diff --git a/.sops.yaml b/.sops.yaml index e8a8b4b..7dd1e37 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -1,5 +1,5 @@ keys: - - &stefan_ellmauthaler 3B39 8B08 6C41 0264 A14F 3B53 B1E6 F030 30A4 AEAA + - &stefan_ellmauthaler 3B398B086C410264A14F3B53B1E6F03030A4AEAA creation_rules: - path_regex: secrets/[^/]+\.yaml$ key_groups: diff --git a/machines/stel-xps/hardware-configuration.nix b/machines/stel-xps/hardware-configuration.nix index f56c48a..7bc3363 100644 --- a/machines/stel-xps/hardware-configuration.nix +++ b/machines/stel-xps/hardware-configuration.nix @@ -21,7 +21,7 @@ boot.initrd.luks.devices."crypted".device = "/dev/disk/by-uuid/9c84f143-023d-4fcb-a49c-ca78ce69e0e0"; fileSystems."/boot" = - { device = "/dev/disk/by-uuid/4824-2CFD"; + { device = "/dev/disk/by-uuid/39E0-047B"; fsType = "vfat"; }; diff --git a/modules/secrets.nix b/modules/secrets.nix index 3e9fafe..d8b12f2 100644 --- a/modules/secrets.nix +++ b/modules/secrets.nix @@ -9,9 +9,6 @@ with lib; { mkIf cfg.enable { sops = { defaultSopsFile = ../secrets/secrets.yaml; - age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ]; - age.keyFile = "/var/lib/sops-nix/key.txt"; - age.generateKey = true; gnupg.sshKeyPaths = [ ../secrets/keys/users ../secrets/keys/hosts