feat(vikunja): enable sso

machines/bomba/secrets.nix

@@ -26,6 +26,7 @@
         yamtrack_env = default;
         authentik_env = default;
         vaultwarden_env = default;
+        vikunja_env = default;
       };
     };
 }

machines/bomba/services/vikunja.nix

@@ -1,9 +1,12 @@
-{ ... }:
+{ config, ... }:
 {
   services.vikunja = {
     enable = true;
     port = 8011;
     frontendScheme = "http";
     frontendHostname = "vikunja.patrickcanal.it";
+    environmentFiles = [
+      config.sops.secrets.vikunja_env.path
+    ];
   };
 }