nixos/secrets/secrets.nix

let
  pubkeyModule = import ../hosts/pubkeys.nix;
  pubkeys = [
    pubkeyModule.macbook
  ] ++ pubkeyModule.groups.architect;
in
{
  "matrix-synapse.age".publicKeys = pubkeys;
  "teslamate.age".publicKeys = pubkeys;
  "nextcloud-admin.age".publicKeys = pubkeys;
  "nextcloud-database.age".publicKeys = pubkeys;
  "restic-environment.age".publicKeys = pubkeys;
  "restic-passwords.age".publicKeys = pubkeys;
}
feat(secrets): add initial secrets.nix configuration 2024-12-06 20:49:18 +00:00			`let`
fix(secrets): rekeyed secrets with new pubkeys 2024-12-06 21:08:06 +00:00			`pubkeyModule = import ../hosts/pubkeys.nix;`
feat(secrets): add initial secrets.nix configuration 2024-12-06 20:49:18 +00:00			`pubkeys = [`
fix(secrets): rekeyed secrets with new pubkeys 2024-12-06 21:08:06 +00:00			`pubkeyModule.macbook`
feat(secrets): added host key for architect and rekeyed secrets 2024-12-06 21:11:16 +00:00			`] ++ pubkeyModule.groups.architect;`
feat(secrets): add initial secrets.nix configuration 2024-12-06 20:49:18 +00:00			`in`
			`{`
refactor(teslamate.nix): update secrets file path and add age secret configuration 2024-12-06 20:55:44 +00:00			`"matrix-synapse.age".publicKeys = pubkeys;`
			`"teslamate.age".publicKeys = pubkeys;`
feat(nextcloud): switch to age-protected secrets 2024-12-06 21:17:00 +00:00			`"nextcloud-admin.age".publicKeys = pubkeys;`
			`"nextcloud-database.age".publicKeys = pubkeys;`
feat(restic): switch to age-protected secrets 2024-12-06 22:58:46 +00:00			`"restic-environment.age".publicKeys = pubkeys;`
			`"restic-passwords.age".publicKeys = pubkeys;`
feat(secrets): add initial secrets.nix configuration 2024-12-06 20:49:18 +00:00			`}`