From dc462255db5dec33a2a7e1a2bce726df39c52878 Mon Sep 17 00:00:00 2001
From: ulic-youthlic <ulic.youthlic@gmail.com>
Date: Sat, 31 Jan 2026 21:36:41 +0800
Subject: [PATCH] feat: Add base auth method for rqbit

---
 nixos/modules/programs/rqbit.nix | 2 ++
 secrets/general.yaml             | 5 +++--
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/nixos/modules/programs/rqbit.nix b/nixos/modules/programs/rqbit.nix
index f43160a..6076882 100644
--- a/nixos/modules/programs/rqbit.nix
+++ b/nixos/modules/programs/rqbit.nix
@@ -30,6 +30,7 @@ in {
       httpPort = 9092;
     };
     users.groups.rqbit.members = [cfg.unixName];
+    sops.secrets."rqbit.secrets.env" = {};
     systemd.services."rqbit" = {
       serviceConfig = {
         EnvironmentFile = [
@@ -51,6 +52,7 @@ in {
                   '')
               )
             ))
+          config.sops.secrets."rqbit.secrets.env".path
         ];
       };
     };
diff --git a/secrets/general.yaml b/secrets/general.yaml
index 8532cb5..10c7571 100644
--- a/secrets/general.yaml
+++ b/secrets/general.yaml
@@ -1,3 +1,4 @@
+rqbit.secrets.env: ENC[AES256_GCM,data:7bVAxx4bODYd3vA8XN/x+nn4Jrk9yHAGitkZwxl4dSZaLACprP3hgt4Y3vhIYrMc959TJJ4phRyX,iv:43gR9QoGTq0hnY21vRcZTX3BQnnhTHQ0z++BkOdNqYc=,tag:bc0HaUyfw/BWoYc9U9efQA==,type:str]
 radicle:
     Tytonidae: ENC[AES256_GCM,data:3Xe6FCLqV2i4/OpoyaHarF8HxN/uiSpiOSxsY7d0fo8AAQ==,iv:D4PZ/o2SM4pIDHx+K9EAbbN15SWfZjg7XjRzvUcrXqk=,tag:CPO2reXjRLnFzafL0a7aCQ==,type:str]
 awscli: ENC[AES256_GCM,data:YoeIPrKEMvjMrF/obs08hqnsVIPO1ojBKQpb+XapH20Rzo1Cw1ytIMf+MMcDLuZqvI8SeEqs0EtjBqqzqA0RvDVOGHWurQlC67MInkDdpN/p5xwTbAQgtv/dV6fKYySQgqG2LaKh6hEPKqNeT0TTW7e7Dd5TbA6em5YppPrKtmJK/8KDyTbCrrBo68bUZUV+WBiu055qXTm3ZA==,iv:d5c1imjlZGRWjrxJS1ibNucwZxoW7nHIXFnlEP51aOo=,tag:OQN5cKd7AqXk+lBqJ6eF+g==,type:str]
@@ -58,7 +59,7 @@ sops:
             a1Y1NU9CK2h1SS83VW42bzBMa01yMXMKI1DBtgNlkNCrxUQvnD6a45mQKNfg5gM4
             Zb5buo9Jofj4dn/HFwng3T3gxKTrP2Dh74CAH4L0M5yrF9fzk5TCcQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-01-24T13:43:28Z"
-    mac: ENC[AES256_GCM,data:+3IeCmW6kexhKLWRgp3LChzyiA6vT0ZSZN1K4RZWiXihcxS0QABhLHN4K6IyHJXkgN+i6/7wRf8KbksreIgLbhFjOSdp7HCP5Ix6mXa+RUY6eFpWDX6p0/mbS2GtgcFaSUipMbTxgL6wTlSxpWeZ9wq/yXb+IkjrKH861ire6vw=,iv:w21Ja2+5rqIa/PWz/aQQw+Qo7Jf1D5vHo58FgHBTF44=,tag:vEdgO3jI+tk5MiTpRUJg7A==,type:str]
+    lastmodified: "2026-01-31T13:38:10Z"
+    mac: ENC[AES256_GCM,data:cXoFEQcscl05a4rXnEF8uc1okMuxwtRFhhYHEi+YLWYHBwSQMV/OUHoGW6soYM+Z1wmQyOP883f5M6Z0gFCmhzACZah9Zg528H9eT+ge1WMuT9kBaaqtuQTDwVArkeYkEGw0Mi3y2HXSn9wEZJfLqrtYWKVDOr/Ce1zmgqR0wQQ=,iv:uyJRXwK0ACE4kAgkzACNBOS3HXN5RlNHgCFvSFQaR0k=,tag:KumI3klPjxhAfh3AuZvLVw==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.11.0