From 2864ef0553b488bf28ec337a1de23f40725bab7e Mon Sep 17 00:00:00 2001
From: lyrathorpe <iam@emmathe.dev>
Date: Mon, 6 Jul 2026 13:57:29 +0100
Subject: [PATCH] feat(sssd): agenix recipients scaffold

---
 secrets/secrets.nix | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 secrets/secrets.nix

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
new file mode 100644
index 0000000..0cf6b73
--- /dev/null
+++ b/secrets/secrets.nix
@@ -0,0 +1,15 @@
+let
+  lyrathorpe-mbp = "ssh-ed25519 AAAA_PLACEHOLDER_REPLACE_ME_mbp";
+  lyrathorpe-t400 = "ssh-ed25519 AAAA_PLACEHOLDER_REPLACE_ME_t400";
+  lyrathorpe-macpro31 = "ssh-ed25519 AAAA_PLACEHOLDER_REPLACE_ME_macpro31";
+  lyrathorpe-rpi5 = "ssh-ed25519 AAAA_PLACEHOLDER_REPLACE_ME_rpi5";
+  sssdHosts = [
+    lyrathorpe-mbp
+    lyrathorpe-t400
+    lyrathorpe-macpro31
+    lyrathorpe-rpi5
+  ];
+in
+{
+  "ldap-bind.age".publicKeys = sssdHosts;
+}