feat: use separate repo for secrets.

This commit is contained in:
CronyAkatsuki 2026-02-01 16:52:45 +01:00
parent 7acedb3017
commit 992b689bbf
46 changed files with 121 additions and 365 deletions

64
flake.lock generated
View file

@ -648,7 +648,25 @@
},
"flake-utils_5": {
"inputs": {
"systems": "systems_12"
"systems": "systems_11"
},
"locked": {
"lastModified": 1731533236,
"narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
"owner": "numtide",
"repo": "flake-utils",
"rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
"type": "github"
},
"original": {
"owner": "numtide",
"repo": "flake-utils",
"type": "github"
}
},
"flake-utils_6": {
"inputs": {
"systems": "systems_13"
},
"locked": {
"lastModified": 1731533236,
@ -2184,6 +2202,7 @@
"nixpkgs": "nixpkgs_9",
"note": "note",
"pyprland": "pyprland",
"secrets": "secrets",
"stylix": "stylix",
"upfast": "upfast",
"zen-browser": "zen-browser"
@ -2244,6 +2263,30 @@
"type": "github"
}
},
"secrets": {
"inputs": {
"agenix": [
"agenix"
],
"flake-utils": "flake-utils_5",
"nixpkgs": [
"nixpkgs"
]
},
"locked": {
"lastModified": 1769952554,
"narHash": "sha256-TLITbJJsGFAE1JNXo3VH/1nKCDyu+cryj0pdXO1pOY0=",
"ref": "refs/heads/main",
"rev": "871f508815e4be9dac0d520200a45f20b3e532da",
"revCount": 1,
"type": "git",
"url": "https://git.cronyakatsuki.xyz/crony/nixos-secrets"
},
"original": {
"type": "git",
"url": "https://git.cronyakatsuki.xyz/crony/nixos-secrets"
}
},
"stylix": {
"inputs": {
"base16": "base16",
@ -2257,7 +2300,7 @@
"nixpkgs"
],
"nur": "nur",
"systems": "systems_11",
"systems": "systems_12",
"tinted-foot": "tinted-foot",
"tinted-kitty": "tinted-kitty",
"tinted-schemes": "tinted-schemes",
@ -2338,6 +2381,21 @@
"type": "github"
}
},
"systems_13": {
"locked": {
"lastModified": 1681028828,
"narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
"owner": "nix-systems",
"repo": "default",
"rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
"type": "github"
},
"original": {
"owner": "nix-systems",
"repo": "default",
"type": "github"
}
},
"systems_2": {
"locked": {
"lastModified": 1681028828,
@ -2541,7 +2599,7 @@
},
"upfast": {
"inputs": {
"flake-utils": "flake-utils_5",
"flake-utils": "flake-utils_6",
"gomod2nix": "gomod2nix_2",
"nixpkgs": [
"nixpkgs"

View file

@ -77,6 +77,13 @@
inputs.nixpkgs.follows = "nixpkgs";
};
# Secrets repo
secrets = {
url = "git+https://git.cronyakatsuki.xyz/crony/nixos-secrets";
inputs.nixpkgs.follows = "nixpkgs";
inputs.agenix.follows = "agenix";
};
# My selfhosted service, inspired by 0x0.st
upfast = {
url = "git+https://git.cronyakatsuki.xyz/crony/UpFast";

View file

@ -1,6 +1,7 @@
{
config,
lib,
inputs,
...
}: {
options = {
@ -10,16 +11,16 @@
age = {
secrets = {
restic-local-pass = {
file = ../../../secrets/restic-local-pass.age;
file = "${inputs.secrets}/secrets/restic-local-pass.age";
};
restic-backblaze-pass = {
file = ../../../secrets/restic-backblaze-pass.age;
file = "${inputs.secrets}/secrets/restic-backblaze-pass.age";
};
restic-backblaze-repo = {
file = ../../../secrets/restic-backblaze-repo.age;
file = "${inputs.secrets}/secrets/restic-backblaze-repo.age";
};
restic-backblaze-env = {
file = ../../../secrets/restic-backblaze-env.age;
file = "${inputs.secrets}/secrets/restic-backblaze-env.age";
};
};
identityPaths = ["/home/crony/.ssh/main" "/root/.ssh/id_ed25519"];

View file

@ -1,6 +1,7 @@
{
config,
lib,
inputs,
...
}: let
default_keys = map (e: e.path) (
@ -14,16 +15,16 @@ in {
age = {
secrets = {
wg-desktop = {
file = ../../../secrets/wg-desktop.age;
file = "${inputs.secrets}/secrets/wg-desktop.age";
};
wg-ymir-home = {
file = ../../../secrets/wg-ymir-home.age;
file = "${inputs.secrets}/secrets/wg-ymir-home.age";
};
crony-passwd = {
file = ../../../secrets/crony-passwd-desktop.age;
file = "${inputs.secrets}/secrets/crony-passwd-desktop.age";
};
root-passwd = {
file = ../../../secrets/root-passwd.age;
file = "${inputs.secrets}/secrets/root-passwd.age";
};
};
identityPaths = ["/home/crony/.ssh/main" "/root/.ssh/id_ed25519"] ++ default_keys;

View file

@ -1,27 +1,27 @@
{
{inputs, ...}: {
age = {
secrets = {
traefik = {
file = ../../../secrets/traefik.age;
file = "${inputs.secrets}/secrets/traefik.age";
owner = "traefik";
};
crony-passwd = {
file = ../../../secrets/crony-passwd-servers.age;
file = "${inputs.secrets}/secrets/crony-passwd-servers.age";
};
root-passwd = {
file = ../../../secrets/root-passwd.age;
file = "${inputs.secrets}/secrets/root-passwd.age";
};
restic-server-local-pass = {
file = ../../../secrets/restic-server-local-pass.age;
file = "${inputs.secrets}/secrets/restic-server-local-pass.age";
};
restic-server-pass = {
file = ../../../secrets/restic-server-pass.age;
file = "${inputs.secrets}/secrets/restic-server-pass.age";
};
restic-server-repo = {
file = ../../../secrets/restic-server-repo.age;
file = "${inputs.secrets}/secrets/restic-server-repo.age";
};
restic-server-env = {
file = ../../../secrets/restic-server-env.age;
file = "${inputs.secrets}/secrets/restic-server-env.age";
};
};
};

View file

@ -1,14 +1,14 @@
{
{inputs, ...}: {
age = {
secrets = {
rclone = {
file = ../../../../secrets/rclone.age;
file = "${inputs.secrets}/secrets/rclone.age";
};
navidrome = {
file = ../../../../secrets/navidrome.age;
file = "${inputs.secrets}/secrets/navidrome.age";
};
attic-env = {
file = ../../../../secrets/attic-env.age;
file = "${inputs.secrets}/secrets/attic-env.age";
};
};
};

View file

@ -1,8 +1,8 @@
{
{inputs, ...}: {
age = {
secrets = {
forgejo-runner-token = {
file = ../../../../secrets/forgejo-runner-token.age;
file = "${inputs.secrets}/secrets/forgejo-runner-token.age";
};
};
};

View file

@ -1,8 +1,8 @@
{
{inputs, ...}: {
age = {
secrets = {
wg-heimdall = {
file = ../../../../secrets/wg-heimdall.age;
file = "${inputs.secrets}/secrets/wg-heimdall.age";
};
};
};

View file

@ -1,11 +1,11 @@
{
{inputs, ...}: {
age = {
secrets = {
searx = {
file = ../../../../secrets/searx.age;
file = "${inputs.secrets}/secrets/searx.age";
};
miniflux = {
file = ../../../../secrets/miniflux.age;
file = "${inputs.secrets}/secrets/miniflux.age";
};
};
};

View file

@ -1,17 +1,17 @@
{
{inputs, ...}: {
age = {
secrets = {
forgejo-db = {
file = ../../../../secrets/forgejo-db.age;
file = "${inputs.secrets}/secrets/forgejo-db.age";
};
plausible = {
file = ../../../../secrets/plausible.age;
file = "${inputs.secrets}/secrets/plausible.age";
};
conduit = {
file = ../../../../secrets/conduit.age;
file = "${inputs.secrets}/secrets/conduit.age";
};
lemmy-env = {
file = ../../../../secrets/lemmy.env.age;
file = "${inputs.secrets}/secrets/lemmy.env.age";
};
};
};

View file

@ -1,55 +1,59 @@
{config, ...}: {
{
config,
inputs,
...
}: {
age = {
secrets = {
wg-tyr = {
file = ../../../../secrets/wg-tyr.age;
file = "${inputs.secrets}/secrets/wg-tyr.age";
};
duckdns = {
file = ../../../../secrets/duckdns.age;
file = "${inputs.secrets}/secrets/duckdns.age";
};
restic-server-local-pass = {
file = ../../../../secrets/restic-server-local-pass.age;
file = "${inputs.secrets}/secrets/restic-server-local-pass.age";
};
restic-server-pass = {
file = ../../../../secrets/restic-server-pass.age;
file = "${inputs.secrets}/secrets/restic-server-pass.age";
};
restic-server-repo = {
file = ../../../../secrets/restic-server-repo.age;
file = "${inputs.secrets}/secrets/restic-server-repo.age";
};
restic-server-env = {
file = ../../../../secrets/restic-server-env.age;
file = "${inputs.secrets}/secrets/restic-server-env.age";
};
glance = {
file = ../../../../secrets/glance.age;
file = "${inputs.secrets}/secrets/glance.age";
};
traefik = {
file = ../../../../secrets/traefik.age;
file = "${inputs.secrets}/secrets/traefik.age";
owner = "traefik";
};
ddns = {
file = ../../../../secrets/ddns.age;
file = "${inputs.secrets}/secrets/ddns.age";
path = "/var/lib/ddns-updater/config.json";
owner = "nobody";
group = "nogroup";
symlink = false;
};
linkwarden = {
file = ../../../../secrets/linkwarden.age;
file = "${inputs.secrets}/secrets/linkwarden.age";
owner = config.services.linkwarden.user;
};
linkwarden-db = {
file = ../../../../secrets/linkwarden.age;
file = "${inputs.secrets}/secrets/linkwarden.age";
};
paperless-ngx = {
file = ../../../../secrets/paperless-ngx.age;
file = "${inputs.secrets}/secrets/paperless-ngx.age";
};
wg-wireproxy = {
file = ../../../../secrets/wg-wireproxy.age;
file = "${inputs.secrets}/secrets/wg-wireproxy.age";
owner = "wireproxy";
group = "wireproxy";
};
wireproxy = {
file = ../../../../secrets/wireproxy.age;
file = "${inputs.secrets}/secrets/wireproxy.age";
path = "/etc/wireproxy/wireproxy.conf";
owner = "wireproxy";
group = "wireproxy";

Binary file not shown.

View file

@ -1,23 +0,0 @@
age-encryption.org/v1
-> ssh-ed25519 2P4nKw Z+Apdx6h22115Dbru1N/qDRgGoaMVaQFUMJcps6dJTQ
dwpekSgQ32re2vCcbnJgWxv3tv2BMujmhvggdXir78g
-> ssh-ed25519 l/ODWA eCEcbXiovG1Au+Y54bKi0c0ObmtkZZgCq+XaMo+LlzA
VBcL2SpwCbEgYRP6cagNi7F1ru0IN1wb9RP80wGd+/Y
-> ssh-ed25519 7+5K3Q GfqTNmAqh1z00z+5sQXXGz9pChuC0mA4XRczvg/P7xg
BnYI4Ac5VunTRRkUNqagBdKoHyIwiPzv/sCqoOGQZl0
-> ssh-ed25519 Ow0TGw NDRthtRozQBYeneL8O9BWSi7r3YSRHM926JWitV3kyw
ByyMfPouXYV7UIWWXZTyKTvgEXVCVJhBOwcjrKGEu44
-> ssh-ed25519 cEINMA SIK029rR0tlIG64I2Ig+h6w8hyzeKVzCMvvhyVEzpTk
ijVkkaVX2/klshjxv8MPyW3xfG5TJvsjCambVEGilCw
-> ssh-ed25519 qbMKrQ DOe1kQxaGJNLytI9nbbDoqO8tHHdsQFg4wh9MQTaLwM
du/In13yHjiBZBx++xnMd0kwi8voDwaf+A6ONTfxr9I
-> ssh-ed25519 Z0mAzw ZNZqZ828veO9khWs1W+JffAQwQ4iTZMYOg2uWn1pvzM
dvPZR+bTyRP+zdcKp9/8uKH9427+0GUmiHcLKnq5bQk
-> ssh-ed25519 GNZYRg XbuGe5ccN05DLd2YF8Upva0Qzav+HvkX9EAYGxz88A0
EgEwSzqAp3s7RlD5R+AGLDtvnyXrmIKHS1eTamaJ9GU
-> ssh-ed25519 fd/ZLQ feOhi2mUSvmbvcAdpYWR5XRgNijsuDsh1V6MwXPrzCg
tVTs7iHZ5WXsM7yXxOAjZbsDbFLHvn3yhw3RP0C4LFE
-> ssh-ed25519 zQBiZw HmwaOoMtCb6b/OV5rPf1OvenQLVJKjYNVWWmxXoRH3I
wUTmviNahnNBtQXDPyQ1oPkZaemw/UqCW++eswiMwGs
--- vy2FOQPJjdblLXYQ0D1jOSswEBEP7gUusGKi8omPo7k
z¥¤Êsj~õbùVç˜ô>¤v=΀­ý·Xý'=ˆF @ÿÇ`*ǘmTVê¾.ÕRx²bd$¸wp ©<>½ÎañÃrimø°²Æ/€ǵ»œä‡Æ<E280A1>ä É*a¤þ(ËjŽSÂä^ž¨OÚÙÖ"0wd NQ{‰ýg07í±ßpo×)¦w%QÞ ~¯Ri-Hš[“ÒUá& ß`Ë#úñ~Þn½qÂüü%v؃aÍ

Binary file not shown.

View file

@ -1,24 +0,0 @@
age-encryption.org/v1
-> ssh-ed25519 2P4nKw bB3uW64hmUPWpuceGs/Ffk10ftMqw4PoIRyzc5lCtS4
arC1fVgFmtkIHZZ/GcFJAxNvnyNRcFgCv4usueqrnA4
-> ssh-ed25519 l/ODWA Si3XUEeIepvDSF2Te8DwRNl4NPisjHgNiimoNGy/q3s
mFqS2Dm1Zk21BPVpqzXJ93yH3x8zHXLu/1c/YTiEYh8
-> ssh-ed25519 7+5K3Q XHfLzu2DtJ5hnQNdwqJAA35XAGdxPiT/QAoJknMnd1s
dTRwO1hazouHOANl/Rw1oEe+vHeCV1a6TCwCJq7LG2U
-> ssh-ed25519 Ow0TGw xPXJgqk/Pg2cmAHUln3Pzv2n/ddzPbFtTWC3zDMrdUY
bUvtIIRshv/agznm+rvcHVy9wzWwQQd92wi0xyzTnHQ
-> ssh-ed25519 cEINMA q2JLxVLzKcodYyA4l2XEro6pJBV8lhpcZe0JXcu0nQo
oiw5x+Lg5CGxi/gIPfsKtqfdNeq3JaBIL09Cr7v/UaM
-> ssh-ed25519 qbMKrQ hWe3kXBIVj6WaY44dwKWlh/gdl2zZDCMmuOtqIEFPB8
OomidJ/oUGFgi5xzQ5PK3CmVuD6bZm6uyme5hlwqoq8
-> ssh-ed25519 Z0mAzw 24akymcFEiC2dWf79+qLqqEOy9JtKa2zmtHUZLCF11M
idPFxgLEvmQf7hQ76YQ53ypJPryYzOtiyFu842BTTYM
-> ssh-ed25519 GNZYRg VLzdHC5cm+YAynspvoRuMdmyRXAjwy4ZQPcGpluM73E
np4C+r9auk5JTyKYYVS4tiayFHW9atbWzgk51iVBSoU
-> ssh-ed25519 fd/ZLQ MoVuj9uc8imIZAODHZH8LVOzQx58riwJgBZDTbXMRVc
JH9BASv5+Jwl8i30xRD7tsYt6VM8rDNXeR17WeFZjN4
-> ssh-ed25519 zQBiZw dYei/25K6EgewQAte1R42S6h/4TWZkbbPvp8NqlqK3A
KwjrKaevacAbtxyDxvuKsno3/NCAlM/ai1awNk8BANg
--- jRlrvwC0KSdu9tqzeb92Gf9IcdFPXNXOMJOrqzJSiWs
ÝrÛÒP“È{=pcgþcBx9áÒß\R­·REa¥Ñ¡ÎdzÌ´O`uö]<—Þ£ÓhA°ÿÓ? °çßnñÀ§þw¦â#”™Ö;¤ív»ó, +rDëz
k(< b£ÞÁU•kBSÛ©V*îú

Binary file not shown.

View file

@ -1,23 +0,0 @@
age-encryption.org/v1
-> ssh-ed25519 2P4nKw 4ItGvk3XMo3m7QBYy/Sgvlmvab3FGQaYn9nEIhXWgRE
TERFmi7jSIwu/ZDn96nhYJWiXNbC4qoYv4fpdsv5CqQ
-> ssh-ed25519 l/ODWA rTq4UkxRgg/ewM3a6QftTVcETgcEx3smxt6+UlCneEA
pLPAyPXwv5tUnqEcZ3QWGNRqT7S8WpIQD+JUI7DG9Zg
-> ssh-ed25519 7+5K3Q XIHMw/MM2CjmLx3e+7UA06j2WkAHvHmXX1f9mrpD4Bc
DYxP3jc20wGikICMIH1oRtcmDsMk8Gi4lKydhnHTq1o
-> ssh-ed25519 Ow0TGw He9WSvIoeoy5fJWr1L0EqwMnb43Il5giXtFCz13acUg
kfJWo9ABDecSJtpUFlYULT3BBPr95YSZPtWa8dE/XWc
-> ssh-ed25519 cEINMA p1YpaU7W2dNy/Bu3Tps5hpi4Q0q11VnnKowL720gijo
QbJD5FV1cl04eiSIVozpuKvn4s4LfiRQj8eHtXRuo7s
-> ssh-ed25519 qbMKrQ iNjOGh23K3xb2q6g6pb8FPPHoTtaLUvvYq56KnWueXk
kjUil8y5wnmsn367a0tYp8G98VwPRwesH8apgZdJrWo
-> ssh-ed25519 Z0mAzw VhdGnvDRxqeBU+DT0BgACWeWSyJP+sKMAHX9NhU6lT0
U7k9PMeQKrWTU3CCh391U0zTu3Vzgrt3j+ByErYALbQ
-> ssh-ed25519 GNZYRg gKV/rcwTnXH8DH8yd0vuEKa7fE6vrr4EfliWS3UyE3c
isyZatX2BsROXxR7QYpyAa3LtcPWC0FMNh9NOaR4qH0
-> ssh-ed25519 fd/ZLQ xaVT2F1QsOkPfCFgcfsGhOfoMcQlOwQ+dFxDKnTMP3A
u4dG9HHoSiCqe6PF7RIYfRpHMuuPiXtvrhexOYRxeJI
-> ssh-ed25519 zQBiZw BRDrwtdagA/lACP4oVYjNa/JoGSePPw+BAj5JXvtSlc
x6dxfDIulDbWg4YZ2JudsIjqe4l8L53VQjCcesGJNcE
--- 128xM8a4qqwi834Vqf7R6YvHSU0ITVrgxQJqIKkw2+k
6Ó0'‘ÍêÍéVr~ª€5o¬&CêWÛ8ÐW»HkÏÄš;ȵ–ÅŠ°¾RB1ç%(˜&ýW †Èe<C388>9Lwc9ËXd

Binary file not shown.

View file

@ -1,23 +0,0 @@
age-encryption.org/v1
-> ssh-ed25519 2P4nKw 6CXlYKfRELtM9lE3HPwyX8paUEqdq1F/YxB/rHtv/Hw
MGDd7G/xGGEEJ4FLbfsZJIaUsznwRZZoQ7giVoafKEY
-> ssh-ed25519 l/ODWA xEpu4YLSwnb7bp6hLLlBHjmAs9GAFE01kcyhpD4ooWA
mqYAWi0HKyvgtseJ2f7g4rW0G+LHBVH31RG86UMoolI
-> ssh-ed25519 7+5K3Q S7AJuGnSUO/TZ40fWnmSJN02oR1c84UnZ0cRPLT62Hc
0IKCOawbLeXBHsdVDk9KSDUT3AwB/0vsRitLn7RJ6Es
-> ssh-ed25519 Ow0TGw 2stE3ES2jl9n6t86+nyuqZ2Yeh0C2XWmXr5+HNZ5H2Y
3C3FZ6jVUyJ1Af6P6kZZYmWiXJ4Gd4V/Az8dKk1IbAg
-> ssh-ed25519 cEINMA AF8fxir8WyhwNPkcjILCeQkrpcMG0oXEF0u15RpSFF0
F9MlXYcPuoidHLrQzCOkgeQVc40h8t2aCP0qdYWuVpc
-> ssh-ed25519 qbMKrQ JzQh1uPdITf0VdsgCH4UYkavfoncOmobgEp3N2IehG4
7vh/sGnFBIxckxHTnjNaTAAXINH/xPeb7fKX0R2wgPg
-> ssh-ed25519 Z0mAzw TVO8g5CaaJS+/sn/fxgDPbMy9JNMUrgHhW3TgzyfKhg
QmfjgU10CJebV1evV5myZHZ3v0J6Qf6Vp2Iv1OkNg7c
-> ssh-ed25519 GNZYRg b5FwNS2yEFYTP6XshP3w3h7ofiRRuVAHJJGqUxWy8Xo
g+/1/e6CAhA96qK55jF3poCUuKV0BbecSb6bcKE9FD4
-> ssh-ed25519 fd/ZLQ STF8rS7Kb3ZXHVteSEl5HDKceqgIgKDbSOYU7sA2bzw
YxWXgCdzSvgBShTUMH1CZnxKAG1kzNoObW80cXyfNq0
-> ssh-ed25519 zQBiZw +iRG/N5bBSGflrb5Zi4wzNmq7GTt/O/A9xHwGs12L1I
p12J0VmSTit+yPq0AUjF0+6laCSeHte5MTNBqhIkYW8
--- heq+uzmYk2bdNLlLN1sqdH1Odjch/EYHk07ZZmFVtZE
C„{{˜<18>߸ϴ¸{ <09>h8ƒ<38>²'þn™ÍZ¹tÁÔ9ë/©.kñpkWf<<WžvͅÍÉÑF—G æ/B…œx»îœ 5…Qr

Binary file not shown.

Binary file not shown.

View file

@ -1,23 +0,0 @@
age-encryption.org/v1
-> ssh-ed25519 2P4nKw LAG9N+gKMlkEIIIWVOmSqZB2BWMtF/FghReGmPNFxhY
2oKU1gQYIUVAB+P67FOT6BRaLi5jGPLnzOWZ9IU4xl0
-> ssh-ed25519 l/ODWA Jln+2+SxwuW6V74CYfeTwH5svYeNlYnW5Fh2saLUeEM
ckWBbHxnhnbztU6zez/vmTNYyQ80P4/oqfaMHSe3DLY
-> ssh-ed25519 7+5K3Q /PylnaNBPbBDJywedCtS5yfQ9M6i8aw7lHKuRL3NwU8
91EjdCrxTwhY2vLjj3N5Y+jLHHN2mZR2gs5u66iuUSU
-> ssh-ed25519 Ow0TGw ji2cRzza1QfMU4NjxLvs/FoWdOjA5zC2Two95QkBdgg
jms7qW3IRRCZBRx1JOxJai2yendpq7a5tkGKB5Xz3NA
-> ssh-ed25519 cEINMA O8qtM8rt2GtD61npXT4Uo0MTqL7WFkfAFTcNoMuG/mo
iqoqGZC3kQIm04UbB4sC0x1uAMBVL51ZZgpKdt72lkE
-> ssh-ed25519 qbMKrQ bfX7xlujcdA936Z850CEWRAp4kpwkp3TE2/eP1PXLTQ
Z/j7TN7KsZP0tDdXX4+Hn3mZPlYPvJI6ptqLfrdr+Xc
-> ssh-ed25519 Z0mAzw c0P6bG+Ofk7J+b9GPcltXY9/D0irg08JsBTYZytSj0w
goQkgQcF/dgU66yHSbpthUF8Wzxsyhuh/BWd4C5tjQw
-> ssh-ed25519 GNZYRg bCJ4Pi804hgNsS4kP0inQHCH8OO7R/rANIli7o+eNjE
k4jsFHVNQf3/bC5Ng6MQrqfHnF5EISpxPjBL7kVBJ4g
-> ssh-ed25519 fd/ZLQ 9HDKRyNfup005bDSfuNbpmLYA9KhLXQxTCKIg8SNn2Y
s+unIILVjge/bDi8p3uTp2INzFE6Yu0KZRx+A8iqUWQ
-> ssh-ed25519 zQBiZw bZs+bzLZMwTKpeSX1Krw+26LkdZWtgoYSY1idImRPBE
Ln+ScG3Umts5TPbG62SnPXsp38TcUeJIW1euKEpEczQ
--- 9CooKM8lZCPs8gU7MK1tHdKq9eP4VFByOrfu2vBLdlM
ñyÍíº±4S¸÷`ña­tÖ|T=”=©•ô³¬‰Mhͤ¡Ô3&Ið"jKÆq˜Ö§Ô!> “ô—ö¢È¤’ñè ÂæÜÌÊÏïóÜ_©éw¥<77>U}CxÓzíh`yˆÛz~…Úùoó¤Yʼnö–

View file

@ -1,23 +0,0 @@
age-encryption.org/v1
-> ssh-ed25519 2P4nKw pqHv6tVgg4NGbvJBqpIFtwydgvxhXcbjUayauscAjAM
7ndxrnbhRYFLBNkcq20M3sGk2iYTqFcUGITt2ohC3ZE
-> ssh-ed25519 l/ODWA 8CfNI/TYGc1ZEMobpMkPJPhlSPDR01g+ID+LGwFP7Ho
JNi6J2XF4AdTln0qQyazjaY20GafpZTR8WObsFbx32k
-> ssh-ed25519 7+5K3Q cl0qQz/Ka4EfCxFvS4qW/4YRtdl9xOmf+rASUD2DfEA
VbNwkI/7d7q5TG7hu5oTegoYlWM+hBrjjoserfW0cPc
-> ssh-ed25519 Ow0TGw uOqLfWmgN4qOrD8tmTvCwnWwDfG39Ah9GM4L16uqIyg
08vRLkwJDzHbVBzQLsG0UZaFshulsRmWG/3g5cgsKjE
-> ssh-ed25519 cEINMA ha346dMkU6GsPNiaM6MvNQsIjUxNt1oamBPmdp9G2HQ
VN7fuSOHj8Uq475R0CjDLUw7HmWlxJsDqXAZQydCH80
-> ssh-ed25519 qbMKrQ LKuX+RHA/EDHYcJLRIp/R4L5vNceRH0OhwFdslDaQlI
ObAyhd9asKCy1h9c8p+RjXG1OO/HBecBR7j3Jn4IU6s
-> ssh-ed25519 Z0mAzw GIBK8Iu8f3VUVQRejIMvgxMN62Bb6+5WeUE6TOzPIHg
/peHXAP56g3H9S+LcOBSd3RsgfSXxa5KnRICCcW59tY
-> ssh-ed25519 GNZYRg E2bifEpa7bTJ+jKJ1m4hgIS4HuzhIXe2Y8pL3MlJa2M
f3Zjanf4LC4xrCO1cRP5EodxSH0qmmro10XEWerGeW0
-> ssh-ed25519 fd/ZLQ a6y9qazlK3YPjaGFVOK14c188tULG5JwzYH9FipC/Fs
tIjxSBavgTrCMfs8YoclpAz+isvUfiU6Ow4DtONp+hU
-> ssh-ed25519 zQBiZw 1BjropucF9WfJYGaBoywU/HS7kU+wFktRqyp6liSkmM
12PJmiPbtJTZ/FC4dSDIWQfwfJqpAwsbLqF52Fqzl2Q
--- DAw1DPxqX2HWwewc56B7PLoFy15WEzSLoQKRMxHRzhw
D×p[\Õ<>ç\Æjlf?m1Íg¢ŠÏ €×èn3Ñ÷ºÉnî¡R3#Ëm«zJÄ¿<C384>ö}” `æî¬ûŠ­[2ȹ·šR¾µyÃÿ±æ=øÅ“èÃÎÆ­tæÏŒZ6Ƈ

Binary file not shown.

Binary file not shown.

Binary file not shown.

Binary file not shown.

View file

@ -1,25 +0,0 @@
age-encryption.org/v1
-> ssh-ed25519 2P4nKw 1TAM1WxLGxgRkzs/4ZlrvDlWFxtdYbzE8OV/ewro3Q4
HJaaIiH+kH/1pRiUOj8bdJSkt5XlBMhLGpt6jYHEkDY
-> ssh-ed25519 l/ODWA Z3qG+urDk25E6aatTsSYsonguphVPw52tsyGZx/C6lM
50wS1MVuiVD07Gal8PqLCEUo5flmdsZ95YKMvMv8AWo
-> ssh-ed25519 7+5K3Q rNIKYAmgCMD/lBt/p8WAOO/hbuk+/qhXHSdiGKhRlxM
f0YVoPbhgi1bvEn2UtKGfw6rhuEZ0GmV6PkktuqYTek
-> ssh-ed25519 Ow0TGw 6RgxdoBKFC1Qi79/ZN38uxMuuO340tDkJ0MciqmDzTA
sARQlkVEF0VHXzYCIFdfLhVZFah082Q0Fs4fr5Ayvz4
-> ssh-ed25519 cEINMA Lexu3zrc7SKObUFCpUVa3wjLwbiBk30QGE+Vlb0BJXY
CXJlhj4kT4Ki1cv9BMztN+uSTWqFhtuFK624NK1DxNY
-> ssh-ed25519 qbMKrQ yT2Pc9lnSL/PQ06wQczoQ4PGgHK2JmlQ4rZrfg+uDFI
Metpfpjqsf76ZhtFu/UmYxGtgAI8Ce5V9N3hrro0IAM
-> ssh-ed25519 Z0mAzw s8VjSYwcLo0yQyWT79W6WZNxYxgh9PP+iwvMBWpyZUA
Sgs9Uuwr3Ly1mD7epBFoDngJXds2/4moSysAtCMezyU
-> ssh-ed25519 GNZYRg o/unKEjDRfMCqr/TtfxnPIo6GGpZADvg7XaUzJMbwF4
M+2nE71+70Hwb8K0Ovxx13iwnhSoYfypQATIUHoa7kM
-> ssh-ed25519 fd/ZLQ 07nS24WyliH2XioAwQ9sPONNouPBPaXVZ1cCPQyQlCE
6TI8N4bcxMka5Q4xaYP1xRT6dnHMf/zA1up8wHDz+UY
-> ssh-ed25519 zQBiZw HChSHlmjMHYWHXbXZ20b3A8tFpcsmiDvWkVH4ecujlE
Qr/ndHEtEqBVXVUZs5raG5ZHu3E4WLszCteNNKuUQHo
--- ZXdamxftHswmipXsNEViDxZK2lrnj9FiamIQ0nWEe7I
/àÃtm̽Äñ¥3¦hB¯÷”2]bÔ¹Š)¹•
Y#öiÒ %õåV[ÝòS<C2B2>>& ù¬=£°r
L<EFBFBD>‰[Žð'2÷tfÌ`Ñ.†M|^pÈ,ï= gb÷Jsöi92<<3C>pG€ÎI®Û.@&‡ºÁÓð²È´Y4ÌvÎ<;µW¼ÝóÍHÌÕÍîHijeœt¦úYž”ôõá®Æ Y

Binary file not shown.

View file

@ -1,26 +0,0 @@
age-encryption.org/v1
-> ssh-ed25519 2P4nKw yJr4HnZevHjSQV5j20IAK5yqqLzVYTQJHvFuZJHh5Xc
oopYvOdBI/ey7b83EbkYvsLwk8qrvGZsV9ArPzWThKY
-> ssh-ed25519 l/ODWA fHsIduHEPCqMfb9isehJLR8Qw8VfoG+PvCvNZDoHQxc
yJzWQv7N612eBaEGyYiBiJ0Y03jjl5lZ/xemoq85g+E
-> ssh-ed25519 7+5K3Q iAwT5J3wMzjynMIir9MEbxy6YkoESrEjVbGMN/uyVXM
98zYeLPVNEa/UvbqQKQvrQzERRU/Cn5gkRa3P8N6o5s
-> ssh-ed25519 Ow0TGw pRhbWdPOktburWw1azGe/APxCHod0ltpVaUgin5+LwY
jkMnaKL36mr/5BNolPiBjrtcBBortjWkUHSOq6fwMZ4
-> ssh-ed25519 cEINMA XDnVhwm62uGvi0XWAR0m3RRVFROAy6H1y6j5JPrq7k4
sGtm86rbDWdkjV9pD8zz+C0cxsaQUS5QozTGF8XUA7I
-> ssh-ed25519 qbMKrQ A2NxNVevmN2dwGhIs8QF2wjA09O9pAcXJpJHYtK19yQ
TaHRWLuziZPbAHuk+NdhnJHLqT/c8FHJYrHNZWQ5RK8
-> ssh-ed25519 Z0mAzw BqIGjkO/1byh5yVDClTmQdyJDACg6GsKwWrhLspOC2k
ejvh3p4qJIKZdpPtyqp2naKqDt1u2VZ5mqYomC5JGNg
-> ssh-ed25519 GNZYRg U4czcyCY8ONI2Y16og5GNAaH6E0o5VzUlnljYUEjO30
mCQD+I+GJ2gUdwJXfMWcN6OBOxL/a5vQXip3lPubQDY
-> ssh-ed25519 fd/ZLQ +dqjvH4DNnAd+eVS3ETXhRiTYyAZMAXsi5wSGIDpA1Y
yaKnv+djVoHOv5E5z32ppq9H7wg/N+Sw39NFgozuapQ
-> ssh-ed25519 zQBiZw abIjii3OU/1FUL7sNgF/ulPUynGUA4jLbnbODn0nPyA
LyUAIaJnl18hnNoNj+s5APlP5DDMxF5RjYyGARjM8LI
--- N56WwSa5RbpdsDuD1tNGdD8gKUmOXCJQUjmAI1h0nGo
°*BzË>ñƒ[Jw Kd³6¨¡©F¦4“x)†ÍU~GqÆ_É`4ýªä®/>\¾¸<C2BE>Ÿ :ʆ¡˜« àCÖŠ?0ÞÚVÕ ôÕdUƒ4{+%1ÅÓêgÓ"ušÞÔ"&ö§SÜöjæ
¨4C•y8¨ÉÛPìÁˆ?èZX Í>r©\<5C>o[e·ŠVK¶Y¯a/­
09<Â> ÿ{:ª¡¯šÇ § |ǃH¸­ñ:l]‚Õ¾!<21>CgÖ g5öú¸ƒ•Í>B—Òãê‡<C3AA>Aø¯=
Q>5 Nú•]¥e$8ÔâYt

Binary file not shown.

View file

@ -1,25 +0,0 @@
age-encryption.org/v1
-> ssh-ed25519 2P4nKw uwNQP6l5XHTDC35nhzZvObJ576IjnTQmxW3b21MN7jc
//+9MujZV3ZZa0ZjqlVka3ec5stH0i2txfgdfGIgfqg
-> ssh-ed25519 l/ODWA dk2JWA5aWUGNtCZAOTw5CULouE1xpHZITMfrbsfCRSQ
Z07EE5qH9NfaffWJqJdAz0Bxv/POxPPcfaQv9eRwPT8
-> ssh-ed25519 7+5K3Q BWeEEChSIx8c/p0XnUq4ZjeGuCgJ8sAg1f2/i30ARE4
RLFkwtK/jfz06YkqDUlnxg6jYJOZqgJoUXqmDiYfxGk
-> ssh-ed25519 Ow0TGw Zc+H451NI9iWz6LeNPtQgKEZ3ShUARAoM2nO/6azXQ0
1WKl8AXQ2kSN4UXaJYItCMCsy+bYnBSXjv8apAtSQpM
-> ssh-ed25519 cEINMA asjQEnzI+4SWCKbW8Rg5/19WCTtID75YKrPnwmoWSyo
WYcwzDB6Rs4eQdDO8iu9jBXidjzugylh01r/+trsYDc
-> ssh-ed25519 qbMKrQ WDh3GWdeonBN9zmFply5FzbhsNAtzCX0qVI68FmeAj4
nZBx/vUre0iiwByQJNHvEw3iM7csspT52Mkm/DVDKyk
-> ssh-ed25519 Z0mAzw /rUC6sjHOidTQv5Usr3t5cfvRitdPM4NMKuPHFLBYDY
xr80hR7y5pPf0+rmAZ8Q+kKeq79nhbC1ynQdOZ9tzq0
-> ssh-ed25519 GNZYRg vxCkDS3NxPrtxNJnFL1SKHsSpuGJZZ5gErpUWCNLgEg
XeMBLKXuf743SZZTayInD6/1ka9uNe6Put7MNLNfgq8
-> ssh-ed25519 fd/ZLQ M+d0LC7LccrQAQpqfJ4Y5e5Prtd9SPwwq+mRwxqy7Vw
ETtR0FvVC3CC7BFwuO2l/aJkTFGElj5lHSJI59V6ItM
-> ssh-ed25519 zQBiZw lGjGDWA09CyIWbCDR8FCM05McgAG85ubUTa9IdWKNjo
hzV1OPAIEF8ER+yjA8oB5U2HCcRgWftYBgl7ZC/z5Mw
--- sa+FEjM94W7ZdtTeG6pwoTF9Jy/i69XWJuVtL2FAlxc
oy"œ+­><3E> w N<>¼°S {áŪËqöYÕ°6¯þi¦®@g€‰rìeÜy‰¤%+ %ìGål§…õ±?à*߃ÓîÜŸ8°X¾\Oë
£j6*²0!k/9·úy&ïC¹?²ÈŸE‰)(Î2AGo%ÞC¡õKK )X<12>ŒînÛQ Ðc{”
R¢°jôþFðnÑõ…)¯Zöµ¦÷^ŠÍÑŸÐdè ™&¦aRgevD 6ŒÎä[à¾é¿ñè ?ó,&Z¡C»^¶oX®Q³&w"-:Þ-šúi_ŽYR­Ô]¬,¹+

Binary file not shown.

Binary file not shown.

Binary file not shown.

Binary file not shown.

View file

@ -1,24 +0,0 @@
age-encryption.org/v1
-> ssh-ed25519 2P4nKw 4iaVWuEpu0Pnx/Q31EnHdOCscMKLRfAJIUcX4hku4BU
OSFvYQ2NAXaCvsgSrMtJfDCZiH/jFMSVHsgUwSuHAWM
-> ssh-ed25519 l/ODWA g5idZb4njYd6ee9gpSUx1j3jWe/qzXjpYj0INI0triY
3c4pn/mocpcFChQmB5vOEbrss4Nhnw8zrToWnc9cOqo
-> ssh-ed25519 7+5K3Q A3R0GNa3D/PegWfttruGjXTaeTRHA6KW7MdpRplaohw
DJp9QX/kQEkcdxJpQHrsHZ1yeYAWjCXmPgQFrGcmfFo
-> ssh-ed25519 Ow0TGw Evztw1rRR+lSEMfh24wDBrD1O91cWw2AwzQNCEY8IVo
hM6GMuu3dHPI2Rx9YZDbqc+QLsnc4Ktc6D/6BpnLIqQ
-> ssh-ed25519 cEINMA g+Ngu2YHrwmmKIhAD486YJoIBaZ+WMosObt/jdHQnSQ
4FD32rTVNVh2iQ52G+Cn3Q//HSxnXs5AMRMCtSkxScU
-> ssh-ed25519 qbMKrQ Y1xkKgBXPwEuf5yHDxjmOnkjwBpZzueQtC7UfX9G31A
8sHKSsGvUnJa2J2iR036wuE233t9ScuLrP+qeGUs7Yg
-> ssh-ed25519 Z0mAzw zw5L/2jxAOy9jrcNNdT7PaeTbbZbUpPgP2yBb+QZm0c
ElNflob6IQYU8RNs1qxei0yjmKjFvnRZOHPbV/Eyqjc
-> ssh-ed25519 GNZYRg uZfk77Vg2yr5lJg6t1Sa8YQWtEYdbQgC/NVMq0FaKT0
1X8F67PehT58Xr/pKA2su2VmNYXz4se1RmFkLXq4big
-> ssh-ed25519 fd/ZLQ LFYTVjWoIsv8ZXyf31XbtXt3tDdH+symyGWuws9FRmA
+hL+3qdfl/tyKFXMT/mNQ/lE/QAxDiK7y5xEc4OjfMw
-> ssh-ed25519 zQBiZw NTeGOoA0we2RrZPQpO9NxG6gL9L2V0zkccAzT3VLZXE
PAS77+yTTbqBgAZWVk1G6m/5z3UmeXEFunxsm+uoxr8
--- qfUl7pRMoJn4f02380FBp3RhI8qa7CtHngYTNDDPGdQ
m
@鼝黄えN`窱<>)萌/收稯P砓☆o靫霃襽/梙0<E6A299>錜}[奕Y饗岸B€湕-沐弟躉⒏f舊皮.贒#B诋鰯匶橻?坦[m<>堅,錚魣

Binary file not shown.

View file

@ -1,53 +0,0 @@
let
# SYSTEMS
heimdall = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBs+qYjpeAEHPFUQeatNkhKbXz8+A1VAl21jgifDYJK8";
baldur = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOvZ7Z8GS4+1+9D6u/BDit4Eij5Ubbii2dzJ/+ecT8iR";
bragi = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBKMV2vqlDvIkUefl5oEuVjVtjgFLEXyDKX2LWhVQsWT";
thor = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHZGQLUhyLwmkTYhSccqO8umQJN0QHk6YaD863x7lcGv";
odin = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBGfwv4CzZlPGsBukfoq5wBTlVfWJo7UHH7DP3ILP6/Z";
freyja = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIODW4kBme9Vhx93AkPBwiTvcA7ad+rqLaEAhasMMhNzH";
tyr = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB3McoNRZkk0hJXHv1MWSx/UklEmr2iZ26C7ctaNK/Ww";
# USERS
root = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID2HeOFYaGmjP3OQzPuA+DSjkqfyYH4axoDPWKVP/jdU root@ymir";
crony = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBJLduAXHWJiglmfRfkBGKffzVWkJP6porxIzw6+Zz3W crony@cronyakatsuki.xyz";
root-skadi = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGJ85a6FAJqM8QhtGcrT3BGDs2G8m7DFtWNDh2Vvkr0V root@skadi";
users = [root crony root-skadi];
systems = [heimdall baldur bragi thor odin freyja tyr];
in {
"traefik.age".publicKeys = systems ++ users;
"wg-heimdall.age".publicKeys = systems ++ users;
"wg-desktop.age".publicKeys = systems ++ users;
"rclone.age".publicKeys = systems ++ users;
"navidrome.age".publicKeys = systems ++ users;
"forgejo-db.age".publicKeys = systems ++ users;
"plausible.age".publicKeys = systems ++ users;
"conduit.age".publicKeys = systems ++ users;
"searx.age".publicKeys = systems ++ users;
"miniflux.age".publicKeys = systems ++ users;
"crony-passwd-desktop.age".publicKeys = systems ++ users;
"crony-passwd-servers.age".publicKeys = systems ++ users;
"root-passwd.age".publicKeys = systems ++ users;
"restic-local-pass.age".publicKeys = systems ++ users;
"restic-backblaze-pass.age".publicKeys = systems ++ users;
"restic-backblaze-repo.age".publicKeys = systems ++ users;
"restic-backblaze-env.age".publicKeys = systems ++ users;
"restic-server-local-pass.age".publicKeys = systems ++ users;
"restic-server-pass.age".publicKeys = systems ++ users;
"restic-server-repo.age".publicKeys = systems ++ users;
"restic-server-env.age".publicKeys = systems ++ users;
"lemmy.env.age".publicKeys = systems ++ users;
"wg-ymir-home.age".publicKeys = systems ++ users;
"wg-tyr.age".publicKeys = systems ++ users;
"duckdns.age".publicKeys = systems ++ users;
"glance.age".publicKeys = systems ++ users;
"ddns.age".publicKeys = systems ++ users;
"linkwarden.age".publicKeys = systems ++ users;
"linkwarden-db.age".publicKeys = systems ++ users;
"paperless-ngx.age".publicKeys = systems ++ users;
"forgejo-runner-token.age".publicKeys = systems ++ users;
"attic-env.age".publicKeys = systems ++ users;
"wg-wireproxy.age".publicKeys = systems ++ users;
"wireproxy.age".publicKeys = systems ++ users;
}

Binary file not shown.

Binary file not shown.

Binary file not shown.

Binary file not shown.

Binary file not shown.

Binary file not shown.

View file

@ -1,23 +0,0 @@
age-encryption.org/v1
-> ssh-ed25519 2P4nKw NCoqAJ+IdYnRedKv23voGjEeXJ2IKnn1ru8rEegSCmM
RAf5hshay9kyTUBSFhEerpaEdJquufIn61mj4G+2VU8
-> ssh-ed25519 l/ODWA jZhbqHZpw4UYbmKcVaNLhmXHSkqQhYKDYOV+hiLydlI
mentg+0q55+4gwLFbzveXzPyGEmcFyQhaGdWBHrNPDk
-> ssh-ed25519 7+5K3Q MZA2Dc28X17/JQf01DuONHHttL9mfINFUpi6Ei4osTM
q/vfUr0H1grVFm/7lnwDCAD7athyXZTrwzZ7WLGMlOk
-> ssh-ed25519 Ow0TGw EMNg0QgRrIWtortkoHV5y3W8G2luAszGdJP6J5WFCQI
L8vDx4lkA9KP8wx1ycrmjdiU7cOyJMUzmBhJGJsqg1U
-> ssh-ed25519 cEINMA MxmgQmJQrjuzrpf6U3CCsu/ZHWlnItCs8PiuIt6SQ3k
ina1R2HbexQfWe/zpWGrpVa5dP6ZpTWyjztKtfV8YXw
-> ssh-ed25519 qbMKrQ fMOzVMLvy4tKtITfAiWwnPVnCMCH5Ocv7P7yVK3+0zM
S3MMdVcyL66pTEjTN9iYwW6QBMlZuvzKVa7TlS6Q/kA
-> ssh-ed25519 Z0mAzw y6INKLu8L3pwLdPRk1ukRGIoJksmUJkxXcZsA/h8BWc
p3mItFuMW+t2vQPfvhd6mlalJNad40+0+zVOm6TzJuE
-> ssh-ed25519 GNZYRg pEPVDnyXksxjYfJL/TzwxaMhU6V+/BbzUmhdlNRMHyE
yyZjjlPH5PwHnnnlAW186DwPbvPccQrFHkoN5m/rKn8
-> ssh-ed25519 fd/ZLQ H5dx53Qv3Vi9d1LBQwrgCVpGDPw67xmq0yVpNyeYY0E
V2XZTH0gzAHvWBtm2njsj2LHu41i0MMv3pvqajgDU1w
-> ssh-ed25519 zQBiZw ejAkmQMJfIHOn04Wd3wB2HE/VvhUnBHhyOrDXlE11ig
cDSDnV2wSMnhIgwMrFnHhfrmL8D38NlCmyJ8QEyBG2E
--- 2jtmzQVCWGlDs+u3BYILcsEs6TSPCuA3A65pb8j8MDA
ƒB^ äMWÎò‡Ý„[y×Ðb¦@‰ â[Øp&ÈW:Bø<42>š>ò¢µ$q:HwIFZÌ,.üì§*£gשg¢ÃVbC0tÔ6ÝŒZ}àF™ß¬^`Í0˜¦Mà¯7Bºi‡ ¶ ÿ«