2 files changed, 14 insertions, 2 deletions
diff --git a/nixos/profiles/common/default.nix b/nixos/profiles/common/default.nix
index de4499a..d1fe93e 100644
--- a/nixos/profiles/common/default.nix
+++ b/nixos/profiles/common/default.nix
@@ -1,8 +1,12 @@
 { config, pkgs, ... }:
 
+let
+  npins = import ../../npins;
+in
 {
   imports = [
     ./sanix.nix
     ./basics.nix
+    "${npins.agenix}/modules/age.nix"
   ];
 }
diff --git a/nixos/profiles/workstation/default.nix b/nixos/profiles/workstation/default.nix
index ddc9a8c..3be5c6c 100644
--- a/nixos/profiles/workstation/default.nix
+++ b/nixos/profiles/workstation/default.nix
@@ -1,5 +1,8 @@
 { config, pkgs, ... }:
 
+let
+  npins = import ../../npins;
+in
 {
   imports = [
     ../common
@@ -9,12 +12,17 @@
     ./create.nix
   ];
 
-  environment.systemPackages = with pkgs; [
-    npins
+  environment.systemPackages = [
+    pkgs.npins
+    (pkgs.callPackage "${npins.agenix}/pkgs/agenix.nix" {})
   ];
 
   environment.sessionVariables = {
     # Tell .zshrc to source zshrc-workstation.sh.
     MYNIX_PROFILE = "workstation";
   };
+
+  # Age defaults to this anyway when openssh is enabled.
+  # We're setting this here for workstations where openssh is disabled.
+  age.identityPaths = ["/etc/ssh/ssh_host_ed25519_key"];
 }