nix/secrets.nix
2024-09-05 19:53:24 +02:00

17 lines
385 B
Nix

let
keys = import ./ssh-keys.nix;
secrets = with keys; {
tailscale-authKey = [
machines.arr
machines.metrics
];
cloudflare-tegola-apiKey = [ machines.metrics ];
};
in
builtins.listToAttrs (
map (secretName: {
name = "secrets/${secretName}.age";
value.publicKeys = secrets."${secretName}" ++ keys.infra-core;
}) (builtins.attrNames secrets)
)