doc: fix the updatekeys command to be non-interactive
This commit is contained in:
@@ -25,7 +25,7 @@ to add a host:
|
||||
- instructions in hosts/common/secrets.nix
|
||||
- run `ssh-to-age` on user/host pubkeys
|
||||
- add age key to .sops.yaml
|
||||
- update encrypted secrets: `find secrets -type f -exec sops updatekeys '{}' ';'`
|
||||
- update encrypted secrets: `find secrets -type f -exec sops updatekeys -y '{}' ';'`
|
||||
- setup wireguard keys
|
||||
- `pk=$(wg genkey)`
|
||||
- `echo "$pk" | sops encrypt --filename-override secrets/$(hostname)/wg-home.priv.bin --output secrets/$(hostname)/wg-home.priv.bin`
|
||||
|
@@ -16,7 +16,7 @@
|
||||
# for each host you want to decrypt secrets:
|
||||
# $ cat /etc/ssh/ssh_host_keys/ssh_host_ed25519_key.pub | ssh-to-age
|
||||
# add the result to .sops.yaml
|
||||
# $ find secrets -type f -exec sops updatekeys '{}' ';'
|
||||
# $ find secrets -type f -exec sops updatekeys -y '{}' ';'
|
||||
#
|
||||
# to create a new secret:
|
||||
# $ sops secrets/example.yaml
|
||||
|
Reference in New Issue
Block a user