nixos config for self hosting
sops-nix's default identity discovery imports the host's SSH ed25519 key as an age identity, but secrets/tide.yaml is encrypted to the age key generated with age-keygen and stored at /var/lib/sops-nix/key.txt. Without sops.age.keyFile pointing at that path, activation fails with 'Error getting data key: 0 successful groups required, got 0'. Also blank the SSH/GPG fallback paths so the module never silently picks up an unintended identity. |
||
|---|---|---|
| home-manager@9ef0dc2036 | ||
| secrets | ||
| .gitignore | ||
| .gitmodules | ||
| .sops.yaml | ||
| boot.nix | ||
| configuration.nix | ||
| flake.lock | ||
| flake.nix | ||
| forgejo.nix | ||
| hardware-configuration.nix | ||
| README.md | ||
| tide.nix | ||
redeploy to home server using this command
nixos-rebuild switch --flake .#nixos \
--target-host nixos_home \
--build-host nixos_home \
--sudo --ask-sudo-password