secrets/secrets.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

let
  vin = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEvM0xCLziR+ZT/SYE1aZM6dklbw4fEC17TWqbADIZRH vin@demiurge";
  users = [ vin ];

  demiurge = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII5jrbNQUeG/eONqcWz4edB6T98u1oOzfozCfpDASw1y";
  hastur = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN2ZUuPSPpIRULzMscBo5DJmA0UbFtG0jaANuzHo5aSQ";
  saklas = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM7RCmfdgJKPnaBi336ZcvDWboxPj8lTtW1eDTN5qR2R";
  systems = [
    demiurge
    saklas
  ];
in
{
  "email_vinbiz.age".publicKeys = users ++ [ saklas ];
  "email_vineetk.age".publicKeys = users ++ [ saklas ];
  "email_13f0.age".publicKeys = users ++ [ saklas ];

  "hetzner_dns.age".publicKeys = users ++ [ saklas ];
  "radicale_users.age".publicKeys = users ++ [ saklas ];

  "wg0_demiurge.age".publicKeys = users ++ [ demiurge ];
  "wg1_demiurge.age".publicKeys = users ++ [ demiurge ];
  "wg0_hastur.age".publicKeys = users ++ [ hastur ];
  "wg1_hastur.age".publicKeys = users ++ [ hastur ];

  "wpa_supplicant.age".publicKeys = users ++ [ hastur ];
}