plumjam/nixos - Change H6E252KXGDCYEWQBUXMKRLVCIAKSDDWTUCNQV3IZNVTFYVQLXBBAC

secret-manager: Add missing `identityPaths` option.

I got stuck on this for half a day… This fixes the failed rebuilds caused by secrets failing to decrypt.

Created by PlumJam on January 13, 2026

H6E252KXGDCYEWQBUXMKRLVCIAKSDDWTUCNQV3IZNVTFYVQLXBBAC

Dependencies

[2] OPVLEXF5H3CHSU43PIQ4M75UAE3UIKQ5WTVYUOD4M7MPUHLP26LQC

In channels

main

Change contents

Replacement in modules/secret-manager.nix at line 16 [2.249]

B:BD[2.589] → [2.589:770]

      config.age.rekey = {
        storageMode = "local";
        masterIdentities = [ ../yubikey.pub ];
        localStorageDir = ../secrets/rekeyed/${config.networking.hostName};

[2.589]

[2.770]

      config.age = {
        identityPaths = [ "/root/.ssh/id" ];
        rekey = {
          storageMode = "local";
          masterIdentities = [ ../yubikey.pub ];
          localStorageDir = ../secrets/rekeyed/${config.networking.hostName};
        };