overhauling secrets: part 1

This commit is contained in:
William 2023-07-13 14:31:43 -03:00
parent b6fa154e87
commit d01f3cb86f
3 changed files with 25 additions and 17 deletions

View file

@ -1,16 +1,24 @@
let
io =
io-user =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKcwF1yuWEfYGScNocEbs0AmGxyTIzGc4/IhpU587SJE";
io-host =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKCIrKJk5zWzWEHvLMPMK8T3PyeBjsCsqzxPN+OrXfhA";
rotterdam =
io = [ io-user io-host ];
rotterdam-user =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA1v3+q3EaruiiStWjubEJWvtejam/r41uoOpCdwJtLL";
rotterdam-host =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK7zAxgU8LNi5/O5XgoOcLKjbNMmO2S7jAuCI9Nr/V4v";
desktops = [ io rotterdam ];
rotterdam = [ rotterdam-user rotterdam-host ];
desktops = io ++ rotterdam;
alexandria =
alexandria-host =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK95QueW+jp1ZmF299Xr3XkgHJ6dL7aZVsfWxqbOKVKA";
servers = [ alexandria ];
alexandria = [ alexandria-host ];
servers = alexandria;
all-hosts = desktops ++ servers;
in {
"cloudflare-creds.age".publicKeys = all-hosts;
"paperless-pass.age".publicKeys = all-hosts;
"nextcloud.json.age".publicKeys = all-hosts;
"cloudflare.age".publicKeys = all-hosts;
"paperless.age".publicKeys = all-hosts;
}