Modules/Sops: Don't hardcode age keyFile path

2026-03-26 21:23:48 +01:00
parent 8c53eaf570
commit 7f22089765
2 changed files with 2 additions and 1 deletions
--- a/system/systemmodules/sops-nix/default.nix
+++ b/system/systemmodules/sops-nix/default.nix
@ -26,7 +26,7 @@ in {
      defaultSopsFile = ./secrets.yaml;

      age = {
-        keyFile = lib.mkDefault "/home/${username}/.secrets/age/age.key";
+        keyFile = lib.mkDefault "${config.users.users.${username}.home}/.secrets/age/age.key";
        generateKey = false;
        sshKeyPaths = [];
      };