diff options
| author | Mel <einebeere@gmail.com> | 2024-12-30 16:31:02 +0100 |
|---|---|---|
| committer | Mel <einebeere@gmail.com> | 2024-12-30 16:31:02 +0100 |
| commit | a416a9fb83def3bc00c04d57ef9d2284c2c1df4e (patch) | |
| tree | 8365aa813bbe59c074514b41e29fa93bd3f3ba2a /secrets | |
| parent | c69a5189925637910c1e5ceb9ce8b45992390521 (diff) | |
| download | specimen-a416a9fb83def3bc00c04d57ef9d2284c2c1df4e.tar.zst specimen-a416a9fb83def3bc00c04d57ef9d2284c2c1df4e.zip | |
Move secrets folder into configuration
Signed-off-by: Mel <einebeere@gmail.com>
Diffstat (limited to 'secrets')
| -rw-r--r-- | secrets/keys.nix | 22 | ||||
| -rw-r--r-- | secrets/name.age | 9 | ||||
| -rw-r--r-- | secrets/secrets.nix | 13 |
3 files changed, 0 insertions, 44 deletions
diff --git a/secrets/keys.nix b/secrets/keys.nix deleted file mode 100644 index 6f3a57d..0000000 --- a/secrets/keys.nix +++ /dev/null @@ -1,22 +0,0 @@ -let - # machines and their host key that are included in this configuration, - # in this case, just one. - machines = { - specimen = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMuIJFXse7iSMaOoBdr/WGqbNBwWLQTpFw6R8ram89gB"; - }; - - # users that can sign secrets, with all of their keys. - admins = { - mel = [ - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEDujTul5wWyGnidLnNuJDRze0Up29l2cDpyKdmvW2Ls" - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEK96G1n31aJsZOrux3BKM0ztzi/SFAVHn0MsGkPDdqY" - ]; - philip = [ ]; - }; -in -{ - inherit machines admins; - - allAdminKeys = with builtins; concatLists (attrValues admins); - allMachineKeys = builtins.attrValues machines; -} diff --git a/secrets/name.age b/secrets/name.age deleted file mode 100644 index fb89666..0000000 --- a/secrets/name.age +++ /dev/null @@ -1,9 +0,0 @@ -age-encryption.org/v1 --> ssh-ed25519 3ri8RA 37aWnYSkaK31gtnFvqJUJ3iMdv3EYrUPXjrMzAmvOiI -Xxw9Qpjs/FHAzAe6RtFQlDAvN+bVCQByo+wJK0vxfqg --> ssh-ed25519 bykYHg N5cM6Qk3gUfXsOLS4qPmCqntWPxR9YyOLu4U7e1SGH4 -WJej54hr1S4tUhG3HSsIUqb3fzaIQp84Q3ppEbJ/MCU --> ssh-ed25519 Ke+vKw Kdypreok2UzZshzuJVIfpIX+yVDq/GMH2gDVG84tcxA -iunEfk3Vbg/Y9TIG8qNxIH/0BNsHWbRi9l2+OcYl1iY ---- mYsf5UMHGgU02prC56f9WlKnR/I6EeVzWXvDEAXh47A -šQ±O`@÷È’tGP•-£Ü‹ÔZ[ÄŸC½†6v*€OY… Ë–ÐܓUX] \ No newline at end of file diff --git a/secrets/secrets.nix b/secrets/secrets.nix deleted file mode 100644 index 2dab9d1..0000000 --- a/secrets/secrets.nix +++ /dev/null @@ -1,13 +0,0 @@ -let - keys = import ./keys.nix; - - inherit (keys) machines allAdminKeys; -in -{ - "name.age".publicKeys = - with machines; - [ - specimen - ] - ++ allAdminKeys; -} |