From 2fdfb9863b489e6e675266c9484dedea8459fff4 Mon Sep 17 00:00:00 2001
From: "RingOfStorms (Joshua Bell)" <ringofstorms@gmail.com>
Date: Wed, 7 Jan 2026 09:21:35 -0600
Subject: [PATCH] use secrets from openbao for litellm env

---
 hosts/h001/flake.lock | 12 ++++++++++++
 hosts/h001/flake.nix  |  8 ++++++--
 2 files changed, 18 insertions(+), 2 deletions(-)

diff --git a/hosts/h001/flake.lock b/hosts/h001/flake.lock
index b2fbaaf9..a8fc2394 100644
--- a/hosts/h001/flake.lock
+++ b/hosts/h001/flake.lock
@@ -1291,6 +1291,7 @@
         "pinchflat-nixpkgs": "pinchflat-nixpkgs",
         "ros_neovim": "ros_neovim",
         "secrets": "secrets",
+        "secrets-bao": "secrets-bao",
         "trilium-nixpkgs": "trilium-nixpkgs",
         "zitadel-nixpkgs": "zitadel-nixpkgs"
       }
@@ -1431,6 +1432,17 @@
         "url": "https://git.joshuabell.xyz/ringofstorms/dotfiles"
       }
     },
+    "secrets-bao": {
+      "locked": {
+        "path": "../../flakes/secrets-bao",
+        "type": "path"
+      },
+      "original": {
+        "path": "../../flakes/secrets-bao",
+        "type": "path"
+      },
+      "parent": []
+    },
     "systems": {
       "locked": {
         "lastModified": 1681028828,
diff --git a/hosts/h001/flake.nix b/hosts/h001/flake.nix
index 47daae2d..8a8d2edb 100644
--- a/hosts/h001/flake.nix
+++ b/hosts/h001/flake.nix
@@ -93,9 +93,12 @@
                       path = "/run/secrets/litellm.env";
                       softDepend = [ "litellm" ];
                       template = ''
-                        {{- with secret "kv/data/machines/home/openrouter" -}}OPENROUTER_API_KEY={{ .Data.data.api-key }}{{ end }}
+                        {{- with secret "kv/data/machines/home/openrouter" -}}
+                        OPENROUTER_API_KEY={{ index .Data.data "api-key" }}
+                        {{ end -}}
                         {{- with secret "kv/data/machines/home/anthropic-claude" -}}
-                        ANTHROPIC_API_KEY={{ .Data.data.api-key }}{{ end -}}
+                        ANTHROPIC_API_KEY={{ index .Data.data "api-key" }}
+                        {{- end -}}
                       '';
                     };
                   };
@@ -192,3 +195,4 @@
       };
     };
 }
+