summaryrefslogtreecommitdiff
path: root/secrets
diff options
context:
space:
mode:
authorseth <[email protected]>2023-08-03 03:31:35 -0400
committerseth <[email protected]>2023-08-03 03:33:16 -0400
commit527cea875ab37a7469975cd09906f424b988175c (patch)
tree87bb66dbc454cd2ac2657e3216af34d2c3e01062 /secrets
parent234801e89d681c2206ac17f00707ed76ea7bf725 (diff)
hosts/atlas+p-body: use cloudflare dns for acme
Diffstat (limited to 'secrets')
-rw-r--r--secrets/secrets.nix1
-rw-r--r--secrets/shared/cloudflareApiKey.age15
2 files changed, 16 insertions, 0 deletions
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index f74dabc..40a4e79 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -8,6 +8,7 @@ let
in {
"shared/rootPassword.age".publicKeys = main;
"shared/sethPassword.age".publicKeys = main;
+ "shared/cloudflareApiKey.age".publicKeys = atlas ++ (builtins.filter (v: !(builtins.elem v main)) p-body);
"hosts/atlas/rootPassword.age".publicKeys = atlas;
"hosts/atlas/userPassword.age".publicKeys = atlas;
diff --git a/secrets/shared/cloudflareApiKey.age b/secrets/shared/cloudflareApiKey.age
new file mode 100644
index 0000000..fe5c627
--- /dev/null
+++ b/secrets/shared/cloudflareApiKey.age
@@ -0,0 +1,15 @@
+-----BEGIN AGE ENCRYPTED FILE-----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+-----END AGE ENCRYPTED FILE-----