Add sops env var

2026-02-07 16:28:40 +01:00
parent 3bdd7e1c50
commit bd3e120fb0
3 changed files with 16 additions and 12 deletions
--- a/nix/modules/home/secrets.nix
+++ b/nix/modules/home/secrets.nix
@@ -13,4 +13,8 @@
      keyFile = "${config.home.homeDirectory}/.config/sops/age/keys.txt";
    };
  };
+
+  home.sessionVariables = {
+    SOPS_AGE_KEY_FILE = config.sops.age.keyFile;
+  };
 }
--- a/nix/secrets/.sops.yaml
+++ b/nix/secrets/.sops.yaml
@@ -1,6 +1,6 @@
 keys:
  - &macbook age1hmgy68ukugduef75ev72jnpu77ff3lajadpf7u0zv3ex4nt7f5qs5nxx2l
-  - &macnix age1436laad6dysegssvnz3pm8m33tv6hl9xpqymslehfwjqr8c6hfwsn74u42
+  - &macnix age1yez9q5q94kt99d9q8eqgqrkz7djmk3kwsqdjp7ww7e0fquzjevpsjkk5x4

 creation_rules:
  - path_regex: secrets\.yaml$
--- a/nix/secrets/secrets.yaml
+++ b/nix/secrets/secrets.yaml
@@ -4,20 +4,20 @@ sops:
        - recipient: age1hmgy68ukugduef75ev72jnpu77ff3lajadpf7u0zv3ex4nt7f5qs5nxx2l
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKNGdIVU9CRnJGVVdkREsw
-            OFNiS2tFQmRoUHZiZFR0Z1RVaExSaXZwejBJCk44MWJSalFvckNqckNxZUJGdFpT
-            VlV2eisySzl2aGJVL1hSZ25FMWtTWmMKLS0tIEVvODJxSG1ScllmRC93MHN0MVdZ
-            YW12MmkweUF3TWtiSTVyWkIvdGdXQXMKsEMlf2FRKxSvaaCaBGf3kM5MdsL571aq
-            sITsqoVo+J7CV0XdPjVpctHwSBNMlLUGJh+dM5+Rb96FUqVr9dpEIw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxUEZwYkFDYVd4ek53QU13
+            YStKbEVOeTJaalVIWXh1SUlrSnUzanM0anpBCktBMytXQUNyOTZaZGc4NG1Ta1lX
+            Mi91UWxXZWZjRDZqNDJWQU1YODgzUkkKLS0tIFY4TjUyczQ0SGZMOUM0NkQvUC94
+            WDBpdDJMaWVvUGZUcXZLZE9oYjdKLzgK4B25MbF/3bUFJ5+zxUfpSNM79HT13nux
+            dvlcwkwYKIkS9YZpnyiYXZGupFhUcq1ipIvsbq/B3WR9IFn4xromPw==
            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1436laad6dysegssvnz3pm8m33tv6hl9xpqymslehfwjqr8c6hfwsn74u42
+        - recipient: age1yez9q5q94kt99d9q8eqgqrkz7djmk3kwsqdjp7ww7e0fquzjevpsjkk5x4
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUd0x4MDhVMmhISnN0eFZz
-            c1c2emxRcFVLRWZDSkp2V1VYQUpUbXU3ZFJZCkN1VVRzR2VBeThMckFRZk9ZdFdE
-            czhpb0hybCsxUlJ4WmlXb0pPOG5JaHMKLS0tIDBCR29zbjVpNFJZWVNrSldxT08z
-            TEsvV3l2TEJqUWdVL2krOXlNaXlpR0EKMIaLbDOAx2Zw1rtNT6HSli3Yqw2rFnsa
-            6p5fa97RSDewFhg4MvaVo2L8SVpef65idmRXQ2Eh/ls4tbcpN8r6MA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvK0lsajZ1b3dlMVA4Z2hm
+            ek9lZENNYnVnQXp2U0hGM2pDd0FSL2JVbVhVClZUTWhNcmJadSttU2UrRVhTWU1y
+            RVV6NlpndEsyYk9zSmRqLytOWUtCNWMKLS0tIGN1TDJPY2orMGJobFExUEhWYzdx
+            dDB3YWVlbUY4V25pa0IvTW1xNG1XcmMK+LLoW8f+M0eBIyxwI3tD637Fw/FuXmYx
+            RV/hAOaznmfq3filh9KAEA+A/9mDI2lUeF/ye/g27tEEVtNRF9H+Dg==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2026-02-07T15:11:34Z"
    mac: ENC[AES256_GCM,data:Pgi9tYWnrMrlM9NjqDy0+BrH51/0T4c7M6dornLCumnRtR2Y3MZYGyA2E97kbwuqoPJCOWkzhJt7smwCRI+H0rXveO+ps+v5iUxzP+7MQmepn5wjS32HoL5c2Oer4CR7PkKY7YvL7z5IT6QcIgRXMODhsVbWgB8CjPrn/GYqb5Y=,iv:A2AyCNHfQEdx/wvUJQGc9ndL2/OYGGxBMidYOTHXO7Q=,tag:9uzJcu3bogQgVj0bDOPCwg==,type:str]