where is agenix private key being referenced?

[ryanmsnyder]

Hi Dustin,

I've been using your non-secrets config but am now trying to implement agenix into it by referencing your secrets template modules. The README states:

---

Before generating your first build, these keys must exist in your ~/.ssh directory. Don't worry, I provide a few commands to help you.

Key Name	Platform	Description
id_ed25519	macOS / NixOS	Used to download secrets from Github.
id_ed25519_agenix	macOS / NixOS	Used to encrypt and decrypt secrets.

---

However, I noticed in secrets.nix, the identityFile doesn't reference id_ed25519_agenix. It references id_ed25519. I couldn't figure out where id_ed25519_agenix is being used. Am I misunderstanding something? Thanks again for your config and help.

[dustinlyons]

Hi, this is somewhat confusing and I should eventually make it more clear.

The first key id_ed25519 is used just to download your nix-secrets repo on initial bootstrap, assuming it's private.

The second key, id_ed25519_agenix is copied over to your system and renamed to id_ed25519 during this process. It's then referenced by agenix to do encryption and decryption.