thehedgehog/nix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

marvin/secrets: Update secrets

Browse source
This commit is contained in:
The Hedgehog 2022-07-22 15:33:23 -04:00
parent 008e55b7cf
commit 7a12a39259
No known key found for this signature in database
1 changed files with 20 additions and 19 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

39
hosts/marvin/secrets/secrets.nix
View file

@ -1,24 +1,25 @@
let
yubi = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDTVGi3PItsbUhFgnFZlqo1iUggL4npMg94+9FsyhEPfShcQwJK2/jJzjv5S9KPuk3cY7aoqyVFLbnasSBZPXmscJmOiVNvtWvHoC3QPXvf3IAcVZ5KOLpY2NJlPx/pAb31C6ewtg8v3VlyhL4zEp6M+AGwXX51tFDh2GnYD+7SNF+aMhKCrX63syAhgPy3F8mZ2RIDLAu+lsYlwdpWRkSEv9kcjX/6+3QgUWjfPBaKEeYID22ihSuj7+AiuAt0gM4q0TY/Hpcx+qDLonrIuBnm1hMZDgbv//D0sHIUxJQkGTKTEbkZxoh0Qri7UV/V6l3mETaG40deuemMU7RFY7Khl8RajNZ+9z0FdquS/HCt8+fYQk6eLneJrMIQ1bI4awrtblG3P2Yf2QUu+H3kfCQe44R3WjUugTbNtumVgyQBzl2dzlIVn1pZBeyZy70XCgbaFKkDR8Y/qZiUoZ0afP3vTOXhkn5UBfutTKwUiSGh3S8Ge5YhNgKHWE2eQp1ckEm0IMJV/q5Nsw/yBBXj/kfD8ekz96LQ+gP5JFLq4EaipXI7FM4aZNOBUZU1l/sCEuq7m997nrBucTKqGm7Ho3rq7bgdj4f6GyUJXSMOM1cN61LLrRumZGGTH8WghVL7ligxZyNFcQoudR8jfpf4mrgRxipQOe1A2umvuufMr+l/bw==";
yubi-back = "ssh-rsa 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";
yubi-main = "sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIMNOvtQK5SGRJ4S0tF7PU1TG2BJXEqnq3fGD7eIzQ+nuAAAABHNzaDo=";
backup = "ssh-rsa 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";
me = [yubi backup];
me = [yubi-main yubi-back backup];
marvin = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP60B1IOdfJRrDcCKajMV8YJNC01gSsccZi3DKHlS6YJ";
in {
"thehedgehog-pem.age".publicKeys = [marvin yubi];
"thehedgehog-key.age".publicKeys = [marvin yubi];
"cloudflare-ca.age".publicKeys = [marvin yubi];
"cloudflared-creds.age".publicKeys = [marvin yubi];
"cloudflared-vars.age".publicKeys = [marvin yubi];
"ory-hydra-secret-vars.age".publicKeys = [marvin yubi];
"vaultwarden-vars.age".publicKeys = [marvin yubi];
"miniflux-admin.age".publicKeys = [marvin yubi];
"external-wg-priv-key.age".publicKeys = [marvin yubi];
"cf-dyndns-token.age".publicKeys = [marvin yubi];
"step-password.age".publicKeys = [marvin yubi];
"step-inter-ca-key.age".publicKeys = [marvin yubi];
"step-root-ca-key.age".publicKeys = [marvin yubi];
"step-inter-ca-crt.age".publicKeys = [marvin yubi];
"step-root-ca-crt.age".publicKeys = [marvin yubi];
"gitea-mail-pw.age".publicKeys = [marvin yubi];
"gitea-db-pw.age".publicKeys = [marvin yubi];
"thehedgehog-pem.age".publicKeys = [marvin yubi-main yubi-back ];
"thehedgehog-key.age".publicKeys = [marvin yubi-main yubi-back ];
"cloudflare-ca.age".publicKeys = [marvin yubi-main yubi-back ];
"cloudflared-creds.age".publicKeys = [marvin yubi-main yubi-back ];
"cloudflared-vars.age".publicKeys = [marvin yubi-main yubi-back ];
"ory-hydra-secret-vars.age".publicKeys = [marvin yubi-main yubi-back ];
"vaultwarden-vars.age".publicKeys = [marvin yubi-main yubi-back ];
"miniflux-admin.age".publicKeys = [marvin yubi-main yubi-back ];
"external-wg-priv-key.age".publicKeys = [marvin yubi-main yubi-back ];
"cf-dyndns-token.age".publicKeys = [marvin yubi-main yubi-back ];
"step-password.age".publicKeys = [marvin yubi-main yubi-back ];
"step-inter-ca-key.age".publicKeys = [marvin yubi-main yubi-back ];
"step-root-ca-key.age".publicKeys = [marvin yubi-main yubi-back ];
"step-inter-ca-crt.age".publicKeys = [marvin yubi-main yubi-back ];
"step-root-ca-crt.age".publicKeys = [marvin yubi-main yubi-back ];
"gitea-mail-pw.age".publicKeys = [marvin yubi-main yubi-back ];
"gitea-db-pw.age".publicKeys = [marvin yubi-main yubi-back ];
}