diff options
| author | Franck Cuny <franck@fcuny.net> | 2025-06-08 20:01:34 -0700 |
|---|---|---|
| committer | Franck Cuny <franck@fcuny.net> | 2025-06-08 20:01:34 -0700 |
| commit | f67e56485509ce87bfc8d079813261848037104d (patch) | |
| tree | 5478931cfaa2133939154821ee7f8b75149b3d07 /secrets | |
| parent | install agenix again (diff) | |
| download | infra-f67e56485509ce87bfc8d079813261848037104d.tar.gz | |
use agenix to manage some secrets
I have some secrets that I want to manage for my user without having
to rely on 1password, and ensure proper rotation everywhere when
needed.
For now we only have two secrets (one for `llm` and another one is the
API key for anthropic for Emacs).
Will document the process better in the near future.
Diffstat (limited to 'secrets')
| -rw-r--r-- | secrets/secrets.nix | 9 | ||||
| -rw-r--r-- | secrets/users/fcuny/anthropic-api-key.age | 6 | ||||
| -rw-r--r-- | secrets/users/fcuny/llm.age | 5 |
3 files changed, 20 insertions, 0 deletions
diff --git a/secrets/secrets.nix b/secrets/secrets.nix new file mode 100644 index 0000000..883ef91 --- /dev/null +++ b/secrets/secrets.nix @@ -0,0 +1,9 @@ +let + users = { + fcuny = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINBkozy+X96u5ciX766bJ/AyQ3xm1tXZTIr5+4PVFZFi"; + }; +in +{ + "users/fcuny/llm.age".publicKeys = [ users.fcuny ]; + "users/fcuny/anthropic-api-key.age".publicKeys = [ users.fcuny ]; +} diff --git a/secrets/users/fcuny/anthropic-api-key.age b/secrets/users/fcuny/anthropic-api-key.age new file mode 100644 index 0000000..9928518 --- /dev/null +++ b/secrets/users/fcuny/anthropic-api-key.age @@ -0,0 +1,6 @@ +age-encryption.org/v1 +-> ssh-ed25519 9Ia8+w Q6ksvKOR40oiVtNAp9Sa1iCfdef0ntgJ6cRnnSnbWzM +h/i6oBh/E3iUAm1TCruFb5LUGTt3enbFhUcEuxkZ9TY +--- 6uwnMUvrqZaUdXIX7NaYpAzFDB4imIjuoKFPjCKnG/w +'LdzVs0G|ei"ە3*xɫuܴ綳4#ᑪxƙJC(ɒ:d=17$m<덷@W'#6z!fe2 +.6RA0NQ Tkj (ԉ)
\ No newline at end of file diff --git a/secrets/users/fcuny/llm.age b/secrets/users/fcuny/llm.age new file mode 100644 index 0000000..780fe5b --- /dev/null +++ b/secrets/users/fcuny/llm.age @@ -0,0 +1,5 @@ +age-encryption.org/v1 +-> ssh-ed25519 9Ia8+w Bir55Uqpbc9LiWfeuhcrl5FluYT7WGKtY0SdSvS0w1o +SjAYkn0OrDGIgd4yK709Wc+Y7d3LaSHWQAdSe9qkUr8 +--- 5p8VDC+lrVMyXPaWdNDPWrONSjsC36LsLeNJoMqmSN4 +7
=3WDz$yYfWgL 9WS4!߱s|eaIk@Z;_ޫzh1
ߗq 8,]Bv PJP& q0CrFT J{(2t*%QEKa ҄^QpA gH, ~H/Tuܡ /PR =mfζwRmY{JC
\ No newline at end of file |