diff --git a/secrets/borg-key.age b/secrets/borg-key.age index df2e71e1464fa6bf989faeadb0f81274bc93b06f..5848be892c97557689780ce3364e2ec30c73609a 100644 GIT binary patch delta 971 zcmeyu-p?^Xr{2}cKgA`&Ez?!s*}cHXqoT+#!!IDkB+xx1!or{;ugoygJGeYMpd>Ln zpDQ)Z%_SnMI3zePE707tw7j4wysF4GEH9-rry|h8+bpy!v%tkM*fgNngiF^>p}06h zH#Nn`)YQ;Y!P}_JO+Qc}!qqpmG{m$h*e}n~rz9oM+%3Q;D#Xw!H8(RV&^4?o#4ydY zQa>uk%_72;D?KQ~CDlAF$t}pNFi_hoDlOMFD#uK_s<g2PHFij;ckXy zo^GBc!H$uoIevy&$(a@@nc-3Co)$sc6$aTZg(054#fGk2AsGd}zG=Cke)(o5UOwT0 z=@mKo#mPb5$tC3#;a(MqQ6Z78#wMi&$!@-&P^$4(w$x28N=+S(G>!<;clGzN z3=Yo=@ej|BED!cH$_|YxGcxch=hD^HRj8;a$+n1yGECP`3OBYai7E*;j&Lu?*SD}J zswmVB$NfI1KRWzxaCWOt4b(f`_OAP+`MZoZ zMP``HqtE;QvU6Yj=$#n0W%^xZ_J?Z|COk}R(Ad;A$KJ+5!e{Hp;|%9# z+-(p#*m{d0^WZskhJ%V+MMm|q&-c##tJi(nZXq9AWA%Anv%N0MdDUbu9(wdj&S-_O zpOm6&l6u`7>rk%yJbBCGJL((XUb|vYvTE~_iq!%=-djH`sl8OTvuhI9zuC`UhwLtD zuv|2sCERjC)hVg`OZ*yaW}&w4ws_C6;!o|9`u*H!YE)E6bU@XsEBj`vAGtNjq^m@; z?bdsv2e-O+-gtc6_EP9QuA&kluYchk{-ITQsy3mPjPrai*Po4->iX>H(&YQAp4n<^ zTEUui87e`^&HopzQ?af7dH#+m+o#px(vvPm9h*Jhq_ObX|Dwn54yW{4?mihDaeTLo z-_qPL+oYr)9s#Fyv`bwl%Wc@KDjMJA-K0{jyoza2lZD|7-3=`@)!C70Z*~j+4n4;8 zS!ZrpstMCvzC~Xi_g^#PwH90_l|H9I*Fo+(OGM7cYfmO_ZOP9x&U~1s#rY?k?fI6= KUo^|>+dKdVp@E42 delta 944 zcmeC@_`*Ixr#{R$sLJ0sUE4psq}(SmsW`yhB&)=*#Kg(TzcReoFvGdhEHEj@$kNx* zf-5D^OW!!Pu+q86!?_|a(8E77$0sSMDAU-z_I4olDnFp}06h zH#Nn`)YQ;Y!P}_JO+Qef($u0TtR&N4+b=mFsMOaz%*`m!EHWUmAl13bH`6mc%B?D^ zIG`lF&>+HstJ2duFt^IG*wwWn&#cNaEGV+TH?kzW%+f2+-N?`+(A_n(G&rivq{`o7 z;z#jtuY$DXu)N|FKex2-(84@#gYew+Y_Cwu%0&MXvk>1>{mj4&{UY}e7lTkP!=l2% z@(iPNzYNd(^iWgp4Aaas{Roeg64&$yC-c;>K*O>k!^~pK;0njd@r>g2SwTjb>8{18 zQ7)O`*}6+T0g>*J;pLTPp^gFC1y$u4rHM)n$sWE&0i{97RZcl6 zd1m?^VFl%dg(fL}Wx1JVxz28ZCTV7lNfw@$SqAS$#ZniEa%!;I_s@Tx~9<8 zLIuNpa~x{En}2-WKGQIse?i51mbsVNp3SsB#b~1Cm~qA=85RhJ zGzq5gu9MA=KD;$eyg20czm%Wa0kz@{UwUp=ov42wR=lPyJv*EE*DMh7_dSZ`X8qptsP)n*W~nL6jJAiABpxpG+_34+hrH|*lbkbJ zx7T)XUeNJBc>6`Tq055Mk1y-R3pFY?|DNK^Bl$0KY5A#d9%q_0CC;+sF#pv%8eZ`s z##86SY1@Ln#Z!G$mWXPd|GQ}3#eHIdEIQe3^EZ@N+uk=7>EC(%rp4#}*zJNlS(uIO zU+-~!1lCAop7c;8W%HsvY(0+vd42Cdsv5_?{}TVBh|m zuUSeiOJ?`Xf6K7@h|^uU&v$+YrwS$iRx-{=7gg_0Ilh_es;JSVC(Q`&}z;)U~;EML2AKE;8|c&ZI!*hqBWF&cAuc diff --git a/secrets/borg-password.age b/secrets/borg-password.age index cfae9e943d2a5e173b12a6e8d75132c1c4da53db..a1d106647df0a023527072776757bb3ddf030625 100644 GIT binary patch delta 678 zcmZ3&_Lg;mPJO0Nh^2R-OH^4(in~`tPO67zP-;Y)rAv-!XljQjMOe9O zGFN7CU}|}oc2H!Xdyrv@yO*g`a&d7`rg^YOPHAaCNRnq^L8^X8sz*w0K9{bYLUD11 zZfc5=si~o*g11qbn|`1|R&q|UyK7pqewe#woPHy?Rl}>KK`C%qpX~va7 zKE7dj5w7JSfv&lEj={k$Aubk{VHG*qNs(ER{v~AwSr#dt`C-13;~B;4{hhU4UBXg} zOfsv=s)CIT4Nd%mgCpIXwG%T_jDpiWES$X3JcDvGs+`NYvXV=ToKo`Kjm)zuvOGic zOTGN`o%51H-4o5qw8KJ!EuFGWJ^ZtiT^u7pp`;n4n_iTfSe&Ym=b&91XRcsUnP`)t z7sKV5=WXQUW8~}YA6oC>8kL$6oaW?N=I&QokRO!cX>5{TZe|>w=oe*BQey60QR!%y zVpL*T6p`zk?`ULcWSH;IWtkuBQx;h1=jh0#tE;P!=acFf=A2X-oNwsu8I@&fSQcew z>E`7gk!4bB>gSc6l2H|&VQFMw=$_A|b7+dcg>$ke%l~aGTV_VFj+vi(Kt{1wXq9(Bpns}QrE6AlqH9QMRhEg5OITu+k*iy#Czr0BLUD11 zZfc5=si~o*g11qbn|`2zi-&n;X?SL8iMwN>Uy`SBp<7|0aa5v9KxI^LRf=a|YNbzR zs#9@crg5kvS71OzwsVC^qQ1Xlm9}G&ldo|`PH|;aaB^^vx0jcpvx|ACcU8H5X^wvA z#E;_PS^7Ce`cWYv`WAkfewpQ!p<%i1m6iF08E)y80S38=DJAJ{iC+3Cm4=R7=81_> zra9pS&V?pvZZ1J3nV!Z~6^RzX`r!sfz8PNrDINtG>Hbbhr6mTF;~B;4E1Z&iOv4;q z!y^JM-OR(xOU=?k(|vNx46{87-I8(&l3YV_3v<(4eKS0{4DS7+1>Qn5L6joM{ zQdp>6R9sn3!C>sD#%9+6s{ z8(9?P>>F&95v6Zv>S0fD(k?iTO&&8#ytE-S=99ggJ*nnQp=*z-1*Bq1yQVgO7CeJx`6McO4gu?k$Y_ z-_w6$??0s_Y}3CkTa#6LuH>?vX^~=I_BM_iwhNwmuiPTSvtiGR=Xtu%Q>33)DNZ+f zHQW29-QwB ssh-ed25519 kgCrKA wILVHjLHNY2lAAWw6ENwYlRTRq6fWAO4ZHxd/BXDvg0 -DCIIBq++JSKzcFOJ51i0USitDOhK9R6NEsCilGlxKtA --> e-grease F -cN5lygYFvScErf/J4BAEJ5ZkimpxOUj9gj8jGZV6Cl/RMkUThxflOfxz/OOBOK3V -S/NBseDL2dg9XzIUY7k ---- IIXSaSol3agW8SNwdOqxoV8dTkwW1CWxgJ8R3Blr1Sw -S���ӰyQ�>l�V,�y�R���5�S�gHP�j`�d�K6پ"u��z)��L�[��W˄�ʷK � \ No newline at end of file +-> ssh-ed25519 6DaCrw 1dgmzBJiOecaCLSJz1nrw3iTF9G00gIQd5hY6HXZKUI +HVkZRyHiKJ2E/Wdgty/uMbPm6lNy9wgaGwe5EJcJ8jY +-> ssh-ed25519 kgCrKA aQiYpgMLe9uSw7NB89mt3Gpa29RqZGHfnZzsOV8DaiM +gcgFyaibNSL5/7ITddnryWFxOuCX22mtGY2e0uL8MEs +-> zWZg=\-grease GP#:NZ \CW2nnR/ /k +bMvg21MLLhnwNVSyNMvMZNT9MzyiT6UqLn3SJcxGtt3Eu9jcMAphAeGy7i+8pQbt +9MnCFZBN4JG+ZunMtSQWodmOqiHFV1vKGsjqQboMsjMo +--- glgRELYTsrSXv/SK/6RDso2FhnvfCT1TB3Ytz/AERPs +��97�l ���b,!.L_M���C[Q�r��Z��k� s"Q+�C$�ثϫ͎��"��sR�[ \ No newline at end of file diff --git a/secrets/gitea-dbpass.age b/secrets/gitea-dbpass.age index 2896581..aa77b0d 100644 --- a/secrets/gitea-dbpass.age +++ b/secrets/gitea-dbpass.age @@ -1,8 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 kgCrKA /u5qYf6vYBVeJryLq2xvZHXk9LY2A8+ks/XV4C/fixw -HNLXInIHa2d/CZR8/OwwhfLurpEbxiXca8Ip3kp/EWg --> s9b#/i%D-grease -DtUrN1QNHQyj0mSiV9nAOBpjf1/3yxxV4E4Xxr0oR2kJa/VWvpIYzyReZdRpS5Xs -Qf0Rw1HB9OAMAQ04DuR6FVfGYaGm ---- WszM9cCBr4HW0I+HltsdXj/BCxUDMld4yAVzXVo1HLg -4�E��ݾ�GT/�C�����B�r�����XY�W��fr���|e5��}P�) \ No newline at end of file +-> ssh-ed25519 kgCrKA QpRQkobE13NxRH81V9tFP+HelBBp5KE2cTyOZIyKsVM +hw3pwAfiQeVRqNwITHCKx8u2/aBtwdB24FJdexUfMyc +-> ssh-ed25519 6DaCrw HjJO4lhmCmsRSD979Jva6UXIMCYqTzmkh7BX+GkbpiI +8SyOm3HR23KfA4pz/fL8dwbvpyXQJRE9ymLMs1lFCBs +-> P32-grease %>7>/d}- +mB3N3P/0E4+1zo1l/cqSmqNqGBaDw2RrH4RC11GfZEmadA +--- 2P5bd82ou+ey3DbL5QHZKQM13N4hqvmzS5D9eWkYw5o +�� ���f��2�G�����q����Ӎ;�f&a�Y�G �����B�B�����*Vz��l� \ No newline at end of file diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 8180a16..5160f6b 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -5,6 +5,7 @@ let mossnet = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAA0bsVbdQR6iWNLKIiID57A1+dVXC58Dtf5cSXg6/JF root@box"; lituus = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH2lAb33LH3JNuOfBXt971u0tHe+NURFecQdfjwEj+C+ root@lituus"; helix = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAKrL6IDHNnHmxi0q9nzu87NOyidPm3HpE7klU368lEf root@helix"; + helix2 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK2G81z1E51ioJQGLHnTJEjgSdBqLM6mb72Z+0atE6Bf root@helix"; curve = [ system user ]; allUserKeys = [ system user mossnet ]; systemOnly = [ system mossnet lituus helix ]; @@ -14,21 +15,23 @@ in "fastmail.age".publicKeys = allUserKeys; "mossnet.age".publicKeys = allUserKeys; "curve-wg.age".publicKeys = curve; - "box-wg.age".publicKeys = [ mossnet ]; - "wallabag-password.age".publicKeys = [ mossnet ]; - "wallabag-secret.age".publicKeys = [ mossnet ]; "nullhex-smtp.age".publicKeys = systemOnly; - "borg-password.age".publicKeys = systemOnly; "borg-key.age".publicKeys = systemOnly; - "freshrss-dbpass.age".publicKeys = [ helix ]; + + "helix-wg.age".publicKeys = [ helix2 helix ]; + "freshrss-dbpass.age".publicKeys = [ helix2 helix ]; + "woodpecker-server-secrets.age".publicKeys = [ helix2 helix ]; + "gitea-dbpass.age".publicKeys = [ helix helix2 ]; + "synapse-config.age".publicKeys = [ lituus ]; "synapse-database-password.age".publicKeys = [ lituus ]; "sealight-mod-password.age".publicKeys = [ lituus ]; "telegram-matrix-env.age".publicKeys = [ lituus ]; "wallabag.age".publicKeys = [ mossnet ]; - "woodpecker-agent-secret.age".publicKeys = [ mossnet helix ]; - "woodpecker-server-secrets.age".publicKeys = [ helix ]; - "gitea-dbpass.age".publicKeys = [ helix ]; + "woodpecker-agent-secret.age".publicKeys = [ mossnet helix helix2 ]; + "box-wg.age".publicKeys = [ mossnet ]; + "wallabag-password.age".publicKeys = [ mossnet ]; + "wallabag-secret.age".publicKeys = [ mossnet ]; } diff --git a/secrets/woodpecker-agent-secret.age b/secrets/woodpecker-agent-secret.age index bce3ac9a58390af83d0e2c09642757b14fb0539a..6d9b96110984af9a360b0118c617082dd6dd7621 100644 GIT binary patch delta 532 zcmeBY*~&6Or#{s^(J4tgQ#&=p+%+S`Jio}Js;o50!Xv!Q*Db)nGru6Mq_Ws0A}cB{ zoy*PFxVXT`E65_ysIVe2C)~xbz^S63GAh`^$*90MC_E^~&(XNF(AhNElS|i5p}06h zH#Nn`)YQ;YAv@i<$lFmNtqCPt#yU^D)E7BmU+%3G)KiA2k zpej5uCpFxHtI|6&(a)){O54oMKefOkv@|IsCCA99LfbLIH$O1RG9$d$JJ&t6!c-r_ zIy09<=c00jbYI_~ipYw}yv*!i7iVp6=Sa6CzjF65FW&;U(DaPZ^0NA>z`X46War#u zu5h!gC<~{|$}m@#P{$NA4}+xe%usi)64z4Sg4D{4^rF0o68E$MBQGNpknhTkqN~ev z(~D9Qi&ME$j1!H5JtLBW3yNF~T@ABC%_0p$oWuRoECZ{YQp@r)ll_8?OAWo9qDoz} z1DzeyGsBWhGSVv2>b0}EbaizVg31g%9MdbD+{&WT920#4oh#GL{q&1-iqlezy-L!I zqnv{c!jmH-oWqN`#6rK+9@|uTeS?S4_Ql(6PJW%L_5NG+n`_U^(+c+!FxXRSfqRKoyLfR+b5uuCA^^nRZaR zPfCiBc6wq)M7ptedZ?dqnxltVfJaVvN=RjztEWqNuzOCCaZyw#S7sFR<-C;)>PAXB zq5^HLDjjVt%Pz;e>amJO6->AOSk`~7^6JL&xP-S%_N_5uJbrEryWiesdY%~|pez(t i$`RW=JL~`YIID-|nWc({a~3c3e!lik@8yZpCISGftg3(j diff --git a/secrets/woodpecker-server-secrets.age b/secrets/woodpecker-server-secrets.age index 48396ff05fe6c77c99bb5da2f611dac671ac6ed6..3b2266bf78983ea1a1bba7c16950651ec9341908 100644 GIT binary patch delta 517 zcmdnWyntnbYQ33DqH|HXLWY^6m#K4ApcadC!jYKoDmsiCDpcDi$sx1&P3d6JiQc!qC9V7*~@R!Ul-zf(w9q;_CIaGAGL zetv*UfOlDTcDApDd%6Xet9Mb3NoI&+VTEg?WwN_RXk>6&zOjc-in&{oS!#i{o1?!| zx_*YCsX;!-x(MC$qSVCVR0SI@*RUkNHIk8PRvZd;aQJqt_=%*h+m7Z*`-p@5t{&Oy1MQMkD zjQ>5!q`nJpGd=Sre|}ra_b>3^bieY&)zVeBTm8$Ix@Fzp^7`D}KkXe~+n)z5jGa>)!RtwbM)#I3Aa_xmm24`^z)-z_SM|vz=1<(Akf LTXaVB{--7Y7wO2{ delta 410 zcmZ3$vXyy)YJGOPbCI{Bf>VKGo|my%Wm05>Pe^&WV@`f?c9K!PWq?y&hHsUnuW@ij zv6r_?P*jK~msycdMY2n&t50f(V}4qZlXcu3u7yYPfECQEFmws)Bctr@fYrLU@6KN3xYdP<;|tL}fsTk7H<|dtilmxKo9* zXG(gcN3o-`b5L3&368h ze=qbqsGrf|Ww|dL%i4bG(>%B7A$;li=T|g-Rr~0nY&9!xX3blBH