rarias/jungle
2
0
Fork 3
Code Issues 57 Pull Requests 7 Actions Packages Projects Releases Wiki Activity

Add encrypted munge key with agenix

Browse Source
This commit is contained in:
Rodrigo Arias
2023-09-08 19:01:57 +02:00
parent e3e6e7662d
commit 2a0254b684
3 changed files with 15 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
secrets/secrets.nix
View File

@@ -3,11 +3,12 @@ let
adminsKeys = builtins.attrValues keys.admins;
hut = [ keys.hosts.hut ] ++ adminsKeys;
# Only expose ceph keys to safe nodes and admins
ceph = keys.hostGroup.safe ++ adminsKeys;
safe = keys.hostGroup.safe ++ adminsKeys;
in
{
"ovni-token.age".publicKeys = hut;
"nosv-token.age".publicKeys = hut;
"ceph-user.age".publicKeys = ceph;
"ceph-user.age".publicKeys = safe;
"munge-key.age".publicKeys = safe;
}