From a9874f1b2a8408049f5b35105294e197b9101514 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Tom=C3=A1s=20Rivera?= <tomas.riveral@icloud.com>
Date: Sun, 26 Jul 2026 14:32:47 +0200
Subject: [PATCH] snapshot pre-autoupdate-2026-07-26T12-32-47Z

---
 modules/utilities/agenix.nix     |   7 +++++--
 modules/utilities/autoUpdate.nix |  29 +++++++++++++++++++++--------
 secrets/my-secret.age            |   5 -----
 secrets/ntfy.age                 | Bin 0 -> 328 bytes
 secrets/secrets.nix              |   2 +-
 5 files changed, 27 insertions(+), 16 deletions(-)
 delete mode 100644 secrets/my-secret.age
 create mode 100644 secrets/ntfy.age

diff --git a/modules/utilities/agenix.nix b/modules/utilities/agenix.nix
index 2011d7a..0ca0d21 100644
--- a/modules/utilities/agenix.nix
+++ b/modules/utilities/agenix.nix
@@ -6,8 +6,11 @@
   age.identityPaths = [
     "/home/tomasr/.ssh/id_ed25519"
   ];
-    age.secrets.my-secret = {
-      file = ../../secrets/my-secret.age;
+    age.secrets.ntfy = {
+      file = ../../secrets/ntfy.age;
+      owner = "tomasr";
+      group = "users";
+      mode = "0400";
     };
   };
 }
diff --git a/modules/utilities/autoUpdate.nix b/modules/utilities/autoUpdate.nix
index 3c4fa78..290c8a2 100644
--- a/modules/utilities/autoUpdate.nix
+++ b/modules/utilities/autoUpdate.nix
@@ -1,5 +1,8 @@
 {self, ...}: {
-  flake.nixosModules.autoUpdate-laptop = {pkgs, ...}: {
+  flake.nixosModules.autoUpdate-laptop = {pkgs, config, ...}: {
+    age.secrets.ntfy = {
+      file = ../../secrets/ntfy.age;
+    };
     # Ensure your script is available system-wide
     environment.systemPackages = [
       self.packages.${pkgs.system}.custom-autoupdate-laptop
@@ -12,6 +15,9 @@
       description = "NixOS flake auto update";
 
       serviceConfig = {
+        Environment = [
+          "NTFY_SECRET=${config.age.secrets.ntfy.path}"
+        ];
         Type = "oneshot";
 
         ExecStart = "/run/current-system/sw/bin/custom-autoupdate";
@@ -98,11 +104,13 @@
       runtimeInputs = with pkgs; [
         git
         nixos-rebuild
-        matrix-commander-rs
+        curl
         libnotify
       ];
 
       text = ''
+        # shellcheck disable=SC1090
+        source "$NTFY_SECRET"
         set -e
 
         FLAKE_DIR="/home/tomasr/nixos"
@@ -128,9 +136,11 @@
 
             notify-send "Flake autoupdate" "Rebuild OK"
 
-            matrix-commander-rs --verbose -m "Flake rebuild succesfull.<br><a href=\"https://matrix.to/#/@notificationbot_0000:matrix.org\">@notificationbot_0000</a>" \
-              --html \
-              -r "\!BXRRokBmEdNOyYdfOF:matrix.org"
+            curl \
+              -u ":$NTFY_TOKEN" \
+              -d "Flake rebuild successful" \
+              -H "Title: Flake autoupdate" \
+              "$NTFY_SERVER/Alerts"
             else
               notify-send "Flake autoupdate" "No changes"
               git -C "$FLAKE_DIR" push
@@ -141,9 +151,12 @@
 
           notify-send -u critical "Flake autoupdate" "FAILED"
 
-          matrix-commander-rs --verbose -m "Flake rebuild failed.<br>Error: <pre>$ERROR_MSG</pre><br><a href=\"https://matrix.to/#/@notificationbot_0000:matrix.org\">@notificationbot_0000</a>" \
-            --html \
-            -r "\!BXRRokBmEdNOyYdfOF:matrix.org"
+          curl \
+            -u ":$NTFY_TOKEN" \
+            -d "Flake rebuild failed. Error: $ERROR_MSG" \
+            -H "Title: Flake autoupdate FAILED" \
+            -H "Priority: urgent" \
+            "$NTFY_SERVER/Alerts"
 
           git -C "$FLAKE_DIR" reset --hard "pre-autoupdate-$TIME"
         fi
diff --git a/secrets/my-secret.age b/secrets/my-secret.age
deleted file mode 100644
index e58b842..0000000
--- a/secrets/my-secret.age
+++ /dev/null
@@ -1,5 +0,0 @@
-age-encryption.org/v1
--> ssh-ed25519 pcPqbA GG04OY1WKDS1Rc1aRhODZShiWZfdw0cDHN+s/8XqDzA
-9/SS7ZOQDh1H+27JT7fTi3GV5C19CjIPR9i4jjKjM9E
---- Irxkq9bamw6q0qsEZHlym6pC0gDxpty+bbg14OAgkxQ
-ëĶ‘²ó<…¥ɨ
¬!†K!þ‘L;Ú~´]¶Fñ»Ak‰õwÐy62ϽK<B‚{P=,@q-WÑUUh|c]ZÝœsR‰²›¨3%[â´¾eC WË2M`Ú#ìõ3ìSÇ
pû˜³tZEtbK4{×Ñ¡bÄ3QuhzȘ(òË ¬%¹ZÒ»@ÇI[£_².˜ð
\ No newline at end of file
diff --git a/secrets/ntfy.age b/secrets/ntfy.age
new file mode 100644
index 0000000000000000000000000000000000000000..95ecee6a62d25fecbcd60c13b1fdbca3bc690560
GIT binary patch
literal 328
zcmV-O0k{5PXJsvAZewzJaCB*JZZ2<fXD@a!3N1b$b8~1dWn?lnH8D9LaAQz$VnHBE
zQA1R0S~OErRboVVR%Tc;WK(HlHBw?~IBim4bZ;w4ZZS(XNi%V0Gh+%hD=<PdNK;EU
zNKb54I5JjqaW+I&N@rAUM{-wrO>$*dS5P!dF*s#+X?F@OEiE8$byzt^a&$H^YcDk`
zVPSMqVre%`LNP)sZ+dD-ZBsQzXftd@cve$zR!Iuj$YX%&a@8#g!?o?jQ9{p>3=M~D
zTuc7GdR#m5h~MF4AKM3Mw%L?cD0mQC0P<eA!Q5~DQeWo&mo5rqIuwDZ5h77lQ<T=q
zZBN5}@wCGI(*)MO_qO7JREG$}@aKFVGn4G%o!uaDf(4IQDSf*9dss)#5zN0?NHQzJ
aE!*NRKTB@07Fo1PQMik4kI(+tkE00bCxz_*

literal 0
HcmV?d00001

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index bdd6528..4eb7bc6 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -2,7 +2,7 @@ let
   myKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC6WNm4YAQO85j0aNQkKSH7QnmhgzKA4hA2ggi6cDyKk tomasr@nixos";
 in
 {
-  "my-secret.age".publicKeys = [
+  "ntfy.age".publicKeys = [
     myKey
   ];
 }