Sops based on ssh keys

This commit is contained in:
Aleksandr Lebedev 2025-07-30 18:51:51 +02:00
parent ec740591b3
commit 1b6310a742
16 changed files with 115 additions and 78 deletions

View file

@ -14,7 +14,8 @@ in {
environment.systemPackages = with pkgs; [sops];
sops.defaultSopsFile = ./secrets/secrets.yaml;
sops.defaultSopsFormat = "yaml";
sops.age.keyFile = keyPath;
sops.age.sshKeyPaths = ["/etc/ssh/ssh_host_ed25519_key" "/home/kylekrein/.ssh/id_ed25519"];
#sops.age.keyFile = keyPath;
# This will generate a new key if the key specified above does not exist
sops.age.generateKey = true;
}