update key to be persisted

.sops.yaml

@@ -1,6 +1,6 @@
 keys:
   - &user_roy age13ldedhh6ymava0d5dn54860a3f799gufknre9lfegegjt9ytes2qq5qgmr
-  - &system age1c94x3h0jj3x7zvd9rxxed7nqlckzwyttgagznzzfp3dwynpuj92snqaljm
+  - &system age1h672rl8yp4utgqx0ndxv2wtg5fw69vznyxa2p699rq4ku6x2afrslt7x2u
 creation_rules:
   - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
     key_groups:

configuration.nix

@@ -34,7 +34,7 @@
 
   # SOPS config
   sops = {
-    age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
+    age.sshKeyPaths = [ "/persist/etc/ssh/ssh_host_ed25519_key" ];
     age.keyFile = "/var/lib/sops-nix/key.txt";
     age.generateKey = true;
     defaultSopsFormat = "json";

secrets/networking.yaml

@@ -4,20 +4,20 @@ sops:
         - recipient: age13ldedhh6ymava0d5dn54860a3f799gufknre9lfegegjt9ytes2qq5qgmr
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnVlZWelQ1b1IwUW9UL0dE
-            emRiSUJtQVJvTk93S292dU9nV29xTGExTjNZCmJTTnVPSitORytSOTRmQzJSMmZE
-            RDZzVWZyMzVtbVpnQXNUZTRWeUZ4WTAKLS0tIERRNWM0SkFkMVpxc1pqeERBWEll
-            KzhENDJUTUltSjFzQXJaUENQeEJBRkUKJwI1N61+w1nuzrDQjPfeaJ0LV3+JAciP
-            gpZbmldXKuqeGV/g4imVOeK962Xv8ujGCNWmg7NPLkrJfm1yWILx2A==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEQUdXSCsrdyt5d3BTUnI1
+            Mml0UlNvYTMySHhWcXdrZkRBZXUxSGxpZFE4ClNMWFNST0tNSlZ6Z3FJM0NkS2RQ
+            NXpTQ3NzQThCbmVOcVBmZTRjaERzcEEKLS0tIEFDbkxSOUMyWHJFd0Rxa3k5Sm5K
+            K2dyRTh6TTlHNUhSM2x5U0pWVjZSUVEKUetKBgQi9p5rYMIylJVWzwBEYVgMM3vj
+            PRtwj34hzVKjt/GBrJj1cpl2VxrQ9K8ZOGx6sC7daW2NOO8OpkbIyQ==
             -----END AGE ENCRYPTED FILE-----
-        - recipient: age1c94x3h0jj3x7zvd9rxxed7nqlckzwyttgagznzzfp3dwynpuj92snqaljm
+        - recipient: age1h672rl8yp4utgqx0ndxv2wtg5fw69vznyxa2p699rq4ku6x2afrslt7x2u
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3WmJFcHlpb21oSHdNUVls
-            aU92RnBXTzNycVVFNWM0TS9VRTFndkl0NTJvCmUzR1A2UW04WnFOUmpNY2dVVEV5
-            NHkzVE9Hd3ZSYmRhcG9qU1I1bVhacncKLS0tIGJSNWQ1N1JIaDBWVGNRZmVCZGox
-            aFdpazM4bmxrMy8wcmN3WVJnakJiK1EKWatf0uDN4iHVyj7cC11i/WUynWk68gcr
-            0ZQ1c2IB9YIw/6A1XvqDdv4edRpLkacE95sISdq1zeX7InpcEuf1LA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXMGdDdjBTSjlhd0loNjFj
+            SUZnWjJvRkZQUzZObjNFWDZmU0RWN3RjcWdzCnAzSTA0cWxnZVcvVTZXL2xrVDNX
+            bjVzV0FWV0U4WHE0RmllS293blVCdk0KLS0tIEgvc2ZtTE5nQTYzSVVUeEkxR3NI
+            RjkzM1VZenF5UnZYMHhISDBRT21QUjAKUZAqk4ZRVelUQYCenw7nzVFL1/59LowL
+            60SyiYAnm+pxAyAJW6merHY+rJ7tZZhyZEi9ZV7KvOepQA9MFXjBmQ==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-06-10T17:04:49Z"
     mac: ENC[AES256_GCM,data:O4oXCUTrSDOLfGYL9sLb4mLBhoczFYMeao+0ooYN6McxzyYmwhiB3IPJez0UWL7Z7hRZXhdOivIntCP8Q8r0KpRNhOk8n+gkYH2xRJUaBysFA3tk4hFmd0L3rpWwhlZUhFMZan2fB/kPRXofgAdHJ1oY+hr1+C9vezwp1cIl320=,iv:4F1zhcwXKJHPTDtaMfOwapvmv6UJm1lPNHiuPh2ekyw=,tag:VABw1BEXz0YEts/YVzuUZg==,type:str]

secrets/roy.json

@@ -4,11 +4,11 @@
 		"age": [
 			{
 				"recipient": "age13ldedhh6ymava0d5dn54860a3f799gufknre9lfegegjt9ytes2qq5qgmr",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPN2EzcWYwV2Y4Z09xaU1U\nVUdKT1NYdjIzbGJoNFd1ZFhXaXJSbHNFc2xVCnRMdnJLamtjVVlYMy9LUnRVdVRH\nZkRtV2ZhSFI5UG96RGdEY0Z0R0x5Z0UKLS0tIFpLZ1FHeDNPejQrM3JaMSttQVJQ\nTityMnJIakpIWDJVTWJjbnppYVZUVXMKLxultaWbv6Aaw8mYupypGXs1foAsY7gb\nuqdrs5+sGaeMVOKAef1mge0Ja03Lo27vm2hschXshV13WbYay3P17Q==\n-----END AGE ENCRYPTED FILE-----\n"
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2a2xJSjYrck5TcjR2d2lB\nYVR1dVZFN0EvUVo0SC9hMTZ3K2wrVHFOYW5JCkduQ2VWNXJVMmtqNGU5MThWWUt6\nZDM4Q0ZvaThXaFBMazlLb25qNzFINjQKLS0tIEpFbURNVXpsSGM3ZmZ1ZndDSzBV\nb0wxWmxYNVBwcHRIRVkzU3Y3d2Jyc0EK7AcQ6lG7Uz4tSs+M7luPXJ0VsCEnWg3w\nmOVmMEq2MU/Tc9otredFBQjxc3ax+0RBGRqvsY4N0Ijn2UGd6q5tiA==\n-----END AGE ENCRYPTED FILE-----\n"
 			},
 			{
-				"recipient": "age1c94x3h0jj3x7zvd9rxxed7nqlckzwyttgagznzzfp3dwynpuj92snqaljm",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4T3l2RHp5Uk5IVWkvMzhI\nSnpoeGsxWG95UzVuWldocFIvMDBaUnpuM0ZBCndwZjliSjhJS0wyOHRwMFdURWpX\nNFdWV09DZ2lYcm53MTc2dVMrOTVxTWsKLS0tIFRvRWIvczJFM1FEQjY2b0NMcm1R\nOWlYcmtuOG1Gek1HZTlpMXlPNW10SEkKhMMlBcRGjp+Wzt2iT6B4p9YSrbEaGH+9\nkrTLJUptK3UYj4yNyoTsiqX14M6IFV2ymhq6mM7njxuFvSuBu3NuMA==\n-----END AGE ENCRYPTED FILE-----\n"
+				"recipient": "age1h672rl8yp4utgqx0ndxv2wtg5fw69vznyxa2p699rq4ku6x2afrslt7x2u",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0L1V5bndJYjZWOFhBc2tB\nY1oyU3pGUWttNG4zVi9WY01OdjdNZnB6MGlBClBxcGFjejBlTUY3VXpTRC82aENJ\nM2RaWVd5ZkliOHBNb3IyUDQwZzVRZVUKLS0tIFZrOE1VMkhKR2ZFWHBUdW9iblZS\nNFdlcXM3Qmw4L0djK3NKaEhkM1FaZ1kKQ1+8rkbH6vvoSIwMWwt7xoPKO8wM2VrW\nQxmFJ5bJBwALzXtMGI3Erhh4hgPMEc2cqvDWawIm4nNLq5ketK1/Wg==\n-----END AGE ENCRYPTED FILE-----\n"
 			}
 		],
 		"lastmodified": "2025-06-10T15:34:46Z",