secrets/secrets.nix


1
2
3
4
5
6
7
8
9
10
11

# This file conatins configuration for the agenix CLI. It is not actually
# imported into the system cofniguration.

let
  metadata = builtins.fromTOML (builtins.readFile ../metadata.toml);
  publicKeys = map (builtins.getAttr "sshPubKey") (builtins.attrValues metadata.hosts);
in
{
  "cloudflare-ddns-token.env.age".publicKeys = publicKeys;
  "duksebot.env.age".publicKeys = publicKeys;
}