use agenix to manage some secrets

I have some secrets that I want to manage for my user without having
to rely on 1password, and ensure proper rotation everywhere when
needed.

For now we only have two secrets (one for `llm` and another one is the
API key for anthropic for Emacs).

Will document the process better in the near future.

1 files changed, 9 insertions, 0 deletions

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
new file mode 100644
index 0000000..883ef91
--- /dev/null
+++ b/secrets/secrets.nix
@@ -0,0 +1,9 @@
+let
+  users = {
+    fcuny = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINBkozy+X96u5ciX766bJ/AyQ3xm1tXZTIr5+4PVFZFi";
+  };
+in
+{
+  "users/fcuny/llm.age".publicKeys = [ users.fcuny ];
+  "users/fcuny/anthropic-api-key.age".publicKeys = [ users.fcuny ];
+}