From 411d80d83625b7ba60a8a308f7dc6bad6b29ead8 Mon Sep 17 00:00:00 2001
From: Aaron Bieber <aaron@bolddaemon.com>
Date: Wed, 27 Nov 2024 09:46:00 -0700
Subject: [PATCH] box: enable extra bits for invidious

---
 hosts/box/default.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/hosts/box/default.nix b/hosts/box/default.nix
index 1dfbf00..13a9676 100644
--- a/hosts/box/default.nix
+++ b/hosts/box/default.nix
@@ -78,6 +78,11 @@ in
       owner = config.users.users.restic.name;
       sopsFile = config.xin-secrets.box.secrets.certs;
     };
+    invidious_extra = {
+      owner = "root";
+      mode = "444";
+      sopsFile = config.xin-secrets.box.secrets.services;
+    };
 
     books_cert = mkNginxSecret;
     books_key = mkNginxSecret;
@@ -440,6 +445,7 @@ in
         createLocally = true;
       };
       sig-helper.enable = true;
+      extraSettingsFile = "/run/secrets/invidious_extra";
       address = "127.0.0.1";
       port = 1538;
       settings = {