impermanence: fix secret mounting

modules/programs/gui/bitwarden.mod.nix

@@ -62,7 +62,10 @@ let
 in
 {
   config = mkIf isGraphical {
-    age.secrets.rbwConfig.file = (self + "/secrets/rbw_config.age");
+    age.secrets.rbwConfig = {
+      file = (self + "/secrets/rbw_config.age");
+      owner = username;
+    };
     hjem.users.${username}.xdg.config.files."rbw/config.json".source = config.age.secrets.rbwConfig.path;
 
     environment = {

modules/system/os/impermanence.mod.nix

@@ -25,6 +25,9 @@ in
       };
     };
 
+    age.secretsDir = "/persist/run/secrets";
+    age.secretsMountPoint = "/persist/run/secret-generations";
+
     environment.persistence."/persist" = {
       enable = true;
       hideMounts = true;