eon secondarying sirref.org

Changed files
+12 -2
hosts
secrets
+11 -2
hosts/owl/default.nix
···
owner = "eon";
group = "eon";
};
-
services.eon.capnpSecretKeyFile = config.age.secrets.eon-capnp.path;
-
services.eon.prod = false;
+
age.secrets.eon-sirref-primary = {
+
file = ../../secrets/eon-sirref-primary.cap.age;
+
mode = "770";
+
owner = "eon";
+
group = "eon";
+
};
+
services.eon = {
+
capnpSecretKeyFile = config.age.secrets.eon-capnp.path;
+
primaries = [ config.age.secrets.eon-sirref-primary.path ];
+
prod = false;
+
};
security.acme-eon = {
acceptTerms = true;
secrets/eon-sirref-primary.cap.age

This is a binary file and will not be displayed.

+1
secrets/secrets.nix
···
"headscale.age".publicKeys = user ++ [ owl ];
"eon-capnp.age".publicKeys = user ++ [ owl ];
"eon-vpn.freumh.org.cap.age".publicKeys = user ++ [ elephant ];
+
"eon-sirref-primary.cap.age".publicKeys = user ++ [ owl ];
}