2023-10-14 17:08:02 +00:00
|
|
|
let
|
2023-11-10 10:33:41 +00:00
|
|
|
pkgs = import <nixpkgs> { };
|
|
|
|
|
publicKeysURL =
|
|
|
|
|
"https://git.kun.is/pim.keys"; # https://github.com/pizzapim.keys
|
|
|
|
|
publicKeysFile = builtins.fetchurl { url = publicKeysURL; };
|
|
|
|
|
publicKeys = pkgs.lib.strings.splitString "\n"
|
|
|
|
|
(pkgs.lib.strings.fileContents publicKeysFile);
|
2023-12-14 20:39:56 +00:00
|
|
|
in
|
|
|
|
|
{
|
2023-10-16 08:59:27 +00:00
|
|
|
"wg-quick-home-privkey.age".publicKeys = publicKeys;
|
|
|
|
|
"wg-quick-home-preshared-key.age".publicKeys = publicKeys;
|
|
|
|
|
"sue_ed25519.age".publicKeys = publicKeys;
|
|
|
|
|
"sue_azure_rsa.age".publicKeys = publicKeys;
|
2023-10-16 09:12:30 +00:00
|
|
|
"syncthing-key.pem.age".publicKeys = publicKeys;
|
|
|
|
|
"syncthing-cert.pem.age".publicKeys = publicKeys;
|
2023-10-26 13:46:47 +00:00
|
|
|
"common-pg-tfbackend.age".publicKeys = publicKeys;
|
2023-10-26 17:56:23 +00:00
|
|
|
"ansible-vault-secret.age".publicKeys = publicKeys;
|
2023-10-26 18:11:59 +00:00
|
|
|
"powerdns-api-key.json.age".publicKeys = publicKeys;
|
2023-11-10 10:33:41 +00:00
|
|
|
"keepassxc.ini.age".publicKeys =
|
|
|
|
|
publicKeys; # Secret agent causes private keys in config file.
|
2023-11-25 13:15:07 +00:00
|
|
|
"postgresql_client.key.age".publicKeys = publicKeys;
|
2023-12-14 20:39:56 +00:00
|
|
|
"k3s-pim-privkey.age".publicKeys = publicKeys;
|
2023-10-14 17:08:02 +00:00
|
|
|
}
|
