sops: use upstream

2026-07-14 20:05:42 +08:00
parent c0269d1695
commit a10b255a71
3 changed files with 9 additions and 9 deletions
@@ -23,10 +23,13 @@ in
  };

  config = lib.mkIf cfg.enable {
-    sops.age.sshKeyFile = cfg.sshKeyFile;
+    sops.age.sshKeyPaths = [ cfg.sshKeyFile ];
+    # Inject environment directly to use native SSH key encryption
+    sops.environment.SOPS_AGE_SSH_PRIVATE_KEY_FILE = cfg.sshKeyFile;
    users.users.${username}.extraGroups = [ "keys" ];
    my.hm = {
-      sops.age.sshKeyFile = cfg.sshKeyFile;
+      sops.age.sshKeyPaths = [ cfg.sshKeyFile ];
+      sops.environment.SOPS_AGE_SSH_PRIVATE_KEY_FILE = cfg.sshKeyFile;
      home.packages = [
        pkgs.sops
      ];