nix on git yippee

secrets/build-token.age

@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 i9wBeA VasuCf7L03zsABerLELUSNGcI3QLxaE+nvN+5XwLk18
+Vzdd3tKTL3DJpWe1XNRPSt2YhWxATljyBK6bDUiMai4
+-> ssh-ed25519 UbxDgg S0b5rEN5xbcZ12Sjx+gI7cyTyMv/PPoHpzfHVGOlMgA
+Z0n4Qxq8NwQGNpJH8ES90bBt4MuAF/m8V8xNkEWMfPQ
+--- 1mqOAP0OMMkMkWUcCE/cXqjRr/aZuLDcn6HEC9X2hR4
+Mz›_H2шկ̰Fqý~÷Û¸'ÕftTÓ5ŠnþaÛ¯^n¯“^Ç^iï=
c²N¦L(­ÙœBºÐ‚oÂŒìhêO)Š¬u˜eî`4[Mž–uèõnMŸZÉI<13>6Á9¥Ÿ¶"ƒq‘öFñíÚ@!n¿K·,ÃMkl

secrets/garage-admin-token.age

@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 i9wBeA 7XwEZNaAWzH5QgPXBW/S7HHSAFO0UgFF0MP+o6Z8ymo
+hmw36GBOfv/AvT++JpBNRLydL2j3mASS/JrLROG1ifs
+-> ssh-ed25519 UbxDgg cvcbnv9O2OHt3F4K+0g0ux4sq1MCrZnaLnTNM+5lJho
+efNO6FWLKj1l2eZx4mk8TucMtE12Y3Hf+JHl/FxodSo
+--- I7BjJid4vdH0bN0V6aFnFnq86XQNFO/JJLfD4rqE+9Y
+:<Ä£T›U–ðnÿ¨ÈZnô\Ñ#Ç*ñ<7F>š<EFBFBD>˜Øhý=kôÂã%Ù¨®xëÈK»åd<vÝ"M$»wBÞ#*ŽSÎ{7}f<>C™ 

secrets/garage-metrics-token.age

@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 i9wBeA FmWklgH5yY/8itKCgiitrzMRCBp64zgOytDLQE2akgk
+sfJIlVzowBTLsIHFDmC+SdTb9Ks6wIMQyY9HfewMpNU
+-> ssh-ed25519 UbxDgg PL+q7o31Gr2dYGZGc/aVdLvDGtB8wVPkMO0MdCXgcDA
+AgjVKXt23x1wYSOWaS+prfsEEpX6BKimR0KGPrG6bko
+--- EvOF9JjHYoml+j3tMDfU09+GfHyMS56ZbqkmTZCQHSw
+Vü”\[´¥Š'ŽŒéÀ±Î+<2B><>î&úb

Œ«T¥ß¯8fo„Êpó<70>ÇÂct)h>¡ñvŠ‡ü½bŽÝÕËCWiÛo`LR‰	êF

secrets/garage-rpc-secret.age

@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 i9wBeA j+jwToOHaeIOAEuPB7qzlJofOVPQO2mI16HspjKSxAM
+XXv1+ZQQSgcPNMVD5PjrSj67+7NWgUbWV3fSWG93r90
+-> ssh-ed25519 UbxDgg DR+Q+abB52OEE1ELl7rSjHT8ObJTD6rY9v94H1YriQQ
+vA31Tw0ItQAgY649sQogIQPvqJppmDYQ4MVPTGerFhE
+--- ttD8bkuH/5MXyipRWBb2UbxIwyFftPki50NP0BiJQok
+	g]¶óS(hýv­üùç¯M<*¡¬*e½”ɉª‰hÅÊ´ՌgyH6ôŽn‘M<E28098>ç<EFBFBD>½¿J2W/‰ýì±áåÙÙ€B߸ؽÏìËUÉ›k*È8¿©E¬!A.&Ç

secrets/secrets.nix

@@ -0,0 +1,14 @@
+let
+  regent = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ0pU82lV9dSjkgYbdh9utZ5CDM2dPN70S5fBqN1m3Pb regent@orobas.local";
+  users = [ regent ];
+
+  valefar = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJlXq2lSfiWwRwIxsxhffW5FDGmjt0QKYN+BaikmRR71";
+  systems = [ valefar ];
+in
+{
+  #"secret1.age".publicKeys = [ user1 system1 ];
+  "build-token.age".publicKeys = users ++ systems;
+  "garage-rpc-secret.age".publicKeys = users ++ systems;
+  "garage-admin-token.age".publicKeys = users ++ systems;
+  "garage-metrics-token.age".publicKeys = users ++ systems;
+}