.m3ta.talk ];
# Requires in environment:
environment.sessionVariables.ELEVENLABS_API_KEY = "your-key";
# Or via agenix secrets
```
The API key is read from `/run/agenix/elevenlabs-key` at runtime — set up the secret in your agenix configuration:
```nix
# secrets.nix
age.secrets."elevenlabs-key" = {
file = ./secrets/elevenlabs-key.age;
# Optionally set owner/group if needed
};
```
No need to export `ELEVENLABS_API_KEY` in shell environment anymore.
## Dependencies
- `curl` — API calls