From 2caf44df3698d05f1efa86ae5b81913ecb235d8b Mon Sep 17 00:00:00 2001
From: Guillaume Girol <symphorien+git@xlumurb.eu>
Date: Fri, 27 May 2022 12:00:00 +0000
Subject: [PATCH] nixos/miniflux: use types.secretFile for admin credentials

---
 nixos/modules/services/web-apps/miniflux.nix | 2 +-
 nixos/tests/miniflux.nix                     | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/nixos/modules/services/web-apps/miniflux.nix b/nixos/modules/services/web-apps/miniflux.nix
index 641c9be85d8cb32..94beef2d29bbe7a 100644
--- a/nixos/modules/services/web-apps/miniflux.nix
+++ b/nixos/modules/services/web-apps/miniflux.nix
@@ -40,7 +40,7 @@ in
       };
 
       adminCredentialsFile = mkOption  {
-        type = types.path;
+        type = types.secretFile;
         description = ''
           File containing the ADMIN_USERNAME and
           ADMIN_PASSWORD (length >= 6) in the format of
diff --git a/nixos/tests/miniflux.nix b/nixos/tests/miniflux.nix
index d905aea048a3ae3..40060be8c599fef 100644
--- a/nixos/tests/miniflux.nix
+++ b/nixos/tests/miniflux.nix
@@ -7,14 +7,14 @@ let
   defaultPort = 8080;
   defaultUsername = "admin";
   defaultPassword = "password";
-  adminCredentialsFile = pkgs.writeText "admin-credentials" ''
+  adminCredentialsFile = lib.types.secretFile.makeWorldReadable (pkgs.writeText "admin-credentials" ''
             ADMIN_USERNAME=${defaultUsername}
             ADMIN_PASSWORD=${defaultPassword}
-          '';
-  customAdminCredentialsFile = pkgs.writeText "admin-credentials" ''
+          '');
+  customAdminCredentialsFile = lib.types.secretFile.makeWorldReadable (pkgs.writeText "admin-credentials" ''
             ADMIN_USERNAME=${username}
             ADMIN_PASSWORD=${password}
-          '';
+          '');
 
 in
 with lib;