feat: sentinella: update

nixos/system/hectic-lab/sentinèlla.nix

@@ -5,7 +5,7 @@
   domain,
   sslOpts,
   ...
-}: { config, ... }: let
+}: { ... }: let
   port = 5869;
 in {
   hectic.services."sentinèlla" = {
@@ -18,17 +18,11 @@ in {
       peersDns            = "peers.${domain}";
       peersPort           = port;
       pollingIntervalSec  = 60;
-      # TG_TOKEN= and TG_CHAT_ID= are set via this environment file
-      # Add the following to sus/hectic-lab.yaml under sentinèlla/watcher/:
-      #   environment: |
-      #     TG_TOKEN=<bot-token>
-      #     TG_CHAT_ID=<chat-id>
-      environmentFile = config.sops.secrets."sentinèlla/watcher/environment".path;
+      # TG_TOKEN= and TG_CHAT_ID= are read from sus/sentinella-default.yaml
+      # (auto-declared by the module as sops.secrets."sentinèlla/watcher/environment")
     };
   };
 
-  sops.secrets."sentinèlla/watcher/environment" = {};
-
   services.nginx = {
     virtualHosts."probe.${domain}" = sslOpts // {
       forceSSL = true;