fix: mount OpenCode password secret in guest

components/website-editor/vm.nix

@@ -32,7 +32,6 @@ let
 in
 {
   config = lib.mkIf cfg.enable {
-
     programs.ssh.extraConfig = ''
       Host grace-editor
         HostName ${cfg.vm.ip}
@@ -45,9 +44,10 @@ in
       file = ../../secrets/grace-editor/opencode.env.age;
       path = "/run/grace-editor-secrets/opencode.env";
       mode = "0400";
+      # The guest mounts this directory. A real file is required because the
+      # agenix default symlink points into /run/agenix, which is not shared.
+      symlink = false;
     };
-
-
     # Intentionally no autostart: run `systemctl start microvm@grace-editor`
     # when the editing environment is wanted.
     microvm.vms.${hostName} = {

secrets/grace-editor/opencode.env.age

@@ -1,11 +1,13 @@
 age-encryption.org/v1
--> ssh-ed25519 A9oJhw P9Dy/S/EMVZWkEOwyIiTaPher9OWim6GpV6EvxMRjwY
-QAO95PHil/7UfSlYrZjjdu4Kk8vy+brvOHd2J4bJu98
--> ssh-ed25519 eJlTVQ TrjhqE5EWsFfheBG9vfA3caBiULF1QP7oUV0BnQhKB4
-shc1bLz1Ju1/U/O7Ag28/aZSc+/rktmwyXCd5jXkvC4
--> ssh-ed25519 Pn2mDw WH7KTJMgNtrAtFQX0kOWMdeHAS0e5j17epNxI4ZtICU
-cDimqwDawCQPUj01wOCaWqzagmhvaFpxvm0SPur2F0A
--> CL-grease q& A jaA
-ZJDueMr/eEITWUHXie4hfXqarMuB
---- 8aSWAqEb8QgFBBR8QcOQ4FlXHEhpPS9eQ7QCCVc17A8
-ESé{¨/Ê•ËOZ<àM'ö¢RÓލ
9CŒ'ÍÅÝS½Ãj³°aº´Tò­eäꄱõ­Kv·n¦P–eY lÇÅþÀjd½Iææ4Xa5ÑÇωX,k涞õ8>
+-> ssh-ed25519 A9oJhw ziftYWTevG8p+B21y7Nm13mSdp2DrX7JR/AAZ/wdWQI
+ozMlOA95YKOT2pzErcnRpKKlZ/evY18YmSTnNodgY7U
+-> ssh-ed25519 eJlTVQ eK5VJCImonlW9ZKK84mIGZX7TGF6Bk5DvBYHe9Y0xCw
+joxJD1SvFKM9MsZbs9eDsWtJk95Py5ewdXpHw8X9MT0
+-> ssh-ed25519 Pn2mDw SI/Si5SG8PMZYzcaiuiMpMSqd3ghsFl1bi5aGoC1DE0
+/z65sNVbKys2KrqdPsLPiUse0qxAt4K32rv3Hikzovk
+-> X)wW<-grease
+YedpBH1ExVp06uq4utB4Q44O3GfnIghhNBXF/PSzWloB0rGPL0lID5Nsig1wdryE
+VmrBiSeF9sgcUbIXj6tyP14XkFrwERm18S5lbdrLvbDoV3rhwreEUoItPG/BBgA
+--- XCnZvfFbWfA7Kr54DulETHGLwI4qal3zhZ8XQCTxEuU
+%xR‡?o‰“0”[¤ò90åþýµ—|5Ùÿ{xFÜÒfŸ’
+Š°-¬ªÒªo,…mÅN6çƒ0wœØ…(j:Å