From 004fb82660d066de8432e003ba5492cc58ebdcab Mon Sep 17 00:00:00 2001
From: mjallen18 <matt.l.jallen@gmail.com>
Date: Tue, 27 May 2025 19:08:59 -0500
Subject: [PATCH] deck sops idk

---
 hosts/deck/sops.nix            | 14 +++++++-------
 share/impermanence/default.nix |  1 -
 2 files changed, 7 insertions(+), 8 deletions(-)

diff --git a/hosts/deck/sops.nix b/hosts/deck/sops.nix
index 692c861..750843f 100755
--- a/hosts/deck/sops.nix
+++ b/hosts/deck/sops.nix
@@ -63,31 +63,31 @@ in
       # Secureboot keys
       # ------------------------------
       "secureboot/GUID" = {
-        path = "/etc/secureboot/GUID";
+#        path = "/etc/secureboot/GUID";
         mode = "0600";
       };
       "secureboot/keys/db-key" = {
-        path = "/etc/secureboot/keys/db/db.key";
+#        path = "/etc/secureboot/keys/db/db.key";
         mode = "0600";
       };
       "secureboot/keys/db-pem" = {
-        path = "/etc/secureboot/keys/db/db.pem";
+#        path = "/etc/secureboot/keys/db/db.pem";
         mode = "0600";
       };
       "secureboot/keys/KEK-key" = {
-        path = "/etc/secureboot/keys/KEK/KEK.key";
+#        path = "/etc/secureboot/keys/KEK/KEK.key";
         mode = "0600";
       };
       "secureboot/keys/KEK-pem" = {
-        path = "/etc/secureboot/keys/KEK/KEK.pem";
+#        path = "/etc/secureboot/keys/KEK/KEK.pem";
         mode = "0600";
       };
       "secureboot/keys/PK-key" = {
-        path = "/etc/secureboot/keys/PK/PK.key";
+#        path = "/etc/secureboot/keys/PK/PK.key";
         mode = "0600";
       };
       "secureboot/keys/PK-pem" = {
-        path = "/etc/secureboot/keys/PK/PK.pem";
+#        path = "/etc/secureboot/keys/PK/PK.pem";
         mode = "0600";
       };
     };
diff --git a/share/impermanence/default.nix b/share/impermanence/default.nix
index 2c0c81e..80385dc 100755
--- a/share/impermanence/default.nix
+++ b/share/impermanence/default.nix
@@ -12,7 +12,6 @@
       "/var/lib/waydroid"
       "/var/lib/systemd/coredump"
       "/etc/NetworkManager/system-connections"
-      "/etc/secureboot"
       {
         directory = "/var/lib/colord";
         user = "colord";