nix-config/modules/nixos/secrets/secrets.nix

# Common secrets
let
  keys = import ../../keys;

  inherit (keys) all;
in
{
  "users/ambroisie/hashed-password.age".publicKeys = all;
  "users/root/hashed-password.age".publicKeys = all;
}
hosts: nixos: add host-specific secrets module This is the same logic as the common module, but for secrets that don't need to be shared to different hosts. 2023-04-13 18:48:37 +02:00			`# Common secrets`
secrets: migrate to agenix It is finally time to graduate to an actually secure, stateless solution. 2021-09-24 18:52:26 +02:00			`let`
modules: secrets: centralize agenix keys If I intend on splitting the keys depending on which host needs to have access to it, I should have a singular spot to manage the keys. 2023-04-13 18:37:42 +02:00			`keys = import ../../keys;`
secrets: migrate to agenix It is finally time to graduate to an actually secure, stateless solution. 2021-09-24 18:52:26 +02:00
modules: secrets: centralize agenix keys If I intend on splitting the keys depending on which host needs to have access to it, I should have a singular spot to manage the keys. 2023-04-13 18:37:42 +02:00			`inherit (keys) all;`
secrets: migrate to agenix It is finally time to graduate to an actually secure, stateless solution. 2021-09-24 18:52:26 +02:00			`in`
			`{`
			`"users/ambroisie/hashed-password.age".publicKeys = all;`
			`"users/root/hashed-password.age".publicKeys = all;`
			`}`