luj/snowfield
1
0
Fork 0
mirror of https://github.com/JulienMalka/snowfield.git synced 2025-06-08 10:09:04 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

chore: convert all secrets to agenix

Browse source
This commit is contained in:
Luj 2024-05-09 00:22:43 +02:00
parent 4bee4a08ad
commit 90be57aa21
Signed by: luj
GPG key ID: 6FC74C847011FD83
30 changed files with 84 additions and 509 deletions
Download patch file Download diff file Expand all files Collapse all files

30
secrets/secrets.nix Normal file
View file

@ -0,0 +1,30 @@
let
gustave = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDJrHUzjPX0v2FX5gJALCjEJaUJ4sbfkv8CBWc6zm0Oe";
tower = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA9QGKzHJ5/PR/il8REaTxJKB4G2LEEts0BlcVz789lt";
lisa = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO4kSscukEEoW/QiLgyZQluhsYK4wF+lFphlCakKYC2q";
core-security = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICLnOINGYOFb+bLUUTV9sjwi2qbpwcaQlmGmWfy1PeGR";
servers = [
gustave
tower
lisa
core-security
];
in
{
"deluge-webui-password.age".publicKeys = [ lisa ];
"keycloak-db.age".publicKeys = [ core-security ];
"github-oauth-secret.age".publicKeys = [ tower ];
"github-webhook-secret.age".publicKeys = [ tower ];
"github-token-secret.age".publicKeys = [ tower ];
"buildbot-nix-worker-password.age".publicKeys = [ tower ];
"buildbot-nix-workers.age".publicKeys = [ tower ];
"ssh-lisa-pub.age".publicKeys = [ lisa ];
"ssh-lisa-priv.age".publicKeys = [ lisa ];
"git-gpg-private-key.age".publicKeys = servers;
"user-julien-password.age".publicKeys = servers;
"user-root-password.age".publicKeys = servers;
"ens-mail-password.age".publicKeys = servers;
"julien-malka-sh-mail-password.age".publicKeys = [ lisa ];
"malka-ens-school-mail-password.age".publicKeys = [ lisa ];
"mondon-ens-school-mail-password.age".publicKeys = [ lisa ];
}