aboutsummaryrefslogtreecommitdiff
path: root/hosts/tahoe/secrets/secrets.nix
diff options
context:
space:
mode:
authorFranck Cuny <franck@fcuny.net>2022-04-13 12:17:50 -0700
committerFranck Cuny <franck@fcuny.net>2022-04-13 12:17:50 -0700
commit91e4f61348d870c61329655aa55adc770caf5f19 (patch)
tree962973c57e1f41a97d88bf2ed5f6745456206069 /hosts/tahoe/secrets/secrets.nix
parentgrafana: try to configure the domain with acme+dns (diff)
downloadinfra-91e4f61348d870c61329655aa55adc770caf5f19.tar.gz
secrets: re-key all secrets for tahoe
Diffstat (limited to 'hosts/tahoe/secrets/secrets.nix')
-rw-r--r--hosts/tahoe/secrets/secrets.nix17
1 files changed, 10 insertions, 7 deletions
diff --git a/hosts/tahoe/secrets/secrets.nix b/hosts/tahoe/secrets/secrets.nix
index 71b2bd1..ce1fd4b 100644
--- a/hosts/tahoe/secrets/secrets.nix
+++ b/hosts/tahoe/secrets/secrets.nix
@@ -1,15 +1,18 @@
let
fcuny_aptos =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIdlm/qoR/dnMjZhVSTtqFzkgN3Yf9eQ3pgKMiipg+dl";
+ tahoe =
+ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEq1IQRvj2jofCHOO6M28w2SRdgtHU06NJvwAwv/b69F";
+ all = [ fcuny_aptos tahoe ];
in {
- "wireguard_privatekey.age".publicKeys = [ fcuny_aptos ];
+ "wireguard_privatekey.age".publicKeys = all;
- "acme/credentials.age".publicKeys = [ fcuny_aptos ];
- "acme/gcp_service_account.json.age".publicKeys = [ fcuny_aptos ];
+ "acme/credentials.age".publicKeys = all;
+ "acme/gcp_service_account.json.age".publicKeys = all;
- "unifi/unifi-poller.age".publicKeys = [ fcuny_aptos ];
+ "unifi/unifi-poller.age".publicKeys = all;
- "restic/repo-systems.age".publicKeys = [ fcuny_aptos ];
- "rclone/config.ini.age".publicKeys = [ fcuny_aptos ];
- "rclone/gcs_service_account.json.age".publicKeys = [ fcuny_aptos ];
+ "restic/repo-systems.age".publicKeys = all;
+ "rclone/config.ini.age".publicKeys = all;
+ "rclone/gcs_service_account.json.age".publicKeys = all;
}