ambroisie/nix-config
ambroisie/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

modules: secrets: centralize agenix keys

Browse source 
If I intend on splitting the keys depending on which host needs to have
access to it, I should have a singular spot to manage the keys.
This commit is contained in:
Bruno BELANYI 2023-04-13 16:37:42 +00:00
parent 68bf36c45c
commit 34a3f9a0d6
4 changed files with 43 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

13
modules/secrets/secrets.nix
View file

@ -1,16 +1,7 @@
let
# FIXME: read them from directories
ambroisie = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMIVd6Oh08iUNb1vTULbxGpevnh++wxsWW9wqhaDryIq ambroisie@agenix";
users = [
ambroisie
];
keys = import ../../keys;
porthos = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICGzznQ3LSmBYHx6fXthgMDiTcU5i/Nvj020SbmhzAFb root@porthos";
machines = [
porthos
];
all = users ++ machines;
inherit (keys) all;
in
{
"acme/dns-key.age".publicKeys = all;