diff --git a/modules/server/database/default.nix b/modules/server/database/default.nix index 6a61c66..4c22053 100644 --- a/modules/server/database/default.nix +++ b/modules/server/database/default.nix @@ -61,7 +61,7 @@ in { $PSQL -tAc "ALTER DATABASE ${name}_db OWNER TO ${name}_user;" if [ -f "${config.sops.secrets."${lib.toUpper name}".path}" ]; then - PASS=''$(grep "^DB_PASSWORD=" "${config.sops.secrets."${lib.toUpper name}".path}" | cut -d'=' -f2-) + PASS=$(grep "^DB_PASSWORD=" "${config.sops.secrets."${lib.toUpper name}".path}" | cut -d'=' -f2- | sed "s/^['\"]//; s/['\"]$//") $PSQL -tAc "ALTER USER ${name}_user WITH PASSWORD '$PASS';" fi '') allApps} diff --git a/modules/server/sops/server.yaml b/modules/server/sops/server.yaml index 2798eab..2b5d920 100644 --- a/modules/server/sops/server.yaml +++ b/modules/server/sops/server.yaml @@ -1,5 +1,5 @@ INFOMANIAK_API_KEY: ENC[AES256_GCM,data:QhjQoCMxogXAPtvUbf/EWkqsFAndn73LBuTqj5essjruekynH287D/CYN/cwfcnDqZoh6Z4A9p08uUmXzqmTiralAhsCoc+Ljb/monmsruc=,iv:8rMGNc9398jnFXZm34fOht6fMNDAcDZ68B1jwoQPn2Q=,tag:ZlQnPaxkCktpwiC6HzmFVg==,type:str] -AUTHENTIK: ENC[AES256_GCM,data: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,iv:E3Feh6Wp0331OZjnCOIAoVA2W3h2COMwqz4KO8vWVNw=,tag:KrTkMvki/CiBeeb96tWU+g==,type:str] +AUTHENTIK: ENC[AES256_GCM,data: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,iv:BhImdM41EtcQYU2UHw0Ak00fhQGyDPCtGmuzpPFl44s=,tag:8EqvNg/7QeNo4EfuKD5onA==,type:str] sops: age: - recipient: age1sxzuhh2fcd4pmaz4mdqq95t683d32ft22w9t2r7pk258u0s8wymsqdj7lg @@ -20,8 +20,8 @@ sops: S1NaTVFTL0FCdm1EQmRsUnlhclZNZlEKEgIe60qkvY8+UocjQU+WM2dTL/1y3Kqk d4RrlLP9NSozwVsPYI4ntygvMSApbT4v0YvoO7gV90lkGWEvW1YDfA== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-05-06T00:40:03Z" - mac: ENC[AES256_GCM,data:BqnBawQ8F+w252kxu2DvNtTl0hF9JgJM6WFPRIYyoSZIJ2jS5kBE5R8JlWeGCANm4nwUguOWr3xmAkcg1+AeWKstWkUL8cH6YzyhMaK9xEC7gSU0e7Bjg6sVfDRZiNT6ortyLEeuxU07q24rbGbuyMdgP9ahEn61YzMiJ7CDY2U=,iv:i6zcecx4lg6S1tkSm1i3JE5mofB6ROYruRtSzgI4cDw=,tag:YlEZhCNVQedeRAGuAmxYew==,type:str] + lastmodified: "2026-05-06T00:42:01Z" + mac: ENC[AES256_GCM,data:IFttFaI9V1ZjsctMy5e61hT6ZZbawf1p5xTBTNMeamEHMITZX7l8CEMC58ujamXniHmlCrw04jZN7koR4Xc892kRlcAPq8k08BCcHOUZVM/W4rVTkEa4u06hLDQhURcXg5Q2kH97xVj1LSCKorlO+4Gqf6GskBWbcclnRaOSXeY=,iv:WkCl3z+9JCGjH5qr7yPPTjE/1B5rR88cb20ifvdcaz4=,tag:vjs1z/djmWiOWvBsbPfJ/A==,type:str] pgp: - created_at: "2026-05-05T23:46:27Z" enc: |-