fix(nix): sops user password not decrypting on boot
Caused by the age key not being on the root filesystem. I have moved to the nix repository as of now
This commit is contained in:
parent
eb2520c79e
commit
c128206e2b
2 changed files with 3 additions and 2 deletions
1
.gitignore
vendored
1
.gitignore
vendored
|
|
@ -3,3 +3,4 @@ result
|
||||||
*.png
|
*.png
|
||||||
*.jpg
|
*.jpg
|
||||||
*.bak
|
*.bak
|
||||||
|
age.txt
|
||||||
|
|
|
||||||
|
|
@ -23,7 +23,7 @@ in
|
||||||
};
|
};
|
||||||
|
|
||||||
environment.sessionVariables = {
|
environment.sessionVariables = {
|
||||||
SOPS_AGE_KEY_FILE = "/persist/secrets/age.txt";
|
SOPS_AGE_KEY_FILE = "/etc/nixos/secrets/age.txt";
|
||||||
};
|
};
|
||||||
|
|
||||||
programs = {
|
programs = {
|
||||||
|
|
@ -100,7 +100,7 @@ in
|
||||||
settings.KbdInteractiveAuthentication = false;
|
settings.KbdInteractiveAuthentication = false;
|
||||||
};
|
};
|
||||||
|
|
||||||
sops.age.keyFile = "/persist/secrets/age.txt";
|
sops.age.keyFile = "/etc/nixos/secrets/age.txt";
|
||||||
|
|
||||||
environment.etc.hosts.mode = "0644";
|
environment.etc.hosts.mode = "0644";
|
||||||
nix.settings.experimental-features = [ "nix-command" "flakes" ];
|
nix.settings.experimental-features = [ "nix-command" "flakes" ];
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue