move secrets to their own files and delete unused profile

1 files changed, 26 insertions, 0 deletions

diff --git a/machines/nixos/x86_64-linux/synology-vm/secrets.nix b/machines/nixos/x86_64-linux/synology-vm/secrets.nix
new file mode 100644
index 0000000..1b927ae
--- /dev/null
+++ b/machines/nixos/x86_64-linux/synology-vm/secrets.nix
@@ -0,0 +1,26 @@
+{ self, ... }:
+{
+  age = {
+    secrets = {
+      restic_gcs_credentials = {
+        file = "${self}/secrets/restic_gcs_credentials.age";
+      };
+      restic_password = {
+        file = "${self}/secrets/restic_password.age";
+      };
+      cloudflared-tunnel = {
+        file = "${self}/secrets/cloudflared_cragmont.age";
+      };
+      cloudflared-cert = {
+        file = "${self}/secrets/cloudflared_cert.age";
+      };
+      nas_client_credentials = {
+        file = "${self}/secrets/nas_client.age";
+      };
+      wireguard = {
+        file = "${self}/secrets/vm-synology/wireguard.age";
+      };
+    };
+  };
+
+}