From 12156896da9482e29ca03b18d7d5f90e27f32e75 Mon Sep 17 00:00:00 2001
From: "Ricardo (XenGi) Band" <email@ricardo.band>
Date: Sun, 8 Mar 2026 23:42:58 +0100
Subject: [PATCH] add forgejo password

---
 secrets/secrets.nix | 44 ++++++++++++++++++++++++--------------------
 1 file changed, 24 insertions(+), 20 deletions(-)

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 8c0571d..a237a73 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -5,7 +5,7 @@ let
   mayu = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICjv9W8WXq9QGkgmANNPQR24/I1Pm1ghxNIHftEI+jlZ xengi@mayu_2021-06-11";
   nana = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGhyfD+8jMl6FDSADb11sfAsJk0KNoVzjjiDRZjUOtmf xengi@nana_2019-08-16";
   nyu = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMPtGqhV7io3mhIoZho4Yf7eCo0sUZvjT2NziM2PkXSo xengi@nyu_2017-10-11";
-  users = [
+  xengi = [
     kanae
     kota
     lucy
@@ -13,6 +13,9 @@ let
     nana
     nyu
   ];
+  shokinn = [
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEdR4oakO1AO1pg4ZTlwPy9UjZZWf7R+e8SAe1ntGdT8"
+  ];
 
   _matrix = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIApAkkhHLj918co/wUGuyW8WCPYHxsNM4uo32XDEu7VV root@matrix";
   _md = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFdFkdEEDXo8+k5YZpI1O2GqZlxcpCDtxqVun35duITm root@md";
@@ -21,38 +24,39 @@ let
   _monitoring = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINmRWdAUur0lb08NiB6ZWLrGmCeELRV30ElxRLfVJGPB root@monitoring";
 in
 {
-  "matrix_admin_password.age".publicKeys = users;
+  "matrix_admin_password.age".publicKeys = xengi;
 
-  "draupnir_access_token.age".publicKeys = users ++ [ _matrix ];
-  "matrix_signing_key.age".publicKeys = users ++ [ _matrix ];
-  "matrix_registration_shared_secret.age".publicKeys = users ++ [ _matrix ];
-  "matrix_db_password.age".publicKeys = users ++ [ _matrix ];
+  "draupnir_access_token.age".publicKeys = xengi ++ [ _matrix ];
+  "matrix_signing_key.age".publicKeys = xengi ++ [ _matrix ];
+  "matrix_registration_shared_secret.age".publicKeys = xengi ++ [ _matrix ];
+  "matrix_db_password.age".publicKeys = xengi ++ [ _matrix ];
 
-  "pushover_app_token.age".publicKeys = users ++ [ _matrix ];
-  "pushover_user_key.age".publicKeys = users ++ [ _matrix ];
+  "pushover_app_token.age".publicKeys = xengi ++ [ _matrix ];
+  "pushover_user_key.age".publicKeys = xengi ++ [ _matrix ];
 
-  "hedgedoc_db_password.age".publicKeys = users ++ [ _md ];
+  "hedgedoc_db_password.age".publicKeys = xengi ++ [ _md ];
 
-  "grafana_admin_password.age".publicKeys = users ++ [ _monitoring ];
-  "grafana_secret_key.age".publicKeys = users ++ [ _monitoring ];
-  "grafana_basic_auth.age".publicKeys = users ++ [ _monitoring ];
-  "pve-exporter.age".publicKeys = users ++ [ _monitoring ];
+  "grafana_admin_password.age".publicKeys = xengi ++ [ _monitoring ];
+  "grafana_secret_key.age".publicKeys = xengi ++ [ _monitoring ];
+  "grafana_basic_auth.age".publicKeys = xengi ++ [ _monitoring ];
+  "pve-exporter.age".publicKeys = xengi ++ [ _monitoring ];
 
-  "postgres-matrix-synapse.age".publicKeys = users ++ [
+  "postgres-matrix-synapse.age".publicKeys = xengi ++ [
     _sql
     _matrix
   ];
-  "postgres-hedgedoc.age".publicKeys = users ++ [
+  "postgres-hedgedoc.age".publicKeys = xengi ++ [
     _sql
     _md
   ];
-  "postgres-grafana.age".publicKeys = users ++ [
+  "postgres-grafana.age".publicKeys = xengi ++ [
     _sql
     _monitoring
   ];
-  "postgres-forgejo.age".publicKeys = users ++ [
-    _sql
-  ];
+  "postgres-forgejo.age".publicKeys =
+    xengi
+    ++ shokinn
+    ++ [ _sql ];
 
-  "www-staging-htpasswd.age".publicKeys = users ++ [ _www ];
+  "www-staging-htpasswd.age".publicKeys = xengi ++ [ _www ];
 }