This repository has been archived on 2024-07-08. You can view files and clone it, but cannot push or open issues or pull requests.
nix-config-tn/docs/vm/secrets.md
2024-03-14 22:04:40 +11:00

337 B

Generate age key per machine

On new machine, run below to transfer its shiny new ed25519 to age

nix-shell -p ssh-to-age --run 'cat /etc/ssh/ssh_host_ed25519_key.pub | ssh-to-age'

Copy this into ./.sops.yaml in base repo, then re-run taskfile task sops:re-encrypt to loop through all sops keys, decrypt then re-encrypt