nix-infra/config/hosts/valkyrie/secrets.nix

{ ... }:
{
  deployment.keys."wireguard-valkyrie-wg0-privatekey.secret" = {
    keyCommand = [ "env" "GNUPGHOME=/home/yuri/.passinfra_gnupg" "PASSWORD_STORE_DIR=/home/yuri/pass/infra" "pass" "wireguard/valkyrie-wg0-privatekey" ];
    destDir = "/secrets";
    user = "root";
    group = "root";
    permissions = "0640";
    uploadAt = "pre-activation";
  };
  deployment.keys."wireguard-valkyrie-site1-grzb-psk.secret" = {
    keyCommand = [ "env" "GNUPGHOME=/home/yuri/.passinfra_gnupg" "PASSWORD_STORE_DIR=/home/yuri/pass/infra" "pass" "wireguard/valkyrie-site1-grzb/psk" ];
    destDir = "/secrets";
    user = "root";
    group = "root";
    permissions = "0640";
    uploadAt = "pre-activation";
  };
  deployment.keys."wireguard-valkyrie-site2-grzb-psk.secret" = {
    keyCommand = [ "env" "GNUPGHOME=/home/yuri/.passinfra_gnupg" "PASSWORD_STORE_DIR=/home/yuri/pass/infra" "pass" "wireguard/valkyrie-site2-grzb/psk" ];
    destDir = "/secrets";
    user = "root";
    group = "root";
    permissions = "0640";
    uploadAt = "pre-activation";
  };
  deployment.keys."wireguard-valkyrie-site1-jsts-psk.secret" = {
    keyCommand = [ "env" "GNUPGHOME=/home/yuri/.passinfra_gnupg" "PASSWORD_STORE_DIR=/home/yuri/pass/infra" "pass" "wireguard/valkyrie-site1-jsts/psk" ];
    destDir = "/secrets";
    user = "root";
    group = "root";
    permissions = "0640";
    uploadAt = "pre-activation";
  };
  deployment.keys."wireguard-valkyrie-wg1-privatekey.secret" = {
    keyCommand = [ "env" "GNUPGHOME=/home/yuri/.passinfra_gnupg" "PASSWORD_STORE_DIR=/home/yuri/pass/infra" "pass" "wireguard/valkyrie-wg1-privatekey" ];
    destDir = "/secrets";
    user = "root";
    group = "root";
    permissions = "0640";
    uploadAt = "pre-activation";
  };
  deployment.keys."wireguard-valkyrie-mail-1-valkyrie-psk.secret" = {
    keyCommand = [ "env" "GNUPGHOME=/home/yuri/.passinfra_gnupg" "PASSWORD_STORE_DIR=/home/yuri/pass/infra" "pass" "wireguard/valkyrie-mail-1/psk" ];
    destDir = "/secrets";
    user = "root";
    group = "root";
    permissions = "0640";
    uploadAt = "pre-activation";
  };
}