kalessin, kilgharrah: add to wireguard network

This commit is contained in:
Katherina Walshe-Grey 2024-11-05 19:23:53 +00:00
parent 052b0c1c4f
commit b893da35be
8 changed files with 56 additions and 14 deletions

View file

@ -1,22 +1,22 @@
let
keys = import ./keys.nix;
commonKeys = keys.users.qenya;
secrets = with keys; {
ftp-userDb-qenya = [ machines.kilgharrah ];
user-password-kilgharrah-qenya = [ machines.kilgharrah ];
user-password-tohru-qenya = [ machines.tohru ];
wireguard-peer-orm = [ machines.orm ];
wireguard-peer-tohru = [ machines.tohru ];
wireguard-peer-yevaud = [ machines.yevaud ];
ftp-userDb-qenya = [ machines.kilgharrah ] ++ keys.users.qenya;
user-password-kilgharrah-qenya = [ machines.kilgharrah ] ++ keys.users.qenya;
user-password-tohru-qenya = [ machines.tohru ] ++ keys.users.qenya;
wireguard-peer-orm = [ machines.orm ] ++ keys.users.qenya;
wireguard-peer-tohru = [ machines.tohru ] ++ keys.users.qenya;
wireguard-peer-yevaud = [ machines.yevaud ] ++ keys.users.qenya;
wireguard-peer-kalessin = [ machines.kalessin ] ++ keys.users.qenya;
wireguard-peer-kilgharrah = [ machines.kilgharrah ] ++ keys.users.qenya;
};
in
builtins.listToAttrs (
map
(secretName: {
name = "secrets/${secretName}.age";
value.publicKeys = secrets."${secretName}" ++ commonKeys;
value.publicKeys = secrets."${secretName}";
})
(builtins.attrNames secrets)
)