From 42aa3ca7688b1ee18dae3298e8cf024f1a0421f0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Motiejus=20Jak=C5=A1tys?= <motiejus@jakstys.lt>
Date: Thu, 28 Dec 2023 23:33:47 +0200
Subject: [PATCH] photoprism: add admin password

---
 flake.nix                             |  1 +
 hosts/vno1-oh2/configuration.nix      |  1 +
 secrets.nix                           |  1 +
 secrets/photoprism/admin_password.age | 13 +++++++++++++
 4 files changed, 16 insertions(+)
 create mode 100644 secrets/photoprism/admin_password.age

diff --git a/flake.nix b/flake.nix
index 2760e12..3de3675 100644
--- a/flake.nix
+++ b/flake.nix
@@ -127,6 +127,7 @@
                 root-passwd-hash.file = ./secrets/root_passwd_hash.age;
                 zfs-passphrase-fra1-a.file = ./secrets/fra1-a/zfs-passphrase.age;
 
+                photoprism-admin-passwd.file = ./secrets/photoprism/admin_password.age;
                 headscale-client-oidc.file = ./secrets/headscale/oidc_client_secret2.age;
                 sasl-passwd.file = ./secrets/postfix_sasl_passwd.age;
                 borgbackup-password.file = ./secrets/vno1-oh2/borgbackup/password.age;
diff --git a/hosts/vno1-oh2/configuration.nix b/hosts/vno1-oh2/configuration.nix
index edb33b3..65f1337 100644
--- a/hosts/vno1-oh2/configuration.nix
+++ b/hosts/vno1-oh2/configuration.nix
@@ -363,6 +363,7 @@
     photoprism = {
       enable = true;
       originalsPath = "/data";
+      passwordFile = config.age.secrets.photoprism-admin-passwd.path;
     };
 
     logrotate = {
diff --git a/secrets.nix b/secrets.nix
index 932be09..7fc1b5e 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -29,6 +29,7 @@ in
     "secrets/letsencrypt/account.key.age"
     "secrets/headscale/oidc_client_secret2.age"
     "secrets/vaultwarden/secrets.env.age"
+    "secrets/photoprism/admin_password.age"
 
     "secrets/synapse/jakstys_lt_signing_key.age"
     "secrets/synapse/registration_shared_secret.age"
diff --git a/secrets/photoprism/admin_password.age b/secrets/photoprism/admin_password.age
new file mode 100644
index 0000000..df2981b
--- /dev/null
+++ b/secrets/photoprism/admin_password.age
@@ -0,0 +1,13 @@
+age-encryption.org/v1
+-> ssh-ed25519 gJrHQg eCa5cUrVPGuIlwZxttLgsj/+4rxtb7luE+4G6UuJkS0
+XBoV3hfd+wKS9JDS9YEadTqd05IeqplsZ5Bprf1b4hM
+-> X25519 avkUdQ93BqTy/ec306ZohkmnsL9d573QgHGr+arhAnE
+2dCtWKJjo3JcU4MD+yORYqj3quXIDqwiyoQDy6h8lAI
+-> X25519 EU7tu5RbQSrZyMsIyrFArx3uoYa2tBtl16tXfndrXlw
+VCwiScqrMso7jszGeGaMMI695GEvLQocPXnCm20JtOI
+-> piv-p256 +y2G/w Aq0oRh20RvekJ5hxkn51UsYmiWlmrVFDiFkR6iLfrJoa
+afOsdfXoUqkg3Tb3gMuLQnikI6vcIziXBkDuqcO4c4I
+-> piv-p256 jNqd3A AuwZbu5yh7U1kTa2II7hwjdFQRcFzmXhb4wZzp8C+s6y
+5qjOJhwg2dNDJhb6zP+z7YWp3vITpZeEEaX6Aoo2slQ
+--- KrFbJliwFg4QM4CN0QZXikvG+FfuqERXdErJ58JfFJ8
+ YÂ_cNoP%>ÃuqFÿQvºÚ±e¸•›§gÝÎøGº/K-rè/Ǻ_Äm¿
\ No newline at end of file