summaryrefslogtreecommitdiff
path: root/secrets
diff options
context:
space:
mode:
Diffstat (limited to 'secrets')
-rw-r--r--secrets/secrets.nix4
1 files changed, 3 insertions, 1 deletions
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 56fa89e..e81ff62 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -7,13 +7,15 @@ let
interactiveKeys = [
metadata.hosts.ahmed.sshKeys.linus
metadata.hosts.muhammed.sshKeys.linus
+ metadata.hosts.ali.sshKeys.linus
];
# These are the keys which are used when actually decoding the secrets as part of activation.
# On NixOS hosts this is the root user, and on nix-darwin hosts it's the user who installed nix-darwin.
decodingKeys = {
ahmed = metadata.hosts.ahmed.sshKeys.root;
- muhammed = metadata.hosts.muhammed.linus;
+ muhammed = metadata.hosts.muhammed.sshKeys.linus;
+ ali = metadata.hosts.ali.sshKeys.root;
};
in {
"cloudflare-ddns-token.env.age".publicKeys = [decodingKeys.muhammed] ++ interactiveKeys;