dawarich: enable secretKeyBaseFile setting

2026-02-08 22:52:21 -06:00 · 2026-02-08 22:52:21 -06:00 · 6a07b27571
commit 6a07b27571
parent 41ad65a8a4
1 changed files with 2 additions and 4 deletions
--- a/hosts/h001/containers/dawarich.nix
+++ b/hosts/h001/containers/dawarich.nix
@ -212,10 +212,8 @@ in
                createLocally = true;
              };

-              # Secret key base - create this file manually:
-              # Generate with: openssl rand -hex 64 > /drives/wd10/dawarich/secrets/secret_key_base
-              # Then update bind mount above to include it
-              # secretKeyBaseFile = "/var/secrets/secret_key_base";
+              # Secret key base
+              secretKeyBaseFile = "/var/secrets/secret_key_base";

              # Enable automatic migrations
              automaticMigrations = true;