summary refs log tree commit diff
path: root/secrets/secrets.nix
diff options
context:
space:
mode:
authorMel <mel@rnrd.eu>2025-07-25 15:40:28 +0200
committerMel <mel@rnrd.eu>2025-07-25 15:40:28 +0200
commit8572f3b4db7e26d7e2751f03873069943fca3fe8 (patch)
tree2693aa8104a3afb2459cab2d5d3763ad1f5443ee /secrets/secrets.nix
parent99a008a30f2be2cc417e309ef01d02d6995f0c78 (diff)
downloadminerals-8572f3b4db7e26d7e2751f03873069943fca3fe8.tar.zst
minerals-8572f3b4db7e26d7e2751f03873069943fca3fe8.zip
Use age secrets on mineral machines (mainly for work-related tasks)
Signed-off-by: Mel <mel@rnrd.eu>
Diffstat (limited to 'secrets/secrets.nix')
-rw-r--r--secrets/secrets.nix13
1 files changed, 13 insertions, 0 deletions
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
new file mode 100644
index 0000000..f11c60c
--- /dev/null
+++ b/secrets/secrets.nix
@@ -0,0 +1,13 @@
+let
+  keys = import ./keys.nix;
+
+  inherit (keys) allUsers allSystems;
+  inherit (keys.system)
+    bismuth
+    graphite
+    moissanite
+    ;
+in
+{
+  "password.age".publicKeys = allSystems ++ allUsers;
+}