about summary refs log tree commit diff
path: root/ops/secrets/secrets.nix
diff options
context:
space:
mode:
Diffstat (limited to 'ops/secrets/secrets.nix')
-rw-r--r--ops/secrets/secrets.nix8
1 files changed, 5 insertions, 3 deletions
diff --git a/ops/secrets/secrets.nix b/ops/secrets/secrets.nix
index a278b24d4b..3f7740a2e5 100644
--- a/ops/secrets/secrets.nix
+++ b/ops/secrets/secrets.nix
@@ -2,6 +2,7 @@ let
   flokli = [
     "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPTVTXOutUZZjXLB0lUSgeKcSY/8mxKkC0ingGK1whD2 flokli"
   ];
+
   tazjin = [
     # tverskoy
     "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM1fGWz/gsq+ZeZXjvUrV+pBlanw1c3zJ9kLTax9FWQy"
@@ -21,6 +22,7 @@ let
   sanduny = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOag0XhylaTVhmT6HB8EN2Fv5Ymrc4ZfypOXONUkykTX";
   whitby = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILNh/w4BSKov0jdz3gKBc98tpoLta5bb87fQXWBhAl2I";
 
+  terraform.publicKeys = tazjin ++ grfn ++ sterni ++ flokli;
   whitbyDefault.publicKeys = tazjin ++ grfn ++ sterni ++ [ whitby ];
   allDefault.publicKeys = tazjin ++ grfn ++ sterni ++ [ sanduny whitby ];
   sandunyDefault.publicKeys = tazjin ++ grfn ++ sterni ++ [ sanduny ];
@@ -46,8 +48,8 @@ in
   "owothia.age" = whitbyDefault;
   "panettone.age" = whitbyDefault;
   "smtprelay.age" = whitbyDefault;
-  "tf-buildkite.age" = whitbyDefault;
-  "tf-glesys.age" = whitbyDefault;
-  "tf-keycloak.age" = whitbyDefault;
+  "tf-buildkite.age" = terraform;
+  "tf-glesys.age" = terraform;
+  "tf-keycloak.age" = terraform;
   "tvl-alerts-bot-telegram-token.age" = whitbyDefault;
 }