nixfiles/hosts/tablet/secrets-db.nix

{ }: {
  # Manually Created, Not Stored In Vault
  usb_encryption_passphrase = {
    user = "root";
    group = "root";
    permissions = "660";
    path = "/secrets/usb_encryption_passphrase";
  };
  music_stream_password = {
    user = "chaos";
    group = "users";
    permissions = "660";
    path = "/secrets/music_stream_password";
  };
  wg_priv = {
    user = "root";
    group = "root";
    permissions = "660";
    path = "/secrets/wg_priv";
  };
  wg_preshared_hetzner-vm = {
    user = "root";
    group = "root";
    permissions = "660";
    path = "/secrets/wg_preshared_hetzner-vm";
  };
  wg_preshared_vault = {
    user = "root";
    group = "root";
    permissions = "660";
    path = "/secrets/wg_preshared_vault";
  };
  wg_preshared_storage = {
    user = "root";
    group = "root";
    permissions = "660";
    path = "/secrets/wg_preshared_storage";
  };
}