From 9a518cd8166e434698029a6d1f3bc70863d7d219 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?J=C3=B6rg=20Thalheim?= Date: Thu, 28 Sep 2023 17:51:37 +0200 Subject: [PATCH] also encrypt secret for the machine itself --- pkgs/clan-cli/clan_cli/secrets/sops_generate.py | 1 + 1 file changed, 1 insertion(+) diff --git a/pkgs/clan-cli/clan_cli/secrets/sops_generate.py b/pkgs/clan-cli/clan_cli/secrets/sops_generate.py index f93c6a884..1f9384f53 100644 --- a/pkgs/clan-cli/clan_cli/secrets/sops_generate.py +++ b/pkgs/clan-cli/clan_cli/secrets/sops_generate.py @@ -64,6 +64,7 @@ export secrets={shlex.quote(str(secrets_dir))} encrypt_secret( sops_secrets_folder() / f"{machine_name}-{secret['name']}", secret_file.read_text(), + add_machines=[machine_name], ) for fact in secret_options["facts"].values(): fact_file = facts_dir / fact["name"]