diff options
| -rw-r--r-- | secrets/keys.nix | 22 | ||||
| -rw-r--r-- | secrets/secrets.nix | 6 |
2 files changed, 28 insertions, 0 deletions
diff --git a/secrets/keys.nix b/secrets/keys.nix new file mode 100644 index 0000000..6f3a57d --- /dev/null +++ b/secrets/keys.nix @@ -0,0 +1,22 @@ +let + # machines and their host key that are included in this configuration, + # in this case, just one. + machines = { + specimen = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMuIJFXse7iSMaOoBdr/WGqbNBwWLQTpFw6R8ram89gB"; + }; + + # users that can sign secrets, with all of their keys. + admins = { + mel = [ + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEDujTul5wWyGnidLnNuJDRze0Up29l2cDpyKdmvW2Ls" + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEK96G1n31aJsZOrux3BKM0ztzi/SFAVHn0MsGkPDdqY" + ]; + philip = [ ]; + }; +in +{ + inherit machines admins; + + allAdminKeys = with builtins; concatLists (attrValues admins); + allMachineKeys = builtins.attrValues machines; +} diff --git a/secrets/secrets.nix b/secrets/secrets.nix new file mode 100644 index 0000000..0428e3d --- /dev/null +++ b/secrets/secrets.nix @@ -0,0 +1,6 @@ +let + keys = import ./keys.nix; + + inherit (keys) machines allAdminKeys; +in +{ } |