more secrets

This commit is contained in:
RingOfStorms (Josh) 2024-05-07 01:02:42 -05:00
parent fa0974cb63
commit 5fd3d3a40a
8 changed files with 119 additions and 13 deletions

View file

@ -16,7 +16,19 @@ let
];
in
{
# TODO come up with a rotate method/encrypt the device keys bette. This isn't very secure feeling to me the way I am doing this now. If anyone gains access to any one of my devices, then my secrets are no longer secret. This is not a good model.
"nix2github.age" = { inherit publicKeys; };
"nix2bitbucket.age" = { inherit publicKeys; };
## Too make a new secret: `ragenix --editor=vi -v -e FILE.age` add file below and in the ragenix.nix file
#
# TODO come up with a rotate method/encrypt the device keys better. This isn't very secure feeling to me the way I am doing this now. If anyone gains access to any one of my devices, then my secrets are no longer secret. This is not a good model.
"nix2github.age" = {
inherit publicKeys;
};
"nix2bitbucket.age" = {
inherit publicKeys;
};
"nix2h001.age" = {
inherit publicKeys;
};
"nix2t.age" = {
inherit publicKeys;
};
}