fix: secrets

2025-08-19 14:58:40 -04:00
parent f194c9cfdc
commit 6691dc2b53
2 changed files with 8 additions and 4 deletions
--- a/host/ark/sops.nix
+++ b/host/ark/sops.nix
@@ -5,7 +5,11 @@
    defaultSopsFile = ../../secrets/sops/host/ark/default.yaml;
    validateSopsFiles = false;

-    age.keyFile = "/var/lib/sops-nix/key.txt";
+    age.keyFile = if builtins.pathExists /var/lib/sops-nix/key.txt then
+      "/var/lib/sops-nix/key.txt"
+    else
+      "/home/admin/.config/sops/age/keys.txt" # temp decrypt key
+    ;

    secrets = {
      "host_age_key" = {