22 lines
1.1 KiB
Nix
22 lines
1.1 KiB
Nix
let
|
|
wsl-desktop = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPhbz4AlnRrRNvUwlYd5siMTuvgvSwlJ21Tq54OA20ID reudy@DESKTOP-40EVMS3";
|
|
termux-phone = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJahgKnADam4PGc9TiANkWGx09uNuS42tllj70UuyzPf u0_a279@localhost";
|
|
bash-nixos = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPAP6gemgKZVguFi6Diif+dBbMAZQupimeV9OQuUotlw vps-manual";
|
|
users = [ wsl-desktop termux-phone bash-nixos ];
|
|
|
|
nixos-vps = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINjPVQpFlKGbDNqOVvKAFRExKHAAkKSAqKabDSMtJsth";
|
|
systems = [ nixos-vps ];
|
|
in
|
|
{
|
|
"secrets/lilsecret.age".publicKeys = users ++ systems;
|
|
|
|
# Authelia secrets - all three are required
|
|
"secrets/authelia-jwt-secret.age".publicKeys = users ++ systems;
|
|
"secrets/authelia-storage-key.age".publicKeys = users ++ systems;
|
|
"secrets/authelia-session-secret.age".publicKeys = users ++ systems;
|
|
# The hashed users database (contains bcrypt-hashed passwords)
|
|
"secrets/authelia-users.age".publicKeys = users ++ systems;
|
|
|
|
# Nextcloud admin password (plaintext, read by the nextcloud service)
|
|
"secrets/nextcloud-admin-pass.age".publicKeys = users ++ systems;
|
|
}
|