24 lines
889 B
Nix
24 lines
889 B
Nix
let
|
|
keys = import ./keys.nix;
|
|
|
|
secrets = with keys; {
|
|
ftp-userDb-qenya = [ machines.kilgharrah ] ++ keys.users.qenya;
|
|
user-password-kilgharrah-qenya = [ machines.kilgharrah ] ++ keys.users.qenya;
|
|
user-password-tohru-qenya = [ machines.tohru ] ++ keys.users.qenya;
|
|
wireguard-peer-orm = [ machines.orm ] ++ keys.users.qenya;
|
|
wireguard-peer-tohru = [ machines.tohru ] ++ keys.users.qenya;
|
|
wireguard-peer-yevaud = [ machines.yevaud ] ++ keys.users.qenya;
|
|
wireguard-peer-kalessin = [ machines.kalessin ] ++ keys.users.qenya;
|
|
wireguard-peer-kilgharrah = [ machines.kilgharrah ] ++ keys.users.qenya;
|
|
protonvpn-pennykettle1 = [ machines.yevaud ] ++ keys.users.qenya;
|
|
};
|
|
in
|
|
builtins.listToAttrs (
|
|
map
|
|
(secretName: {
|
|
name = "secrets/${secretName}.age";
|
|
value.publicKeys = secrets."${secretName}";
|
|
})
|
|
(builtins.attrNames secrets)
|
|
)
|