helm/secrets/secrets.nix

21 lines
930 B
Nix
Raw Normal View History

2022-09-18 15:13:50 -07:00
let
# set ssh public keys here for your system and user
2022-09-26 02:51:41 -07:00
user = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGWRHhK0G9KOWkWq84QAchpM3FvQzBh9+Xfocxv3i1fP anish@curve";
2022-09-26 03:22:40 -07:00
system = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILllBPaVqRPvMn450rsunqsv1cgT1HQjMGnnCDCwsBU/ root@curve";
2022-09-18 15:13:50 -07:00
mossnet = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAA0bsVbdQR6iWNLKIiID57A1+dVXC58Dtf5cSXg6/JF root@box";
sealight = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAKrL6IDHNnHmxi0q9nzu87NOyidPm3HpE7klU368lEf";
2022-09-18 15:13:50 -07:00
curve = [ system user ];
allKeys = [ system user mossnet sealight ];
systemOnly = [ system mossnet sealight ];
2022-09-18 15:13:50 -07:00
in
{
"fastmail.age".publicKeys = allKeys;
"mossnet.age".publicKeys = allKeys;
"curve-wg.age".publicKeys = curve;
2022-09-18 15:13:50 -07:00
"box-wg.age".publicKeys = [ mossnet ];
# "wallabag.age".publicKeys = [ mossnet ];
# "gitea.age".publicKeys = [ sealight ];
# "synapse.age".publicKeys = [ sealight ];
2022-09-18 15:13:50 -07:00
"borg-password.age".publicKeys = systemOnly;
}