tasks.py, devdoc/onboarding: add agenix

devdoc/onboarding.md

@@ -4,6 +4,8 @@
 
 - Add their user and ssh key to [users](../users) as member of the `trusted` and `wheel` groups.
 
+- Add their user to [secrets/secrets.nix](../secrets/secrets.nix) and run `inv update-agenix-files`.
+
 - Add their age key to [.sops.yaml](../.sops.yaml), update the `creation_rules` and run `inv update-sops-files`.
 
 - Add their email in [terraform/locals.tf](../terraform/locals.tf), this will give them access to:

tasks.py

@@ -51,6 +51,15 @@ def sotp(c: Any, acct: str) -> None:
     c.run(f"nix develop .#sotp -c sotp {acct}")
 
 
+@task
+def update_agenix_files(c: Any) -> None:
+    """
+    Update all agenix secrets
+    """
+    os.chdir("secrets")
+    c.run("agenix --rekey", pty=True)
+
+
 @task
 def update_sops_files(c: Any) -> None:
     """