Clean up secret management
Update readme
This commit is contained in:
parent
5d752cb279
commit
0cecc75e3d
4 changed files with 17 additions and 33 deletions
|
@ -1,3 +0,0 @@
|
|||
```bash
|
||||
nix run github:ryantm/agenix# -- -e secret1.age
|
||||
```
|
|
@ -1,17 +0,0 @@
|
|||
let
|
||||
pkgs = import <nixpkgs> { };
|
||||
publicKeysURL =
|
||||
"https://git.kun.is/pim.keys"; # https://github.com/pizzapim.keys
|
||||
publicKeysFile = builtins.fetchurl { url = publicKeysURL; };
|
||||
publicKeys = pkgs.lib.strings.splitString "\n"
|
||||
(pkgs.lib.strings.fileContents publicKeysFile);
|
||||
in
|
||||
{
|
||||
"wg-quick-home-privkey.age".publicKeys = publicKeys;
|
||||
"wg-quick-home-preshared-key.age".publicKeys = publicKeys;
|
||||
"syncthing-key.pem.age".publicKeys = publicKeys;
|
||||
"syncthing-cert.pem.age".publicKeys = publicKeys;
|
||||
"keepassxc.ini.age".publicKeys =
|
||||
publicKeys; # Secret agent causes private keys in config file.
|
||||
"sops-keys.txt.age".publicKeys = publicKeys;
|
||||
}
|
Binary file not shown.
Loading…
Add table
Add a link
Reference in a new issue