NixOS system configurations + dotfiles via home-manager

agenix: encrypt secrets against dev machine key

+16 -15
hosts/ruan/secrets/_secrets.nix
··· 1 - let 2 - ruan = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJi5+Pco0lVGVsAPRJl+FQd+c+AAsRHmZavWjaUgMsmO"; 3 - secrets = [ 4 - "radicale-users.age" 5 - "transmission-credentials.json.age" 6 - "miniflux-credentials.age" 7 - "dns-token.age" 8 - ]; 9 - in 10 1 builtins.listToAttrs ( 11 - map (name: { 12 - inherit name; 13 - value = { 14 - publicKeys = [ ruan ]; 15 - }; 16 - }) secrets 2 + map 3 + (name: { 4 + inherit name; 5 + value.publicKeys = [ 6 + # host key 7 + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJi5+Pco0lVGVsAPRJl+FQd+c+AAsRHmZavWjaUgMsmO" 8 + # peter@grancel 9 + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILACfyJt7+ULfX1XFhBbztlTMNDZnRNQbKj5DV2S7uVo" 10 + ]; 11 + }) 12 + [ 13 + "radicale-users.age" 14 + "transmission-credentials.json.age" 15 + "miniflux-credentials.age" 16 + "dns-token.age" 17 + ] 17 18 )
hosts/ruan/secrets/dns-token.age

This is a binary file and will not be displayed.

+7 -7
hosts/ruan/secrets/miniflux-credentials.age
··· 1 1 age-encryption.org/v1 2 - -> ssh-ed25519 BXZanA mcXgdymTmirzlashBuxR496ULQOUYobmLv930LfTwBs 3 - vrAmdDZiFNxYDFAcz4J7CUMtA45Ub4QpsWVm92SB034 4 - -> lt\LOf-grease =XRgK` }/]T z 5 - vuIhG+2PoWVvY40VoTc/5Z9ef29e2m89RpKHpAXD2N8bBzF946Hbd5+05Ab8+ePk 6 - lhdI8tGbo/i7bp6iZU3SNuc 7 - --- JWrjF4IfyxmTObfHvucO1uGvy8wG1m/o7UgiSWKG0BM 8 - ���C��������e�J�{ 0��t� �6� �ݡ��*A�+d��Z����}�xJ_5��m]hIܲ��PY÷��.�3n3?h��CYu���G�=�����Fy �-��a�P�W 2 + -> ssh-ed25519 BXZanA uFa/FhqTE8Xy3foovITczMe5uuV+88wSUJZ6ldgZ/zA 3 + 8n2g4Rlt8/7Zigyb8RAvSDYOxXM4n7HEkbeIxn7V/bM 4 + -> ssh-ed25519 0mYitQ dFWzitsjhpYFSXYZswxr1TK5sUbVn5JCFKfxHqHiwCc 5 + hHzSMMqlgzb7t9y3CkH2grzq0SrA1hVikvO8oqkjrdI 6 + --- 6o0yyAnsmplC4RR1tyzBimB2SDCFgoUxhkTBGVT8Aq4 7 + �.w� Vq�'l}p7`�8 8 + ?��\z�d�M�:�:�kfv����J3!�oه>�!�7��t��lz6��� ͠��? �f�v�R�i}>iY��R=�������#�C��RH���
+6 -6
hosts/ruan/secrets/radicale-users.age
··· 1 1 age-encryption.org/v1 2 - -> ssh-ed25519 BXZanA OT4ZnlI+TNevTUECDRdAieBU2peb5ZdxFrFkuWP/7is 3 - IfdWp5tGJ9wORoUwGZk92fLHwnW1JJPuqzfLcSSdMIk 4 - -> rg(skL-grease %BMpiO sP8 5 - BMz86/kYt6X+WR2Png5ZkfzK 6 - --- 5FtHHUzSnWYD33kEcjF+omTvj5RjqVM7rmjEbZ5RSPI 7 - R�����˹�#��`�p�g����D����(H�0��)� �'�6�(���];�W �=��;��`�hQ����@�FN.|v��b��^���$֮�QޝvPdi 2 + -> ssh-ed25519 BXZanA Ek08e2NuIkcJ12egRxfVKQvoLWHaMA3VFFNX/ZdMLXM 3 + VjieZzDCS302orbEXWZ8BgXfQkduKekZnox1p+gn/g0 4 + -> ssh-ed25519 0mYitQ QE+3F8gU57S7x5fAsbJRAqg3mCUrwYkByjvRJRJ4sQc 5 + O7/VklWG9+2KKc9bc3b9QCCJ+iUlb+Y5tBlG0mNdIio 6 + --- vka910iSGq11d6S0IoS4zHIO47QKV65YmK0/HtGr+wM 7 + �rUl/��qzރ���ܬ���ZT@����k�=���鶄�46�w�E��uk�ƻ!��ѬLG�t�,b=�F��,>�Ї���^�0>\EV�%��z���הuH��
hosts/ruan/secrets/transmission-credentials.json.age

This is a binary file and will not be displayed.