dev: import plaintext token into agenix secret

This commit is contained in:
every.channel 2026-02-15 17:54:36 -05:00
parent 7b69f6200f
commit 223272db7d
No known key found for this signature in database
5 changed files with 93 additions and 6 deletions

9
secrets.nix Normal file
View file

@ -0,0 +1,9 @@
let
# Founder SSH public key (recipient). Safe to commit.
founder = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJCBTSEEcBOhOkf3WF1e8xmblAZHvgTibFsqck2GY8D/";
in
{
"secrets/cloudflare-api-token.age".publicKeys = [ founder ];
"secrets/codeberg-token.age".publicKeys = [ founder ];
}