From 872bcfb6833ab91c8f78f45aef71b8e284cdb28a Mon Sep 17 00:00:00 2001
From: Roy Dumblauskas <roydumblauskas@gmail.com>
Date: Thu, 17 Apr 2025 10:56:14 -0500
Subject: [PATCH] update secret file, add secret test to config.nix

---
 nixos/configuration.nix  | 8 ++++++--
 nixos/secrets/build.json | 9 +++------
 2 files changed, 9 insertions(+), 8 deletions(-)

diff --git a/nixos/configuration.nix b/nixos/configuration.nix
index 7781c12..acdbca4 100644
--- a/nixos/configuration.nix
+++ b/nixos/configuration.nix
@@ -13,11 +13,15 @@
     defaultSopsFile = ./secrets/build.json;
     defaultSopsFormat = "json";
 
-    secrets."nixos-homelab-00" = { };
+    secrets."clusterPassword" = { };
   };
 
   systemd.user.services.mbsync.unitConfig.After = [ "sops-nix.service" ];
-
+  
+  environment.variable = {
+    SECRETKEY = "${config.sops.secrets."clusterPassword".path}";
+  };
+  
   # Grub Boot Loader Setup
   boot.loader.grub = {
     enable = true;
diff --git a/nixos/secrets/build.json b/nixos/secrets/build.json
index a2c3547..b8cf77b 100644
--- a/nixos/secrets/build.json
+++ b/nixos/secrets/build.json
@@ -1,8 +1,5 @@
 {
-	"nixos-homelab-00": "ENC[AES256_GCM,data:n2EGHj/PZz6MjERUjA==,iv:AWuggQHU5uQGl7nB43QC7W15q+hBmqBCx78Fr4ZWfeQ=,tag:qoOSd7/gt9EEZjZXtDQ8KQ==,type:str]",
-	"k8s": {
-		"clusterPass": "ENC[AES256_GCM,data:n2pfdUswKi6SGtPkpTg=,iv:dXeTDGUmgXKZJ7zJonzgz66C1r/T69UsckEu8q9SI7k=,tag:oY+Hkzy7IG/TbdGv5BDpkw==,type:str]"
-	},
+	"clusterPassword": "ENC[AES256_GCM,data:bI7KikJaKwokrfDHmu2iz9Qn,iv:jKQ9TrTfanLAlW/D3LiPCN0AKCPtHWknW4hXlJSMsc4=,tag:wqdUp1wfl/2keimxsd2sgQ==,type:str]",
 	"sops": {
 		"kms": null,
 		"gcp_kms": null,
@@ -14,8 +11,8 @@
 				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGZUs1ajViZTM4Smg3a1BU\nU05taWxTUGRzald0cnE3MWt1VzVtMGE0cHlvCnhWbVN0cFNSZDZMcVdXUXVtZUtM\nRzhmK1QvS1R6enNKRnRUdlRLdWhQZjQKLS0tIGJRWElaTWhCbm50Wk1ZRjBUbU5R\nZU9tUjhlR0xwQlU0WnNvQ1FBZGlRQWcK/+Vj6QoktFQ78CxJ8dSQGGqE72fxagA+\n10f60BNlWjWtkIZ2CmcjsDi1zLHny10MaKj9fyRvmBta6Inzra/maA==\n-----END AGE ENCRYPTED FILE-----\n"
 			}
 		],
-		"lastmodified": "2025-04-16T05:48:06Z",
-		"mac": "ENC[AES256_GCM,data:3WsNWzpFURYfOW1+Nel2cxq//SsYLOk7UWYlVldysGyiyf+hmwxwhOFRVEWEDD50k732wPO0OTXGGMf5Jp3ZpzwxWg1oROu7nmbVKzAxniqY5X4txzbyJeeVZGaitBwV2R7EBhvFGFgGsTfcY1f8vXxX7j6IX9xIwBCO48sHH4g=,iv:caoaGuVRx5351Ed7o37yYD7UZIo6yi98VV+2hq0ABSs=,tag:B6ZzpWGwG0Dg6TWEthQvCg==,type:str]",
+		"lastmodified": "2025-04-17T15:26:55Z",
+		"mac": "ENC[AES256_GCM,data:iR0+jYD3SMDYtpaSHJpvxme+ASRdhDcgcLNBS6bT/9u/Da35rUonQ/zOeSIKXvgWIOxjdvJalFqpBwoZfAnbg7hzcUiPAWfGuiTkqv5bLy/UJgKAf1G/bWthsdOc4iSuh1ogQ+heYBOJld+ZX3m5gU73PuilaWRG/H0kCuOuffc=,iv:ExcsQluMZFPxyeB9NnqNv9bENuwAK62ndXcUAdcehaM=,tag:i+N4UpZ1ls/mGRQhV3myiw==,type:str]",
 		"pgp": null,
 		"unencrypted_suffix": "_unencrypted",
 		"version": "3.9.4"