declare sops key directory generate from ssh

2025-04-29 09:10:16 -05:00
parent b78fa2c4c2
commit ba258962ff
2 changed files with 10 additions and 3 deletions
@@ -19,7 +19,14 @@ in

  # Secret Management
  sops = {
-    age.keyFile = "/etc/sops/age/keys.txt";
+    # make sure that the age key is generated from the persisted host key
+    age = {
+      sshKeyPaths = [ "/persist/etc/ssh/ssh_host_ed25519_key" ];
+      keyFile = "/persist/var/lib/sops-nix/key.txt";
+      generateKey = true;
+    };
+
+    # I prefer to use json format for the secrets
    defaultSopsFormat = "json";

    secrets = {