aboutsummaryrefslogtreecommitdiff
path: root/secrets/secrets.nix
diff options
context:
space:
mode:
authorFranck Cuny <franck@fcuny.net>2025-11-21 12:56:36 -0800
committerFranck Cuny <franck@fcuny.net>2025-11-21 12:56:36 -0800
commit09d43a6a72308bc572458d1ca86d05d20c209176 (patch)
tree89569e05b88d2656f198ea99c700d4cbcf2e688d /secrets/secrets.nix
parentensure we clean up /tmp on boot (diff)
downloadinfra-09d43a6a72308bc572458d1ca86d05d20c209176.tar.gz
add argonath to agenix and rekey secrets
Diffstat (limited to '')
-rw-r--r--secrets/secrets.nix7
1 files changed, 7 insertions, 0 deletions
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 0204f4f..e79be04 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -4,6 +4,7 @@ let
mba = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDLQTIPZraE+jpMqGkh8yUhNFzRJbMarX5Mky3nETw6c root@mba-m2";
do = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID6qsTQwvo6lUACTZKb4T+Je89bW3/BY4DB4aCTqfApz";
rivendell = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID76U5kt8DfBbuP16rMzfBTVTpjjPFKWnnheMALaCQEd";
+ argonath = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHi9jHqRjpMzXlznTXi4nEtlRlFfyIzB6Ur9A+HDfFoq";
};
users = {
fcuny = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKdyJepi/NyO6d9eP8m48Ga/gdjB5ENHRXYM1ZqFZR8t";
@@ -14,6 +15,7 @@ in
users.fcuny
hosts.rivendell
hosts.do
+ hosts.argonath
];
"restic-pw.age".publicKeys = [
users.fcuny
@@ -50,4 +52,9 @@ in
users.fcuny
hosts.rivendell
];
+
+ "argonath/wireguard.age".publicKeys = [
+ users.fcuny
+ hosts.argonath
+ ];
}