123 lines
3.7 KiB
Nix
123 lines
3.7 KiB
Nix
let
|
|
admin = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK6DjXTAxesXpQ65l659iAjzEb6VpRaWKSg4AXxifPw9 Skynet Admin";
|
|
silver_laptop = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFQWfVKls31yK1aZeAu5mCE+xycI9Kt3Xoj+gfvEonDg NixOS Laptop";
|
|
silver_desktop = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN34yTh0nk7HAz8id5Z/wiIX3H7ptleDyXy5bfbemico Desktop";
|
|
thenobrainer = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKjaKI97NY7bki07kxAvo95196NXCaMvI1Dx7dMW05Q1 thenobrainer";
|
|
|
|
users = [
|
|
admin
|
|
silver_laptop
|
|
silver_desktop
|
|
thenobrainer
|
|
];
|
|
|
|
agentjones = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAbqYQrdVHmGgXZJoMWWRDGVEIj775Zrf4PxB5hoth+k root@agentjones";
|
|
vendetta = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINxTrUPZPqttuxfmmP8BTACTAkv1yY1nfzEd64hN4LT+ root@vendetta";
|
|
vigil = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICDsz1bjNAThqwF48dKIJGOECsCKHTj/Gn5Gh9XyzoSO root@vigil";
|
|
galatea = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII3Mke5YtaMkLvXJxJ3y7YAIEBesoJk3qJyJsnoLUWgW root@galatea";
|
|
optimus = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIqYbbWy3WWtxvD96Hx+RfTx7fJPPirIEa5bOvUILi9r root@optimus";
|
|
glados = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ6go7ScvOga9vYqC5HglPfh2Nu8wQTpEKpvIZuMAZom root@glados";
|
|
wheatly = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEehcrWqZbTr4+do1ONE9Il/SayP0xXMvhozm845tonN root@wheatly";
|
|
kitt = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPble6JA2O/Wwv0Fztl/kiV0qj+QMjS+jTTj1Sz8k9xK root@kitt";
|
|
gir = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINL2qk/e0QBqpTQ2xDjF7Cv4c92jJ53jW2fuu88hAF/u root@gir";
|
|
neuromancer = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID7NRDOGzSO4XVEezMS/9pI3chKbOH0fw2aikLRvea2P root@neuromancer";
|
|
skynet = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAIFPXJswth8H1k8+zrg8vCnPkfG1hIIa3wR9DBmjpB5 root@skynet";
|
|
earth = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMpvgQcvK7iAm0QrIp5qSvUJzDhOrSBN9MJn9JUSI31I root@earth";
|
|
|
|
systems = [
|
|
agentjones
|
|
vendetta
|
|
vigil
|
|
galatea
|
|
optimus
|
|
glados
|
|
wheatly
|
|
kitt
|
|
gir
|
|
neuromancer
|
|
skynet
|
|
earth
|
|
];
|
|
|
|
dns = [
|
|
vendetta
|
|
vigil
|
|
];
|
|
|
|
email = [
|
|
gir
|
|
];
|
|
|
|
ldap =
|
|
[
|
|
kitt
|
|
]
|
|
++ gitlab
|
|
++ email;
|
|
|
|
gitlab = [
|
|
glados
|
|
];
|
|
|
|
gitlab_runners = [
|
|
wheatly
|
|
];
|
|
|
|
# these need dns stuff
|
|
webservers =
|
|
[
|
|
# ULFM
|
|
galatea
|
|
# Games
|
|
optimus
|
|
# skynet is a webserver for users
|
|
skynet
|
|
# our offical server
|
|
earth
|
|
]
|
|
# ldap servers are web facing
|
|
++ ldap
|
|
++ gitlab;
|
|
|
|
restic = [
|
|
neuromancer
|
|
];
|
|
|
|
discord = [
|
|
kitt
|
|
];
|
|
in {
|
|
# nix run github:ryantm/agenix -- -e secret1.age
|
|
|
|
"dns_certs.secret.age".publicKeys = users ++ webservers;
|
|
"dns_dnskeys.conf.age".publicKeys = users ++ dns;
|
|
|
|
"stream_ulfm.age".publicKeys = users ++ [galatea];
|
|
|
|
"gitlab/pw.age".publicKeys = users ++ gitlab;
|
|
"gitlab/db_pw.age".publicKeys = users ++ gitlab;
|
|
"gitlab/secrets_db.age".publicKeys = users ++ gitlab;
|
|
"gitlab/secrets_secret.age".publicKeys = users ++ gitlab;
|
|
"gitlab/secrets_otp.age".publicKeys = users ++ gitlab;
|
|
"gitlab/secrets_jws.age".publicKeys = users ++ gitlab;
|
|
"gitlab/ldap_pw.age".publicKeys = users ++ gitlab;
|
|
|
|
"gitlab/runners/runner01.age".publicKeys = users ++ gitlab_runners;
|
|
"gitlab/runners/runner02.age".publicKeys = users ++ gitlab_runners;
|
|
|
|
# for ldap
|
|
"ldap/pw.age".publicKeys = users ++ ldap;
|
|
# for use connectring to teh ldap
|
|
"ldap/details.age".publicKeys = users ++ ldap ++ discord;
|
|
|
|
# everyone has access to this
|
|
"backup/restic.age".publicKeys = users ++ systems;
|
|
"backup/restic_pw.age".publicKeys = users ++ restic;
|
|
|
|
# discord bot and discord
|
|
"discord/ldap.age".publicKeys = users ++ ldap ++ discord;
|
|
"discord/token.age".publicKeys = users ++ discord;
|
|
|
|
# email stuff
|
|
"email/details.age".publicKeys = users ++ ldap ++ discord;
|
|
}
|