From da43efddfa2717c7e9dac48d67524efe3597eb4b Mon Sep 17 00:00:00 2001
From: Christoph Urlacher <christoph.urlacher@protonmail.com>
Date: Fri, 11 Jul 2025 19:22:30 +0200
Subject: [PATCH] Services/Kopia: Try to read secrets inline

---
 system/services/kopia.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/system/services/kopia.nix b/system/services/kopia.nix
index 4536e986..8b5873df 100644
--- a/system/services/kopia.nix
+++ b/system/services/kopia.nix
@@ -98,8 +98,8 @@ in {
         "--insecure"
         "--address=0.0.0.0:51515"
         # TODO: How to set this?
-        "--server-username=$KOPIA_SERVER_USERNAME"
-        "--server-password=$KOPIA_SERVER_PASSWORD"
+        "--server-username=(cat ${config.sops.secrets.kopia-server-username.path})"
+        "--server-password=(cat ${config.sops.secrets.kopia-server-password.path})"
       ];
 
       extraOptions = [