aciceri/nixfleet
1
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

Reformat everything
All checks were successful
/ test (push) Successful in 32s
Details

Browse source
This commit is contained in:
Andrea Ciceri 2024-09-20 11:37:17 +02:00
parent 5f644d0ccd
commit a394b9cefd
Signed by: aciceri
SSH key fingerprint: SHA256:/AagBweyV4Hlfg9u092n8hbHwD5fcB6A3qhDiDA65Rg
167 changed files with 2795 additions and 2122 deletions
Download patch file Download diff file Expand all files Collapse all files

217
secrets/secrets.nix
View file

@ -1,39 +1,186 @@
let
keys = (import ../lib).keys;
in
with keys.hosts;
with keys.users; {
"cachix-personal-token.age".publicKeys = [ccr-ssh ccr-gpg mothership kirk sisko pbp picard];
"magit-forge-github-token.age".publicKeys = [ccr-ssh ccr-gpg mothership kirk];
"git-workspace-tokens.age".publicKeys = [ccr-ssh ccr-gpg mothership kirk picard];
"hydra-admin-password.age".publicKeys = [ccr-ssh ccr-gpg mothership];
"hydra-github-token.age".publicKeys = [ccr-ssh ccr-gpg mothership];
"cache-private-key.age".publicKeys = [ccr-ssh ccr-gpg mothership];
"autistici-password.age".publicKeys = [ccr-ssh ccr-gpg kirk picard sisko];
"hercules-ci-join-token.age".publicKeys = [ccr-ssh ccr-gpg mothership sisko picard];
"hercules-ci-binary-caches.age".publicKeys = [ccr-ssh ccr-gpg mothership sisko picard];
"hercules-ci-secrets-json.age".publicKeys = [ccr-ssh ccr-gpg mothership sisko picard];
"minio-credentials.age".publicKeys = [ccr-ssh ccr-gpg picard sisko];
"aws-credentials.age".publicKeys = [ccr-ssh ccr-gpg picard sisko];
"nextcloud-admin-pass.age".publicKeys = [ccr-ssh ccr-gpg sisko];
"home-planimetry.age".publicKeys = [ccr-ssh ccr-gpg sisko];
"home-assistant-token.age".publicKeys = [ccr-ssh ccr-gpg sisko];
"chatgpt-token.age".publicKeys = [ccr-ssh ccr-gpg kirk mothership picard deltaflyer];
"cloudflare-dyndns-api-token.age".publicKeys = [ccr-ssh ccr-gpg sisko];
"restic-hetzner-password.age".publicKeys = [ccr-ssh ccr-gpg picard sisko kirk];
"hass-ssh-key.age".publicKeys = [ccr-ssh ccr-gpg sisko];
"grafana-password.age".publicKeys = [ccr-ssh ccr-gpg sisko];
"matrix-registration-shared-secret.age".publicKeys = [ccr-ssh ccr-gpg sisko];
"matrix-sliding-sync-secret.age".publicKeys = [ccr-ssh ccr-gpg sisko];
"forgejo-runners-token.age".publicKeys = [ccr-ssh ccr-gpg picard];
"forgejo-nix-access-tokens.age".publicKeys = [ccr-ssh ccr-gpg picard];
"garmin-collector-environment.age".publicKeys = [ccr-ssh ccr-gpg sisko];
"hetzner-storage-box-sisko-ssh-password.age".publicKeys = [ccr-ssh ccr-gpg sisko];
"sisko-restic-password.age".publicKeys = [ccr-ssh ccr-gpg sisko];
with keys.hosts;
with keys.users;
{
"cachix-personal-token.age".publicKeys = [
ccr-ssh
ccr-gpg
mothership
kirk
sisko
pbp
picard
];
"magit-forge-github-token.age".publicKeys = [
ccr-ssh
ccr-gpg
mothership
kirk
];
"git-workspace-tokens.age".publicKeys = [
ccr-ssh
ccr-gpg
mothership
kirk
picard
];
"hydra-admin-password.age".publicKeys = [
ccr-ssh
ccr-gpg
mothership
];
"hydra-github-token.age".publicKeys = [
ccr-ssh
ccr-gpg
mothership
];
"cache-private-key.age".publicKeys = [
ccr-ssh
ccr-gpg
mothership
];
"autistici-password.age".publicKeys = [
ccr-ssh
ccr-gpg
kirk
picard
sisko
];
"hercules-ci-join-token.age".publicKeys = [
ccr-ssh
ccr-gpg
mothership
sisko
picard
];
"hercules-ci-binary-caches.age".publicKeys = [
ccr-ssh
ccr-gpg
mothership
sisko
picard
];
"hercules-ci-secrets-json.age".publicKeys = [
ccr-ssh
ccr-gpg
mothership
sisko
picard
];
"minio-credentials.age".publicKeys = [
ccr-ssh
ccr-gpg
picard
sisko
];
"aws-credentials.age".publicKeys = [
ccr-ssh
ccr-gpg
picard
sisko
];
"nextcloud-admin-pass.age".publicKeys = [
ccr-ssh
ccr-gpg
sisko
];
"home-planimetry.age".publicKeys = [
ccr-ssh
ccr-gpg
sisko
];
"home-assistant-token.age".publicKeys = [
ccr-ssh
ccr-gpg
sisko
];
"chatgpt-token.age".publicKeys = [
ccr-ssh
ccr-gpg
kirk
mothership
picard
deltaflyer
];
"cloudflare-dyndns-api-token.age".publicKeys = [
ccr-ssh
ccr-gpg
sisko
];
"restic-hetzner-password.age".publicKeys = [
ccr-ssh
ccr-gpg
picard
sisko
kirk
];
"hass-ssh-key.age".publicKeys = [
ccr-ssh
ccr-gpg
sisko
];
"grafana-password.age".publicKeys = [
ccr-ssh
ccr-gpg
sisko
];
"matrix-registration-shared-secret.age".publicKeys = [
ccr-ssh
ccr-gpg
sisko
];
"matrix-sliding-sync-secret.age".publicKeys = [
ccr-ssh
ccr-gpg
sisko
];
"forgejo-runners-token.age".publicKeys = [
ccr-ssh
ccr-gpg
picard
];
"forgejo-nix-access-tokens.age".publicKeys = [
ccr-ssh
ccr-gpg
picard
];
"garmin-collector-environment.age".publicKeys = [
ccr-ssh
ccr-gpg
sisko
];
"hetzner-storage-box-sisko-ssh-password.age".publicKeys = [
ccr-ssh
ccr-gpg
sisko
];
"sisko-restic-password.age".publicKeys = [
ccr-ssh
ccr-gpg
sisko
];
# WireGuard
"picard-wireguard-private-key.age".publicKeys = [ccr-ssh ccr-gpg picard];
"sisko-wireguard-private-key.age".publicKeys = [ccr-ssh ccr-gpg sisko];
"kirk-wireguard-private-key.age".publicKeys = [ccr-ssh ccr-gpg kirk];
"deltaflyer-wireguard-private-key.age".publicKeys = [ccr-ssh ccr-gpg deltaflyer];
}
# WireGuard
"picard-wireguard-private-key.age".publicKeys = [
ccr-ssh
ccr-gpg
picard
];
"sisko-wireguard-private-key.age".publicKeys = [
ccr-ssh
ccr-gpg
sisko
];
"kirk-wireguard-private-key.age".publicKeys = [
ccr-ssh
ccr-gpg
kirk
];
"deltaflyer-wireguard-private-key.age".publicKeys = [
ccr-ssh
ccr-gpg
deltaflyer
];
}