diff --git a/secrets/mailjet-pass.age b/secrets/mailjet-pass.age new file mode 100644 index 0000000..a001583 Binary files /dev/null and b/secrets/mailjet-pass.age differ diff --git a/secrets/mailjet-user.age b/secrets/mailjet-user.age new file mode 100644 index 0000000..d910a44 --- /dev/null +++ b/secrets/mailjet-user.age @@ -0,0 +1,7 @@ +age-encryption.org/v1 +-> ssh-ed25519 eRdPLg 3zUwYgjU1S3y4WxY/jyJ7S0CkSqo2YyoUdxbhyMrPQg +HatUZQuNQwLTytq1pJ3KWdM0UZCjB3zlBijIMvYtV1U +-> ssh-ed25519 KUgDMA ko392JkVWy5RJSIs/R5eRcig3RYZ/HbwzpKr6yCIn0w +lGJ5TR2CuEI9l1t4A2c1EHaKke48XzGoleRO462X8qE +--- 2QGRp7nRAFgsHuSulufirXpgxm/WW5Rs563o4KzIY9Y +Q)ͨRԵ twE ŋ@⤑wZ ۶o 叚_,E۔(_N2,2 \ No newline at end of file diff --git a/secrets/secrets.nix b/secrets/secrets.nix new file mode 100644 index 0000000..a762ff5 --- /dev/null +++ b/secrets/secrets.nix @@ -0,0 +1,33 @@ +{ config, pkgs, inputs, ... }: +let + main-server = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFEEuBgdANmzr69bapLdSxu6gnsLHGUQUBatS2dQsdOU root@nixos"; + systems = [ + main-server + ]; + + root = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKQRq2M+a40lucGpjiWsWnjeUfA0ihzdtqyDbKznawAg root@nixos-server"; + users = [ + root + ]; +in +{ + "mailjet-user.age".publicKeys = users ++ systems; + "mailjet-pass.age".publicKeys = users ++ systems; + imports = [ inputs.agenix.nixosModules.default ]; + + age.identityPaths = [ "/etc/ssh/ssh_host_ed25519_key" ]; + + age.secrets."mailjet-user" = { + file = ../../secrets/mailjet-user.age; + owner = "root"; + group = "root"; + mode = "0400"; + }; + + age.secrets."mailjet-pass" = { + file = ../../secrets/mailjet-pass.age; + owner = "root"; + group = "root"; + mode = "0400"; + }; +}