From 6c679247a82357bedda93384330cc13993ba8972 Mon Sep 17 00:00:00 2001
From: Brian Hicks <brian@brianthicks.com>
Date: Sat, 26 Sep 2020 05:55:22 -0500
Subject: [PATCH] pull the password out of the file

I know it's still in the store, which I'm not *super* happy about... but I
don't see a better way of doing this. I have bcrypted it locally, though,
which Concourse allows.
---
 .gitignore              | 1 +
 gitea/configuration.nix | 3 ++-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/.gitignore b/.gitignore
index c6de971..9faadea 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,4 +1,5 @@
 /gitea/backups-*.key
+/gitea/concourse_password
 /gitea/result
 /gitea/smtp_password
 /result
diff --git a/gitea/configuration.nix b/gitea/configuration.nix
index a794d22..2dbf132 100644
--- a/gitea/configuration.nix
+++ b/gitea/configuration.nix
@@ -220,7 +220,8 @@ in {
       ];
       environment = {
         CONCOURSE_CLUSTER_NAME = "bytes.zone";
-        CONCOURSE_ADD_LOCAL_USER = "brian:test";
+        CONCOURSE_ADD_LOCAL_USER =
+          "brian:${builtins.readFile ./concourse_password}";
         CONCOURSE_MAIN_TEAM_LOCAL_USER = "brian";
         CONCOURSE_EXTERNAL_URL = "https://ci.bytes.zone";