feat: use separate repo for secrets.

This commit is contained in:
CronyAkatsuki 2026-02-01 16:52:45 +01:00
parent 7acedb3017
commit 992b689bbf
46 changed files with 121 additions and 365 deletions

View file

@ -1,6 +1,7 @@
{
config,
lib,
inputs,
...
}: {
options = {
@ -10,16 +11,16 @@
age = {
secrets = {
restic-local-pass = {
file = ../../../secrets/restic-local-pass.age;
file = "${inputs.secrets}/secrets/restic-local-pass.age";
};
restic-backblaze-pass = {
file = ../../../secrets/restic-backblaze-pass.age;
file = "${inputs.secrets}/secrets/restic-backblaze-pass.age";
};
restic-backblaze-repo = {
file = ../../../secrets/restic-backblaze-repo.age;
file = "${inputs.secrets}/secrets/restic-backblaze-repo.age";
};
restic-backblaze-env = {
file = ../../../secrets/restic-backblaze-env.age;
file = "${inputs.secrets}/secrets/restic-backblaze-env.age";
};
};
identityPaths = ["/home/crony/.ssh/main" "/root/.ssh/id_ed25519"];

View file

@ -1,6 +1,7 @@
{
config,
lib,
inputs,
...
}: let
default_keys = map (e: e.path) (
@ -14,16 +15,16 @@ in {
age = {
secrets = {
wg-desktop = {
file = ../../../secrets/wg-desktop.age;
file = "${inputs.secrets}/secrets/wg-desktop.age";
};
wg-ymir-home = {
file = ../../../secrets/wg-ymir-home.age;
file = "${inputs.secrets}/secrets/wg-ymir-home.age";
};
crony-passwd = {
file = ../../../secrets/crony-passwd-desktop.age;
file = "${inputs.secrets}/secrets/crony-passwd-desktop.age";
};
root-passwd = {
file = ../../../secrets/root-passwd.age;
file = "${inputs.secrets}/secrets/root-passwd.age";
};
};
identityPaths = ["/home/crony/.ssh/main" "/root/.ssh/id_ed25519"] ++ default_keys;