every-channel/every.channel
1
0
Fork 0
Code Releases Activity Actions 2

ci: switch deploy secrets to age key workflow

Browse source
This commit is contained in:
every.channel 2026-02-16 00:59:52 -05:00
parent d6a9af8f1e
commit 4dbd831d0b
No known key found for this signature in database
10 changed files with 186 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

7
secrets.nix
View file

@ -1,9 +1,10 @@
let
# Founder SSH public key (recipient). Safe to commit.
founder = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJCBTSEEcBOhOkf3WF1e8xmblAZHvgTibFsqck2GY8D/";
# Forge automation SSH public key (recipient). Safe to commit.
forge = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFmKJt5+uilix5Ldiaaq1BhrYNjmV5lHcW7D/5inCCnO forge@every.channel";
in
{
"secrets/cloudflare-api-token.age".publicKeys = [ founder ];
"secrets/codeberg-token.age".publicKeys = [ founder ];
"secrets/cloudflare-api-token.age".publicKeys = [ founder forge ];
"secrets/codeberg-token.age".publicKeys = [ founder forge ];
}