feat(sterni/ingeborg): make secrets available

Change-Id: I2a39a6e5125e95c4ea10836694b594d068ceda73
Reviewed-on: https://cl.tvl.fyi/c/depot/+/10178
Reviewed-by: sterni <sternenseemann@systemli.org>
Tested-by: BuildkiteCI
This commit is contained in:
sterni 2023-11-30 18:38:31 +01:00
parent 60ca9ba437
commit 6a5faac11d
5 changed files with 30 additions and 22 deletions

View file

@ -2,6 +2,8 @@
{ {
imports = [ imports = [
# Third party modules
"${depot.third_party.agenix.src}/modules/age.nix"
# Basic settings # Basic settings
../../modules/common.nix ../../modules/common.nix
# These modules touch things related to booting (filesystems, initrd network…) # These modules touch things related to booting (filesystems, initrd network…)

View file

@ -1,9 +1,12 @@
age-encryption.org/v1 age-encryption.org/v1
-> ssh-ed25519 aXKGcg VELHhE9AlsAUspZj8M9zzOcjaml3/KSuNAae73TOOEk -> ssh-ed25519 aXKGcg GOH3LtzLreBjV2qMfbYqSTydeFe3moA8dHIkFndmlBY
0vpPVz2TFMK2MLxHzMVO3a9QvnU9MfYcNO+JpMRRhN8 nCtgAiWujzv0jrjkL8hHOeBOHiAcqUi/8NgsKqdR8ZQ
-> ssh-ed25519 34g70A 28ldud+S2mz83kcIkEGv5XWWOdXUN/vetsqho7kiCh4 -> ssh-ed25519 34g70A xII2rIlNqf+LWLTeMhGMNjg0LVvoL7Ui85qahFxocXk
/P+hJqj9r3KEi0VD15yg0MHyy0XgYUU5/zpMRrLaysM 8c8WrDfhWvHwf91y98GKJufEWwDdPbLl45ZOtygph7g
-> .-grease }}M -> ssh-ed25519 OaL1CA YNrzdmFNxdx9jxjhS4aLS81eykPFM9nx1JdBgJGzxj0
ennsvHEhRup8I8R23GPWlILkCIMZmAuMT2F22SQPdjU Xu9jfvZxFf4pjksKHfFgFfujIBK8wfx+lO4ETdG7U4I
--- e6u1rsLXltysnQqp3x73HfHLhqzTfkIV3mXaCtW1cxE -> EiWdsS6$-grease zxtU?v1
!NiA喳Oタ4瘏P&髟廃 戒FF囿埴<E59BBF>Rrz崗牴<E5B497> JY//K9SibZZd0YHkB9HIBibhTM7tuK7EZ1Svi9Vl0t0kUiCPmZ93nEK1ORLOScDX
I7BWEdk6aarK
--- EqG+3UW7kN33+kxYo62sADBhPP3nZRzeFu8XCTUXfWI
渺僴I"ハツ?~ソーo<1A>l<EFBFBD>6凭<36>ミ鄒]:pvチ5ゥケ<EFBDA9>

View file

@ -3,13 +3,14 @@ let
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJk+KvgvI2oJTppMASNUfMcMkA2G5ZNt+HnWDzaXKLlo" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJk+KvgvI2oJTppMASNUfMcMkA2G5ZNt+HnWDzaXKLlo"
]; ];
edwin = [ ingeborg = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB+OZ8f++cnvd4E2kFyn9jEoVpxi7LfjRvyQwzE8a5Ll" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB+OZ8f++cnvd4E2kFyn9jEoVpxi7LfjRvyQwzE8a5Ll" # edwin (legacy)
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAHQn/j6NCYucpM7qIEIslVJxiFeUEKa0hi+HobTz/12"
]; ];
in in
{ {
"warteraum-salt.age".publicKeys = nonremote ++ edwin; "warteraum-salt.age".publicKeys = nonremote ++ ingeborg;
"warteraum-tokens.age".publicKeys = nonremote ++ edwin; "warteraum-tokens.age".publicKeys = nonremote ++ ingeborg;
"minecraft-rcon.age".publicKeys = nonremote ++ edwin; "minecraft-rcon.age".publicKeys = nonremote ++ ingeborg;
} }

View file

@ -1,10 +1,12 @@
age-encryption.org/v1 age-encryption.org/v1
-> ssh-ed25519 aXKGcg yHE1bla5BN1Kgows1tdeswamJQHfzGpv8fL3qZs04k0 -> ssh-ed25519 aXKGcg OapjTRkL85NyZj+IgTo0u7we79lx/e7l1J/nCb9TC1I
rR1O25EIQXctnyVsQCZO47bM44KFhmOZ7ePiecKrZ40 zrRH/QsYkt9xbl/Z1sPsjBMQSny/0nH8/eKH14BFkP4
-> ssh-ed25519 34g70A voVJDU9DIrT0z6X/mAi0tQqXthRZAyrzsPXOTIIzKUw -> ssh-ed25519 34g70A 96c4EnyB6vcaM45zYUmmeLjs1wmFnTlarAGXuacLcQ0
yEiIaD9jblO44/RaoiPA0mjvRToNc4Ur9GcwfG9TSVo vY0tm3Hp+qEy2YEXhGhrBO9lMqyeGAH5Zf2+mwgcOnE
-> =UOH^-Z4-grease Do<;So -> ssh-ed25519 OaL1CA ZACEEnZt8WwtEGHNu5ytiH49QPoLAM/8yYMdaae5WU0
l0F72v4UD8r5kbpNIT2i1IUT6ttXZhuPE91H2tucMc5TKRvGDvpdJNpQ+P+XmX2M M7W9Fd0an0ttB/OWOfThGoMzw1jrWbFGV8jYvHzFXXI
661iYooyust5TGZsXJFHVYg -> M:LfD-R4-grease 8 `} fnE
--- To85A7ohH2Sjfy8js2+JzV0c86dmDO2JCH8TK7OtVtM XI6ltL2Npf5n0bpRgiMRyG7snTnZYHpLwHvGxPP3OicqSF+Eo1oWRibFe07Xhu8w
Œ¾VÃq·%n!óM#`3­°Ç;1îúßwFª¦Cç<43>ªH'îèYÄò‚å­˜]Ì-„þè½Q1Äž •«Ëm NoSkbThM3IgxQFBdDg
--- BxnnZ4l8AZNvU2CoExyPtFzqFT8JFMqqCZlmx9wyOTM
Hm îOgÐÓ¯<C393>'ÌlË<>À¸Ï¿o,š;ÅÒÆòDN¦—X²4ˉ%É¢Á°å¼B¾žÔT¼qy!F