From 0d522ec64e5da7eb41a8636d5fa62c666685fe7f Mon Sep 17 00:00:00 2001
From: Mohamed Chrayed <mohamed@chrayed.de>
Date: Fri, 6 Mar 2026 18:24:45 +0100
Subject: [PATCH] cli variable

---
 modules/security/sys/sopsnix.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/modules/security/sys/sopsnix.nix b/modules/security/sys/sopsnix.nix
index 5148b9a..c5afc8c 100644
--- a/modules/security/sys/sopsnix.nix
+++ b/modules/security/sys/sopsnix.nix
@@ -5,6 +5,7 @@
     sops.defaultSopsFile = ../secrets/secrets.yaml;
     sops.age.sshKeyPaths = [];
     sops.gnupg.sshKeyPaths = [];
+    environment.variables.SOPS_AGE_KEY_FILE = "/var/lib/sops/root-keys/master-host.txt";
     sops.age.keyFile = "/var/lib/sops/root-keys/master-host.txt";
     systemd.tmpfiles.rules = [
       "d /var/lib/sops/root-keys 0700 root root -"