diff --git a/modules/linux/nixos/secrets.nix b/modules/linux/nixos/secrets.nix index f6cd305..8a881e7 100644 --- a/modules/linux/nixos/secrets.nix +++ b/modules/linux/nixos/secrets.nix @@ -19,6 +19,9 @@ in { wg-home = { file = ../../../secrets/wg-home.age; }; + wg-ymir-home = { + file = ../../../secrets/wg-ymir-home.age; + }; crony-passwd = { file = ../../../secrets/crony-passwd-desktop.age; }; diff --git a/modules/linux/nixos/wireguard.nix b/modules/linux/nixos/wireguard.nix index f610aef..c2d467c 100644 --- a/modules/linux/nixos/wireguard.nix +++ b/modules/linux/nixos/wireguard.nix @@ -15,7 +15,8 @@ }; networking.wg-quick.interfaces.wg1 = { autostart = false; - configFile = "${config.age.secrets.wg-home.path}"; + # configFile = "${config.age.secrets.wg-home.path}"; + configFile = "${config.age.secrets.wg-ymir-home.path}"; }; }; } diff --git a/modules/servers/tyr/default.nix b/modules/servers/tyr/default.nix index 37a8237..0f27b60 100644 --- a/modules/servers/tyr/default.nix +++ b/modules/servers/tyr/default.nix @@ -3,5 +3,7 @@ ./syncthing.nix ./glance.nix ./wallos.nix + ./wireguard.nix + ./secrets.nix ]; } diff --git a/modules/servers/tyr/secrets.nix b/modules/servers/tyr/secrets.nix new file mode 100644 index 0000000..fcdf5c8 --- /dev/null +++ b/modules/servers/tyr/secrets.nix @@ -0,0 +1,9 @@ +{ + age = { + secrets = { + wg-tyr = { + file = ../../../secrets/wg-tyr.age; + }; + }; + }; +} diff --git a/modules/servers/tyr/wireguard.nix b/modules/servers/tyr/wireguard.nix new file mode 100644 index 0000000..5dd8270 --- /dev/null +++ b/modules/servers/tyr/wireguard.nix @@ -0,0 +1,17 @@ +{config, ...}: { + networking = { + nat = { + enable = true; + enableIPv6 = true; + externalInterface = "enp1s0"; + internalInterfaces = ["wg0"]; + }; + firewall = { + allowedTCPPorts = [53]; + allowedUDPPorts = [53 51820]; + }; + wg-quick.interfaces.wg0.configFile = "${config.age.secrets.wg-tyr.path}"; + }; + + boot.kernel.sysctl."net.ipv4.ip_forward" = 1; +} diff --git a/secrets/conduit.age b/secrets/conduit.age index 020474a..e2b7158 100644 Binary files a/secrets/conduit.age and b/secrets/conduit.age differ diff --git a/secrets/crony-passwd-desktop.age b/secrets/crony-passwd-desktop.age index 998bd49..95926f4 100644 Binary files a/secrets/crony-passwd-desktop.age and b/secrets/crony-passwd-desktop.age differ diff --git a/secrets/crony-passwd-servers.age b/secrets/crony-passwd-servers.age index e2de5ad..7317ee5 100644 Binary files a/secrets/crony-passwd-servers.age and b/secrets/crony-passwd-servers.age differ diff --git a/secrets/forgejo-db.age b/secrets/forgejo-db.age index 2762740..3567cbe 100644 Binary files a/secrets/forgejo-db.age and b/secrets/forgejo-db.age differ diff --git a/secrets/lemmy.env.age b/secrets/lemmy.env.age index ce8755b..1dfd7b7 100644 Binary files a/secrets/lemmy.env.age and b/secrets/lemmy.env.age differ diff --git a/secrets/miniflux.age b/secrets/miniflux.age index fe399c7..cc9cb5a 100644 --- a/secrets/miniflux.age +++ b/secrets/miniflux.age @@ -1,23 +1,23 @@ age-encryption.org/v1 --> ssh-ed25519 2P4nKw shDeMbFvSZFP+h6Y0O6o03x2kJNnyptfp2YIuMVJ2xs -wPbvoKQhDsWrJ2i1Cff4mdQsqPn7G0/OOQgA8erdyQs --> ssh-ed25519 6+hQpQ J1HgJYMw8qJhbh35xUFf3mPTydaM9D26MBA6dV0YsE4 -AL2zDiSqHEjR8kif0B2nKmjC1oKctvTolG7uTWx8M1U --> ssh-ed25519 l/ODWA s/5Ry9Rf3gigLv3/frFTk0NZsM5rZeOC99dSPNRawyQ -SxMQM3vew3j+430nxPXyDBXVSfkfotkQKXZW7GgYs1Y --> ssh-ed25519 7+5K3Q uKTKmWV82vydfuT68Y5KPWm/1ZO4K5LRbP5IqOJwwn8 -0zACsj614oj0/K9tklvxwDvKRGm3/I1t0ui6DYyPDaQ --> ssh-ed25519 Ow0TGw bUPmGt4PI2+wfOZ7cFYU/oAAEhqjIp0/EdTtYVkYuRM -aZdahEa2wX59grVjGFe6gn/NAkEtU8Y/yimZHEYiBbc --> ssh-ed25519 cEINMA 5gI0TEgn2Zzp8grqy7a3IZizR3o9qeD9ZcLHetLHPSo -lv4+zV1KIRqS2xyXDnRYEMSMezdCx9B+LqDIDjVkArE --> ssh-ed25519 qbMKrQ u4VgaSl0W5m0tDeUXn3HnGm2+LFty1wRP7bEVbTg2F0 -1aAGQW33C/o0frsWmhZccb7VANgC9pauW+2cflb7fjU --> ssh-ed25519 Z0mAzw nZ4lQQWGF/DzqvB/Od74nySjxQLQn0yC4BfRSAnXyhY -1P8KxJX6vnXvxcGx8bkNi3Mh8vg6cqj9iH6RGhgA/EY --> ssh-ed25519 GNZYRg AkrB1RA1xGnRDb1sgC8YLlNBdxuzedRT3edVA5/ceCI -QuFhi0tJVuJovEzeOdEQrQuIk895ApuvYaZUgrAqyMQ --> ssh-ed25519 fd/ZLQ EOgeRt+YofTY2jdhSgU/32MXBXdqONPqhgYm+cYTiBQ -ahTyFWoGLOAoaZHYo78dRaEhSv8x7N5cx9oL8PaD/04 ---- xJUTGS9QYDvmdsJZkV6TsFPLnJeVfZv44U5Qlz2Ui4k -fj ssh-ed25519 2P4nKw zUFKspl9ykaR/E3m3O/NXtdamcwVZqxwhaiCHWmkG2w +Nmtpqh0a2610G8ZaoE1BLHCXi/5n8IcMqGIkGjqjZEw +-> ssh-ed25519 6+hQpQ 8n2FPk9aFyoPWqXxtmMMZ3jOxRg5jV8U8z7k2mAcz3M +wmAsjssArEZI/3ZHRywo5YF+J6+6/CuECDWbHrJtMvo +-> ssh-ed25519 l/ODWA 4SqIYIXLuB6Isav5JVrCT7BoAeSNvdXbmL1CY04y0xk +SvtDIMyksW+Oe8L0y7otE+QWXBnffhsf0O2zTUlwGTk +-> ssh-ed25519 7+5K3Q XBJLW33CvvXUMYJJ2HiWDApoer8ogpCoZ05twxZMi34 +Ftdvr0kKQFaaAtWhokL20phMPvJHTagxs3trqskAetw +-> ssh-ed25519 Ow0TGw qtqzlIXRa6Oz+N2TjPfuftgN1ki/Vo2gx/MoVnAXu1E +1hNrP+okPjk1Ay/ilUPrh3/Wt1353aIiV/aykFEJHeE +-> ssh-ed25519 cEINMA 2LbQI/m9LkJHcGlLvmIgh+lKJeiQEn3xb5x/Ku2DwwY +8XJY0vIIFqHLkE3gAKf8Uf03Tl9L9xA25p+OS+EH9Kc +-> ssh-ed25519 qbMKrQ ssE3YV4Rr/46jz/M0XxJMd7QmSTjwdacB7w029jz/x4 +3w6ORNzDMtJyd0k0W7i8qbxeSmgtCFt2RiYx4xWlQik +-> ssh-ed25519 Z0mAzw 11TQ03HbTvz0ad2MvptMU9QU6JsOraUVHTvL+xq1rWA +MBh58U2QOmjngk9yZf8OPJMN2HxJRZwFmwlDgamwAUk +-> ssh-ed25519 GNZYRg 8ZDhrbp107pEacI9NsZBY3CLvTOV1Ws3GLxOwtLnah4 +vnoKn5B1s2t1ALC+jNtTmoS2quS4t96u6M8/EkefA/Y +-> ssh-ed25519 fd/ZLQ Brg72c+4QJ9esnV8TMrS4RXJYvwlMGNoZaoNvYF0EgA +JrkunHolxGkh+pDddqLtJM5FsLGH5C1mDapBXLW5sek +--- elAicibsoCzPh/JpEWKI3c+mNt7E6BjAtp0o9HY6k2E +@(0Pn4Q2 0ʧ~1- ̴Uw),' 蚗ݹRsj}(7a&*1yq/hAQ ssh-ed25519 2P4nKw So92p303DZShrOmZCAlkG2B8vZdrem70LDvSDIjBz2o -ze8Xp5qCQnv2BhWxinLEg6ZFNAyZ1k44eYli1d5KxSk --> ssh-ed25519 6+hQpQ /BnPKWxZ+GyMJwzwHnZ/2cXJsXp/2bExN9y4XYUpZwY -5xehgtXcCJEH71HbNeNLnTOn/r3RsIyayDDIVO+s+64 --> ssh-ed25519 l/ODWA 5mE6qiAzTz84RDMxOMbJGXy1pYPIkbfqhIglMjdaWm8 -0+KMsS/6WGVxiOOy8/D1z2QV0pHEImskUojLe/pmDkU --> ssh-ed25519 7+5K3Q 736r4P5Rcp4SqOvbDa3T+Dx/2bra3oT1/y/z9uWgThM -bVy+lsFNAua9oJz7vHhgy8zzYw/W/I3A+pOxpgZIhXw --> ssh-ed25519 Ow0TGw F/vxImZN9hJM4+mhPKpCl6SciXiaXhb5cSnlP0ez7z4 -YmlE6ckdWNa5S1H/QpTuMbCq6qwW3rQ34ThU/NJf4wk --> ssh-ed25519 cEINMA /nwkvl/nHTz3VLfLUfLenKL235RtkhQ1ESlxcDX43WE -6BxUxSzOvA8Q6x9Towiq/W110zdFZe649B9JBpAq8f0 --> ssh-ed25519 qbMKrQ nGD6w97YqpJq7c0JogcjO0qRFqSP22rx3HwxAq5Crnc -l0mMSnl1eW1K27EP0SMO02kpThoguDq3VTSa7QjsAJs --> ssh-ed25519 Z0mAzw 1cewie5x5hxcuXCdREyn5Caws3hSiLqm5MNXccf2wTg -7RYkfWWQzmtgcHKHtnZI581Ae9ZJp2dPpvpaGqJNLM0 --> ssh-ed25519 GNZYRg 3VR62i/ocuHgOXm2hVwWpw3dC1WwXUITdOex2rumkAM -zoakTGxOXiCJMaZ8sL2JchiI+Z7e0wBMxACMX3IHsag --> ssh-ed25519 fd/ZLQ d5SOqqBFaQA1NcffQ6GIc6N9ZqtqS8YoDBmcf0aeixI -myC17QIcIEoDtJHIRaNRLdch09uD2occ50j5cBvRE9o ---- bY/3rsqR9Nw/6HKXcDG9GSGxUxI/pPULLbGlZqiAhx0 -sߕhnUwx'}WrFβy/BNgLg#`4qX@CI(Lڎ0QuݗO׊dWC@^`1ba$ubz"{&Ӆ"vDS8hf;zG \ No newline at end of file +-> ssh-ed25519 2P4nKw YX9yjyYshPSotayUzkuw1Nm2gFAmmeZ25SbqW96JOnM +SJz3OCM5VzeQvzDVGjLOHOBxPSVlumGlq6bEOXhu4Lg +-> ssh-ed25519 6+hQpQ 3WyXmhgZXNK7QM6qzMXZ+wpg6FBEtMcM7lPYVNcRnlQ +bJotWKVQ1/KUyeh0bE3ipyV8lET4I6ET4Fvt69/0IUM +-> ssh-ed25519 l/ODWA sLPChfhPuhjZRO9x0/FAARQaBSsa6ETQGPcZdVfDVDg +/IZhnZGDW0Ad+YU7sx+W+HTxe1aQxJo1ek/3gmBkfTg +-> ssh-ed25519 7+5K3Q uA1KVP8hbrT7z/MGRLvcpiJb/svm1hir1vVUi8YUKCg +jFFKA99uuoeVYnoZIASb+WVM9OYNrUp9iKEQCto6+r0 +-> ssh-ed25519 Ow0TGw vfOgQKJEQBokhE9pjkxcIAldP58t6KUEhh4yh0FDJ2c +QTweI2P4f67ieRCNNylD/lsWuyh9mnWk2rR6MHU2am4 +-> ssh-ed25519 cEINMA ADPVzSX86S88pPc7xL+xIQ0Lv2x2JFwrX6ByTCczDEI +hipDPel159suxp4jceUFlBdCsUywt2uGBKnQ8hxqKrM +-> ssh-ed25519 qbMKrQ XJhZ9PPiyc6Wnst68ilyijruYlmdtOJuZFkwzH1j+Ro +of5QAkzUDvZh7WJbltuKPcoXm0uCA+qtTuvq5tSRteM +-> ssh-ed25519 Z0mAzw lnICwhFjZJ64l/WJfld6nO9miNxO6GXsVApM3gLwNyw +9S5J0VeRWIy90/vg/rTZJTaMLpL13v6vY1UuZZ/uzRM +-> ssh-ed25519 GNZYRg 5kfm3rerAH3pbh+qZ7JCItK/APxmVy6roS7k8SLsIjM +7hrF6lHKL7Y8YXmHUgkuXz+zKybS+/p0wyltzRtH9lc +-> ssh-ed25519 fd/ZLQ 1owNAs4nhNjAKFkJnAbw9icw+1OQh4sy+QO9SW5nWDI +faVdFrj2cf9aNUdPkM3w/9zZ/JQcgLkhqlLp/mg7c0U +--- NKiHTehU8EmBmwPtC6pEqfgVxANbJDZHNoZG+MLViuQ +<;TrSZ/&`w5i0>rNT!ÁOn28z9^V=0.˝ǰR]GtzNHӊKA:^4"2wyvv7 0 \ No newline at end of file diff --git a/secrets/restic-backblaze-pass.age b/secrets/restic-backblaze-pass.age index 2be2b02..0684e17 100644 Binary files a/secrets/restic-backblaze-pass.age and b/secrets/restic-backblaze-pass.age differ diff --git a/secrets/restic-backblaze-repo.age b/secrets/restic-backblaze-repo.age index 1ba14f2..49c8673 100644 Binary files a/secrets/restic-backblaze-repo.age and b/secrets/restic-backblaze-repo.age differ diff --git a/secrets/restic-local-pass.age b/secrets/restic-local-pass.age index a07f557..64dfd72 100644 Binary files a/secrets/restic-local-pass.age and b/secrets/restic-local-pass.age differ diff --git a/secrets/restic-server-env.age b/secrets/restic-server-env.age index 65ea3eb..c57fc30 100644 --- a/secrets/restic-server-env.age +++ b/secrets/restic-server-env.age @@ -1,23 +1,23 @@ age-encryption.org/v1 --> ssh-ed25519 2P4nKw ckXuRfcgoacl1EZdkLiOVB+vbH6300Lu3pgJwXnIjn8 -Gjovdd5AUL8bsj5ylZJtxM+a7rflKgFfpxNvVkVEK6I --> ssh-ed25519 6+hQpQ X0/psD4CoAfEPbVYD9mi3foODhw883tI7RrcMdFr3BM -fLAmEO7cs+wLIDHdjp2p7DJkVfJ1On8w2DAIRV8f7Fk --> ssh-ed25519 l/ODWA b5WxXdnweWeuWF5BpfsrGUxRgKMuaSx0ZodP7TTsUSM -sLNYLFbMeFc4kGqX3tN75LwUrSdRLSCyUWfIWS/f65g --> ssh-ed25519 7+5K3Q XdnsRIy/UszMX1IAl+5T1LWnBmIp2cwTR90Re1tcikw -UpckYo3EoOHCnXDqmzkZxOzmhjWaAcn3F9LX335/UMI --> ssh-ed25519 Ow0TGw KV935iFtx5XjS/H6BdWDf7jfMZoPVYx2c4KSHeI8iSE -EXCCV2U1OSkHDSIxodw2Hp54Bof40OLa3uxEukIBzvM --> ssh-ed25519 cEINMA w3QIQtd2lQ9a1BkNtwYKieomprP/oiX6tqOTZezfbE4 -dCWSEvIl6GiIccCfx7ul0u5XurMksF0mTGDNbvBjOIA --> ssh-ed25519 qbMKrQ BJQCynZM4Kv0b3gW7TDZIs8XmC2uQDBeZqt0yFSp/Qw -uTfKMGUkk/FiF2J1j0C1piVsqh7moa0Rs2/Z8l4X/SU --> ssh-ed25519 Z0mAzw Pp0mLtfGYMODQX6unnWNCy+zSR1t35aoRP3wCuyZSU8 -K/ebkF1z9Yo1/Myaw27n/arYay2BpiIoRXOC5oCqm0s --> ssh-ed25519 GNZYRg r5/opjLZDD/LS+pKpI9lQrR/QlJars/vXIJcbajlw04 -CRhU6joP6xBvjIdc8fNwTviYZtnsYrH5mQyLSZlAEmc --> ssh-ed25519 fd/ZLQ kkOhy8+3s/oigyNu86n0qwY2r2Ic/gwl0xPcZlTx7E0 -gUNxAJDJLHVxYZRzobzWyP5JDKAjw+cu1PZAeSk+YpA ---- B3d3FDUOTqYEX8Kn8fO00I3Ktybd2dSgtfdLkiCT8Wc -%1,?Ö ђ(wlhjϪmO(`ŞXF I&Rj ssh-ed25519 2P4nKw 2XPsLEgnxmK2oaAT4yX8b4+a4jHQP7FIJzHOLEMuIVg +7GMhJh/OufmSoEfC845xP53vJDgzEa/SfxOqO67Pegc +-> ssh-ed25519 6+hQpQ 8l7CIxM7faE9egtBkR/XD/GL8obp+nF602Nq7VhJr1g +gm+ZpUdbixtreng7NZTtWEp+62td6WvgeJNZc/D91OI +-> ssh-ed25519 l/ODWA Mz2Gd3V2EUVIpAM1OuDCgg4Vw4KHieCpgdwWQ2JnQA4 +YTzUwXRq9ADTfAUFrMzPNe6TZzZgn57KidAbLbw8BfU +-> ssh-ed25519 7+5K3Q 5Y5z6j6vq3Iyrm5czlmWxBS8aAtlApVN+7c2M9ayEic +f6E2BR9izgT0z1MA4fUko0T9bj/1l0AkVor06tXNeIM +-> ssh-ed25519 Ow0TGw c1hVNmctFJhtGjoNSg6yuN4MZ/I5vTpP8c3xE5rE33w +37QF7xl6444FtX4Zqjplqshs3tQVxn1koLhfnaXXodo +-> ssh-ed25519 cEINMA 76B3avgDJCVgEi/dC7/bTUgTz4cUwARu4Xk6xeXkICg +mDXtZrDeO0zSpE4myiu05TprAE62jz7Y1qVDHpfW0ps +-> ssh-ed25519 qbMKrQ mDsW5QElt9gN9jePV6UUlSTNMF4KzpSYJv0HGawP80k +AmWoCadxAJBOduyfozpqiHLFUHzJm+zxlfpaYInOND8 +-> ssh-ed25519 Z0mAzw ioZ3LlESeTxLbjm61LIkInPSOG/+viO1Ow+BQ9OtFFo +7E3m1iOu+Ou/DPWqcJA8ExXBaHBtMbpUShON5F45deg +-> ssh-ed25519 GNZYRg a3SWSbggDtCNp25uWrovE5NKHShDxAH1mkyU9zjOczQ +a+pk5nxgDGiYPiza6mFR8H3Wsq9vvI0ee6c/nlD4je8 +-> ssh-ed25519 fd/ZLQ pa8cET/t8NDY3oOMm67RLFFHzemKdoNSfwHu8dxWFxE +6LpiJWFQUDQVG4kdjnQdwE9DtXnU13szA7hv4v/pGKI +--- Ld6Eiqy5j9pHU2JaH27aNd5mHr6KL+9ClHvK+vpfhXY +=-kO_Q?${u{V.n<KxJwpܜϰ`BGoGa_oV0BQ3|;&Z٩bRLMJ&oyd#^& \ No newline at end of file diff --git a/secrets/restic-server-local-pass.age b/secrets/restic-server-local-pass.age index 254c4d8..60bfb46 100644 Binary files a/secrets/restic-server-local-pass.age and b/secrets/restic-server-local-pass.age differ diff --git a/secrets/restic-server-pass.age b/secrets/restic-server-pass.age index 5aa6996..a5951d6 100644 Binary files a/secrets/restic-server-pass.age and b/secrets/restic-server-pass.age differ diff --git a/secrets/restic-server-repo.age b/secrets/restic-server-repo.age index 610f2b4..1428ed3 100644 Binary files a/secrets/restic-server-repo.age and b/secrets/restic-server-repo.age differ diff --git a/secrets/root-passwd.age b/secrets/root-passwd.age index a05c64c..f1b5281 100644 Binary files a/secrets/root-passwd.age and b/secrets/root-passwd.age differ diff --git a/secrets/searx.age b/secrets/searx.age index 344e00f..ce7effc 100644 --- a/secrets/searx.age +++ b/secrets/searx.age @@ -1,23 +1,24 @@ age-encryption.org/v1 --> ssh-ed25519 2P4nKw 3oYpvKLlhQ5wAwQ0xhRfM6U1U3JbQHTGHTxsl2NDhiA -eMbFmYBo+eIP8Qx9NTjY0OvE1gnM0VjVWj0jAK+OsfE --> ssh-ed25519 6+hQpQ CXThwy40SidKc02/OaTAfBIDGCXKMW76nD1of6K9PBc -ZSYd+PSkJ5XR5NQNwLHfvMGWVmnHEzw9THEdc76lc1g --> ssh-ed25519 l/ODWA 9VsSkkbx2TCPJw7K4WboY7LZqRU1k1sOQhloLD0FSEU -ZHHH9iK10NGp2Xe1N8P6XZboYeUT1Fouv8+FVwVLosM --> ssh-ed25519 7+5K3Q Iqz0Nbx9bJbEeAhuBpNMvYt7doCNts12PmJAW4EXGDA -fgDrFWZmoUqpExlLyxGXx2rZOrf/AOH68BeI3AP1kpY --> ssh-ed25519 Ow0TGw LfSX5IJF2b6+YbeD8FM+JrcQT9KFVK2eAfX98apjFS0 -zIbaVTQals792lfagFHtc1NG26vS0600KSrlGjwB0DM --> ssh-ed25519 cEINMA QN1iDI2yP1/jORS2IGw+mNC0fp77yZkiQY9FBSPKzXw -XbGnx1AJbAa4Co/w3aS10NIj9KcA+4moOIq7UeM+NdI --> ssh-ed25519 qbMKrQ deaiUztxDw6X+f4X1NeL/fLZnAz+Ws6xFY6dIV7BdEk -N4GhZKkKFloTTc1m25tnYAJAZoTpm6V5Kjit+DVD5nY --> ssh-ed25519 Z0mAzw mRkMNdkkc4JMVTw51R83fz4pTdjfUCme13JuYse/hRw -8vA/uHh5ySh4wET1JB898s3xoQlXRsvTj8wPlPJtfQQ --> ssh-ed25519 GNZYRg Yq9f+hqG9jF6EaqqIJviS76ikav34k3R0q5hVo2d6Ug -DXY5VPNwHgfqrm/fLBRCcY3KAUJUgUzUBYkgg6CdAWM --> ssh-ed25519 fd/ZLQ IUYIFXP4cxovg6JN14MekjPhqFn6q1jvX7eUcgcysAc -7aQFolSbKQMFaHsn+53hoETYazDtTM5z6UT+AgHg30s ---- 1v1W3YFI2W+cQekLb3Uoz8IV10Kr5ua7MizUy8HGgCA -*x*R y48Ո;' J: Oȇzߘ~*b& ,87t \ No newline at end of file +-> ssh-ed25519 2P4nKw nwfLosH1CKNdBnGw5dtjTuLnsybLop7xbPhN1ExFhiI +v4x0cSjZ/YfM06/ADse5phjDaAiogixxzjydx8X3wOk +-> ssh-ed25519 6+hQpQ WSt8y6r1GdfI9ui1MoZyHmWmW1hOTuNLJDeP4y5AURs +XnNCM+m/aQh4vCKSdhJ7vf14P4PmYOHjPMj4Bhiq0WE +-> ssh-ed25519 l/ODWA Nit7dupWGEvCFTDcRlZ1v2fjHCf3hO2MRZrESP9CQkE +z393UDcVoIdAzJMseXoK2VG0caDwfBcUzTHj0RO2EHo +-> ssh-ed25519 7+5K3Q 52fxaIbE8BrfVPWPCqtcWvwOILs7Yzh33QBEaNgvNSg +HN9qvK6c+e+ExnZ6hyDZfLbUD84CoLpeGyAALyIqkdw +-> ssh-ed25519 Ow0TGw 64EdQb9LdlPfl37/HjaZsXZbZKznA5//j04ZugKNGEo +BABDz+FktZ+LjQVYVD0URKgH0aJCqPFVc6zNXV6DLQY +-> ssh-ed25519 cEINMA 5YRYIrrs+BxHidgTUORuM9Efmx8EjwBEVVMHZagAJhI ++X49s1auESnzszkY3hzEKGqQl+7cDq9xZ1Du2LkwLjA +-> ssh-ed25519 qbMKrQ yB1/bzP4vgdxxKNG6tTniNxXy4q3mAfUInr4PU0jV0g +37c7KvBD+BF9UIkLAmAgU0V42RdwL1zN5TSKYLM4xKs +-> ssh-ed25519 Z0mAzw 2HSLb/GoErfkh6UeUB9iGsLfhbTZtx+708puOLnOkEY +esCwGKEnuZ+6hcXPqLauUnpzKK77OXg/RhxzSRN8+h0 +-> ssh-ed25519 GNZYRg Xr+wya4uW42VYQBnnMlEnTZWyPe9qTN71Q30wbArOCs +7IkWHiVZXnN3QrlAYx62c8S6equVCHWgnsphNIxur88 +-> ssh-ed25519 fd/ZLQ MoFGLpKnrFAUvci0v14WXrvF4QzISTqh1IpNIieckAQ +/Bc/b6VC2zcKUsFWtYaeRZjvM3OGGBktR1R7vmmrdGM +--- F/HrSVzELHHnQXkm0sLtcJCK+8SEbtqhAVJaoZIKZ9g +omrbJVVj7N4+S + k)%`ɍ}>]@WeCmkJ+f\q νU \ No newline at end of file diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 0fc83b0..90b9d57 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -39,4 +39,6 @@ in { "restic-server-repo.age".publicKeys = systems ++ users; "restic-server-env.age".publicKeys = systems ++ users; "lemmy.env.age".publicKeys = systems ++ users; + "wg-ymir-home.age".publicKeys = systems ++ users; + "wg-tyr.age".publicKeys = systems ++ users; } diff --git a/secrets/traefik.age b/secrets/traefik.age index dc89f0e..70861df 100644 Binary files a/secrets/traefik.age and b/secrets/traefik.age differ diff --git a/secrets/wg-desktop.age b/secrets/wg-desktop.age index 2fdcedc..83cd011 100644 Binary files a/secrets/wg-desktop.age and b/secrets/wg-desktop.age differ diff --git a/secrets/wg-heimdall.age b/secrets/wg-heimdall.age index e329dcd..fee8a4f 100644 Binary files a/secrets/wg-heimdall.age and b/secrets/wg-heimdall.age differ diff --git a/secrets/wg-home.age b/secrets/wg-home.age index 44c2277..044be31 100644 Binary files a/secrets/wg-home.age and b/secrets/wg-home.age differ diff --git a/secrets/wg-tyr.age b/secrets/wg-tyr.age new file mode 100644 index 0000000..eaee4ff Binary files /dev/null and b/secrets/wg-tyr.age differ diff --git a/secrets/wg-ymir-home.age b/secrets/wg-ymir-home.age new file mode 100644 index 0000000..dbe0dff Binary files /dev/null and b/secrets/wg-ymir-home.age differ