diff options
| author | Benedikt Peetz <benedikt.peetz@b-peetz.de> | 2024-06-13 15:34:09 +0200 |
|---|---|---|
| committer | Benedikt Peetz <benedikt.peetz@b-peetz.de> | 2024-06-13 20:13:58 +0200 |
| commit | c33889e7e53386204dae25b1eed6b36aaf006b21 (patch) | |
| tree | d8f37decdb4296d66259fa21b1a176c3d9a03f7b /secrets.nix | |
| parent | refactor(modules): Ensure strict coherence to patterns (diff) | |
| download | nixos-server-c33889e7e53386204dae25b1eed6b36aaf006b21.tar.gz nixos-server-c33889e7e53386204dae25b1eed6b36aaf006b21.zip | |
refactor(modules/etesync): Move to a complete module
Diffstat (limited to '')
| -rw-r--r-- | secrets.nix | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/secrets.nix b/secrets.nix new file mode 100644 index 0000000..5f1ff73 --- /dev/null +++ b/secrets.nix @@ -0,0 +1,23 @@ +let + soispha = "age1mshh4ynzhhzhff25tqwkg4j054g3xwrfznh98ycchludj9wjj48qn2uffn"; + sils = "age1vuhaey7kd9l76y6f9weeqmde3s4kjw38869ju6u3027yece2r3rqssjxst"; + + server1 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMnqsfIZjelH7rcvFvnLR5zUZuC8thsBupBlvjcMRBUm"; + + allSecrets = [ + soispha + sils + server1 + ]; +in { + "./modules/nixos/vhack/etesync/secret_file.age".publicKeys = allSecrets; + "./system/secrets/backup/backuppass.age".publicKeys = allSecrets; + "./system/secrets/backup/backupssh.age".publicKeys = allSecrets; + "./system/secrets/invidious/hmac.age".publicKeys = allSecrets; + "./system/secrets/invidious/settings.age".publicKeys = allSecrets; + "./system/secrets/mastodon/mail.age".publicKeys = allSecrets; + "./system/secrets/matrix-synapse/passwd.age".publicKeys = allSecrets; + "./system/secrets/miniflux/admin.age".publicKeys = allSecrets; + "./system/secrets/taskserver/ca.age".publicKeys = allSecrets; + "./system/secrets/taskserver/systemd_tmpfiles.age".publicKeys = allSecrets; +} |