Agenix + Consul

secrets/consul.d/agent-token-reykjavik.json.age

@@ -0,0 +1,5 @@
+age-encryption.org/v1
+-> ssh-ed25519 GWuf0Q WZXSz/V10nOYp7jSK2WapD0IIoV5odZnAQX4bfVG6Hk
+K6ESj+ABGvRh6U6/e0NT/5rObkGfRBAQU8ujOEemM3g
+--- PHbxtNcEtz+cVZPIbYdu3jjsoVBf2fbFIqB0gSZ2DDk
+“á}i4ìßùÅjR¨µÕÿH_y=2'TœJ~Ø1zL0  ñš‰(N

secrets/consul.d/gossip.json.age

@@ -0,0 +1,5 @@
+age-encryption.org/v1
+-> ssh-ed25519 GWuf0Q PZ9afqz3THF8vuV1bBzKU2QQ5j0cA7TriznFu1/eF1Q
+sk8JAVRjCyhjjkebWtqJaxoacxiYSdir7w9Ep9ch0/4
+--- lBViOk0i5qkicV2kqyGSI/fiEjtyrGqKAoUIzz3V9lQ
+Ã8"ŸVô

secrets/secrets.nix

@@ -0,0 +1,11 @@
+let
+  id-reykjavik = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFwwpKfxNmUyBoPZqz1jYc6arCdHPvJrEsBN49m/P3By";
+  id-hvannadal = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICy1ocZywBvFHpIj+FvaC7QspRWuLXjy6fwakq9t+0Ev";
+in
+{
+  # -- Consul -------------------------------
+  "consul.d/gossip.json.age".publicKeys = [id-reykjavik];
+  "consul.d/consul-agent-ca.pem.age".publicKeys = [id-reykjavik];
+  # Agent tokens
+  "consul.d/agent-token-reykjavik.json.age".publicKeys = [id-reykjavik];
+}

secrets/ssh-keys/id_hvannadal.pub

@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICy1ocZywBvFHpIj+FvaC7QspRWuLXjy6fwakq9t+0Ev marc@reykjavik

secrets/ssh-keys/id_reykjavik.pub

@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFwwpKfxNmUyBoPZqz1jYc6arCdHPvJrEsBN49m/P3By marc@sastre.cat