abonerib/bscpkgs
Archived
1
0
Fork 0
forked from rarias/bscpkgs
Code Pull Requests 1 Activity

Add encrypted munge key with agenix

Browse Source
This commit is contained in:
Rodrigo Arias
2023-09-08 19:01:57 +02:00
parent e3e6e7662d
commit 2a0254b684
3 changed files with 15 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

BIN
secrets/munge-key.age Normal file
View File

Binary file not shown.

5
secrets/secrets.nix
View File

@@ -3,11 +3,12 @@ let
adminsKeys = builtins.attrValues keys.admins;
hut = [ keys.hosts.hut ] ++ adminsKeys;
# Only expose ceph keys to safe nodes and admins
ceph = keys.hostGroup.safe ++ adminsKeys;
safe = keys.hostGroup.safe ++ adminsKeys;
in
{
"ovni-token.age".publicKeys = hut;
"nosv-token.age".publicKeys = hut;
"ceph-user.age".publicKeys = ceph;
"ceph-user.age".publicKeys = safe;
"munge-key.age".publicKeys = safe;
}