nixos/secrets.nix
2026-04-26 15:12:42 +02:00

19 lines
989 B
Nix

let
wsl-desktop = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPhbz4AlnRrRNvUwlYd5siMTuvgvSwlJ21Tq54OA20ID reudy@DESKTOP-40EVMS3";
termux-phone = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJahgKnADam4PGc9TiANkWGx09uNuS42tllj70UuyzPf u0_a279@localhost";
bash-nixos = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPAP6gemgKZVguFi6Diif+dBbMAZQupimeV9OQuUotlw vps-manual";
users = [ wsl-desktop termux-phone bash-nixos ];
nixos-vps = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINjPVQpFlKGbDNqOVvKAFRExKHAAkKSAqKabDSMtJsth";
systems = [ nixos-vps ];
in
{
"secrets/lilsecret.age".publicKeys = users ++ systems;
# Authelia secrets - all three are required
"secrets/authelia-jwt-secret.age".publicKeys = users ++ systems;
"secrets/authelia-storage-key.age".publicKeys = users ++ systems;
"secrets/authelia-session-secret.age".publicKeys = users ++ systems;
# The hashed users database (contains bcrypt-hashed passwords)
"secrets/authelia-users.age".publicKeys = users ++ systems;
}