From 83ec5a88b683bcc9e2efefa515a15f14c8a3fbe3 Mon Sep 17 00:00:00 2001
From: tux <t@tux.rs>
Date: Tue, 21 Jan 2025 20:37:21 +0530
Subject: [PATCH] feat(nvim): add hyperbolic secret key

---
 hosts/canopus/default.nix             |  7 +++++++
 hosts/canopus/secrets.yaml            | 30 +++++++++++++++++++++++++++
 pkgs/nvim/nvim/lua/configs/avante.lua |  2 +-
 3 files changed, 38 insertions(+), 1 deletion(-)
 create mode 100644 hosts/canopus/secrets.yaml

diff --git a/hosts/canopus/default.nix b/hosts/canopus/default.nix
index f5a47ac..ef79a57 100755
--- a/hosts/canopus/default.nix
+++ b/hosts/canopus/default.nix
@@ -23,6 +23,13 @@
 
   nixpkgs.config.cudaSupport = true;
 
+  sops.secrets = {
+    hyperbolic_api_key = {
+      sopsFile = ./secrets.yaml;
+      owner = "${username}";
+    };
+  };
+
   networking = {
     hostName = "canopus";
     networkmanager = {
diff --git a/hosts/canopus/secrets.yaml b/hosts/canopus/secrets.yaml
new file mode 100644
index 0000000..02465bd
--- /dev/null
+++ b/hosts/canopus/secrets.yaml
@@ -0,0 +1,30 @@
+hyperbolic_api_key: ENC[AES256_GCM,data:FjDSbdutLa9hnVGRR+k2MznVfDGAx1/rNfjY/vaBuvKoBRj7aHqGpQ1cvhfxjyLMqPLqLnmimEtZeykvgkIIjKGzw5PewE23+lrN3oQyoYJvK+b8PRStjSaxOfzOnuLXi+YVnsU939nStLwnmSYKDabNWgFcWYsHwtHDafuWyovM9sVwasTn,iv:bxseG6GLKBL/CJOS8SrhgiLEyvMGSNQIMJSYLk2MqEo=,tag:4wxmkUwlcu23d7pMHbvIoQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age14vktfes95f33vuefwnmuvryas7az04u76dsgyhfvsx73czkvmp2q7njkl4
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwUnhkNzR0TnNzL29xV3cv
+            R3lqYUtVWWlNOVFTZHhTMWJZL1ZJUDIxaG0wCnIvQnkxSWJxWTZYVEkvS1ZWSEhk
+            YmhuK2JtS3lmUjV6MW50SGZrTnpkeDAKLS0tIDkvbk5abnhkNlA0dmgwV0Z0L1BS
+            UUduZUV3OGcvaFdBOFFsc0xzVCtQcUUKrmZvR2onMD0snqPw8okxaK6Tz5sA/cmR
+            1ZczgwLslJA7kwGKYOslUGA7aGB4jyP+M74wBAVa71BqWatypp0RfA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1udt3cssu7ahdrhsvckt8450rswrr6mknn36xpq74dkfp9lpajvnq84kdzj
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEOE0xbDN0UmdVdE1DR1lo
+            dmNudDk2TjNQdHFGc0lJTSt0dVVRU3BPRlg0ClV1ZUdxRVNpSmhYQm80QjdhdFc5
+            SVI4bi93WDBDWHQvejJIV21Bc2NsMjgKLS0tIEduZ2hHSnI3UXlGU2ZFZkpTRDJo
+            K0tiZ0swMmpuVW02OHMrRThlOXBWUjQKYHyJZuvQABh+gJ+THQ5SakVEqsKkyBMb
+            k6KnjRATpdZlmm0GjbD4aasF/j/V2fuH327Z72jPWQuI1y5ZfbDhSg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-01-21T14:42:55Z"
+    mac: ENC[AES256_GCM,data:UoUa+ypzLAfl2dU7r0dPkddDKyL3d/jFYAUTBbo1828THBCIJPRxaBHmMI1+BjZ/TSvJsGFhJS6YbrQB0zKN/CrH/OGdZPpwJ3VXwFtBWcEc7v8VZCFeWoRnYA31j7uPBA/KxvxpijSEIyJDO4IO+885cyK+uI+5DY9OU9UkDrg=,iv:56K11zOXjZP2XWcz9Xe9Wzqu1XhTfm9Fqd4xNETs2vU=,tag:IssVEyR9AJDZ18+RBvR63Q==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.3
diff --git a/pkgs/nvim/nvim/lua/configs/avante.lua b/pkgs/nvim/nvim/lua/configs/avante.lua
index 7b01a67..94e0846 100644
--- a/pkgs/nvim/nvim/lua/configs/avante.lua
+++ b/pkgs/nvim/nvim/lua/configs/avante.lua
@@ -10,7 +10,7 @@ local opts = {
 
     hyperbolic = {
       __inherited_from = "openai",
-      api_key_name = "DEEPSEEK_API_KEY",
+      api_key_name = "cmd:cat /run/secrets/hyperbolic_api_key",
       endpoint = "https://api.hyperbolic.xyz/v1",
       model = "deepseek-ai/DeepSeek-V3",
       temperature = 0,