refactor to use common components
This commit is contained in:
parent
1ec7eadcb8
commit
c3644453ca
12 changed files with 62 additions and 222 deletions
32
secrets/nix2l001.age
Normal file
32
secrets/nix2l001.age
Normal file
|
@ -0,0 +1,32 @@
|
|||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDd6MzN5USBZK2x2
|
||||
S2tVOWplL3ZnaFI1NjhpTHlDS0lCOXdjVFExd21jSEE5UVNDUGdjClBNNU1ZbWtt
|
||||
SWNuSGkyRVo4aTlhbkxWNkN5Wk9MTnFyOTJFOXFucTgyR2cKLT4gc3NoLWVkMjU1
|
||||
MTkgSmh2TCtRIDRwcjYyWk5TcVlWWUY2bzBRamhIZXlIcW5DNjczcTdRNWhhZVQ5
|
||||
ekIxaU0KbUNFUWdDR1dHRldGZjJvOUVPMlZ0MkZ5L25tRTNTVTJ6MHpsck0xWkVU
|
||||
OAotPiBzc2gtZWQyNTUxOSBTcENqQlEgOFVvSzhVdXN6SzZnTjBQREVVS1phWFpQ
|
||||
K0NhUGo5ZlhhMVBLRHIzcW1SOAp3OEZDWHFyZFhFZUdVQWRid1RNK0x1QTFJWU5D
|
||||
eExaOGRod2M1QmY3TmNRCi0+IHNzaC1lZDI1NTE5IEJZS0crdyB0dUh3dUo5MHNi
|
||||
OHNnU3g5K25lV0Z0dW93UFJXR1RWTXdxd0RzRFFOTUFrCk9XTEdHdGpNT1YzVzJI
|
||||
YmdoZGJ0Wmpuekd4ZmdENFIwamlkODBGVGszdVUKLT4gc3NoLWVkMjU1MTkgWHpm
|
||||
bWFRIEdyVEFDSkNqWWRiSlZpSEhLTnVQQlJqMFlUcTNmanNocjVSdkhQWlVHQncK
|
||||
U2VNZENPNGJKR0dsRndMZHliNkltQ3hyekFIb1lodHZaMW1MdFhTemk5YwotPiBz
|
||||
c2gtZWQyNTUxOSBSNSt4ZncgbTViN1ZpL1ZlUytaSUVvSUt2cUtWNWp3U08wNW1E
|
||||
RnZibWVtSGRYbWdBVQppRzR2dHlTRExaZ0F4UHNMdEJiTGZjcEFQZlNHM3lvZmlK
|
||||
MFE0RmNrM0d3Ci0+IHNzaC1lZDI1NTE5IFJvWDVQUSB0Rm5SOERpRlNkanhCdUJF
|
||||
dGd5KzUwdnMwcjFhb1lUbXpkbnI1U1BhREI0CmtSSlhJd1JxcFAzUFp4ZHVrZkZD
|
||||
V01YVHlDUktWSXlMMVpqY0pSbnRpRjAKLT4gQSVMLjQwSXYtZ3JlYXNlIDwhIlJN
|
||||
QSBySiAxMVZ2SEkKSnlyeFlwSm52S3NXOVh6N2JJNWxzMXRDT0Q2M1lYYTZjQU1S
|
||||
UWR0akdzVEN1cHJ6Qy92VzRlb1l5OWlmNjhlSwpBbVJnYjVZdWl6a3djS3FuOEIz
|
||||
M2JKNVdlUjhnCi0tLSArcitTSG9TRnhKSTZ6VFNJV0NiT3Q0RktCL3ZrZkx1cTU2
|
||||
S3E5RUNhRFhJCu3aMrIBDE8WQmTDgNT8qQ6jltLM57LG8WGdPLzyTDqHoIppI6mm
|
||||
CcR6gdfmRnVXJESKfQ1KoQF+rPlZBFxGVtDcsC55WpFXjGP2FHKfH9Kv9mtjCenp
|
||||
gryfah+7Ghyl7K/0hV1Fp6qAWt7UAIoN0l0Zh4PKCxgG37+82d4YLc6njvfpaICQ
|
||||
8Fc77qahYaU74FJjzHKxOuFCpKw9MYA3ZzTvxoKi9lsL+OMFDwIk1yJ4OcRAVIZc
|
||||
ZuliMng9pDM8OPZNMqrn/5vGtawN6LQzeVPMeNiRwIcZaFIptdHxUqy98Vc7/rAM
|
||||
OrA8dkzPirrkKt7x3BswP3/n0z1TxnZIK+8q5ClQvMnKxGWiUXeNe1r7LKGmWAd1
|
||||
YMkgwuYdlI8+oQen0gLxteZoVUAFJvfQ11IJVk3JLfHuCcLpZ6ue8mww/164Zpda
|
||||
YwsyjAWNsavvuBz0Kmp/YRIccQ48lMBK93cKIGOwskjRycmDAbAklCB4nvrm9YK0
|
||||
F34NM92QHy0zB6h8Gg7s1TzSpdiMzkQPy7KeC6z2T8FafjE8ika6ULiBFsTPzSzL
|
||||
rEjAhooKaxFK
|
||||
-----END AGE ENCRYPTED FILE-----
|
|
@ -18,19 +18,25 @@ let
|
|||
];
|
||||
in
|
||||
{
|
||||
## Too make a new secret: `ragenix --editor=vi -v -e FILE.age` add file below and in the ragenix.nix file
|
||||
## To make a new secret: `ragenix --editor=vi -v -e FILE.age` add file below and in the ragenix.nix file
|
||||
#
|
||||
# TODO come up with a rotate method/encrypt the device keys better. This isn't very secure feeling to me the way I am doing this now. If anyone gains access to any one of my devices, then my secrets are no longer secret. This is not a good model.
|
||||
|
||||
# Git keys
|
||||
"nix2github.age" = {
|
||||
inherit publicKeys;
|
||||
};
|
||||
"nix2bitbucket.age" = {
|
||||
inherit publicKeys;
|
||||
};
|
||||
# Server keys
|
||||
"nix2h001.age" = {
|
||||
inherit publicKeys;
|
||||
};
|
||||
"nix2t.age" = {
|
||||
inherit publicKeys;
|
||||
};
|
||||
"nix2l001.age" = {
|
||||
inherit publicKeys;
|
||||
};
|
||||
}
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue