search

diegofariasm / yggdrasil

MIT License
1 stars 0 forks source link

Public secrets #7

Open argentinamoose opened 2 months ago

argentinamoose commented 2 months ago

Your /configs/home-manager/baldur/secrets is publicly visible, I don't know if there are other secrets elsewhere, but wanted to let you know.

diegofariasm commented 2 months ago

Oh, those are age encrypted files. Although you can see the 'contents' inside of them, they are all encrypted using age.

To be able to decrypt them, you would need the age key file at : ${config.xdg.configHome}/sops/age/keys.txt

configs/home-manager/baldur/default.nix

sops = {
age.keyFile = "${config.xdg.configHome}/sops/age/keys.txt";
secrets = lib.my.getSecrets ./secrets/ssh.yaml {
id_ed25519.path = ".ssh/id_ed25519";
id_ed25519_pub.path = ".ssh/id_ed25519.pub";
};
};