From 93793616c0f04c910d965e5449feb9996efd9a73 Mon Sep 17 00:00:00 2001
From: Dominik Polakovics <dominik.polakovics@cloonar.com>
Date: Sat, 19 Aug 2023 12:03:26 +0200
Subject: [PATCH] change grafana oauth config

---
 hosts/web-01.cloonar.com/modules/grafana.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/hosts/web-01.cloonar.com/modules/grafana.nix b/hosts/web-01.cloonar.com/modules/grafana.nix
index 936b472..2352a3b 100644
--- a/hosts/web-01.cloonar.com/modules/grafana.nix
+++ b/hosts/web-01.cloonar.com/modules/grafana.nix
@@ -30,6 +30,7 @@ let
   };
 in
 {
+  systemd.services.grafana.script = lib.mkBefore "export GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET=$(cat /run/secrets/grafana-oauth-secret)";
   services.grafana = {
     enable = true;
     settings = {
@@ -42,7 +43,6 @@ in
         name = "Authelia";
         icon = "signin";
         client_id = "grafana";
-        client_secret = "$__file{/run/secrets/grafana-oauth-secret}";
         scopes = "openid profile email groups";
         empty_scopes = false;
         auth_url = "https://auth.cloonar.com/api/oidc/authorization";