secrets.nix


1
2
3
4
5
6
7
8
9
10
11
12
13

let
  inherit ((builtins.fromTOML (builtins.readFile ./hosts.toml)).hosts) mercury ganymede jupiter;
in {
  "modules/terminal/nixos/github-ssh-key.age".publicKeys = [mercury.host_pubkey jupiter.host_pubkey ganymede.host_pubkey];
  "hosts/gliese-key.age".publicKeys = [mercury.host_pubkey ganymede.host_pubkey];

  "hosts/ganymede/secrets/caddy-env.age".publicKeys = [ganymede.host_pubkey];
  "hosts/ganymede/secrets/williams-psk.age".publicKeys = [ganymede.host_pubkey];
  "hosts/ganymede/secrets/collin-copyparty-password.age".publicKeys = [mercury.host_pubkey ganymede.host_pubkey];
  "hosts/ganymede/secrets/collin-forgejo-password.age".publicKeys = [mercury.host_pubkey ganymede.host_pubkey];
  "hosts/ganymede/secrets/wireguard-pk.age".publicKeys = [ganymede.host_pubkey];
  "hosts/ganymede/secrets/copilot-token.age".publicKeys = [ganymede.host_pubkey];
}