From a708872dec18e54b3313c28cc30a2221992e8de1 Mon Sep 17 00:00:00 2001
From: Luke Granger-Brown <hg@lukegb.com>
Date: Sat, 9 May 2020 12:45:31 +0100
Subject: [PATCH] porcorosso: add a configured secretsync

---
 ops/nixos/porcorosso/default.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/ops/nixos/porcorosso/default.nix b/ops/nixos/porcorosso/default.nix
index fd08f5a6db..c4c52cf52f 100644
--- a/ops/nixos/porcorosso/default.nix
+++ b/ops/nixos/porcorosso/default.nix
@@ -92,6 +92,12 @@ in {
     }))
     arcanist
     age
+    (depot.nix.pkgs.secretsync.configure {
+      gitlabAccessToken = secrets.deployer.gitlabAccessToken;
+      variablesToFile = {
+        "OPS_SECRETS_DEFAULT_NIX" = /home/lukegb/depot/ops/secrets/default.nix;
+      };
+    })
   ];
 
   #hardware.nvidia.prime.offload.enable = true;