federez/nix
7
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

admins: enroll bensmrs

Browse source 
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
This commit is contained in:
Ryan Lahfa 2024-02-13 18:43:39 +01:00
parent 3f7b40afbd
commit 5c35057799
6 changed files with 6 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

1
profiles/sysadmin.nix
View file

@ -1,6 +1,7 @@
{ pkgs, ... }: { { pkgs, ... }: {
users.users.root.openssh.authorizedKeys.keyFiles = [ users.users.root.openssh.authorizedKeys.keyFiles = [
../pubkeys/raito.keys ../pubkeys/raito.keys
../pubkeys/bensmrs.keys
]; ];
environment.systemPackages = [ environment.systemPackages = [

1
pubkeys/bensmrs.keys Normal file
View file

@ -0,0 +1 @@
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC0kAxg8WC4X+nU8poDNs1Gac9+GjFMJh9La0D17iryJQZKdlNlpe82LnqC9CwcBzfzzT9XMrnZDajcRe16SLwK1HpIgIUQr/8g5CAgmj+/n63i86lc2/fTrgJh1sjJFC+6DEWfle4OmbiM5smKNZhh6HhUcCYL0vNI0bpIB5OgJgR0NTHeZ+Vs6tNx1TOHUXyFxeyfcFtSpwk06xA8667s44N/obEw/H4cm/sXcFx9s7G+40FT2M2E3XvT7r05kBOGptsumW2pSl8FzT4gOeOonc/A15huKnT47ORFTPhbO0OCcTpDbPQLfLpHeCrb/f1kdbRPzdz02spgDmATjQr93KtANV+UJQn5j+/qxRXquHPvPRWxfcCFerpMGai7X5IfgTVBE5TWT8MmjxaqhBk6vpMUA+hz/VwDFDhWJVzLHdp/S/mWoUKU/W3vH8bOKEpVBbtj7hxOia52TMfv1psC4217OGKQ4sYeXs8kMzXM5gGl29HKpuUU8ike2c8jSCSjWaEAE7ZdsDfuor35zjRBp40z4z4toSZYKJyzNUeMclKHXGy7DLfED5OTkMy7Kd3IIcHq/1PwnAKlxEXXP6k53Ya1pRPx4We61aNOGNRIC1DBKDjmzrv/IKXtf+/6+M3lZqT8wNnoK0+2U+bvkoRrEYtB+E3RQDfGW+Mm4/sAsw==

BIN
secrets/matrix-shared-secret.age
View file

Binary file not shown.

BIN
secrets/mautrix-telegram.age
View file

Binary file not shown.

7
secrets/secrets.nix
View file

@ -5,10 +5,11 @@ let
lagon = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN8fiqJw9RvVVQghG0OVKsXAkBcWox4JsozfxToLAiIK root@lagon"; lagon = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN8fiqJw9RvVVQghG0OVKsXAkBcWox4JsozfxToLAiIK root@lagon";
# Add yourself. # Add yourself.
raito = readKeyFile ../pubkeys/raito.keys; raito = readKeyFile ../pubkeys/raito.keys;
bensmrs = readKeyFile ../pubkeys/bensmrs.keys;
matrix-admins = raito; matrix-admins = raito ++ bensmrs;
vaultwarden-admins = raito; vaultwarden-admins = raito ++ bensmrs;
keycloak-admins = raito; keycloak-admins = raito ++ bensmrs;
in in
{ {
"matrix-shared-secret.age".publicKeys = [ estragon ] ++ matrix-admins; "matrix-shared-secret.age".publicKeys = [ estragon ] ++ matrix-admins;

BIN
secrets/vaultwarden-secrets.age
View file

Binary file not shown.