ambroisie/nix-config
ambroisie/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
nix-config/modules/secrets/secrets.nix

16 lines
415 B
Nix
Raw Normal View History

hosts: nixos: add host-specific secrets module This is the same logic as the common module, but for secrets that don't need to be shared to different hosts.
2023-04-13 18:48:37 +02:00
# Common secrets
secrets: migrate to agenix It is finally time to graduate to an actually secure, stateless solution.
2021-09-24 18:52:26 +02:00
let
modules: secrets: centralize agenix keys If I intend on splitting the keys depending on which host needs to have access to it, I should have a singular spot to manage the keys.
2023-04-13 18:37:42 +02:00
keys = import ../../keys;
secrets: migrate to agenix It is finally time to graduate to an actually secure, stateless solution.
2021-09-24 18:52:26 +02:00
modules: secrets: centralize agenix keys If I intend on splitting the keys depending on which host needs to have access to it, I should have a singular spot to manage the keys.
2023-04-13 18:37:42 +02:00
inherit (keys) all;
secrets: migrate to agenix It is finally time to graduate to an actually secure, stateless solution.
2021-09-24 18:52:26 +02:00
in
{
"users/ambroisie/hashed-password.age".publicKeys = all;
"users/root/hashed-password.age".publicKeys = all;
"wireguard/aramis/private-key.age".publicKeys = all;
modules: secrets: wireguard: add 'milady'
2021-10-10 17:14:58 +02:00
"wireguard/milady/private-key.age".publicKeys = all;
secrets: migrate to agenix It is finally time to graduate to an actually secure, stateless solution.
2021-09-24 18:52:26 +02:00
"wireguard/porthos/private-key.age".publicKeys = all;
"wireguard/richelieu/private-key.age".publicKeys = all;
}
Reference in a new issue Copy permalink