home/nixos-servers
home/nixos-servers
Archived
2
0
Fork 0
Code Issues 8 Pull requests Projects Releases Packages Wiki Activity Actions

remove ansible

Browse source 
deploy ssh host and user keys using agenix
deploy ssh certificates using ssh
This commit is contained in:
Pim Kunis 2023-11-14 23:53:04 +01:00
parent dd8b23f5a9
commit 022a6aabb4
20 changed files with 159 additions and 160 deletions
Download patch file Download diff file Expand all files Collapse all files

BIN
secrets/jefke_host_ed25519.age Normal file
View file

Binary file not shown.

BIN
secrets/jefke_user_ed25519.age Normal file
View file

Binary file not shown.

16
secrets/secrets.nix Normal file
View file

@ -0,0 +1,16 @@
let
pkgs = import <nixpkgs> { };
lib = pkgs.lib;
secrets = {
jefke = {
publicKeys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIJUSH2IQg8Y/CCcej7J6oe4co++6HlDo1MYDCR3gV3a pim@x260"
];
encryptedFiles = [ "jefke_host_ed25519.age" "jefke_user_ed25519.age" ];
};
};
in lib.attrsets.mergeAttrsList (builtins.map ({ publicKeys, encryptedFiles }:
lib.attrsets.mergeAttrsList (builtins.map
(encryptedFile: { "${encryptedFile}" = { inherit publicKeys; }; })
encryptedFiles)) (lib.attrsets.attrValues secrets))