update age key stuff

Author: rvenutolo

.chezmoi.toml.tmpl

@@ -4,7 +4,7 @@ progress = true
 verbose = true
 
 [age]
-identity = '~/.config/chezmoi/age_key.txt'
+identity = '~/.keys/age.key'
 recipient = 'age1v9umzaqlw3euuwd20l605qeyqp9cmqxf3flzz0eh9gj5vxslsarq6fy8gs'
 
 [data]

.chezmoiignore

@@ -1,3 +1,3 @@
 README.md
 TODO
-key.txt.age
+age.key.ENCRYPTED

.chezmoiscripts/run_once_before_decrypt-private-key.sh

@@ -6,14 +6,14 @@ function log() {
   echo "${0##*/}: $*" >&2
 }
 
-age_key_file="$(dirname "${CHEZMOI_CONFIG_FILE}")/age_key.txt"
+age_key_file="${HOME}/.keys/age.key"
 readonly age_key_file
 
 if [[ -f "${age_key_file}" ]]; then
   exit 0
 fi
 
 log 'Decrypting age key'
-until age --decrypt --output "${age_key_file}" "${CHEZMOI_SOURCE_DIR}/key.txt.age"; do :; done
+until age --decrypt --output "${age_key_file}" "${CHEZMOI_SOURCE_DIR}/age.key.ENCRYPTED"; do :; done
 log 'Decrypted age key'
 chmod 600 "${age_key_file}"

key.txt.age age.key.ENCRYPTED

@@ -37,6 +37,10 @@ if [[ -d "${HOME}/.nix-profile/share}" ]]; then
   fi
 fi
 
+# age
+export AGE_PUBLIC_KEY='age1v9umzaqlw3euuwd20l605qeyqp9cmqxf3flzz0eh9gj5vxslsarq6fy8gs'
+export AGE_PRIVATE_KEY_FILE="${HOME}/.keys/age.key"
+
 ## dirs and files
 export ANDROID_HOME="${XDG_DATA_HOME}/android"
 export ATOM_HOME="${XDG_DATA_HOME}/atom"