sops secrets path changed

2026-10-10 05:55:24 +03:00 · 2026-10-09 19:26:31 +03:00
parent 02927a26bb
commit a4984a6b37
5 changed files with 81 additions and 13 deletions
@@ -58,7 +58,9 @@ in
            "NOTIFY_DAYS_BEFORE" = "7";
            "TZ" = "Europe/Moscow";
          };
-          environmentFiles = [ "/run/secrets/tape-rotation-env" ];
+          # Path resolved from the sops block at the bottom of this file —
+          # see invariant S1 in docs/arch/invariants.md.
+          environmentFiles = [ config.sops.secrets."tape-rotation-env".path ];
          volumes = [
            "${panel}/db:/data:rw"
            "${panel}/uploads:/app/uploads:rw"