snowfield/secrets/secrets.nix

let
  gustave = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDJrHUzjPX0v2FX5gJALCjEJaUJ4sbfkv8CBWc6zm0Oe";
  gustave_home = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINYE36VTx/wnxBJ/pOu9bSVfyp4MRCf4dA0Sf/yDk/I7 julien@gustave";
  tower = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA9QGKzHJ5/PR/il8REaTxJKB4G2LEEts0BlcVz789lt";
  lisa = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO4kSscukEEoW/QiLgyZQluhsYK4wF+lFphlCakKYC2q";
  core-security = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICLnOINGYOFb+bLUUTV9sjwi2qbpwcaQlmGmWfy1PeGR";
  arcadia = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBR6TATH7NrekBiRk8mMnxNw0LcDzMHgHh/JtpPUCfqT julien@arcadia";
  arcadia_home = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHH2mPgov6t7oFfEjtZr/DdJW5qSQYqbw+4uYitOCf9n julien@arcadia";
  fischer = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPeKDFxgdZlhNXEUx8ex0Fj2Re+tDBvUr52SS4Wh3V9n";
  core-data = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPAcIdJ3gr17bvDZ8NAcDBkEmOPTEhpg2yq3p1NNQB0f";
  lambda = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKluGTi+vGRLU2emYBhTJuEy7Qw0xq1e0Ey7wvU9xYHz";
  nuage = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEtPoZXJKPfSPGYb/H9eWL0tNSpAKM6V/AgeE1Uf2Is6";
  gallifrey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEr9QRD7QTNsAFmuJoX1mFzQ5A2ik1/ogMrvW54JMXeQ";
  gallifrey_home = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII10x1bM8LQ0KI0eY9uvDhJW9Ic58OH/6uugR1a6OLRE julien@gustave";
  fisher_home = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIADCpuBL/kSZShtXD6p/Nq9ok4w1DnlSoxToYgdOvUqo julien@telecom";
  akhaten = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII5W1rr+VW2TLLytoTExWg4T14lrdLFkSM4YLfbEIb2g";
  biblios = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF5//9IlSSuES0xVsqqOwpotfcajgXL0AtcySpoZ8OLJ";
  servers = [
    gustave
    tower
    lisa
    core-security
    lambda
    core-data
    nuage
    akhaten
    biblios
  ];
  all = servers ++ [
    arcadia
    fischer
    gallifrey
  ];
in
{
  "deluge-webui-password.age".publicKeys = [
    gustave
    tower
  ];
  "keycloak-db.age".publicKeys = [
    core-security
    tower
  ];
  "github-oauth-secret.age".publicKeys = [ tower ];
  "github-webhook-secret.age".publicKeys = [ tower ];
  "github-token-secret.age".publicKeys = [ tower ];
  "buildbot-nix-worker-password.age".publicKeys = [ tower ];
  "buildbot-nix-workers.age".publicKeys = [ tower ];
  "ssh-lisa-pub.age".publicKeys = [
    lisa
    tower
  ];
  "ssh-lisa-priv.age".publicKeys = [
    lisa
    tower
  ];
  "git-gpg-private-key.age".publicKeys = servers ++ [
    arcadia
    fischer
    gallifrey
  ];
  "user-julien-password.age".publicKeys = all;
  "user-root-password.age".publicKeys = all;
  "ens-mail-password.age".publicKeys = servers ++ [
    fischer
  ];
  "julien-malka-sh-mail-password.age".publicKeys = [
    lisa
    tower
  ];
  "malka-ens-school-mail-password.age".publicKeys = [
    lisa
    tower
  ];
  "mondon-ens-school-mail-password.age".publicKeys = [
    lisa
    tower
  ];
  "forgejo_runners-token_file.age".publicKeys = [ tower ];
  "stalwart-admin.age".publicKeys = [
    tower
    akhaten
  ];
  "arkheon-env.age".publicKeys = [
    lambda
    tower
  ];
  "arkheon-token.age".publicKeys = servers;
  "borg-ssh-priv.age".publicKeys = [
    gustave
    akhaten
    tower
  ];
  "borg-encryption-secret.age".publicKeys = [
    gustave
    akhaten
    tower
  ];

  "pages-settings-file.age".publicKeys = [
    gustave
    tower
  ];
  "404-ssl-certificate-cert.age".publicKeys = all;
  "404-ssl-certificate-key.age".publicKeys = all;
  "readeck-config.age".publicKeys = [
    gallifrey
    tower
    gustave
  ];
  "stateless-uptime-kuma-password.age".publicKeys = [
    gallifrey
    tower
    lambda
  ];
  "dgnum-mail-pw.age".publicKeys = [
    gallifrey
    tower
    fischer
    gallifrey_home
    gustave_home
    fisher_home
    arcadia_home
  ];
  "work-mail-pw.age".publicKeys = [
    gallifrey
    tower
    fischer
    gallifrey_home
    gustave_home
    fisher_home
    arcadia_home
  ];
  "telecom-mail-pw.age".publicKeys = [
    gallifrey
    tower
    fischer
    gallifrey_home
    gustave_home
    fisher_home
    arcadia_home
  ];
  "ens-mail-pw.age".publicKeys = [
    gallifrey
    tower
    fischer
    gallifrey_home
    gustave_home
    arcadia_home
    fisher_home
  ];

  "plausible-keybase-secret.age".publicKeys = [
    tower
    gallifrey
    gustave
  ];
  "plausible-password.age".publicKeys = [
    tower
    gallifrey
    gustave
  ];

  "garage-env-file.age".publicKeys = [
    tower
    gallifrey
    biblios
  ];

  "nextcloud-admin-password.age".publicKeys = [
    tower
    gallifrey
    gustave
  ];

  "nextcloud-s3-token.age".publicKeys = [
    tower
    gallifrey
    gustave
  ];

  "mastodon-env.age".publicKeys = [
    tower
    gallifrey
    gustave
  ];

}