From 35d3b51eba76ffad5be2242fdcf403b08cf3e7b6 Mon Sep 17 00:00:00 2001
From: Aria <me@aria.rip>
Date: Mon, 27 Jul 2026 20:36:07 +0100
Subject: [PATCH] fix saph's passwords

---
 nix/modules/prefs/server.nix           |  5 +++-
 nix/secrets/passwords/heather.age      | 24 ++++++++++-------
 nix/secrets/passwords/saph-servers.age | 37 ++++++++++++++------------
 3 files changed, 38 insertions(+), 28 deletions(-)

diff --git a/nix/modules/prefs/server.nix b/nix/modules/prefs/server.nix
index 84423a5..f5fed61 100644
--- a/nix/modules/prefs/server.nix
+++ b/nix/modules/prefs/server.nix
@@ -21,7 +21,10 @@ in
     # SSH
     services.openssh.enable = true;
     security.sudo.enable = true;
-    users.users.root.openssh.authorizedKeys.keys = [ lib.our.pubKeys.root ];
+    users.users.root.openssh.authorizedKeys.keys = [
+      lib.our.pubKeys.root
+      lib.our.pubKeys.fallback
+    ];
     age.secrets.aria-password.file = ../../secrets/passwords/aria-servers.age;
     users.users.aria = {
       description = "Ariadne";
diff --git a/nix/secrets/passwords/heather.age b/nix/secrets/passwords/heather.age
index dac4ecf..eaf2370 100644
--- a/nix/secrets/passwords/heather.age
+++ b/nix/secrets/passwords/heather.age
@@ -1,12 +1,16 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDlGTHlPQSBPa0Q1
-QzJQN1pTQ2VkU3JST0Q0c2I1UnNvQ3N4bU40cHNBTjlTRzNPYlFzClFBblVnU2or
-c2VNWkp3YTJDaE1HSEFocnE0YzVzL0FQNEhoNlUvK1JtWVEKLT4gcGl2LXAyNTYg
-QUs0dzNnIEE3dDhxcytDeFpXU1lCdVI2SHdZTENIbDl0b1Eya0orZ0xFRDNMZlR2
-QTdtCk1KdFlnMU5QZzdhNzFpM21ianpyRDZNUktoajRIT2FSR241bVhCbStBUUEK
-LT4gcGl2LXAyNTYgWkdFNFdRIEFtTGNOS0dXS3hYM1d4aEk2L0tsVkZqcHQwYlhN
-SHAyVmVka2lPRnVBQjRDCkpnd2xWRUtVR2VQSnhtL2lWQk5LbVVJanFrd2xwNmpF
-KzZOSXlIQUtlcUEKLT4gcCEtLWdyZWFzZQpBLzBqMldTcG5GRjdTZwotLS0ga1Rv
-RDhhR2gwRjF0ZDNRK3NUajNWOThlMHhyN3orMWdSOHh4aExTUU1ydwr08c7R97jK
-ujhHhmYRL4abiyBCLASoZQ50dCIWYf1MZJCkNWFkWoxtCL1DSnku+0AsbDEtzg==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 -----END AGE ENCRYPTED FILE-----
diff --git a/nix/secrets/passwords/saph-servers.age b/nix/secrets/passwords/saph-servers.age
index 6e6c5df..9ad588f 100644
--- a/nix/secrets/passwords/saph-servers.age
+++ b/nix/secrets/passwords/saph-servers.age
@@ -1,19 +1,22 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDlGTHlPQSA1dkh5
-Ry9GR0dyY0hubGpxUGlJK3JFQ2tvRTNnMTF1SkJHVkR6QUpCaEhnCmRLaFVrcVJ3
-dy82OFM5N2I2T0U0VGgwOTd1UEk2TVlvZFQwRElFc1QvSkUKLT4gc3NoLWVkMjU1
-MTkgUXVyTUFnICtpMGNyeDNoTTZJcEV1VWZ2ZFhYczlYL2t5MUpPaFlIV3AwZG5r
-MS9aMjAKeW1paXZwenE4OWJ0a2tYeVppdW5sd0RoUHFrYy9nWnlYSGYyVjFmUzEw
-cwotPiBzc2gtZWQyNTUxOSAya3BWVFEgbkRzekVSWDlsZkFlYzcxSjN5NSt0b3da
-aDJ1S2ZZNCtOUXFGemp5ZWxCWQp5VEZRd1NjVE5OaUROc0RwM3dGUGtORy9xejB5
-Q1NzczduVEFDbllrOWdzCi0+IHNzaC1lZDI1NTE5IDZzUmk0ZyBtakQvd1haTFN5
-TlBUaGRkdW9BekZ0L2l2czdkbCtxeXVzamRub3RDWTNZCkNxQW5za2xUb1dwdDVl
-RHpYR1p6R1RWUlBnR00xN0RndWFEYnc1NGdoMkUKLT4gcGl2LXAyNTYgQUs0dzNn
-IEF6TTJZMHJ4SjVVWHZDTjlqY2tJdEF6ZEJTbldPdTl0UzVoa3Fod015VElTCkZF
-ckljVTNKL0NrTFVYMVd2VGJHRUN2cld0RVNLTWNBMGUrNDJJUHlBaDQKLT4gcGl2
-LXAyNTYgWkdFNFdRIEF5a0JCQ21Ea0lzWjVnQXNvOFM5M0M1b3lCa3MzdUp5VVFw
-UUVicHNjeUhVCmhpZ281NnVNVXlmL0xpY1M3RnhFN0FrVWNxeXppdGlsUUdtVmFl
-QSsvUTAKLT4gRFcmXzpbLWdyZWFzZSBMY1o4SDQKdWIrZ2svcwotLS0gSnZQUUVy
-YjlwaWVwd1dkbWVWNkxMbkhwOXY1cEZDWHVXUzRYK2U0RnR0VQojJI8h0fra1QZ8
-G2nMpMNCQkAWUSI3plVDCoyzRPifHB1W0vmyPWunORqJ4LFY6TvVwaX+DMoTApQ=
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDlGTHlPQSB3M0t6
+Nk52VHVUZWdMSzBUZGhFb2QrVk1Jd2dqaFE1S29vY0xtVWgzT21VCi9nQnpXR2Zk
+OTAvZ3N4QnowZFR4dS9Ld2ZscUg0U0twRCs5RFRkUkZTS3cKLT4gc3NoLWVkMjU1
+MTkgUXVyTUFnIFBlRGRySWZSWUdFZzJ5Tm52aENES3oxcHRwdEVCOEJaMEw3cG1v
+dHZzREkKYkp3QVpYTnBTUHBtRWdOZWpEN2dFTVZyVHJ5dXRFemsrWEorY0xwbW04
+dwotPiBzc2gtZWQyNTUxOSAya3BWVFEgcGtVaVFMQjRqUUF0Rlhoc0o1Vnh2VTAw
+WmFwZzQyWmhoc2F5T3A3aHNUdwplTkZVeDh1aWhwa2FJVGdnWEJHTmo1aUZ4YUM1
+TzVQWVQvenZyY3FxdDg4Ci0+IHNzaC1lZDI1NTE5IDZzUmk0ZyBXMytGbzJ2SEVw
+UGNqd3k0THVkZXF6VHlpNFZoZm5hMUxHSVUvQTBtU2dzCnlaanl1UnJPTHRMU0Uz
+blVSVmRoamU0NUJLTTc3Zk9xT0VEdEVoZDA5QnMKLT4gcGl2LXAyNTYgQUs0dzNn
+IEF0cWNlTERGOERKRXdPeXRDanJHQjR3VXFKYmNYYmpvSkpNWVN1emhPd3JZCmJi
+ckdGdzVxRFh3MkdpLy9WcHpGR2dCMTJOREVrRWZlQU1aV1o4WkY5d3MKLT4gcGl2
+LXAyNTYgWkdFNFdRIEFyWFZ1TjZsNGZNU21JTUtTL2s2QUpUZmR0TDJiNEhFK2Ry
+bklkMUkyRXNMCm5ZdUlPNWFCamJPeUVQS1grZzl3VUYwTGRCd3JYekZpWSsxbGRy
+ZS82V1UKLT4gVTB2dC1ncmVhc2UgaF5XdlcxfSkgZS5XfWNjIE5seHk5CkZxYXR0
+WUNwUTdNbVc0dHdvSjlIZlI4NndvMENwMDJwSDR6ZEIwL21GdWZWVG9TNS9HaW4K
+LS0tIDJhUXJNU0l1WEhoa3RmRU5JUFI2ZFh5MGxEM1BXMFFRVCs5VFZYMFFaK3cK
+ijE5juRC3F6YpnAVh4QEP396f1lN2zWBiZzOgJ43sy+8TVvPN9nwmmhKU+Ery2Bn
++oS/VpHXGVQwrEO20L4MisvTpk3YvahB0uRrsSMRSpDE9/j/BmnniIdKwS2lWZ7G
+q5vI3i39zOUuqQ==
 -----END AGE ENCRYPTED FILE-----
-- 
2.51.2