secrets.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25

let
  fcuny_aptos =
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIdlm/qoR/dnMjZhVSTtqFzkgN3Yf9eQ3pgKMiipg+dl";
  users = [ fcuny_aptos ];

  aptos =
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOTcPGaiL+/Mwl8JzLHrBwas7QvWPjix4lnaAA1tw+5t";
  tahoe =
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEq1IQRvj2jofCHOO6M28w2SRdgtHU06NJvwAwv/b69F";

  systems = [ aptos tahoe ];
in {
  "secrets/network/aptos/wireguard_privatekey.age".publicKeys =
    [ fcuny_aptos aptos ];

  "secrets/network/tahoe/wireguard_privatekey.age".publicKeys =
    [ fcuny_aptos aptos tahoe ];

  "secrets/traefik/gcp_service_account.json.age".publicKeys =
    [ fcuny_aptos aptos tahoe ];

  "secrets/unifi/unifi-poller.age".publicKeys = [ fcuny_aptos aptos tahoe ];

  "secrets/restic/repo-systems.age".publicKeys = [ fcuny_aptos aptos tahoe ];
}