infrastructure/machines/core-services-01/secrets/secrets.nix

let
  pkgs = import <nixpkgs> {};
  lib = pkgs.lib;
  readPubkeys = user: builtins.filter (k: k != "") (lib.splitString "\n" (builtins.readFile (../../pubkeys + "/${user}.keys")));
  superadmins = (readPubkeys "raito") ++ (readPubkeys "gdd") ++ (readPubkeys "mrf");
  core-services-01 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILrnZxP4OUGDzd1uykMghzFNLH0Fg42hH+0qxif6O6oU";
  systems = [ core-services-01 ];
in
  {
    "keycloakDatabasePasswordFile.age".publicKeys = superadmins ++ systems;
    "oauth2ProxyKeyFile.age".publicKeys = superadmins ++ systems;
    "droneKeyFile.age".publicKeys = superadmins ++ systems;
    "dexGiteaClientSecret.age".publicKeys = superadmins ++ systems;
    "matterbridge.age".publicKeys = superadmins ++ systems;
    "snipeItAppKey.age".publicKeys = superadmins ++ systems;
    "snipeItOidcClientSecret.age".publicKeys = superadmins ++ systems;
  }