secrets.nix


1
2
3
4
5
6
7
8
9
10
11

let
  inherit ((builtins.fromTOML (builtins.readFile ./hosts.toml)).hosts) mercury ganymede;
in {
  "modules/terminal/nixos/github-ssh-key.age".publicKeys = [mercury.host_pubkey ganymede.host_pubkey];

  "hosts/ganymede/secrets/caddy-env.age".publicKeys = [ganymede.host_pubkey];
  "hosts/ganymede/secrets/williams-psk.age".publicKeys = [ganymede.host_pubkey];

  "hosts/mercury/secrets/wg-privkey.age".publicKeys = [mercury.host_pubkey];
  "hosts/ganymede/secrets/wg-privkey.age".publicKeys = [mercury.host_pubkey ganymede.host_pubkey];
}