diff --git a/hosts/lobtop/home.nix b/hosts/lobtop/home.nix index 803a42a7..7f091a4a 100644 --- a/hosts/lobtop/home.nix +++ b/hosts/lobtop/home.nix @@ -1,3 +1,30 @@ -{pkgs, ...}: { +{ + config, + pkgs, + ... +}: { rc.gpg.enable = true; + + age.secrets.otel-token = { + file = ./secrets/otel-token.age; + }; + + programs.claude-code.settings.env = { + CLAUDE_CODE_USE_BEDROCK = "1"; + AWS_REGION = "us-west-2"; + AWS_PROFILE = "bedrock"; + ANTHROPIC_DEFAULT_SONNET_MODEL = "us.anthropic.claude-sonnet-4-6"; + ANTHROPIC_DEFAULT_HAIKU_MODEL = "us.anthropic.claude-haiku-4-5-20251001-v1:0"; + CLAUDE_CODE_ENABLE_TELEMETRY = "1"; + OTEL_RESOURCE_ATTRIBUTES = "user.email=corey.johns@lob.com,user.name=Corey_Johns"; + OTEL_EXPORTER_OTLP_ENDPOINT = "https://lob.getdx.net/api/otel"; + OTEL_EXPORTER_OTLP_PROTOCOL = "http/json"; + OTEL_LOGS_EXPORTER = "otlp"; + OTEL_METRICS_EXPORTER = "otlp"; + OTEL_METRIC_EXPORT_INTERVAL = "60000"; + }; + + programs.zsh.initContent = '' + export OTEL_EXPORTER_OTLP_HEADERS="Authorization=Bearer $(cat ${config.age.secrets.otel-token.path})" + ''; } diff --git a/hosts/lobtop/secrets/otel-token.age b/hosts/lobtop/secrets/otel-token.age new file mode 100644 index 00000000..d3c63cbc --- /dev/null +++ b/hosts/lobtop/secrets/otel-token.age @@ -0,0 +1,7 @@ +age-encryption.org/v1 +-> ssh-ed25519 j0kEgQ ylhGxxvyXw92cD8QYgEb6pXzsEXU5cC5clvxSZ3TKwE +tsi3XqfiqpmPM4uQz0v/+PZj/PUioLrJ2zPaDNxQO0g +-> ssh-ed25519 +LEAUA PgwK13XvqZqov1GsfhVTtJK+vgkhRq5N3s5CUs4MkRk +XhkEbJled2EVoUDsArIb2e2jGKYF4uYvfmTf+5C9Tt8 +--- aCpukO8QTIYKpOwec+MPL18XFa9dmBTnXWvht5Cs68E +Sð¡Ã¢ÌJöC~q²Fq“ÎOÙ#0u˜åþ!Û?'ÆÍP¶.ï3d1Œ±ƒ�Å0Ðr–ª5K &CcvB>æn \ No newline at end of file diff --git a/lib/secrets.nix b/lib/secrets.nix index ad8bf93d..52cb6e1c 100644 --- a/lib/secrets.nix +++ b/lib/secrets.nix @@ -3,12 +3,14 @@ let globalSecrets = import ./secrets/default.nix; glyphSecrets = import ./secrets/glyph.nix; + lobtopSecrets = import ./secrets/lobtop.nix; sporeSecrets = import ./secrets/spore.nix; zetaSecrets = import ./secrets/zeta.nix; homeSecrets = import ./secrets/home.nix; in globalSecrets // glyphSecrets + // lobtopSecrets // sporeSecrets // zetaSecrets // homeSecrets diff --git a/lib/secrets/lobtop.nix b/lib/secrets/lobtop.nix new file mode 100644 index 00000000..1e855a5b --- /dev/null +++ b/lib/secrets/lobtop.nix @@ -0,0 +1,5 @@ +let + keys = with (import ../keys.nix); [home deploy]; +in { + "hosts/lobtop/secrets/otel-token.age".publicKeys = keys; +}