feat(sops): add sops-nix input, core module and devShell tooling

Wires sops-nix into every machine via machines/core/sops.nix so hosts
decrypt with their existing SSH host key. Adds a devShell exposing
sops/age/ssh-to-age for the operator workflow, which also fixes .envrc's
previously no-op `use flake`.
This commit is contained in:
2026-09-08 15:43:36 +02:00
parent 70deb25080
commit 3ab8bfbb91
7 changed files with 89 additions and 2 deletions
+3 -1
View File
@@ -1 +1,3 @@
AGENTS.md
AGENTS.md
*.dec
keys.txt