53 lines
1.7 KiB
Nix
53 lines
1.7 KiB
Nix
{ keyCommandEnv, ... }:
|
|
{
|
|
deployment.keys = {
|
|
"wireguard-valkyrie-wg0-privatekey.secret" = {
|
|
keyCommand = keyCommandEnv ++ [ "pass" "wireguard/valkyrie-wg0-privatekey" ];
|
|
destDir = "/secrets";
|
|
user = "root";
|
|
group = "root";
|
|
permissions = "0640";
|
|
uploadAt = "pre-activation";
|
|
};
|
|
"wireguard-valkyrie-site1-grzb-psk.secret" = {
|
|
keyCommand = keyCommandEnv ++ [ "pass" "wireguard/valkyrie-site1-grzb/psk" ];
|
|
destDir = "/secrets";
|
|
user = "root";
|
|
group = "root";
|
|
permissions = "0640";
|
|
uploadAt = "pre-activation";
|
|
};
|
|
"wireguard-valkyrie-site2-grzb-psk.secret" = {
|
|
keyCommand = keyCommandEnv ++ [ "pass" "wireguard/valkyrie-site2-grzb/psk" ];
|
|
destDir = "/secrets";
|
|
user = "root";
|
|
group = "root";
|
|
permissions = "0640";
|
|
uploadAt = "pre-activation";
|
|
};
|
|
"wireguard-valkyrie-site1-jsts-psk.secret" = {
|
|
keyCommand = keyCommandEnv ++ [ "pass" "wireguard/valkyrie-site1-jsts/psk" ];
|
|
destDir = "/secrets";
|
|
user = "root";
|
|
group = "root";
|
|
permissions = "0640";
|
|
uploadAt = "pre-activation";
|
|
};
|
|
"wireguard-valkyrie-wg1-privatekey.secret" = {
|
|
keyCommand = keyCommandEnv ++ [ "pass" "wireguard/valkyrie-wg1-privatekey" ];
|
|
destDir = "/secrets";
|
|
user = "root";
|
|
group = "root";
|
|
permissions = "0640";
|
|
uploadAt = "pre-activation";
|
|
};
|
|
"wireguard-valkyrie-mail-1-valkyrie-psk.secret" = {
|
|
keyCommand = keyCommandEnv ++ [ "pass" "wireguard/valkyrie-mail-1/psk" ];
|
|
destDir = "/secrets";
|
|
user = "root";
|
|
group = "root";
|
|
permissions = "0640";
|
|
uploadAt = "pre-activation";
|
|
};
|
|
};
|
|
}
|