From 09a30b5242675750e3455ac9f907b15d17dbe144 Mon Sep 17 00:00:00 2001
From: Daniel Patterson <me@danielpatterson.dev>
Date: Sat, 14 Jan 2023 01:04:10 +0000
Subject: [PATCH] Add age identity secret file

---
 hosts/common/graphical/default.nix       |  12 +++++++++---
 secrets/age_identity.age                 | Bin 0 -> 1159 bytes
 secrets/secrets.nix                      |   1 +
 users/daniel/configs/desktop/default.nix |   9 ++++++++-
 users/daniel/default.nix                 |   1 +
 5 files changed, 19 insertions(+), 4 deletions(-)
 create mode 100644 secrets/age_identity.age

diff --git a/hosts/common/graphical/default.nix b/hosts/common/graphical/default.nix
index a587cbd..2b0e081 100644
--- a/hosts/common/graphical/default.nix
+++ b/hosts/common/graphical/default.nix
@@ -14,9 +14,15 @@
   programs.nm-applet.enable = true;
 
   # A bit confusing but this is required for the home-manager spotifyd :/
-  age.secrets.spotify_pass = {
-    file = ../../../secrets/spotify_pass.age;
-    owner = config.users.users.daniel.name;
+  age.secrets = {
+    spotify_pass = {
+      file = ../../../secrets/spotify_pass.age;
+      owner = config.users.users.daniel.name;
+    };
+    age_identity = {
+      file = ../../../secrets/age_identity.age;
+      owner = config.users.users.daniel.name;
+    };
   };
 
   fonts.fonts = with pkgs; [
diff --git a/secrets/age_identity.age b/secrets/age_identity.age
new file mode 100644
index 0000000000000000000000000000000000000000..5b04b3280e79988b74b562c139d57ab81a899a8e
GIT binary patch
literal 1159
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCSnjf^Za3{;4)bSW-&
z%{R}g@O6!fvd9j}%+GO(aP|+iaPf1^&(_Z`4)qQ5sVMPuGvLxM$o5PPG&ap~O^Wn3
z%MLe4O)d=eDX*vu%}6mfaLM!t%{Md;EAsGn2}QTfsle1T(NQ7a!c;#jDkv(lBF!V!
zBE!kpH@GA+D9b3tFTBFS!qCDqwJ^fM#mlucJ(<hWq@+^Yvmhk5s>(d5pghR1+_$1M
zD=*bFG&wvhpgc0yC)~}#z$rJ_8^g8`eV2lCM+Kj}id56kq!OppfYRXNr~vOA$8xvK
ze8&QJufPIl<ERkxte~Kxl$4yxVlJQjT+d|x%3$-dRI?QK(z29Fw-VzlkJ420To?a*
zvl4F~H}|Xx%Ov9xUv$3}`lbiDr7Ku?l$sTU1s0lQI~wMvm}YocTADf+2bGxw<d>Rz
zCHn^(x|T)dr<C{w7jt<Bha?r`8T%LexMmvWBwCdDg_)&9nr9noYloF*<|J8|l(=Mt
zTe{|$<)hn{;u{s=SFTW5lvLmz6j>OUY>-r;9~GgU?h&3`9AV@e=H>1jP?Q`Vo|%$m
zke{XPXuxF<WZ>gzkr|a25^NTbo03uP<d+lVk>;0H<ZotdoEMcE=;#q*R1p|xUXE^C
zaA|f~pre9uNM3kGqMK*7zGH=%S4e?RWQJu>m~oL$SY>!gzJ<1Sk#Ui^QC4u2aW+>{
zP@=JAd7wpMsHLlaNt$1pPnJiPv7>Q#lAp6lgk!RizfozbYguBDV>-HRK`s^%`i=_8
zKE6dJ0YNS$UIqdFSrOh@Y2i+8ZXRLo`FYvCKH=Uu<%MMh0fs*QuAy8d?iNOg#RVoV
z79L)n{w^kd!R7|q`38~31qMz<fjNE#i4iVYo`z9X`rvqr_li>rSJ6!`N=+<IRftu#
zcG2L{FZK2gOAI%NFgNlKa*Yg13eCy)jV#Sb3d(iP^YzNi33Mq<H~04`E(kCwbMo_Z
zF?Gu<h=|O{iAW1GN=(n^s>shQ%*+k6C~__jb}};I($&>f$S!cocJogwvGDQ^uMBfF
zi!_ULt||;Nvov%}FET193--!%bdS<c%Q7tIYQ1W5zhUA0fFpkb{I+FZ>doK&{`i}h
z{}Vi<P8g_}HT^ijJvkw_PNwd4Y3{7@ut&`y3F+@5yL5gn@K`l@?#=fvHs2_>N$9P)
zK3jEu=5x(m^_)DCc7HoLt_m~!bnP<GOwj!4H&<uMqDGm=m%VseyCw=O-fDeiN3`Y}
z&#aaI{kNzTmr2ew`~6OGrs%dOB~Q2fZoQewCF{7a+wIr%O$--HjjsEO2u*0Y`QYwG
z-NjX(4lGUidY{1}HNePn!iT3pM;0Gvt1wTMGpw;l&|TNg?f67RMC#jR&FMt|a!{8C

literal 0
HcmV?d00001

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 27833ee..9302bfa 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -23,4 +23,5 @@ in {
   "dungflix_bucket_account_key.age".publicKeys = users ++ [system2 system4];
   "dungflix_crypt_remote_obscured_pass.age".publicKeys = users ++ [system2 system4];
   "dungflix_crypt_remote_pass.age".publicKeys = users ++ [system2 system4];
+  "age_identity.age".publicKeys = users ++ [system1 system3];
 }
diff --git a/users/daniel/configs/desktop/default.nix b/users/daniel/configs/desktop/default.nix
index 77ec58d..4b3d2e4 100644
--- a/users/daniel/configs/desktop/default.nix
+++ b/users/daniel/configs/desktop/default.nix
@@ -1,4 +1,4 @@
-{
+{config, ...}: {
   imports = [
     # ./i3
     # ./i3status-rust
@@ -6,4 +6,11 @@
     ./spotify
     ./rofi
   ];
+
+
+  home.file = {
+    ".age/age.txt" = {
+      source = config.lib.file.mkOutOfStoreSymlink "/run/agenix/age_identity";
+    };
+  };
 }
diff --git a/users/daniel/default.nix b/users/daniel/default.nix
index c98d98b..d7711c0 100644
--- a/users/daniel/default.nix
+++ b/users/daniel/default.nix
@@ -22,6 +22,7 @@
     };
 
   cliPackages = with pkgs; [
+    age
     direnv
     elixir_1_14
     elixir_ls