✨ [shared] Sops nix for user passwords

justfile

@@ -44,3 +44,19 @@ unlock:
 # Connect to tailnet or sign-in if not registered
 start-tailscale:
     tailscale up --login-server https://vpn.martials.no
+
+# Generate a new age key from an existing ssh key (without passphrase)
+@generate-age-from-ssh:
+    nix run nixpkgs#ssh-to-age -- -private-key -i ~/.ssh/id_ed25519 > ~/.config/sops/age/keys.txt
+
+# Get a public age key from an existing age private key
+@get-public-age-key:
+    nix shell nixpkgs#age -c age-keygen -y ~/.config/sops/age/keys.txt
+
+# Edit the SOPS secrets file
+@edit-secrets:
+    nix run nixpkgs#sops -- shared/secrets/secrets.yaml
+
+# Hash a string using the mkpasswd command
+hash PASS:
+    echo "{{PASS}}" | mkpasswd -s