Give myself access to non-critical infra
I'm going to be working on <https://github.com/NixOS/infra/issues/485>. This will give me the power to do most of the work there, except for deploying the relevant DNS changes with Terraform.
Jeremy Fleischman committed
Sep 30, 2024 at 14:37 UTC
7699672a70c3f565b26bcacbaffdc167b7a55e93
2 files changed
+4
-2
non-critical-infra/README.md
+1
-1
@@ -16,4 +16,4 @@ Come and talk to us on matrix: #infra:nixos.org
16
## For the contributors
17
18
### Secret access
19
-Secret access is on a "need to have" basis. If you think you need access to the secrets, please add you key to the `.sops.yaml` file on a PR and ping people that already have access for them to run the `updatekeys` command.
19
+Secret access is on a "need to have" basis. If you think you need access to the secrets, please add your key to the `.sops.yaml` file on a PR and ping people that already have access for them to run the `updatekeys` command.
ssh-keys.nix
+3
-1
@@ -15,6 +15,8 @@ rec {
15
mic92-turingmachine = "sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIEVSsc5mlP8aWiUVwWWM3gKlB5LHVpmKSifnDyox/BnVAAAABHNzaDo= yubikey1";
16
mic92-evo = "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBCsjXKHCkpQT4LhWIdT0vDM/E/3tw/4KHTQcdJhyqPSH0FnwC8mfP2N9oHYFa2isw538kArd5ZMo5DD1ujL5dLk= ssh@secretive.Joerg’s-Laptop.local";
17
18
+ jfly = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIImw0Xc1buEQ9WOskyGGeg3QwdbU7DTUQBiu02fObDlm jfly";
19
+
20
infra-core = [
21
edef
22
hexa-gaia
@@ -25,7 +27,7 @@ rec {
27
mic92-evo
28
];
29
28
- infra = infra-core;
30
+ infra = infra-core ++ [ jfly ];
31
32
machines = {
33
haumea = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBamzRwZmoLjBFoNruGSVJEahk02Ku7NrBOmqcRWxcPm";