Hermes: Moved agenix module to host-specific dir
For now, thats all I need. Beside, it was weird before to have the top module and keys in separate sections
This commit is contained in:
parent
d1945d2338
commit
586f56baa5
10 changed files with 65 additions and 3 deletions
|
@ -90,14 +90,14 @@
|
|||
./modules/fish.nix
|
||||
./modules/users.nix
|
||||
./modules/fonts.nix
|
||||
agenix.nixosModules.age
|
||||
./modules/agenix.nix
|
||||
nixos-wsl.nixosModules.wsl
|
||||
|
||||
# Host-specific config
|
||||
./hosts/hermes/configuration.nix
|
||||
./hosts/hermes/syncthing.nix
|
||||
# ./hosts/hermes/backup.nix
|
||||
agenix.nixosModules.age
|
||||
./hosts/hermes/secrets/agenix.nix
|
||||
|
||||
# User-specific config : Home-manager
|
||||
home-manager.nixosModules.home-manager
|
||||
|
|
|
@ -9,7 +9,7 @@
|
|||
with builtins;
|
||||
with lib;
|
||||
let
|
||||
secretsDir = ../hosts/enterprise/secrets;
|
||||
secretsDir = ./.;
|
||||
secretsFile = "${secretsDir}/secrets.nix";
|
||||
payas = "payas";
|
||||
in
|
6
hosts/hermes/secrets/enterprise-nix-cache-key-sec.age
Normal file
6
hosts/hermes/secrets/enterprise-nix-cache-key-sec.age
Normal file
|
@ -0,0 +1,6 @@
|
|||
age-encryption.org/v1
|
||||
-> ssh-ed25519 dy7D9w 7No0DsdBZnT2q+pEyfZWs25tzwCG5pufTlfY7rHnbWk
|
||||
p96mO5AcA5Heio2zXSxl0G2YmOuU3pzZtwcqJHc1QdE
|
||||
--- jaEARnhHeBNOSUwjMYYQPyh5f18qRFmMCnW71H6itqU
|
||||
Ãx³qH1Y©^œSZ: ~äÅk^Á²˜‘»t6Oým^Í©ž<Úå€EÂÄDU‰/ϳqhÞ/×ÙE¶¶i/z^7£ª–ZÂT4ÿ…+Sãe‰‚ƒ9ƒ¹¥ÃfÍ
|
||||
<EFBFBD>z®“{c\m&rͺZÿ©rϾþ¨O·Ð”»z{þn2КÖi<C396>u`
|
7
hosts/hermes/secrets/maildir_relekarpayas_onedrive.age
Normal file
7
hosts/hermes/secrets/maildir_relekarpayas_onedrive.age
Normal file
|
@ -0,0 +1,7 @@
|
|||
age-encryption.org/v1
|
||||
-> ssh-ed25519 dy7D9w IFzyPbRh5LLzYH6vDy83SyKzZDS+qF2MEOenMsNtOnQ
|
||||
lAx+ygintMnPCDl4rr+iDnud/5bQ63gbbZS43Vtzr5Y
|
||||
-> 9M9qX4-grease S`5 jR._GqU {9)a Eub
|
||||
eBZQB13O+P1m4DsTWCN8k6RWpeKcqsg5yfm/8n/CaVfMFACclQ
|
||||
--- PtyjC9OVjUAdkGz111hZsDkEFjcwNtO1BvJhpn/5x3g
|
||||
8p©Ë®ŠÁdÇÜÜŒtL͸kóúî‘Û/{\><3E>ÍOò&”7Åp`–}¸Ñ—°¼?¥kÏ€0Çtò â˜Ï¦re1ÙÃ6>Y*TdÛkÝÕ5ÿ3KpÖ1rœÇ@³« 4ó¶AàÄH7ŒlÛ¥ó´ Í@ð
˜ŠƒV׫Rbà
|
5
hosts/hermes/secrets/mu4e_gmail.age
Normal file
5
hosts/hermes/secrets/mu4e_gmail.age
Normal file
|
@ -0,0 +1,5 @@
|
|||
age-encryption.org/v1
|
||||
-> ssh-ed25519 dy7D9w yhRM5/w1eepD/nEGCoOzqhN2Ed4WCweQxc5nw90OFFE
|
||||
z9/iOzG+to2rcC60yO7nzI6GgIfvZLjHfJr42SrbxLY
|
||||
--- tiudW9x74CzCHpASjlnHxN8zKekP/2L4HkqtDwRkm5U
|
||||
‹kÊh„ŒA`ŒÑŠ«i¹X±÷´„ Tmøæ‹::¨+W:štÅû±û½â‘û&ýÎì
|
7
hosts/hermes/secrets/org_relekarpayas_googledrive.age
Normal file
7
hosts/hermes/secrets/org_relekarpayas_googledrive.age
Normal file
|
@ -0,0 +1,7 @@
|
|||
age-encryption.org/v1
|
||||
-> ssh-ed25519 dy7D9w ccKo6iVUtF/88bxSy1B8xnRYBUkbnbi/heOcS0zYEDY
|
||||
Rraz/mFj1fR95kJZRCSJ7SRAQUtgHjOZJi0VvzYGmvk
|
||||
-> ZwkrMG-grease <?G)_dY N !KANB*" -hB+Su(
|
||||
U5LEeJZOBtIWPWGBEQ
|
||||
--- yE1a37Lu918LVJumhD9gYvxWb/6OweXzYrOeoC+tnp8
|
||||
ã_×ñæ<C3B1>â¢6Ñép4äÕ·Æ‹Þ,«ïÆ}Zf‘?OZÞ£;Ä5§›dCÖ×_ÄkÂ"dcÓ@ÛC¹Ê±@Bž<42>B›lËižum)±P?¢Ç—²·yÍ0ð(!¢Ëô]â=3‰îæ!I‡{Cúö˜ªêž.kcÛ}»¾<C2BB>ò|í·hàá®
|
8
hosts/hermes/secrets/org_relekarpayas_onedrive.age
Normal file
8
hosts/hermes/secrets/org_relekarpayas_onedrive.age
Normal file
|
@ -0,0 +1,8 @@
|
|||
age-encryption.org/v1
|
||||
-> ssh-ed25519 dy7D9w 5OnF9DkSjroG96Q88oo04Q1EINi3wcN/vfyzKALrMww
|
||||
kBc2w/X+Od+ouik4AsH7YZlNoZGPfWGt1NXUip9yfwY
|
||||
-> g(-grease A
|
||||
zT177g
|
||||
--- JFz13LrERcGNmpmtjp9IK92FDyAUpxK00Kal7CsYyZ8
|
||||
ñþºÆÅn_1ÙH"ž›Q[2Àvh%ê¾E…AînÀԜͥIáÏE@Í¿s†,Ÿ4]\FÂ[”jöÈ`oÓ¼=}…~®g>•ÈPÎHÈÃ
|
||||
e>'¶FÚø÷ÿÞ™·C¹¯'@ðV;ŒÞš¸ÖÛSc$Љ@˜`/›E|Uà’aƒtì“
|
11
hosts/hermes/secrets/secrets.nix
Normal file
11
hosts/hermes/secrets/secrets.nix
Normal file
|
@ -0,0 +1,11 @@
|
|||
let key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPziuF0B4Vj/W434rpshcvQu2KieXjGc8HnwymLapyLu nixos@enterprise";
|
||||
in
|
||||
{
|
||||
"maildir_relekarpayas_onedrive.age".publicKeys = [ key ];
|
||||
"syncthing_relekarpayas_googledrive.age".publicKeys = [ key ];
|
||||
"syncthing_relekarpayas_onedrive.age".publicKeys = [ key ];
|
||||
"org_relekarpayas_googledrive.age".publicKeys = [ key ];
|
||||
"org_relekarpayas_onedrive.age".publicKeys = [ key ];
|
||||
"mu4e_gmail.age".publicKeys = [ key ];
|
||||
"enterprise-nix-cache-key-sec.age".publicKeys = [ key ];
|
||||
}
|
|
@ -0,0 +1,9 @@
|
|||
age-encryption.org/v1
|
||||
-> ssh-ed25519 dy7D9w O2oC8+mG4ddds/vWrEgoKcH/08Uf+Asb+5IMvHFaC04
|
||||
zTptkB7UdU0BGm2tOUTjllYHsv3tEkt+k61VgyCnnZw
|
||||
-> A$-grease 2MWD =a@~f
|
||||
h1ff7UE4JFUCf2hRMDEBnOrsvbEztceDSaMVTyzzzsf+D9TYLeA7Liv8zJuOu1PV
|
||||
pTCXhpWqO0Th9ol9fJc3eQ7MxuiGOSGm6H65HPIjgxWJNSLmNg
|
||||
--- vbumS83Qmuc1aOt0o7Rut1P5kSVix/AKL7SLJBKVD6A
|
||||
-›:VÅøhN¡Õëüû41þž¨N<ÃY´ãirò
|
||||
€uÏß<EFBFBD>Â'q#P—xJLd‰ë9v:4äŽ7rpÝ&º\<5C>CÒ]=ê
9uWÙÍ÷…r£¹ñÆkdÇ>+ç@·!ÍÞy@W“o$ñ<>þ|(žD¨4G0&ýÔÝ¡
|
9
hosts/hermes/secrets/syncthing_relekarpayas_onedrive.age
Normal file
9
hosts/hermes/secrets/syncthing_relekarpayas_onedrive.age
Normal file
|
@ -0,0 +1,9 @@
|
|||
age-encryption.org/v1
|
||||
-> ssh-ed25519 dy7D9w cC14jHh4xEnU4ytYVPvsHFItTP32ejCva6JIfyL7yCg
|
||||
OynqzGM3787awMhBuUuSq3+LNiw8BQbQzPDH3fx08aU
|
||||
-> 1}N-grease 63VK8 ' \ S=if
|
||||
ZACSbwxOec//qcHEPOWoc9lTTcf6eIK2g2Bw4xXjqYD5/F08jXx5By4REgLsvg7h
|
||||
jzGImN08q5msOunmJNlc5AV2lWvUVU7860sn/5ZLJQ5/F9G5Rl2fK7xs
|
||||
--- 8m6Tz3ExeYuw/IiMYJu3jGbTqhQNaKXNc7Y6BIDQuxc
|
||||
Fgî);ÐÍCd<43><64>Ó=gA/"´¥:ë-Ã
]ºº@XñgOÌ2j…Ÿ=«Ø7,ð”WäãŠ?påd´Dæßÿ_ÙëI†Ÿ<07>qVóóÝ®°‹‘nzù¢í‹œ—<C593>è!y[i’hC¨f³\Ãú@AL_©R+\ÅýNCK<43>?Q÷
|
||||
íã
|
Reference in a new issue