Add age identity secret file

hosts/common/graphical/default.nix

@@ -14,9 +14,15 @@
   programs.nm-applet.enable = true;
 
   # A bit confusing but this is required for the home-manager spotifyd :/
-  age.secrets.spotify_pass = {
+  age.secrets = {
-    file = ../../../secrets/spotify_pass.age;
+    spotify_pass = {
-    owner = config.users.users.daniel.name;
+      file = ../../../secrets/spotify_pass.age;
+      owner = config.users.users.daniel.name;
+    };
+    age_identity = {
+      file = ../../../secrets/age_identity.age;
+      owner = config.users.users.daniel.name;
+    };
   };
 
   fonts.fonts = with pkgs; [

secrets/secrets.nix

@@ -23,4 +23,5 @@ in {
   "dungflix_bucket_account_key.age".publicKeys = users ++ [system2 system4];
   "dungflix_crypt_remote_obscured_pass.age".publicKeys = users ++ [system2 system4];
   "dungflix_crypt_remote_pass.age".publicKeys = users ++ [system2 system4];
+  "age_identity.age".publicKeys = users ++ [system1 system3];
 }

users/daniel/configs/desktop/default.nix

@@ -1,4 +1,4 @@
-{
+{config, ...}: {
   imports = [
     # ./i3
     # ./i3status-rust
@@ -6,4 +6,11 @@
     ./spotify
     ./rofi
   ];
+
+
+  home.file = {
+    ".age/age.txt" = {
+      source = config.lib.file.mkOutOfStoreSymlink "/run/agenix/age_identity";
+    };
+  };
 }

users/daniel/default.nix

@@ -22,6 +22,7 @@
     };
 
   cliPackages = with pkgs; [
+    age
     direnv
     elixir_1_14
     elixir_ls