Deploy root's sops key by default

machines/atlas/configuration.nix

@@ -3,16 +3,12 @@
     facter.reportPath = ./facter.json;
     system.stateVersion = "23.05";
     users.users.root.openssh.authorizedKeys.keys = config.pim.ssh.keys.pim ++ config.pim.ssh.keys.niels;
+    pim.k3s.serverAddr = "https://jefke.dmz:6443";
 
     deployment = {
       targetHost = "atlas";
       targetUser = "root";
       tags = ["server" "kubernetes"];
     };
-
-    pim = {
-      sops-nix.usersWithSopsKeys = ["root"];
-      k3s.serverAddr = "https://jefke.dmz:6443";
-    };
   };
 }

machines/gamepc/configuration.nix

@@ -6,7 +6,7 @@
   config = {
     pim = {
       cinnamon.enable = true;
-      sops-nix.usersWithSopsKeys = ["root" "pim"];
+      sops-nix.usersWithSopsKeys = ["pim"];
     };
 
     facter.reportPath = ./facter.json;

machines/jefke/configuration.nix

@@ -1,5 +1,6 @@
 {config, ...}: {
   config = {
+    pim.k3s.clusterInit = true;
     facter.reportPath = ./facter.json;
     system.stateVersion = "23.05";
     users.users.root.openssh.authorizedKeys.keys = config.pim.ssh.keys.pim ++ config.pim.ssh.keys.niels;
@@ -9,10 +10,5 @@
       targetUser = "root";
       tags = ["server" "kubernetes"];
     };
-
-    pim = {
-      sops-nix.usersWithSopsKeys = ["root"];
-      k3s.clusterInit = true;
-    };
   };
 }

machines/lewis/configuration.nix

@@ -16,7 +16,6 @@
     };
 
     pim = {
-      sops-nix.usersWithSopsKeys = ["root"];
       # TODO: this should be dynamically set using Colmena tags
       k3s.serverAddr = "https://jefke.dmz:6443";
       data-sharing.enable = true;

machines/sue/configuration.nix

@@ -18,7 +18,6 @@
       stylix.enable = true;
       wireguard.enable = true;
       compliance.enable = true;
-
       sops-nix.usersWithSopsKeys = ["pim"];
     };
 

machines/warwick/configuration.nix

@@ -9,7 +9,6 @@
   config = {
     pim = {
       tailscale.advertiseExitNode = true;
-      sops-nix.usersWithSopsKeys = ["root"];
       prometheus.enable = true;
     };
 

nixos/default.nix

@@ -38,7 +38,7 @@
 
       usersWithSopsKeys = lib.mkOption {
         type = lib.types.listOf lib.types.str;
-        default = [];
+        default = lib.optional (! config.deployment.allowLocalDeployment) "root";
       };
     };
   };