23 lines
1.1 KiB
Nix
23 lines
1.1 KiB
Nix
# Used by ragenix nix only.
|
|
# Ensure that $RULES has been set via direnv
|
|
# Edit a key: `agenix -i ~/.ssh/id_ed25519 -e secrets/someKey.age`
|
|
# run `ragenix -r -i /path/to/your/key` after modifying any keys below
|
|
#
|
|
# Re-keying is required after adding new hosts or keys:
|
|
# run `ragenix -r -i /path/to/your/key`
|
|
let
|
|
fiscalvelvetpoet = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJDMAhG6+40YiYy9wqruHK9M2fLwYAqikJSJ/pRjR/so";
|
|
ops = [fiscalvelvetpoet];
|
|
users = [fiscalvelvetpoet];
|
|
|
|
flemming = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK16f3Fjj0BY9vjtXahezMAP3I329hHEQXCceRTkr+Yu";
|
|
hollows = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEGB8EUbqoarM4GmPgE2DBF4z/L6wVNc+lF27Z83XDUz";
|
|
pred = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMK5BOK1ldtZ+SV4QxfNm/PfOLOWv3/VHf/JbdMMoMzw";
|
|
toscano = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGWcukRkNUQUbgXQle8q9xszDZOnDf3BVpPSFgycJVVE";
|
|
systems = [flemming hollows pred toscano];
|
|
in {
|
|
"root.age".publicKeys = ops ++ systems;
|
|
"fiscalvelvetpoet.age".publicKeys = [fiscalvelvetpoet] ++ systems;
|
|
"forgejo.age".publicKeys = [fiscalvelvetpoet toscano];
|
|
}
|