flake/secrets/secrets.nix
2025-11-08 21:14:34 +00:00

30 lines
948 B
Nix

let
# Only myself
user = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHxah5pnxmk+P7HtwRsryDoAHZsDs5RcGP9IPCNg1KFe cardno:16_179_196";
users = [user];
# Current host
system = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMKxw1fDsIUUh3vWCD90LDgDMAG/NSVRg7QamUbknz5A root@distrust";
systems = [system];
all = users ++ systems;
in {
# Multi-service secrets
"borg_ed25519".publicKeys = all;
"borg_pass".publicKeys = all;
# Service-specific secrets
"bind_pw".publicKeys = all;
"nextcloud-admin-pass".publicKeys = all;
"prosody.env".publicKeys = all;
"vaultwarden.env".publicKeys = all;
# Hidden service secret keys
"hidden_service/akkoma".publicKeys = all;
"hidden_service/forgejo".publicKeys = all;
"hidden_service/lldap".publicKeys = all;
"hidden_service/microbin".publicKeys = all;
"hidden_service/nextcloud".publicKeys = all;
"hidden_service/site".publicKeys = all;
"hidden_service/vaultwarden".publicKeys = all;
}