From 87045a518f89a444b3bc6e3d392289ed0592013d Mon Sep 17 00:00:00 2001
From: UGA Innovation Factory <engr-ugaif@uga.edu>
Date: Fri, 30 Jan 2026 21:40:04 +0000
Subject: [PATCH] Use rage instead of age for SSH key decryption support

---
 sw/secrets.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/sw/secrets.nix b/sw/secrets.nix
index daca743..3710133 100644
--- a/sw/secrets.nix
+++ b/sw/secrets.nix
@@ -11,6 +11,7 @@
 {
   config,
   lib,
+  pkgs,
   ...
 }:
 
@@ -190,6 +191,9 @@ in
     # Auto-discovered secrets with default permissions
     age.secrets = applicableSecrets // cfg.secrets.extraSecrets;
 
+    # Use rage instead of age for better SSH key support
+    age.ageBin = "${pkgs.rage}/bin/rage";
+
     # Configure identity paths for decryption based on discovered public keys
     # These are added in addition to agenix's defaults
     age.identityPaths = identityPaths;