From bb7e31cfabeed1a37a9addb8181d5daf59589adc Mon Sep 17 00:00:00 2001
From: Nathan McCarty <nathan@mccarty.io>
Date: Wed, 21 Jun 2023 03:46:51 -0400
Subject: [PATCH] Setup podgrab

---
 machines/perception/configuration.nix | 11 +++++++++++
 secrets/perception/podgrab            | 24 ++++++++++++++++++++++++
 2 files changed, 35 insertions(+)
 create mode 100644 secrets/perception/podgrab

diff --git a/machines/perception/configuration.nix b/machines/perception/configuration.nix
index 0416441..bcda31e 100644
--- a/machines/perception/configuration.nix
+++ b/machines/perception/configuration.nix
@@ -13,6 +13,11 @@
       sopsFile = ../../secrets/perception/borg.yaml;
       format = "yaml";
     };
+    "podgrab" = {
+      owner = "podgrab";
+      format = "binary";
+      sopsFile = ../../secrets/perception/podgrab;
+    };
   };
   # Setup system configuration
   nathan = {
@@ -238,6 +243,12 @@
       dependsOn = [ "plex" ];
     };
   };
+  # Setup podgrab
+  services.podgrab = {
+    enable = true;
+    port = 4242;
+    passwordFile = config.sops.secrets.podgrab.path;
+  };
   # Make the containers depend on their mounts
   systemd.services = {
     "podman-tdarr" = { after = [ "mnt-plex.mount" ]; };
diff --git a/secrets/perception/podgrab b/secrets/perception/podgrab
new file mode 100644
index 0000000..9aa5f47
--- /dev/null
+++ b/secrets/perception/podgrab
@@ -0,0 +1,24 @@
+{
+	"data": "ENC[AES256_GCM,data:6P3d1BbGd2TQrOgSDh/Dx6gntJKt8DxJPgmpHQ==,iv:jtRVnFVA+G8OIW2PZmjAqQ3O64VFSFwMB28eWjcBV7Q=,tag:iKSXaqir3E1zocFa4gjwtQ==,type:str]",
+	"sops": {
+		"kms": null,
+		"gcp_kms": null,
+		"azure_kv": null,
+		"hc_vault": null,
+		"age": [
+			{
+				"recipient": "age1ud80054jwf6ff7xx65ta6g7qxx2flc24r5gyyfjz43kvppjutqyskr2qm2",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHVHdhK0hzME9SVk5mOG11\ncXR6NlFUSzJhSGJaNmJ3dytsQUdvN3pJZFd3CnAyTzhYTHdFdDMvV2Z4WkFZQUpj\nYjdjeW1tVmM0NjBCOE4zTlpNc1JSTGcKLS0tIC9OSTlGL3hhMjZZV2huM2hpQ2U4\nbWpHUk1nOHlPWGxUc1FPWE1hVFplQUkK/8E0keDtYm+4+pwVOaCHmaB9N6aPRE7s\n0qDKe0EwE8m6igktUXJmRavhSo40Eo6IaES36f/V4XEIkwGWiRP9jQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1rztv2778cf2dcpzcpth888cq7u3rdsl7tfuhv4sddysdnqjxaevqg72t5l",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEMmF5OWNaUnl1M2tDR1M4\neVR0NUtlbjA0REJwUGtWdnA1SjB5YXltMUNBClRpNTFFWTdBWDVOamxnSmlYclFM\nWEkwN1hBR3FVclQzWWZzMW5DcWM4M3cKLS0tIERtMXMzWUxrT1MyYURmK2J4ZlZj\ncGZVN3hEUkY1ZGRpV3h0c1pDbXVuRFUKhMpc5Eylqhdfxr70SWSRJofT8NOpNkZf\nLcDEEFxkTLeq6eozNIUW06WiMjobbMmTffTdB/nOyy2pA9GmX1m9+A==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2023-06-21T07:42:16Z",
+		"mac": "ENC[AES256_GCM,data:sXNTqP1rWY3+lUOtWPR1TDJSdYiWCObMY1PWfttpXWx/uQd1ezy7pxWfcHQh5gv5c1Nk5dlEqwtAsMJ24tQTzVh4B3zDZCkM+Kl5JNRUyzgobkU7R7dGrnynubI1qIDKcJKK5/fmMC8HlD3z0D2ue4gQYzYiY8z69dL+6ZKaFTw=,iv:Yu8MaCqu/lRHuzvMmiyQ0kJyNIZuEgZw4oaLj/MncRA=,tag:ZWO5FuK6Du2U8WJDGizlHw==,type:str]",
+		"pgp": null,
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.7.3"
+	}
+}
\ No newline at end of file