tadpole: Add secrets for ssh machine (root) key

hosts/tadpole/modules/ssh/default.nix

@@ -3,6 +3,7 @@ let
   enabled = config.mod.ssh.enable;
 
   authorizedKeysPath = "/home/alex/.ssh/authorized-keys";
+  rootSSHKeyPath = "/etc/ssh";
 in
 {
   options = {
@@ -41,7 +42,7 @@ in
         ports = [ 1122 ];
 
         hostKeys = [{
-          path = "/etc/ssh/tadpole";
+          path = "${rootSSHKeyPath}/root.tadpole";
           type = "ed25519";
         }];
 
@@ -62,6 +63,15 @@ in
     };
 
     age.secrets = {
+      "root.tadpole" = {
+        file = ../../../../secrets/tadpole/root.tadpole.age;
+        path = "${rootSSHKeyPath}/root.tadpole";
+      };
+      "root.tadpole.pub" = {
+        file = ../../../../secrets/tadpole/root.tadpole.pub.age;
+        path = "${rootSSHKeyPath}/root.tadpole.pub";
+      };
+
       "alex.pinwheel-tadpole.pub" = {
         file = ../../../../secrets/pinwheel/alex.pinwheel-tadpole.pub.age;
         path = "${authorizedKeysPath}/alex.pinwheel-tadpole.pub";

secrets/secrets.nix

@@ -33,6 +33,8 @@ in {
   "sombrero/alex.sombrero-codeberg.org.age".publicKeys = [ sombrero alex ];
   "sombrero/alex.sombrero-codeberg.org.pub.age".publicKeys = [ sombrero alex ];
 
+  "tadpole/root.tadpole.age".publicKeys = [ tadpole alex ];
+  "tadpole/root.tadpole.pub.age".publicKeys = [ tadpole alex ];
   "tadpole/alex.tadpole-codeberg.org.age".publicKeys = [ tadpole alex ];
   "tadpole/alex.tadpole-codeberg.org.pub.age".publicKeys = [ tadpole alex ];
 }