From 233e5fb7d43a0736857ee6b9f74967f03b73837c Mon Sep 17 00:00:00 2001
From: adikro <adikro@disroot.org>
Date: Tue, 10 Feb 2026 22:27:11 +0100
Subject: ...

---
 os/srv/sops.nix | 26 +++++++++++++++++---------
 1 file changed, 17 insertions(+), 9 deletions(-)

(limited to 'os/srv/sops.nix')

diff --git a/os/srv/sops.nix b/os/srv/sops.nix
index 0d0c7bf..67cf8f7 100644
--- a/os/srv/sops.nix
+++ b/os/srv/sops.nix
@@ -1,6 +1,7 @@
 {
   config,
   lib,
+  pkgs,
   username,
   ...
 }:
@@ -16,16 +17,23 @@ in
       age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
 
       secrets = {
-        "syncthing/gui_password" = {
-          owner = username;
-        };
-        "obs/websocket_password" = {
-          owner = username;
-        };
-        "git/email" = {
-          owner = username;
-        };
+        "syncthing/gui_password".owner = username;
+        "obs/websocket_password".owner = username;
+        root_password.neededForUsers = true;
+        user_password.neededForUsers = true;
+        storage_key = { };
       };
     };
+
+    boot.initrd.secrets = {
+      "/tmp/storage.key" = config.sops.secrets.storage_key.path;
+    };
+
+    environment.systemPackages = with pkgs; [
+      sops
+      age
+      ssh-to-age
+      gnupg
+    ];
   };
 }
-- 
cgit v1.3