christoph/flake-nixinator
1
Fork 0
Code Activity

Modules/Sops: Update secrets

Browse Source
This commit is contained in:
Christoph Urlacher
2025-07-12 16:46:09 +02:00
parent ab868d751a
commit 0727dc25ba
2 changed files with 13 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
home/christoph/default.nix
View File

@ -302,6 +302,11 @@
".ssh/id_ed25519.pub".text = "${publicKeys.${username}.ssh}";
".secrets/age/age.pub".text = "${publicKeys.${username}.age}";
# Because we can't access the absolute path /run/secrets/... we have to symlink.
# This will create a chain of links leading to /run/secrets/... without /nix/store
# containing the secret contents.
# ".config/docker/key.json".source = config.lib.file.mkOutOfStoreSymlink "${nixosConfig.sops.secrets.docker-key.path}";
# The sops config specifies what happens when we call sops edit
".sops.yaml".text = ''
keys: