Add strangerbot to allowed signers

This commit is contained in:
Nathan McCarty 2023-05-15 23:31:50 -04:00
parent 3a5f177b24
commit aa71899e97
Signed by: thatonelutenist
SSH Key Fingerprint: SHA256:hwQEcmak9E6sdU9bXc98RHw/Xd1AhpB5HZT7ZSVJkRM
1 changed files with 13 additions and 6 deletions

View File

@ -1,4 +1,4 @@
rec { with builtins; rec {
keys = { keys = {
# yubikey ssh key # yubikey ssh key
"yubikey" = { "yubikey" = {
@ -46,10 +46,17 @@ rec {
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICILeBcpPVs12pDnsOPyDVwnwReCbrqzXMF+cV5bWCCa nathan@fusion"; "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICILeBcpPVs12pDnsOPyDVwnwReCbrqzXMF+cV5bWCCa nathan@fusion";
}; };
}; };
list = map (x: x.key) (builtins.attrValues keys); signingKeys = {
allowedSigners = builtins.concatStringsSep "\n" (map (x: # Git automation bot
"strangerbot" = {
key =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINC2cOHgeJaUfwp9DMX6oeIaSfD7pDKN3PUo2+6prC7N strangerbot@oracles";
emails = [ "bot@stranger.systems" ];
};
};
list = map (x: x.key) (attrValues keys);
allowedSigners = concatStringsSep "\n" (map (x:
"${ "${
builtins.concatStringsSep "," concatStringsSep "," (x.emails or [ "*@mccarty.io" "*@stranger.systems" ])
(x.emails or [ "*@mccarty.io" "*@stranger.systems" ]) } ${x.key}") ((attrValues keys) ++ (attrValues signingKeys)));
} ${x.key}") (builtins.attrValues keys));
} }