petersweb-infra/nixos/secrets/default.nix
Philip Peterson 85b8479e44 fix secrets
2026-06-04 22:12:55 -07:00

27 lines
937 B
Nix

let
mainframePublicKey = builtins.readFile ../keys/mainframe.pub;
in {
# This .age file should contain the following environment variables:
# NEARLYFREESPEECH_API_KEY
# NEARLYFREESPEECH_LOGIN
"./nearlyfreespeech.age".publicKeys = [mainframePublicKey];
# WEBDAV_PASSWORD
"./webdav.age".publicKeys = [mainframePublicKey];
# ANTHROPIC_API_KEY
"./anthropic-api-key.age".publicKeys = [mainframePublicKey];
# POSTMARK_API_KEY, POSTMARK_SERVER_TOKEN
"./postmark.age".publicKeys = [mainframePublicKey];
# TOKEN=<forgejo runner registration token from Forgejo admin>
"./forgejo-runner-token.age".publicKeys = [mainframePublicKey];
# VNC_PASSWORD=<vnc session password>
"./vnc-password.age".publicKeys = [mainframePublicKey];
# htpasswd-format credentials for nginx basic auth on vnc.quinefoundation.com
# Generate with: htpasswd -n <username>
"./vnc-htpasswd.age".publicKeys = [mainframePublicKey];
}