rework secrets

This commit is contained in:
uku 2024-01-18 16:11:18 +01:00
parent e22617306e
commit 0cac64029a
Signed by: uku
GPG key ID: 7D01D7B105E77166
9 changed files with 65 additions and 63 deletions

View file

@ -1,15 +1,13 @@
let
main = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHETiSgdsFFub534ChUKrY3U1ApAlyM7jqFmj3qN65so root@fuji"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPbRi03uVAVzqEI5zc8QmP3uthcC1ep55gQL+nQPrEvv root@kilimandjaro"
];
fuji = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHETiSgdsFFub534ChUKrY3U1ApAlyM7jqFmj3qN65so root@fuji";
kilimandjaro = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPbRi03uVAVzqEI5zc8QmP3uthcC1ep55gQL+nQPrEvv root@kilimandjaro";
server = ["ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILdyRFBTdyCCMQ7I75TyO9voxrrreXQTXtSw+iCRf4XI root@vesuvio"] ++ main;
main = [fuji kilimandjaro];
server = main;
in {
"desktop/rootPassword.age".publicKeys = main;
"desktop/userPassword.age".publicKeys = main;
"userPassword.age".publicKeys = server;
"tailscaleKey.age".publicKeys = server;
"vesuvio/rootPassword.age".publicKeys = server;
"vesuvio/userPassword.age".publicKeys = server;
"fuji/rootPassword.age".publicKeys = main;
"kilimandjaro/rootPassword.age".publicKeys = main;
}