config/secrets/secrets.nix

17 lines
841 B
Nix

let
max = (import ../users/max/userinfo.nix null).sshKeys;
hosts = import ../hosts;
systemKeys = x: x.ssh.id.publicKey or null;
in with hosts;
{
"builder_key.age".publicKeys = max ++ map systemKeys [ TITAN jericho ];
"cachix-upload-key.age".publicKeys = max ++ map systemKeys [ TITAN ];
"hyprspace-key-TITAN.age".publicKeys = max ++ map systemKeys [ TITAN ];
"hyprspace-key-jericho.age".publicKeys = max ++ map systemKeys [ jericho ];
"ipfs-cluster-secret.age".publicKeys = max ++ map systemKeys [ TITAN ];
"transmission-rpc-password.age".publicKeys = max ++ map systemKeys [ TITAN ];
"wireguard-key-upload.age".publicKeys = max ++ map systemKeys [ TITAN ];
"secure-boot-private-key-jericho.age".publicKeys = max ++ map systemKeys [ jericho ];
"shadow-max.age".publicKeys = max ++ map systemKeys [ TITAN jericho ];
}