WIP with placeholder secrets

2026-07-03 22:46:49 -05:00
parent cf418ca7a0
commit 6499ad7612
12 changed files with 370 additions and 102 deletions
@@ -37,6 +37,8 @@
    config = {
      ssh.certificates.enable = true;
      sops.secrets."janus/admin_jwk" = {
+        # Shared provisioner credential is intentionally centralized.
+        sopsFile = ../../../keys/secrets.yaml;
        owner = "root";
        group = "root";
        mode = "0400";