test new key location

2026-04-24 23:59:07 +02:00 · 2026-03-06 18:35:25 +01:00
parent 0d522ec64e
commit 3df0c025ca
1 changed files with 2 additions and 0 deletions
--- a/modules/security/sys/sopsnix.nix
+++ b/modules/security/sys/sopsnix.nix
@@ -9,6 +9,8 @@
    sops.age.keyFile = "/var/lib/sops/root-keys/master-host.txt";
    systemd.tmpfiles.rules = [
      "d /var/lib/sops/root-keys 0700 root root -"
+      "d /var/lib/sops/user-keys 0750 root users -"
+      "f /var/lib/sops/user-keys/master-user.txt 0640 root users -"
     ];
  };
 }