From 72307e4dca688a5f2b88cef26273aaa6a5e189db Mon Sep 17 00:00:00 2001
From: Franck Cuny <franck@fcuny.net>
Date: Fri, 9 Jan 2026 19:11:37 -0800
Subject: don't use agenix from home manager

Install the key with the host's configuration and rekey the secrets.
---
 machines/mbp-work.nix | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'machines/mbp-work.nix')

diff --git a/machines/mbp-work.nix b/machines/mbp-work.nix
index 16d9c59..851444a 100644
--- a/machines/mbp-work.nix
+++ b/machines/mbp-work.nix
@@ -1,5 +1,12 @@
 { adminUser, pkgs, ... }:
 {
+  age.secrets = {
+    anthropic-api-key = {
+      file = ../secrets/users/fcuny/anthropic-api-key.age;
+      owner = "${toString adminUser.uid}";
+    };
+  };
+
   imports = [
     ../profiles/darwin.nix
     ../profiles/home-manager.nix
-- 
cgit v1.2.3