From 7e674669d39a2720ca473643fee79200b4f53b04 Mon Sep 17 00:00:00 2001 From: Ryan Yin Date: Wed, 31 Jan 2024 11:41:34 +0800 Subject: [PATCH] docs: secrets --- secrets/README.md | 3 --- 1 file changed, 3 deletions(-) diff --git a/secrets/README.md b/secrets/README.md index b920c6d9..5ba42143 100644 --- a/secrets/README.md +++ b/secrets/README.md @@ -148,9 +148,6 @@ Then, create `./secrets/default.nix` with the following content: From now on, every time you run `nixos-rebuild switch`, it will decrypt the secrets using the private keys defined in `age.identityPaths`. It will then symlink the secrets to the path defined by the `age.secrets..path` argument, which defaults to `/etc/secrets`. -NOTE: By default, `age.identityPaths` is set to `~/.ssh/id_ed25519` and `~/.ssh/id_rsa`, -so make sure to place your decryption keys there. -If you're deploying to the same machine from which you encrypted the secrets, it should work out of the box. ## Adding a new host