feat(servers): setup freyja.

2025-05-24 16:31:58 +02:00 · 2025-05-24 16:31:58 +02:00 · bf1ea52823
commit bf1ea52823
parent 2507d0d3a3
19 changed files with 266 additions and 130 deletions
--- a/flake.nix
+++ b/flake.nix
@ -144,6 +144,15 @@
          path = deploy-rs.lib.aarch64-linux.activate.nixos self.nixosConfigurations.odin;
        };
      };
+
+      freyja = {
+        hostname = "freyja";
+        profiles.system = {
+          sshUser = "root";
+          user = "root";
+          path = deploy-rs.lib.aarch64-linux.activate.nixos self.nixosConfigurations.freyja;
+        };
+      };
    };

    nixOnDroidConfigurations.default = nix-on-droid.lib.nixOnDroidConfiguration {
@ -225,6 +234,18 @@
        ];
      };

+      freyja = nixpkgs.lib.nixosSystem {
+        specialArgs = {inherit inputs;};
+        system = "aarch64-linux";
+        modules = [
+          disko.nixosModules.disko
+          agenix.nixosModules.default
+          ./hosts/freyja/configuration.nix
+          ./modules/servers/general
+          ./modules/servers/freyja
+        ];
+      };
+
      ymir = nixpkgs.lib.nixosSystem {
        specialArgs = {inherit inputs;};
        modules = [
--- a/hosts/freyja/configuration.nix
+++ b/hosts/freyja/configuration.nix
@ -0,0 +1,41 @@
+{
+  modulesPath,
+  lib,
+  pkgs,
+  ...
+}: {
+  imports = [
+    (modulesPath + "/installer/scan/not-detected.nix")
+    (modulesPath + "/profiles/qemu-guest.nix")
+    ./disk-config.nix
+  ];
+
+  networking.hostName = "freyja";
+
+  boot.loader.grub = {
+    efiSupport = true;
+    efiInstallAsRemovable = true;
+  };
+
+  environment.systemPackages = map lib.lowPrio [
+    pkgs.curl
+    pkgs.neovim
+    pkgs.gitMinimal
+  ];
+
+  networking.useNetworkd = true;
+  systemd.network.enable = true;
+  systemd.network.networks."10-wan" = {
+    matchConfig.Name = "enp1s0"; # either ens3 or enp1s0 depending on system, check 'ip addr'
+    networkConfig.DHCP = "ipv4";
+    address = [
+      # replace this address with the one assigned to your instance
+      "2a01:4f9:c010:aa15::1/64"
+    ];
+    routes = [
+      {Gateway = "fe80::1";}
+    ];
+  };
+
+  system.stateVersion = "24.05";
+}
--- a/hosts/freyja/disk-config.nix
+++ b/hosts/freyja/disk-config.nix
@ -0,0 +1,54 @@
+{lib, ...}: {
+  disko.devices = {
+    disk.disk1 = {
+      device = lib.mkDefault "/dev/sda";
+      type = "disk";
+      content = {
+        type = "gpt";
+        partitions = {
+          boot = {
+            name = "boot";
+            size = "1M";
+            type = "EF02";
+          };
+          esp = {
+            name = "ESP";
+            size = "500M";
+            type = "EF00";
+            content = {
+              type = "filesystem";
+              format = "vfat";
+              mountpoint = "/boot";
+            };
+          };
+          root = {
+            name = "root";
+            size = "100%";
+            content = {
+              type = "lvm_pv";
+              vg = "pool";
+            };
+          };
+        };
+      };
+    };
+    lvm_vg = {
+      pool = {
+        type = "lvm_vg";
+        lvs = {
+          root = {
+            size = "100%FREE";
+            content = {
+              type = "filesystem";
+              format = "ext4";
+              mountpoint = "/";
+              mountOptions = [
+                "defaults"
+              ];
+            };
+          };
+        };
+      };
+    };
+  };
+}
--- a/modules/servers/freyja/default.nix
+++ b/modules/servers/freyja/default.nix
@ -0,0 +1,2 @@
+{...}: {
+}
--- a/secrets/conduit.age
+++ b/secrets/conduit.age
@ -1,19 +1,23 @@
 age-encryption.org/v1
-> ssh-ed25519 2P4nKw R36jiZJyNe4pxiwBsfnDpIVoJyo2ko/p54jX6J4gkRQ
-BIckABreM21iMMS+89iXxdWobP0XpR1j9GitHyCAHsw
-> ssh-ed25519 6+hQpQ jRo5O0wnNVh1Ev5XEfq8UwVqguQkFP1u3Dts8RphaTo
-I8VZbdvfO3ByZkI9PKB1+U2jsdHq53N6pMEfBuoJEzU
-> ssh-ed25519 l/ODWA 4RjQSwgnI+/r1hDfWNcGLPTkkkfUNLW5A1sxgLni+n8
-gPG01U2dHNrzhbfe1kTKzwh9Oy/zql4Mc7x8Ebic7Wg
-> ssh-ed25519 7+5K3Q P2v9Lkw2/U3RBuPH73Ev509yDWvbe6AXXzWM7xpmUDQ
-Rrck45v9HMVgpvOFzW9v6CXsLcmfxEuwRE7w1qNK/M4
-> ssh-ed25519 Ow0TGw 0wJrzmq7HHMxaKqYqDVDvsZkbMrPNdYlApEWjQP+qHo
-i6N3Dexp2XjROULZg7lIX7aEwDtFCi4UsJ5EjSUZVW4
-> ssh-ed25519 cEINMA /MNeTykgkdQzoEzMNc2T+GvuqHwueVhwlJnsG5zOIxE
-o/3YW1O2Y3F+j6jNV07upqDHtjcJeV2WZat9bxaMg9M
-> ssh-ed25519 GNZYRg enWVTBAb0bj187bOIHA+yfnjGQyg3f1wqIb9pHaylhM
-oJ0gCIPQJSDKPJ8HfuWhW37qpp+7V3kzY9PqIfv4YsA
-> ssh-ed25519 fd/ZLQ clhLJLYZ8/rIktBVCZ2hrtykWxmLy2VTHIPAaKZ0BlQ
-7n/G5KCDFGPauGAw2d0c0HU1YOeKNNJXM2JQpkQrMB0
--- IlILCRJA6DVl9JwZXneXGOScgJhvPUNV0UjgtJyI/Wc
-"&Ş4›źŤË/	„¬‘”=Ŕ<>'`<60>ŘvÉ‘oü^CşU(LNĐîRMĎýĽóV{łÎ¬C/eúfĂAŤĎĎđ2<C491>rŮ|Ň6˛ŔJ—G +¨0ŕ Ďć,üübŚuiVľ8ŢŔĘgđN.ËĂŮY9Ůµţ°Ţ˝Ž4Đ€Q`ů<>·r`¦)ŃŁĺźÂĂeŽv%Ľżpž †Ä÷amP´–>Ń‰Ž#ŔÝč•ţîŽ«<C5BD>·Ž9ľ0ćf & cl¨rT
+-> ssh-ed25519 2P4nKw +kBGyuuSNjgJusEmjJoCDWPuo5jEp1j9L2eWIXJKfhE
+W8PE/ixYdyaJDy5AyUSvPeyV6H3sTeo3kdHyD0bzA+w
+-> ssh-ed25519 6+hQpQ TxGJQEYFb2BUxVZA28qM1UjHvPTApXmbpIYiMtw4giM
+DCDRuUq/bsQ0HDq3JYVe06w9qi7yEY9dYnJ1hH9ZPH8
+-> ssh-ed25519 l/ODWA 8+5LvLnblCVrT4InddnJIdQ6MOpvMmH4Nb6Dpm2OHXI
+Lqw8in2Mb8JoA2ry4mwuKBBvy2iSxFwDt8biwZhMYlY
+-> ssh-ed25519 7+5K3Q M0nPSVJnvBDqEzn4le3varVpAV6CPSwqKsppiioWTm8
+W47Skw/hWM/MxoRsfiuB3UjKzmlIKX9izg4OsnXO1gc
+-> ssh-ed25519 Ow0TGw L667StxjEvwCTzGyGBUyiEe7FnrVX2OPNCwJdrBqMnk
+IplEHnnjcuh0D1ZEOJRpqgVx+FcR+TylRsf9EVct3X4
+-> ssh-ed25519 cEINMA 96L6ZitYBWtAV15yRVbhO40I/ts+5KlKRwz2NRi9bxE
+/sFFTv6YTfDBYv5/exy2BFaPrkucE6m57HZvkwXUD3g
+-> ssh-ed25519 qbMKrQ rbAS1XLXXBM5Wv83W+f09pnyUjmZB8nn6ep6xywFsUg
+HclxPuHBrD6Wdiy5fbgh+rlp1L1lfkjmWw03xD0TNe0
+-> ssh-ed25519 GNZYRg OeIY2a+RO64638MrWdjZmySA6F52Yo71K0XyQMYbpTM
+/0yn7ujDkgTrU4s0YFWhRL5tIA1Om92Knb0knEg/imE
+-> ssh-ed25519 fd/ZLQ Licr3fHvMFvO+x+8eQ12j96uqyC5s+TYdQzaYd4zzw8
+GLW89ed7lNajzApcDf+VBjWgtGIn229Lu+c0Ke60Q3s
+--- 1WqfQrgH9olP8h2j12TTUKpNs6XGqgKoTxbTp5e1XDQ
+º¸
+Î¬5çCÆÏ¢$µˆOÚÏ¬æ
+¬.UÓ¥i"–lZ8Å*÷Ïmúý{¯&£¢æ¸~«VÔyÂI¸‡<lÞ×ÐXµ®ø~ó£C¥ “sF˜Éüû/S)/gXª’8w;JàÚí&‹Ô"ªêÄ$â<>ä‘ ×[‘Y{ºù7¼Ä0J<01>o©Å¹Á»ö„LËr<1E>ãr»$“]‹:JY"G¹<47>* ÙÛ 2åK¿,wBæ—¯˜ÖK¹(L¿©“
--- a/secrets/crony-passwd-desktop.age
+++ b/secrets/crony-passwd-desktop.age
--- a/secrets/crony-passwd-servers.age
+++ b/secrets/crony-passwd-servers.age
@ -1,20 +1,21 @@
 age-encryption.org/v1
-> ssh-ed25519 2P4nKw cfoo31ISTfycFYjn8c9829Q7Ptz8PXrynAya4likgQQ
-KvIQwk5r/8cYGr280WwuEg5Q60b1ecDVR//Ft+rb1zU
-> ssh-ed25519 6+hQpQ gWkSNkbfotLGW6XqfeZLPWRx1RWhHnRmj1dlS85XBgE
-/YvAi2HXxkVCYRcwArSd669li/CSacxXiDxEySYR5QE
-> ssh-ed25519 l/ODWA HcF7WHlhcMcGBYILhwxSJx2+vREMnQ6polYdlNeiJWI
-bEgKOGzQ9VEh+dpCRPQyN3CJQb4FqPFDim7OQY/m2YU
-> ssh-ed25519 7+5K3Q P2UBDzYJ8rByZElhsY8kMvwHG3yB/ahOQjygAYf2Z3Y
-7IXdn+cmYuvH3QZKGwsP5UzxGlS/hExaZQe82R2YLj4
-> ssh-ed25519 Ow0TGw +v90i5yS2hKpxdkUsYIV87k+LrXBwTooPC/W5QAlbGE
-nBnW9lh0wZJ4bYGlPJZ9T0/NqTJZplyHqb58bU7gGwM
-> ssh-ed25519 cEINMA RVwfKMhlCXmzbQIzAVML6Pmxb0f7m31GA6m7g8rvQVg
-X0/oPBItIyr8DkeX0jxlxDXf4r3kkIqFvmJKCJ21uEo
-> ssh-ed25519 GNZYRg aGMl8qOeSFgNynNUn9g2nbg5l/G8GIVRuo6Idc59oUc
-M/0SIVw16at0Fwa9wsdfcjj9iQH4AB0v9W31xS3iwPs
-> ssh-ed25519 fd/ZLQ fPhYWslj9Gaa7KPAGQ4vLPGgD5lAcN4rjPeCqjuj3Tw
-EF1czhTmOw72nKbYAU7n9MjlsvrdcrUCM1Wul9nuwls
--- adRdJTHdaDpsbuflqBLUmXQwcJq06RyKoJFwsdVwF5U
-ÄØÕo-ük
-ÛRƒCB	*>J¦šU±f¦	¹é
2Nx»?=$/ÑAèY´Å·OÐy2¬àæšq¤cêßOÓ|íŸç8²Jn4;kc©„M¤j°òã×à«<>¡ÙY¼lÔ!¢æÓÅ”
+-> ssh-ed25519 2P4nKw gC9pw6o6V9zksSmUXLXOaDP77t+femBHMT390u3uPzw
+jWSOEOaskJUI+FUOYSWlDOQD9GMEKtTXQYj+B3j5wHs
+-> ssh-ed25519 6+hQpQ EkIHeJ609ZDCK40qs0bGkfIfTIApgpwdJUvtTszcvxk
+3HfQfwOCmRnHVUhTpoUBsE9WzypVRq3WcV9sSqs1JMA
+-> ssh-ed25519 l/ODWA u4u0HvZjqrgFNkcJLVluPOATP8mbWox5kRMQgVPKqxQ
+WqdrR30ZfaV24WwXpdi/D3ZSo/WPCHovDxOSe6Oq+uM
+-> ssh-ed25519 7+5K3Q 3W92ogsrhPMhZALyTMliilLvHQFuXiwDPhJstLRA2go
+J/Z/QeuK32SkKbE3uhAhnZJZwdsuGHR0/qLNlLlCDuA
+-> ssh-ed25519 Ow0TGw tYvjIHz4rmmM4RfdCWXbofL1yQPI0phylAaWuS4CW2A
+YJVPvO1JgKVF2kugLo+OMDUyPCbxYRDb6aaPqk57cl8
+-> ssh-ed25519 cEINMA U2nwQEQy/s6+Aa84XxIneVJrfpK0aq6gtFK8WQHCBHY
+emNwaL3uJS/TNBwXkJo/NI6CdAJR/Vk19QPUjhpULlA
+-> ssh-ed25519 qbMKrQ VBOINjeJ00kWhyUmB4GOoMx7mX2YoTIgh19gQLftDQg
+se6IZ+bThqCY3igxNzG3uNuitsfJ7NlFM5lTxRpP4ik
+-> ssh-ed25519 GNZYRg 3/x7oDCayH98ScCfuToog7zjpOR/w157ylamZKFuBzk
+k+SmDC+PRvC50fHpty3+xdrY3o76QtRenEIc95b2c4E
+-> ssh-ed25519 fd/ZLQ XTUdi7FXXIZLaA5vyQp6SOvPqcS4/SYalI8gguDesEs
+7avpvBzTKoT0rSnetRSISECKWd2oVrHwhmmUnxVuH3w
+--- TQNYZj8wLem2F2HhYqJiLc5ZGue3R2Qr7L4mzl9WTm0
+R¸k°¡ï“§å¦†ÂDOÄŸjùê;Ù9Ûe<C39B>y…Ñ»µÂãÖ2œÑç}dd=<6(ï¸ÈòúÀLá¦ÖâŸ×ø*nœõÕ§ã¬ÂV!¦æRÀj±Êò#Ï$‘äŸ¨"A˜›\îôc{O¯¾;
--- a/secrets/forgejo-db.age
+++ b/secrets/forgejo-db.age
@ -1,19 +1,21 @@
 age-encryption.org/v1
-> ssh-ed25519 2P4nKw YuzX3SmQee6PepF/drbH6W6nUsrXFw8uqcFFZD2R9CI
-843/lNe4Z7E89QznHL0olaB6K5bZbibIc4A/xHsqyC8
-> ssh-ed25519 6+hQpQ +zuL0OBS+h1ugMmrK962HZ8WOgPyTtZKwOSzw5S3Gg0
-8RPUq/k/dU7dqkaVQTYV1cus1N/JdpGRudgS/uMtyKE
-> ssh-ed25519 l/ODWA t9+DvgnYEK+sTOlFEVKiYBQCTzIH15LDHvGBxkhwvSA
-fqaJyZnEuCAp/kGfmtbqvk590NoZzs1iZIQk22XHc+E
-> ssh-ed25519 7+5K3Q AdT018wSUOIxAQqCqDCPU7tuhiAv0r/JzF4qrCxmBgw
-0+lxPgkpFXDrprXGaVtK2PzMrvH3E+8e3y3ufAMU2uw
-> ssh-ed25519 Ow0TGw QqMjLBlMtbLeejjgxK17bS7vrBab+CLc+Np+PCsc600
-QEmsigdLu91O7JSOoWq4pb6MRFdlzsjSLUHgPE2oe4I
-> ssh-ed25519 cEINMA By8gW33gC7IVD+eTS8VuR4EQCW5yutzuYH/shSz+334
-g1i01nSNzZBfECRYFtSb7NhAxK42o7jzqOYji7Og5Ew
-> ssh-ed25519 GNZYRg CkAGfht9yQzuRZLifGvZ/2iFgwMbr7m5SR4vpVoo/zI
-Zz624l6wKpomCzImn6C7YxFudo7Nz5yTgVrut0lY3vw
-> ssh-ed25519 fd/ZLQ 3NzdBaVMRxCDwCe93/w3Zffc/0Km28c1yW7xIUQuyCQ
-kbnFPN9aN9OWqtjKZjvvBSrXBc5MeUbwu6ZezRsMmhE
--- afGW15XRGMp5LtEEYbI08pQDoUL5CPM2Nih1nMQlqm4
-ñ;öŽ-·‹"këZ÷àŠ™CvÁÔô5-ŠŽ åÛñÙjéôbÌ_äæ©&F=Îè<C38E>’ÛÓH<>øN<Ïe\íxéÎ$’öqVwì²&nU;˜aB»èH~ò©KêÌH+ò¬¹P¥¼*n¿£ÝæÊ1ÐbÙ6Õ<>Ò'Ô	ô5yz~z´N—˜ÁŽX²¸JO²¦Ä¡ñFtØÊ¢Ä†ç¼ù$ô§n6“p¼#P‹à5Ð/
éjl;çif¨‚_“A%mÈs‰‘¥Üàqy¶£šÈùàÄhŽ¹•‡ï×kãÁ+[ÿGäëž:ü Œ
+-> ssh-ed25519 2P4nKw M1f0SRI8WbxjWPUBm9GbWYgwicY3flQ7F+kxj3WCCik
+icZ4wrklsHdnJf07hJekBUq9f1UhG+782C/Yqs9USfc
+-> ssh-ed25519 6+hQpQ AHNOX37iNHfpyL0ldjzcnanngIobpTGYzU8l4rzqJDc
+U7OlByuT4pK5joL6dpXblZlQRWJilEX54Ofnrlp3ES8
+-> ssh-ed25519 l/ODWA GhWa5X4LVFFgrKhmRJO8hbI01mLEYOceXTKQiPPoZTE
+YrANntlnYz6YLIcjJvBzOgkLygE2CcHtWZPNFCB4KrQ
+-> ssh-ed25519 7+5K3Q i56IPeKw4hZXKiB56lJQjnZ9kamvWB7fNNAJC8oFyVE
+DNP9g5i9d6QchSBcUYV97dFffjKHLpievR4bJykJLrw
+-> ssh-ed25519 Ow0TGw xnYBJehHtjMqnTgA5d//S8yrsmiD2jVU+LQB3XCrikg
+T9PWMjsZzoOwUnoY9Y1EvjnaUl6rbfpiRj4+bHZaNxM
+-> ssh-ed25519 cEINMA vAHNssO/NIerQOKN9VXDjC3d7hDeQeluE8EZ+8VbjgY
+U/MfKnn6QEczOPr1Z4SrIs7boRWVZnlEQUTBMVHXDgI
+-> ssh-ed25519 qbMKrQ G34oySsFtLGGfmvgD3plrDYihaOshzQfmooqzh9JIE8
+f0vhHIwqKKTDyLOKQXbxzsm49gxdkI7j4WngWlo3pR4
+-> ssh-ed25519 GNZYRg IFVXiI6TLV+lCPMDXokAo8l94UY71jqRIctX2Y4HWlg
+7Txt5Ds9eHQWa2FQak46H9gByk34y7/mDaLjOMuvVKA
+-> ssh-ed25519 fd/ZLQ 2YPqCXS0c8Y9v3OV7Z/PaJeH5eSFqHAw4SRCUgOmIks
+cXRzSOUi6KejIxCHYfTC6hAwSjOGJWNvvdp5t6V9QxI
+--- icVOEAQLsQPviUeN34SD4ashDFbAiFYyHwIJd8Tnins
+òhÑ¡×t<EFBFBD>öƒþ‘«Däâ»yÙŒõØŸÀC@aQNz´ôª@hw®ÇúT²ý#^›}ðÒ‹È³?A)^X•+b]_J;,Å™¿!:¸z2Wý|øíúÿO	ÞÕÀÿî#W¾áÙ9uc—'§¯u ‰Æy¨Ü[¿¿<&¼MyC[ƒg„Ê<E2809E>Ë×ñb
MÒ|¡@í`©kèŽ-:ãzúÈifÚ¤ÒÈ5Ïüf*xüÔZ:j£öê‰üºHòÿFîÈ'"E‘5h¯.û5xYç'¾ÛAçŠCïÏí.Æ¬¼"³·$V©˜ºÒïj¥ùò
--- a/secrets/miniflux.age
+++ b/secrets/miniflux.age
@ -1,20 +1,23 @@
 age-encryption.org/v1
-> ssh-ed25519 2P4nKw sSjVL3TTXvuzBGTnjUBCb2/hIbH5mx6l3IfbKI/lwXY
-Fra5ehkclG4LJVuM6+3QGc+CGtFoWEs/OODsBOiq46E
-> ssh-ed25519 6+hQpQ x03EYvfM2tbkl8llNaVgEBehomhHRoPRazbI+BqXb2c
-0RdXA3sg0oG51/U+MxDr5q/Foqd4fbL0CYa0mShxQLg
-> ssh-ed25519 l/ODWA E+WK3uf+okKMEDXwndvY/kKxMVMLnAn4EeWhpvjj6SI
-zk/SlN03bhOPTF8G+gKeTaad1szUqzRMNabF1rzTXi4
-> ssh-ed25519 7+5K3Q 2HMzvk5bWvySDj3Yt1tcsaCHMtjzudR6LpSxNnwyfnM
-N9kpC2GRX0tIOUxJMV8+mzMew0Mbo7KGioT+ojXQTi4
-> ssh-ed25519 Ow0TGw llq6l/9G1ulA9Z6njKpF7ySCHPz4TwiTIUhMpxGImVA
-NPAHwNt6ehKxJbMmgLe74AP5OVhh1CaYhp0ZwaiJ2Lw
-> ssh-ed25519 cEINMA gDFuXFH2G+5lCJ5kPxFU4yFz1urcPGrlZpDbbDfE6xU
-hxAb3MA0fcqD/JKA1XT8P/kHdHsj/wUMACOrfn/iDZk
-> ssh-ed25519 GNZYRg h9fvCkomu1gU4VKF5CPxbA0JuPWbWkG5KAodaiDOuzY
-/+wowbWJ26Rf1DB2JyPp6pHvGLUh4pohLo99JfHwBOY
-> ssh-ed25519 fd/ZLQ 4Fu5zh1Lg5rP9EqTSOaaZvujA9bSEwsrx2S4uyJ/On0
-DfwzpYvzKpftuyXgg+50HrcRWe0UclNOx4iWjclhP6w
--- LenJxB07h/vMKeO9lw6LBzMIlNsKOLBO9g4M98fHlbQ
-æc'®<>ˆSîãò:#ÞÔÉô&SÇ.mZy]§\Æ<>½j¹¦ÌÉ2àeùëË5œƒ$Z?‚
¿/c.IS´Á±O<C2B1>ßÛµñ8`Úq’™zCy“øö)I6m
-¦À"Nmýe$ÝX‘pìÁíeˆXç!<21>^HY¨>ãLIC³JR™Ž…
›Y<>é¡ÆýðñAâd
+-> ssh-ed25519 2P4nKw B8zTzvTBNO7gqvB3fnZ31dDGwolCpI1SqvqIh0kUYUM
+EQwMSu7kFx29RAkH9ViTLZT9I6dnVai3Z/1KE3TfvXc
+-> ssh-ed25519 6+hQpQ ns/MWZLpzt5/4tLEN/NCsPUH5GQ26xKNJBEt8oJKeSM
+lINKsUn5tMQM6JMB8R9juZMshNW4VIgN+fjyudBFClA
+-> ssh-ed25519 l/ODWA jXMg+sQwNEwnzGv3k4Sr9xBqY/Fx0aFGQRotiTgCn0o
+Jpdr4M8agvHkkGrkGMtQA/4XCZwWhFnLbpi52KmRpPw
+-> ssh-ed25519 7+5K3Q dJ2F3Vrg01MR1tthqIGNamnIGXnEzGNtUAJ5yjr95gQ
+cR1VW8WClPtyaUxgqTRDnyO3BUTI3W8EEoslCoDD7dM
+-> ssh-ed25519 Ow0TGw +msadho2W0XpYaFSB9iH/VW2Sp+X2f3ejRZZ4Y446ls
+xeP1VCoO7Nd6bagviHSeNrzGQ1gYKVsLicO4hFk97aQ
+-> ssh-ed25519 cEINMA OQDlwJAHeu/s+lmPRmznTdDleKTlKwpc41TJcjVd4h0
+V04DiL2Nu59kahqfDMAsciu1JT0LnmJcRrfW8GdgtOk
+-> ssh-ed25519 qbMKrQ CZL96TOS3kdiHCjU++/SeEGAh9Cpnq2zligShknzt30
+5GpQkr2Qz4X+tkV05KZ4s3kNLLVhFvfRoy83KJyghAI
+-> ssh-ed25519 GNZYRg 2rEdTKTt7YQIpl5emyyMPIwsfIT6ASAgu7HEj/uDAUo
+FRhbaFEIPMELhHsjB8pBXXXRBLP4FXNai93pHZaZ2h4
+-> ssh-ed25519 fd/ZLQ 3qHsRfTLv4tTW/cEv3YH9PrLtY7O2mOivnATyk/l6Qc
+fVDlmwpbIdM0dZ1C5X/+UpGK+Xcc765fNWOeC+jNjCI
+--- QWCRkLY2Lt7cVlgtVQnPjpuQCDFI/6UoC4RWjeWeOi4
+û<EFBFBD>2†Î*†¿ÕÒ®fU–8ët%ê4ØÝk¦
+Ykè¢áÅ{"–ž Í¹^È›•÷”Èh<C388>Å"¾:„Æ_öÕpˆûß–âÉ7ÄÔò-¿¬$Q3™€åŸŠµ\AŽU x—ÐJÎ<4A>©‚Æ
+íëaVG.E‰‹ää»ñ¿±Sw<uÉØÊ¹]„à¦<C3A0>Åõþ"
--- a/secrets/navidrome.age
+++ b/secrets/navidrome.age
--- a/secrets/plausible.age
+++ b/secrets/plausible.age
@ -1,19 +1,22 @@
 age-encryption.org/v1
-> ssh-ed25519 2P4nKw 01QMfLAAR0XizpnPEQ3pBO7S6Xjank6W6s8ijrRtRA4
-3tDQ0z1NMTgBJuso+uC8PEEDaZq4o42ni+yDczvKaDk
-> ssh-ed25519 6+hQpQ SWPyHNwVu6pXcQIWDkzSionrs2E0906zBvc97sLYbAQ
-cc93T9UhL8HDQ64tJaRw3BkytsH+yNN5tSrcCsGspkE
-> ssh-ed25519 l/ODWA NeZstlS8nauNME+1WHtSvW873NkHS9DfIGCjUPjV2lc
-zx0FUd4bBb6xSRHYRseejbT4J1T5JFA0N0Pkda7EMlE
-> ssh-ed25519 7+5K3Q O4V7wwMh59f6fo6zf02QtiwWn98bW6rzNRCAxI+cAg8
-fjuRbf6koA/6sHUEPI735fXM2qvvQu0kLBTJNdtUXSo
-> ssh-ed25519 Ow0TGw sV4750Y/0czFdCvEDsXQizvTKZvbKvAbNWHeIINnLzA
-PyRRrxlmfp+HUsKYoz20drMowsrtmjQ2pvsfHJztDqY
-> ssh-ed25519 cEINMA LsxS7dwsGmPQJcia7MMXa1HL9F+czUlwdU+e9UesBgE
-kD0LkEmpe7oCxpEbCr/ompEJEJ9xzUANv0jCljH39Ac
-> ssh-ed25519 GNZYRg ioFY5OJ1t0l7/hb/W+Fgs0LycTbiw2DGsNpaCfJcYBY
-69eAXxcIcCTVQ5YSKVJkCsVVYF8v9xDv1iRzju2nS6E
-> ssh-ed25519 fd/ZLQ XJLyL89soTn/5kYqvUT+mIb/Z2xxzP+3FJqSo31r3jA
-spO3xGePquYFV8qiD41ZtwfRsp2Hl822Kt+ADv0aOyA
--- LSSjxuDpQoaWhLHXhxofNSPF7iAmKMRscWoHmKVDixE
-(Ý+®ÕÅc{r¿SMàµ<C3A0>|L#ü1b/õvÕ_á <07>Sl`,j<>Œ ¦%~#ÂL+¶(S¹*Òþé‚©-'7†Â…†ÄR"á"rùÄ²¼ØDM'd«9=G—«
+-> ssh-ed25519 2P4nKw eKzaEC2cYarFQFQkEvyiPzekHhY8dkcUsSHj4vaUzwU
+AONZBWcQ3liS5RTmiwnGgoAesy+tCk2FOl/9jJbNl1g
+-> ssh-ed25519 6+hQpQ n4KVpDgRaZlexxzN6ikGpXHHJXMYhXEt0GY14JYWxC4
+gtC1f2nPA7QNeWs83Ljr4/FriJFyJYlYLTWNHRXFOSg
+-> ssh-ed25519 l/ODWA MJLw4wGtHpCpbK4TuvUm9Ls/hZlfIlVcpiY+HvZPU1s
+Q6onzC1voE2/c+LgPVusEV5c5zEsAwS9d4l+VeyZubQ
+-> ssh-ed25519 7+5K3Q 6HU6/M4eOWxwQhfbN1kro693E1Yv9KqU5CB/ZetjOg4
+ppTIJeWqz8+vHlvj8SOUEKs6XsuNn9Fz4KrWcAtUR1M
+-> ssh-ed25519 Ow0TGw UanuazqgWTJe7IBRe/Ym8il1A+rUuoWO82TKfzGt1zM
+2mAhFgMVBuKYd7QLdbenkkoaNuUYjvw404WYOY+vnjY
+-> ssh-ed25519 cEINMA pePsLYIbadx0q1ZJ034VMX8ajycesg7oAyOTvrefpF0
+k1rwejjv/Kq1M1AMmkol9ixbwybRFzQVEAFqUuVhEOI
+-> ssh-ed25519 qbMKrQ zNMsRwQfippz5ZR+k/SfWmQFbL0h4QpEz/XrhgT/aBY
+W1Jz3B9L+/QuXUfJzathrXmp1NRb3z2euDl+IATf/jg
+-> ssh-ed25519 GNZYRg zXACa79k8ORoOZtMpi1llVTKCMGuxFYeCu1oU+mTnQU
+AcDnD+57GneUflLpqz86ei2Hn/Iy+O/TqSJWHiKS2Qk
+-> ssh-ed25519 fd/ZLQ bwPGy+IIs9uQ2QJEf6/DiQIWODjIQpJi/tyGT1fNu2A
+JXsWdx30/4ssL4wYOvtQAiX1+ykZB7O1JBMSQ5eQrPg
+--- fhMixyXMTrVSptQ2nK8x3pcilUSQzKOpE+g9AH7Q+0g
+»âÖ®
+#{„FXûÆË[7QÙ0Ö1æM¤¤_–°Ò<C2B0>MCnL4ì„7~ÖXì›öšÀ¢‹’“„a¼w#muÍÇmö¤ê©×"ŒWeÕLˆ$È>”H’—Ý"yÝg‚x`«@¡ñ„
--- a/secrets/rclone.age
+++ b/secrets/rclone.age
--- a/secrets/root-passwd.age
+++ b/secrets/root-passwd.age
@ -1,19 +1,22 @@
 age-encryption.org/v1
-> ssh-ed25519 2P4nKw VAbWAFd8UonJ4xQTPR5iSPm55xcrX0/ukFqE1J+yjSc
-f9JW6iNhtuir3YrJyGxpdif5wM/hKGoHKPIKPRAmlpI
-> ssh-ed25519 6+hQpQ dlfyhBa7LjlXsNufb8cwTYUoe8tI4Wd6I4e+tVzEbyI
-ChVWuov3M0LgryWEaHAUif6yAPMarsvCCV8q0FzX+Ls
-> ssh-ed25519 l/ODWA jXNs1V1mPaRVnsk3Xp2QPwnewym4tZQ07WMaJ5fnmAg
-EB832ENPMY6oMfpzJMB9lu9/rvjNfq6cbK1qmz/mDbM
-> ssh-ed25519 7+5K3Q 2oDUMxkPQne7xrFZtHtfkqIG9bnik+H7dOCNPcBEFGE
-WEXVJ7eFcPSfnRmMxuRpTJYTnU9Ck8Cb+TNNic3KGwg
-> ssh-ed25519 Ow0TGw rTk5r6n3rpda7OADlMwxx32gb/N7keOaG6S+vi2FL20
-yp30XxO3MLBx7lLxqIKbQa+m80eDBIgzD1F1tbTJSQQ
-> ssh-ed25519 cEINMA 4dkjDWM9Zlt4G/SZioNn8I0qNHSlChjJHLO3nYgrsA4
-GTtL/yxpFf9t12/zvLvbred3SeyhIFdLAM9Y/psbdK8
-> ssh-ed25519 GNZYRg 2R1jcUTr7lb2CA1ArlfpLWUCzPb/D5XCUI2HFrxVhjI
-CvBzqnqeMspR18fZjQWVKw16Y+N8FgzAM7rHsryCPUg
-> ssh-ed25519 fd/ZLQ U+6n776JCzb8hzA2NF3Xdw9KznTL6DSRlPrND53x0jI
-x9v9hGaMQGWdcwXbVKhe6bxSDz2Tkz+9s2T7KfcGGKc
--- FFGcY/n1/F2LNGBojkSZXHBpuQ09338/cMxUK2Ly4wo
-iò€}~õ-r2QòÈvÖ
jby0ÂPLëªQÕ	Ì¾`%ÐeMy\M\ƒÏcÁÿcÓ«sÌ¤š<C2A4>äi"»ÞärY‚<>êäö	<09>&}vÍXÒwqFX™Ñ•Ð£Å a<;“dÂ¯-ä¤w
+-> ssh-ed25519 2P4nKw YKyCmZOgcMBwUCjenHnOncS6KIyDQ4V1NNm6XrHieks
+h63n2wumf1E5MPCIqFKDERa1Bp9aFXBmXHjK/xul5Ac
+-> ssh-ed25519 6+hQpQ x/9Tx2T5EvXsvBPARwmx0ubUM0OPjMEBfEdn6Kpqyns
+4l3t9MlG2B6yXP05gBwoEdkJJelrXnA7gRQzNlyPIA4
+-> ssh-ed25519 l/ODWA cM//pExqkExxJwwj9M96SUXZtBjrM/0nlJhrhIGN3Rw
+Wb8zRxhOHokPwi4ieJCZzNxwtv5FwejE/t9FnJqz9vM
+-> ssh-ed25519 7+5K3Q wpUMtAyKIRaxl5tj2C8H7um5Wq9tL9VklsviUzSznD4
+6hSVeMqRrwAqeACm01IF1WEjiJ1f+K6pLu9Lpou+Qq0
+-> ssh-ed25519 Ow0TGw 8wuTbqHbr8LH4nEr/Xe2scWiXiSyS8//YhB1Nu7glhE
+8Pouc/qECpdHWOpV1ZgsDhVdVYGwVFMtqDQZo9uCsTw
+-> ssh-ed25519 cEINMA /uK54LytJyNEzuQfs/Rd3uN24B41SzZQEsicgAF61Hc
+QU83kNEhs1seXagpKJLU8c6m3L6FQUM+3bH+uND1jEY
+-> ssh-ed25519 qbMKrQ 8KdCsPMnfyj2daOMKceRKz0pd1v0urqyUapTeWXJ3R8
+LihZZ12FAUXD1o/azdLxIrx85iPfHQ7RvMgOBPvNQWQ
+-> ssh-ed25519 GNZYRg DPfh0CgLt23M4lT2+nlKuupgGKE7liInGL28qKTIG00
+TdkYlfrpJrsvzKfyJw1Xsn0iwlUR7Tpw9PEidQX0/t0
+-> ssh-ed25519 fd/ZLQ TdqoPO2dVjjy7hmuaG75nLSBtNhYc4NJpEsg+d2sl38
+iqtzZo7SlFf6nWTjvS9RcnHs6pQ0++HWnAXcE6W3u7U
+--- 2lZ59tmP1VC9QWfg4cH6iEf8YjfGnDlQZJl0wRdDuLM
+@SV[v¢˜niŸ¦Á¬D $gFß$÷þñ	v	>Î]·H^TµµCy”DU<44>Lð•ª"£l£c©zÅóž*@$
+kì×ñHcG§ri<72>ËÁª5frñâÉ±²<C2B1>(!vïd,.wâ”á÷é”
--- a/secrets/searx.age
+++ b/secrets/searx.age
@ -1,20 +1,21 @@
 age-encryption.org/v1
-> ssh-ed25519 2P4nKw GSkVSxjx+nH2MrIq9zA799onPWhC/eErtOeastZHWxo
-AdIiSLWKHnLT1j+rxa0Yf8qky1vmoktqFsTIWPec5hQ
-> ssh-ed25519 6+hQpQ 32EltkMcyMsCEs5dgWK4dv/DssE95zThINNJHz9NrHE
-dxp0HaUE4GMuHdFN2ysI/mPvLkxwoUgKJHVq+Va1Ffg
-> ssh-ed25519 l/ODWA kQVALsQbOmgQ2FNLH56CdWkYyQZ7sznDDNgw6rGQihg
-ERE/SanW9rr9pgg5hED+E/NCrwhLM7+oQNTv+MB3hug
-> ssh-ed25519 7+5K3Q /0Wawti7kWnTvC0PBvl0ucvyP8HObHW/kRTVa+unOFI
-iu7A7SsbEi7RmMcGYAhS7EOUFNd2lDwtDAFM8ME6Y+E
-> ssh-ed25519 Ow0TGw YlX/8IpplN070+xC28U1dCA7X9WsaRCnST0vjs2rJV8
-CkCiuL66I+Fnwj97/okV++/zzDUMLeZJ5M+nDMujQm8
-> ssh-ed25519 cEINMA 5kqDK9U3WQPCCUG6d/wwA+X9UxaVtVD+qWOol8JvjiI
-cE59ifg5zqrxZb+Bmau7D/AsqL9ZRhWsoihufpZFayA
-> ssh-ed25519 GNZYRg /kLGfB2+YZPKtFMN/t+zNzoOFWmqcjsrZqKH1u4urRM
-/bKycZdhhnkNmtIyB1UKdXD3t8GjQKr3JkFSMkHBor0
-> ssh-ed25519 fd/ZLQ g175cbu1p8Ex4Ae5EYHXvhcAZTy9L8KjS/svFpns+CE
-Lh+fzcw0Oks+12opWmb3tqKzeR7r9jj+7LDsFetQePI
--- mJe0V+DrUqLb+oEl7r/6ZdTpp01G6wdgyD4LHAYiedI
-<EFBFBD>5gˆ:{!·….i¶}m‡ÌéÐ}°	Ð	`žL&ÚT%¹ÌÆ©xhÞí4Ì@LÇ 9½0TÃë}½¤
É<>R0	Ô&%QKY™mÃöØÌ'5
-Dö
+-> ssh-ed25519 2P4nKw OYJufSmsaeYqn+fD5ElOGYSMcBDiRInV3JvpepE/k20
+PWmY65fFswWb+30t9+wGDs4JBInk8xTgehggwzEBXgo
+-> ssh-ed25519 6+hQpQ Ey4rkv5uP/hYGXV580imJQ/prw9EQFefqeDOTaxgOFg
+bgsdUkHvyNvuo2ZvVMQPL70y+jSSBBsVVmPqXkU3eQY
+-> ssh-ed25519 l/ODWA Rfv0LbNI3b2hB68iyusudS/Mh7Qd5cJxzxwpB51gPXc
+uHdUYPbw/bH/VHbOJcOVDx9cQfPM8/JwEYN8HE9Cq6M
+-> ssh-ed25519 7+5K3Q g5kKgl/Vcf9x/eMcz1/DAfFzffmZV+9rZ3GUIPUIQyU
+69uAgavIQ4oydTvv+6uI4P+1rSDH6poL6nF9QyhK0F4
+-> ssh-ed25519 Ow0TGw 8d62QbpXlqHQFcSQibXhEmBO8RGxRpb/Fzca7p3f7gE
+YOLW+E5BOqOeA9f5dEYDlgKPN3J1ahf09gcB8ER71s8
+-> ssh-ed25519 cEINMA qmdpU4DjGmiO1KTSenZHoEMMoKvkHkFel3Q6q9r2NA8
+Gi8xRHeYnzcKeuUf+vV8GhOJNi7QyTXhVdlLKTjrrGw
+-> ssh-ed25519 qbMKrQ 1q1VsvXxeEHqEmXmanGH3y4rpXUpPkCAxcrvjQJpKm0
+Z0e/p7ucborYJY7tZEA/8yi3MU9dVVCYkGtJvYcet7Y
+-> ssh-ed25519 GNZYRg gbXWML7DR7dGLCI8cuZkZaPGyL/MrEVtILVJRLTAXDc
+xRwyMy7sEDNEZcKhBIF/fHL2Xs3QaKaICE+Pd34LXCE
+-> ssh-ed25519 fd/ZLQ 8xjVPDPMvnVubRoQ9McOgEpRyuWb5dO8cRrGmVskJ0Y
+wwVxj2HPXT77hxCdteOVi+IoqG2zLE/dejXcJ1YtIqM
+--- qnkHz2zO6V5QFOdmN4udWBHvRfaU5LnoyU3t7Ov/hLI
+µG±I´r€S5õÙŒ~Xm`¨Yj%Í sÇÿf²Éç`ºÎËÑþª†4l½×¹qQÑµÂ{3*oi°<>L)¯h'„áÔŠ©øÜ6$+Ä×
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@ -6,13 +6,14 @@ let
  bragi = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBKMV2vqlDvIkUefl5oEuVjVtjgFLEXyDKX2LWhVQsWT";
  thor = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHZGQLUhyLwmkTYhSccqO8umQJN0QHk6YaD863x7lcGv";
  odin = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBGfwv4CzZlPGsBukfoq5wBTlVfWJo7UHH7DP3ILP6/Z";
+  freyja = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIODW4kBme9Vhx93AkPBwiTvcA7ad+rqLaEAhasMMhNzH";

  # USERS
  root = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID2HeOFYaGmjP3OQzPuA+DSjkqfyYH4axoDPWKVP/jdU root@ymir";
  crony = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBJLduAXHWJiglmfRfkBGKffzVWkJP6porxIzw6+Zz3W crony@cronyakatsuki.xyz";

  users = [root crony];
-  systems = [heimdall loki baldur bragi thor odin];
+  systems = [heimdall loki baldur bragi thor odin freyja];
 in {
  "traefik.age".publicKeys = systems ++ users;
  "wg-heimdall.age".publicKeys = systems ++ users;
--- a/secrets/traefik.age
+++ b/secrets/traefik.age
--- a/secrets/wg-desktop.age
+++ b/secrets/wg-desktop.age
--- a/secrets/wg-heimdall.age
+++ b/secrets/wg-heimdall.age
--- a/secrets/wg-home.age
+++ b/secrets/wg-home.age