also encrypt secret for the machine itself

2023-09-28 17:51:37 +02:00
parent 7184fe277d
commit 0c91bb90ab
1 changed files with 1 additions and 0 deletions
--- a/pkgs/clan-cli/clan_cli/secrets/sops_generate.py
+++ b/pkgs/clan-cli/clan_cli/secrets/sops_generate.py
@@ -64,6 +64,7 @@ export secrets={shlex.quote(str(secrets_dir))}
            encrypt_secret(
                sops_secrets_folder() / f"{machine_name}-{secret['name']}",
                secret_file.read_text(),
+                add_machines=[machine_name],
            )
        for fact in secret_options["facts"].values():
            fact_file = facts_dir / fact["name"]