0xrsydn/dotfiles
1
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: secret symlink on launchctl

Browse source
This commit is contained in:
Rasyidan Akbar F. 2026-03-29 14:09:27 +07:00
commit 70620411af
2 changed files with 11 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

12
flake.lock generated
View file

@ -265,11 +265,11 @@
"treefmt-nix": "treefmt-nix" "treefmt-nix": "treefmt-nix"
}, },
"locked": { "locked": {
"lastModified": 1774412760, "lastModified": 1774622711,
"narHash": "sha256-X5xu0MTdqMSSQwRojn8DG8B614FepRR9rJ8CqjG5frI=", "narHash": "sha256-ClwgphRM+reX96UMkNv6LxcOljFPIZEziyV9ikxJ1Ek=",
"owner": "numtide", "owner": "numtide",
"repo": "llm-agents.nix", "repo": "llm-agents.nix",
"rev": "80c08424d7edbc6a9e6492caa7a68bd64759af19", "rev": "275aaf50be7c4249d77981c2c72ee3db9daa254a",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -371,11 +371,11 @@
}, },
"nixpkgs_2": { "nixpkgs_2": {
"locked": { "locked": {
"lastModified": 1773840656, "lastModified": 1774273680,
"narHash": "sha256-9tpvMGFteZnd3gRQZFlRCohVpqooygFuy9yjuyRL2C0=", "narHash": "sha256-a++tZ1RQsDb1I0NHrFwdGuRlR5TORvCEUksM459wKUA=",
"owner": "NixOS", "owner": "NixOS",
"repo": "nixpkgs", "repo": "nixpkgs",
"rev": "9cf7092bdd603554bd8b63c216e8943cf9b12512", "rev": "fdc7b8f7b30fdbedec91b71ed82f36e1637483ed",
"type": "github" "type": "github"
}, },
"original": { "original": {

9
modules/home/secrets.nix
View file

@ -74,10 +74,11 @@ in
generateKey = true; generateKey = true;
}; };
# Ensure the LaunchAgent on macOS can find `getconf` (needed by # The LaunchAgent runs with a minimal PATH. sops-install-secrets needs:
# sops-install-secrets to resolve DARWIN_USER_TEMP_DIR). # /usr/bin – getconf (resolves DARWIN_USER_TEMP_DIR)
# Without this, age.plugins produces an empty PATH. # /usr/sbin – diskutil (RAM disk management)
environment.PATH = lib.mkForce "/usr/bin"; # /sbin – newfs_hfs (creates the HFS RAM disk for decrypted secrets)
environment.PATH = lib.mkForce "/usr/bin:/usr/sbin:/sbin";
secrets = lib.mapAttrs sanitizeSecret cfg.secrets; secrets = lib.mapAttrs sanitizeSecret cfg.secrets;
} }