diff --git a/home/agenix.nix b/home/agenix.nix index 645744c..204cc65 100644 --- a/home/agenix.nix +++ b/home/agenix.nix @@ -3,7 +3,8 @@ # TODO: Get a token2 and set up https://github.com/oddlama/agenix-rekey age.identityPaths = [ "/var/lib/persistent/host_id_ed25519" ]; - age.secrets.access-tokens-github.file = ../secrets/gh.age; + age.secrets.access-tokens-github.file = ../secrets/gh_argstr.age; + age.secrets.obvps-id = { file = ../secrets/1bvps.age; path = "/home/rhea/.ssh/id_1bvps"; @@ -11,6 +12,13 @@ symlink = false; }; + age.secrets.gh_etwas = { + file = ../secrets/gh_token.age; + path = "/home/rhea/.ssh/id_gh_etwas"; + owner = "rhea"; + symlink = false; + }; + age.secrets.gcd_etwas = { file = ../secrets/gcd_etwas.age; path = "/home/rhea/.ssh/id_gcd_etwas"; diff --git a/home/ssh.nix b/home/ssh.nix index db439dd..e4c6130 100644 --- a/home/ssh.nix +++ b/home/ssh.nix @@ -9,6 +9,7 @@ hostname = "178.254.43.196"; identityFile = [ "/home/rhea/.ssh/id_1bvps" ]; }; + "gcd-etwas" = { host = "gcd-etwas"; hostname = "git.catgirl.dog"; @@ -16,6 +17,14 @@ user = "git"; port = 222; }; + + "gh-etwas" = { + host = "gh-etwas"; + hostname = "github.com"; + identityFile = [ "/home/rhea/.ssh/id_gh_etwas" ]; + user = "git"; + port = 22; + }; }; }; } \ No newline at end of file diff --git a/secrets/gh.age b/secrets/gh.age deleted file mode 100644 index 544340e..0000000 --- a/secrets/gh.age +++ /dev/null @@ -1,5 +0,0 @@ -age-encryption.org/v1 --> ssh-ed25519 7JS6dg I9bdNrtj0UzjlrVWOjgVomgWprX+KAaL4uITS9j163I -8vEaIAqFwmUKXbBskafWr15tqYIfmWjKn9g61F4y6F8 ---- ToUNScc7K59kI8y+SR5e3RxTu16uGSsvd65tqomiOVc -VoXZζG}ZmӠ,*۳}u8 \^I /T"u s\CG hm>$]$H"<.tbOֱ!jу"@o=ث_o]z9~qO \ No newline at end of file diff --git a/secrets/gh_argstr.age b/secrets/gh_argstr.age new file mode 100644 index 0000000..d7606ab Binary files /dev/null and b/secrets/gh_argstr.age differ diff --git a/secrets/gh_token.age b/secrets/gh_token.age new file mode 100644 index 0000000..102ee84 Binary files /dev/null and b/secrets/gh_token.age differ diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 48c7aa5..95c51bc 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -3,7 +3,8 @@ let systems = [ rhea-laptop ]; in { - "gh.age".publicKeys = [ rhea-laptop ]; + "gh_argstr.age".publicKeys = [ rhea-laptop ]; + "gh_token.age".publicKeys = [ rhea-laptop ]; "1bvps.age".publicKeys = [ rhea-laptop ]; "gcd_etwas.age".publicKeys = [ rhea-laptop ]; "sign_etwas.age".publicKeys = [ rhea-laptop ];