maurice/snix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor(grfn/mugwump): Move buildkite secrets into age

Browse source 
Use agenix for the buildkite ssh key and agent token on mugwump, instead
of storing stuff in /etc/secrets

Change-Id: I56951587b949fc0854e56f5c4e33b601e9cd964e
Reviewed-on: https://cl.tvl.fyi/c/depot/+/5027
Reviewed-by: grfn <grfn@gws.fyi>
Autosubmit: grfn <grfn@gws.fyi>
Tested-by: BuildkiteCI
This commit is contained in:
Griffin Smith 2022-01-20 09:28:01 -05:00 • committed by grfn
parent 8b63e0f8ce
commit 7873806218
4 changed files with 30 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
users/grfn/secrets/secrets.nix
View file

@ -8,4 +8,6 @@ in
"bbbg.age".publicKeys = [ grfn mugwump bbbg ];
"cloudflare.age".publicKeys = [ grfn mugwump ];
"ddclient-password.age".publicKeys = [ grfn mugwump ];
"buildkite-ssh-key.age".publicKeys = [ grfn mugwump ];
"buildkite-token.age".publicKeys = [ grfn mugwump ];
}