From f527531a15e413c690426c474a325030f469ec90 Mon Sep 17 00:00:00 2001
From: RGBCube <git@rgbcu.be>
Date: Mon, 15 Jan 2024 11:39:16 +0300
Subject: [PATCH] Set perms for grafana password

---
 hosts/cube/grafana.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/hosts/cube/grafana.nix b/hosts/cube/grafana.nix
index 8e0982b..976604c 100644
--- a/hosts/cube/grafana.nix
+++ b/hosts/cube/grafana.nix
@@ -10,6 +10,11 @@ in serverSystemConfiguration {
     group = "grafana";
   };
 
+  age.secrets."cube/password.mail.grafana" = {
+    owner = "grafana";
+    group = "grafana";
+  };
+
   services.grafana = enabled {
     domain = fqdn;
     port   = 8999;
@@ -30,6 +35,7 @@ in serverSystemConfiguration {
     settings.security = {
       admin_email    = "metrics@${domain}";
       admin_password = "$__file{${config.age.secrets."cube/password.grafana".path}}";
+      admin_user     = "admin";
 
       disable_initial_admin_creation = true; # Just in case.
     };