config/secrets.nix

75 lines
2.1 KiB
Nix
Raw Normal View History

2023-04-14 14:12:45 +03:00
let
2023-10-01 22:21:02 +03:00
motiejus = builtins.attrValues {
yk1 = "age1yubikey1qtwmhf7h7ljs3dyx06wyzme4st6w4calkdpmsxgpxc9t2cldezvasd6n8wg";
yk2 = "age1yubikey1qgyvs2ul0enzqf4sscq96zyxk73jnj4lknpemak2hp39lejdwc0s5uzzhpc";
bk1 = "age1kyehn8yr9tfu3w0z4d9p9qrj0tjjh92ljxmz2nyr6xnm7y8kpv5spwwc9n";
bk2 = "age14f39j0wx84n93lgqn6d9gcd3yhuwak6qwrxy8v83ydn7266uafts09ecva";
};
2023-04-14 14:12:45 +03:00
2024-07-31 09:19:13 +03:00
fwminex = (import ./data.nix).hosts."fwminex.servers.jakst".publicKey;
2024-03-18 17:46:17 +02:00
mtworx = (import ./data.nix).hosts."mtworx.motiejus.jakst".publicKey;
2024-07-31 00:14:53 +03:00
fra1-b = (import ./data.nix).hosts."fra1-b.servers.jakst".publicKey;
2024-08-05 16:07:23 +03:00
vno1-gdrx = (import ./data.nix).hosts."vno1-gdrx.motiejus.jakst".publicKey;
vno3-rp3b = (import ./data.nix).hosts."vno3-rp3b.servers.jakst".publicKey;
2024-07-29 15:39:54 +03:00
systems = [
2024-07-31 00:14:53 +03:00
fra1-b
2024-08-05 16:07:23 +03:00
vno1-gdrx
2024-07-29 15:39:54 +03:00
vno3-rp3b
fwminex
2024-08-05 19:05:32 +03:00
mtworx
2024-07-29 15:39:54 +03:00
];
2023-04-14 14:12:45 +03:00
2024-07-29 15:39:54 +03:00
mk =
auth: keyNames:
builtins.listToAttrs (
2023-08-14 09:28:54 +03:00
map (keyName: {
name = keyName;
2024-07-29 15:39:54 +03:00
value = {
publicKeys = auth;
};
}) keyNames
2023-08-14 09:28:54 +03:00
);
in
2024-07-29 15:39:54 +03:00
{ }
// mk ([ vno3-rp3b ] ++ motiejus) [ "secrets/vno3-rp3b/datapool-passphrase.age" ]
// mk ([ mtworx ] ++ motiejus) [
"secrets/motiejus_work_passwd_hash.age"
"secrets/root_work_passwd_hash.age"
2024-06-05 23:08:35 +03:00
2024-07-29 15:39:54 +03:00
"secrets/mtworx/syncthing/key.pem.age"
"secrets/mtworx/syncthing/cert.pem.age"
]
2024-08-05 18:48:52 +03:00
// mk ([ vno1-gdrx ] ++ motiejus) [
"secrets/vno1-gdrx/syncthing/key.pem.age"
"secrets/vno1-gdrx/syncthing/cert.pem.age"
]
2024-07-29 15:39:54 +03:00
// mk ([ fwminex ] ++ motiejus) [
"secrets/motiejus_server_passwd_hash.age"
"secrets/root_server_passwd_hash.age"
2024-07-24 09:02:57 +03:00
2024-08-02 16:43:42 +03:00
"secrets/headscale/oidc_client_secret2.age"
2024-08-03 16:55:08 +03:00
"secrets/grafana.jakstys.lt/oidc.age"
"secrets/vaultwarden/secrets.env.age"
"secrets/letsencrypt/account.key.age"
2024-08-02 16:43:42 +03:00
2024-08-03 18:52:49 +03:00
"secrets/synapse/jakstys_lt_signing_key.age"
"secrets/synapse/registration_shared_secret.age"
"secrets/synapse/macaroon_secret_key.age"
2024-07-29 15:39:54 +03:00
"secrets/fwminex/syncthing/key.pem.age"
"secrets/fwminex/syncthing/cert.pem.age"
]
// mk (
[
fwminex
vno1-gdrx
]
++ motiejus
) [ "secrets/fwminex/borgbackup-password.age" ]
2024-07-29 15:39:54 +03:00
// mk (systems ++ motiejus) [
"secrets/motiejus_passwd_hash.age"
"secrets/root_passwd_hash.age"
"secrets/postfix_sasl_passwd.age"
2024-08-24 20:15:45 +03:00
"secrets/ssh8022.age"
2024-07-29 15:39:54 +03:00
]