foodogsquared/nixos-config
1
0
Fork 0
mirror of https://github.com/foo-dogsquared/nixos-config.git synced 2025-01-31 10:58:02 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity
ffd2d84b7d
nixos-config/secrets/secrets.nix

26 lines
1.0 KiB
Nix
Raw Normal View History

Add secret files in the public Was initially afraid of how age is secure for the publicly showing secret files (even if encrypted). We'll start with something simple for now.
2021-12-11 05:20:55 +00:00
let
system1 =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG42LafAFOeh3oYz/cm6FXes0ss59/EOCXpGsYvhpI21";
backup-archive: switch to NixOS borg module While Borgmatic is great, the NixOS module does have easier configuration for various use cases such as backups in removable devices. To make this possible in Borgmatic, you have to go through some loops. Borgmatic does have easier way of indicating paths. However, in recent versions of Borg, they have the experimental feature of indicate both include and exclude through patterns which is close enough. Also, because of this, we'll be deprecating the custom borgmatic service at this point. It'll be removed once all of my NixOS-related backup setups are not using it.
2022-02-19 08:58:08 +00:00
system2 =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHjRjAddjbyoM32tQhCjj8OrnqNBsXj+5D379iryupK+";
secrets: rekey all files
2022-07-05 22:39:50 +00:00
system3 =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ4X7YXsEmMW3jP2dfU9l/KrF9jUZqN0sVXSvkag8VFH";
systems = [ system1 system2 system3 ];
Add secret files in the public Was initially afraid of how age is secure for the publicly showing secret files (even if encrypted). We'll start with something simple for now.
2021-12-11 05:20:55 +00:00
user1 =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMclb6WPpYRoMVqCCzQcG2XQHczB6vaIEDIHqjVsyQJi";
user2 =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBhrzY7tD0ZiGoA6nnfVxRQVQox0votQ2fuHz78LjNUD";
user3 =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIytwsseYS6kV8ldiUV767C2Gy7okxckdDRW4aA3q/Ku";
user4 =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGtn+t2D7clY1U1rzKcSCBJjNbuJzbRArEiM3soyFcnv";
backup-archive: switch to NixOS borg module While Borgmatic is great, the NixOS module does have easier configuration for various use cases such as backups in removable devices. To make this possible in Borgmatic, you have to go through some loops. Borgmatic does have easier way of indicating paths. However, in recent versions of Borg, they have the experimental feature of indicate both include and exclude through patterns which is close enough. Also, because of this, we'll be deprecating the custom borgmatic service at this point. It'll be removed once all of my NixOS-related backup setups are not using it.
2022-02-19 08:58:08 +00:00
users = [ user1 user2 user3 user4 ];
Add secret files in the public Was initially afraid of how age is secure for the publicly showing secret files (even if encrypted). We'll start with something simple for now.
2021-12-11 05:20:55 +00:00
in {
backup-archive: switch to NixOS borg module While Borgmatic is great, the NixOS module does have easier configuration for various use cases such as backups in removable devices. To make this possible in Borgmatic, you have to go through some loops. Borgmatic does have easier way of indicating paths. However, in recent versions of Borg, they have the experimental feature of indicate both include and exclude through patterns which is close enough. Also, because of this, we'll be deprecating the custom borgmatic service at this point. It'll be removed once all of my NixOS-related backup setups are not using it.
2022-02-19 08:58:08 +00:00
"archive/borg-patterns".publicKeys = users ++ systems;
"archive/borg-patterns-local".publicKeys = users ++ systems;
secrets: rekey all files
2022-07-05 22:39:50 +00:00
"archive/borg-ssh-key".publicKeys = systems;
backup-archive: switch to NixOS borg module While Borgmatic is great, the NixOS module does have easier configuration for various use cases such as backups in removable devices. To make this possible in Borgmatic, you have to go through some loops. Borgmatic does have easier way of indicating paths. However, in recent versions of Borg, they have the experimental feature of indicate both include and exclude through patterns which is close enough. Also, because of this, we'll be deprecating the custom borgmatic service at this point. It'll be removed once all of my NixOS-related backup setups are not using it.
2022-02-19 08:58:08 +00:00
"archive/password".publicKeys = users ++ systems;
"archive/key".publicKeys = users ++ systems;
Add secret files in the public Was initially afraid of how age is secure for the publicly showing secret files (even if encrypted). We'll start with something simple for now.
2021-12-11 05:20:55 +00:00
}
Reference in New Issue Copy Permalink