nix-da/secrets/secrets.nix

32 lines
942 B
Nix

let
raptus = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKdpjGR/pV1roktZdKIVVWqds0JB+x1ksfyQmYPMLK7o";
marr = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAr1vzx7AAfyOrdIHUvYIN9LRL0x1M6pGkDXszy67l6n";
brontes = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICgknH3OPazZNhH5xkYfXBcYpI3TXj/eRp0/zzjtVJBf";
shan = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPnASO1+h9tUYsNrsePcmxFLpKBkyCXbcZB9W7f5Yt5U";
ny = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMvPqWPXEUOSMGMIRmirQfbrzq//NkPlEI2TmFpIkSfw";
devices = [
marr
raptus
brontes
shan
];
in
{
"couchdb.age".publicKeys = devices ++ [ ny ];
"rustypaste.age".publicKeys = devices ++ [ ny ];
"navidrome.age".publicKeys = devices ++ [ ny ];
"adguard-dns-list.age".publicKeys = devices ++ [ ny ];
"forgejo-runner-token.age".publicKeys = [
raptus
ny
];
"freshrss-default-password.age".publicKeys = [
shan
ny
];
"acme.age".publicKeys = [
shan
raptus
ny
];
}