From 0355dd4b803a0dfc36c5d0bf179e85ebfbf51ae3 Mon Sep 17 00:00:00 2001
From: Ryan Lahfa <federez-infra@lahfa.xyz>
Date: Wed, 14 Feb 2024 21:10:57 +0100
Subject: [PATCH] admins: enroll Tom Hubrecht

Tom Hubrecht est un sysadmin / membre d'honneur de la DGNum, membre du CA d'AliENS.

Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
---
 profiles/sysadmin.nix |  1 +
 pubkeys/tomate.keys   |  1 +
 secrets/secrets.nix   | 11 +++++++----
 3 files changed, 9 insertions(+), 4 deletions(-)
 create mode 100644 pubkeys/tomate.keys

diff --git a/profiles/sysadmin.nix b/profiles/sysadmin.nix
index 42f2bbb..edb6133 100644
--- a/profiles/sysadmin.nix
+++ b/profiles/sysadmin.nix
@@ -2,6 +2,7 @@
   users.users.root.openssh.authorizedKeys.keyFiles = [
     ../pubkeys/raito.keys
     ../pubkeys/bensmrs.keys
+    ../pubkeys/tomate.keys
   ];
 
   users.motd = (builtins.readFile ./federez.motd);
diff --git a/pubkeys/tomate.keys b/pubkeys/tomate.keys
new file mode 100644
index 0000000..c5428d0
--- /dev/null
+++ b/pubkeys/tomate.keys
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL+EZXYziiaynJX99EW8KesnmRTZMof3BoIs3mdEl8L3
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 6294d85..3f90cb8 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -7,11 +7,14 @@ let
   # Add yourself.
   raito = readKeyFile ../pubkeys/raito.keys;
   bensmrs = readKeyFile ../pubkeys/bensmrs.keys;
+  tomate = readKeyFile ../pubkeys/tomate.keys;
 
-  matrix-admins = raito ++ bensmrs;
-  vaultwarden-admins = raito ++ bensmrs;
-  keycloak-admins = raito ++ bensmrs;
-  ldap-bind-admins = raito ++ bensmrs;
+  active-admins = raito ++ bensmrs ++ tomate;
+
+  matrix-admins = active-admins;
+  vaultwarden-admins = active-admins;
+  keycloak-admins = active-admins;
+  ldap-bind-admins = active-admins;
   servers = [ estragon wagon lagon klingon ];
 in
   {