nixfleet/secrets/secrets.nix

30 lines
1.8 KiB
Nix

let
keys = (import ../lib).keys;
in
with keys.hosts;
with keys.users; {
"cachix-personal-token.age".publicKeys = [ccr-ssh ccr-gpg mothership kirk sisko pbp picard];
"magit-forge-github-token.age".publicKeys = [ccr-ssh ccr-gpg mothership kirk];
"git-workspace-tokens.age".publicKeys = [ccr-ssh ccr-gpg mothership kirk picard];
"hydra-admin-password.age".publicKeys = [ccr-ssh ccr-gpg mothership];
"hydra-github-token.age".publicKeys = [ccr-ssh ccr-gpg mothership];
"cache-private-key.age".publicKeys = [ccr-ssh ccr-gpg mothership];
"autistici-password.age".publicKeys = [ccr-ssh ccr-gpg kirk picard];
"hercules-ci-join-token.age".publicKeys = [ccr-ssh ccr-gpg mothership sisko picard];
"hercules-ci-binary-caches.age".publicKeys = [ccr-ssh ccr-gpg mothership sisko picard];
"hercules-ci-secrets-json.age".publicKeys = [ccr-ssh ccr-gpg mothership sisko picard];
"minio-credentials.age".publicKeys = [ccr-ssh ccr-gpg picard sisko];
"aws-credentials.age".publicKeys = [ccr-ssh ccr-gpg picard sisko];
"nextcloud-admin-pass.age".publicKeys = [ccr-ssh ccr-gpg sisko];
"home-planimetry.age".publicKeys = [ccr-ssh ccr-gpg sisko];
"chatgpt-token.age".publicKeys = [ccr-ssh ccr-gpg kirk mothership picard];
"cloudflare-dyndns-api-token.age".publicKeys = [ccr-ssh ccr-gpg sisko];
"restic-hetzner-password.age".publicKeys = [ccr-ssh ccr-gpg picard sisko kirk];
"hass-ssh-key.age".publicKeys = [ccr-ssh ccr-gpg sisko];
"matrix-registration-shared-secret.age".publicKeys = [ccr-ssh ccr-gpg sisko];
# WireGuard
"picard-wireguard-private-key.age".publicKeys = [ccr-ssh ccr-gpg picard];
"sisko-wireguard-private-key.age".publicKeys = [ccr-ssh ccr-gpg sisko];
"kirk-wireguard-private-key.age".publicKeys = [ccr-ssh ccr-gpg kirk];
}