2024-04-19 22:27:46 -05:00
|
|
|
{
|
|
|
|
|
agenix ? true,
|
|
|
|
|
lib ? import ../lib { },
|
|
|
|
|
}:
|
2024-03-14 03:37:02 -05:00
|
|
|
let
|
|
|
|
|
keys = [
|
|
|
|
|
"age1yubikey1qfnj0k4mkzrn8ef5llwh2sv6hd7ckr0qml3n9hzdpz9c59ypvryhyst87k0"
|
|
|
|
|
"age1ur2lr3z6d2eftgxcalc6s5x9840ew9x43upl9k23wg0ugacrn5as4zl6sj"
|
|
|
|
|
];
|
2024-04-19 22:27:46 -05:00
|
|
|
secrets =
|
|
|
|
|
let
|
|
|
|
|
dir = "files";
|
|
|
|
|
in
|
|
|
|
|
{ };
|
|
|
|
|
in
|
|
|
|
|
if agenix then
|
|
|
|
|
(builtins.listToAttrs (
|
|
|
|
|
builtins.concatMap (secretName: [
|
|
|
|
|
{
|
|
|
|
|
name = builtins.toString secretName;
|
|
|
|
|
value.publicKeys = keys;
|
|
|
|
|
}
|
|
|
|
|
]) (builtins.attrNames secrets)
|
|
|
|
|
))
|
2024-03-14 03:37:02 -05:00
|
|
|
else
|
2024-04-19 22:27:46 -05:00
|
|
|
(lib.recursiveMerge (
|
|
|
|
|
builtins.map (secretName: { age.secrets.${secretName}.file = ./${secrets.${secretName}}; }) (
|
|
|
|
|
builtins.attrNames secrets
|
|
|
|
|
)
|
|
|
|
|
))
|
