aboutsummaryrefslogtreecommitdiff
path: root/secrets
diff options
context:
space:
mode:
authorFranck Cuny <franck@fcuny.net>2025-11-22 09:03:58 -0800
committerFranck Cuny <franck@fcuny.net>2025-11-22 09:03:58 -0800
commit94182c778e1bfb911fe19a6d8470ed9783dc8435 (patch)
tree7cd41ee7f434d0360b33e42d6ff0d18c079dcc44 /secrets
parentconfigure the reverse proxy on argonath (diff)
downloadinfra-94182c778e1bfb911fe19a6d8470ed9783dc8435.tar.gz
delete do-rproxy
This machine is replaced by argonath
Diffstat (limited to 'secrets')
-rw-r--r--secrets/do/host-ed25519-key.agebin611 -> 0 bytes
-rw-r--r--secrets/do/wireguard.age7
-rw-r--r--secrets/secrets.nix14
3 files changed, 3 insertions, 18 deletions
diff --git a/secrets/do/host-ed25519-key.age b/secrets/do/host-ed25519-key.age
deleted file mode 100644
index 55dae25..0000000
--- a/secrets/do/host-ed25519-key.age
+++ /dev/null
Binary files differ
diff --git a/secrets/do/wireguard.age b/secrets/do/wireguard.age
deleted file mode 100644
index a9f9107..0000000
--- a/secrets/do/wireguard.age
+++ /dev/null
@@ -1,7 +0,0 @@
-age-encryption.org/v1
--> ssh-ed25519 pFjJaA GaSPzMUerupK/arFPAugpDlBU2gv9djkLDAu5lEkoxA
-D2HOa5Q1vu5Z9obFFtXrgRQOvEXSCQpHQV4DaXdaUpI
--> ssh-ed25519 8Nmf6A xBCb05YK4cN29qputVgC2DnLjNoXcvcUMrMS3gtiBxg
-Ouk0qZysqH1nEd7nsyi4FPoT1xmVbr3mowE+vu6iZCM
---- AWCdGu0USOi6txXQiUA+jLgBfgCdrfFWXeEObTALgmw
-\ٰ[qVTq`dt`g9O<^Q0=2֗%CHY2}Tp7 q+9CMG2 \ No newline at end of file
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 6e6b31c..4820af3 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -2,7 +2,6 @@ let
hosts = {
vm-synology = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHKZAKlqOU6bSuMaaZAsYJdZnmNASWuIbbrrOjB6yGb8 root@vm-synology";
mba = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDLQTIPZraE+jpMqGkh8yUhNFzRJbMarX5Mky3nETw6c root@mba-m2";
- do = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID6qsTQwvo6lUACTZKb4T+Je89bW3/BY4DB4aCTqfApz";
rivendell = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID76U5kt8DfBbuP16rMzfBTVTpjjPFKWnnheMALaCQEd";
argonath = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHi9jHqRjpMzXlznTXi4nEtlRlFfyIzB6Ur9A+HDfFoq";
};
@@ -14,34 +13,27 @@ in
"acme-cloudflare-env.age".publicKeys = [
users.fcuny
hosts.rivendell
- hosts.do
hosts.argonath
];
+
"restic-pw.age".publicKeys = [
users.fcuny
hosts.vm-synology
hosts.rivendell
];
+
"nas_client.age".publicKeys = [
users.fcuny
hosts.vm-synology
hosts.rivendell
];
+
# this is the SSH key we use to access the remote builder.
"ssh-remote-builder.age".publicKeys = [
users.fcuny
hosts.vm-synology
hosts.mba
];
- # this is the SSH key for the digital ocean droplet
- # the public key is ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID6qsTQwvo6lUACTZKb4T+Je89bW3/BY4DB4aCTqfApz
- "do/host-ed25519-key.age".publicKeys = [
- users.fcuny
- ];
- "do/wireguard.age".publicKeys = [
- users.fcuny
- hosts.do
- ];
"vm-synology/wireguard.age".publicKeys = [
users.fcuny