doc: notes on SOPS secrets

This commit is contained in:
Zoty 2026-03-27 19:39:49 -03:00
parent 54c34faa64
commit 1df1f4ed07
Signed by: Zoty
SSH key fingerprint: SHA256:WsGEGivgl37t3Mth6uugXMOgMCTR7QolIepNbC+j/tA

View file

@ -4,12 +4,20 @@
sops = { sops = {
defaultSopsFile = ../secrets/secrets.yaml; defaultSopsFile = ../secrets/secrets.yaml;
# NOTE: This thing gave me a huge headache to setup.
# If you are ME from future, don't forget to place
# your age keys here!
age.keyFile = "/etc/sops/age/keys.txt"; age.keyFile = "/etc/sops/age/keys.txt";
# Define secrets to be used.
secrets = { secrets = {
# Literally the user password.
"user-password" = { "user-password" = {
neededForUsers = true; neededForUsers = true;
}; };
# SSH private key.
"ssh-private-key" = { "ssh-private-key" = {
path = "/run/secrets/ssh-private-key"; path = "/run/secrets/ssh-private-key";
owner = "zoty"; owner = "zoty";