From 8572f3b4db7e26d7e2751f03873069943fca3fe8 Mon Sep 17 00:00:00 2001 From: Mel Date: Fri, 25 Jul 2025 15:40:28 +0200 Subject: Use age secrets on mineral machines (mainly for work-related tasks) Signed-off-by: Mel --- modules/common.nix | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'modules/common.nix') diff --git a/modules/common.nix b/modules/common.nix index 66d48bb..45395a1 100644 --- a/modules/common.nix +++ b/modules/common.nix @@ -92,6 +92,11 @@ in }; }; + # on desktop machines (a.k.a. minerals) we only use tailscale ssh + # for access, so we don't generally have normal host keys, and + # have to grab the ones tailscale uses. + age.identityPaths = [ "/var/lib/tailscale/ssh/ssh_host_ed25519_key" ]; + # TODO: the filter already does some good work, but we need some way to # pick out x86-only packages, so it is not as opaque as it currently is. # (who knows if muse-sounds-manager is actually installed, for example?) -- cgit 1.4.1