path: root/secrets.nix

let
  fcuny_aptos =
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIdlm/qoR/dnMjZhVSTtqFzkgN3Yf9eQ3pgKMiipg+dl";
  users = [ fcuny_aptos ];

  aptos =
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOTcPGaiL+/Mwl8JzLHrBwas7QvWPjix4lnaAA1tw+5t";
  tahoe =
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEq1IQRvj2jofCHOO6M28w2SRdgtHU06NJvwAwv/b69F";

  systems = [ aptos tahoe ];
in {
  "secrets/network/aptos/wireguard_privatekey.age".publicKeys =
    [ fcuny_aptos aptos ];

  "secrets/network/tahoe/wireguard_privatekey.age".publicKeys =
    [ fcuny_aptos aptos tahoe ];

  "secrets/traefik/gcp_service_account.json.age".publicKeys =
    [ fcuny_aptos aptos tahoe ];

  "secrets/unifi/unifi-poller.age".publicKeys = [ fcuny_aptos aptos tahoe ];

  "secrets/restic/repo-systems.age".publicKeys = [ fcuny_aptos aptos tahoe ];
  "secrets/rclone/config.ini.age".publicKeys = [ fcuny_aptos aptos tahoe ];
  "secrets/rclone/gcs_service_account.json.age".publicKeys =
    [ fcuny_aptos aptos tahoe ];
}