diff --git a/home.nix b/home.nix index d19f243..0f92ad3 100644 --- a/home.nix +++ b/home.nix @@ -1,4 +1,4 @@ -{ pkgs, lib, config, ... }: { +{ pkgs, lib, config, flake, ... }: { imports = [ ./modules/home-manager/neovim ./modules/home-manager/firefox @@ -188,6 +188,11 @@ homeage = { identityPaths = [ "/home/pim/.ssh/age_ed25519" ]; installationType = "systemd"; + + file."sops-keys.txt" = { + source = "${flake}/secrets/sops-keys.txt.age"; + symlinks = [ "${config.xdg.configHome}/sops/age/keys.txt" ]; + }; }; dconf.settings = with lib.hm.gvariant; { diff --git a/secrets/secrets.nix b/secrets/secrets.nix index e542a9a..3c11e2d 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -13,4 +13,5 @@ in "syncthing-cert.pem.age".publicKeys = publicKeys; "keepassxc.ini.age".publicKeys = publicKeys; # Secret agent causes private keys in config file. + "sops-keys.txt.age".publicKeys = publicKeys; } diff --git a/secrets/sops-keys.txt.age b/secrets/sops-keys.txt.age new file mode 100644 index 0000000..fcb4185 Binary files /dev/null and b/secrets/sops-keys.txt.age differ