helm/secrets/secrets.nix
2022-09-26 19:54:15 +10:00

18 lines
727 B
Nix

let
# set ssh public keys here for your system and user
user = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGWRHhK0G9KOWkWq84QAchpM3FvQzBh9+Xfocxv3i1fP anish@curve";
system = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINZpNzyJGVZfcEVWGrWb6PG3TpLew5sizjoBdb9k6UcP root@curve";
mossnet = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAA0bsVbdQR6iWNLKIiID57A1+dVXC58Dtf5cSXg6/JF root@box";
curve = [ system user ];
allKeys = [ system user mossnet ];
systemOnly = [ system mossnet ];
in
{
"fastmail.age".publicKeys = allKeys;
"mossnet.age".publicKeys = allKeys;
"curve-wg.age".publicKeys = curve;
"box-wg.age".publicKeys = [ mossnet ];
# "wallabag.age".publicKeys = [ mossnet ];
"borg-password.age".publicKeys = systemOnly;
}