From 9173432ea93ecaf9956d2f7f784d26235bfcf3b9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Numbus?= <admin@numbus.eu>
Date: Tue, 24 Feb 2026 14:17:10 +0100
Subject: [PATCH] Fixed secrets indentation

---
 deploy.sh                                  | 10 ++++++++++
 templates/nix-config/sops-nix/secrets.yaml |  2 +-
 2 files changed, 11 insertions(+), 1 deletion(-)

diff --git a/deploy.sh b/deploy.sh
index a533c4d..6a503e7 100644
--- a/deploy.sh
+++ b/deploy.sh
@@ -461,6 +461,16 @@ echo "$LIVE_TARGET_PASSWD" | sudo -S chmod 600 /etc/secrets/disks/parity-${i}
 EOF
   done
 
+  local SSH_KEYS_FORMATTED=""
+  if [[ "$(declare -p AUTHORIZED_SSH_PUBLIC_KEY 2>/dev/null)" =~ "declare -a" ]]; then
+    for key in "${AUTHORIZED_SSH_PUBLIC_KEY[@]}"; do
+      SSH_KEYS_FORMATTED+="  \"$key\""$'\n'
+    done
+  else
+    SSH_KEYS_FORMATTED="  \"$AUTHORIZED_SSH_PUBLIC_KEY\""$'\n'
+  fi
+  export AUTHORIZED_SSH_PUBLIC_KEY="$SSH_KEYS_FORMATTED"
+
   echo -e "\n ✅ Generating sops-nix keys..."
   ssh-to-age -private-key -i final-nix-config/home/numbus-admin/.ssh/id_ed25519 > final-nix-config/var/lib/sops-nix/key.txt
   export SOPS_PUBLIC_KEY=$(age-keygen -y final-nix-config/var/lib/sops-nix/key.txt)
diff --git a/templates/nix-config/sops-nix/secrets.yaml b/templates/nix-config/sops-nix/secrets.yaml
index 37a145e..9ceb840 100644
--- a/templates/nix-config/sops-nix/secrets.yaml
+++ b/templates/nix-config/sops-nix/secrets.yaml
@@ -1,4 +1,4 @@
 authorizedSshPublicKeys: |
-  "$AUTHORIZED_SSH_PUBLIC_KEY"
+$AUTHORIZED_SSH_PUBLIC_KEY
 smtpPassword: "$SMTP_SERVER_PASSWORD"
 cloudlfareDnsApiToken: "$CLOUDFLARE_DNS_API_TOKEN"
\ No newline at end of file