From e1570c6915be91daf4a1c9da865ca96160ec9c13 Mon Sep 17 00:00:00 2001
From: Niccolo Borgioli <hi@nicco.io>
Date: Tue, 4 Feb 2025 17:15:25 +0100
Subject: [PATCH] move age keys location to repo

---
 .envrc              |  3 ++-
 .gitignore          |  1 +
 hosts/default.nix   |  1 -
 hosts/sflx.nix      |  5 -----
 secrets/rclone.yaml | 21 +++++++++++++++++++++
 5 files changed, 24 insertions(+), 7 deletions(-)
 create mode 100644 .gitignore
 delete mode 100644 hosts/sflx.nix
 create mode 100644 secrets/rclone.yaml

diff --git a/.envrc b/.envrc
index 41db5f7..1a512a4 100644
--- a/.envrc
+++ b/.envrc
@@ -1 +1,2 @@
-export SOPS_AGE_KEY_FILE=${HOME}/.config/sops/age/keys.txt
+# export SOPS_AGE_KEY_FILE=${HOME}/.config/sops/age/keys.txt
+export SOPS_AGE_KEY_FILE=$(pwd)/.keys.txt
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..e5fed82
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1 @@
+.keys.txt
diff --git a/hosts/default.nix b/hosts/default.nix
index d29267f..90f15c4 100644
--- a/hosts/default.nix
+++ b/hosts/default.nix
@@ -1,5 +1,4 @@
 [
   (import ./mac14.nix)
   (import ./mac16.nix)
-  (import ./sflx.nix)
 ]
diff --git a/hosts/sflx.nix b/hosts/sflx.nix
deleted file mode 100644
index b638d03..0000000
--- a/hosts/sflx.nix
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-  username = "niccoloborgioli";
-  hostName = "sflx";
-  platform = "aarch64-darwin";
-}
diff --git a/secrets/rclone.yaml b/secrets/rclone.yaml
new file mode 100644
index 0000000..b811415
--- /dev/null
+++ b/secrets/rclone.yaml
@@ -0,0 +1,21 @@
+config: ENC[AES256_GCM,data:eJ1n6jCs,iv:mvDww11FVELBndquyrbz1+pLCLn7OydIZECgco9GwMY=,tag:5V55Iy1bAH6H8r2qKjti6A==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1fwwfdh3np846pcwlsre2d8py3a8z5gfltx3jcyghdfx9esn6a40sm60mdj
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFTVJuQlA1aXFzeGI5SFZZ
+            c09USmpJeTRVWG5VR3AxWXVPNWxnMEtmbGljCmFFTTBNaUd5WUQ4aHhyQ29STHhj
+            eTBtTGhKWXpLWGlURFlrcll4cTRYUVUKLS0tIGFtOGZ3dU5HQ1UyY0NKUnVDaDNP
+            a0RONm94bWQ5ZXdEUmxRTHJsREJjQk0Kdiuyrb7pcah6HVMQpStFhG4+JUWuLA7F
+            WD6deMpuxiuLooQhcVVKPrK8jmbCGFvmEoDlRFegaTjofYsBUAnhfg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-02-04T16:14:29Z"
+    mac: ENC[AES256_GCM,data:7aQ0VaMJKEmFqvpBxRWBmZ7ZFU4SRdLwxpCjAypPGPmKlIJdC1vnf4UcYkr968kaikoobELkgCzZzke2UzF8MB3nzH4zOL7AT817wSkgeb6k8qhUWCNXPSxeV1peUIRj2UXPz1pU6EEWNgEieLiL2PJc65gZSuzA+U7I4eV8MdY=,iv:YmqDXiOj/HbiDytU9mmkMiAF+gj1i8AZY+/2XWlRH3Q=,tag:+MrM2fJfBLL4ie7R0MsLng==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.4