52 lines
1.7 KiB
Nix
52 lines
1.7 KiB
Nix
let
|
|
lib = (import <nixpkgs> { }).lib;
|
|
sshKeys = (import ../common/machine-info/moduleless.nix { }).machines.ssh;
|
|
|
|
# add userkeys to all roles so that I can r/w the secrets from my personal computers
|
|
roles = lib.mapAttrs (role: hosts: hosts ++ sshKeys.userKeys) sshKeys.hostKeysByRole;
|
|
|
|
# nobody is using this secret but I still need to be able to r/w it
|
|
nobody = sshKeys.userKeys;
|
|
in
|
|
|
|
with roles;
|
|
|
|
{
|
|
# email
|
|
"hashed-email-pw.age".publicKeys = email-server;
|
|
"cris-hashed-email-pw.age".publicKeys = email-server;
|
|
"sasl_relay_passwd.age".publicKeys = email-server;
|
|
"hashed-robots-email-pw.age".publicKeys = email-server;
|
|
"robots-email-pw.age".publicKeys = gitea;
|
|
|
|
# nix binary cache
|
|
# public key: s0.koi-bebop.ts.net:OjbzD86YjyJZpCp9RWaQKANaflcpKhtzBMNP8I2aPUU=
|
|
"binary-cache-private-key.age".publicKeys = binary-cache;
|
|
# public key: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINpUZFFL9BpBVqeeU63sFPhR9ewuhEZerTCDIGW1NPSB
|
|
"binary-cache-push-sshkey.age".publicKeys = nobody; # this value is directly given to gitea
|
|
|
|
# vpn
|
|
"iodine.age".publicKeys = iodine;
|
|
"pia-login.age".publicKeys = pia;
|
|
|
|
# cloud
|
|
"nextcloud-pw.age".publicKeys = nextcloud;
|
|
"smb-secrets.age".publicKeys = personal ++ media-center;
|
|
|
|
# services
|
|
"searx.age".publicKeys = nobody;
|
|
"spotifyd.age".publicKeys = personal;
|
|
"wolframalpha.age".publicKeys = dailybot;
|
|
|
|
# hostapd
|
|
"hostapd-pw-experimental-tower.age".publicKeys = wireless;
|
|
"hostapd-pw-CXNK00BF9176.age".publicKeys = wireless;
|
|
|
|
# backups
|
|
"backblaze-s3-backups.age".publicKeys = personal ++ server;
|
|
"restic-password.age".publicKeys = personal ++ server;
|
|
|
|
# gitea actions runner
|
|
"gitea-actions-runner-token.age".publicKeys = gitea-actions-runner;
|
|
}
|