From 6a07b27571044d4307d09242adb601222ac60613 Mon Sep 17 00:00:00 2001
From: Joshua Bell <abc@joshuabell.xyz>
Date: Sun, 8 Feb 2026 22:52:21 -0600
Subject: [PATCH] dawarich: enable secretKeyBaseFile setting

---
 hosts/h001/containers/dawarich.nix | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/hosts/h001/containers/dawarich.nix b/hosts/h001/containers/dawarich.nix
index 416ed31b..a5e7f35d 100644
--- a/hosts/h001/containers/dawarich.nix
+++ b/hosts/h001/containers/dawarich.nix
@@ -212,10 +212,8 @@ in
                 createLocally = true;
               };
 
-              # Secret key base - create this file manually:
-              # Generate with: openssl rand -hex 64 > /drives/wd10/dawarich/secrets/secret_key_base
-              # Then update bind mount above to include it
-              # secretKeyBaseFile = "/var/secrets/secret_key_base";
+              # Secret key base
+              secretKeyBaseFile = "/var/secrets/secret_key_base";
 
               # Enable automatic migrations
               automaticMigrations = true;