nix-sops

modules/apps/collabora/default.nix

@@ -23,12 +23,13 @@ in
       volumes = [
         # ...
       ];
+      environmentFiles = cfg.environmentFiles;
       environment = {
         PUID = cfg.puid;
         PGID = cfg.pgid;
         TZ = cfg.timeZone;
         username = cfg.username;
-        password = cfg.password;
+        # password = cfg.password; # get from env file
         domain = "office.mjallen.dev";
         aliasgroup1 = "https://cloud\.mjallen\.dev:443";
         aliasgroup2 = "https://cloud\.mjallen\.dev:443";

modules/apps/collabora/options.nix

@@ -44,9 +44,9 @@ with lib;
       default = "mjallen";
     };
 
-    password = mkOption {
-      type = types.str;
-      default = "BogieDudie1";
+    environmentFiles = mkOption {
+      type = with types; listOf path;
+      default = [];
     };
 
     dontGenSslCert = mkOption {