Commit 45fef20c1843

Vincent Demeester <vincent@sbr.pm>
2026-02-12 14:51:37
feat(secrets): added okinawa to agenix secrets
Added okinawa host key and included it in the desktops list for access to Red Hat VPN, kerberos, and certificate secrets.
main
1 parent eadfa8a
Changed files (1)
secrets.nix
secrets.nix
@@ -20,9 +20,11 @@ let
   aion = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAXDNi2KtoRU83y/V5OWnMbFWmxwBknPmrNWV4RChE7R"; # ssh-keyscan -q -t ed25519 aion.sbr.pm
   aix = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEoUicDySCGETPAgmI0P3UrgZEXXw3zNsyCIylUP0bML"; # ssh-keyscan -q -t ed25519 aix.sbr.pm
   nagoya = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIfep1SkMsAPHggXFLfEJNzZb7eoihtkqDeQruG+TbhF";
+  okinawa = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM8vCZ0h6geJZt6i5k6chEDZBggoyq91Z+oNSjvVeSfW"; # From globals.nix
   # TODO: kobe
   desktops = [
     kyushu
+    okinawa
   ];
   servers = [
     aion
@@ -46,54 +48,67 @@ in
   "secrets/redhat/krb5.conf.age".publicKeys = users ++ [
     aomi
     kyushu
+    okinawa
   ];
   "secrets/redhat/RHVPN.ovpn.age".publicKeys = users ++ [
     aomi
     kyushu
+    okinawa
   ];
   "secrets/redhat/AMS2.ovpn.age".publicKeys = users ++ [
     aomi
     kyushu
+    okinawa
   ];
   "secrets/redhat/RDU2.ovpn.age".publicKeys = users ++ [
     aomi
     kyushu
+    okinawa
   ];
   "secrets/redhat/BBRQ.ovpn.age".publicKeys = users ++ [
     aomi
     kyushu
+    okinawa
   ];
   "secrets/redhat/ipa.crt.age".publicKeys = users ++ [
     aomi
     kyushu
+    okinawa
   ];
   "secrets/redhat/2022-RH-IT-Root-CA.pem.age".publicKeys = users ++ [
     aomi
     kyushu
+    okinawa
   ];
   "secrets/redhat/Eng-CA.crt.age".publicKeys = users ++ [
     aomi
     kyushu
+    okinawa
   ];
   "secrets/redhat/newca.crt.age".publicKeys = users ++ [
     aomi
     kyushu
+    okinawa
   ];
   "secrets/redhat/oracle_ebs.crt.age".publicKeys = users ++ [
     aomi
     kyushu
+    okinawa
   ];
   "secrets/redhat/pki-ca-chain.crt.age".publicKeys = users ++ [
     aomi
     kyushu
+    okinawa
   ];
   "secrets/redhat/RH_ITW.crt.age".publicKeys = users ++ [
     aomi
     kyushu
+    okinawa
   ];
   "secrets/redhat/win-intermediate-ca.cer.age".publicKeys = users ++ [
     aomi
     kyushu
+    okinawa
   ];
   "secrets/redhat/redhat.pem.age".publicKeys = users ++ systems;
   # Others