From 4d03354d977a3bdf1a7399ffc741f39e696e5ee3 Mon Sep 17 00:00:00 2001
From: Erwin Boskma <erwin@datarift.nl>
Date: Mon, 27 Jun 2022 10:10:04 +0200
Subject: [PATCH] Feed livebook container a cookie

---
 machines/loki/configuration.nix | 3 +++
 machines/loki/secrets.yaml      | 7 ++++---
 modules/livebook/default.nix    | 1 +
 3 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/machines/loki/configuration.nix b/machines/loki/configuration.nix
index 98fb3ea..69a4695 100644
--- a/machines/loki/configuration.nix
+++ b/machines/loki/configuration.nix
@@ -85,6 +85,9 @@ in
     renovate_env = {
       owner = "erwin";
     };
+    livebook_cookie = {
+      owner = "erwin";
+    };
   };
 
   # This value determines the NixOS release from which the default
diff --git a/machines/loki/secrets.yaml b/machines/loki/secrets.yaml
index ea330c8..4338983 100644
--- a/machines/loki/secrets.yaml
+++ b/machines/loki/secrets.yaml
@@ -1,5 +1,6 @@
 ha_now_playing_token: ENC[AES256_GCM,data:2NKdfEn0tQx+DTE6HBVo79Ico8+afqJ2XFaBVOgIikaL4eMa34CqHwhX91T64VVdmWyjvhaC1kRzxsALoJvw1ZHEnSG2va6lX0vN36j/n8R3ulcX23ZJetMHYQQE6ss7A+gvnBHTnTBG+F9XyrPFT7xnfQ363lWHQ3nRFiGAZJjj6eYqLxSuG7KMWHtfSozy5gSy2JKoxyV4KnqpDs39PhBmNA7OSh3FRYZPIaq+i4qhdCfHRET+,iv:Znl6IW36aqhL/KBr0cRgPBPtqkhuc1GtoqCQEQJ/cXI=,tag:ubvLck9m9qiutU2zcQtdDw==,type:str]
 gh_token: ENC[AES256_GCM,data:7DBVEdZLReJQsyUoO9fITtHhE0UFcHr7XWod5XiaQ5iiwcI01tUdRA==,iv:HY82pn2rp9zf+xHWRg6Zwbl5V2qgp+67LghxHRQjiMI=,tag:OrkwDDYpJLXnsWZvqBtY9g==,type:str]
+livebook_cookie: ENC[AES256_GCM,data:ZB7u8BWNn7x2O00YTALYTwNi/obq8nH3mI01Bd8UxPg=,iv:JVpPJaB6O7oRjYqYuEueT812U0Bn8mUCOLDwpAU5yTs=,tag:GIkodjTt9mRLQZ0UAtJszg==,type:str]
 renovate_env: ENC[AES256_GCM,data:mzeS0FXsycD4hWMzRMgeEgTY+x2QtYtxmhcFCJcjwlD/q577kprHaU8otr1sOu9mwNud7K8kJGk=,iv:MMhr6CPsyvmP7+dKJUwt9cjnATm9JKZ/KbG4Dkj7hJ0=,tag:ubLmcW/CtT/uPiyswvr93w==,type:str]
 sops:
     kms: []
@@ -7,8 +8,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2021-12-28T23:28:51Z"
-    mac: ENC[AES256_GCM,data:Fqfnd3RTm9bDhlBNrrGh/BkScVOicUu79ZJdpr8ONSNOzVdAh3YbeEkuQoGQ6QxHnzJ/bAv0p0WF+OduoZipCl83U6Dg1Z87fziQHeDw4291zG0LoBsG5SEgGf9P5RvjpTNi2+O8kaYti4kf2ir/Dmg+JlAhuOoYEgAxtZl4V5g=,iv:HddVIwbmxqOH0C7Vw0TIwLgANnJjMcFSSpOtgvWcVY0=,tag:cWNnRYJvKfVDDGiPnnMhgg==,type:str]
+    lastmodified: "2022-06-26T17:17:46Z"
+    mac: ENC[AES256_GCM,data:ifCxcuSVCjlzd7l99q6gbhg/GYw0SBwz24N7Pjhynuq6CMBTGYH1mItWkBTdPhaM1r2RokSutSxmPSJfWAE/9B21p1wJH0RCKKoWyGAu7VlKMFHvv3xcIGNiZhcNfk3/zmZT4SifDfK8iA/VHt2dJlFomZhBvntIwnyRUEhEa7w=,iv:N6JOY9ceWB6d+87XsoYnJRI7RJ7WwegMMwedPIYLbfA=,tag:eB0lcAk2ZEyXBdSp19XX8g==,type:str]
     pgp:
         - created_at: "2021-11-25T22:00:17Z"
           enc: |
@@ -51,4 +52,4 @@ sops:
             -----END PGP MESSAGE-----
           fp: a6e31f5ab2bf34ca3f614d81ed9d6ae54dbcb9f7
     unencrypted_suffix: _unencrypted
-    version: 3.7.1
+    version: 3.7.3
diff --git a/modules/livebook/default.nix b/modules/livebook/default.nix
index bbb1e0e..21b4f21 100644
--- a/modules/livebook/default.nix
+++ b/modules/livebook/default.nix
@@ -31,6 +31,7 @@ in
         ];
         volumes = [
           "${cfg.dataDir}:/data"
+          "/run/secrets/livebook_cookie:/app/releases/COOKIE"
         ];
         extraOptions = [
           "--pull=always"