staging/hosts/cassiopeia: configure whiteboard in nextcloud

staging/flake.lock

@@ -252,7 +252,7 @@
       },
       "locked": {
         "lastModified": 0,
-        "narHash": "sha256-n2uWdKIWHpCJkfXnEN5VGU3YQEUAB+vGmligtqx6mN8=",
+        "narHash": "sha256-l3IIAExccqIsGKGyYaGs8t+csrNbFcM+S8BfieRFm68=",
         "path": "../",
         "type": "path"
       },

staging/hosts/cassiopeia/nextcloud.nix

@@ -25,13 +25,19 @@
     group = "kanidm";
   };
 
+  age.secrets."nextcloud-whiteboard-jwt-secret" = {
+    file = "${flake.self}/secrets/nextcloud-whiteboard-jwt-secret.age";
+  };
+
   momo-cloud.nextcloud = {
     enable = true;
     adminPasswordFile = config.age.secrets."nextcloud-admin-pass".path;
     secretsFile = config.age.secrets."nextcloud-secrets".path;
     oidcSecretFile = config.age.secrets."nextcloud-oidc-secret".path;
-    extraApps = {
-      inherit (pkgs.nextcloud30Packages.apps) whiteboard;
+
+    whiteboard = {
+      enable = true;
+      jwtSecretFile = config.age.secrets."nextcloud-whiteboard-jwt-secret".path;
     };
   };
 }

staging/secrets/nextcloud-whiteboard-jwt-secret.age

@@ -0,0 +1,41 @@
+age-encryption.org/v1
+-> ssh-ed25519 SUhILQ GM232Jd6LbGoB264Fl2Udn/nS3VdW5XuMJRLWvYdLz0
+7rV+ZuiJNyYjb59hkHz6J3DG/cZMax8RFsJbjhlTSeA
+-> ssh-rsa f5THog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+-> ssh-rsa kFDS0A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+-> piv-p256 vRzPNw A5eAYukf167aZZQ4CFL+Ma7QJiFvqqYGdWFhJLxmtkI+
+bdnz2jjrBh1hwe3138JiDF8SRxnVkqpvcvVs4VHbLQw
+-> piv-p256 zqq/iw A4PY0KPfFlolXaoFeTw2rrytpdygvvmApx1XHDh2Tm/E
+RGxLg9b4b/dMMCm9GQ0cPGrd1kZdz7dF++De0IuAEXc
+-> ssh-ed25519 YFSOsg X8UerfWrWzVIzNbs14UtcMHt7ygDQxyAWJkan13PNiA
+SIgklm/JRG7qZLGRaxtXQKwmSctxPAUN+Hvf9KFS8Ms
+-> ssh-ed25519 iHV63A I/XME5rxyYsKlVP1Hgk1dxXG6ji+JAA0wcGfgewamRA
+xspSW57SZa/9GFVc8cLb6myqqd7gvjrWDuhzhb2MVW0
+-> ssh-ed25519 BVsyTA fmgBH7BoDT9g3g1RhmKQRbRd5vYzzpJjLIeZBxr+mCE
+pAZroYJ+QgeblK+fMB/CPRoLZ8EdlOivlYXmykHLJbM
+-> ssh-ed25519 +3V2lQ BZJCyg/ZvKoXNSYB6B3DJhFZ/Jogyg0BVTqpCOCn6zU
+KlPU/dEF9WbkxHG6vElmt/4q/IG8G/0joDzXANlnlVs
+--- yXEMtv79iu/1h7A3zRQsERHKVt+uZ1Dw3P6qWhXmlDE
+%|evõÚ27{
*ÀT¢ÿÆßõ?É[Á´<C381><¢ÌþF¾Ë*÷ßgIý˜ËûF=žy†*¯걡æM<+^¾F­g[¤u"î?¬„sÏ;„<>UþE4

staging/secrets/secrets.nix

@@ -24,6 +24,7 @@ in
   "signaling-internal-secret.age".publicKeys = cassiopeiaKeys ++ adminKeys;
   "signaling-nextcloud-secret.age".publicKeys = cassiopeiaKeys ++ adminKeys;
 
+  "nextcloud-whiteboard-jwt-secret.age".publicKeys = cassiopeiaKeys ++ adminKeys;
   "nextcloud-whiteboard-server-secrets.age".publicKeys = cassiopeiaKeys ++ adminKeys;
 
   "alloy-basic-auth-password.age".publicKeys = cassiopeiaKeys ++ adminKeys;