From 00ded078cc50485fd7c13ddcedae470e301603dc Mon Sep 17 00:00:00 2001 From: 24apricots Date: Sun, 19 Jul 2026 21:11:25 -0700 Subject: [PATCH] creating nix hosts: you can use agenix edit for binary files --- .../infrastructure/nix-hosts/creating-nix-hosts/index.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/docs/staff-docs/infrastructure/nix-hosts/creating-nix-hosts/index.md b/docs/staff-docs/infrastructure/nix-hosts/creating-nix-hosts/index.md index 2a3fa9d..8030833 100644 --- a/docs/staff-docs/infrastructure/nix-hosts/creating-nix-hosts/index.md +++ b/docs/staff-docs/infrastructure/nix-hosts/creating-nix-hosts/index.md @@ -148,8 +148,7 @@ if command does not initially succeed, nix-collect-garbage before trying to run 6. Place the `NEWHOSTNAME.keytab` file in your home directory on the machine with the repo. - for moving files between hosts, try `sftp`. 7. Go into the repo and enter the devshell: `cd nix && nix develop` -8. `age --encrypt $(grep -h "^# public key:" secrets/master-identities/*.pub | sed 's/# public key: //' | xargs -I{} echo '-r {}') -o secrets/master-keyed/keytabs/amethyst.age ~/amethyst.keytab` - - pasting the secret into the text editor opened from `agenix edit` wont work for a binary file like this +8. `agenix edit -i ~/amethyst.keytab secrets/master-keyed/keytabs/amethyst.age` 9. `git add secrets/master-keyed/keytabs/amethyst.age` so nix can pick up the file 10. `agenix rekey` 11. add the new file under `rekeyed`, commit, and push!