feat: integrate anthropic api key with sops-nix encryption

modules/home/claude-commit/claude-commit.py

@@ -8,7 +8,7 @@ import os
 
 MODEL = "claude-haiku-4-5-20251001"
 MAX_TOKENS = 200
-SECRET_PATH = "/run/secrets/anthropic_api_key"
+SECRET_PATH = os.path.expanduser("~/.config/sops-nix/secrets/anthropic_api_key")
 
 def get_api_key() -> str:
     try:

modules/home/claude-commit/default.nix

@@ -13,5 +13,9 @@
     exec ${pkgs.python3}/bin/python3 ${script} "$@"
   '';
 in {
+  sops.secrets.anthropic_api_key = {
+    sopsFile = ../../../secrets/laptop.yml;
+  };
+
   home.packages = [claude-commit];
 }

secrets/laptop.yml

@@ -7,6 +7,7 @@ nextcloud_user: ENC[AES256_GCM,data:j2u26WzEijQ/,iv:KjCDFxLsRUILn2IpCy5HKw0kERRH
 nextcloud_password: ENC[AES256_GCM,data:GShzQPHtM1kmjHHQ780U+nDGJg==,iv:wRGF9/g4gU1oOSNJk7BWkcTmCpFvHm0qRg6Wd6kdLNQ=,tag:/7fWHdceRTxt32n3jugWFw==,type:str]
 nextcloud_admin_user: ENC[AES256_GCM,data:S+Fblg==,iv:8x2Aj7TNx/bbNX2lBdpR9lbhxtFtG7URMpb0VoRygnE=,tag:l0wl+2Mzj9N0kEbb+BCKLw==,type:str]
 nextcloud_admin_password: ENC[AES256_GCM,data:FoBwbDAK3EJ1MjE5gFZSDa87XA==,iv:jf3Corb5S0SmWuZ6BK5O8QJeD8SvNtWX1GCOlZMf/Mo=,tag:xJcC0tCEE8GzcXSkzzSwXw==,type:str]
+anthropic_api_key: ENC[AES256_GCM,data:0f8HSWqkgzFK3zJibFVTTsbjsVy+XOifITU3jtmtBvAzX3P2KkkeR7c9yJjiEHwKyWLQQdv6yDi5MIm/Qj6+9MgCjW8EI0rGlwSM1pvVq1MB28Rw/cVMYtGxk5hOZfvJkbi9RFhpxp4K4UKs,iv:CSNKSao61cC0FJX85qdIkCiLiT60e6q7qYwpD8JkqK0=,tag:zEerL6F1vEdBPEtslmlqGQ==,type:str]
 sops:
     age:
         - recipient: age13tc3mtr45glx0msgsygf8zc3dh9kaxcestdx8uhzztpy0mawhems4l0wsz
@@ -27,7 +28,7 @@ sops:
             YnFCTnF2aUdoL0twcnF4MU1xK1FQREUKh67YpuXlLYPL65FjEgOv4s1GnULdrAGm
             scRHhgtW5b4hF7m8bPgbl3eoUer2V6JQ0snOTyO2lsWEYVD7gm//4g==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-03-11T00:55:21Z"
-    mac: ENC[AES256_GCM,data:lTKrvHciFaB+3QJxRVGbbuJufbrGk21NRz1jmBNsVcjjlAtjfpL7//YyyLtUugxeyJWjwZwfxeLwU5UCfkGaiPxB8kElJNofwVg7C0NkOLgMAheULJju+vG43tHRgIa6Lgx8ioGZkLLK377ENXvLv33BljATt70unrwWZnCVNFY=,iv:2QmyGp2vgBr53fwlEwQE0rbg+gEzDqS0XcG1aCOld/4=,tag:/x4BfDDD2R1vAKStCPvHfA==,type:str]
+    lastmodified: "2026-04-08T00:16:17Z"
+    mac: ENC[AES256_GCM,data:EWxDdx/i2UHzoQMkQ5RVRwc9nT2cnTLtTrqQYsWePpdrDyFGW4+2yp1BkK6Eu97rDhwCQTun4++O0kdqoEFl0R5MNpfM/oXzeRPyGplvsEuc0tSiogUXfIMlL64Vnn+Pg7Q3rc2htk/BehEJ5RhAqHgEXcCu9QMDNDSczk2Gz5A=,iv:PD9FzAtAH7lvPBGAXw96RS2pFZ2ryGwibyQ532DJpWk=,tag:MaJFTdkUdiox/ZkYhiyfpA==,type:str]
     unencrypted_suffix: _unencrypted
-    version: 3.11.0
+    version: 3.12.1

users/marc/home.nix

@@ -2,6 +2,7 @@
   inputs,
   pkgs,
   lib,
+  config,
   ...
 }: let
   home = "/home/marc";
@@ -307,6 +308,7 @@ in {
     ../../modules/home/deepfilter
     ../../modules/home/tewi
     ../../modules/home/ytui-music
+    ../../modules/home/claude-commit
     # ../../modules/home/clawdbot
     # ../../modules/home/clipcat
     # ../../modules/home/sopswarden
@@ -348,6 +350,8 @@ in {
     + "--no-sandbox "
     + "--enable-features=WaylandWindowDecorations";
 
+  sops.age.keyFile = "${config.home.homeDirectory}/.config/sops/age/keys.txt";
+
   home.sessionVariables = {
     GSETTINGS_SCHEMA_DIR = "${pkgs.gsettings-desktop-schemas}/share/gsettings-schemas/${pkgs.gsettings-desktop-schemas.name}";
     # DBUS_SESSION_BUS_ADDRESS = "${builtins.getEnv "DBUS_SESSION_BUS_ADDRESS"}";