When you do not have your pubkeys in your secrets.nix verbatim as string but read them from file like this: desktop1 = builtins.readFile ./desktop1.pub;, you will end up with empty newlines in the resulting list of keys, which will add --recipient='' arguments to your age call, failing the call.
When you do not have your pubkeys in your
secrets.nix
verbatim as string but read them from file like this:desktop1 = builtins.readFile ./desktop1.pub;
, you will end up with empty newlines in the resulting list of keys, which will add--recipient=''
arguments to your age call, failing the call.