Update README.md

This commit is contained in:
Eric Drechsel 2021-04-08 11:47:48 -07:00 committed by GitHub
parent 66374fb29e
commit a64940456c
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -161,10 +161,11 @@ but, if you want to (change the system based on your system):
```nix ```nix
age.secrets.secret1.file = ../secrets/secret1.age; age.secrets.secret1.file = ../secrets/secret1.age;
``` ```
This will cause the secret to be decrypted to `age.secrets.secret1.path` (`/run/secrets/secret1` by default). See [modules/age.nix](modules/age.nix) for per-secret options controlling ownership etc.
5. NixOS rebuild or use your deployment tool like usual. 5. NixOS rebuild or use your deployment tool like usual.
The secret will be decrypted to `age.secrets.secret1.path` (`/run/secrets/secret1` by default). For per-secret options controlling ownership etc, see [modules/age.nix](modules/age.nix).
## Rekeying ## Rekeying
If you change the public keys in `secrets.nix`, you should rekey your If you change the public keys in `secrets.nix`, you should rekey your