dennis/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Sets up agenix

Browse source
This commit is contained in:
Dennis Schoepf 2025-04-25 16:26:53 +02:00
parent b2df5a314e
commit aa80f0d708
2 changed files with 26 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

21
secrets/secrets.nix Normal file
View file

@ -0,0 +1,21 @@
let
dnsc-air = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILvXWZOPOJJDAoF+Sx/ZLoAVu6G/7/MAWoknBgMAzjul dennis@dnsc-mac";
dnsc-vps-sm = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHHS4Cq3G0yjoXB9qargJc/zbZdlClnJOcLxSC5ROo7h dennis@dnsc-vps-sm";
dnsc-server = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM3mkEgvHrwjsEReHQHpLbMP71JLvp6XxMPyW7PTaLCd dennis@dnsc-server";
systems = [ dnsc-air dnsc-vps-sm dnsc-server ];
in
{
# Add like this: "secret1.age".publicKeys = systems;
}
# 1. Create a file with secret
# nix run github:ryantm/agenix -- -e $FILE_PATH
#
# 2. Reference the file in NixOS config:
# {
# age.secrets.secret1.file = ../secrets/secret1.age;
# }
#
# 3. And use it like this:
# passwordFile = config.age.secrets.secret1.path;