diff options
Diffstat (limited to 'users/grfn/secrets')
| -rw-r--r-- | users/grfn/secrets/.envrc | 1 | ||||
| -rw-r--r-- | users/grfn/secrets/bbbg.age | 12 | ||||
| -rw-r--r-- | users/grfn/secrets/buildkite-ssh-key.age | bin | 0 -> 3853 bytes | |||
| -rw-r--r-- | users/grfn/secrets/buildkite-token.age | 12 | ||||
| -rw-r--r-- | users/grfn/secrets/cloudflare.age | 9 | ||||
| -rw-r--r-- | users/grfn/secrets/ddclient-password.age | 9 | ||||
| -rw-r--r-- | users/grfn/secrets/default.nix | 2 | ||||
| -rw-r--r-- | users/grfn/secrets/secrets.nix | 13 | ||||
| -rw-r--r-- | users/grfn/secrets/shell.nix | 8 |
9 files changed, 66 insertions, 0 deletions
diff --git a/users/grfn/secrets/.envrc b/users/grfn/secrets/.envrc new file mode 100644 index 0000000000..051d09d292 --- /dev/null +++ b/users/grfn/secrets/.envrc @@ -0,0 +1 @@ +eval "$(lorri direnv)" diff --git a/users/grfn/secrets/bbbg.age b/users/grfn/secrets/bbbg.age new file mode 100644 index 0000000000..6c15dcdf73 --- /dev/null +++ b/users/grfn/secrets/bbbg.age @@ -0,0 +1,12 @@ +age-encryption.org/v1 +-> ssh-ed25519 CpJBgQ 6vLlq2WEcn6TE0rgahQyl7CYhCF3uiBD3hOnZkHswmM +BSUiKPdDWMhYbi/+j9Kw5YDEOvjaickYQuhpWkhLktQ +-> ssh-ed25519 LfBFbQ mQJfyk35Ghd7UWouPlq4kTIFFwlRGh24r0kvJUgUbBw +eYpBJEG9Cdc2qHI0maFpp9/2o30R0KGLRSQ7DzsVaZ0 +-> ssh-ed25519 lZtaEQ npyXpqTMWITvRVfPwEQ1rXJ0sxnJvurLOfeiE07m92E +oCXVRGOegBgQUJof8UHJsDdMyNsx6X575Rd4mWZ9LRk +-> ;^O0_l-grease +sseb4RnQz93Wlgs5B0PE+j7AzFyMkzHjFbn9sCn0UA +--- Bqq0uedob5/kJOSoavN7Aq1fH7QVNW134M3uS6u2lFA +r3?ujF !_R/#BQ +Nה"V1mwly's P^6 K{ t 3m%'zO o8^SJx ꨯR= ŕzEz*Ѥ>g뻐 %>\)Lj05 VQ8/HXOGs7gDGIsNpiuYFj?x;] \ No newline at end of file diff --git a/users/grfn/secrets/buildkite-ssh-key.age b/users/grfn/secrets/buildkite-ssh-key.age new file mode 100644 index 0000000000..0ae5aa5502 --- /dev/null +++ b/users/grfn/secrets/buildkite-ssh-key.age Binary files differdiff --git a/users/grfn/secrets/buildkite-token.age b/users/grfn/secrets/buildkite-token.age new file mode 100644 index 0000000000..9e9e370f1b --- /dev/null +++ b/users/grfn/secrets/buildkite-token.age @@ -0,0 +1,12 @@ +age-encryption.org/v1 +-> ssh-ed25519 CpJBgQ tz7tudrJYQw2Ftnk7iNbSd/De2UJ0GAafFJjPwUo8xM +bUBNO94Pjf79FErPxv92XnpXWFEgethREU+/U+xjWBc +-> ssh-ed25519 LfBFbQ yPjXk6XlJoGyVaCWMcPzfNXzb1cBNZhjYy+wsQtMhTI +qk6hZMl1oeKLniGb/bKIxSb6ocVRCQsmQPcwxnlYfno +-> \'q-grease +nYvpKokvFbVXfATzlQ7SPQa9Gw99E84SPRFdR7ey+HSCB705Q9uYwBpr9hjpiIod +9PJIi88ENWf9/XAmm2d7daE+YPRYhln4U6w +--- EuyCLA6GvtbGI+EoC1z2dbpfyxo4ebXX1nY+9rsgUVY +[hΩЪ`1?NC@uBl8*ՈsZ~PА?8 + +O~{G}0q.AW \ No newline at end of file diff --git a/users/grfn/secrets/cloudflare.age b/users/grfn/secrets/cloudflare.age new file mode 100644 index 0000000000..e2f6e93603 --- /dev/null +++ b/users/grfn/secrets/cloudflare.age @@ -0,0 +1,9 @@ +age-encryption.org/v1 +-> ssh-ed25519 CpJBgQ tWx7wXCFjOOfD0wKRHHvLUdR+SF0i43xvnQG9GKurnk +NRh7kSn7wqw80Y9EFr9Ccft+zYMadXZhYNPEaQlQXtQ +-> ssh-ed25519 LfBFbQ SPQMLC3Ehw00IG1CcbcLFZI2tHy89fjRgVgH4Iw2iBM +oo2gT9472/DFRoZ6TYxhnM9ylRUNzoS8mLQYvn+4OSM +-> D[7+*-grease `>j ~Jk Dz%o vaKET3 +TkKVm8IpqfiVzETAi9+zuUtCdkReB+lHtthwNw +--- 3iOmY4TNICMi/Fz7k8pmoZlFym9uQBWNtHNlizoAMaM +ZPzQ65AT I;;Зy5] k^!`t$RւtK)<k_#X mASpU1@)cֺqj 1z,H g: \ No newline at end of file diff --git a/users/grfn/secrets/ddclient-password.age b/users/grfn/secrets/ddclient-password.age new file mode 100644 index 0000000000..0de8707105 --- /dev/null +++ b/users/grfn/secrets/ddclient-password.age @@ -0,0 +1,9 @@ +age-encryption.org/v1 +-> ssh-ed25519 CpJBgQ 1Yw1EllkiG38qEQ03eN1p8WzC74zKb6YIuZMb3RD0ik +P7iAo2rCex8XkCyWKjTSecAZDg5wokrfBLRk/Nl479w +-> ssh-ed25519 LfBFbQ /cMWDtN+SlCs7WsomkngPpPK/4RHpCDZr2bg+jyqHEs +bgnNTXhxYtW84twA7ty9RWgycABW0MI9OEk69TRT2ro +-> Ujl-grease l_8cO.F +pw/kCMvXCg4my4M +--- m3jMrTCJFA1bGgKERiAhAYvXt/++wWzva0CVdtz3cgQ +]>'C[**j!`7<QmI7tGW ϳ;{Janpש`bt \ No newline at end of file diff --git a/users/grfn/secrets/default.nix b/users/grfn/secrets/default.nix new file mode 100644 index 0000000000..26b1998f56 --- /dev/null +++ b/users/grfn/secrets/default.nix @@ -0,0 +1,2 @@ +{ depot, ... }: +depot.ops.secrets.mkSecrets ./. (import ./secrets.nix) diff --git a/users/grfn/secrets/secrets.nix b/users/grfn/secrets/secrets.nix new file mode 100644 index 0000000000..986ad181b8 --- /dev/null +++ b/users/grfn/secrets/secrets.nix @@ -0,0 +1,13 @@ +let + grfn = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMcBGBoWd5pPIIQQP52rcFOQN3wAY0J/+K2fuU6SffjA"; + mugwump = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFE2fxPgWO+zeQoLBTgsgxP7Vg7QNHlrQ+Rb3fHFTomB"; + bbbg = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL/VzrNEY47KPTce3dgfORkAbweWkr4BI8j54BAIs7bG"; +in + +{ + "bbbg.age".publicKeys = [ grfn mugwump bbbg ]; + "cloudflare.age".publicKeys = [ grfn mugwump ]; + "ddclient-password.age".publicKeys = [ grfn mugwump ]; + "buildkite-ssh-key.age".publicKeys = [ grfn mugwump ]; + "buildkite-token.age".publicKeys = [ grfn mugwump ]; +} diff --git a/users/grfn/secrets/shell.nix b/users/grfn/secrets/shell.nix new file mode 100644 index 0000000000..6e70458d19 --- /dev/null +++ b/users/grfn/secrets/shell.nix @@ -0,0 +1,8 @@ +let + depot = import ../../.. { }; +in +depot.third_party.nixpkgs.mkShell { + buildInputs = [ + depot.third_party.agenix.cli + ]; +} |