From dd8a4856324de21995fcceb553bc110eaf722936 Mon Sep 17 00:00:00 2001
From: Hektor Misplon <hektor.misplon@pm.me>
Date: Wed, 11 Mar 2026 19:38:17 +0100
Subject: [PATCH] fix: remove signing keys

---
 hosts/andromache/default.nix | 2 --
 hosts/astyanax/default.nix   | 2 --
 modules/secrets/default.nix  | 2 --
 3 files changed, 6 deletions(-)

diff --git a/hosts/andromache/default.nix b/hosts/andromache/default.nix
index b4c05c91..ad4945ac 100644
--- a/hosts/andromache/default.nix
+++ b/hosts/andromache/default.nix
@@ -62,8 +62,6 @@ in
   secrets.username = username;
   docker.user = username;
 
-  nix.settings.secret-key-files = [ config.sops.secrets.nix_signing_key_andromache.path ];
-
   disko.devices = {
     disk.data = {
       type = "disk";
diff --git a/hosts/astyanax/default.nix b/hosts/astyanax/default.nix
index b195067b..14a89cac 100644
--- a/hosts/astyanax/default.nix
+++ b/hosts/astyanax/default.nix
@@ -61,8 +61,6 @@ in
   nfc.user = username;
   desktop.ly.enable = true;
 
-  nix.settings.secret-key-files = [ config.sops.secrets.nix_signing_key_astyanax.path ];
-
   hardware = {
     cpu.intel.updateMicrocode = true;
     # https://wiki.nixos.org/wiki/Intel_Graphics
diff --git a/modules/secrets/default.nix b/modules/secrets/default.nix
index 02ff5df9..259cec10 100644
--- a/modules/secrets/default.nix
+++ b/modules/secrets/default.nix
@@ -29,8 +29,6 @@ in
         "anki_sync_user".owner = config.users.users.${cfg.username}.name;
         "anki_sync_key".owner = config.users.users.${cfg.username}.name;
         "hcloud".owner = config.users.users.${cfg.username}.name;
-        "nix_signing_key_astyanax" = { };
-        "nix_signing_key_andromache" = { };
         "opencode_api_key".owner = config.users.users.${cfg.username}.name;
         # TODO: using shared secrets for now, but would be better to to per-host secrets
         # To add per-host secrets: