almost ready. now to harden

This commit is contained in:
root 2025-11-04 11:30:34 +00:00
parent 29cbf8b2d8
commit e856c0dfb1
20 changed files with 539 additions and 58 deletions

14
secrets/secrets.nix Normal file
View file

@ -0,0 +1,14 @@
let
user = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHxah5pnxmk+P7HtwRsryDoAHZsDs5RcGP9IPCNg1KFe cardno:16_179_196";
users = [ user ];
system = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMKxw1fDsIUUh3vWCD90LDgDMAG/NSVRg7QamUbknz5A root@distrust";
systems = [ system ];
all = users ++ systems;
in
{
"bind_pw".publicKeys = all;
"nextcloud-admin-pass".publicKeys = all;
"vaultwarden.env".publicKeys = all;
}