diff --git a/flake.nix b/flake.nix index 39a8260..59dd57b 100644 --- a/flake.nix +++ b/flake.nix @@ -173,6 +173,15 @@ path = deploy-rs.lib.aarch64-linux.activate.nixos self.nixosConfigurations.freyja; }; }; + + tyr = { + hostname = "tyr"; + profiles.system = { + sshUser = "root"; + user = "root"; + path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.tyr; + }; + }; }; nixOnDroidConfigurations.default = nix-on-droid.lib.nixOnDroidConfiguration { @@ -285,6 +294,18 @@ ]; }; + tyr = nixpkgs.lib.nixosSystem { + specialArgs = {inherit inputs;}; + modules = [ + disko.nixosModules.disko + agenix.nixosModules.default + inputs.stylix.nixosModules.stylix + auto-cpufreq.nixosModules.default + ./hosts/tyr/configuration.nix + ./modules/linux/nixos + ]; + }; + ymir = nixpkgs.lib.nixosSystem { specialArgs = {inherit inputs;}; modules = [ diff --git a/hosts/tyr/configuration.nix b/hosts/tyr/configuration.nix new file mode 100644 index 0000000..3ddfe70 --- /dev/null +++ b/hosts/tyr/configuration.nix @@ -0,0 +1,141 @@ +{ + inputs, + pkgs, + ... +}: { + imports = [ + # Include the results of the hardware scan. + ./hardware-configuration.nix + ./disk-config.nix + ]; + + # Bootloader. + boot.loader.systemd-boot.enable = true; + boot.loader.efi.canTouchEfiVariables = true; + + # Get nicer hostname + networking.hostName = "tyr"; # Define your hostname. + + # Enable flakes + nix.settings.experimental-features = ["nix-command" "flakes"]; + + # Setup gpu + hardware.graphics = { + enable = true; + enable32Bit = true; + }; + + # Set your time zone. + time.timeZone = "Europe/Zagreb"; + + # Select internationalisation properties. + i18n.defaultLocale = "en_US.UTF-8"; + + i18n.extraLocaleSettings = { + LC_ADDRESS = "hr_HR.UTF-8"; + LC_IDENTIFICATION = "hr_HR.UTF-8"; + LC_MEASUREMENT = "hr_HR.UTF-8"; + LC_MONETARY = "hr_HR.UTF-8"; + LC_NAME = "hr_HR.UTF-8"; + LC_NUMERIC = "hr_HR.UTF-8"; + LC_PAPER = "hr_HR.UTF-8"; + LC_TELEPHONE = "hr_HR.UTF-8"; + LC_TIME = "hr_HR.UTF-8"; + }; + + # Enable seatd + services.seatd.enable = true; + + # Enable sound with pipewire. + services.pulseaudio.enable = false; + security.rtkit.enable = true; + services.pipewire = { + enable = true; + pulse.enable = true; + alsa = { + enable = true; + support32Bit = true; + }; + }; + # Fix not saving my state + hardware.alsa.enablePersistence = true; + + # Enable polkit + security.polkit.enable = true; + + # Define a user account. Don't forget to set a password with ‘passwd’. + users.users.crony = { + isNormalUser = true; + description = "Crony"; + # hashedPasswordFile = "${config.age.secrets.crony-passwd.path}"; + extraGroups = ["networkmanager" "wheel" "video" "input" "audio" "gamemode" "seat" "realtime"]; + openssh.authorizedKeys.keys = [ + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBJLduAXHWJiglmfRfkBGKffzVWkJP6porxIzw6+Zz3W crony@cronyakatsuki.xyz" + ]; + }; + + # users.users.root.hashedPasswordFile = "${config.age.secrets.root-passwd.path}"; + + # users.mutableUsers = false; + + # Allow unfree packages + nixpkgs.config.allowUnfree = true; + + # Setup community cache + nix.settings = { + substituters = [ + "https://nix-community.cachix.org" + ]; + trusted-public-keys = [ + "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=" + ]; + }; + + # Optimise storage + nix.optimise = { + automatic = true; + dates = ["weekly"]; + }; + + # List packages installed in system profile + environment.systemPackages = with pkgs; [ + lm_sensors + libva-utils + alsa-utils + neovim + ]; + + services.openssh = { + enable = true; + settings = { + X11Forwarding = false; + PasswordAuthentication = false; + }; + extraConfig = '' + PubkeyAuthentication yes + PermitEmptyPasswords no + + AddressFamily inet + MaxAuthTries 3 + ''; + }; + + users.users.root.openssh.authorizedKeys.keys = [ + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBJLduAXHWJiglmfRfkBGKffzVWkJP6porxIzw6+Zz3W crony@cronyakatsuki.xyz" + ]; + + services.fail2ban = { + enable = true; + ignoreIP = [ + "65.21.241.194" + ]; + }; + + crony.secrets.enable = true; + + # Enable nixd to see nixpkgs path + nix.nixPath = ["nixpkgs=${inputs.nixpkgs}"]; + + # DO NOT CHANGE + system.stateVersion = "24.11"; +} diff --git a/hosts/tyr/disk-config.nix b/hosts/tyr/disk-config.nix new file mode 100644 index 0000000..179c727 --- /dev/null +++ b/hosts/tyr/disk-config.nix @@ -0,0 +1,55 @@ +{ + disko.devices = { + disk = { + main = { + type = "disk"; + device = "/dev/sda"; + content = { + type = "gpt"; + partitions = { + ESP = { + size = "2G"; + type = "EF00"; + content = { + type = "filesystem"; + format = "vfat"; + mountpoint = "/boot"; + mountOptions = ["umask=0077"]; + }; + }; + root = { + size = "100%"; + content = { + type = "btrfs"; + extraArgs = ["-f"]; + subvolumes = { + "@" = { + mountpoint = "/"; + mountOptions = [ + "compress=zstd" + "noatime" + ]; + }; + "@home" = { + mountpoint = "/home"; + mountOptions = [ + "compress=zstd" + "noatime" + ]; + }; + "@nix" = { + mountpoint = "/nix"; + mountOptions = [ + "compress=zstd" + "noatime" + ]; + }; + }; + }; + }; + }; + }; + }; + }; + }; +} diff --git a/hosts/tyr/hardware-configuration.nix b/hosts/tyr/hardware-configuration.nix new file mode 100644 index 0000000..ef5ea56 --- /dev/null +++ b/hosts/tyr/hardware-configuration.nix @@ -0,0 +1,31 @@ +# Do not modify this file! It was generated by ‘nixos-generate-config’ +# and may be overwritten by future invocations. Please make changes +# to /etc/nixos/configuration.nix instead. +{ + config, + lib, + pkgs, + modulesPath, + ... +}: { + imports = [ + (modulesPath + "/installer/scan/not-detected.nix") + ]; + + boot.initrd.availableKernelModules = ["xhci_pci" "ahci" "usbhid" "usb_storage" "sd_mod"]; + boot.initrd.kernelModules = []; + boot.kernelModules = ["kvm-intel"]; + boot.extraModulePackages = []; + + # Enables DHCP on each ethernet and wireless interface. In case of scripted networking + # (the default) this is the recommended approach. When using systemd-networkd it's + # still possible to use this option, but it's recommended to use it in conjunction + # with explicit per-interface declarations with `networking.interfaces..useDHCP`. + networking.useDHCP = lib.mkDefault true; + # networking.interfaces.enp1s0.useDHCP = lib.mkDefault true; + # networking.interfaces.enp3s0.useDHCP = lib.mkDefault true; + # networking.interfaces.wlp2s0.useDHCP = lib.mkDefault true; + + nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; + hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware; +} diff --git a/modules/linux/nixos/secrets.nix b/modules/linux/nixos/secrets.nix index 36f17a6..f6cd305 100644 --- a/modules/linux/nixos/secrets.nix +++ b/modules/linux/nixos/secrets.nix @@ -2,7 +2,11 @@ config, lib, ... -}: { +}: let + default_keys = map (e: e.path) ( + lib.filter (e: e.type == "rsa" || e.type == "ed25519") config.services.openssh.hostKeys + ); +in { options = { crony.secrets.enable = lib.mkEnableOption "Enable desktop secrets."; }; @@ -22,7 +26,7 @@ file = ../../../secrets/root-passwd.age; }; }; - identityPaths = ["/home/crony/.ssh/main" "/root/.ssh/id_ed25519"]; + identityPaths = ["/home/crony/.ssh/main" "/root/.ssh/id_ed25519"] ++ default_keys; }; }; } diff --git a/secrets/conduit.age b/secrets/conduit.age index 78794c7..f491709 100644 --- a/secrets/conduit.age +++ b/secrets/conduit.age @@ -1,23 +1,23 @@ age-encryption.org/v1 --> ssh-ed25519 2P4nKw +kBGyuuSNjgJusEmjJoCDWPuo5jEp1j9L2eWIXJKfhE -W8PE/ixYdyaJDy5AyUSvPeyV6H3sTeo3kdHyD0bzA+w --> ssh-ed25519 6+hQpQ TxGJQEYFb2BUxVZA28qM1UjHvPTApXmbpIYiMtw4giM -DCDRuUq/bsQ0HDq3JYVe06w9qi7yEY9dYnJ1hH9ZPH8 --> ssh-ed25519 l/ODWA 8+5LvLnblCVrT4InddnJIdQ6MOpvMmH4Nb6Dpm2OHXI -Lqw8in2Mb8JoA2ry4mwuKBBvy2iSxFwDt8biwZhMYlY --> ssh-ed25519 7+5K3Q M0nPSVJnvBDqEzn4le3varVpAV6CPSwqKsppiioWTm8 -W47Skw/hWM/MxoRsfiuB3UjKzmlIKX9izg4OsnXO1gc --> ssh-ed25519 Ow0TGw L667StxjEvwCTzGyGBUyiEe7FnrVX2OPNCwJdrBqMnk -IplEHnnjcuh0D1ZEOJRpqgVx+FcR+TylRsf9EVct3X4 --> ssh-ed25519 cEINMA 96L6ZitYBWtAV15yRVbhO40I/ts+5KlKRwz2NRi9bxE -/sFFTv6YTfDBYv5/exy2BFaPrkucE6m57HZvkwXUD3g --> ssh-ed25519 qbMKrQ rbAS1XLXXBM5Wv83W+f09pnyUjmZB8nn6ep6xywFsUg -HclxPuHBrD6Wdiy5fbgh+rlp1L1lfkjmWw03xD0TNe0 --> ssh-ed25519 GNZYRg OeIY2a+RO64638MrWdjZmySA6F52Yo71K0XyQMYbpTM -/0yn7ujDkgTrU4s0YFWhRL5tIA1Om92Knb0knEg/imE --> ssh-ed25519 fd/ZLQ Licr3fHvMFvO+x+8eQ12j96uqyC5s+TYdQzaYd4zzw8 -GLW89ed7lNajzApcDf+VBjWgtGIn229Lu+c0Ke60Q3s ---- 1WqfQrgH9olP8h2j12TTUKpNs6XGqgKoTxbTp5e1XDQ - -ά5CϢ$OϬ -.Uӥi"lZ8*m{&~VyI ssh-ed25519 2P4nKw /szqhCsTxbjtdtiDIJ/mhvucPAdordf0Bng63ow+h2Y +ZfUMAFQuyRJayMr8szjAi1U0wFEZgbtJQypGPfKhi0c +-> ssh-ed25519 6+hQpQ N3Uc33y6rRhf2eGA8+exBbYkOnj98AEjRPkUHysu1Ak +GFOaWTzQQrxwhL6oF5sltBIdITFyGsZDDlZXOppSNbA +-> ssh-ed25519 l/ODWA 4Qx2a/TnV5D+lPOJa/4z4XoK4FNd1BTnwVUCW/RXRiw +6dSw22HYWhIzHq6WqpeqsuSSSLwurdT1iuOlQNW6f1Y +-> ssh-ed25519 7+5K3Q QkPnynXIimZM4uv71qZaewI1RHCL7pjElzDOFhlOFw8 +BZZPMKbvwjnaTGQuC1dkWPhvbd5jU5DaRkTE5FFG0uc +-> ssh-ed25519 Ow0TGw gXtyiD9j0jaPFI9dJ+/E+mU4FtWsFkeS1lG9SQq7who +fJQnaJXe2UhHLmyyJ2ZrWAulCQm+JbsNxsovzCbDldQ +-> ssh-ed25519 cEINMA EUU8Mr/Y7Ike9ueKDa+DAzJL0RCiRPaBzZNl0Ej0EiU +xloD1eoeQRxXKhM8CqqYtxUv9CrBf4WLf2pRtKV/t2Y +-> ssh-ed25519 qbMKrQ NS5hrcZfH9ebqz8F3n+MUMRbGA5nY3jP21pQOABtPQQ +RNt4N+g9LDq/njXZHIYLotdtP9jXon3kVmJaJ5rhY64 +-> ssh-ed25519 Z0mAzw bbaYxUotndoVYSmYupFFAbLK/T6vXef041Lx2NqdxTw +QHh20cf9Q32taJyFbh6zDj4xAuNFAL+pF5MZsYumSC0 +-> ssh-ed25519 GNZYRg NJAYVO+ZuHlFtGuMplquG9PjtII74lY1NjZSBi7br0A +6xebVz/TLNdntaACWRl0VuAdTFIa6YRtB+jexHOyY+o +-> ssh-ed25519 fd/ZLQ FvO2Vd6Hcn4leWMwwN8EeWrWV5DNmEGaFwmuTjVQd28 +c/MQyoeiHo3Qsf1WFfOLGz5zXrRgjjGqM/zWN7+egGw +--- UTmXy7v8tjZ1x04dcBIoPbafe9WodM3MpHM9chziJhU +y{deRp=A0eWSUijvvJyr6\enXdOYC`8: C Jl3@KϧQDA$ip_oNGqD< _w&=eEILPg= ?Qu40wL9li?ja \ No newline at end of file diff --git a/secrets/crony-passwd-desktop.age b/secrets/crony-passwd-desktop.age index a181c47..f5a7853 100644 Binary files a/secrets/crony-passwd-desktop.age and b/secrets/crony-passwd-desktop.age differ diff --git a/secrets/crony-passwd-servers.age b/secrets/crony-passwd-servers.age index 8f171b7..6f03c4d 100644 --- a/secrets/crony-passwd-servers.age +++ b/secrets/crony-passwd-servers.age @@ -1,21 +1,25 @@ age-encryption.org/v1 --> ssh-ed25519 2P4nKw gC9pw6o6V9zksSmUXLXOaDP77t+femBHMT390u3uPzw -jWSOEOaskJUI+FUOYSWlDOQD9GMEKtTXQYj+B3j5wHs --> ssh-ed25519 6+hQpQ EkIHeJ609ZDCK40qs0bGkfIfTIApgpwdJUvtTszcvxk -3HfQfwOCmRnHVUhTpoUBsE9WzypVRq3WcV9sSqs1JMA --> ssh-ed25519 l/ODWA u4u0HvZjqrgFNkcJLVluPOATP8mbWox5kRMQgVPKqxQ -WqdrR30ZfaV24WwXpdi/D3ZSo/WPCHovDxOSe6Oq+uM --> ssh-ed25519 7+5K3Q 3W92ogsrhPMhZALyTMliilLvHQFuXiwDPhJstLRA2go -J/Z/QeuK32SkKbE3uhAhnZJZwdsuGHR0/qLNlLlCDuA --> ssh-ed25519 Ow0TGw tYvjIHz4rmmM4RfdCWXbofL1yQPI0phylAaWuS4CW2A -YJVPvO1JgKVF2kugLo+OMDUyPCbxYRDb6aaPqk57cl8 --> ssh-ed25519 cEINMA U2nwQEQy/s6+Aa84XxIneVJrfpK0aq6gtFK8WQHCBHY -emNwaL3uJS/TNBwXkJo/NI6CdAJR/Vk19QPUjhpULlA --> ssh-ed25519 qbMKrQ VBOINjeJ00kWhyUmB4GOoMx7mX2YoTIgh19gQLftDQg -se6IZ+bThqCY3igxNzG3uNuitsfJ7NlFM5lTxRpP4ik --> ssh-ed25519 GNZYRg 3/x7oDCayH98ScCfuToog7zjpOR/w157ylamZKFuBzk -k+SmDC+PRvC50fHpty3+xdrY3o76QtRenEIc95b2c4E --> ssh-ed25519 fd/ZLQ XTUdi7FXXIZLaA5vyQp6SOvPqcS4/SYalI8gguDesEs -7avpvBzTKoT0rSnetRSISECKWd2oVrHwhmmUnxVuH3w ---- TQNYZj8wLem2F2HhYqJiLc5ZGue3R2Qr7L4mzl9WTm0 -Rk妆DOğj;9eyѻ2}dd=<6(L*nէV!Rj#$"A\c{O; \ No newline at end of file +-> ssh-ed25519 2P4nKw r2ZGStNi+87P64Ni69PxJftIlWbLhbjWLcIlFQn1zwM +m71Et2TGE+23tGdvv3EAKJOVb7WBzc1sZ4zyGYorGw8 +-> ssh-ed25519 6+hQpQ ekH5UP9/csw6f+/dg5YNeIgnE/EMNXJdTEMh4791nDc +AbQT7h3aB6X8DxsK93mTsy+661FPHuLYcOP8BN29S+o +-> ssh-ed25519 l/ODWA ur7QwAdwnDejLJwrdPRl6ul4/CbIbn0+l/QcQWja61w +ZOVQ9HIHaY7b/Bmwp31KRrGQCMZRmKKxwRB8gOzOrXM +-> ssh-ed25519 7+5K3Q WsaILpsk2TQHYJEMAOlHjhkgM2/dqUqrIdXooaXtl1Y +mPywer/cH23e6sF0eJbtpQCxHhsdYTc1KEN4NvvgBfU +-> ssh-ed25519 Ow0TGw YsVvcnO59mnthtQrVqzKvfh5q6l7RIFSwRhmRsZQj0w +jhn6PufiMLjS39HobQLtRCgsnsrMjyMJstBlO8E0Ics +-> ssh-ed25519 cEINMA oCCGcztBR9y13Jav22Kr9PZR83MKIY6rTkTrw7SKYg4 +2rEkZMcamcA42tI0R+mhVDb2R03KS0PCcTrWBP4NE9g +-> ssh-ed25519 qbMKrQ DzL4Glld5ZUAzQO3c8syIBzI9ueL1cctjKSw+A1MWS4 +YoRDne5/K0uNkbPfvXtqiXFHtF7klXot89PoIVYC3nU +-> ssh-ed25519 Z0mAzw 9Wava5HvSTyV5bSGRCZdJF7GI8WKKGQjLzIH2vJEywE +ElULpAOQOMNf/oejO0h5NKKKrLviQFkPOFBlsepabxA +-> ssh-ed25519 GNZYRg tLovH1hCOZrSB7c0qvMX3fTSF9V0x1mlBgnLVXBM/A8 +gBpSIm18Wd9oQwCxjk/WRCB5Kwv+LXPT1c1ZfwOO4DU +-> ssh-ed25519 fd/ZLQ kc1qQhntVAroSbb3H4cMUJlQ1i+p+tjuttfDk34idRA +59k+GYUlllW+4gVYhtdpQ5W6Pb98WcR8oQrNG01QAPw +--- yLsDdaMyMhVjZp219/gniI/Raz4wrP7ORLjw3NHuOks +g* +Nɥ|Wؙje܀mHXОș85pq ߡPUðkW+( |;QHώ!/ +FNW \ No newline at end of file diff --git a/secrets/forgejo-db.age b/secrets/forgejo-db.age index c551feb..ca52a66 100644 Binary files a/secrets/forgejo-db.age and b/secrets/forgejo-db.age differ diff --git a/secrets/lemmy.env.age b/secrets/lemmy.env.age index c235b09..ca4600c 100644 Binary files a/secrets/lemmy.env.age and b/secrets/lemmy.env.age differ diff --git a/secrets/miniflux.age b/secrets/miniflux.age index c9eb4f7..1c56c43 100644 Binary files a/secrets/miniflux.age and b/secrets/miniflux.age differ diff --git a/secrets/navidrome.age b/secrets/navidrome.age index 4536621..51df956 100644 Binary files a/secrets/navidrome.age and b/secrets/navidrome.age differ diff --git a/secrets/plausible.age b/secrets/plausible.age index 767d8d9..4a50212 100644 --- a/secrets/plausible.age +++ b/secrets/plausible.age @@ -1,22 +1,24 @@ age-encryption.org/v1 --> ssh-ed25519 2P4nKw eKzaEC2cYarFQFQkEvyiPzekHhY8dkcUsSHj4vaUzwU -AONZBWcQ3liS5RTmiwnGgoAesy+tCk2FOl/9jJbNl1g --> ssh-ed25519 6+hQpQ n4KVpDgRaZlexxzN6ikGpXHHJXMYhXEt0GY14JYWxC4 -gtC1f2nPA7QNeWs83Ljr4/FriJFyJYlYLTWNHRXFOSg --> ssh-ed25519 l/ODWA MJLw4wGtHpCpbK4TuvUm9Ls/hZlfIlVcpiY+HvZPU1s -Q6onzC1voE2/c+LgPVusEV5c5zEsAwS9d4l+VeyZubQ --> ssh-ed25519 7+5K3Q 6HU6/M4eOWxwQhfbN1kro693E1Yv9KqU5CB/ZetjOg4 -ppTIJeWqz8+vHlvj8SOUEKs6XsuNn9Fz4KrWcAtUR1M --> ssh-ed25519 Ow0TGw UanuazqgWTJe7IBRe/Ym8il1A+rUuoWO82TKfzGt1zM -2mAhFgMVBuKYd7QLdbenkkoaNuUYjvw404WYOY+vnjY --> ssh-ed25519 cEINMA pePsLYIbadx0q1ZJ034VMX8ajycesg7oAyOTvrefpF0 -k1rwejjv/Kq1M1AMmkol9ixbwybRFzQVEAFqUuVhEOI --> ssh-ed25519 qbMKrQ zNMsRwQfippz5ZR+k/SfWmQFbL0h4QpEz/XrhgT/aBY -W1Jz3B9L+/QuXUfJzathrXmp1NRb3z2euDl+IATf/jg --> ssh-ed25519 GNZYRg zXACa79k8ORoOZtMpi1llVTKCMGuxFYeCu1oU+mTnQU -AcDnD+57GneUflLpqz86ei2Hn/Iy+O/TqSJWHiKS2Qk --> ssh-ed25519 fd/ZLQ bwPGy+IIs9uQ2QJEf6/DiQIWODjIQpJi/tyGT1fNu2A -JXsWdx30/4ssL4wYOvtQAiX1+ykZB7O1JBMSQ5eQrPg ---- fhMixyXMTrVSptQ2nK8x3pcilUSQzKOpE+g9AH7Q+0g -֮ -#{FX[7Q01M_ҐMCnL47~Xaw#mum"WeL$>H"ygx`@ \ No newline at end of file +-> ssh-ed25519 2P4nKw p8UjJe+uoIaz/8mTznT3CZjzRxodKlpnmgBqP+bfDho +EcTH13pW6sMgUxA71ZAycmYwftfOvJ7MueSB16xBwbE +-> ssh-ed25519 6+hQpQ GMEGy0fCMgNnq9hdtZ3VOGKEma4/erbPmfXyHMK/onI +VUEv18B+5ScpbhvgJ0AD/RkgHtWlKqL31S3P7L8wSD4 +-> ssh-ed25519 l/ODWA mcN4H+KCGL28XmVdn/f0qE+UJhWOl0RY/eokvx5hozc +8AxVNvhjvzbsXPEUGRhQzb78AgQRkOC73MgvveFz8FE +-> ssh-ed25519 7+5K3Q GmRaI9eHzepN7IxzhBJ1DsJKFL6TKc+UPA5gdO4TiFQ +UBFWUlil/dxi1zxtHurfboLienhXmP2TbkhE/nf8i/s +-> ssh-ed25519 Ow0TGw TjewPYyNor7jy2nsHAtTTVna9F+u/xeDfFOTjSUnPE8 +iatU0coSf0BRhTGRxNwmvb3OCS3FlJiU8yt7USi1CM8 +-> ssh-ed25519 cEINMA V3ekXWIaYtnyt0d7c4rSrSaKbmKUez1vqMpf8eBl1wc +jHKjAVjsGcxK25wKDsUpi9Y8PCwLYVRkIiA08oQmqD4 +-> ssh-ed25519 qbMKrQ mimzt0RXZY7Ut5rKWNRq444J1T3B/SbVBiIvV8a3CyE +Luaz3AYcrPYq9gmjBmcPrK2hZIO0B0sjFyAtwjVgvOI +-> ssh-ed25519 Z0mAzw hzT97Gia2MKY/NDs+Btn/5VEEhTHMsWylKjnVPS5cBI +HSxJlfgFLRdmAwIPF0rHaIL1j2bZTWw2lwENbr7PR9A +-> ssh-ed25519 GNZYRg OlTGa0kNYmNqc5+5Pphe1IPz5KGSvf+011iHIDbpj3U +VMJODsOgjJPXnvIVlbQ81xSX0oIpVyfDokbu0UTcH8A +-> ssh-ed25519 fd/ZLQ UC42zT0yQL9KBBnSKU9iFT9E2C1LLCDg6Q8ThZOm13k +LKgGAmwXLQ57ZavmpnnMzjxKemvdtqq6zKhjrJaij78 +--- +uRvXnG7ghIINbIMTvVUXF0spuU/+gjAqyHY/kMH97A +ې {n?[@ c!i8i^8HfyT +l9!DRPe8jP &> *C ssh-ed25519 2P4nKw VpIFPHc2sG0Fr7RaSp1sp27+igiSOEpMagaWf/CRyW4 -4kM2KwNG47E+XOszulTU1WAiktOYwTdff4CzsSX5dWo --> ssh-ed25519 6+hQpQ akYAB5TgKkdWyPzW75YKkol/pNMKmi6eSRM0Smkg7ws -XE4gqMqaqUVMJ77kTYuLM8lxJ74rUb+o1/K+ptSn40g --> ssh-ed25519 l/ODWA 5QQ6PCjRv62Qj+OObHd7f9Ybcv7ubr8j3Kx80MfDGAE -xNS4gaNPz2pbjcVatSivKz74dUwZKPTGeIeFLChJ0WI --> ssh-ed25519 7+5K3Q AVBWlQIvjfvKc8vl0Ln1cEuDgy3AdFWD8/IhwubVWyc -KjiIFfbQDbr0+uNsauuxE9P7ZEtfsOfPM9FXjtbWl+0 --> ssh-ed25519 Ow0TGw tyX1hPmyMX8OLn4HJCgJLOGNvEcBIMs/ehfm1atVMzY -pb1w/4/DGvudQKX9U2cxDK9AYrMtZ1kdLEmEYEEC4zg --> ssh-ed25519 cEINMA Qw1dm3Tp101EDjDLNPkE7xW6x4I8uzq3hxbwEbvTdkE -UlQI8Lhz+awc9ZCfmhGsnaSn9iL0N1o7XwuZxEGqp1s --> ssh-ed25519 qbMKrQ mob4CL0vPjLsQWQeX957aRoZiY45Ii57gycZNORSV3E -JxRsxxGhI9QtRmuTLIfBMJBQNnzx2/WQSKX4GTzK0zs --> ssh-ed25519 GNZYRg 6H2FkkW8CnZPIbnMvqGXVRNWBsGshCf8zN1qN6A3l1g -5HgAQVUNUJHHzc6Iy60VhvKUPkqMT9qzwtZLQws6h0w --> ssh-ed25519 fd/ZLQ NyzeGuA76toU8gkkNnZk+A6WcURFH5EwfcMw2rlA2kY -99rQUY+TjYnpQCDKpNOQtH7+GK+KnZ5Dl/HZYvYYLSI ---- Ut8YQYzHvhr88Rze/lkF/veN29jkIJqFY5MoUOKdGhk -Hg/rXi-;QW_v> -wgp9:v]K#^7DSK,s A>箖rf:wtd~az?C/Z'IT ': [DquQPAVD<`\}`6?5~N2b{LV'$J́OHԛVgQh&w65ݮ2G בuY,Z ` \ No newline at end of file +-> ssh-ed25519 2P4nKw dMqoHiAQ16fnn4pVLGFSqPqTT7BFoWAcvnyUfaWE8iQ +LO9EmxLj1ktfIrdg6fchHcHrIcnSn005F6pMJk01hu0 +-> ssh-ed25519 6+hQpQ IrEXwPdUklDB3L14gtUOOsWp64qhD8lhEsYiRyjZjyA +k9xG7kLVPrMsoKXTj4hqgAXX3KX7aK3FfZMRfzVMUp0 +-> ssh-ed25519 l/ODWA QTJupHM9iKStuDDYzfn7ALpygH2+O7IcUdedMOa/FD4 +0pjO067pGyY8VS66gpcRABMcJJKUNnxJOfBn4dsS2jg +-> ssh-ed25519 7+5K3Q +mAd1ySgguKirExnCLkzVvscbtvhopV+OAHfP3AwJCs +GgI3UyXj9ySJAW0OHSKye8bTHyE3Uz0fnkKF3akAXxM +-> ssh-ed25519 Ow0TGw BPopOWSfgJ8+T2/4/UfCbaslM1eI83c9wXNk8H+ENGs +SbbNKrj2DFPQJqWdpGOEil1+2QK7DzmVahnWWRDWt40 +-> ssh-ed25519 cEINMA Mg7zJXUyfmuHwgA7zdzyfyqmkb03Hn/8rNJiX1MtSVI +QcSpDrQQXfGETX7vuNA3kQGBjl6a+K8v8BtVCndEN3w +-> ssh-ed25519 qbMKrQ i6Pe9yMAuuRLA/bQJZjXAx76fD4ZbapHDlZKKS/Zzg8 +Q+QnH4JqM8BPyR1xLPQx8R/pWR7etDWtG0ywDqbVcmg +-> ssh-ed25519 Z0mAzw O1AKvHHdA39f5e3xvPJnSqdhHjb7gd1FOcAk5efwc1M +MeVQzFFCOGchYhUXr0tevls0/1+cBlZhbeNnv8p8LYc +-> ssh-ed25519 GNZYRg C9ap6pxFYhNm957eEVPGJ/dxMlqTy7wkHqd0f9Yh3Ag +XKycwbXaV+1sc8ZHgzQfIcGAxF3R5uU3DuyfzIWxXAc +-> ssh-ed25519 fd/ZLQ ai+rwuymhocytco95RAwbzasc50ZofaWxTh9Cb6e9x8 +3FeBPwCZFrgKY5RWgohg+suhsMYeZm51stEdfOuREeY +--- XOoAfArFFIEnWrbE1yCcXrLxnfogqC/kQVFvY057CjQ +rfJuV5' Ǭ;3J+߫ :Bk޺AH8涴LwB`vrkb rE؀# D +P;:t6K  ս' O o4$@/\LoLG"'[Ĥim <0o +cK;է21 "IZʐGٚ%se';W=2g \ No newline at end of file diff --git a/secrets/restic-server-env.age b/secrets/restic-server-env.age index bec1064..cb6e79d 100644 --- a/secrets/restic-server-env.age +++ b/secrets/restic-server-env.age @@ -1,21 +1,25 @@ age-encryption.org/v1 --> ssh-ed25519 2P4nKw P/5AREO2GLWDGgTnQmcvq4ORUDvZUCDNUfW6gjnXgWQ -Sx+9oL+PqaJ27/reuUmXGcUk+46bOFcDrZHOxMBmRwY --> ssh-ed25519 6+hQpQ vzLILUkCCObrl9IPqqQc4mPmG6OB6qeu7vOVCOoEM04 -bOcMcMzGEh/5FifL89zMkxG+bN+hISfZoboe4yJmRC0 --> ssh-ed25519 l/ODWA BPR4ySpMzah8UbyWy98C8xgEvNFLznjGhNTq2sv1xUI -I3mRcRkoOMw86eBLaqqDmsuEl/RLPo1QMXJ6KYk4UMo --> ssh-ed25519 7+5K3Q +pDaZv47X000tK1W+2j/8EXlakycO5zR7x7AUfJ4LmI -XkwW2uMN7HRRFhuRdrJElVBJFwyiBd4/UInsJ9xoH6g --> ssh-ed25519 Ow0TGw 1AakJzOyPpNkWpOSq8+TecnSdWFH1sS70Zcl4YwMSyg -4g/e2PAMWtHgD/ejlZio2hd+kRlcBO4Hih7i1973n2s --> ssh-ed25519 cEINMA yBiCcMRwa6KmAAUJdhPeayKYYqmW2lLrUDP9JH5TVAc -2Ba4lRQ/rbKSSRbQkunq1l9FbuASbYkaSo+hLEyr+R0 --> ssh-ed25519 qbMKrQ JuE4wL9iuYie2cno9+SRZipNCy/IyjS+6+RXMOFXi10 -jIBwICumFSm10F5t3VFdhzl6/Lv211jAZnp72yNtaG0 --> ssh-ed25519 GNZYRg 7e+vuacgxTObvGQToLk/n0yVQ8cpL4h/SLTKtY6HTQU -EoExlKOqtE4wJ2hVBCvYLyecZyW5Ck+LWq99iFth+eA --> ssh-ed25519 fd/ZLQ eICkKc6DBKBqijQXJMlP3zNR7LLmR3JS+eksVACBGU4 -SjEGDhJIMRsEe9EGRW3//zdeyagAVYGls3Nm9Ap9EKc ---- 6p/Szb20erzQyj0bmy2781LdRQHHhG44pylOUlMms40 -F$YRD!Rh +`.~'`B' vi.5cd$Ր=T uV\( FpՄv֍k3&+&e9fgЋJEޔ~cD \ No newline at end of file +-> ssh-ed25519 2P4nKw q77F+6Ztnd/gk5qEigmSTuoeBIBqYVzmeXbXb8iYwyA +Of3ebNrF1rpWjLwE/a7v8AVMQlAp3V5IzrPOo6ZCoJw +-> ssh-ed25519 6+hQpQ ymAQFi+FBpMW4gS26EDUb/p2exhTNn1gigdSmj6MvTE +kV//Y3NdbdM4t1EDC3ewvPez6V3rK1+B+ms7qfmaEQk +-> ssh-ed25519 l/ODWA 6r9e+PphfIytUJJ3IO3KcuEfiqC2xXc+wpvn7fSIa0o +w0YCT+xVgES55QTXHmw4rq7l4ge+WD8/4mUuppOQFX8 +-> ssh-ed25519 7+5K3Q +KN7zYcfljTbjGB0ReTKxxbM4VPf2sg4kP+Quh2mITc +0NoMp9hhtO0BzgJTHUyNd7f01So2m4TZmFrsMNkUf3c +-> ssh-ed25519 Ow0TGw BRpofGj8hTwaChRsWL+mqzOgwy5j29HZ/t17gNo+JnE +EyFAt7lTKBKTyhfXIAEhM1Pf0UXdkZH6qiW39Y9rAAE +-> ssh-ed25519 cEINMA WkyVC4QpyLAptDTM540vQdX056/MJNotLHqLzJ60cAQ +2CoTnseQexfg6iimOBJ3M+FIbsCE/4Rrw8qKistJnVM +-> ssh-ed25519 qbMKrQ /QxsHyI3Mk6bnCdx3b+Nt1JcS/WJ94Ah/uvsWKPrblc +7+BUt7iIA7SQ8wiEBvTmjqxcerkjfy7GCxwnC5BIbA8 +-> ssh-ed25519 Z0mAzw T+SosJQDDovJJ0Z217PUtmoU/lcseLlT8gczBJcs+zI +Ze9gg4OZaXiz5+1awrUgf9e9AeFCcTWPQ8JUnMoYNDk +-> ssh-ed25519 GNZYRg oDnZ2VOvY9wxRW7+27aRVyigXBwbuSHUs9ohuLbvvwA +GsN747J3knFCu5CgciI2W2JX95A3PmOIzlrITnB3uh4 +-> ssh-ed25519 fd/ZLQ KOeDbjC7oYxmuXXq0zUCRwbxvQd37XZUdvpyq0I/jk0 +x8RAfCS9VUiBWb3pDKp/AHwQbOfsIn7qc2aRGfgrvZ8 +--- Mvao6Ixhk+N+YMBVyPX+2kZ73OsmNIU066LmgDEZP5s +#B#Y +]} +;Ԑg2:7cQ1:r H1j]9dâshF \ No newline at end of file diff --git a/secrets/restic-server-local-pass.age b/secrets/restic-server-local-pass.age index ad0cbbe..2b16f72 100644 Binary files a/secrets/restic-server-local-pass.age and b/secrets/restic-server-local-pass.age differ diff --git a/secrets/restic-server-pass.age b/secrets/restic-server-pass.age index 79b16f0..e559d5e 100644 Binary files a/secrets/restic-server-pass.age and b/secrets/restic-server-pass.age differ diff --git a/secrets/restic-server-repo.age b/secrets/restic-server-repo.age index 2047279..dd19690 100644 --- a/secrets/restic-server-repo.age +++ b/secrets/restic-server-repo.age @@ -1,22 +1,24 @@ age-encryption.org/v1 --> ssh-ed25519 2P4nKw QySrledbwALjWMNCtmNB9V4fjT05hih8mhJnULRTXkM -PW0Yk/eXqN57NuWQbuE0kUqJHf8XouODHNwQpeRiEe0 --> ssh-ed25519 6+hQpQ CMIGCb6niVPPKNTVXMjWx0Xrh63X4ucyGXATbPi2JEg -1yUotoIqnzGoX6gJ5/VlWmOXdm1Dt4vqLJrtsg9jlgE --> ssh-ed25519 l/ODWA X0hBPkxppmofKE1AWUJIKJkDPaclBVbCVGFwVmzWEEQ -fpXHBOfN/B9UDOIJ98r5J4BMYKeEPMXmM+knxkI43kg --> ssh-ed25519 7+5K3Q QdJv8xbWsQgeQpeVugPyWRS5aNFL+MAKCQsfHutEl3w -FDqXq5t8ElE2tl4WJbcpmJc0YmcrpjYqGX2O8maxHjU --> ssh-ed25519 Ow0TGw b5LtwpTlb2Hs9dtg8Uth1UIqNdRK+Nj+XsAApfsrbwE -lThcDeUMW49n6crw02xnh2HzZ74icKUdF6bdqxqqY24 --> ssh-ed25519 cEINMA aLfXjPsQIJby0CZgYDoA4WPL1b0e69SPe72Z4p6f/1A -lyT+Q6C3kPERXMepNmwoy0tAvLk6qdxUuQoV31KMEfo --> ssh-ed25519 qbMKrQ LehmoKiFc4HPA23gx4V9UJiinnm3Ei91BmB+EKgY0Gg -XIf9trBywVNsoIqAT1XtVqKi0WZzJ8iruGSxjE8zIiU --> ssh-ed25519 GNZYRg W4t6E8lEGhYTDepNdpQz8pch2Lm48xFUuntWoDGeJys -19OD++WOzru7sR5kkNVKmdnhMc0VXKrP2LLpvsxJxZE --> ssh-ed25519 fd/ZLQ Dteel22OzKqmx3uwIACayU2Ph+iUoZGbF1bReGW06lk -iaxcz6F607Xm5bG+ax2TRnvjgl6Kv/dE6VWJxEEzeos ---- +2gjtn4rTs6lwr04qBfQQ7vaYaxdk4zF/wdcCYQtmkM - !n8 -G֯'7LJ<x6d]`AdSs?XVJx@\~s y^@2-|:y㮫v/enc=Н}OՀm]Jj^ \ No newline at end of file +-> ssh-ed25519 2P4nKw Gc5RtP5ToOyHleo9Bf2AFmgrbtjqHQRtSVyTLVax2hs +2/SyvhCDSHWvPUyuTIE2Tu6fUTmxe6Cuv0RnzseDYV8 +-> ssh-ed25519 6+hQpQ gsScMSJI2NnpygCYZdZKllCDqhS8S4jthkkLSfVy9Ug +sKxBlwhMyfLqvk2nD1ICWoXm4dvvI5mPqln+IvFxRwI +-> ssh-ed25519 l/ODWA d0a12xcOSUf9YCaM9aAZO+BRGaJfWz6Uwx33vlfCJyU +ZrOOUsNoAz3wPqH+NcWcMKJOVRrTM8D9VLyVNl4+kz8 +-> ssh-ed25519 7+5K3Q o4EIDek4887FMTOUUkFFTACBpqhJWarvJ0S0AM67v3Y +0QOgJRWPMZyMOeYf5Jgq3F/1vHecZn6EGLlPXxx99/g +-> ssh-ed25519 Ow0TGw FU5jr0qOiI0JbpkiWVndEQzXzu7r1yzyq34ccGQzCCU +aXu6phThUHiQZSN185gWSEdod/5BKQytQTePQ8JJO3s +-> ssh-ed25519 cEINMA KQ/O1MKF9yfGjEV1HD/d8DI7f+ZQeFqwNDaNPLVd2xQ +y3dvSQ8FRwv8sBLszWMKfVcl7aXvYjEInmpr3MToOHY +-> ssh-ed25519 qbMKrQ +GeQ8uvO7BtyqnPA2zKzrXj95zdHr3TYyudtcZ7rITc +9SkJVgvvtZAdEC9/VHNjgSeyWtNEzfPwMqGRMHuENhk +-> ssh-ed25519 Z0mAzw WQo3gxLyd/AJ0gQ2cebLPS2OL/5yKk3zwA5oPxbdlEM +45ltZJRUMiwv5pxo5sXPKLI/3vHwWz9p6OBypzLNm4Y +-> ssh-ed25519 GNZYRg ZekH43/IAg2BFUPdMtj7YU5Rr9mp2irO+TzUQ67sPXs +UrMZJsu55GCwoYiXiBImrSUDeFERrZhWUiNAduxyAzk +-> ssh-ed25519 fd/ZLQ N1sESsgViClahkVs1MpGONCpWqV+c94cPnIIwC3b5A4 +vZ/ewA1Ft2PutZuJWpRLYi3D2pGiMPM2x0Qbj4LFoIc +--- 8eufRdXG/guSTgBSV2tUKFBmB1fyskkSHZNU9+Mpjgk +"H֑`ii0j%ZT0_PŨϬ`3~f`ڑf5% +Y_T~o MrKӫM;';%Bqֻt? \ No newline at end of file diff --git a/secrets/root-passwd.age b/secrets/root-passwd.age index 988da2f..d1df3e6 100644 --- a/secrets/root-passwd.age +++ b/secrets/root-passwd.age @@ -1,22 +1,24 @@ age-encryption.org/v1 --> ssh-ed25519 2P4nKw YKyCmZOgcMBwUCjenHnOncS6KIyDQ4V1NNm6XrHieks -h63n2wumf1E5MPCIqFKDERa1Bp9aFXBmXHjK/xul5Ac --> ssh-ed25519 6+hQpQ x/9Tx2T5EvXsvBPARwmx0ubUM0OPjMEBfEdn6Kpqyns -4l3t9MlG2B6yXP05gBwoEdkJJelrXnA7gRQzNlyPIA4 --> ssh-ed25519 l/ODWA cM//pExqkExxJwwj9M96SUXZtBjrM/0nlJhrhIGN3Rw -Wb8zRxhOHokPwi4ieJCZzNxwtv5FwejE/t9FnJqz9vM --> ssh-ed25519 7+5K3Q wpUMtAyKIRaxl5tj2C8H7um5Wq9tL9VklsviUzSznD4 -6hSVeMqRrwAqeACm01IF1WEjiJ1f+K6pLu9Lpou+Qq0 --> ssh-ed25519 Ow0TGw 8wuTbqHbr8LH4nEr/Xe2scWiXiSyS8//YhB1Nu7glhE -8Pouc/qECpdHWOpV1ZgsDhVdVYGwVFMtqDQZo9uCsTw --> ssh-ed25519 cEINMA /uK54LytJyNEzuQfs/Rd3uN24B41SzZQEsicgAF61Hc -QU83kNEhs1seXagpKJLU8c6m3L6FQUM+3bH+uND1jEY --> ssh-ed25519 qbMKrQ 8KdCsPMnfyj2daOMKceRKz0pd1v0urqyUapTeWXJ3R8 -LihZZ12FAUXD1o/azdLxIrx85iPfHQ7RvMgOBPvNQWQ --> ssh-ed25519 GNZYRg DPfh0CgLt23M4lT2+nlKuupgGKE7liInGL28qKTIG00 -TdkYlfrpJrsvzKfyJw1Xsn0iwlUR7Tpw9PEidQX0/t0 --> ssh-ed25519 fd/ZLQ TdqoPO2dVjjy7hmuaG75nLSBtNhYc4NJpEsg+d2sl38 -iqtzZo7SlFf6nWTjvS9RcnHs6pQ0++HWnAXcE6W3u7U ---- 2lZ59tmP1VC9QWfg4cH6iEf8YjfGnDlQZJl0wRdDuLM -@SV[vni D $gF$ v >]H^TCyDUL"lcz*@$ -kHcGri5frɱ(!vd,.w \ No newline at end of file +-> ssh-ed25519 2P4nKw cN6jZS/jP8cOdxZTEVbfJJmo/fELhowsHH58Deg71A8 +I7cFY64lNitfQSu5ASGvzQS4xumqvkiAyA3WXnlAj1E +-> ssh-ed25519 6+hQpQ ZVbrHrE9TU9Wy8oVT4/7bb85OxAnqGh3UAb2taiSDR4 +qUBoZcqhnwULlsVmlKU9cLCqvzGsOM0/4fXcm1SXECU +-> ssh-ed25519 l/ODWA 7YI9Csb9dSmibhLdCgd88crQEVcQRVRYDRPm+hob+XE +3wuiEAT97pWHLa+i+IjWiIwo2boviAt2C/ZrAb1FgXU +-> ssh-ed25519 7+5K3Q JSiH+SyNVcg7IaTR4FfrYGemNWKw450t5uwWz8E0Oj4 +vZHlVBymXV8deyfqCQx3tMyDEhtSQZlxlrBRfDDxtHs +-> ssh-ed25519 Ow0TGw BlfX4x6XZG4rMcU1GHLQZ2aingQTU9ZsXjO0zDgVxRY +Ge+RwqEqnTHKA6PPtENfT1Tamiqf6UhYWWTtHlYN+EA +-> ssh-ed25519 cEINMA ChxwjdhKXJw1CADLF9dxbxCKUoKiihTICTwn+w1x1wU +wzPPZFKj7Wjpayy23zqIuGlPmse2mMGpmK/7V6FOdcg +-> ssh-ed25519 qbMKrQ V2hM3lUZt1XPHF6b+eXchsB+zbfEROYHVwLzx0c7nAs +fqJ4vSQV2VTW+1/nh3qgoG9JJwTEBSe/9pbYzk0LXBM +-> ssh-ed25519 Z0mAzw b5/uT2x5lF2qxK50epdGL0N24eoJtywDJK36TwATTWE +NuI0DInvnBBbppS3ZS0F+O0COnY1oV5eqign6c9v9TU +-> ssh-ed25519 GNZYRg xGbRTr961x1/OFY7ON1JYgDYKtpjTZqQ7ZHuH2w2E3M +KkQbF4zgZ8d78ZD1I8tM/8Cb9DO0P97u+jdAQmfQtQE +-> ssh-ed25519 fd/ZLQ odllYMycsw88IVrjIdBCEgxeoe/czETl2ATHsQMmgQo +DtHWvfsh0zqUhCIq5f6puGPj3y6rndYIFihN8SSm0oc +--- jvrrPo8xaae16+YB2INSGFy5ADBc8LRbE2U8yAO9BIo +<aUDwk/,9<{r~AjC.)Y O0ڡwE<Y<)5THĞNM|+""l +ydx Z \ No newline at end of file diff --git a/secrets/searx.age b/secrets/searx.age index 0f6b319..7638fa6 100644 --- a/secrets/searx.age +++ b/secrets/searx.age @@ -1,21 +1,23 @@ age-encryption.org/v1 --> ssh-ed25519 2P4nKw OYJufSmsaeYqn+fD5ElOGYSMcBDiRInV3JvpepE/k20 -PWmY65fFswWb+30t9+wGDs4JBInk8xTgehggwzEBXgo --> ssh-ed25519 6+hQpQ Ey4rkv5uP/hYGXV580imJQ/prw9EQFefqeDOTaxgOFg -bgsdUkHvyNvuo2ZvVMQPL70y+jSSBBsVVmPqXkU3eQY --> ssh-ed25519 l/ODWA Rfv0LbNI3b2hB68iyusudS/Mh7Qd5cJxzxwpB51gPXc -uHdUYPbw/bH/VHbOJcOVDx9cQfPM8/JwEYN8HE9Cq6M --> ssh-ed25519 7+5K3Q g5kKgl/Vcf9x/eMcz1/DAfFzffmZV+9rZ3GUIPUIQyU -69uAgavIQ4oydTvv+6uI4P+1rSDH6poL6nF9QyhK0F4 --> ssh-ed25519 Ow0TGw 8d62QbpXlqHQFcSQibXhEmBO8RGxRpb/Fzca7p3f7gE -YOLW+E5BOqOeA9f5dEYDlgKPN3J1ahf09gcB8ER71s8 --> ssh-ed25519 cEINMA qmdpU4DjGmiO1KTSenZHoEMMoKvkHkFel3Q6q9r2NA8 -Gi8xRHeYnzcKeuUf+vV8GhOJNi7QyTXhVdlLKTjrrGw --> ssh-ed25519 qbMKrQ 1q1VsvXxeEHqEmXmanGH3y4rpXUpPkCAxcrvjQJpKm0 -Z0e/p7ucborYJY7tZEA/8yi3MU9dVVCYkGtJvYcet7Y --> ssh-ed25519 GNZYRg gbXWML7DR7dGLCI8cuZkZaPGyL/MrEVtILVJRLTAXDc -xRwyMy7sEDNEZcKhBIF/fHL2Xs3QaKaICE+Pd34LXCE --> ssh-ed25519 fd/ZLQ 8xjVPDPMvnVubRoQ9McOgEpRyuWb5dO8cRrGmVskJ0Y -wwVxj2HPXT77hxCdteOVi+IoqG2zLE/dejXcJ1YtIqM ---- qnkHz2zO6V5QFOdmN4udWBHvRfaU5LnoyU3t7Ov/hLI -GIrS5ٌ~Xm`Yj% sfɭ`4l׹qQѵ{3*oiL)h'Ԋ6$+ \ No newline at end of file +-> ssh-ed25519 2P4nKw qirh5jbaGEe+PrY13CinXDoB9FED20xrQKPNxWIGxiQ +2pxBP1/njawNsEforSBcy9fw1qEpg6kefWb1Dyw/rOs +-> ssh-ed25519 6+hQpQ yp4dZtcp4dYH/qICP1qLLMJ0hkArirhILJzUzgDpeA4 +OchDgmDUzdZOXnxdsxazg9rso2lNPvRTvFD5X15lses +-> ssh-ed25519 l/ODWA XxX+cBHdCU0vulS/r1RkjSVfNwHNKzo/kln7CtCv9Wg +NeSoQKULffQkrnHPPUJei4zuUJvCzv481OsBNOCu6AQ +-> ssh-ed25519 7+5K3Q 5Iy5Z6KWG+CW2YT+ZPlJ89kl6B6y3BYPn6oAP+N19nE +ETekiVwejU4lcW+6Ntc7H9jjxRkt2D8QN0mBU07dqD8 +-> ssh-ed25519 Ow0TGw qp3XXC/LBpj4idylBtj3GVN0zUaP0Djdie06iuEeGXE +H0dtXBZf1Hv+SqcxEP9RwpwkpOwhlKuYdcuzt1Qmnto +-> ssh-ed25519 cEINMA Ti7VOT/yN9c5wMDjvAOBpDSGksqQFhT/MsaqKPLvink +cXC98j91rPRD63JXtgyl1JVMf4IcKnhMmi7NKEvsS90 +-> ssh-ed25519 qbMKrQ AEfkkRuPNIBQ0Dy/eirlzfD8AaoqYghZckpeN0F9vAQ +uO3GJjFeu77xnBebbt58NjayP60jaKhxxUoZEtClPEI +-> ssh-ed25519 Z0mAzw 45N85PU3qQdEZNc1lvk5UKJNwZwHfkot4YLkDE5qOX4 +89w3TsY4UkLiBgGLSLqkD2WXlk+oTHju59SrW6LJNnw +-> ssh-ed25519 GNZYRg 6/MK+Yi0Xs5ufUmf1k8ks7AMYfStjm6h+vPEWj7jNCc ++CQ9bVF865Zvbho7y/eIoalvLkTDzL4ZjwN8pB4IOL8 +-> ssh-ed25519 fd/ZLQ 4ziwL4KpxqcR0sQkgdnrRtXAx9cBAopkZ6/adwPtNRk +bCvlggYVNMUVM+K0g1zJUrsRw/CbMratZT/de/TEpoc +--- 2uYydkNHFfrzi22YGeg6jkpRxZDbdtNAiWUO4LdyJtM +V*9as#Ti pUJ%n_oWF%kF}| L "wd, \ No newline at end of file diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 09174dc..0fc83b0 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -7,13 +7,14 @@ let thor = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHZGQLUhyLwmkTYhSccqO8umQJN0QHk6YaD863x7lcGv"; odin = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBGfwv4CzZlPGsBukfoq5wBTlVfWJo7UHH7DP3ILP6/Z"; freyja = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIODW4kBme9Vhx93AkPBwiTvcA7ad+rqLaEAhasMMhNzH"; + tyr = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB3McoNRZkk0hJXHv1MWSx/UklEmr2iZ26C7ctaNK/Ww"; # USERS root = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID2HeOFYaGmjP3OQzPuA+DSjkqfyYH4axoDPWKVP/jdU root@ymir"; crony = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBJLduAXHWJiglmfRfkBGKffzVWkJP6porxIzw6+Zz3W crony@cronyakatsuki.xyz"; users = [root crony]; - systems = [heimdall loki baldur bragi thor odin freyja]; + systems = [heimdall loki baldur bragi thor odin freyja tyr]; in { "traefik.age".publicKeys = systems ++ users; "wg-heimdall.age".publicKeys = systems ++ users; diff --git a/secrets/traefik.age b/secrets/traefik.age index 81d69fa..23e3613 100644 Binary files a/secrets/traefik.age and b/secrets/traefik.age differ diff --git a/secrets/wg-desktop.age b/secrets/wg-desktop.age index dee7444..fba9c94 100644 --- a/secrets/wg-desktop.age +++ b/secrets/wg-desktop.age @@ -1,23 +1,27 @@ age-encryption.org/v1 --> ssh-ed25519 2P4nKw eZVkGF0gwN/KJ5L5dYK7wSYjLv6Mfq5HrInXyyc6ckY -UIt2+C5GjnT+gFMhTQHHefIip3l1YNl7kOq78l4IGbg --> ssh-ed25519 6+hQpQ xWcrqNocdlTm+VlgAlobHuu2bbTSLVenfGF03eFD3Fk -In83iLZlfxglj+RoZ5Ix8hECoCNWvK+2m1XCY8OVyfg --> ssh-ed25519 l/ODWA npCbUDfjk8luCrqMMsfs0n0oGUckRwUvwSdEXiK3un8 -+MQMfmQtKu0UH1wQX0yU5+qUwqE0CxYQm6kBjph63fI --> ssh-ed25519 7+5K3Q lp3+47SKkrCQ5XJD6u//6H3gjg11E++7RZAOBxq+GR4 -Mmenwj9jC9XfBBL8jdc7dynYOWpsIJ8rgNWqa2stN6E --> ssh-ed25519 Ow0TGw tEKbLMi3SXyf+OXGo7NHvPO1GVp3lZzF9B1ESY7WHWo -52RogxQNFwHFHRMGw3ub1orjGdQ61n65eRPM+4MicRI --> ssh-ed25519 cEINMA poEovCXvIj1E2Dm441tnrEDYv9nU5rR7kpcAbXatqw0 -XErLx08wHuSf6odr7TwZKU/Z2yD5yZS7Pje1o49t/Fw --> ssh-ed25519 qbMKrQ SXMD/BVYzaRYqwunHEeo4p0YrgoUsS2EUFwV9NwHtmY -0oDselzfqv/duzVj3J+OSLpLv6yey0pFzN7N6HNOLTs --> ssh-ed25519 GNZYRg XRIReGH10DIQwJa7Rga9VfLu91T7uT4YWkBO6rUDrTA -uKWLptq7DhruXLG81Et+k6yWLhYuCTHME1eGsUOteWM --> ssh-ed25519 fd/ZLQ 4SgqJJ1nEpQel+y9N8ZIRzS88APM2hl047d3WfRw7GM -edAhy01AMQPi+dF+kwz2QCzrEokzQSms2vPI0ScX9Sg ---- YAaLO+buXHJPlJjqiyWkQwjCj31FnOpcqrLln1aQzng -#1Joߵ!֭Eݝ|RsʃM,TvrnԭE sފwC Om-vkm1y~sz<ۏӚݵ({lt^(q|I;?l5Iꘓ"ܕ2®454ԷҌ26dm -.KJ4NI sKzB^lj "Kpsɮà 0fj3g -2 7nj}A.GE2Ph&%VTKsb*XmiQӣ ssh-ed25519 2P4nKw RFwktAcEqlQB0o/DSopnBcygCLRTHZCC80ePQ9BuX2U +dqU5MFrt2FkYBsQKkFWUzO8SvmuCRYj+KVGja2u4uGw +-> ssh-ed25519 6+hQpQ clF96KNAwt0sh7zlX8fnN2q3xYaKjRIZ3rhKVEMFpyc +XM6xZtFCpHPOHKOAjlWFivydz/V3JeFPWdXmy9A+7eI +-> ssh-ed25519 l/ODWA tZ3rwoIW8LrVHR/Ldbxm3Az82Z3eCO6+mEBbKu0Jjwo +wBT+n/VHUptzwnwwEGWLYSmgKf4eJVSIkK6jgatTtzk +-> ssh-ed25519 7+5K3Q qmpf6NqUzpVq1fwmXnWJXqgH4OnaXqAnr22/TDDcnSY +J4esLto7gC+yGlOIIOMC6+7EXCXztf4omhA0pEnHeOI +-> ssh-ed25519 Ow0TGw h9tcePkmHROY04CN+ue30o14dKnF/nXGEnBBLaAFiTs +lofCHa812eqtZ820vtWtUf7yrZhDeJe5aD/VMXKDvfA +-> ssh-ed25519 cEINMA AA1RZH3gPfGbTYvoyhN3EXs7CliUjJaYBdlv418duxs +sb59FssEih6woCJQcamZkpq2Wd11WNAdP4scAKYt60M +-> ssh-ed25519 qbMKrQ id+ivJvg+b/QrjZvsfJjeE84FKqamewg+tZY8h4fplQ +xXBgX4Mpy7r4wpm/1tBUfUJcpZgSdMyIlnCzwkvofCE +-> ssh-ed25519 Z0mAzw dYww8qldN9hQ/nN7GD7i8MYKc9wRTjx6Qr7NXjsS/hw +BMb8Geu/0K6VgfGqLUIRLlfdLlLSwJ/5UAchD58QDLo +-> ssh-ed25519 GNZYRg OOzhEZPRKlqYTvvtjkpDmGy7xBh/yVUmitIw7xOc1ho +TklNiMsUpoG74dceocS4OzcE0iykGX1GdWYspZLvjTs +-> ssh-ed25519 fd/ZLQ 97IOgMD7IohkjMmT09n2kROHPeo6Cu+cr+Yjp8ogqmM +kGUVZTTkk4VOa15C0sJahtXfP8veM537+5+NFS4xm2E +--- oFn9KzcoWelmlIZs51VG2kt2cteR12nRnDtivrCTXRs +!IwG^HcCbB)[oE5+{P|`G]Zz&8 #?Ī2 sZwt%gK4xZKd5z\2u꩏eĠN(eГ_य़),&0&*xSm$u|<hv + +X2nE&LM׈k +h!푐<0$ÄRɗG)