secrets: move gandi api key to agenix

This commit is contained in:
Antoine Martin 2022-03-11 17:10:44 +01:00
parent f4e2d1739d
commit 238294b7bf
6 changed files with 13 additions and 2 deletions

View file

@ -9,6 +9,8 @@
} // attrs; } // attrs;
in in
lib.mapAttrs toSecret { lib.mapAttrs toSecret {
"gandi/api-key" = {};
"users/alarsyo-hashed-password" = {}; "users/alarsyo-hashed-password" = {};
"users/root-hashed-password" = {}; "users/root-hashed-password" = {};
}; };

View file

@ -0,0 +1,8 @@
age-encryption.org/v1
-> ssh-ed25519 z6Eu8Q Z6nxu/Aj6YiouSwaHKO9o/VjDwkFeg1aUpxWDH0zYUc
nN/e7E4mRe0u6r845FlT9QPYTAAoG7YQZY+igYNNd7Y
-> LZ-grease 7/44AQ]n H&}_^ hIg#2Ic :cyUJma
cyKzugByeYVVqVRXfi/a7RkreaM9vVNw8z1Jn+MaLZs1paE44QEe2Y2bsXA9tmai
GSfOFlOBv82/Jhlc7xUK5w6RxgIBdmxtpEfRaUw
--- jnsdwFTZU4wzsxo0piNFBchQtCuFQohGALt42YukeVA
˜7wO˜ƒpˆeu!¡CbìBRïî·­zI×<49>Nìô•?C <09>éýWõ[kG½ƒslãöÀZGÿØì™üÝ9nðL

View file

@ -11,6 +11,8 @@ let
all = users ++ machines; all = users ++ machines;
in in
{ {
"gandi/api-key.age".publicKeys = [ poseidon ];
"restic-backup/boreal-password.age".publicKeys = [ alarsyo boreal ]; "restic-backup/boreal-password.age".publicKeys = [ alarsyo boreal ];
"restic-backup/boreal-credentials.age".publicKeys = [ alarsyo boreal ]; "restic-backup/boreal-credentials.age".publicKeys = [ alarsyo boreal ];
"restic-backup/zephyrus-password.age".publicKeys = [ alarsyo zephyrus ]; "restic-backup/zephyrus-password.age".publicKeys = [ alarsyo zephyrus ];

View file

@ -15,7 +15,6 @@ in {
nextcloud-admin-pass = ./nextcloud-admin-pass.secret; nextcloud-admin-pass = ./nextcloud-admin-pass.secret;
nextcloud-admin-user = fileContents ./nextcloud-admin-user.secret; nextcloud-admin-user = fileContents ./nextcloud-admin-user.secret;
lohr-shared-secret = fileContents ./lohr-shared-secret.secret; lohr-shared-secret = fileContents ./lohr-shared-secret.secret;
gandiKey = fileContents ./gandi-api-key.secret;
borg-backup = import ./borg-backup { inherit lib; }; borg-backup = import ./borg-backup { inherit lib; };
paperless = import ./paperless { inherit lib; }; paperless = import ./paperless { inherit lib; };

Binary file not shown.

View file

@ -54,7 +54,7 @@ in
"${domain}" = { "${domain}" = {
extraDomainNames = [ "*.${domain}" ]; extraDomainNames = [ "*.${domain}" ];
dnsProvider = "gandiv5"; dnsProvider = "gandiv5";
credentialsFile = pkgs.writeText "gandi-creds.env" gandiKey; credentialsFile = config.age.secrets."gandi/api-key".path;
group = "nginx"; group = "nginx";
}; };
}; };