preparing k3s bootstrapping

nixosModules/services/k3s/default.nix

@@ -29,7 +29,7 @@ in
       }
     ];
 
-    age.secrets.k3stoken.file = ../../secrets/k3stoken.age;
+    age.secrets.k3stoken.file = ../../../secrets/k3stoken.age;
 
     services.k3s = {
       enable = true;

secrets/k3stoken.age

@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 5k28aQ wUKJk8gcxcCqbdXsfuod3dvEtj+pXRe8rLYVv/uyND4
+aHOXSUwP5+AJZ5etU+dj9ssVNQNcDuXSpq+wvIYsoyE
+-> ssh-ed25519 MhDGlw Ln5f8TTQFDlp+KGQpRRPNgn/+fzoY7Bnl7FlDg5ZSSs
+uJbxZFjjcSxhIPHvregG1tD8BKKfHHMlvfZ6itDIppY
+--- MGApTU7O6xSlpanV9LC22ZX2u7bwULpBMaTLg01SO/0
+šâYøï	ö¯J#<23>ž6/ó—6 ñwTF¯ìfŒÔ¶¡	x×<78>º™5·Îÿ¸^

secrets/keys.json

@@ -11,6 +11,10 @@
       "hosts:wenar-nix",
       "hosts:lenar",
       "servers:test-server"
+    ],
+    "k3stoken.age": [
+      "hosts:wenar-nix",
+      "hosts:lenar"
     ]
   }
 }

secrets/secrets.nix

@@ -9,4 +9,5 @@ let
 in
 {
   "mypassword.age".publicKeys = getKeys "mypassword.age";
+  "k3stoken.age".publicKeys = getKeys "k3stoken.age";
 }