agenix-rekey: add master identity

2025-08-25 22:05:18 +01:00
parent 34304b9e91
commit 2e970c3ef4
2 changed files with 14 additions and 0 deletions
--- a/hosts/common.nix
+++ b/hosts/common.nix
@@ -7,11 +7,18 @@
 {
  imports = [
    inputs.agenix.nixosModules.default
+    inputs.agenix-rekey.nixosModules.default
    inputs.home-manager.nixosModules.home-manager
    ../modules/nixos
    ../modules/nixos/impermanence.nix
  ];

+  age.rekey = {
+    masterIdentities = [ ../secrets/yubikey-nix-primary.pub ];
+    storageMode = "local";
+    localStorageDir = ./. + "/secrets/rekeyed/${config.networking.hostName}";
+  };
+
  nixpkgs = {
    config.allowUnfree = true;
    overlays = [