gn

modules/nixos/core/impermanence.nix

@@ -1,6 +1,9 @@
 { config, lib, ... }:
 
 {
+  /* Required to be able to allowOther on user persisted directories */
+  programs.fuse.userAllowOther = true;
+
   boot.initrd.postDeviceCommands = lib.mkAfter ''
     mkdir /btrfs_tmp
     mount "${config.fileSystems."/".device}" /btrfs_tmp

modules/nixos/core/security.nix

@@ -29,4 +29,6 @@
     users.root.hashedPassword = "!";
     mutableUsers = false;
   };
+
+  sops.age.keyFile = "/nix/config/secrets/keys.txt";
 }