From 4cf387d9ad8b69f25478d38efcc0bea12000d019 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Victor=20I=C8=99an?= <victor@isan.ro>
Date: Sun, 10 May 2026 16:23:37 +0200
Subject: [PATCH] isengard: added immich secrets

---
 modules/agenix.nix  |  6 ++++++
 secrets/immich.age  | 12 ++++++++++++
 secrets/secrets.nix |  1 +
 3 files changed, 19 insertions(+)
 create mode 100644 secrets/immich.age

diff --git a/modules/agenix.nix b/modules/agenix.nix
index 5b8350d..597bb63 100644
--- a/modules/agenix.nix
+++ b/modules/agenix.nix
@@ -35,5 +35,11 @@
             group = "root";
             mode = "0400";
         };
+        immich = {
+            file = ../secrets/immich.age;
+            owner = "root";
+            group = "root";
+            mode = "0400";
+        };
     };
 }
diff --git a/secrets/immich.age b/secrets/immich.age
new file mode 100644
index 0000000..7c29de9
--- /dev/null
+++ b/secrets/immich.age
@@ -0,0 +1,12 @@
+-----BEGIN AGE ENCRYPTED FILE-----
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFA5bEdnQSA1Q2U1
+d1JXTE1MS0hKdlZLaVZBTzNnQjNHUVhRK01PY0EwdXJPUTkvbWhjCncyZVBQRUlq
+ZzRyV0pNT1JhdGJNYzB1ejNRNWN1SzVNczgvK2dtZ05sN2cKLT4gc3NoLWVkMjU1
+MTkgS0tuNDVBIGFzdkV3Q00zSDFuY1BhZVBiamNDTE84L096OGd0TFpienVsV0JD
+Y0J6SDgKY2pMRUdVblBLRDZRYWV1UjRTU3VRUHdteGNQLzFuRjNNOFUrdk8rUnhq
+WQotPiB0XCotZ3JlYXNlCktaWkVSZlRFK0NkaFliS2k0TG9kTnlYQWtaOUFiUWZ1
+K25ZTGRmWmkrdmhjTm9RCi0tLSBIblQzNTYwc2tVay9UVDYrVnZ1REU1emNibVdq
+SjFaSjIreXNIb3ZWOWxRCj0K9/3dKQBZS29iASwfwEeTiR/HC35HQLB29GlZZ9Ly
+8Hjy5LB8D6HleO8DV4mkPKLKFZoUBO9FB4Lzx05WfHrOKmoaRcLr2T2v6Ts5sHfE
+6A04o3rlUkL/zIPCJixolzcy5cVmqD0BopylXnNP4hFC
+-----END AGE ENCRYPTED FILE-----
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index b4ffb06..b419260 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -10,4 +10,5 @@ in
   "nextcloud.age".publicKeys = [ victor isengard ];
   "nextcloud-db.age".publicKeys = [ victor isengard ];
   "jitsi-env.age".publicKeys = [ victor isengard ];
+  "immich.age".publicKeys = [ victor isengard ];
 }