...

1 files changed, 17 insertions, 9 deletions

diff --git a/os/srv/sops.nix b/os/srv/sops.nix
index 0d0c7bf..67cf8f7 100644
--- a/os/srv/sops.nix
+++ b/os/srv/sops.nix
@@ -1,6 +1,7 @@
 {
   config,
   lib,
+  pkgs,
   username,
   ...
 }:
@@ -16,16 +17,23 @@ in
       age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
 
       secrets = {
-        "syncthing/gui_password" = {
-          owner = username;
-        };
-        "obs/websocket_password" = {
-          owner = username;
-        };
-        "git/email" = {
-          owner = username;
-        };
+        "syncthing/gui_password".owner = username;
+        "obs/websocket_password".owner = username;
+        root_password.neededForUsers = true;
+        user_password.neededForUsers = true;
+        storage_key = { };
       };
     };
+
+    boot.initrd.secrets = {
+      "/tmp/storage.key" = config.sops.secrets.storage_key.path;
+    };
+
+    environment.systemPackages = with pkgs; [
+      sops
+      age
+      ssh-to-age
+      gnupg
+    ];
   };
 }