diff options
Diffstat (limited to 'secrets')
| -rw-r--r-- | secrets/caddy-tailscale-authkey.age | 6 | ||||
| -rw-r--r-- | secrets/default.nix | 4 | ||||
| -rw-r--r-- | secrets/secrets.nix | 3 |
3 files changed, 11 insertions, 2 deletions
diff --git a/secrets/caddy-tailscale-authkey.age b/secrets/caddy-tailscale-authkey.age new file mode 100644 index 0000000..f2a7de6 --- /dev/null +++ b/secrets/caddy-tailscale-authkey.age @@ -0,0 +1,6 @@ +age-encryption.org/v1 +-> ssh-ed25519 Jg4yWQ xYq/DjdgQ3LJhg797pf3LA39bU9akYBLd+RoH7RMPm4 +p9CQSoh2511x7c0WAUPut4hWA3k0AI5b2fQEol5Hqs4 +--- hkbJJSCnoSYIyHtbtuLKz+fN17anXp31b2MAADIpH/4 +Ћs hZ +NZzvnB繯xZ;qY-"`'O͜P`PiTBsWJTv[?3L܌vԻ eh
\ No newline at end of file diff --git a/secrets/default.nix b/secrets/default.nix index 4571e52..2254909 100644 --- a/secrets/default.nix +++ b/secrets/default.nix @@ -1,6 +1,8 @@ { age = { identityPaths = ["/etc/ssh/ssh_host_ed25519_key"]; - secrets = {}; + secrets = { + "caddy-tailscale-authkey".file = ./caddy-tailscale-authkey.age; + }; }; } diff --git a/secrets/secrets.nix b/secrets/secrets.nix index aea48e6..b01b609 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -2,6 +2,7 @@ let # host keys mercury = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIQtMAgPdWwrOzlZT/lEIRQZ+ajhafG9AEJCrF2/bsmN"; jupiter = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPB7feUHl5qoD5zF9AMOV2meViA+wZYdVvbVjPkggZf8"; + ganymede = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINlr+53UmlGVP1blkdNl6NFqn1w2umFJyjH1EVUPKIy9"; in { - # no secrets as of yet + "caddy-tailscale-authkey.age".publicKeys = [ganymede]; } |