pazpi/nix
1
0
Fork 0
Code Issues 2 Pull requests Projects Releases Packages Wiki Activity Actions

Moved files in the root folder

Browse source
This commit is contained in:
pazpi 2024-08-30 07:54:05 +02:00
parent c7ccbec7c0
commit 4b452b486d
3 changed files with 67 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

28
secrets.nix Normal file
View file

@ -0,0 +1,28 @@
let
keys = import ./ssh-keys.nix;
secrets = with keys; {
tailscale-authKey = [
machines.arr
machines.metrics
];
# alertmanager-matrix-forwarder = [ machines.pluto ];
# fastly-read-only-api-token = [ machines.pluto ];
# hydra-mirror-aws-credentials = [ machines.pluto ];
# hydra-mirror-git-credentials = [ machines.pluto ];
# packet-sd-env = [ machines.pluto ];
# pluto-backup-secret = [ machines.pluto ];
# pluto-backup-ssh-key = [ machines.pluto ];
# prometheus-packet-spot-market-price-exporter = [ machines.pluto ];
# rfc39-credentials = [ machines.pluto ];
# rfc39-github = [ machines.pluto ];
# rfc39-record-push = [ machines.pluto ];
# tarball-mirror-aws-credentials = [ machines.pluto ];
};
in
builtins.listToAttrs (
map (secretName: {
name = "secrets/${secretName}.age";
value.publicKeys = secrets."${secretName}" ++ keys.infra-core;
}) (builtins.attrNames secrets)
)