maurice/snix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(ops/secrets): Bootstrap agenix secrets folder

Browse source 
Sets up the key set and adds an initial secret (besadii config with
tokens) to be deployed to whitby.

Change-Id: Ic07fd5e66b9e7a533013e04c35e052c2aa11f77d
This commit is contained in:
Vincent Ambo 2021-12-03 17:12:45 +03:00 • committed by tazjin
parent 2fa157ccd6
commit f1e1f71883
4 changed files with 15 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
ops/secrets/.skip-subtree Normal file
View file

@ -0,0 +1,2 @@
The Nix configuration in here is read by agenix and not compatible
with readTree.

1
ops/secrets/README.md Normal file
View file

@ -0,0 +1 @@
TVL's deployment secrets, encrypted with [agenix](https://github.com/ryantm/agenix/commits/main)

BIN
ops/secrets/besadii.age Normal file
View file

Binary file not shown.

12
ops/secrets/secrets.nix Normal file
View file

@ -0,0 +1,12 @@
let
tazjin = [
# tverskoy
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM1fGWz/gsq+ZeZXjvUrV+pBlanw1c3zJ9kLTax9FWQy"
];
whitby = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILNh/w4BSKov0jdz3gKBc98tpoLta5bb87fQXWBhAl2I";
default.publicKeys = tazjin ++ [ whitby ];
in {
"besadii.age" = default;
}