Rekey Secrets

Re-encrypt all secrets after modifying .age files or when host keys change.

When to use:

• After creating or updating any .age file
• After adding a new host to secrets.nix
• After rotating host SSH keys

Prerequisites

# Unlock agenix before rekeying
just unlock

Steps