[NixOS] Set up agenix and auto import gpg key

nixos/configuration.nix

@@ -16,6 +16,7 @@
     ./nix.nix
     ./nixified.ai.nix
     ./options.nix
+    ./secrets.nix
     ./ssh.nix
     ./syncthing.nix
     ./users.nix

nixos/keys.nix

@@ -7,6 +7,7 @@ rec {
     "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDt/rcYuGGlXBcRUJvzUCgOW8PNVkJJ5TwEOha1/KGM4 imalison@stevie-nixos"
     "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICzGkqGJm+nrMvsrfuWOLVxXHvi0UL1ULJmyfzS9sKpy imalison@biskcomp"
     "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJr9kVlYIZIPXfXom4Fi7S2yvp5sWJ6BSM5m3uLh+8y5 imalison@adele"
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOOFkA5JZkq8mRd7St0jP2P6WyYYhW2CChmQoY20N45f imalison@ryzen-shine"
     "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIiZd2FiyTJvuvDh5hH0L3BqZV3E/kwwyau57QD7pz7C cardno:000614590850" # Dfinity Admin
     "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHOEt0T+Hxxat5tbkD9mSu8T271QjRrLr2EA0rIDXUNL cardno:000614590748" # Dfinity Read-Only
     "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMCJ08qswd3OoApAIHQwojEUJ4sre89vSngbM3x5pBP2 imalison@jay-lenovo.local" # Kat's Lenovo Legion

nixos/secrets.nix

@@ -0,0 +1,21 @@
+{ inputs, pkgs, ... }: {
+  home-manager.users.imalison = ({ config, ... }: {
+    imports = [ inputs.agenix.homeManagerModules.default ];
+    age.identityPaths = [ "${config.home.homeDirectory}/.ssh/id_ed25519" ];
+    home.packages = [
+      inputs.agenix.packages."${pkgs.system}".default
+    ];
+    age.secrets.gpg-keys.file = ./secrets/gpg-keys.age;
+
+    systemd.user.services.import-gpg-key = {
+      Unit = {
+        Description = "Import GPG private key";
+      };
+      Install.WantedBy = [ "default.target" ];
+      Service = {
+        Type = "oneshot";
+        ExecStart = "${pkgs.gnupg}/bin/gpg --batch --import /run/user/%U/agenix/gpg-keys";
+      };
+    };
+  });
+}

nixos/secrets/secrets.nix

@@ -0,0 +1,5 @@
+let keys = (import ../keys.nix);
+in
+{
+  "gpg-keys.age".publicKeys = keys.kanivanKeys;
+}