nixos-config/home/modules/ssh.nix

{
  inputs,
  lib,
  config,
  pkgs,
  ...
}: {
  age.identityPaths = ["${config.home.homeDirectory}/.ssh/agenix"]; # Use this key to decrypt
  home.packages = [
    inputs.agenix.packages.x86_64-linux.default # Install CLI tool to encrypt
  ];
  age.secrets.xqtc_id_ed25519 = {
    file = ../secrets/xqtc_id_ed25519.age;
    path = "${config.home.homeDirectory}/.ssh/id_ed25519";
    mode = "600";
  };
  age.secrets.xqtc_id_ed25519_pub = {
    file = ../secrets/xqtc_id_ed25519_pub.age;
    path = "${config.home.homeDirectory}/.ssh/id_ed25519.pub";
    mode = "640";
  };
}