sops: introduce sops-nix (age), ssh keys from encrypted tarball, .example secrets

2026-07-14 12:24:21 +04:00 · 2026-07-14 12:24:21 +04:00 · a7ec82579c
commit a7ec82579c
parent 8be13b680f
9 changed files with 149 additions and 7 deletions
--- a/.gitignore
+++ b/.gitignore
@ -1,4 +1,5 @@
 modules/usb-devices.nix
-secrets/
-.sops.yaml
+# real secrets never enter the repo — only .example structure files are tracked
+secrets/*
+!secrets/*.example
 result