kanidm: add provisioning

hosts/library/ai.nix

@@ -1,13 +1,12 @@
 {
-  inputs,
   config,
   pkgs,
   ...
 }:
 
 {
-  age.secrets."files/services/open-webui/envfile" = {
-    file = "${inputs.secrets}/files/services/open-webui/envfile.age";
+  age.secrets.open-webui-envfile = {
+    rekeyFile = ./secrets/open-webui-envfile.age;
   };
 
   services.open-webui = {
@@ -30,7 +29,7 @@
         OPENID_PROVIDER_URL = "https://auth.vimium.com/oauth2/openid/${clientId}/.well-known/openid-configuration";
         OPENID_REDIRECT_URI = "${publicUrl}/oauth/oidc/callback";
       };
-    environmentFile = config.age.secrets."files/services/open-webui/envfile".path;
+    environmentFile = config.age.secrets.open-webui-envfile.path;
   };
 
   modules.services.borgmatic.directories = [