nix/secrets/secrets.nix
Jeltz d595fc2c1f
admins: enroll Jeltz
Jeltz est membre d'Aurore et du bureau de FedeRez.

Signed-off-by: Jeltz <jeltz@federez.net>
2024-08-08 16:17:19 +02:00

27 lines
1.3 KiB
Nix

let
readKeyFile = keyFile: builtins.filter (x: x != [] && x != "") (builtins.split "\n" (builtins.readFile keyFile));
estragon = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBS1xp/2n5q4u4kDerkXQClnD1xeS6qrj0regbJwjktB root@estragon";
wagon = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJqBgXGbnPPmDHrn05Fr3X66cmgP6zvnMtPL21d4ebfh root@wagon";
lagon = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN8fiqJw9RvVVQghG0OVKsXAkBcWox4JsozfxToLAiIK root@lagon";
klingon = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC/P58bPqi8yTl12jpP8oFcYG7S8j1WpfgqwZz+EuQqy root@kligon";
# Add yourself.
raito = readKeyFile ../pubkeys/raito.keys;
bensmrs = readKeyFile ../pubkeys/bensmrs.keys;
tomate = readKeyFile ../pubkeys/tomate.keys;
jeltz = readKeyFile ../pubkeys/jeltz.keys;
active-admins = raito ++ bensmrs ++ tomate ++ jeltz;
matrix-admins = active-admins;
vaultwarden-admins = active-admins;
keycloak-admins = active-admins;
ldap-bind-admins = active-admins;
servers = [ estragon wagon lagon klingon ];
in
{
"matrix-shared-secret.age".publicKeys = [ estragon ] ++ matrix-admins;
"mautrix-telegram.age".publicKeys = [ estragon ] ++ matrix-admins;
"vaultwarden-secrets.age".publicKeys = [ wagon ] ++ vaultwarden-admins;
"keycloak-password-file.age".publicKeys = [ lagon ] ++ keycloak-admins;
"ldap-bind-password.age".publicKeys = servers ++ ldap-bind-admins;
}