From 85b8479e447ee4b5e06af8e5f5d0977157979eee Mon Sep 17 00:00:00 2001
From: Philip Peterson <1326208+philip-peterson@users.noreply.github.com>
Date: Thu, 4 Jun 2026 22:12:55 -0700
Subject: [PATCH] fix secrets

---
 nixos/arion-riverside/arion-compose.nix |   1 +
 nixos/secrets/default.nix               |   2 +-
 nixos/secrets/postmark.age              | Bin 271 -> 325 bytes
 3 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/nixos/arion-riverside/arion-compose.nix b/nixos/arion-riverside/arion-compose.nix
index 710f72e..c04c7fe 100644
--- a/nixos/arion-riverside/arion-compose.nix
+++ b/nixos/arion-riverside/arion-compose.nix
@@ -20,6 +20,7 @@
           BASE_URL = "https://riverside.coldairnetworks.com";
           ADMIN_PASS = "admin";
         };
+        env_file = [ "/run/agenix/postmark" ];
         volumes = [
           "/var/riverside/files:/var/www/html/web/sites/default/files"
         ];
diff --git a/nixos/secrets/default.nix b/nixos/secrets/default.nix
index 907d6fa..8c9565f 100644
--- a/nixos/secrets/default.nix
+++ b/nixos/secrets/default.nix
@@ -12,7 +12,7 @@ in {
   # ANTHROPIC_API_KEY
   "./anthropic-api-key.age".publicKeys = [mainframePublicKey];
 
-  # POSTMARK_SERVER_TOKEN
+  # POSTMARK_API_KEY, POSTMARK_SERVER_TOKEN
   "./postmark.age".publicKeys = [mainframePublicKey];
 
   # TOKEN=<forgejo runner registration token from Forgejo admin>
diff --git a/nixos/secrets/postmark.age b/nixos/secrets/postmark.age
index 65a47147bc0d22065a69d3df2fb700339a19b3a5..e2c9ed6115dd7ace02c8308b6c4469e6d01e128b 100644
GIT binary patch
delta 290
zcmV+-0p0$O0>uK5EPpjkR!w4ZG-`KaRWC$EVKhxvaY!pORYiGtT4`o;M|XHIMNCOf
zLPTY2a|%*&bU{mJM_NZwGj~RDOGryWN>xx;IZ`W1Nl9>Vb5~JXSVDJHH#TT!cM2^n
zEg*DNWm;8CI8thALRMi*NKI!>L@+`$MM6SmQEydsY)~;TZGTyJNI60=N^=S;=d^cc
z_b;f;=^j9pi;x>Lt~^s+{<&a0a$ceqlh2(-6Qe$vKU$WEc&dDa2D>7XRoo*YqVz-2
zL6mxTpU<>H6WwEqa1+m?>KkcO{2}I3{a-<9kZL6}XnnuycAKgvt1+8<LeXIUt^1d+
oN`XBjgIo6a+8c&(ucB8>-3GYm@H^}UsOe9F^km;UVQVMTK0a%A#sB~S

delta 235
zcmV<H02Kel0*?ZaEPq8-F=kCqaYt@)M^0~HNpEOXGB8FnP*GD)FL_pQHfLILSw?PJ
zRCZQHQ3^z4Z!vapMmS_RD`skTWMXq#N=s;JNl-C3K}kwkQd(GPOj;{aOG9{YQ3@?B
zEg(2~XmM{zdT=mhP;h5CW;91LGkHNyN^>(WH&tb2Ok_b(NMvnEMs;>+cQ^`ai$)A3
zwx=@@Mh`;@*GoXyx<BhT6}i*^*_tRfL_~|%>Wts}(J$C^yLEPpn0yRTgSd}5Qx8GE
l<1OZxGxh*iCtr_jS?tW&O7U+zL034pA=CbqO!lAl_UU-TTi*Zx