From fb2e558bf8eb5568cd756cbf979141e6aa1b6d50 Mon Sep 17 00:00:00 2001 From: Hendrik Sokolowski Date: Sun, 21 Aug 2022 22:53:41 +0200 Subject: [PATCH] secrets --- secrets/cube_nextcloud_admin_pass.age | 20 ++++++++++++ secrets/cube_nextcloud_db_pass.age | 21 ++++++++++++ ...ome_controller_companion_wireguard_key.age | 20 ++++++++++++ secrets/home_controller_cox_wireguard_key.age | 20 ++++++++++++ .../home_controller_cube_wireguard_key.age | 20 ++++++++++++ .../home_controller_giggles_wireguard_key.age | 20 ++++++++++++ secrets/home_controller_k3s_server_token.age | 31 ++++++++++++++++++ .../home_controller_ringo_wireguard_key.age | 21 ++++++++++++ secrets/secrets.nix | 32 ++++++++++++++++--- 9 files changed, 201 insertions(+), 4 deletions(-) create mode 100644 secrets/cube_nextcloud_admin_pass.age create mode 100644 secrets/cube_nextcloud_db_pass.age create mode 100644 secrets/home_controller_companion_wireguard_key.age create mode 100644 secrets/home_controller_cox_wireguard_key.age create mode 100644 secrets/home_controller_cube_wireguard_key.age create mode 100644 secrets/home_controller_giggles_wireguard_key.age create mode 100644 secrets/home_controller_k3s_server_token.age create mode 100644 secrets/home_controller_ringo_wireguard_key.age diff --git a/secrets/cube_nextcloud_admin_pass.age b/secrets/cube_nextcloud_admin_pass.age new file mode 100644 index 00000000..5b1ebf69 --- /dev/null +++ b/secrets/cube_nextcloud_admin_pass.age @@ -0,0 +1,20 @@ +age-encryption.org/v1 +-> ssh-ed25519 hPyiJw wG1VH/Rd8D9VhI2nUdKN8ev8GmDTmByYojrAGXiVQ0c +Ce5LdJLYhXZxozhrFZOCCcG6DvDlzcwHUp7rsAAYMb4 +-> ssh-ed25519 YFSOsg KWrIirfADk9OlVVF/SvnyE4P4JWorWhcShIWMLaYezg +kjNaCLQRKwrLKWT6H6mygsawWXas1alwf/rPbpgnIbE +-> ssh-rsa 42S2Dw +GlF0Iwkmi2IukEP4aghJLQP4QUv8Lt2qPBsysz/NIfPxtxuVgnphqmbtZ3ylKURL +iWQbDwvNG3DBQMgbFUTtLpp48yZ++ZWfVCLJxylifoo8Fk1/edOieiQxmKySFIiS +RBDjal+JFIAMQVa4i9zTJ2HolgFGioq7fsQgimjhhcTpbPWF0YgbeFlD/Bx3Uc3D +QXHkPGTWWJr8nmsBLW0erQKuT+2pTy3Yo00BmYYfaHhRSWPxaRiUvlQzqwfEJGZy +N8CWyU8JqacMQfFfMVYYNR8qHGv5p5nu9FtJPQFWz79TB0j0OaowW8VuhP70UVI1 +QvZLDCv1JN4fd9TqDqgcnA +-> ssh-ed25519 iHV63A b0w5AmQtO1FWnySOYDh3JIWkiFM05WNz9M4H67GVZEM +suTrfziEta0t9iGJxx+tcvi6BzQS1NJxPmCnPBx5ViU +-> ssh-ed25519 uTVbSg rMwuqUqpr40KdbuOZnhi9Bya/Ql2F8HfZdAQvcw3JUY +vVF6J8lzQNXnHgzEMzwkcrOGSExKJmPBmuxDklQ7TGA +-> ? ssh-ed25519 hPyiJw 4cMG8rywMIHkCJO0vbcnD46xPHZKTbUFi/bKKPLJW0c +aOmQ7lws7MIDNE7xejtcomQAtRuXjHd+VSGGy805cUk +-> ssh-ed25519 YFSOsg UnTniCyloz+bfIlKsgGvQflAOCIwdNBuKIM64ZZ7fSI +/Q6KAn80cNs38LgOxZhg9tXmAtJJKw5VpN9lfPqNuhc +-> ssh-rsa 42S2Dw +FoosAbMAGlculUJOkL+9U2Wajf80dgUY+Acd2MQDbeSR/A/hE+NOv3JtH2Sx9weD +ww2n/K5uKQhFKrTVIRn5Bp1qYnay2FIn6lz0zu1I2tqmGFCMiR+RhTnrcxFztNjQ +dYbs4F9mvCDmyn9tShTzqAxnClWCdOHkrXBuCMAg08tp5cjAPqaSMdE0wFn5Jvhg +DY5nHJWlxbZcGEhJSW2mxKb+HP4ecZ5FY0Uf4qYn/FTcKm7K80Pojg/e72XV7sq9 +04dPKpa162G53BKQXCmv55L6D81YepydA0wAoeTXXfC1E+DxeWfHrsmF80qdEnBg +ZpPIRWdSBs61zqp4XavsSw +-> ssh-ed25519 iHV63A mumH3Brpcqa3t8Q495yyV9vn8AKalaf2WchgmsirN2Q +fk5iQUYBlUiq+8Nblb5H9mhJarPONiyuOG3ioknlbzk +-> ssh-ed25519 uTVbSg O5xBbchEqAsFJtU4kCZo4gqpByHNAnZO0Ik7p5fwFAM +e+adn+gDYIF2BW0N1zoHZj+/mciN60rVcCPs9OplLsE +-> ,-grease M6FrPQz + B{ +QAdvJryfCY0NJ0XU5sC9D5J2KnHIxCcjBi7iFlehcB56qrdQbSPsL+ysZVqTzfQx +QjDs0lXBKqL2f0g0cWiM9Q +--- Vl5VtidJZtEk19VojwdWLaGJGsIRkvwRTjW0mdnTqiM +T_%2y͌WKhceThڝX $TR9;$ \ No newline at end of file diff --git a/secrets/home_controller_companion_wireguard_key.age b/secrets/home_controller_companion_wireguard_key.age new file mode 100644 index 00000000..25d9ab44 --- /dev/null +++ b/secrets/home_controller_companion_wireguard_key.age @@ -0,0 +1,20 @@ +age-encryption.org/v1 +-> ssh-ed25519 hPyiJw tQeQac/fLw4UXYx/SXj46HPeG6oPKY4U8IJJI89Fv3c +rB6bWP8ba0kAA9qwcq81rTDgmerGORN4jAE5Usrz1tY +-> ssh-ed25519 YFSOsg W1SJl0W8oRo5ApD+40puyRae+MDhsxd6Miv6vHaeXn4 +Z1xqbXD5r0Lo9XvouS967LxnxEX9arLhylZJnFLG0aM +-> ssh-rsa 42S2Dw +t48CWYrVFfH1x59IYXJtfkeONo1QPnqN6VMwVzMh0c0Vm5U2OFfAml+/6Kit4QWI +u7PASBpg+GRsQmoWC9hFJsCDiikg5NIhyBO4feSS+4Cus+8Xr9cSPjYg5EKsgoOd ++HpTrPhiNG1Wy2pE4kkxSsS5pKOcdIezU+DfqookoXALLneUIUEsaHYCmdOLwE21 +yRzWxiXavQKnvabxnqISYeBK+aHNGtd8hczhnoM8oR7qTaNQwfuQoVa8te0MLTIK +EXIuev6vESPFtdo3gGJUSbmlXY9hH0tumFFgug185oJwkp745rWKM4QlFEB5fNGR +LE54GOkv9sF3+Wij/ELHAA +-> ssh-ed25519 iHV63A OOf5Cx0vckL1ve6WOzL0IAhIKasXAjodubuyKbWKv1Q +1av0Vqos3YsycBFpncCvP69RunBwCQ4oSextLvR9P+Y +-> ssh-ed25519 t1M4HQ j2B7jugQZy124AM5f0JK+id4W2TN6n4C0c/HUNFfLU8 +BJr18XJI/XzFgH32nXKZb5SdBbU8raRCKL6PWgad5cs +-> QwO-grease *8]/h/ 7|S +LM23rOF57rKeWQ +--- 7xz9ru8cIHt3zksF696olmLR+vEkwDfVv0tl2stfNhM +e T|,7kZ5:A dN ssh-ed25519 hPyiJw ZGGRZr/HOQSZ1zREl5pqPE0sftSc0CLVHiKBrJ3X938 +cO/aAeVwrQp5OSAl6JTnIPfhEJmG/1rnbJAtoplTESE +-> ssh-ed25519 YFSOsg G/XSLzhX7SSsOZNWnpdLJ+m6NXyL6F/itN76CfJZzkk +sNfdi78MFpBcoAh1xPpcvWYkTWQQ2fIL6i1myHdun/U +-> ssh-rsa 42S2Dw +RuHlOwIJJhJffpJEcIpUEOX8czKVY8c+bvae1XrCSNplNV1f3CHl/WSdKfhOCC// +u1qOEiidsDxWphJu3IHjiLgTCmlnwwaISZ2bnEOkTSDNPphARrEA7JfrSyQOlZJB +Mu1qhSi5u4uGVi4Mk7TuLxCHRnjDUjDLVh96kbjiwrnAAtI/0fK64ci8rx9P1GzD +aZR1to8+uWFx3sTtr3JUA5I+azQdYb37p5ehlCrvVybcze/16oCkreSDuW88HdoD +yIXrX3tlnjJJou7LGR/s8o74ookFMT89rlkf8DXMhkPpmiUWYxCyJZ1oS6twtee2 +Gwo4twB5KIHTCmryJsZ5mA +-> ssh-ed25519 iHV63A Jun3KRgZaEfE0RmefSaa8WLdMoVLhQGH0kwK9IORaSk +IlMxqMUjdhKOciC3/KTQWIBctjyW3dVHKJpWLfVT+NI +-> ssh-ed25519 w1vtTQ 0iNKMsnq32OTGYhQNz75FszXV8ePAWTPXTSra0s/WAw +4eecaT/DX9CowOod+NRva3PiSbrgmjPerTGceN+u3mg +-> @I^"ao-grease L#%xN`Bb 6l.LN , +h77R6GmXSVnEblcP1Kxuf7kCy8DnMtAF +--- RvWj6AeYYIavoCseUazZH1lw0LFUm0mB9Ww9HeyVRio +9A7oMq#^͎3@"s(/Տ-{Ӻ[/1AY:LZ0uE'kV/ \ No newline at end of file diff --git a/secrets/home_controller_cube_wireguard_key.age b/secrets/home_controller_cube_wireguard_key.age new file mode 100644 index 00000000..fcf891ab --- /dev/null +++ b/secrets/home_controller_cube_wireguard_key.age @@ -0,0 +1,20 @@ +age-encryption.org/v1 +-> ssh-ed25519 hPyiJw V5crsXjhEfj2BKe5uEjccio8m1hzjvZ1u3DU16SdmVs +gxC6r8tzwj3l7SW6kn4TXinZV2ZNgKpWsiKGn56CZgE +-> ssh-ed25519 YFSOsg Q1tpXI8ilmFt3JGx5ad8SCtZRbrbR8DgGNiu7vXQ7x4 +geB/YeAwQqJuLG0pf27W2FhuXm9SS2RRoqe2UaV2U4o +-> ssh-rsa 42S2Dw +KWliiGsVgLgkkY1DkKNsNtBUzfKSX820nJfLLOMBgFcil78IJz+Sw5Ns6NFLR7Xe ++o+HsUxcnLOXhDYMImR9SALYL6TwLdqp1C+LAQ8HXri35IyERU2uqMXdkzYREn4f +4c4JlCbtCy6F+8nFy0OkK/VtV/yoBpnDMtjDk9wdHYBouSGX91/8QwNUu1L0m0V1 +dvYVjk/tCPDsk3TYGFAR7lG328jt3khqVAV+rcvwwTPzD+jBCkbyGCFQ5N3xZBGI +Wa3xMB+P9ojv4XAfde0eK+6N0uPvoMvnmPGguJTXiaCEgw8K/ILV6PuhkSyo4Wea +EytCf4k42l7wjwG4LWFWZA +-> ssh-ed25519 iHV63A o/IPrEtX8l4ZWCcC/yJWGRUAPDPX7vMJKBvm7ngWRjE +YoXHRtVmNXlxJ4uJqs7jNW/2pBnjMroj1AlLiERLQGk +-> ssh-ed25519 uTVbSg WF+8m47L2GWewOEK36k3g+Ozv1JC20cfswQ0ksbhhzs +w5qbtYBfnrKOB4/ZTiD8Qsd42NibKcgbL9AYQKx9bnM +-> y-grease y>]"'a W " +w265AhhbaGNvdOMRX4xs+w +--- /proerdf6QHIKGNWA0vTE+ZPNuvbJBGhpMEt0DscFgQ +md]وG(nhłLARRjMU Vȏ%M^ oЋJ QDn \ No newline at end of file diff --git a/secrets/home_controller_giggles_wireguard_key.age b/secrets/home_controller_giggles_wireguard_key.age new file mode 100644 index 00000000..3f013f1e --- /dev/null +++ b/secrets/home_controller_giggles_wireguard_key.age @@ -0,0 +1,20 @@ +age-encryption.org/v1 +-> ssh-ed25519 hPyiJw gEHEUHodm0u6YauWsDFycNYfBlNEncGz6cGiFVbMSQw +eb/YlV8CeU2GZaoREi8n4CB6O+bltLjwARBh1SvPHuU +-> ssh-ed25519 YFSOsg oObR84uRNYEhcbdILnSni61pMzaNQcbMSV8CMdUFCVs +hZeKavP58fmaxjpZwHDSNf2QnUqn5GqeSx/MVbWM8w0 +-> ssh-rsa 42S2Dw +W/0mcDisoN/RoEshQ0gDmmYZTfSG3BRAq/PsXT9Xt0mahAqZumfdysT9T2Wkso5O +2SKVvJvP2YAGNs+d/+lnn5/I8f7qlx6K0oQ1e72Y9ZNmoxgZmL3h2jBR3x+GfgG8 +Qp57nfvoF4js2JyC2MSUm3CjOppxDN/BM2v5qOTuPB5/K3bPOP1iBdENH71f9d64 +PK/7HZA1BTtn4jOWYQ52BZIcOjiA9JoVO6HFvB7d5UobasbbXDhO6ZgZ3aWdsDE4 +/0S099FWbvzTk8aITl5qSphQy0Pgp+yeTobx1Hn/b6vokoNIwaMZniOVd1mS0CuU +DL8SGpuQUeOl+27sstHfUw +-> ssh-ed25519 iHV63A 34vhrBbCb4J5xzjoa9o4hWokszJER12Pfd/s8RGxfg4 +2p8SUyhXdks06NJPZMkbKcdsn+YB3+/Ksaipc72mBvg +-> ssh-ed25519 AsPNJg bAYRIQICTPeVri4/qkBBedxmm08TNoBMseEauYtTkX8 +ZeNmjU+oG4qYSMREtv7QdbRLf3SAmdHnX63eiHjvcOU +-> J._|'iH-grease VaQ1S' W7^S -r HJ' +KbnGq5EUW0HcQ4v7n8Gh/4R/Y55bXYOuSPNt2jXTbog +--- Bk+tEcikn4Gd90ou6llBA1nYq+mRGdfB1TaJvIOYEaw +ML7|2F'ZoZ{?J,m\GRaa\t<5 \ No newline at end of file diff --git a/secrets/home_controller_k3s_server_token.age b/secrets/home_controller_k3s_server_token.age new file mode 100644 index 00000000..c1a4c1d2 --- /dev/null +++ b/secrets/home_controller_k3s_server_token.age @@ -0,0 +1,31 @@ +age-encryption.org/v1 +-> ssh-ed25519 hPyiJw B7i7cir4NIqIxeuwN7lBZiHLaLDNwSD5ZJLs0iYidDo +fmj7NzNi4DT805TlhjtyMXa1dcu7rGVIllQG4ALtJdo +-> ssh-ed25519 YFSOsg SpldcBYdyAYW4W+U4JrgkcA8Y5+YnPjW78OISjviDz8 +Czi1SkmtvFmko+fP2hdCanpWJKpo/KndE/MI8BcJVxQ +-> ssh-rsa 42S2Dw +EvIS2maHrEa4Qyhrp3TJ/LULJkdCixIEcvI2HS9SUhVRIJS6jpY/Z+pW+XZqxEgk +P7sp1CjRsjRZ4RZsgBUsgdO4mRnUtSkrTTLzrS84d3QG1QfjQphtF/BSt2+8t1nw +S/XVZWu/LyFb8Z3TbhVkf3vx7ujIBwjdFj+LiUmEYwB4o57MWKH9aCcvyMLZF4Ne +AltRXfkGkEVt7Yn0iKwb8yHaqMPa5CjfjDP9ybLp/my08/pZEQTVduKe/Q6p09DM +8gEF1uVM+3BxXf7yAvt8fW80Hgm21VnYUq0h6exDZaaf0wLPOh0kRnN1MDqK2tjO +uxre1sro1ZQx5CPCXD4ICQ +-> ssh-ed25519 iHV63A Toc315/VlOneCwbLzcp2fDqHZSMDNtSprquR3BOVfAg +ZeEZEdla/o/sAa7Tbh4NY5qqrNkWfHqpbvUokSofC5A +-> ssh-ed25519 AsPNJg ui5FmbBKlKQ69R38yqlFURrMBTX1n7ysQP7mBo9SSRQ +c7dp6ewRp/5rHThk/oGcaaCxNwmBWTcfVSK4IrHJh2M +-> ssh-ed25519 w1vtTQ 7ToJvl/p9DzxX0v/b7nNOIfdgyb85Ja6862Tw2HLLyo +PkEaeBdx60i9mX6t5Ue5PeabY4COffefCSt65H5hRxU +-> ssh-ed25519 t1M4HQ 14NmP2HdhTouv66lkTKPEKh7HANgEUIek8FA8wAntSU +ZZ+Mc8m/Pb16Vbxc9bOZtXJ+0ZXv/YiV30LiKra55cM +-> ssh-ed25519 uTVbSg 1151u2eVy3izoghgXS1zPukpbSiZo6Mc+JTtCNqrqxE +5NGufz7+RjYTy4gUfAHjV/g8VdF5FxPcB3GUzafotn8 +-> ssh-ed25519 4eCLig NAsWZu3MFuCEgi/Fm+2kB04A8ZckvTP5ueLjB2NKZDg +5DKhLww7UKvOxPveJTtuc7jGk/9cypM9UadP1A8C6Ko +-> t-grease > 8z4 `,R~f.lb +K0DjBt5R459zTRkIA58mcIYl+Na5m+1SIXbezHjWZy2q1cIX8L331Du4SE6/UCCR +e3Q +--- ZjP/FefBuH6f+bEQpgqeiL3Uj+f9AbSCVRQni7pYyjQ +6{{;5%n@~Nn!EϷA&â `v-5{ P +8'm7p1 bn#0"=~"}@89eB +/*Uo <.E)t2fXo9FQG) \ No newline at end of file diff --git a/secrets/home_controller_ringo_wireguard_key.age b/secrets/home_controller_ringo_wireguard_key.age new file mode 100644 index 00000000..5a41c0e3 --- /dev/null +++ b/secrets/home_controller_ringo_wireguard_key.age @@ -0,0 +1,21 @@ +age-encryption.org/v1 +-> ssh-ed25519 hPyiJw zHWVBLJi1r1M3C/3Xf1rCOOXhjihjYuF4f0ZsRo4dWI +sB14DJ0gjz2Z9+oJG/RBAl5GJ31NOjUJmpSvKwmkEVU +-> ssh-ed25519 YFSOsg RHtbqm+jWVTkXqyTWRblggdgfbp2OOJmCqieDhI4+HI +0lc7kKOQL3Abo8UyjXfRHvDcq+dOvPe0q7izfycZkj8 +-> ssh-rsa 42S2Dw +QnOc7ZIigTURoIjglNY64KzZh8QbhE2TbioIP88F9OztV/1umy5hniBNYrE3grd2 ++nQSdBEHsHKgyElC3VvdKQ9RvzrbrDHnNt4oBgmH70KfAQzH1wehOvofcNMlu0+B +0ddUjo9BEf5VtxKY4fdUFLoROBv/rIMCuCR69NE4KfS/Cl7I+saWUOzoRVcZKsBc +XmYYCTDezlVOT0dtoRDJT0PBimXQZ+3D9Fj7VKUOobggUiQBOH7irvpKy/JFG6+0 +C5CRDZKPp4XOKfz/XAqIxbkyzxF6ZRpmXz+QJhHXTCJfWdRMfUl45YO5r/fX6ybV +vqZnYo4ytlZtIaoe0ipFJQ +-> ssh-ed25519 iHV63A WkP5FVc9iS9OEQMr2E+ewVvBS1ppHnuCWqGTvdvBY38 +kxdQm6sXkGlFId0KEoMqcbyXII5G1En0g9I6WObwNpk +-> ssh-ed25519 4eCLig /lrGyo78vdS92cFFs3aS8R/BcM+QDLspab0ftIZU9WE ++rvfUcml+WEDzZ9B6WbSvfwh+ceHygGIvHsw4UME94k +-> u\-grease JD#pg \__| M\j|M +9RN98je/hB0 +--- JoemHAPRRKWcsEMIOEU1Cq8AyPFTtz3qYqCgyeonyrs + +"SnqRvKRUsF+E}ݻ^)xx\_S' /2bx]Sr؄ \ No newline at end of file diff --git a/secrets/secrets.nix b/secrets/secrets.nix index bac30e03..9a649db0 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -1,9 +1,33 @@ let # set ssh public keys here for your system and user - system = ""; - user = ""; - allKeys = [ system user ]; + user_hensoko_nitrokey_1 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII/58A18EtxnLYHu63c/+AyTSkJQSso/VVdHUFGp1CTk cardno:FFFE34353135"; + + user_hensoko_harrison = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEbaQdxp7Flz6ttELe63rn+Nt9g43qJOLih6VCMP4gPb hensoko@harrison"; + user_hensoko_norman_1 = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+euxPp6bHXw61UeUqTGHH8Ub2L+Sy1iteupv/AGudgoVNp2GebqJy1cxQ74mgnL8eWMlaA9jZlKQ1xFFhgtolCsoAKTE9AE8X0egvmEM18fEUR3EWWchmX4MXUhUiOtwitkl4+EpSsp5rh/kIxcpQFz1dpBibroq6jDLKlrVou+2LppR8nMfFT2sqg3694Ltxz4CWMdAfitLax05ckKMAnzz+TgpXK5OyfQSBvl18Qu1SWITYa6AVNXQ7/ovWBDIUfg25GWouzWqkSUpLdCVIcXPe2X7g6X1QsHXnnhaMAhvYH54GZ4wU2kBwIJ6KvplfZdbJ09KAltPVt08evafb hendriksokolowski@hsokolowski-pc"; + user_hensoko_norman_2 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAqkqMYgncrnczcW/0PY+Z+FmNXXpgw6D9JWTTwiainy hensoko@hensoko-tp-work"; + + users = [ user_hensoko_nitrokey_1 user_hensoko_harrison user_hensoko_norman_1 user_hensoko_norman_2 ]; + + system_giggles = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKOLyNmSzxVpVQtTWhkH48e03nFDdskE08N4L81MZcLZ root@nixos"; + system_cox = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFNr7q7eAkROtdvTmw96Q5tZu9W4jt31OCjc6L8uM5Uv root@nixos"; + system_companion = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINjIyVeAPsIpUTsB5bPEjmJeRFN8Xp3PD9a/41yPp3HM root@nixos"; + + system_cube = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF5ok5tIuDKYpIw3KVmUnqBSDJ1QriWQJ04IVLF1Kaig root@nixos"; + system_ringo = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE5g8CfSiMxboEJT2U92JoYdnv0nsArBPW/vfTEsUWZO root@nixos"; + + systems_home_controller = [ system_giggles system_cox system_companion system_cube system_ringo ]; + allKeys = users ++ systems_home_controller; in { - "secret.age".publicKeys = allKeys; + "home_controller_giggles_wireguard_key.age".publicKeys = users ++ [ system_giggles ]; + "home_controller_cox_wireguard_key.age".publicKeys = users ++ [ system_cox ]; + "home_controller_companion_wireguard_key.age".publicKeys = users ++ [ system_companion ]; + + "home_controller_cube_wireguard_key.age".publicKeys = users ++ [ system_cube ]; + "cube_nextcloud_admin_pass.age".publicKeys = users ++ [ system_cube ]; + "cube_nextcloud_db_pass.age".publicKeys = users ++ [ system_cube ]; + + "home_controller_ringo_wireguard_key.age".publicKeys = users ++ [ system_ringo ]; + + "home_controller_k3s_server_token.age".publicKeys = users ++ systems_home_controller; }