Configure sops-nix

2024-05-02 01:20:46 +02:00 · 2024-05-02 01:20:46 +02:00 · 434ec48118
parent df7cac52b0
commit 434ec48118
1 changed files with 10 additions and 0 deletions
--- a/lib/configuration.nix
+++ b/lib/configuration.nix
@ -28,6 +28,16 @@
        vmVariantWithBootLoader = vmConfig;
      };

+    sops = {
+      defaultSopsFile = ../secrets/global.yaml;
+
+      age = {
+        sshKeyPaths = [
+          "/etc/ssh/ssh_host_ed25519_key"
+        ];
+      };
+    };
+
    boot.loader = {
      efi = {
        canTouchEfiVariables = true;