secrets.yaml: move ssh host keys

2024-06-30 13:20:54 +10:00 · 2024-06-30 13:20:54 +10:00 · 907a7082ad
commit 907a7082ad
parent 2f94a01687
8 changed files with 16 additions and 163 deletions
--- a/tasks.py
+++ b/tasks.py
@ -162,9 +162,9 @@ def decrypt_host_key(flake_attr: str, tmpdir: str) -> None:
            [
                "sops",
                "--extract",
-                '["ssh_host_ed25519_key"]',
+                f'["ssh_host_ed25519_key"]["{flake_attr}"]',
                "--decrypt",
-                f"{ROOT}/hosts/{flake_attr}/secrets.yaml",
+                f"{ROOT}/secrets.yaml",
            ],
            check=True,
            stdout=fh,