From 61151c0ad9143fc308643269ed33a32e63ccb951 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=B6rg=20Thalheim?= <joerg@thalheim.io>
Date: Wed, 13 Sep 2023 23:46:21 +0200
Subject: [PATCH] use LoadCredential for worker-password-file

---
 nix/worker.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/nix/worker.nix b/nix/worker.nix
index 29240e0..b24f4c6 100644
--- a/nix/worker.nix
+++ b/nix/worker.nix
@@ -57,9 +57,10 @@ in
       environment.PYTHONPATH = "${python.withPackages (_: [cfg.package])}/${python.sitePackages}";
       environment.MASTER_URL = ''tcp:host=localhost:port=9989'';
       environment.BUILDBOT_DIR = buildbotDir;
-      environment.WORKER_PASSWORD_FILE = cfg.workerPasswordFile;
 
       serviceConfig = {
+        LoadCredential = [ "worker-password-file:${cfg.workerPasswordFile}" ];
+        Environment = [ "WORKER_PASSWORD_FILE=%d/worker-password-file" ];
         Type = "simple";
         User = "buildbot-worker";
         Group = "buildbot-worker";