nixos-config/system/secrets.nix
Leonardo Eugênio 35e0704b82 agenix: fix secrets not being opened on boot
Agenix runs before some partitions are mounted,
one option is to mark those partitions are need for boot:

{
  fileSystems."/home".neededForBoot = true;
}

I choose to copy my ssh key to the root user's HOME,
which is not in a separate partition.
2024-02-02 21:03:34 -03:00

15 lines
728 B
Nix

{ pkgs, ... }: {
age = {
identityPaths = [ "/root/.ssh/id_rsa" ];
secrets.lelgenio-cachix.file = ../secrets/lelgenio-cachix.age;
secrets.monolith-gitlab-runner-thoreb-itinerario-registrationConfigFile.file =
../secrets/monolith-gitlab-runner-thoreb-itinerario-registrationConfigFile.age;
secrets.gitlab-runner-thoreb-telemetria-registrationConfigFile.file =
../secrets/gitlab-runner-thoreb-telemetria-registrationConfigFile.age;
secrets.rainbow-gitlab-runner-thoreb-itinerario-registrationConfigFile.file =
../secrets/rainbow-gitlab-runner-thoreb-itinerario-registrationConfigFile.age;
secrets.monolith-nix-serve-privkey.file =
../secrets/monolith-nix-serve-privkey.age;
};
}