From 6b5f1bb59c0965ce90cf17210b369ecf3f7a6643 Mon Sep 17 00:00:00 2001
From: Noah Pederson <noah@packetlost.dev>
Date: Thu, 5 Mar 2026 13:40:14 -0600
Subject: [PATCH] Update Pocket ID to unstable 2.x release

---
 host-specific/misaki/services.nix    |  8 ++++++++
 secrets/pocket-id-encryption-key.age | 11 +++++++++++
 secrets/secrets.nix                  |  1 +
 3 files changed, 20 insertions(+)
 create mode 100644 secrets/pocket-id-encryption-key.age

diff --git a/host-specific/misaki/services.nix b/host-specific/misaki/services.nix
index b32843a..fed1e81 100644
--- a/host-specific/misaki/services.nix
+++ b/host-specific/misaki/services.nix
@@ -495,11 +495,19 @@
     ];
   };
 
+  age.secrets.pocket-id-encryption-key = {
+    file = ../../secrets/pocket-id-encryption-key.age;
+    owner = "pocket-id";
+    group = "pocket-id";
+    mode = "600";
+  };
   services.pocket-id = {
     enable = true;
+    package = unstable.pocket-id;
     settings = {
       TRUST_PROXY = true;
       APP_URL = "https://id.ngp.computer";
+      ENCRYPTION_KEY_FILE = "${config.age.secrets.pocket-id-encryption-key.path}";
     };
     dataDir = "/srv/shokuhou/applications/pocket-id";
   };
diff --git a/secrets/pocket-id-encryption-key.age b/secrets/pocket-id-encryption-key.age
new file mode 100644
index 0000000..69a26fa
--- /dev/null
+++ b/secrets/pocket-id-encryption-key.age
@@ -0,0 +1,11 @@
+age-encryption.org/v1
+-> ssh-ed25519 e6zq8g BPoqhqE57dj2sdxbZha4USEScqPg9DRVLBNHDptw3zU
+isMV0nXeG5qOb/haG2xcfApHicpQYBojAeBQSR1bkPc
+-> ssh-ed25519 QBbeMw VzzDYc1KFv/GzF8uCZuzBznp2V1PClYjt8A0/6cs/1o
+6xItDlFIDVEJDbxgnd4qne4VGFLjpM9mtzXP87iW/VY
+-> ssh-ed25519 Wv0Urw ZY3Mt4pblF3AjqRAv/hQj9nxkfGfDvlp3SuKstJ7nH8
+l4qnukc6+M8hpqxpH39TI86v3xBO/wS5tHxedqqHsKM
+-> ssh-ed25519 WVNCXA b7+KQUNa2N7FhXPZXxfJBAylsqVa7O1Qw6vp9mHQKVg
+mAmCeWfXUGeY69QyvvE4BpzpYgq7enTdHAvyxUHxhzA
+--- TvP2XhoblWLikIIXw+lR0oATTa8CTWgCrrCaQj3XDs8
+r��井K3]I�5�ʎSq�Yu���P����C�����\���tI�YMg�`�h���xQj\f�h�n2���
\ No newline at end of file
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 5f07301..da008a5 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -31,4 +31,5 @@ in
   "garage_metrics_secret.age".publicKeys = [ misaki ] ++ noah;
   "victoria-secret.age".publicKeys = [ misaki ] ++ noah;
   "obsidian-auth-token.age".publicKeys = [ misaki ] ++ noah;
+  "pocket-id-encryption-key.age".publicKeys = [ misaki ] ++ noah;
 }
-- 
2.51.2