secrets/secrets.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

let
  keys = import ./keys.nix;

  inherit (keys) allAdmins allSystems;
  inherit (keys.system) renard lapin corsac;
in
{
  "binary-cache-key.age".publicKeys = [
    renard
  ] ++ allAdmins;

  "cloudflare-dns.age".publicKeys = allSystems ++ allAdmins;

  "pds-secrets.age".publicKeys = [
    lapin
  ] ++ allAdmins;

  "conduwuit-registration-token.age".publicKeys = [
    lapin
  ] ++ allAdmins;

  "pia-login-secrets.age".publicKeys = [
    corsac
  ] ++ allAdmins;

  "password.age".publicKeys = allSystems ++ allAdmins;
}