diff options
Diffstat (limited to 'secrets')
| -rw-r--r-- | secrets/do/host-ed25519-key.age | bin | 611 -> 0 bytes | |||
| -rw-r--r-- | secrets/do/wireguard.age | 7 | ||||
| -rw-r--r-- | secrets/secrets.nix | 14 |
3 files changed, 3 insertions, 18 deletions
diff --git a/secrets/do/host-ed25519-key.age b/secrets/do/host-ed25519-key.age Binary files differdeleted file mode 100644 index 55dae25..0000000 --- a/secrets/do/host-ed25519-key.age +++ /dev/null diff --git a/secrets/do/wireguard.age b/secrets/do/wireguard.age deleted file mode 100644 index a9f9107..0000000 --- a/secrets/do/wireguard.age +++ /dev/null @@ -1,7 +0,0 @@ -age-encryption.org/v1 --> ssh-ed25519 pFjJaA GaSPzMUerupK/arFPAugpDlBU2gv9djkLDAu5lEkoxA -D2HOa5Q1vu5Z9obFFtXrgRQOvEXSCQpHQV4DaXdaUpI --> ssh-ed25519 8Nmf6A xBCb05YK4cN29qputVgC2DnLjNoXcvcUMrMS3gtiBxg -Ouk0qZysqH1nEd7nsyi4FPoT1xmVbr3mowE+vu6iZCM ---- AWCdGu0USOi6txXQiUA+jLgBfgCdrfFWXeEObTALgmw -\ٰ[qVTq`dt`g9O<^Q0=2֗%CHY2}Tp7
q+9CMG2
\ No newline at end of file diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 6e6b31c..4820af3 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -2,7 +2,6 @@ let hosts = { vm-synology = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHKZAKlqOU6bSuMaaZAsYJdZnmNASWuIbbrrOjB6yGb8 root@vm-synology"; mba = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDLQTIPZraE+jpMqGkh8yUhNFzRJbMarX5Mky3nETw6c root@mba-m2"; - do = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID6qsTQwvo6lUACTZKb4T+Je89bW3/BY4DB4aCTqfApz"; rivendell = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID76U5kt8DfBbuP16rMzfBTVTpjjPFKWnnheMALaCQEd"; argonath = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHi9jHqRjpMzXlznTXi4nEtlRlFfyIzB6Ur9A+HDfFoq"; }; @@ -14,34 +13,27 @@ in "acme-cloudflare-env.age".publicKeys = [ users.fcuny hosts.rivendell - hosts.do hosts.argonath ]; + "restic-pw.age".publicKeys = [ users.fcuny hosts.vm-synology hosts.rivendell ]; + "nas_client.age".publicKeys = [ users.fcuny hosts.vm-synology hosts.rivendell ]; + # this is the SSH key we use to access the remote builder. "ssh-remote-builder.age".publicKeys = [ users.fcuny hosts.vm-synology hosts.mba ]; - # this is the SSH key for the digital ocean droplet - # the public key is ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID6qsTQwvo6lUACTZKb4T+Je89bW3/BY4DB4aCTqfApz - "do/host-ed25519-key.age".publicKeys = [ - users.fcuny - ]; - "do/wireguard.age".publicKeys = [ - users.fcuny - hosts.do - ]; "vm-synology/wireguard.age".publicKeys = [ users.fcuny |