Modules/Sops: Set SOPS_AGE_KEY_FILE for "sops edit secrets.yaml"

2025-07-09 18:40:37 +02:00
parent 2578d64259
commit 507ac0f8bd
1 changed files with 5 additions and 0 deletions
--- a/system/modules/sops-nix/default.nix
+++ b/system/modules/sops-nix/default.nix
@ -17,6 +17,11 @@ in {
      ssh-to-age
    ];

+    environment.variables = {
+      # Set this environment variable to make "sops edit secrets.yaml" work
+      SOPS_AGE_KEY_FILE = config.sops.age.keyFile;
+    };
+
    sops = {
      defaultSopsFile = ./secrets.yaml;