From d4ad65317ecd9b17cd94ff40092f2606b43acdb2 Mon Sep 17 00:00:00 2001
From: TheWanderingCrow <contact@wanderingcrow.net>
Date: Mon, 3 Nov 2025 08:50:10 -0500
Subject: [PATCH] add openid to budget

---
 flake.lock                                |  8 ++++----
 modules/services/actualbudget/default.nix | 10 ++++++++++
 2 files changed, 14 insertions(+), 4 deletions(-)

diff --git a/flake.lock b/flake.lock
index 32226ed..5df41e9 100644
--- a/flake.lock
+++ b/flake.lock
@@ -387,11 +387,11 @@
         "nixpkgs": "nixpkgs_5"
       },
       "locked": {
-        "lastModified": 1762101890,
-        "narHash": "sha256-k7/cK8/6dA4V0qxXflpUgtsRg0gsdyUlPJlC5s3gsYA=",
+        "lastModified": 1762177792,
+        "narHash": "sha256-8m/oUyPw4RgctZXY/LVLBIRdQDVPoR3jK5mTGeA+7IY=",
         "ref": "refs/heads/master",
-        "rev": "a394862e50d0a26e25a247457ad6d739af18a105",
-        "revCount": 145,
+        "rev": "d56e91ea1ec05faff82c5f9be18bdb33c5a4fc15",
+        "revCount": 146,
         "type": "git",
         "url": "ssh://git@github.com/TheWanderingCrow/nix-secrets"
       },
diff --git a/modules/services/actualbudget/default.nix b/modules/services/actualbudget/default.nix
index cf5f2d0..2abac86 100644
--- a/modules/services/actualbudget/default.nix
+++ b/modules/services/actualbudget/default.nix
@@ -21,10 +21,20 @@ in
       "actualbudget/key" = {
         sopsFile = "${sopsFolder}/services.yaml";
       };
+      "actualbudget/client-id" = {
+        sopsFile = "${sopsFolder}/services.yaml";
+      };
+      "actualbudget/client-secret" = {
+        sopsFile = "${sopsFolder}/services.yaml";
+      };
     };
     templates."actualbudget-api-env".content = ''
       ACTUAL_SERVER_PASSWORD="${config.sops.placeholder."actualbudget/pass"}"
       API_KEY="${config.sops.placeholder."actualbudget/key"}"
+      ACTUAL_OPENID_DISCOVERY_URL="https://auth.wanderingcrow.net/.well-known/openid-configuration"
+      ACTUAL_OPENID_CLIENT_ID="${config.sops.placeholder."actualbudget/client-id"}"
+      ACTUAL_OPENID_CLIENT_SECRET="${config.sops.placeholder."actualbudget/client-secret"}"
+      ACTUAL_OPENID_SERVER_HOSTNAME="https://budget.wanderingcrow.net"
     '';
   };