From 73897f648d92938294374854a55f00e516c4dcc2 Mon Sep 17 00:00:00 2001
From: oddlama <oddlama@oddlama.org>
Date: Tue, 26 Sep 2023 16:38:46 +0200
Subject: [PATCH] feat: add sandbox path on dev machines for agenix-rekey

---
 modules/optional/dev/default.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/modules/optional/dev/default.nix b/modules/optional/dev/default.nix
index 4300169..de14d81 100644
--- a/modules/optional/dev/default.nix
+++ b/modules/optional/dev/default.nix
@@ -12,6 +12,9 @@
   environment.systemPackages = [pkgs.man-pages pkgs.man-pages-posix];
   environment.enableDebugInfo = true;
 
+  # Add the agenix-rekey sandbox path permanently to avoid adding myself to trusted-users
+  nix.settings.extra-sandbox-paths = ["/var/tmp/agenix-rekey"];
+
   services.nixseparatedebuginfod.enable = true;
   nix.settings.allowed-users = ["nixseparatedebuginfod"];
 }