-
Notifications
You must be signed in to change notification settings - Fork 0
/
secrets.nix
103 lines (76 loc) · 6.96 KB
/
secrets.nix
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
let
hosts = {
broad = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILIjOvIC8/IqRPyLIPCXdUbjGy9WCqSpBgCwanHANoVo"
"ssh-rsa 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"
];
lima = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJgnRcttMN98rmRJEqafrsxvtiGrWT/iGJH6thNE/1wZ"
"ssh-rsa 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"
];
};
users = {
elliott = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC6ZP8YiM5PTp6ZrgVVdJq8UVifTK8IvEiKN5i1vTnMX"
"ssh-rsa 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"
];
};
all = builtins.concatLists ((builtins.attrValues hosts) ++ (builtins.attrValues users));
broad = hosts.broad ++ users.elliott;
lima = hosts.lima ++ users.elliott;
in
{
/* --------------------------------- GitHub --------------------------------- */
"modules/nixos/nix/github-pat.age".publicKeys = all;
/* -------------------------------- TailScale ------------------------------- */
"modules/nixos/networking/access/tailscale.age".publicKeys = all;
/* --------------------------------- Docker --------------------------------- */
"modules/nixos/virtualisation/docker/username.age".publicKeys = all;
"modules/nixos/virtualisation/docker/password.age".publicKeys = all;
/* ----------------------------------- SSH ---------------------------------- */
"homes/x86_64-linux/elliott@lima/config/ssh/beannet/key.age".publicKeys = lima;
"homes/x86_64-linux/elliott@lima/config/ssh/beannet/legacy.age".publicKeys = lima;
"homes/x86_64-linux/elliott@lima/config/ssh/remarkable/key.age".publicKeys = lima;
"homes/x86_64-linux/elliott@lima/config/ssh/sites/github.age".publicKeys = lima;
"homes/x86_64-linux/elliott@lima/config/ssh/sites/python-anywhere.age".publicKeys = lima;
"homes/x86_64-linux/elliott@lima/config/ssh/uos/key.age".publicKeys = lima;
/* --------------------------------- rClone --------------------------------- */
"homes/x86_64-linux/elliott@lima/config/rclone/DotFiles/url.age".publicKeys = lima;
"homes/x86_64-linux/elliott@lima/config/rclone/DotFiles/id.age".publicKeys = lima;
"homes/x86_64-linux/elliott@lima/config/rclone/DotFiles/key.age".publicKeys = lima;
"homes/x86_64-linux/elliott@lima/config/rclone/DropBox/token.age".publicKeys = lima;
"homes/x86_64-linux/elliott@lima/config/rclone/Google/token.age".publicKeys = lima;
"homes/x86_64-linux/elliott@lima/config/rclone/OneDrive/id.age".publicKeys = lima;
"homes/x86_64-linux/elliott@lima/config/rclone/OneDrive/token.age".publicKeys = lima;
"homes/x86_64-linux/elliott@lima/config/rclone/Work/id.age".publicKeys = lima;
"homes/x86_64-linux/elliott@lima/config/rclone/Work/token.age".publicKeys = lima;
/* ----------------------------------- UoS ---------------------------------- */
"modules/nixos/uos/networking/env.age".publicKeys = all;
/* -------------------------------- Home Lab -------------------------------- */
"systems/x86_64-linux/broad/services/secret.age".publicKeys = broad;
"systems/x86_64-linux/broad/services/password.age".publicKeys = broad;
"systems/x86_64-linux/broad/services/core/backup/key.age".publicKeys = broad;
"systems/x86_64-linux/broad/services/core/backup/secret.age".publicKeys = broad;
"systems/x86_64-linux/broad/services/core/backup/token.age".publicKeys = broad;
"systems/x86_64-linux/broad/services/core/backup/cloudflare-url.age".publicKeys = broad;
"systems/x86_64-linux/broad/services/core/backup/cloudflare-id.age".publicKeys = broad;
"systems/x86_64-linux/broad/services/core/backup/cloudflare-key.age".publicKeys = broad;
"systems/x86_64-linux/broad/services/core/backup/auth.age".publicKeys = broad;
"systems/x86_64-linux/broad/services/core/ddns/cloudflare.age".publicKeys = broad;
"systems/x86_64-linux/broad/services/core/proxy/cloudflare.age".publicKeys = broad;
"systems/x86_64-linux/broad/services/core/vpn/key.age".publicKeys = broad;
"systems/x86_64-linux/broad/services/games/romm/igdb-id.age".publicKeys = broad;
"systems/x86_64-linux/broad/services/games/romm/igdb.age".publicKeys = broad;
"systems/x86_64-linux/broad/services/games/romm/steamgriddb.age".publicKeys = broad;
"systems/x86_64-linux/broad/services/media/jellyfin/key.age".publicKeys = broad;
"systems/x86_64-linux/broad/services/media/jellyseerr/key.age".publicKeys = broad;
"systems/x86_64-linux/broad/services/media/prowlarr/key.age".publicKeys = broad;
"systems/x86_64-linux/broad/services/media/prowlarr/indexers/nzbgeek.age".publicKeys = broad;
"systems/x86_64-linux/broad/services/media/radarr/key.age".publicKeys = broad;
"systems/x86_64-linux/broad/services/media/sabnzbd/key.age".publicKeys = broad;
"systems/x86_64-linux/broad/services/media/sabnzbd/nzb.age".publicKeys = broad;
"systems/x86_64-linux/broad/services/media/sonarr/key.age".publicKeys = broad;
"systems/x86_64-linux/broad/services/media/tubearchivist/key.age".publicKeys = broad;
"systems/x86_64-linux/broad/services/monitor/portainer/key.age".publicKeys = broad;
"systems/x86_64-linux/broad/services/monitor/speedtest-tracker/key.age".publicKeys = broad;
}