fix various agenix things

2025-10-17 23:12:18 -04:00
parent 1ddcccd1c2
commit e8aafda386
4 changed files with 7 additions and 19 deletions
--- a/usb-secrets.nix
+++ b/usb-secrets.nix
@@ -9,12 +9,14 @@
  fileSystems."/mnt/usb-secrets" = {
    device = "/dev/disk/by-label/SECRETS";
    fsType = "vfat";
-    options = [ "noauto" "user" "rw" ];
+    options = [
+      "ro"
+      "uid=root"
+      "gid=root"
+      "umask=377"
+    ];
+    neededForBoot = true;
  };

  age.identityPaths = [ "/mnt/usb-secrets/usb-secrets-key" ];
-
-  systemd.tmpfiles.rules = [
-    "d /mnt/usb-secrets 0755 root root -"
-  ];
 }