Don't decrypt user's sops secrets as root

This commit is contained in:
Pim Kunis 2024-11-21 21:17:56 +01:00
parent a5be4ddbb2
commit 544cf42357
2 changed files with 2 additions and 2 deletions
machines/sue

View file

@ -35,7 +35,7 @@ in {
};
pim-sops-age-key = {
keyCommand = ["sudo" sops "--extract" "[\"sops_age_key\"]" "-d" "${self}/machines/sue/pim.sops.yaml"];
keyCommand = [sops "--extract" "[\"sops_age_key\"]" "-d" "${self}/machines/sue/pim.sops.yaml"];
name = "keys.txt";
destDir = "/home/pim/.config/sops/age";
user = "pim";