Update README.md

This commit is contained in:
Eric Drechsel 2021-04-08 11:47:48 -07:00 committed by GitHub
parent 66374fb29e
commit a64940456c
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -161,10 +161,11 @@ but, if you want to (change the system based on your system):
```nix
age.secrets.secret1.file = ../secrets/secret1.age;
```
This will cause the secret to be decrypted to `age.secrets.secret1.path` (`/run/secrets/secret1` by default). See [modules/age.nix](modules/age.nix) for per-secret options controlling ownership etc.
5. NixOS rebuild or use your deployment tool like usual.
The secret will be decrypted to `age.secrets.secret1.path` (`/run/secrets/secret1` by default). For per-secret options controlling ownership etc, see [modules/age.nix](modules/age.nix).
## Rekeying
If you change the public keys in `secrets.nix`, you should rekey your