helm/secrets/secrets.nix

23 lines
1 KiB
Nix
Raw Normal View History

2022-09-18 15:13:50 -07:00
let
# set ssh public keys here for your system and user
2022-10-10 02:19:26 -07:00
user = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIItTdCyYVur6LzRQf08JZUcEAr23H7fTRRmDJOzoOc6A anish@curve";
system = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIMPcqWQ/L5nLTsBFHArl3AJb9xynhfsKenb5h0NNuMV root@curve";
2022-09-18 15:13:50 -07:00
mossnet = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAA0bsVbdQR6iWNLKIiID57A1+dVXC58Dtf5cSXg6/JF root@box";
2022-10-10 02:19:26 -07:00
lituus = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH2lAb33LH3JNuOfBXt971u0tHe+NURFecQdfjwEj+C+ root@lituus";
2022-09-18 15:13:50 -07:00
curve = [ system user ];
2022-10-10 02:19:26 -07:00
allUserKeys = [ system user mossnet ];
systemOnly = [ system mossnet ]; # lituus
2022-09-18 15:13:50 -07:00
in
{
2022-10-10 02:19:26 -07:00
"fastmail.age".publicKeys = allUserKeys;
"mossnet.age".publicKeys = allUserKeys;
"curve-wg.age".publicKeys = curve;
2022-09-18 15:13:50 -07:00
"box-wg.age".publicKeys = [ mossnet ];
# "wallabag.age".publicKeys = [ mossnet ];
"borg-password.age".publicKeys = systemOnly;
2022-10-10 02:19:26 -07:00
"synapse-config.age".publicKeys = [ lituus ];
"synapse-database-password.age".publicKeys = [ lituus ];
"sealight-mod-password.age".publicKeys = [ lituus ];
"telegram-matrix-env.age".publicKeys = [ lituus ];
2022-09-18 15:13:50 -07:00
}