manage secrets with sops

not sure if i like this yet, but it seems worth trying it out.

1 files changed, 4 insertions, 0 deletions

diff --git a/flora/configuration.nix b/flora/configuration.nix
index 3eaaa08..954e5e6 100644
--- a/flora/configuration.nix
+++ b/flora/configuration.nix
@@ -19,6 +19,10 @@
   boot.loader.grub.version = 2;
   boot.loader.grub.devices = [ "/dev/sda" ];
 
+  sops.defaultSopsFile = ../secrets/flora.yaml;
+  # This will automatically import SSH keys as age keys
+  sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
+
   networking = {
     hostName = "flora";