nix/secrets.nix
2024-09-10 19:49:41 +02:00

22 lines
598 B
Nix

let
keys = import ./ssh-keys.nix;
secrets = with keys; {
tailscale-authKey = [
machines.arr
machines.metrics
];
cloudflare-tegola-apiKey = [ machines.metrics ];
prowlarr-apiKey = [ machines.metrics ];
radarr-apiKey = [ machines.metrics ];
sonarr-apiKey = [ machines.metrics ];
lidarr-apiKey = [ machines.metrics ];
readarr-apiKey = [ machines.metrics ];
};
in
builtins.listToAttrs (
map (secretName: {
name = "secrets/${secretName}.age";
value.publicKeys = secrets."${secretName}" ++ keys.infra-core;
}) (builtins.attrNames secrets)
)