UGA-Innovation-Factory/athenix
3
1
Fork 0
Code Issues Pull Requests Actions Projects Releases Wiki Activity

Use rage instead of age for SSH key decryption support
Some checks failed
CI / Flake Check (push) Has been cancelled
Details
CI / Evaluate Key Configurations (nix-builder) (push) Has been cancelled
Details
CI / Evaluate Key Configurations (nix-desktop1) (push) Has been cancelled
Details
CI / Evaluate Key Configurations (nix-laptop1) (push) Has been cancelled
Details
CI / Evaluate Artifacts (installer-iso-nix-laptop1) (push) Has been cancelled
Details
CI / Evaluate Artifacts (lxc-nix-builder) (push) Has been cancelled
Details
CI / Build and Publish Documentation (push) Has been cancelled
Details
CI / Format Check (push) Has been cancelled
Details

Browse Source
This commit is contained in:
UGA Innovation Factory
2026-01-30 21:40:04 +00:00
parent dffe817e47
commit 87045a518f
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
sw/secrets.nix
View File

@@ -11,6 +11,7 @@
{
config,
lib,
pkgs,
...
}:
@@ -190,6 +191,9 @@ in
# Auto-discovered secrets with default permissions
age.secrets = applicableSecrets // cfg.secrets.extraSecrets;
# Use rage instead of age for better SSH key support
age.ageBin = "${pkgs.rage}/bin/rage";
# Configure identity paths for decryption based on discovered public keys
# These are added in addition to agenix's defaults
age.identityPaths = identityPaths;