change grafana oauth config

2023-08-19 12:03:26 +02:00
parent 22fef6fca8
commit 93793616c0
1 changed files with 1 additions and 1 deletions
--- a/hosts/web-01.cloonar.com/modules/grafana.nix
+++ b/hosts/web-01.cloonar.com/modules/grafana.nix
@@ -30,6 +30,7 @@ let
  };
 in
 {
+  systemd.services.grafana.script = lib.mkBefore "export GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET=$(cat /run/secrets/grafana-oauth-secret)";
  services.grafana = {
    enable = true;
    settings = {
@@ -42,7 +43,6 @@ in
        name = "Authelia";
        icon = "signin";
        client_id = "grafana";
-        client_secret = "$__file{/run/secrets/grafana-oauth-secret}";
        scopes = "openid profile email groups";
        empty_scopes = false;
        auth_url = "https://auth.cloonar.com/api/oidc/authorization";