feat(secrets): add 'bluetop' SSH key and re-encrypt all secrets

trueNAHO · Feb 10, 2024 · 9287230 · 9287230
1 parent a70e2c5
commit 9287230
Show file tree

Hide file tree

Showing 5 changed files with 15 additions and 11 deletions.
diff --git a/modules/nixos/networking/eduroamAuthCaCert.age b/modules/nixos/networking/eduroamAuthCaCert.age
diff --git a/modules/nixos/networking/environmentFile.age b/modules/nixos/networking/environmentFile.age
diff --git a/modules/nixos/services/borgbackup/home.age b/modules/nixos/services/borgbackup/home.age
diff --git a/modules/nixos/users/users/naho/passwordFile.age b/modules/nixos/users/users/naho/passwordFile.age
@@ -1,10 +1,10 @@
 age-encryption.org/v1
--> ssh-ed25519 yq+9Kg Os1fV19M2YXzzk7LnZvpckG24S1RLGQqeGN6TQb8s3M
-5E3tMOyt+MJJUGS4v6BClk8vmN0otSCeqOye9wgZh+g
--> ssh-ed25519 uMTWyw azpJEszTEO0aSKVFbfFrIm7XMCDk3aYPeqy4N1LfEm8
-ty5Zqs8eYoPse3L/KWkWtj3/+yhn4tna6jFzTw/C0iQ
--> "*iZ-grease pEr7l,0X
-iJNlsiz2lEsGHPVKl0058auJ6Y3jANG+fwdbSezFBLdF
---- 9eiM2XR+GqAvhvobY5GI50PXViS0TWHbTYNETBqBIi4
-������H��1n�mf����$Y~�Y��z�X0���p<96���=������K&
-�Cy�B$�F�9!D��w����B�\��ϵ�]�gǗ�1��!j�i
+-> ssh-ed25519 HBVRyA FUJZQQc126bZ3qQuoYik+ZH416xWL8/J9YmAqx3U41M
++haYASZssdUV/+qu+Q+N5qkAUuvTSah0lntiHe3BZyc
+-> ssh-ed25519 yq+9Kg g3TF3/XZ5A8tTtb4XHxEW4Sa/vppy97gGw1IHW1SpTs
+oxgigR3YbF1bj5uSoLyF0+RWm1eog/YOK996MO0/Msk
+-> ssh-ed25519 uMTWyw 8RaWouCrEPJeDuyO2oK0mScDwfy1q/27of5/cc3s1h4
+Y0as2IlElJOJaxCOSmMQl913FQdd58H67XhtupgqNy0
+--- xH/RjqIgAAu2AHhQ3LitTDnjdj9Q1xYVzyvdRdf0FkM
+p�+EL��3]��|_G���ő�s0�_
+,�8fn����׃Q�{�N�Y��.�E��4��W�k�	�F��((��qa�����o���^��L=�wBT�
diff --git a/secrets.nix b/secrets.nix
@@ -1,6 +1,10 @@
 let
-  hosts.masterplan = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP6b528AWQ7b999cQIieawVqmd+6C/uEGVz4DuwAfqJo";
-  publicKeys = [hosts.masterplan users.naho];
+  hosts = {
+    bluetop = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIevNAYB2MiPgaW3BYebwDVcNguqvArTigQcF17BU8Zo";
+    masterplan = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP6b528AWQ7b999cQIieawVqmd+6C/uEGVz4DuwAfqJo";
+  };
+
+  publicKeys = [hosts.bluetop hosts.masterplan users.naho];
   users.naho = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICrrgYSUQdMPznQBTYSr4jf1p9feRpVWjFuW1MdmtQM4";
 in {
   "modules/nixos/networking/eduroamAuthCaCert.age".publicKeys = publicKeys;