Unverified Commit 6430b7a1 authored by Fugi's avatar Fugi
Browse files

nixos/prometheus-sabnzbd-exporter: use LoadCredential for apiKeyFile

parent aba1bf70

nixos/modules/services/monitoring/prometheus/exporters/sabnzbd.nix

+16 −6
Original line number Diff line number Diff line
@@ -19,7 +19,11 @@ in 
          };

          apiKeyFile = mkOption {

            type = types.str;

            description = "File containing the API key.";

            description = ''

              The path to a file containing the API key.

              The file is securely passed to the service by leveraging systemd credentials.

              No special permissions need to be set on this file.

            '';

            example = "/run/secrets/sabnzbd_apikey";

          };

        };
@@ -30,16 +34,22 @@ in 
  serviceOpts =

    let

      servers = lib.zipAttrs cfg.servers;

      apiKeys = lib.concatStringsSep "," (builtins.map (file: "$(cat ${file})") servers.apiKeyFile);

      credentials = lib.imap0 (i: v: { name = "apikey-${toString i}"; path = v; }) servers.apiKeyFile;

    in

    {

      serviceConfig.LoadCredential = builtins.map ({ name, path }: "${name}:${path}") credentials;



      environment = {

        METRICS_PORT = toString cfg.port;

        METRICS_ADDR = cfg.listenAddress;

        SABNZBD_BASEURLS = lib.concatStringsSep "," servers.baseUrl;

      };



      script = ''

      script =

        let

          apiKeys = lib.concatStringsSep "," (builtins.map (cred: "$(< $CREDENTIALS_DIRECTORY/${cred.name})") credentials);

        in

        ''

          export SABNZBD_APIKEYS="${apiKeys}"

          exec ${lib.getExe pkgs.prometheus-sabnzbd-exporter}

        '';