nixcfg/systems/x86_64-linux
Harald Hoyer 01f42c0851 feat(sops): trigger service restarts on secret rotation
Wire up restartUnits on secrets whose consumers cache them in memory
(daemons read at startup), so sops-nix restarts the affected unit on
activation when the decrypted content changes:

- firefly: app_key → phpfpm-firefly-iii;
  auto_import_secret + access_token → phpfpm-firefly-iii-data-importer
- searx: secret_key → uwsgi
- opencode: web password → opencode-serve
- mail: sasl_passwd → postfix
- forgejo: gitea_dbpass → forgejo; runner-token → gitea-runner-default

Secrets read on demand by oneshots/timers (firefly sparda_pin, ntfy
token, restic backup creds, acme dns creds, wg conf) are left as-is.
2026-05-03 15:23:40 +02:00
..
amd chore: nix fmt 2026-05-03 14:57:49 +02:00
attic chore: nix fmt 2026-05-03 14:57:49 +02:00
halo chore: nix fmt 2026-05-03 14:57:49 +02:00
mx feat(sops): trigger service restarts on secret rotation 2026-05-03 15:23:40 +02:00
nixtee1 refactor(nix): extract common system configs into reusable modules 2026-01-30 10:42:09 +01:00
sgx feat(sops): trigger service restarts on secret rotation 2026-05-03 15:23:40 +02:00
t15 refactor(nix): extract common system configs into reusable modules 2026-01-30 10:42:09 +01:00
x1 chore: nix fmt 2026-05-03 14:57:49 +02:00