every-channel/every.channel
1
0
Fork 0
Code Releases Activity Actions 2

dev: import plaintext token into agenix secret

Browse source
This commit is contained in:
every.channel 2026-02-15 17:54:36 -05:00
parent 7b69f6200f
commit 223272db7d
No known key found for this signature in database
5 changed files with 93 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

6
secrets/README.md
View file

@ -21,15 +21,13 @@ nix develop
Encrypt (create) a secret:
```sh
cd secrets
agenix -e cloudflare-api-token.age
agenix -e secrets/cloudflare-api-token.age
```
Decrypt (inspect) a secret:
```sh
cd secrets
agenix -d cloudflare-api-token.age
agenix -d secrets/cloudflare-api-token.age
```
## Decryption identity

5
secrets/codeberg-token.age Normal file
View file

@ -0,0 +1,5 @@
age-encryption.org/v1
-> ssh-ed25519 29OJ4A G6byj6PhWofxSh8K5FGSqBs5W5uKtyJ2MGY1JFb+STc
d25eWVNmz2+0zKVVRZ/Pib4YZClhJrML6s3hbLh9rMU
--- t/6aoMSRLI8vay71VugNOGwKHjHteiC+SinD6gQARYM
¹ˆ8ùEÉâò /‚³?ᢿw ÝØJlSñæäíz<C3AD>i– 8Ç)†äÿƒ`ã;Bæ4LåÑT„Àö?£;ãÀzÇšÐé\

9
secrets/secrets.nix
View file

@ -1,9 +0,0 @@
let
# Founder SSH public key (recipient). Safe to commit.
founder = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJCBTSEEcBOhOkf3WF1e8xmblAZHvgTibFsqck2GY8D/";
in
{
"cloudflare-api-token.age".publicKeys = [ founder ];
"codeberg-token.age".publicKeys = [ founder ];
}