I see sops-nix a lot, but it's generally used with SSH keys. But where do I get that SSH key from, and what if I lose it? Or what if I want to put my SSH key in Home Manager? Or what if I do a rebuild on another system that doesn't have that ssh key?
Can I just put a password in during a nixos-rebuild that'll decrypt my secret file(s)?
(I tried using sops with a gpg key on my Yubikey, but stumbled into an "Invalid Time" error that apparently me and 3 other people on Reddit have seen. But even if the key was safe on my Yubikey, it still doesn't solve the "rebuilding on another machine", because my Yubikey is on my desktop, not the VM, right?)
