diff --git a/components/website-editor/vm.nix b/components/website-editor/vm.nix index c2f6c05..102bd56 100644 --- a/components/website-editor/vm.nix +++ b/components/website-editor/vm.nix @@ -32,7 +32,6 @@ let in { config = lib.mkIf cfg.enable { - programs.ssh.extraConfig = '' Host grace-editor HostName ${cfg.vm.ip} @@ -45,9 +44,10 @@ in file = ../../secrets/grace-editor/opencode.env.age; path = "/run/grace-editor-secrets/opencode.env"; mode = "0400"; + # The guest mounts this directory. A real file is required because the + # agenix default symlink points into /run/agenix, which is not shared. + symlink = false; }; - - # Intentionally no autostart: run `systemctl start microvm@grace-editor` # when the editing environment is wanted. microvm.vms.${hostName} = { diff --git a/secrets/grace-editor/opencode.env.age b/secrets/grace-editor/opencode.env.age index 3dd88a1..160f71b 100644 --- a/secrets/grace-editor/opencode.env.age +++ b/secrets/grace-editor/opencode.env.age @@ -1,11 +1,13 @@ age-encryption.org/v1 --> ssh-ed25519 A9oJhw P9Dy/S/EMVZWkEOwyIiTaPher9OWim6GpV6EvxMRjwY -QAO95PHil/7UfSlYrZjjdu4Kk8vy+brvOHd2J4bJu98 --> ssh-ed25519 eJlTVQ TrjhqE5EWsFfheBG9vfA3caBiULF1QP7oUV0BnQhKB4 -shc1bLz1Ju1/U/O7Ag28/aZSc+/rktmwyXCd5jXkvC4 --> ssh-ed25519 Pn2mDw WH7KTJMgNtrAtFQX0kOWMdeHAS0e5j17epNxI4ZtICU -cDimqwDawCQPUj01wOCaWqzagmhvaFpxvm0SPur2F0A --> CL-grease q& A jaA -ZJDueMr/eEITWUHXie4hfXqarMuB ---- 8aSWAqEb8QgFBBR8QcOQ4FlXHEhpPS9eQ7QCCVc17A8 -ES{/ʕOZ \ No newline at end of file +-> ssh-ed25519 A9oJhw ziftYWTevG8p+B21y7Nm13mSdp2DrX7JR/AAZ/wdWQI +ozMlOA95YKOT2pzErcnRpKKlZ/evY18YmSTnNodgY7U +-> ssh-ed25519 eJlTVQ eK5VJCImonlW9ZKK84mIGZX7TGF6Bk5DvBYHe9Y0xCw +joxJD1SvFKM9MsZbs9eDsWtJk95Py5ewdXpHw8X9MT0 +-> ssh-ed25519 Pn2mDw SI/Si5SG8PMZYzcaiuiMpMSqd3ghsFl1bi5aGoC1DE0 +/z65sNVbKys2KrqdPsLPiUse0qxAt4K32rv3Hikzovk +-> X)wW<-grease +YedpBH1ExVp06uq4utB4Q44O3GfnIghhNBXF/PSzWloB0rGPL0lID5Nsig1wdryE +VmrBiSeF9sgcUbIXj6tyP14XkFrwERm18S5lbdrLvbDoV3rhwreEUoItPG/BBgA +--- XCnZvfFbWfA7Kr54DulETHGLwI4qal3zhZ8XQCTxEuU +%xR?o0[90|5{xFf +-o,mN60w؅(j: \ No newline at end of file