chiasson-nix/modules/hosts/nix-server/SOPS-personal-website.md

personal-website sops secrets

Add these keys to secrets.yaml (on a host with your age key):

personal-website:
    ghcr-token: <same PAT as swiftshare/ghcr-token, or new>
    database-password: <strong password>
    auth-secret: <openssl rand -base64 32>
    oauth-discord-client-secret: <Discord OAuth secret>

cd modules/hosts/nix-server
sops secrets.yaml

After editing, verify with sops -d secrets.yaml | yq '.personal-website'.