From 0961a685327dd2564851c379037bb026fe799ce4 Mon Sep 17 00:00:00 2001
From: Luke Granger-Brown <hg@lukegb.com>
Date: Wed, 31 Mar 2021 23:52:38 +0000
Subject: [PATCH] twitterchiver: add secrets

---
 ops/nixos/bvm-twitterchiver/default.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/ops/nixos/bvm-twitterchiver/default.nix b/ops/nixos/bvm-twitterchiver/default.nix
index ce48b7d933..5d4bb73bbe 100644
--- a/ops/nixos/bvm-twitterchiver/default.nix
+++ b/ops/nixos/bvm-twitterchiver/default.nix
@@ -3,7 +3,9 @@
 # SPDX-License-Identifier: Apache-2.0
 
 { depot, ... }:
-{
+let
+  inherit (depot.ops) secrets;
+in {
   imports = [
     ../lib/bvm.nix
   ];
@@ -45,6 +47,7 @@
     wantedBy = ["multi-user.target"];
     serviceConfig = {
       ExecStart = "${depot.go.twitterchiver.viewer}/bin/viewer --user_to_twitter=lukegb@lukegb.com:lukegb,bgekul";
+      EnvironmentFile = secrets.twitterchiver.environment;
       WorkingDirectory = "${depot.go.twitterchiver.viewer}/share";
       User = "twitterchiver";
       Restart = "always";