From 181a6bfc0eb124c19a5cea3cb1b75eceb53690cc Mon Sep 17 00:00:00 2001 From: Xe Date: Sat, 19 Feb 2022 17:35:02 -0500 Subject: [PATCH] add mara config to agenix Signed-off-by: Xe --- hosts/chrysalis/default.nix | 6 ++++++ hosts/chrysalis/secret/mara.age | 27 +++++++++++++++++++++++++++ secrets.nix | 1 + 3 files changed, 34 insertions(+) create mode 100644 hosts/chrysalis/secret/mara.age diff --git a/hosts/chrysalis/default.nix b/hosts/chrysalis/default.nix index bb7e310..e63b5a5 100644 --- a/hosts/chrysalis/default.nix +++ b/hosts/chrysalis/default.nix @@ -51,5 +51,11 @@ }; within.services.mara-bot.enable = true; + age.secrets.mara-bot = { + file = ./mara.age; + path = "/var/lib/mara-bot/config.yaml2"; + owner = "mara-bot"; + group = "mara-bot"; + }; } diff --git a/hosts/chrysalis/secret/mara.age b/hosts/chrysalis/secret/mara.age new file mode 100644 index 0000000..64feab8 --- /dev/null +++ b/hosts/chrysalis/secret/mara.age @@ -0,0 +1,27 @@ +age-encryption.org/v1 +-> ssh-ed25519 extxyg CmK7ZRTUJuz376761fknJv2BZcz3j1qnwDNRfkQeDEY +0X+X3oH/eFpqS3EGQRje8Cp0/gxByzOlw1hlooLty8k +-> ssh-ed25519 0rx8bA nRJXCKkpexLjOZ1/ZONM+n67MH+PpmP8ob6NJM9MFRs +FiRGJTdd8O6phgNbJ3A+iZoDZEvsUXQBFcEd+GwmUxY +-> ssh-ed25519 ZvILxA Rc/v4ys3pycZLObFusKEx6eY6envaGu7ovruwZwmflo +uLiaJrUKeolmE5VqaF8gWcb5ZCe1Tp2rN5KJfqCYh4c +-> ssh-ed25519 x40ZwA T1zrnVCLpMrYUhaQ/EdkrXvNv383gPWtWLf1v555+Ck +MPX9iQKGADiiUuLeM14kUj0SldC0cPqPz48eF7ZaI0o +-> ssh-ed25519 Cb6l4g qGqD0qZGR1X8ytLtd7X5ZM2wzGdqyCoaGSkxYeyQUGY +ZAKKZgXLHVcXrsUg1yTyPUeKYbeyfdCcVsXNIxYq/8o +-> ssh-ed25519 6Sqpww EM/CfSI4XziQmSsZ/8Oq86chqxVaEg4f+wCVS9OmWX4 +9hhQnGoS6kfX3doBFTdSO7Yl1UiQ1KaAiZgEl6xLOyY +-> ssh-ed25519 H5HtPA +9wMWWTFMcEsvQPb6hpHSEv5nUpkJks62CVWHj4dGGQ +/LAnCB4Kd7AWNAw1UrJgA95nzr520tVYlEcIXS3AO1Q +-> ssh-ed25519 YcYwVA 5YWKOknmEPnLvaz9qS6rNJoz9HmR5XsKIqy+ACahVAE +6aJqTHawQuSeodocXIAWMVcBtLm1ZeXCqiPubi+JQ78 +-> ssh-ed25519 6Mkn0Q uK6SrPJnI3kkBIj3OfWWoM85Hq7b4Lu2LNz3yWVuLT0 +CYLUiYwJSkCN5/9/L/tdbVk2GlGUZCoBvwYOv746nfo +-> ssh-ed25519 jO2MvQ b3JdSAfNhANAegtCKiAPwtR0eoTJIUK0Yk/2XOLncEI +h7kqEc8aLPGm5jpY/qks0mxFjV1N62f9zny0hnEcUnw +-> /49,Y!0z-grease P1|z .F%.Fk {V*vuF eZsZ +jF4Pi/UAsND4eYYmPJAtpMB83kiq3LJlwpW2w1WctMOEVVBOqVNW/edK9ApCSvqq +IImvLhWJ2FgVDizvKzVkpzkanQFDCH1y/Jiescdgzcp929QVLVO8ZGQ +--- eFZTuk6kfm7JAkp4BGl++SpsJ4DzurPahDp6fcvJ3/A +q/1C9Z84mܩJZXB5z,B']K2lϳeMj%WL+>Ch#9ia嗿lwq;` Ia:E#{'lt.pb?gb 551EMd"h:%1s I83-,E̿8De2?fG\ ! hI# UƬ2GLFwLJ {6ҫD_:N?>rԟ!*hp^ "ϸR}ӳhM>ʑPHT}T^=!@g2 +=)nH: \ No newline at end of file diff --git a/secrets.nix b/secrets.nix index ebf366b..8d157ce 100644 --- a/secrets.nix +++ b/secrets.nix @@ -30,6 +30,7 @@ let publicKeys = xe ++ hosts; in { + "hosts/chrysalis/secret/mara.age".publicKeys = publicKeys; "hosts/firgu/secret/cf.env.age".publicKeys = publicKeys; "hosts/firgu/secret/snoo2nebby.age".publicKeys = publicKeys; }