secrets.nix 2.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142
  1. let
  2. aya-higan = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIChKU9RA6o3idRk15yBwD7RJZDJvKldInwDgSJSQEb+u";
  3. aya-makai = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAcqyCiBlsu5LZ+Gdf00hbHaBLYV9IcgWDO+cDtifIWW";
  4. aya-yama = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBO+syWCXTaOxpR1Hu1AycSPZC/oelm6SV8rt6FjGCEz";
  5. higan = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIbdkpKyC9ksfz8eKHZSaj3S6SxAhXmOSV3ydc5Y44do";
  6. makai = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC7lIKAYzS3KWP4s+jXzPfBu91P2gtvVyk+cXWxAa542";
  7. yama = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPvjuL+HhDwgogjbbPlMBJlWnYNzYh8ltWvSL0t5871q";
  8. blackberry = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMV1GJfxni0UNksBuVAzRI8FtfcWE23dvkC9MjC74cd6";
  9. in {
  10. # DNS
  11. "duckdns.age".publicKeys = [ aya-yama yama ];
  12. "dynv6.age".publicKeys = [ aya-yama yama ];
  13. "regru.age".publicKeys = [ aya-yama yama ];
  14. "regru-fail2banana.age".publicKeys = [ aya-yama blackberry ];
  15. # nix-serve keys
  16. "nix.badbayan.duckdns.org-1.age".publicKeys = [ aya-yama yama ];
  17. "nix.notbad.dynv6.net-1.age".publicKeys = [ aya-yama yama ];
  18. "nix.bad.net.ru-1.age".publicKeys = [ aya-yama yama ];
  19. # Services
  20. "miniflux.age".publicKeys = [ aya-yama yama ];
  21. "nextcloud.age".publicKeys = [ aya-yama yama ];
  22. "yggdrasil.age".publicKeys = [ aya-yama yama ];
  23. "coturn-fail2banana.age".publicKeys = [ aya-yama blackberry ];
  24. "nextcloud-fail2banana.age".publicKeys = [ aya-yama blackberry ];
  25. "synapse-fail2banana.age".publicKeys = [ aya-yama blackberry ];
  26. # WireGuard host keys
  27. "higan-wg0.age".publicKeys = [ aya-yama aya-higan higan ];
  28. "makai-wg0.age".publicKeys = [ aya-yama aya-makai makai ];
  29. "yama-wg0.age".publicKeys = [ aya-yama yama ];
  30. "blackberry-wg0.age".publicKeys = [ aya-yama blackberry ];
  31. # WireGuard preshared keys
  32. "yama-wg0-higan.age".publicKeys = [ aya-yama aya-higan yama higan ];
  33. "yama-wg0-makai.age".publicKeys = [ aya-yama aya-makai yama makai ];
  34. "yama-wg0-oneplus.age".publicKeys = [ aya-yama yama ];
  35. "yama-wg0-blackberry.age".publicKeys = [ aya-yama yama blackberry ];
  36. }