nix-dotfiles/secrets.nix at main · clo4/nix-dotfiles · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
let
  system-homeserver1 = builtins.readFile ./hosts/homeserver1/id_ed25519.pub;

  robert-macmini = builtins.readFile ./hosts/macmini/users/robert/id_ed25519.pub;
  robert-macbook-air = builtins.readFile ./hosts/macbook-air/users/robert/id_ed25519.pub;
  robert-pc3 = builtins.readFile ./hosts/pc3/users/robert/id_ed25519.pub;
  robert-personal = [
    robert-pc3
    robert-macmini
    robert-macbook-air
  ];

  robert-work-macbookpro = builtins.readFile ./hosts/work-macbookpro/users/robert/id_ed25519.pub;
  work-pc3 = builtins.readFile ./hosts/pc3/users/work/id_ed25519.pub;
  robert-work = [
    robert-work-macbookpro
    work-pc3
  ];

  robert = robert-personal ++ robert-work;
in
{
  "hosts/homeserver1/tailscale-homeserver1.age".publicKeys = [ system-homeserver1 ] ++ robert;
  "hosts/homeserver1/clouddns-config.json.age".publicKeys = [ system-homeserver1 ] ++ robert;
  "hosts/work-macbookpro/users/robert/work-gitconfig.age".publicKeys = [
    robert-work-macbookpro
  ]
  ++ robert;
  "hosts/pc3/users/work/gitconfig.age".publicKeys = robert;
  "config/niri/private.kdl".publicKeys = robert;
}