From 66374fb29e16904f78dcfe06ca3a4ca184242428 Mon Sep 17 00:00:00 2001
From: Eric Drechsel <eric@pdxhub.org>
Date: Thu, 8 Apr 2021 11:43:54 -0700
Subject: [PATCH] Extend the tutorial to describe location of decrypted secrets

---
 README.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/README.md b/README.md
index 1a5421c..eba813c 100644
--- a/README.md
+++ b/README.md
@@ -161,6 +161,8 @@ but, if you want to (change the system based on your system):
    ```nix
    age.secrets.secret1.file = ../secrets/secret1.age;
    ```
+   This will cause the secret to be decrypted to `age.secrets.secret1.path` (`/run/secrets/secret1` by default). See [modules/age.nix](modules/age.nix) for per-secret options controlling ownership etc.
+   
 5. NixOS rebuild or use your deployment tool like usual.
 
 ## Rekeying