chore: move secrets to private repo

This commit is contained in:
Luj 2025-06-18 13:57:51 +02:00
parent 5c0182d087
commit 114abc4c0a
20 changed files with 37 additions and 33 deletions

View file

@ -72,12 +72,12 @@ in
config = lib.mkIf (cfg.includes != [ ]) {
age.secrets."borg-ssh-key" = {
file = ../../secrets/borg-ssh-priv.age;
file = ../../private/secrets/borg-ssh-priv.age;
owner = "root";
mode = "0600";
};
age.secrets."borg-encryption-secret".file = ../../secrets/borg-encryption-secret.age;
age.secrets."borg-encryption-secret".file = ../../private/secrets/borg-encryption-secret.age;
programs.ssh.knownHosts."${if port != 22 then "[${host}]:${port}" else host}" = {
publicKey = "${hostPublicKey}";