Fix pallas deploy

Author: jhh

.envrc

@@ -2,7 +2,7 @@
 # Used by https://direnv.net
 
 # Automatically reload when this file changes
-watch_file lib/devshell.nix
+watch_file nix/devshell.nix
 
 # Load `nix develop`
 use flake

nix/devshell.nix

@@ -16,6 +16,7 @@ pkgs.mkShell {
     pre-commit
     tailwindcss
     perSystem.uv2nix.uv-bin
+    perSystem.agenix.agenix
     watchman
   ];
 

nix/hosts/pallas/aws_secret.age

@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 R4OZVw 61NZ1+OedexMb6o742bb25IAZct7QcE8G8fao6HN/lw
+geNjTh9CvdW7WzaCtsE6shuAo8dRCZo/WFTfPHJkUbQ
+-> ssh-ed25519 eLi0pQ +QH6ECUF6Eg8vmjbd3vXmhQOi4x0lbSwH1f2uGn05k0
++fM/aBydvXsmmFG/U+5M/6jC5lDHIanaBQFfcCRERgM
+--- wgKhE7EpNvF+Tok3ZMZHTLCHya3vmHqa45Y6p3JmT1k
+7z�t^����rУ~%���p�G8�(A~
+Å'G�mR�0O
�s�߹����De�H�{=�nq�K'b���q����Wj��6�BN�<�U��#߆����^Y�����Z�8�x���()��M������jx\��7�{Ʈ��6g

nix/hosts/pallas/secrets.nix

@@ -0,0 +1,17 @@
+let
+  jeff = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPqpWpNJzfzioGYyR9q4wLwPkBrnmc/Gdl6JsO+SUpel";
+
+  # ssh-keyscan <host>
+  pallas = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBeB+n+G1c6c2VZvPlfllS/Hnw7u6S8mn7ILWMK29iwe";
+
+in
+{
+  "aws_secret.age".publicKeys = [
+    jeff
+    pallas
+  ];
+  "strykeforce_website_secrets.age".publicKeys = [
+    jeff
+    pallas
+  ];
+}

nix/hosts/pallas/strykeforce-sync.nix

@@ -1,7 +1,7 @@
 { config, pkgs, ... }:
 {
   age.secrets.aws_credentials = {
-    file = ../../secrets/aws_secret.age;
+    file = ./aws_secret.age;
     path = "/root/.aws/credentials";
   };
 

nix/hosts/pallas/strykeforce-website.nix

@@ -1,7 +1,7 @@
 { config, pkgs, ... }:
 {
   age.secrets.stryker_website_secrets = {
-    file = ../../secrets/strykeforce_website_secrets.age;
+    file = ./strykeforce_website_secrets.age;
   };
   strykeforce.services.website = {
     enable = true;

nix/hosts/pallas/strykeforce_website_secrets.age

@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 R4OZVw YeEJiiOMwa6dJUfevkE5y3DqWhk47njg44l5i6X/dmQ
+rqPUvigLtfdxWs1+43z1ZZZLrckz4kdhvqIroxfVSfw
+-> ssh-ed25519 eLi0pQ s8zFhKz6U5xeUhS4lAknyhTM3JlAY8P09eVqEMr652Y
+hVd0KzfaGbs/SCT0L2essc0gpOBRlntrX0VrNzPdJhw
+--- sPm2oSnndsANWpbTnm7AfOs9jYWP0fn8qe1FWjqnXow
+��X���%�s���6��U)�
+FLj��������p,�,X�J�O����B�}��vĺ���{U�]!���Š����^u�
pdS�`
����G�G��=rdA~k���"zSB��Oⳕ4�	k�S�)0(�}r��z�Mm2)� &*�@�ȕ�+����%.�Of��h"��Aj�x�J�R4�Q���n~ی�x &s�a�?��W�n� ��S�y��yڬF��C�0&eX��`1����X�#�r����*3�k�= ZW��;@�i��uq�_K�%͝�jw�)���K~�c��	Sr��i����6U*:^�Ҕ��<&��PR��4|޿8[|��3�:D{7{�㯛���)���i6��$źэ%���7GB8��