dot_testing/secrets/secrets.nix

32 lines
982 B
Nix

let
machines = import ../lib/machines.nix;
server-netbox = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOvinRGdd9GuiPnZYBQPzraXeBxeStwakzmtfzNNpDxy";
all = [ server-netbox machines.copernicus.pubkey machines.aristotle.pubkey ];
in {
# gitea
"gitea-postgres-password.age".publicKeys = all;
# mailserver
"mailaccount.age".publicKeys = all;
# wireguard
"netbox-wg-priv.age".publicKeys = all;
"copernicus-wg-priv.age".publicKeys = with machines; [ copernicus.pubkey aristotle.pubkey ];
# radicale
"radicale-passwd.age".publicKeys = all;
# nextcloud
"nextcloud-admin-passwd.age".publicKeys = all;
# networkmanager
"nm-home-net-config.age".publicKeys = with machines; [ copernicus.pubkey aristotle.pubkey ];
# pcomon
"pcomon-secrets-file.age".publicKeys = [ machines.copernicus.pubkey machines.aristotle.pubkey server-netbox ];
# router configuration
"r8000-config.cfg.age".publicKeys = [ machines.copernicus.pubkey machines.aristotle.pubkey ];
}