summaryrefslogtreecommitdiff
path: root/secrets
diff options
context:
space:
mode:
authorLinnnus <[email protected]>2025-03-27 13:06:15 +0000
committerLinnnus <[email protected]>2025-03-27 13:06:30 +0000
commit1b04aa1c4c8bcd6cee608420543b154b4435ee24 (patch)
tree303fcc5ff275bd41aacdb427fb7af1afdc19b495 /secrets
parente26a65beca905cf44e1b02633f67d213ae3a84b6 (diff)
ali: Add metadata
Let's just add it now, then I'll fix it on the guest.
Diffstat (limited to 'secrets')
-rw-r--r--secrets/secrets.nix4
1 files changed, 3 insertions, 1 deletions
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 56fa89e..e81ff62 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -7,13 +7,15 @@ let
interactiveKeys = [
metadata.hosts.ahmed.sshKeys.linus
metadata.hosts.muhammed.sshKeys.linus
+ metadata.hosts.ali.sshKeys.linus
];
# These are the keys which are used when actually decoding the secrets as part of activation.
# On NixOS hosts this is the root user, and on nix-darwin hosts it's the user who installed nix-darwin.
decodingKeys = {
ahmed = metadata.hosts.ahmed.sshKeys.root;
- muhammed = metadata.hosts.muhammed.linus;
+ muhammed = metadata.hosts.muhammed.sshKeys.linus;
+ ali = metadata.hosts.ali.sshKeys.root;
};
in {
"cloudflare-ddns-token.env.age".publicKeys = [decodingKeys.muhammed] ++ interactiveKeys;