From 48d3f66855fb57379351fb9a458a95cf28522916 Mon Sep 17 00:00:00 2001
From: stuebinm
Date: Tue, 11 Apr 2023 18:37:20 +0200
Subject: manage secrets with sops

not sure if i like this yet, but it seems worth trying it out.
---
 flora/configuration.nix | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'flora/configuration.nix')

diff --git a/flora/configuration.nix b/flora/configuration.nix
index 3eaaa08..954e5e6 100644
--- a/flora/configuration.nix
+++ b/flora/configuration.nix
@@ -19,6 +19,10 @@
   boot.loader.grub.version = 2;
   boot.loader.grub.devices = [ "/dev/sda" ];
 
+  sops.defaultSopsFile = ../secrets/flora.yaml;
+  # This will automatically import SSH keys as age keys
+  sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
+
   networking = {
     hostName = "flora";
     
-- 
cgit v1.2.3