feat: migrate to agenix for secret management

This commit is contained in:
Jet Pham 2026-03-05 15:10:30 -08:00
parent e7e8d154aa
commit 8e174ba500
No known key found for this signature in database
23 changed files with 234 additions and 120 deletions

13
agenix.nix Normal file
View file

@ -0,0 +1,13 @@
let
server = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAING219cDKTDLaZefmqvOHfXvYloA/ErsCGE0pM022vlB";
jet = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE40ISu3ydCqfdpb26JYD5cIN0Fu0id/FDS+xjB5zpqu";
in {
"secrets/forgejo-db.age".publicKeys = [ server jet ];
"secrets/stalwart-admin.age".publicKeys = [ server jet ];
"secrets/searx-env.age".publicKeys = [ server jet ];
"secrets/tailscale-key.age".publicKeys = [ server jet ];
"secrets/grafana-secret.age".publicKeys = [ server jet ];
"secrets/matrix-macaroon.age".publicKeys = [ server jet ];
"secrets/ntfy-admin-hash.age".publicKeys = [ server jet ];
"secrets/mymx-webhook.age".publicKeys = [ server jet ];
}