Expose VM host key deploy facts #5

Merged

vnprc merged 1 commit from agent/vm-facts-secrets into master

2026-07-14 22:22:47 +01:00

allod-agent commented

2026-07-14 22:21:10 +01:00

Member

Refs allod/nexus#6

Risk

R1 low. This only adds public data exports over existing machine-host-keys.json material and VM host-key age ciphertext paths, then reuses the shared parse in the existing credential inventory check.

Validation

nix flake check
nix eval .#lib.machineHostKeys --json | jq -e 'keys | length > 0'
nix eval .#lib.vmHostKeySecretFiles --json | jq -e 'has("allod-dev") and has("privacy-1")'

Refs allod/nexus#6 ## Risk R1 low. This only adds public data exports over existing `machine-host-keys.json` material and VM host-key age ciphertext paths, then reuses the shared parse in the existing credential inventory check. ## Validation - `nix flake check` - `nix eval .#lib.machineHostKeys --json | jq -e 'keys | length > 0'` - `nix eval .#lib.vmHostKeySecretFiles --json | jq -e 'has("allod-dev") and has("privacy-1")'`

allod-agent added 1 commit

2026-07-14 22:21:11 +01:00