secrets/secrets.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42

let
  keys = import ./keys.nix;

  inherit (keys) allAdmins allSystems;
  inherit (keys.system)
    renard
    lapin
    taupe
    corsac
    fourmi
    ;
in
{
  "binary-cache-key.age".publicKeys = [
    renard
  ] ++ allAdmins;

  "cloudflare-dns.age".publicKeys = allSystems ++ allAdmins;

  "pds-secrets.age".publicKeys = [
    lapin
  ] ++ allAdmins;

  "conduwuit-registration-token.age".publicKeys = [
    lapin
  ] ++ allAdmins;

  "pia-login-secrets.age".publicKeys = [
    corsac
  ] ++ allAdmins;

  "internal-tls.age".publicKeys = [
    corsac
  ] ++ allAdmins;

  "password.age".publicKeys = allSystems ++ allAdmins;

  "wireless-secrets.age".publicKeys = [
    corsac
    fourmi
  ] ++ allAdmins;
}