secrets/secrets.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
pre { line-height: 125%; }
td.linenos .normal { color: inherit; background-color: transparent; padding-left: 5px; padding-right: 5px; }
span.llet
  keys = import ./keys.nix;

  inherit (keys) allAdmins allSystems;
  inherit (keys.system)
    renard
    lapin
    corsac
    fourmi
    taupe
    truite
    taureau
    ;
in
{
  "binary-cache-key.age".publicKeys = [
    renard
  ] ++ allAdmins;

  "cloudflare-dns.age".publicKeys = allSystems ++ allAdmins;

  "pds-secrets.age".publicKeys = [
    lapin
  ] ++ allAdmins;

  "continuwuity-registration-token.age".publicKeys = [
    renard
  ] ++ allAdmins;

  "mullvad-gluetun.age".publicKeys = [
    corsac
  ] ++ allAdmins;

  "internal-tls.age".publicKeys = [
    corsac
  ] ++ allAdmins;

  "password.age".publicKeys = allSystems ++ allAdmins;

  "wireless-secrets.age".publicKeys = [
    corsac
    fourmi
  ] ++ allAdmins;

  "vpn/ingress-key.age".publicKeys = [
    truite
  ] ++ allAdmins;

  "vpn/egress-key-taureau.age".publicKeys = [
    taureau
  ] ++ allAdmins;

  "vpn/egress-key-taupe.age".publicKeys = [
    taupe
  ] ++ allAdmins;
}