fix(sops): add desktop public key to secrets.yaml and authorized_keys templates

Author: pedrobrantes

machines/aarch64/android/common.nix

@@ -39,11 +39,13 @@
 
   programs.udocker.enable = true;
 
+  sops.secrets."ssh_public_keys/desktop" = { };
   sops.secrets."ssh_public_keys/smartphone" = { };
   sops.secrets."ssh_public_keys/tablet" = { };
 
   sops.templates."authorized_keys" = {
     content = ''
+      ${config.sops.placeholder."ssh_public_keys/desktop"}
       ${config.sops.placeholder."ssh_public_keys/smartphone"}
       ${config.sops.placeholder."ssh_public_keys/tablet"}
     '';

machines/x86_64/wsl/desktop/default.nix

@@ -71,11 +71,13 @@
   programs.docker-cli.enable = true;
   programs.custom-ollama.enable = true;
 
+  sops.secrets."ssh_public_keys/desktop" = { };
   sops.secrets."ssh_public_keys/smartphone" = { };
   sops.secrets."ssh_public_keys/tablet" = { };
 
   sops.templates."authorized_keys" = {
     content = ''
+      ${config.sops.placeholder."ssh_public_keys/desktop"}
       ${config.sops.placeholder."ssh_public_keys/smartphone"}
       ${config.sops.placeholder."ssh_public_keys/tablet"}
     '';

secrets/secrets.yaml

@@ -3,6 +3,7 @@ ssh_keys:
     smartphone: ENC[AES256_GCM,data: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,iv:yjIYcPRhuCmdHaUCD+MzdsHmNu+v7sxezvTHnvXZxbw=,tag:zvFNX+Ta4BM8RPlRLhuv+Q==,type:str]
     tablet: ENC[AES256_GCM,data:CHwHfLBg/uNYeKCcYcRUcTufT6P8afXFElChLjRsA6g8vkOrw0sb/rMZD1woha7dU71uICNkUZ6t+1Njwjc+M/FHkvz0gD3tyGVz0AwO8mOer1WnI037F5OGS2MLL/T1vX4RlJiZ7TVyJ963JnmeEEiCXvgkW48Yz4tJW57/XKucSzCG95SzpA0aR7pdBtkylNOhvtn5Y6klnFYjO/QTtWLSmGNYavJwCzQYBzIu92FqEiARtTtxdFztyKmo/13gNYHlvm2kMZfiEr1gsCRpVzFcqyjML0G6nRH8NT6MGaqPtw0ioeY7/i6W7vqVtKPnqZ0W8X5X4Z2ByxyrF85VK62qhU724ZqEa35+p23TG2SDAXP6fDz/3FZbatWwSJLD6r+eb/lCtqLplxOZSmZeVQOavU3iuhtQOVREc7aYLlLtM5Sh++x5wXzdnCM4a0E2yzbBgDApoknPagUq/y7UZ52Kv7s1u1gwtL73VtTv4GtI6X/Zga2/pV+rwGLmWRO1NiiRDvsltmAEBzf4AlL+XopoGEW/XkPD2y6vigJg8AQ5NHyX15dar04cxMJbIdVzhijoDi5SU87eQOctTs+15Hu0nwbr0zIYO2YYAE70w5M=,iv:hJrTZILMCaDkgkd/CcgLiV+bG0/oRrg9L29kv6u4Zb4=,tag:L1COHNCywZ0g80l0TcXl9w==,type:str]
 ssh_public_keys:
+    desktop: ENC[AES256_GCM,data:xJV9YsgJGJ2icsMA+n3EvfflcSd20Ns/bBF9TrGYl5NZGk48YURRdy9RzSyhf3d+fbCokactxyzbrPF6q3wBk6/AyXWucq8HW699DO5ZYRPajG9K8UtkNFM+LomACjfVuE4OyenErw3NMjQ=,iv:VUYHjB+hJLaQNF4nVuBxu7OXN5GS0MQ/cjtDQ0fz2as=,tag:OwxR8feZ3qk5xmz8fjFItA==,type:str]
     smartphone: ENC[AES256_GCM,data:R11WPPwWfAWx85f9fi0cGkBoemXb/eCkvcCnoo4IQIHRBl13xAAIihUKLH/JArll5w7X2JxqMSRA9CmL2jZVqGXQdCnUr7XVHgUoxoHloelGq0WqL1q/tTkndKKVWLUPwKt665OH+BdUeY9Ta2lKfQ==,iv:kR642B+vc/ebZJySUG8o4Qvn6gUrdAMznHkKQqmYjRk=,tag:ZrgEFWsMa7pjkl8gkn4tYg==,type:str]
     tablet: ENC[AES256_GCM,data:JF7bctV21qgrvaahTZd/blnevVFVgz0mlbVz8Hp2NLs3TkcMbpOSiEL11G2YWPxQp2MDYyC20RYjltKCsaMU6SOC9Bw/9nWsJKNlAqVY3xzbWPUGjfYxlCzchcm/6Wmpho+iSGwCjX6wiUlzzyiqEg==,iv:3UctWlLrHeB5l2yexpaamiqvMatdTKc7JfpclCFoCgo=,tag:loDzzy45khLX9VDaywKuVA==,type:str]
 sops:
@@ -16,7 +17,7 @@ sops:
             YUw2WTZwd3dVMzZFYW8rT21DTHR5b1UKDpzOUxfQaTGAiLxGtO7jWmyA8qi0+YHO
             v3CK52VrI4WTjBcpGxVG6IVakb96r7n6zwJ3qYks4IfxvjcLk9Q3EQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-07-22T20:40:49Z"
-    mac: ENC[AES256_GCM,data:lwVVMclaWghe8jpTqEuvl2v1j0G331rK3Z3noz/mK6JhH8Byn7b6VFgfHZ6ROJs+rknBastXVwZC0SrUKkK7svhS3m7xhwgT0xflzw/51PZXBs9yqumX6caGUU0toqJ55fQgaPyGtW7G7vlrEz84FmOrUArLGHOP6V1Rz0kpUg8=,iv:PLQOC8qF78uxG2o8w589TzJZpdI7gfevWcbSV3p3VMs=,tag:s29OpHO094QJqo++B7WopQ==,type:str]
+    lastmodified: "2026-07-22T22:23:23Z"
+    mac: ENC[AES256_GCM,data:mjWbKnRff108TLzKa+P+/VXIL5AHStYbGGxzy0M2BIEcq4vlnc7pRDYrVwSC/A04a6vr98SrTPHCS6dVlK4Nhv7epMl3UA6SUeoF4Cmx0TrLo0HDJY/AuwHVzyiYZkR0eS0dIMG1cJwU+zcfVCeVZY7IouQEGW/M21gejqRXyDU=,iv:aLaE/WKMABL1vNm8jCC4XnYzDj8DKsZKqYRjmQdytTU=,tag:G1grNP1kEGUB2w747j287w==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.12.1