flake/secrets/secrets.nix
2025-11-09 23:28:16 +00:00

33 lines
1 KiB
Nix

let
# Only myself
user = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHxah5pnxmk+P7HtwRsryDoAHZsDs5RcGP9IPCNg1KFe cardno:16_179_196";
users = [user];
# Current host
distrust = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEVvvjL4XXn6z0fOZnr1v0twoVBINi1FOES15JL/3vU4 root@distrust";
distrust-mini = "";
systems = [distrust distrust-mini];
all = users ++ systems;
in {
# Multi-service secrets
"borg_ed25519".publicKeys = all;
"borg_pass".publicKeys = all;
# Service-specific secrets
"bind_pw".publicKeys = all;
"nextcloud-admin-pass".publicKeys = all;
"prosody.env".publicKeys = all;
"vaultwarden.env".publicKeys = all;
"lldap_root_pass".publicKeys = all;
# Hidden service secret keys
"hidden_service/akkoma".publicKeys = all;
"hidden_service/forgejo".publicKeys = all;
"hidden_service/lldap".publicKeys = all;
"hidden_service/microbin".publicKeys = all;
"hidden_service/nextcloud".publicKeys = all;
"hidden_service/site".publicKeys = all;
"hidden_service/uptime-kuma".publicKeys = all;
"hidden_service/vaultwarden".publicKeys = all;
}