commit c6f6303c7878e4e33c4112a4ce665177a6752faf
author Samuel Shuert <me@thecoded.prof> Tue Dec 31 11:09:23 2024 -0500
committer Skyler Grey <minion@clicks.codes> Wed Jan 22 10:31:07 2025 +0000
tree b8b28ba235b684df9c1bd5753a0889c4e7bc1c38
parent 57b0e77158effae1b04c466701175dafbd25dfb3

muliple(teal): Update teal

feat: Add a.starrysky.blog
feat: re-key keys with shorthairNanoResident age key
chore: update packages
fix: redo headscale options
Change-Id: I27cab9abc4622f0a69811e35d4e0eb87af29b42b
Reviewed-on: https://git.clicks.codes/c/Infra/NixFiles/+/981
Reviewed-by: Skyler Grey <minion@clicks.codes>
Tested-by: Skyler Grey <minion@clicks.codes>

modules/nixos/clicks/security/secrets/default.nix

diff --git a/modules/nixos/clicks/security/secrets/default.nix b/modules/nixos/clicks/security/secrets/default.nix
index 8a120f9..b165d7b 100644
--- a/modules/nixos/clicks/security/secrets/default.nix
+++ b/modules/nixos/clicks/security/secrets/default.nix
@@ -16,10 +16,14 @@
 
   config.age = lib.optionalAttrs cfg.enable {
     rekey = {
-      masterIdentities = [
-        "${inputs.self}/secrets/keys/minion/collabora-yubikey.pub"
-        "${inputs.self}/secrets/keys/minion/tiny-yubikey.pub"
-        "${inputs.self}/secrets/keys/minion/iyubikey.pub"
+      masterIdentities =
+      let
+        keyPath = "${inputs.self}/secrets/keys";
+      in  [
+        "${keyPath}/minion/collabora-yubikey.pub"
+        "${keyPath}/minion/tiny-yubikey.pub"
+        "${keyPath}/minion/iyubikey.pub"
+        "${keyPath}/coded/ShorthairNano.pub"
       ];
       storageMode = "local";
       generatedSecretsDir = lib.snowfall.fs.get-snowfall-file "secrets/generated/${config.networking.hostName}";