modules: secrets: move wireguard keys
This is a bit special, as some of the keys do not belong to NixOS hosts, so store those in the module itself, and into host-specific directories for the keys that are NixOS hosts.
This commit is contained in:
parent
ed745602a1
commit
7cebaa3751
9 changed files with 19 additions and 7 deletions
15
modules/services/wireguard/keys/secrets.nix
Normal file
15
modules/services/wireguard/keys/secrets.nix
Normal file
|
|
@ -0,0 +1,15 @@
|
|||
# Extra wireguard keys that are not hosts NixOS hosts
|
||||
let
|
||||
keys = import ../../../../keys;
|
||||
|
||||
all = [
|
||||
keys.users.ambroisie
|
||||
];
|
||||
in
|
||||
{
|
||||
# Sarah's iPhone
|
||||
"milady/private-key.age".publicKeys = all;
|
||||
|
||||
# My Android phone
|
||||
"richelieu/private-key.age".publicKeys = all;
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue