nixcfg/systems
Harald Hoyer 01f42c0851 feat(sops): trigger service restarts on secret rotation
Wire up restartUnits on secrets whose consumers cache them in memory
(daemons read at startup), so sops-nix restarts the affected unit on
activation when the decrypted content changes:

- firefly: app_key → phpfpm-firefly-iii;
  auto_import_secret + access_token → phpfpm-firefly-iii-data-importer
- searx: secret_key → uwsgi
- opencode: web password → opencode-serve
- mail: sasl_passwd → postfix
- forgejo: gitea_dbpass → forgejo; runner-token → gitea-runner-default

Secrets read on demand by oneshots/timers (firefly sparda_pin, ntfy
token, restic backup creds, acme dns creds, wg conf) are left as-is.
2026-05-03 15:23:40 +02:00
..
aarch64-darwin feat(m4): add opencode 2026-04-25 05:11:39 +02:00
aarch64-linux nix fmt 2026-02-24 13:25:42 +01:00
x86_64-darwin/mpro nix fmt 2024-11-19 10:31:29 +01:00
x86_64-linux feat(sops): trigger service restarts on secret rotation 2026-05-03 15:23:40 +02:00
nixbuild.nix chore: nix fmt 2026-05-03 14:57:49 +02:00