randogoth/bucur
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Use GRUB BIOS boot + move sops age key out of repo

Browse source
This commit is contained in:
randogoth 2026-02-07 18:46:06 +02:00
parent 1862821f8f
commit b419320bfc
2 changed files with 10 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

7
modules/services/podman.nix
View file

@ -1,8 +1,11 @@
{ config, ... }:
{
environment.etc."sops/age/keys.txt".source = ../../secrets/age/keys.txt;
sops.defaultSopsFile = ../../secrets/bucur.yaml;
sops.age.keyFile = "/etc/sops/age/keys.txt";
sops.age.keyFile = "/var/lib/sops/age/keys.txt";
systemd.tmpfiles.rules = [
"d /var/lib/sops/age 0700 root root -"
];
sops.secrets.mtproto_secret = {};