nixos-config/secrets/secrets.nix

46 lines
2.4 KiB
Nix
Raw Normal View History

2022-05-04 03:02:47 +02:00
let
# age-specific key in ~/.ssh/id_ed25519: `ssh-keygen -t ed25519`
felschr =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGbQpMo1JOGk59Rzl6pVoOcMHOoqezph+aIlEXZP4rBu";
users = [ felschr ];
2022-08-06 16:07:29 +02:00
# `ssh-keygen -t ed25519 -N "" -f /etc/secrets/initrd/ssh_host_ed25519_key`
2022-05-04 03:02:47 +02:00
home-pc =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBFTQvIcSdhEKl/Kq+pcS/cPCyyZ1ygj+djfuaXzaRMx";
home-server =
2022-05-15 13:06:03 +02:00
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILO+OLPr8zdOMYyKtm98AFJai7zbaxw7JhVWgOwu7K3C";
2022-09-28 13:31:07 +02:00
pilot1 =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHEucfNzPbDRdDjTaLG3PzN4lAzDAq3QUkaLvaRjjsCY";
systems = [ home-pc home-server pilot1 ];
2022-05-04 03:02:47 +02:00
in {
2022-09-28 13:31:07 +02:00
"restic/b2.age".publicKeys = [ felschr home-pc home-server pilot1 ];
"restic/password.age".publicKeys = [ felschr home-pc home-server pilot1 ];
2022-05-04 03:02:47 +02:00
"smtp.age".publicKeys = [ felschr home-pc home-server ];
"samba.age".publicKeys = [ felschr home-pc home-server ];
"cloudflare.age".publicKeys = [ felschr home-pc home-server ];
2022-05-04 03:02:47 +02:00
"etebase-server.age".publicKeys = [ felschr home-pc home-server ];
2022-09-04 11:23:15 +02:00
"calibre-web/htpasswd.age".publicKeys = [ felschr home-pc home-server ];
2024-01-14 15:59:08 +01:00
"miniflux/admin.age".publicKeys = [ felschr home-pc home-server ];
"miniflux/oidc.age".publicKeys = [ felschr home-pc home-server ];
2022-05-04 03:02:47 +02:00
"paperless.age".publicKeys = [ felschr home-pc home-server ];
"nextcloud/admin.age".publicKeys = [ felschr home-pc home-server ];
2022-08-06 16:07:29 +02:00
"immich/.env.age".publicKeys = [ felschr home-pc home-server ];
2022-08-06 17:00:45 +02:00
"immich/db-password.age".publicKeys = [ felschr home-pc home-server ];
2023-04-11 19:30:32 +02:00
"immich/typesense/.env.age".publicKeys = [ felschr home-pc home-server ];
2022-05-04 03:02:47 +02:00
# home-server
2022-05-04 03:02:47 +02:00
"home-server/hostKey.age".publicKeys = [ felschr home-server ];
2023-12-08 21:53:29 +01:00
"lldap/key-seed.age".publicKeys = [ felschr home-server ];
"lldap/jwt.age".publicKeys = [ felschr home-server ];
"lldap/password.age".publicKeys = [ felschr home-server ];
2023-12-08 21:58:09 +01:00
"authelia/jwt.age".publicKeys = [ felschr home-server ];
"authelia/session.age".publicKeys = [ felschr home-server ];
"authelia/storage.age".publicKeys = [ felschr home-server ];
"authelia/oidc-hmac.age".publicKeys = [ felschr home-server ];
"authelia/oidc-issuer.age".publicKeys = [ felschr home-server ];
"hass/secrets.age".publicKeys = [ felschr home-server ];
"esphome/password.age".publicKeys = [ felschr home-server ];
2023-01-08 15:49:53 +01:00
"dendrite/.env.age".publicKeys = [ felschr home-server ];
"dendrite/privateKey.age".publicKeys = [ felschr home-server ];
2022-05-04 03:02:47 +02:00
}