nix-config/secrets/secrets.nix

28 lines
696 B
Nix

let
keys = import ../common/ssh.nix;
system = keys.system;
systems = keys.systems;
users = keys.users;
all = users ++ systems;
wireless = [
system.router
] ++ users;
in
{
# TODO: Minimum necessary access to keys
"email-pw.age".publicKeys = all;
"iodine.age".publicKeys = all;
"nextcloud-pw.age".publicKeys = all;
"pia-login.conf".publicKeys = all;
"sasl_relay_passwd.age".publicKeys = all;
"searx.age".publicKeys = all;
"smb-secrets.age".publicKeys = all;
"spotifyd.age".publicKeys = all;
"wolframalpha.age".publicKeys = all;
# hostapd
"hostapd-pw-experimental-tower.age".publicKeys = wireless;
"hostapd-pw-CXNK00BF9176.age".publicKeys = wireless;
}