[object Object]

sops-nix + rootless podman turns out to be much trickier than I imagined. Spent like 2 days over this shit just to get it in the central config when I could have just manually loaded the config files and change the permission… I eventually solved it by running rootlesskit in the activation script to copy the decrypted file into a temporary folder and changing the permission to the correct sub-user. Not worth the time though.

Just in case, actually read at least the first three comments. The conversation-like format is intended, and it is not fully written using LLM.