From 35e0704b82951d2b0b43f3d406a39c86adc141ac Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Leonardo=20Eug=C3=AAnio?= <lelgenio@disroot.org>
Date: Fri, 2 Feb 2024 21:03:34 -0300
Subject: [PATCH] agenix: fix secrets not being opened on boot

Agenix runs before some partitions are mounted,
one option is to mark those partitions are need for boot:

{
  fileSystems."/home".neededForBoot = true;
}

I choose to copy my ssh key to the root user's HOME,
which is not in a separate partition.
---
 system/secrets.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/system/secrets.nix b/system/secrets.nix
index 776ee6e..0d0870b 100644
--- a/system/secrets.nix
+++ b/system/secrets.nix
@@ -1,6 +1,6 @@
 { pkgs, ... }: {
   age = {
-    identityPaths = [ "/home/lelgenio/.ssh/id_rsa" ];
+    identityPaths = [ "/root/.ssh/id_rsa" ];
     secrets.lelgenio-cachix.file = ../secrets/lelgenio-cachix.age;
     secrets.monolith-gitlab-runner-thoreb-itinerario-registrationConfigFile.file =
       ../secrets/monolith-gitlab-runner-thoreb-itinerario-registrationConfigFile.age;