Add auth for marvin-tracker

nixos/machines/frumar/default.nix

@@ -159,6 +159,7 @@
     grafana.file = ../../../secrets/grafana.env.age;
     oauth2-proxy.file = ../../../secrets/oauth2-proxy.age;
     zigbee2mqtt.file = ../../../secrets/zigbee2mqtt.env.age;
+    marvin-tracker.file = ../../../secrets/marvin-tracker.env.age;
   };
   systemd.services.grafana.serviceConfig.EnvironmentFile = config.age.secrets.grafana.path;
   systemd.services.zigbee2mqtt.serviceConfig.EnvironmentFile = config.age.secrets.zigbee2mqtt.path;
@@ -278,10 +279,18 @@
               password = "$2a$11$CC5NVYiTUeoa4A4w94NFMORO/0jhMR60JWgPUgjct8c2vg29wwIGG";
               allowed_connection_types = [ "MQTT" ];
             }
+            {
+              user = "marvin-tracker";
+              password = "$2a$11$V9G2gT52obCsDOBwibHfMudnibwP/s3NwUjwvtsnlHfkn5kJHOOEe";
+              allowed_connection_types = [ "MQTT" ];
+            }
           ];
         };
       };
     };
   };
-  # services.yorick.marvin-tracker.enable = true;
+  services.yorick.marvin-tracker = {
+    enable = true;
+    secretFile = config.age.secrets.marvin-tracker.path;
+  };
 }

secrets/marvin-tracker.env.age

@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> X25519 lnFhuS21Xox60BLoRnk3BsJt2Fgk3xWCKx0TKbfQ6nA
+CCPtXTwx/+RbiYM5HeEdr9EcJ87dfTUHC1mrfc7mgrk
+-> ssh-ed25519 n7yA6g A9CR6mU373m+j27F0M6zmKCSX1mXcON2ocuS4jeqhH8
+BMpDHMK8kmTtU2x0zRtM7TBVCd6qnVvg0lDAIBK7mz4
+--- XkreqeRjr7EktitQL8dp6fk9UqFYXYkRe2WbDQ4ChD8
+ÞÕQ !"ÞÑ,^9K6Ÿ¬Ðg)–(è<>jÆ&=Êä^ýœêeטLv­°.¥CG<43>2åö-—&ƒ½r]ˆ
@7™0Å©– a
áhÙ—C<E28094>2³mê³{ªI•Í“Jûø¼

secrets/secrets.nix

@@ -26,5 +26,6 @@ in
   "frumar-mail-pass-hash.age".publicKeys = [ yorick pennyworth ];
   "frumar-mail-pass.age".publicKeys = [ yorick frumar ];
   "zigbee2mqtt.env.age".publicKeys = [ yorick frumar ];
+  "marvin-tracker.env.age".publicKeys = [ yorick frumar ];
   "oauth2-proxy.age".publicKeys = [ yorick frumar ];
 }