I don't really feel like bootstrapping is that much work, since you usually need that public key to deploy the whole clojure anyway.
Also, SCPing the file over is bad for reproducibility.
Also, SCPing the file over is bad for reproducibility.
For the topic at hand isn’t this always a problem with deployment systems? You need to have the secret somewhere after all. In my case I only ever use nix for personal systems, so feel totally justified just storing my ssh key as a secret in yadm.