From 46a2f1f852cc4fe8d5c86757de4029d87ccb03af Mon Sep 17 00:00:00 2001
From: Franck Cuny <franck@fcuny.net>
Date: Sat, 22 Nov 2025 11:03:49 -0800
Subject: initial setup for authelia

---
 secrets/secrets.nix | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

(limited to 'secrets/secrets.nix')

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 4820af3..5d5dac2 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -35,6 +35,25 @@ in
     hosts.mba
   ];
 
+  # generated with:
+  # openssl rand 64 | openssl base64 -A | tr '+/' '-_' | tr -d '='
+  "authelia-storage-key.age".publicKeys = [
+    users.fcuny
+    hosts.rivendell
+  ];
+
+  # generated with:
+  # openssl rand 64 | openssl base64 -A | tr '+/' '-_' | tr -d '='
+  "authelia-jwt-key.age".publicKeys = [
+    users.fcuny
+    hosts.rivendell
+  ];
+
+  "authelia-users.yaml.age".publicKeys = [
+    users.fcuny
+    hosts.rivendell
+  ];
+
   "vm-synology/wireguard.age".publicKeys = [
     users.fcuny
     hosts.vm-synology
-- 
cgit v1.2.3