summary refs log tree commit diff
path: root/configuration/secrets
diff options
context:
space:
mode:
authorMel <einebeere@gmail.com>2024-12-30 16:46:40 +0100
committerMel <einebeere@gmail.com>2024-12-30 16:50:08 +0100
commite062b2741ff294e1f3e88fe7253c1a8482f4b249 (patch)
treed9af95a192f32c90be35297ef86141985b17e342 /configuration/secrets
parenta416a9fb83def3bc00c04d57ef9d2284c2c1df4e (diff)
downloadspecimen-e062b2741ff294e1f3e88fe7253c1a8482f4b249.tar.zst
specimen-e062b2741ff294e1f3e88fe7253c1a8482f4b249.zip
Move user passwords and keys out for easier reuse
Signed-off-by: Mel <einebeere@gmail.com>
Diffstat (limited to 'configuration/secrets')
-rw-r--r--configuration/secrets/keys.nix10
1 files changed, 3 insertions, 7 deletions
diff --git a/configuration/secrets/keys.nix b/configuration/secrets/keys.nix
index 6f3a57d..218e880 100644
--- a/configuration/secrets/keys.nix
+++ b/configuration/secrets/keys.nix
@@ -1,4 +1,6 @@
 let
+  credentials = import ../credentials.nix;
+
   # machines and their host key that are included in this configuration,
   # in this case, just one.
   machines = {
@@ -6,13 +8,7 @@ let
   };
 
   # users that can sign secrets, with all of their keys.
-  admins = {
-    mel = [
-      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEDujTul5wWyGnidLnNuJDRze0Up29l2cDpyKdmvW2Ls"
-      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEK96G1n31aJsZOrux3BKM0ztzi/SFAVHn0MsGkPDdqY"
-    ];
-    philip = [ ];
-  };
+  admins = builtins.mapAttrs (n: u: u.keys) credentials;
 in
 {
   inherit machines admins;