refactor: clean up SSH configuration and remove unused secrets

.gitignore

@@ -1,13 +1,2 @@
-config/ssh/config.d/*
-!config/ssh/config.d/*.gpg
 logs/*
-
-# Don't include secrets in the repository but do include encrypted secrets
-!secrets/**/*.gpg
-secrets/**/*.*
-
-# SHA256 hashes of the encrypted secrets
-*.sha256
-
-# python cache
 **/__pycache__/

config/ansible/tasks/global/symlinks.yml

@@ -13,7 +13,6 @@
   loop:
     - { src: "$DOTFILES_PATH/config/home-manager", dest: "~/.config/home-manager" }
     - { src: "$DOTFILES_PATH/config/ssh/config", dest: "~/.ssh/config" }
-    - { src: "$DOTFILES_PATH/config/ssh/config.d", dest: "~/.ssh/config.d" }
     - { src: "$DOTFILES_PATH/config/starship.toml", dest: "~/.config/starship.toml" }
     - { src: "$DOTFILES_PATH/.bashrc", dest: "~/.bashrc.extra" }
 

config/home-manager/packages/common/secrets.nix

@@ -24,6 +24,21 @@
         path = ".ssh/authorized_keys";
         mode = "0644";
       };
+      personalSshConf = {
+        reference = "op://Dotfiles/SSH Configs/personal";
+        path = ".ssh/config.d/personal.conf";
+        mode = "0644";
+      };
+      workDevSshConf = {
+        reference = "op://Dotfiles/SSH Configs/work-dev";
+        path = ".ssh/config.d/work-dev.conf";
+        mode = "0644";
+      };
+      workProdSshConf = {
+        reference = "op://Dotfiles/SSH Configs/work-prod";
+        path = ".ssh/config.d/work-prod.conf";
+        mode = "0644";
+      };
     };
   };
 }

config/ssh/config.d

@@ -1 +0,0 @@
-../../secrets/ssh_config/

secrets/ssh_config/dev.conf.gpg

@@ -1,9 +0,0 @@
------BEGIN PGP MESSAGE-----
-
-jA0ECQMIpPS1/yWko7r/0sARAZTSBZpuHsFj/kp4a/+6WdO88ekWEaENbymLB5uL
-jNPEf/Bycrl5f2f8M6G/RxB4hSHlhCkHXtkcgsawVOk6XcKMYIqeuGVgbBV0wZUa
-kiPQA6oUhGlqo+y9jwqcI8LIsUN9TQ8rjdBn+StbD6sf0v75A4RTpa2m6uvMqCXF
-XAJJTX+PjA9pNsAe4SRW6f6MqYbB26UIrADWBo1ElSCkgRsPWVbzpOH9obGTvbjp
-o+yT2s7AgXL2rpJvXClrRPSipWLFFTmFvdBLXztWlHE00+M=
-=+i3w
------END PGP MESSAGE-----

secrets/ssh_config/personal.conf.gpg

@@ -1,13 +0,0 @@
------BEGIN PGP MESSAGE-----
-
-jA0ECQMIlkQc0zfKLAP/0sDRAeaD1TJ5ub42HLiJjD4bNooXRL9DK86ytNiyNQUm
-eDEuNLT7KftFK3NB4rkZQDJdSNTYdwc8iQIRkg+iSujR+Igc3m6FXRZKcKvAorFo
-DGX/d/UiUn7lbDuxzLFsi5X5ZDx4FMbNanee0xOLijJDd1IEUbYEQkIPOPHHSqk0
-kcCr7PBrEbmuYNzQgT34tIQemxyYZyqMpSTExI0CIy6Jg87yKiQF7nTSxpJboY7s
-ltu/PDXSR9cyjshdEmJjr9bTZvrod9IEIy4fRmUWuUpT35zIlPAeQarFnNbWhyLI
-UhYBdkFhvypMJ24SjI2k5OyzD/JAWMFnqVHwMvdqo15o+miKv/jreEv0wgmnkMiF
-d0a9H8Ue6gnFfPDxu5iWj8A6zBWTIajJb6tCvdO5GrxjnUFvG/CH8odyPlkm8pPo
-uU8c3WejnGkMDBSddOdj60l/KPkGesK0jxW2T5/WRUYxtp8z5gXtdJpRdEvLqnkp
-B0RqkwbYwGM3aqO2WOmt0rG/N5jSZyD8iAf3iY331bpf/GY=
-=qSxM
------END PGP MESSAGE-----

secrets/ssh_config/prod.conf.gpg

@@ -1,10 +0,0 @@
------BEGIN PGP MESSAGE-----
-
-jA0ECQMIsiQbHNuBgtj/0sAsAa9Xil1jhbtBB+zMJxJNLf7P8aa1GS2yIa70DIRo
-6Y/mB0XGRLhxkt9brZbI70/lkxZObNQtgJDp396SLXIXFQyYW6NPXLtTFx0PHGD+
-1n9KLV3/Th32bPCQrl9FYlD6NEpARuB4weVmJEvh4l4S4CLVwFr4uUnr7MIE4CoM
-k+nPDVnEjE+2+L47waRRFZDDt8HfrKz/I4ZGkc1RgKBUTHVsniDpFW8jmC9YaDmS
-tMvwNZQiWIqWpdad8TLhaTOl2PuCAfJAEvoqRqNbErNhKTpon0pqavf1VR70KM8L
-m8k8cgPWzDsdHgFQHW4=
-=e2CM
------END PGP MESSAGE-----

secrets/yubico/u2f.personal.keys.gpg

@@ -1,10 +0,0 @@
------BEGIN PGP MESSAGE-----
-
-jA0ECQMI2KZiWEw7/db/0sBBAcZCSEM8ieM4GSdQIkHdW7ral3JFJ2SOO1+12xUV
-LbDVqnbDgPvmrju45BITa8CYoho/nfLGUcge1cTln6yBwbwTawz9dUgB9MF5qAzR
-DwLaTuM2RD1W5ZQ6zWreKiDhdW6FE0TcOoaqzODYi5+HbUXgZodWnc6HOTimnGKz
-/m1rU/0oEZXH1f7+aaSQnTO03CKNAAYPoWpEGnWvza960U6b4x++w4C7ZjVP35s9
-8H2KVyhhvDabI+fOsK0w0xt1CAEgpuDBO7czTzXDZbBsGd6gt/FLSk45p4r6zuWp
-mVJ1Yih3OyKqn/5iBMpmTVZmI+vyiZOqKGhDX+7+DCmGXyI=
-=4eTR
------END PGP MESSAGE-----

secrets/yubico/u2f.work.keys.gpg

@@ -1,13 +0,0 @@
------BEGIN PGP MESSAGE-----
-
-jA0ECQMI4xT5Wbwo8YD/0sDLAb+Sj8yb/dWys9K5b2W2omwtbb9jWrEwt4h1maAz
-eGYBZfNCGRE0TCjboru2xjbvEdVbBwGS6q02gToPNjxHvgBcNbG8jceXSSj6Mh+0
-qTR+H8ht22FFu+C6/K0TmmTQ8zc398ZpoCQIrYJQiXuX9fI2w9OwTjfjCOwDPc1+
-Olo3xr1FT/wNP7I281ACAfJzEfxSHjfVjcYijQHDnozEDgoksv//Xt4H0gYyONkf
-/VFeEMGlR3iEYTDKtdgvfzpvEAuOMT/p9FMsOVosDqm7xisYs5eJ6+JK5fbkakB3
-EDSsEJAvfRhsJ370l8PgBismJIzPM6YUs2j31kJrdEHgk9z+hoDDCa4VXyf+6YcS
-uiZwCKHneKY0MmIedOICigoh1VXnKpp4beSbGY5iVlyFbs6W4K+jcc/kEHgHXS3G
-YsLjreXZELt7uT9QE7Bbn4lQAdj4h/Gm+9UgWDQVxhxzYVs5hbC9SVvpGkPINYM1
-ZeUwZEPy/hdNIBqf+bL4/f1eTpjo++HCA79/iiI=
-=T6R6
------END PGP MESSAGE-----