feat: overhaul key management for agenix

This commit is contained in:
Youwen Wu 2024-12-27 20:12:15 -08:00
parent 39cbcd9c76
commit 4f510f7418
Signed by: youwen
GPG key ID: 865658ED1FE61EC3
12 changed files with 48 additions and 96 deletions

View file

@ -1,27 +1,12 @@
age-encryption.org/v1
-> ssh-rsa 4p6DaQ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-> ssh-rsa pv6HEg
aKV2D6LoyPgaHnCQxsRDZ7dz1wuyz6VCNocsdZluwxwuO3z+SFhrc/4gg4iL6iMF
ENr2MznrXddXBWdhap9L6RmJt4YbjSolxBmI/cHwCmFGZEeAPsOjX21bdCCHB7D9
8lf0Fqjs4D1SC5djPqTFQJV8AIvkdsTF53bf9ZnN1s28Tpvvx/x4kwhiqR9v7DGc
gi4K0ClBW711+wvzzkPAnn0oklYrbcuZNGwTW7t8TG+hmF2o0aHB1kJ4ngMn6LUb
E5WlIy3ykYlGCd0sfognRYIrQwjqq4VQACmnQ+Fh/F43GxWCTruF5GejcRew1zDu
+W+L9Z4A+rR/5E5Xjt4isGFYxEsnyYwH5Dvj1M1ANAU8VMS1H30YTAuL57WXih9p
RrWadNdW1uxvZHysyEWDa9j3wBbh0b0HhDYJAtFeJcB8IAzNnyBLXWFYukISZ6Rc
qylG2DhtzqdyUi08socUQ/okL0FIbbMLT69faPbgkJk+w5iTCL8ZA9AMMKnN9a3z
11nXmgqTf1zTJe5Z6o9C3eLMiKlWvIrJ+WMbedBy/h6Qp9IdNnGEk6FCjrV1lxlr
UIvpSEsOa7vscKKiAaRcQ+Uq7Kqn2OORdcPJXJd5n817ziAOtglX6K2OSpIoAnOY
KE7xOTN+fQq5Yw61UaP3Nl25Zns5u4sQAzhHjIBmoEw
--- cZ6bbJKB4uN0RX9l0MWaH0Hgr81cGxhnMTgSuVKUfI4
qÀRpŒ[µ0*CÕ»Ï;o ø·Š½Q ¨ <0A>><3E>
ѦBóu<EFBFBD>æ[j˜"/†=±.€VÝnmx°¦†öƒÍŽÁ
û:TTŸƒºjŸ<6A>­"+<2B><>ÝׄiPM€O¸)Î$\ëV¦Ñ0Ñ_Ƚ§€N暈^€‹Ó*Y(d“R;€-ûÍ™™Z'o\øY¨5-
-> ssh-ed25519 ouRmYQ LcJhXf7RDzV69B18oyBQalIa7PuxKvgWf8WsQqS2QXQ
FEAVwjc/S8FzBtBlVTNmnYiEBeqLJ1BgFlGGCCSKAFA
-> ssh-ed25519 lpWvhA gPmCbveLyfreFJBiSiwaA0PUwaPoWR3oxj6bcDCR32c
z9PqoqZB4oExgdGHFczW/GfFXCwUAdX2y/6+OrAsvW4
-> ssh-ed25519 KcJLrw L0AgAq8eYHi4/DmkqpTa6zPachBjzALJDPmTw0ZvZkc
OSeCrAA5cqyO+vldzWhtXqqbn/BMQRkvZMjB5hnDF2E
-> ssh-ed25519 0Pd3rA VwOeP0xx3Dl1pFDeBnqLfMjuvHJo9JLNv1HWP4pYIyo
u00jU8gTl5i9CcPEm8erkzVv8arX5FnMZS3hCYA1TPE
--- kpytaizU3BFiS+wK5Pwb2t09GtV4EZSc0AZexkFxxRE
X<EFBFBD>á(7!ñ@ž%¼Á{â\Dþ'¼–ì¼>åÑš<C391>صÎ
­Hk%h&¿%\$–èìñ=ÊQvìÀ($V/ò×´hËÕÕãOŠöüEÜîÛllb¸—® >݇ì O4ÆU(ä®Ù|᎑þÇ*ß·¦1M<>ÅcËÎ4ûs 9W“±T”ú&Ë.5©+»ʲ×BIQ

View file

@ -1,11 +1,7 @@
let
youwen = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCrIRHcvh0fxYNc0sukl8nSGRU8z1RjRmuc20iuk9TUqAxeew+0pSvY9lU4vshhrcGUe2OKIxgKJ76xdfGRw5ofmmd5Fr4If6tzWAWdE6Jr3J/w58YL6/ISOyRwjTserjWFIaO41y9OuLzf3UtzBF/1zexnGwq2lMJ7MAi0JNJ5O+umgrcnF1BDWyw7ymVkiQTruJ3LV2XgJDpOKQlFnVGKgYyMgVGeGYjiZO9Sj8edq1ZFeEH1jN5TnAdnqsiwhFgZpCrBxFFZKohuQLyH+QaOmBsdgSZwsg4Prndtxp5GTrknupPCgEWJ1rgvykEchYajeWQLxyeW/O/4iSST7VLKS7dgzUHZ5Dxf/QP1iCSeJqCIIJssuIslMK1vYmJZYk098ZDlLrFCLepQqy0YGvZe4OVP4BK4UNu5DKKLTpPNwDnyf1NSNTT2q2TsWXKWBDl1eurX9MBR24ZQEoP0gvcnTKr+2rheOTWJ5asDswEWphp5zQxBjztPGe55H0zjnqk= youwen@demeter";
users = [ youwen ];
demeter = "ssh-rsa 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 root@nixos";
systems = [ demeter ];
keys = import ../authorized_keys.nix;
in
{
"nix_config_github_pat.age".publicKeys = users ++ systems;
"github_ssh_priv_key.age".publicKeys = users ++ systems;
"nix_config_github_pat.age".publicKeys = keys.all;
"github_ssh_priv_key.age".publicKeys = keys.all;
}