nixfiles/hosts/hetzner-vm/secrets-db.nix

{ }: {
  mpd_control_password = {
    user = "mpd";
    group = "mpd";
    permissions = "660";
    path = "/secrets/mpd_control_password";
  };
  music_stream_passwd = {
    user = "nginx";
    group = "nginx";
    permissions = "660";
    path = "/secrets/music_stream_passwd";
  };
  chaos_mail_passwd = {
    user = "dovecot2";
    group = "dovecot2";
    permissions = "660";
    path = "/secrets/chaos_mail_passwd";
  };
  gitlab_env = {
    user = "gitlab_artifacts_sync";
    group = "gitlab_artifacts_sync";
    permissions = "660";
    path = "/secrets/gitlab_env";
  };
  restic_password = {
    user = "root";
    group = "root";
    permissions = "660";
    path = "/secrets/restic_password";
  };
  restic_env = {
    user = "root";
    group = "root";
    permissions = "660";
    path = "/secrets/restic_env";
  };
  wg_privkey = {
    user = "root";
    group = "root";
    permissions = "660";
    path = "/secrets/wg_privkey";
  };
  wg_preshared_tablet = {
    user = "root";
    group = "root";
    permissions = "660";
    path = "/secrets/wg_preshared_tablet";
  };
  wg_preshared_vault = {
    user = "root";
    group = "root";
    permissions = "660";
    path = "/secrets/wg_preshared_vault";
  };
  wg_preshared_storage = {
    user = "root";
    group = "root";
    permissions = "660";
    path = "/secrets/wg_preshared_storage";
  };
  wg_preshared_iphone8 = {
    user = "root";
    group = "root";
    permissions = "660";
    path = "/secrets/wg_preshared_iphone8";
  };
}