101 lines
3.1 KiB
Nix
101 lines
3.1 KiB
Nix
{ keyCommandEnv, ... }:
|
|
{
|
|
deployment.keys = {
|
|
"wireguard-valkyrie-mail-1-mail-1-psk.secret" = {
|
|
keyCommand = keyCommandEnv ++ [ "pass" "wireguard/valkyrie-mail-1/psk" ];
|
|
destDir = "/secrets";
|
|
user = "root";
|
|
group = "systemd-network";
|
|
permissions = "0640";
|
|
uploadAt = "pre-activation";
|
|
};
|
|
"wireguard-mail-1-wg0-privatekey.secret" = {
|
|
keyCommand = keyCommandEnv ++ [ "pass" "wireguard/mail-1-wg0-privatekey" ];
|
|
destDir = "/secrets";
|
|
user = "root";
|
|
group = "systemd-network";
|
|
permissions = "0640";
|
|
uploadAt = "pre-activation";
|
|
};
|
|
"mail-fiona-grzb-de.secret" = {
|
|
keyCommand = keyCommandEnv ++ [ "pass" "mail/fiona-grzb-de" ];
|
|
destDir = "/secrets";
|
|
user = "root";
|
|
group = "root";
|
|
permissions = "0640";
|
|
uploadAt = "pre-activation";
|
|
};
|
|
"mail-yuri-nekover-se.secret" = {
|
|
keyCommand = keyCommandEnv ++ [ "pass" "mail/yuri-nekover-se" ];
|
|
destDir = "/secrets";
|
|
user = "root";
|
|
group = "root";
|
|
permissions = "0640";
|
|
uploadAt = "pre-activation";
|
|
};
|
|
"mail-mio-vs-grzb-de.secret" = {
|
|
keyCommand = keyCommandEnv ++ [ "pass" "mail/mio-vs-grzb-de" ];
|
|
destDir = "/secrets";
|
|
user = "root";
|
|
group = "root";
|
|
permissions = "0640";
|
|
uploadAt = "pre-activation";
|
|
};
|
|
"mail-fubuki-wg-grzb-de.secret" = {
|
|
keyCommand = keyCommandEnv ++ [ "pass" "mail/fubuki-wg-grzb-de" ];
|
|
destDir = "/secrets";
|
|
user = "root";
|
|
group = "root";
|
|
permissions = "0640";
|
|
uploadAt = "pre-activation";
|
|
};
|
|
"mail-cloud-nekover-se.secret" = {
|
|
keyCommand = keyCommandEnv ++ [ "pass" "mail/cloud-nekover-se" ];
|
|
destDir = "/secrets";
|
|
user = "root";
|
|
group = "root";
|
|
permissions = "0640";
|
|
uploadAt = "pre-activation";
|
|
};
|
|
"mail-status-nekover-se.secret" = {
|
|
keyCommand = keyCommandEnv ++ [ "pass" "mail/status-nekover-se" ];
|
|
destDir = "/secrets";
|
|
user = "root";
|
|
group = "root";
|
|
permissions = "0640";
|
|
uploadAt = "pre-activation";
|
|
};
|
|
"mail-matrix-nekover-se.secret" = {
|
|
keyCommand = keyCommandEnv ++ [ "pass" "mail/matrix-nekover-se" ];
|
|
destDir = "/secrets";
|
|
user = "root";
|
|
group = "root";
|
|
permissions = "0640";
|
|
uploadAt = "pre-activation";
|
|
};
|
|
"mail-social-nekover-se.secret" = {
|
|
keyCommand = keyCommandEnv ++ [ "pass" "mail/social-nekover-se" ];
|
|
destDir = "/secrets";
|
|
user = "root";
|
|
group = "root";
|
|
permissions = "0640";
|
|
uploadAt = "pre-activation";
|
|
};
|
|
"mail-id-nekover-se.secret" = {
|
|
keyCommand = keyCommandEnv ++ [ "pass" "mail/id-nekover-se" ];
|
|
destDir = "/secrets";
|
|
user = "root";
|
|
group = "root";
|
|
permissions = "0640";
|
|
uploadAt = "pre-activation";
|
|
};
|
|
"mail-forgejo-nekover-se.secret" = {
|
|
keyCommand = keyCommandEnv ++ [ "pass" "mail/forgejo-nekover-se" ];
|
|
destDir = "/secrets";
|
|
user = "root";
|
|
group = "root";
|
|
permissions = "0640";
|
|
uploadAt = "pre-activation";
|
|
};
|
|
};
|
|
}
|