starred/nix-config
1
0 Fork 0
mirror of https://github.com/ryan4yin/nix-config.git synced 2026-11-13 12:13:46 +01:00
Code Issues Packages Projects Releases 10 Wiki Activity

chore(secrets): refresh mysecrets and follow agenix-rules rename

Browse Source 
Update the mysecrets lock to 7f93490, which renames secrets.nix to agenix-rules.nix, drops the deprecated ./ key prefixes for agenix 0.18, and re-encrypts the access-token secret. Update the docs and agenix skill to the new filename and path convention.
This commit is contained in:
Ryan Yin committed 2026-10-29 21:28:08 +08:00
1 parent 38d1d85e85
commit 01d2e76410
4 files changed
+39 -36
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

hosts/idols-aquamarine/README.md
+1 -1
View File
@@ -218,7 +218,7 @@ reinstall or a key rotation:
1. `ssh aquamarine cat /etc/ssh/ssh_host_ed25519_key.pub`.
2. Put that key in `vars/networking.nix` under `knownHosts` (the entry was removed with the old key)
and, if this host should read agenix secrets, in `~/codes/nix-secrets/secrets.nix` under
and, if this host should read agenix secrets, in `~/codes/nix-secrets/agenix-rules.nix` under
`application_server_keys`.
3. Rekey and bump the pin: `just -f secrets/Justfile rekey`, push `nix-secrets`, then
`just upp mysecrets` here.