about summary refs log tree commit diff
path: root/hosts/tahoe/secrets
diff options
context:
space:
mode:
authorFranck Cuny <franck@fcuny.net>2022-04-13 13:49:36 -0700
committerFranck Cuny <franck@fcuny.net>2022-04-13 13:49:36 -0700
commit80356830e3eb1b2a7fc07b47a42c0ce65a20db9d (patch)
tree7b4eff7dc132e3e871fcf713d7d21475a65cb1ab /hosts/tahoe/secrets
parentsecrets: we can specify which user owns it (diff)
downloadworld-80356830e3eb1b2a7fc07b47a42c0ce65a20db9d.tar.gz
tahoe: set owner for secret related to ACME
Diffstat (limited to 'hosts/tahoe/secrets')
-rw-r--r--hosts/tahoe/secrets/secrets.nix5
1 files changed, 4 insertions, 1 deletions
diff --git a/hosts/tahoe/secrets/secrets.nix b/hosts/tahoe/secrets/secrets.nix
index ce1fd4b..d9ca4d9 100644
--- a/hosts/tahoe/secrets/secrets.nix
+++ b/hosts/tahoe/secrets/secrets.nix
@@ -8,7 +8,10 @@ in {
   "wireguard_privatekey.age".publicKeys = all;
 
   "acme/credentials.age".publicKeys = all;
-  "acme/gcp_service_account.json.age".publicKeys = all;
+  "acme/gcp_service_account.json.age" = {
+    publicKeys = all;
+    owner = "acme";
+  };
 
   "unifi/unifi-poller.age".publicKeys = all;