# personal-website sops secrets

Add these keys to `secrets.yaml` (on a host with your age key):

```yaml
personal-website:
    ghcr-token: <same PAT as swiftshare/ghcr-token, or new>
    database-password: <strong password>
    auth-secret: <openssl rand -base64 32>
    oauth-discord-client-secret: <Discord OAuth secret>
```

```bash
cd modules/hosts/nix-server
sops secrets.yaml
```

After editing, verify with `sops -d secrets.yaml | yq '.personal-website'`.