xengi/infra
0
1
Fork 0
Code Pull requests Activity Actions

add forgejo password

Browse source
This commit is contained in:
XenGi 2026-03-08 23:42:58 +01:00
parent 2b46966f8d
commit 12156896da
Signed by: xengi
SSH key fingerprint: SHA256:jxWM2RTHvxxcncXycwwWkP7HCWb4VREN05UGJTbIPZg
1 changed files with 24 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

44
secrets/secrets.nix
View file

@ -5,7 +5,7 @@ let
mayu = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICjv9W8WXq9QGkgmANNPQR24/I1Pm1ghxNIHftEI+jlZ xengi@mayu_2021-06-11"; mayu = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICjv9W8WXq9QGkgmANNPQR24/I1Pm1ghxNIHftEI+jlZ xengi@mayu_2021-06-11";
nana = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGhyfD+8jMl6FDSADb11sfAsJk0KNoVzjjiDRZjUOtmf xengi@nana_2019-08-16"; nana = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGhyfD+8jMl6FDSADb11sfAsJk0KNoVzjjiDRZjUOtmf xengi@nana_2019-08-16";
nyu = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMPtGqhV7io3mhIoZho4Yf7eCo0sUZvjT2NziM2PkXSo xengi@nyu_2017-10-11"; nyu = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMPtGqhV7io3mhIoZho4Yf7eCo0sUZvjT2NziM2PkXSo xengi@nyu_2017-10-11";
users = [ xengi = [
kanae kanae
kota kota
lucy lucy
@ -13,6 +13,9 @@ let
nana nana
nyu nyu
]; ];
shokinn = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEdR4oakO1AO1pg4ZTlwPy9UjZZWf7R+e8SAe1ntGdT8"
];
_matrix = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIApAkkhHLj918co/wUGuyW8WCPYHxsNM4uo32XDEu7VV root@matrix"; _matrix = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIApAkkhHLj918co/wUGuyW8WCPYHxsNM4uo32XDEu7VV root@matrix";
_md = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFdFkdEEDXo8+k5YZpI1O2GqZlxcpCDtxqVun35duITm root@md"; _md = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFdFkdEEDXo8+k5YZpI1O2GqZlxcpCDtxqVun35duITm root@md";
@ -21,38 +24,39 @@ let
_monitoring = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINmRWdAUur0lb08NiB6ZWLrGmCeELRV30ElxRLfVJGPB root@monitoring"; _monitoring = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINmRWdAUur0lb08NiB6ZWLrGmCeELRV30ElxRLfVJGPB root@monitoring";
in in
{ {
"matrix_admin_password.age".publicKeys = users; "matrix_admin_password.age".publicKeys = xengi;
"draupnir_access_token.age".publicKeys = users ++ [ _matrix ]; "draupnir_access_token.age".publicKeys = xengi ++ [ _matrix ];
"matrix_signing_key.age".publicKeys = users ++ [ _matrix ]; "matrix_signing_key.age".publicKeys = xengi ++ [ _matrix ];
"matrix_registration_shared_secret.age".publicKeys = users ++ [ _matrix ]; "matrix_registration_shared_secret.age".publicKeys = xengi ++ [ _matrix ];
"matrix_db_password.age".publicKeys = users ++ [ _matrix ]; "matrix_db_password.age".publicKeys = xengi ++ [ _matrix ];
"pushover_app_token.age".publicKeys = users ++ [ _matrix ]; "pushover_app_token.age".publicKeys = xengi ++ [ _matrix ];
"pushover_user_key.age".publicKeys = users ++ [ _matrix ]; "pushover_user_key.age".publicKeys = xengi ++ [ _matrix ];
"hedgedoc_db_password.age".publicKeys = users ++ [ _md ]; "hedgedoc_db_password.age".publicKeys = xengi ++ [ _md ];
"grafana_admin_password.age".publicKeys = users ++ [ _monitoring ]; "grafana_admin_password.age".publicKeys = xengi ++ [ _monitoring ];
"grafana_secret_key.age".publicKeys = users ++ [ _monitoring ]; "grafana_secret_key.age".publicKeys = xengi ++ [ _monitoring ];
"grafana_basic_auth.age".publicKeys = users ++ [ _monitoring ]; "grafana_basic_auth.age".publicKeys = xengi ++ [ _monitoring ];
"pve-exporter.age".publicKeys = users ++ [ _monitoring ]; "pve-exporter.age".publicKeys = xengi ++ [ _monitoring ];
"postgres-matrix-synapse.age".publicKeys = users ++ [ "postgres-matrix-synapse.age".publicKeys = xengi ++ [
_sql _sql
_matrix _matrix
]; ];
"postgres-hedgedoc.age".publicKeys = users ++ [ "postgres-hedgedoc.age".publicKeys = xengi ++ [
_sql _sql
_md _md
]; ];
"postgres-grafana.age".publicKeys = users ++ [ "postgres-grafana.age".publicKeys = xengi ++ [
_sql _sql
_monitoring _monitoring
]; ];
"postgres-forgejo.age".publicKeys = users ++ [ "postgres-forgejo.age".publicKeys =
_sql xengi
]; ++ shokinn
++ [ _sql ];
"www-staging-htpasswd.age".publicKeys = users ++ [ _www ]; "www-staging-htpasswd.age".publicKeys = xengi ++ [ _www ];
} }