Fix agenix-rekey: add real uConsole host key, re-encrypt secrets

- Update uConsole hostPubkey from dummy to real SSH host key
- Add uConsole host key to keys.nix
- Add age.rekey config to lazyworkhorse
- Add SSH host key to identityPaths on both hosts
- Re-encrypt builder_key.age and gortium_password.age for both hosts
This commit is contained in:
2026-06-22 00:02:22 -04:00
parent 7e7bb73b0d
commit cbb016d409
5 changed files with 29 additions and 13 deletions

View File

@@ -251,7 +251,9 @@
# Private host ssh key managed by agenix
age = {
identityPaths = paths.identities;
identityPaths = paths.identities ++ [
"/etc/ssh/ssh_host_ed25519_key"
];
secrets = {
containers_env = {
file = ../../secrets/containers.env.age;
@@ -585,4 +587,12 @@
];
};
}
# agenix-rekey configuration (for builder_key re-encryption at build time)
age.rekey = {
masterIdentities = [
"/home/gortium/.ssh/gortium_ssh_key"
];
};
}