From 0956437294b26cf4abc73037d4bb1f4f5008304c Mon Sep 17 00:00:00 2001 From: Nydragon Date: Tue, 17 Sep 2024 19:17:31 +0200 Subject: [PATCH] feat: update what keys are used for agenix --- hosts/brontes/configuration.nix | 5 ++++- hosts/marr/configuration.nix | 4 +++- secrets/couchdb.age | Bin 518 -> 518 bytes secrets/rustypaste.age | 16 ++++++++-------- secrets/secrets.nix | 21 ++++++++++----------- 5 files changed, 25 insertions(+), 21 deletions(-) diff --git a/hosts/brontes/configuration.nix b/hosts/brontes/configuration.nix index 9b87eb2..28baa5a 100644 --- a/hosts/brontes/configuration.nix +++ b/hosts/brontes/configuration.nix @@ -61,7 +61,10 @@ }; }; - age.identityPaths = [ "/home/ny/.ssh/id_ed25519" ]; + age.identityPaths = [ + "/etc/ssh/ssh_host_ed25519_key" + ]; + # Necessary for Nautilus to display trash, DVDs and for gnome-disk-utility to show file systems services.gvfs.enable = true; diff --git a/hosts/marr/configuration.nix b/hosts/marr/configuration.nix index 6381e6a..3a7d3cf 100644 --- a/hosts/marr/configuration.nix +++ b/hosts/marr/configuration.nix @@ -47,7 +47,9 @@ }; }; - age.identityPaths = [ "/home/ny/.ssh/id_ed25519" ]; + age.identityPaths = [ + "/etc/ssh/ssh_host_ed25519_key" + ]; programs = { dconf.enable = true; diff --git a/secrets/couchdb.age b/secrets/couchdb.age index b270f1c2410456d6659572c8ffbca98e4319c3ab..698b1c5e45d09d17128d0a0872c160fb1bce11ad 100644 GIT binary patch delta 490 zcmZo;X=9n7R-aiO6;ZC>m{MivnH265Xzr8emE-3gl;fEZ5?E-E}rr=nwQO05$axI8d|KM>=K?3b*Nh63FH1uAO1#V_K%~9d4YP>0;thX_B6woNttBYGCf}ALU)_;p}RZ z9b)Pl6o_tJa!P1nXu5)%pPP$eMoD5tq)TN+o_>W>x?zrfc%EZrNkLA%cTQD6c(|u& zRjGMiNmw$Mp=Ysck-oWyX6L)w!Tw-xqn!Bwo5*j zuCA^^NpiZWzJG>amb-UKibpTQ|lXQ{5|eh^(rx^9VV>PZy(IEefeQ!>|aNrv>7KD@4S&% XZEKj~AU{LHBRO(ui7o49`=H#uPX_}W`6j4~@;+R6`48XdK9; zYo}0LoS~bVVq|J+XsM7_n(CP5sE}#y<740wnN;anQtus5Xi<>oRO*&rRg@AD;pJWI zk)2~+9%&Go9`5LB6v}04Z03=Zl3i>No)J-AlI!N37M^A9t)1`UnpTnM>sjWMpX+Xz zoTgn-WPom6cyd;_siQ)Qn}1eNWlo7Z=nntsHp3F2iVm-obYxe6`?Bt#$-E%G9H}JK@ zIM3yBvA%BY#`3XZYe=PL;VbtBgI^3jYaULS?RIIekXfPnmCzKC45sSe57e!$I9->C Vdm^mx@9!Gpg4Qj)6+6^U0sw*ouYLdk diff --git a/secrets/rustypaste.age b/secrets/rustypaste.age index 8266472..6ac8426 100644 --- a/secrets/rustypaste.age +++ b/secrets/rustypaste.age @@ -1,9 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 b3HlPA 2xnmAbE7usGlBUofIkT0+k9lkAOMfrUifn2kEp6u43w -IpuhSKZoguXHXBamt2xzKTIRPyKNmzIYPaIdKM90aow --> ssh-ed25519 nueAfA LuY9xtX9NcTzA6t4XugshESmLA5omCP6CzgiEItj9CA -JCLnGxpvRLcMeTZOPy+7L02Jsni/AhYzTzL4mFk74Jo --> ssh-ed25519 WcjW5A nQbOkYhDen935yMtYnWKeM54PeRUcAikvGRsjRQ/Ox4 -uL0PpSXX7+Xn91HYHtb/HNf90VNCRaCZ5sQjYCcOdWI ---- hr+DtkYLhfRAVjc0E6z970/JJT3iaJKTSRwMY0rLMPA -D \ YMW;nE iۉ5 _\Ճj@jc(J}5nK7ԾAh=׹:K?-V.kD6cv \ No newline at end of file +-> ssh-ed25519 biwZXw DLhzKcc/aiFwZ7GbtzwVgUt+Z8ChCdtpOddFmqjjuWg +sQYrEX6DIB+DCBC1KZEVTiBT0rc4DbTp8t1BFAmXeNo +-> ssh-ed25519 b3HlPA ml14rPEtoZA8PDiuHroQOfcfHIUeIghnlKNH6Jaoa2A +Te2J7NF6PNVwBVabETgq5ql6BpQbeR3IhkIVur+M29s +-> ssh-ed25519 cdUqUg huUBNjAnara7+8mDEBcElZ2DMsDF0NmeA9iApuL5XHw ++js2A5SuvXigR/Zmy3o8Vix3BqrJfa3pLkVerf9PvrM +--- Pk2z17H5u3tKdXKNPLOZ8LoL7gRs/Bwdx5y8lAgG5ys +NJ"YPC]4j2j@8ʀ KM$]•ӀCsiqyُm/\X/уʥږK CAB`h#D$ \ No newline at end of file diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 25dbe50..af512cb 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -1,16 +1,15 @@ let - userBrontes = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMvPqWPXEUOSMGMIRmirQfbrzq//NkPlEI2TmFpIkSfw"; - - userMarr = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGwlScEmVbdc0EH93XLX+K8yP5FKUKzMf/bWTSO+rMiO"; - - users = [ - userMarr - userBrontes - ]; - raptus = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKdpjGR/pV1roktZdKIVVWqds0JB+x1ksfyQmYPMLK7o"; + marr = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILMh2nUUKt3xsKiwZUuo6HgvR3lr7rRAl0SOH/502sFP"; + brontes = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICgknH3OPazZNhH5xkYfXBcYpI3TXj/eRp0/zzjtVJBf"; + + devices = [ + marr + raptus + brontes + ]; in { - "couchdb.age".publicKeys = [ raptus ] ++ users; - "rustypaste.age".publicKeys = [ raptus ] ++ users; + "couchdb.age".publicKeys = devices; + "rustypaste.age".publicKeys = devices; }