| 23 Mar 2023 |
peter-lustig | Is agenix not being updated anymore? | 15:28:05 |
peter-lustig |  Download image.png | 15:28:34 |
cole-h | Is there some functionality you're missing? | 15:30:59 |
peter-lustig | In reply to @cole-h:matrix.org Is there some functionality you're missing? I mean like do you not update the flake.nix with nix flake update | 15:32:39 |
cole-h | Is there something that updated inputs would get you? | 15:33:21 |
cole-h | (What I'm trying to say is: what's the problem with the last commit being weeks ago, if you're not running into issues / if there's nothing to gain from "a new commit"?) | 15:34:23 |
oddlama | The project is mostly complete, so I'd expect updates finished. | 15:56:10 |
oddlama | * The project is mostly complete, so I'd expect updates only rarely. | 15:56:16 |
| 24 Mar 2023 |
| hannes4761 joined the room. | 21:49:24 |
| 25 Mar 2023 |
| amardeeps joined the room. | 04:45:12 |
| 26 Mar 2023 |
| rbutani joined the room. | 00:31:32 |
redstone-menace | Can you either define agenix secrets outside of a nixosConfiguration / homeManagerConfiguration or access secrets within them outside of the system config they were defined? | 13:58:02 |
ryantm | Sure, you can make a module that you use in multiple nixosConfigurations. | 13:59:25 |
| 28 Mar 2023 |
| qverkk joined the room. | 18:52:15 |
qverkk |  Download image.png | 18:53:09 |
qverkk | yo, is this correct? 🤣 | 18:53:09 |
qverkk | can we use keepass with agenix? | 18:53:19 |
ryantm | Hallucinations | 18:56:22 |
qverkk | yeah thats waht i thought, couldnt find anything about this on github XD | 18:57:54 |
qverkk | altho it would be nice to use an existing keepassxc db for nixos secrets | 18:58:20 |
raphi | chatgpt output is wrong unless proven otherwise | 19:01:10 |
| 29 Mar 2023 |
jeroen | does anyone have a hint as to why my agenix does not decrypt secrets at boot, but works fine after a rebuild switch? | 16:39:16 |
cole-h | Hard to tell without logs but sounds like a secret path may not be available at boot | 16:41:46 |
jeroen | what kind of logs would I need to look at? I still have the system at fresh boot state, so /run/agenix is empty | 16:42:34 |
cole-h | The activation logs should be in dmesg / journalctl -k somewhere | 16:43:05 |
jeroen | age secret files are under /etc/nixos so should be available | 16:43:28 |
jeroen | hmm, I think it's cause the system has it's ssh keys somewhere else | 16:44:22 |
cole-h | There's an option for that IIRC. | 16:46:02 |
jeroen | the ssh host keys are on a persistant zfs volume which is not yet available at decrypt time ...
[agenix] WARNING: config.age.identityPaths entry /persist/system/etc/ssh/ssh_host_ed25519_key not present!
| 16:46:11 |
jeroen | * the ssh host keys are on a persistant zfs volume filesystem which is not yet available at decrypt time ...
[agenix] WARNING: config.age.identityPaths entry /persist/system/etc/ssh/ssh_host_ed25519_key not present!
| 16:47:44 |