002bd382e9
Some checks failed
Cache: Publish Nix / Publish Nix Cache (push) Waiting to run
Build Rust / Cargo Test (push) Successful in 4m14s
Build Site / Next.js Build (push) Failing after 6s
Infra: OpenTofu / OpenTofu (grafana) (push) Successful in 5s
Lint Governance / BEP Metadata (push) Successful in 0s
Build: Android / Android Rust Core Stub (push) Failing after 23s
41 lines
2.6 KiB
Nix
41 lines
2.6 KiB
Nix
let
|
|
conradev = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBueQxNbP2246pxr/m7au4zNVm+ShC96xuOcfEcpIjWZ";
|
|
contact = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO42guJ5QvNMw3k6YKWlQnjcTsc+X4XI9F2GBtl8aHOa";
|
|
agent = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEN0+tRJy7Y2DW0uGYHb86N2t02WyU5lDNX6FaxBF/G8 agent@burrow.net";
|
|
jett = builtins.replaceStrings [ "\n" ] [ "" ] (builtins.readFile ./nixos/keys/jett_at_burrow_net.pub);
|
|
burrowForgeHost = "age1quxf27gnun0xghlnxf3jrmqr3h3a3fzd8qxpallsaztd2u74pdfq9e7w9l";
|
|
burrowForgeRecipients = [
|
|
contact
|
|
agent
|
|
jett
|
|
burrowForgeHost
|
|
];
|
|
uiTestRecipients = burrowForgeRecipients ++ [ conradev ];
|
|
releaseRecipients = burrowForgeRecipients ++ [ conradev ];
|
|
in
|
|
{
|
|
"secrets/apple/appstore-connect.env.age".publicKeys = releaseRecipients;
|
|
"secrets/apple/distribution-signing.env.age".publicKeys = releaseRecipients;
|
|
"secrets/apple/sparkle.env.age".publicKeys = releaseRecipients;
|
|
"secrets/infra/authentik.env.age".publicKeys = burrowForgeRecipients;
|
|
"secrets/infra/authentik-google-client-id.age".publicKeys = burrowForgeRecipients;
|
|
"secrets/infra/authentik-google-client-secret.age".publicKeys = burrowForgeRecipients;
|
|
"secrets/infra/authentik-google-account-map.json.age".publicKeys = burrowForgeRecipients;
|
|
"secrets/infra/authentik-google-wif-client-secret.age".publicKeys = burrowForgeRecipients;
|
|
"secrets/infra/authentik-ui-test-password.age".publicKeys = uiTestRecipients;
|
|
"secrets/infra/forgejo-oidc-client-secret.age".publicKeys = burrowForgeRecipients;
|
|
"secrets/infra/grafana-admin-password.age".publicKeys = burrowForgeRecipients;
|
|
"secrets/infra/grafana-secret-key.age".publicKeys = burrowForgeRecipients;
|
|
"secrets/infra/grafana-oidc-client-secret.age".publicKeys = burrowForgeRecipients;
|
|
"secrets/infra/forgejo-nsc-autoscaler-config.age".publicKeys = burrowForgeRecipients;
|
|
"secrets/infra/forgejo-nsc-dispatcher-config.age".publicKeys = burrowForgeRecipients;
|
|
"secrets/infra/forgejo-nsc-token.age".publicKeys = burrowForgeRecipients;
|
|
"secrets/infra/headscale-oidc-client-secret.age".publicKeys = burrowForgeRecipients;
|
|
"secrets/infra/linear-scim-token.age".publicKeys = burrowForgeRecipients;
|
|
"secrets/infra/tailscale-oidc-client-secret.age".publicKeys = burrowForgeRecipients;
|
|
"secrets/infra/zulip-postgres-password.age".publicKeys = burrowForgeRecipients;
|
|
"secrets/infra/zulip-memcached-password.age".publicKeys = burrowForgeRecipients;
|
|
"secrets/infra/zulip-rabbitmq-password.age".publicKeys = burrowForgeRecipients;
|
|
"secrets/infra/zulip-redis-password.age".publicKeys = burrowForgeRecipients;
|
|
"secrets/infra/zulip-secret-key.age".publicKeys = burrowForgeRecipients;
|
|
}
|