ctucx.git: nixfiles

ctucx' nixfiles

1 
2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 
26 
27 
28 
29 
30 
31 
32 
33 
34 
35 
36 
37 
38 
39 
40 
41 
42 
43 
44 
45 
46 
47 
48 
49 
50 
51 
52 
53 
54 
55 
56 
57 
58 
59 
60 
61 
62 
63 
64 
65 
66 
67 
68 
69 
70 
71 
72 
73 
74 
75 
76 
77 
78 
79 
80 
81 
82 
83 
84 
85 
86 
87 
88 
89 
90 
91 
92 
93 
94 
95 
96 
97 
98 
99 
100 
101 
let
  main-key           = "age1mn57hntgx775kwcwx4jrrd7rfl7z4wl54kqtgq8w2kzg7agz7alsv5eesw";

  blechkasten    = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGAzmzKJ7NTEpe6IAm1KK7vnQG4ASEHHGdEyxbYEdSDJ";
  coladose       = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG/GoIIFuo54vAGA9QK2/HLjIlhNOpCGYu7xqhQaYd5u";

  #servers
  briefkasten    = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN8mi9ZKPdhn20g9gyxE7NYBq/vAKemW4lhaQlLw5QVc";

  trabbi          = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBwzDl1dHpDIZxFfRBLQyFn85RVTsg7OgO3Eahdn3FTJ";
  wanderduene-old = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEff3QkAesMYwquc49H5e2CjRH9Dv50/DjzqpCw97lPQ";
  wanderduene     = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH8uAvUnwhg3pnCdaaoclWDKV275SyNSyrkJON+R5Boi";

in {
  "passwords/leah-at-f2k1-de.age".publicKeys                        = [ main-key trabbi wanderduene wanderduene-old briefkasten ];
  "passwords/katja.age".publicKeys                                  = [ main-key trabbi wanderduene wanderduene-old briefkasten coladose ];

  "restic-server/briefkasten.age".publicKeys                        = [ main-key trabbi briefkasten ];
  "restic-server/wanderduene.age".publicKeys                        = [ main-key trabbi briefkasten ];


  "blechkasten/syncthing/key.age".publicKeys                        = [ main-key blechkasten ];
  "blechkasten/syncthing/cert.age".publicKeys                       = [ main-key blechkasten ];

  "coladose/syncthing/key.age".publicKeys                           = [ main-key coladose ];
  "coladose/syncthing/cert.age".publicKeys                          = [ main-key coladose ];

  "briefkasten/syncthing/key.age".publicKeys                        = [ main-key briefkasten ];
  "briefkasten/syncthing/cert.age".publicKeys                       = [ main-key briefkasten ];
  "briefkasten/syncthing/htpasswd.age".publicKeys                   = [ main-key briefkasten ];

  "briefkasten/influx/grafana_token_mqttData.age".publicKeys        = [ main-key briefkasten trabbi ];
  "briefkasten/influx/grafana_token_solaxData.age".publicKeys       = [ main-key briefkasten trabbi ];
  "briefkasten/influx/telegraf_token_mqttData.age".publicKeys       = [ main-key briefkasten ];
  "briefkasten/influx/telegraf_token_solaxData.age".publicKeys      = [ main-key briefkasten ];
  "briefkasten/influx/master_token.age".publicKeys                  = [ main-key briefkasten ];
  "briefkasten/influx/backup_env.age".publicKeys                    = [ main-key briefkasten ];

  "briefkasten/mosquitto/passwd-katja.age".publicKeys                = [ main-key briefkasten ];

  "briefkasten/zigbee2mqtt/secrets.age".publicKeys                  = [ main-key briefkasten ];
  "briefkasten/zigbee2mqtt/htpasswd.age".publicKeys                 = [ main-key briefkasten ];

  "briefkasten/telegraf/secrets.env.age".publicKeys                 = [ main-key briefkasten ];

  "briefkasten/wireguard-privkey.age".publicKeys                    = [ main-key briefkasten ];
  "briefkasten/gotosocial-env.age".publicKeys                       = [ main-key briefkasten ];
  "briefkasten/restic-server-htpasswd.age".publicKeys               = [ main-key briefkasten ];
  "briefkasten/pppd-env.age".publicKeys                             = [ main-key briefkasten ];

  "briefkasten/restic/gotosocial.age".publicKeys                    = [ main-key briefkasten ];
  "briefkasten/restic/influxdb.age".publicKeys                      = [ main-key briefkasten ];

  "briefkasten/restic/syncthing-audiobooks-orig.age".publicKeys     = [ main-key briefkasten ];
  "briefkasten/restic/syncthing-audiobooks.age".publicKeys          = [ main-key briefkasten ];
  "briefkasten/restic/syncthing-documents.age".publicKeys           = [ main-key briefkasten ];
  "briefkasten/restic/syncthing-music-orig.age".publicKeys          = [ main-key briefkasten ];
  "briefkasten/restic/syncthing-music.age".publicKeys               = [ main-key briefkasten ];
  "briefkasten/restic/syncthing-pictures.age".publicKeys            = [ main-key briefkasten ];
  "briefkasten/restic/syncthing-media.age".publicKeys               = [ main-key briefkasten ];
  "briefkasten/restic/syncthing-windoofs.age".publicKeys            = [ main-key briefkasten ];

  "briefkasten/restic/syncthing-bahn-richtlinien.age".publicKeys    = [ main-key briefkasten ];
  "briefkasten/restic/syncthing-blechelse.age".publicKeys           = [ main-key briefkasten ];
  "briefkasten/restic/syncthing-wiki.age".publicKeys                = [ main-key briefkasten ];


  "trabbi/restic/mail.age".publicKeys                               = [ main-key trabbi ];
  "trabbi/restic/matrix-synapse.age".publicKeys                     = [ main-key trabbi ];
  "trabbi/restic/radicale.age".publicKeys                           = [ main-key trabbi ];
  "trabbi/restic/ctucx-things.age".publicKeys                       = [ main-key trabbi ];
  "trabbi/restic/gitolite.age".publicKeys                           = [ main-key trabbi ];
  "trabbi/restic/vaultwarden.age".publicKeys                        = [ main-key trabbi ];
  "trabbi/restic/gotosocial.age".publicKeys                         = [ main-key trabbi ];

  "trabbi/radicale-users.age".publicKeys                            = [ main-key trabbi ];
  "trabbi/travelynx2fedi-env.age".publicKeys                        = [ main-key trabbi ];
  "trabbi/vaultwarden-secrets.age".publicKeys                       = [ main-key trabbi ];
  "trabbi/gotosocial-env.age".publicKeys                            = [ main-key trabbi ];

  "trabbi/matrix-synapse/registration_shared_secret.age".publicKeys = [ main-key trabbi ];
  "trabbi/matrix-synapse/sliding-sync-env.age".publicKeys           = [ main-key trabbi ];
  "trabbi/matrix-synapse/s3_secrets.age".publicKeys                 = [ main-key trabbi ];

  "trabbi/mail/password-katja-ctu.cx.age".publicKeys                = [ main-key trabbi ];
  "trabbi/mail/password-gts-ctu.cx.age".publicKeys                  = [ main-key trabbi ];
  "trabbi/mail/password-vaultwarden-ctu.cx.age".publicKeys          = [ main-key trabbi ];
  "trabbi/mail/password-mail-zug.network.age".publicKeys            = [ main-key trabbi ];


  "wanderduene/syncthing/key.age".publicKeys                        = [ main-key wanderduene ];
  "wanderduene/syncthing/cert.age".publicKeys                       = [ main-key wanderduene ];


  "wanderduene/wireguard-privkey.age".publicKeys                    = [ main-key wanderduene ];
  "wanderduene/restic-server-htpasswd.age".publicKeys               = [ main-key wanderduene ];
  "wanderduene/rclone-config.age".publicKeys                        = [ main-key wanderduene ];

  "wanderduene/matrix-dendrite/private-key.age".publicKeys          = [ main-key wanderduene ];

}