ncc/secrets.nix at 8c2b25c41aab67883aa8009d4bad5004ad948202 · RGBCube/ncc · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
let
  inherit (import ./keys.nix) admins all best cape disk nine pala;
in {
  # best
  "hosts/best/id.age".publicKeys            = [ best ] ++ admins;
  "hosts/best/password.age".publicKeys  = [ best ] ++ admins;

  "hosts/best/cache/key.age".publicKeys = [ best ] ++ admins;

  "hosts/best/garage/environment.age".publicKeys = [ best ] ++ admins;

  "hosts/best/grafana/password.age".publicKeys = [ best ] ++ admins;

  "hosts/best/hercules/caches.age".publicKeys      = [ best ] ++ admins;
  "hosts/best/hercules/credentials.age".publicKeys = [ best ] ++ admins;
  "hosts/best/hercules/secrets.age".publicKeys     = [ best ] ++ admins;
  "hosts/best/hercules/token.age".publicKeys       = [ best ] ++ admins;

  "hosts/best/matrix/key.age".publicKeys    = [ best ] ++ admins;
  "hosts/best/matrix/secret.age".publicKeys = [ best ] ++ admins;

  "hosts/best/nextcloud/password.age".publicKeys = [ best ] ++ admins;

  "hosts/best/plausible/key.age".publicKeys = [ best ] ++ admins;

  # cape
  "hosts/cape/id.age".publicKeys = [ cape ] ++ admins;

  # disk
  "hosts/disk/id.age".publicKeys              = [ disk ] ++ admins;
  "hosts/disk/password.age".publicKeys = [ disk ] ++ admins;

  # nine
  "hosts/nine/id.age".publicKeys       = [ nine ] ++ admins;
  "hosts/nine/password.age".publicKeys = [ nine ] ++ admins;

  "hosts/nine/github2forgejo/environment.age".publicKeys = [ nine ] ++ admins;

  # pala
  "hosts/pala/id.age".publicKeys      = [ pala ] ++ admins;
  "hosts/pala/id-cull.age".publicKeys = [ pala ] ++ admins;
  "hosts/pala/id-no.age".publicKeys   = [ pala ] ++ admins;

  # shared
  "modules/common/ssh/config.age".publicKeys     = all;
  "modules/linux/restic/password.age".publicKeys = all;

  "modules/acme/environment.age".publicKeys    = all;
  "modules/mail/password.hash.age".publicKeys  = all;
  "modules/mail/password.plain.age".publicKeys = all;
}