tvl-depot/ops/secrets/secrets.nix
Vincent Ambo a554531e28 chore(ops): move from gerrit-queue to gerrit-autosubmit
Enables the new autosubmit bot, albeit without rebase
functionality (this will be a separate change).

Change-Id: Ia42a4f08c0edca5e6cc8bf4770ec24dbf16a5db7
Reviewed-on: https://cl.tvl.fyi/c/depot/+/10132
Reviewed-by: sterni <sternenseemann@systemli.org>
Tested-by: BuildkiteCI
Autosubmit: tazjin <tazjin@tvl.su>
2023-11-27 21:51:08 +00:00

54 lines
1.9 KiB
Nix

let
flokli = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPTVTXOutUZZjXLB0lUSgeKcSY/8mxKkC0ingGK1whD2 flokli"
];
tazjin = [
# tverskoy
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM1fGWz/gsq+ZeZXjvUrV+pBlanw1c3zJ9kLTax9FWQy"
# zamalek
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDBRXeb8EuecLHP0bW4zuebXp4KRnXgJTZfeVWXQ1n1R"
];
grfn = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMcBGBoWd5pPIIQQP52rcFOQN3wAY0J/+K2fuU6SffjA "
];
sterni = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJk+KvgvI2oJTppMASNUfMcMkA2G5ZNt+HnWDzaXKLlo"
];
sanduny = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOag0XhylaTVhmT6HB8EN2Fv5Ymrc4ZfypOXONUkykTX";
whitby = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILNh/w4BSKov0jdz3gKBc98tpoLta5bb87fQXWBhAl2I";
terraform.publicKeys = tazjin ++ grfn ++ sterni ++ flokli;
whitbyDefault.publicKeys = tazjin ++ grfn ++ sterni ++ [ whitby ];
allDefault.publicKeys = tazjin ++ grfn ++ sterni ++ [ sanduny whitby ];
sandunyDefault.publicKeys = tazjin ++ grfn ++ sterni ++ [ sanduny ];
in
{
"besadii.age" = whitbyDefault;
"buildkite-agent-token.age" = whitbyDefault;
"buildkite-graphql-token.age" = whitbyDefault;
"buildkite-ssh-private-key.age" = whitbyDefault;
"clbot-ssh.age" = whitbyDefault;
"clbot.age" = whitbyDefault;
"depot-inbox-imap.age" = sandunyDefault;
"depot-replica-key.age" = whitbyDefault;
"gerrit-autosubmit.age" = whitbyDefault;
"gerrit-secrets.age" = whitbyDefault;
"grafana.age" = whitbyDefault;
"irccat.age" = whitbyDefault;
"journaldriver.age" = allDefault;
"keycloak-db.age" = whitbyDefault;
"nix-cache-priv.age" = whitbyDefault;
"nix-cache-pub.age" = whitbyDefault;
"owothia.age" = whitbyDefault;
"panettone.age" = whitbyDefault;
"smtprelay.age" = whitbyDefault;
"tf-buildkite.age" = terraform;
"tf-glesys.age" = terraform;
"tf-keycloak.age" = terraform;
"tvl-alerts-bot-telegram-token.age" = whitbyDefault;
}