From 943a922322258883e6fc6d29b35515746bef6917 Mon Sep 17 00:00:00 2001
From: Franck Cuny <franck@fcuny.net>
Date: Tue, 12 Aug 2025 12:30:50 -0700
Subject: move secrets to their own files and delete unused profile

---
 .../nixos/x86_64-linux/synology-vm/secrets.nix     | 26 ++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 machines/nixos/x86_64-linux/synology-vm/secrets.nix

(limited to 'machines/nixos/x86_64-linux/synology-vm/secrets.nix')

diff --git a/machines/nixos/x86_64-linux/synology-vm/secrets.nix b/machines/nixos/x86_64-linux/synology-vm/secrets.nix
new file mode 100644
index 0000000..1b927ae
--- /dev/null
+++ b/machines/nixos/x86_64-linux/synology-vm/secrets.nix
@@ -0,0 +1,26 @@
+{ self, ... }:
+{
+  age = {
+    secrets = {
+      restic_gcs_credentials = {
+        file = "${self}/secrets/restic_gcs_credentials.age";
+      };
+      restic_password = {
+        file = "${self}/secrets/restic_password.age";
+      };
+      cloudflared-tunnel = {
+        file = "${self}/secrets/cloudflared_cragmont.age";
+      };
+      cloudflared-cert = {
+        file = "${self}/secrets/cloudflared_cert.age";
+      };
+      nas_client_credentials = {
+        file = "${self}/secrets/nas_client.age";
+      };
+      wireguard = {
+        file = "${self}/secrets/vm-synology/wireguard.age";
+      };
+    };
+  };
+
+}
-- 
cgit v1.2.3