motiejus/config
1
Fork 0
Code Packages Releases Activity

Update README

Browse Source
This commit is contained in:
Motiejus Jakštys 2023-04-16 06:54:29 +03:00
parent e1c47cce5f
commit d621307248
1 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
README.md
View File

@ -12,4 +12,18 @@ Upcoming flakes:
$ nix build .#deploy.nodes.hel1-a.profiles.system.path
Managing secrets
----------------
Encode a secret on host:
rage -e -r $(ssh-to-age < /etc/ssh/ssh_host_ed25519_key.pub) -o secret.age /etc/plaintext
Decode a secret on host (to test things out):
age -d -i <(sudo ssh-to-age -private-key -i /etc/ssh/ssh_host_ed25519_key) secret.age
If/when [str4d/rage#379](https://github.com/str4d/rage/issues/379) is fixed, we
can replace the above command to `rage`.
[1]: https://cgit.krebsco.de/krops/about/