wireguard: initial setup

2024-07-19 19:26:36 +01:00 · 2024-07-19 19:26:36 +01:00 · c60728e7aa
commit c60728e7aa
parent 35563b1b07
10 changed files with 99 additions and 4 deletions
--- a/secrets.nix
+++ b/secrets.nix
@ -0,0 +1,19 @@
+let
+  keys = import ./keys.nix;
+
+  commonKeys = keys.users.qenya;
+
+  secrets = with keys; {
+    wireguard-hub = [ machines.orm ];
+    wireguard-peer-orm = [ machines.orm ];
+    wireguard-peer-tohru = [ machines.tohru ];
+  };
+in
+builtins.listToAttrs (
+  map
+    (secretName: {
+      name = "secrets/${secretName}.age";
+      value.publicKeys = secrets."${secretName}" ++ commonKeys;
+    })
+    (builtins.attrNames secrets)
+)