fix(netbox): pre-commit hooks are supposed to be run....

machines/web01/netbox.nix

@@ -1,9 +1,19 @@
-{ config, pkgs, sources, lib, ... }:
+{
+  config,
+  sources,
+  lib,
+  ...
+}:
+
+let
+  EnvironmentFile = [ config.age.secrets."netbox-environment_file".path ];
+in
+
 {
   services = {
     netbox = {
       enable = true;
-      package = (import sources.nixos-unstable {}).pkgs.netbox_3_7;
+      package = (import sources.nixos-unstable { }).pkgs.netbox_3_7;
       secretKeyFile = "/dev/null";
       listenAddress = "127.0.0.1";
       settings = {
@@ -34,16 +44,20 @@
     };
   };
 
-  systemd.services.netbox.serviceConfig = {
+  systemd.services = {
-    TimeoutStartSec = 600;
+    netbox.serviceConfig = {
-    EnvironmentFile = config.age.secrets.netbox_env.path;
+      inherit EnvironmentFile;
-  };
 
-  systemd.services.netbox-housekeeping.serviceConfig = {
+      TimeoutStartSec = 600;
-    EnvironmentFile = config.age.secrets.netbox_env.path;
+    };
-  };
+
-  systemd.services.netbox-rq.serviceConfig = {
+    netbox-housekeeping.serviceConfig = {
-    EnvironmentFile = config.age.secrets.netbox_env.path;
+      inherit EnvironmentFile;
+    };
+
+    netbox-rq.serviceConfig = {
+      inherit EnvironmentFile;
+    };
   };
 
   users.users.nginx.extraGroups = [ "netbox" ];

machines/web01/secrets/secrets.nix

@@ -7,7 +7,7 @@ lib.setDefault { inherit publicKeys; } [
   "bupstash-put_key"
   "matterbridge-config_file"
   "named-bind_dnskeys_conf"
-  "netbox_env"
+  "netbox-environment_file"
   "ntfy_sh-environment_file"
   "plausible_admin-user-password-file"
   "plausible_secret-key-base-file"

patches/default.nix

@@ -1,6 +1,7 @@
 {
   "nixos-23.11" = [
-    { _type = "static";
+    {
+      _type = "static";
       path = ./netbox.patch;
     }
     # castopod: 1.6.4 -> 1.7.0 + ajout du support de loadcredentials