From c3c16e4b0fc4e72e96cae2cb29c10697514ade24 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Gutyina=20Gerg=C5=91?= <gutyina.gergo.2@gmail.com>
Date: Thu, 8 Jan 2026 01:09:16 +0100
Subject: [PATCH] nixos/pocket-id: set ENCRYPTION_KEY in test

This variable will be required in version 2.
---
 nixos/tests/pocket-id.nix | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/nixos/tests/pocket-id.nix b/nixos/tests/pocket-id.nix
index 7f2a4a8255f8..bbef7e3c6dcf 100644
--- a/nixos/tests/pocket-id.nix
+++ b/nixos/tests/pocket-id.nix
@@ -1,5 +1,9 @@
-{ lib, ... }:
+{ pkgs, lib, ... }:
 
+let
+  # !!! Don't do this with real keys. The /nix store is world-readable!
+  ENCRYPTION_KEY = pkgs.writeText "pocket-id-encryption-key" "SUeAyRRFZ1uf03ClOE+o++BVENSE/Ptb9YFRF2Sk+zM=";
+in
 {
   name = "pocket-id";
   meta.maintainers = with lib.maintainers; [
@@ -16,6 +20,9 @@
           settings = {
             PORT = 10001;
           };
+          credentials = {
+            inherit ENCRYPTION_KEY;
+          };
         };
       };
 
@@ -32,6 +39,9 @@
             DB_PROVIDER = "postgres";
             DB_CONNECTION_STRING = "host=/run/postgresql user=${username} database=${username}";
           };
+          credentials = {
+            inherit ENCRYPTION_KEY;
+          };
         };
 
         services.postgresql = {