diff --git a/.gitignore b/.gitignore index b948191..3d5821b 100644 --- a/.gitignore +++ b/.gitignore @@ -5,3 +5,7 @@ **/encrypt/* !**/encrypt/*.age + +**/certs/* +!**/certs/*.age +!**/certs/ca.crt diff --git a/lib/apps/genCerts.nix b/lib/apps/genCerts.nix index 4129eeb..9690e62 100644 --- a/lib/apps/genCerts.nix +++ b/lib/apps/genCerts.nix @@ -43,14 +43,14 @@ let caCertificate = { name = "ca"; - output = "modules/base/encrypt/"; + output = "modules/base/certs/"; settings.initca = true; }; certificates = [ { name = "mqtt"; - output = "modules/automation/encrypt/"; + output = "modules/automation/certs/"; settings = { profile = "auth-only"; config = caConf; diff --git a/modules/automation/certs/mqtt.crt.age b/modules/automation/certs/mqtt.crt.age new file mode 100644 index 0000000000000000000000000000000000000000..0e5d20f1807d6c3633462115b23df7c4a0a1d03a GIT binary patch literal 2062 zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCR+EKe#3C|9VkjI=b$ zN)Oczb$810Eh@}5Nb)St^l;4y^|7!t2+8qr@ijH9)OV{W59BJdFsUpz*DlEo%ykM2 zDGSWXDl!fzG0wJh_X;;IE;dUo2+d6lO)4l!3FOk%)m3mSaI!4X_6^Rg^z$|?a}0_y z$xJEnF44|*3X9av$@0o`3U>`n%hICo*5Yb5(d%(Z@AmAKF+MJr7jLuGzXda{iW;LOToU zr!)%cJX?8PK*-y4T6Do#0r`cYVc*Pd9sVMA#&&c2UF|9dk;M!u3l{sln0zQqRlvHQ z@g4KDgoj^PwwE+sO*V=(yo%JP zh?!juwh?pGDZ1&jF38EUNS*sz`od*wpYN}ox$HOF+XK>x19@6l*baR9?pVFNXQ!#J>3ODi8PG`C_&& z6ve0B|K6A7$;)^AL}1UMJHJjaUparjuZ;a=ZqOw@;e`*A?_KRJIv~@vC?Q1P(ZzLw zHrpy*xb0cB;+Fa;fjEv(ZL<@{RE;zj^FF!1jc4ZSt2H$rg_s#uAG|vE$9m0||K^qV ziyhd!ux`QE`_DFhTeL4XB0wNK`JahFXOH3qt&JZI{tNVJT+(9X7ev5FJ7s9 zu%8yrzFlwW#cl~L!KNMeds3dQis8Ij&R99q>&<)4_d;7a6U(D_Rfm=tT2EwaIqqDh zJAXyN^+{h?kGZR_++HbGyi&$7|BB-|hix-uu00g$HA=CWkzF=-*|wFQXC`Jj-gNk~ z>1wN_cj<=`XScnUb`n-qv4@hyHgvZoexD%eKYPV>v16BWu0$rZiK)(dDY4~5sN(j` z|BCL;3*MWO_LHqFxwYWRPlL;Q`-KWlWX|6q!ds{2J6H9J_R)Lnvuz(NHm@ay!0 zlcG-XeYaBsT~5R;eJ4Myr)=M>M?d%rxNV~R+{+WiR{gwHypZ|IN5jkSxFzZx{gp%# zuRYNWtn|;4YrUKBZ7s8Sxd6o%!?W-xpu4WjqseQ$EE- zn<%Z6y<++*>frqUYqtx23rRa%zW?}~INRb>`I9^5tt-k z35mf17lWNwBtKNWf8$a4blux~V%I!~Tk3N?y4F)M`lN;8svlA-X2@0BI~!Ik_`C5& z^QC5qTQ*Xf{)Tg_Yx>VboV#IZ694t46tDiL@YK&%Tgxsw6q-EdGe|#Ie#v=`UQq3Q z$BiO-**elve5)hos=C>~*|A{PEnSPCEOR!?;$`=ZCnoNcSbAd3zgKe#gR1O>nU^oz z5PY=k_|h9jdxT%J9t&1oTBW{7SX*UL;H7?{J>mZ}e|nVOU9-^j_m6jZ8^1O9D(hIU zOJJ(d5`MIxdEF!h29_TaW-Zw~A@EoFhG!FkI%hjy?))osWRuCK_|g!ehSumCB0CCW zUm66bf6#M&R~PMu@N_=!s8o7-*Y`ahGWZt~gPm$Dv3ZwQ$0cHv&c zy`+T`;)ElgrtO~1@4v=>8J|jokOs5E@0dQ`aA|$k_uDG+ye6f*>YBUlVeE@;x!>>n zAG%-eeEy#E6sxA(4IdZwEfLM;ycI@`k1uPB$Z9=`o4g{-!uHbMlZLB$7}lIP^RZ3x z6uV^TvJYE6Y-3Mm&M;rSc@k&a;&b8*GQR>jrO&+F_;%tak<-!>BmY@f>u*>&i+`uD z#O;}L9v(?;bg?t>36uWhKW+QGt&BStrq42w+3vAvqLAnki9e4uBiFE(PLbF?8z(T{_jWJhr~rNL#LGXWL2Nia&q$v8CHPQ0s5XLjX`@&2az# literal 0 HcmV?d00001 diff --git a/modules/automation/certs/mqtt.key.age b/modules/automation/certs/mqtt.key.age new file mode 100644 index 0000000000000000000000000000000000000000..a6cf08cd420c374cca8b403c942d9dfc8ce6b4b0 GIT binary patch literal 3455 zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCR+EKe#3C|5Aiw#;zz z2~TzQ@=pvmH_3`DFY$4*bn!GR@bh&y3oh3;_i+w)(~dNC^5qK1OZ7-8sC0A*)y^u- z^>Gd^vMk7t2yhK64=r%ab*n5dc270SDart#QW4>hWCuX6DXa1${eyu$GJ&RfMg>$3*t6qzJZI@v#h1&0oN6d-a5U##lgBh_ll7bpYS!0|8e5hC8mZO zZd8Pjg7xn!xQ(nR2qZbmAF0TBe;*l5j zKGti7RFSMr#qZF&nkQtknIf#KR)=c*UDbN>>x~J_yQY-H8I?_q+4AoER0WYMO(v?` zQheH9d-7x@tYnNVHl}`Blj)k<>}lm=8o|Bj@sBpQ!Wa8g12~gvHa@zsvoP(Mwhx#1 z`7B$Vr``;wjypKcT)e{8Wu5PpO6C5I*4m*x(Tl8$GW!)3IMogpBzxECrr4>wIy7=I zJmfmW`2D)#vJ3C_?0X-sy6kvB!&~Qz>(4QN*_vCJ7;WEKq!aMMBSiQm(+(f2ZT(Bl z)c13**l8n{RWqS&>DSHLT(^I2(=Ir`nf6}mm^puJm|RoUGhzo5DJO)^VpB35m!5Tu6DiplE-8jFd&9 zL!HL`H3xm%UgkQgI86A`s_&X+JpK8~``%)yoBa}MWwv!DIv(X@NOb%gc%d#!+&^l< zf}f6e?))&9xtkYUrcjYn@UTi<;mMT^vYT9AyslMlIXtIgW2I62yMS%d`;P2h$TKrv z{=n<4J#y~u%s+xuWprC?xvzgwc=C4lt@+YsN5TZXGCXE}&s)CGYIc-fP4r#Ir0`=d z<~J9!ADPxN&&ETIKgy7i?@}el`I};|o@=CdFWp_Z{K>h7Q@p$XUVd&GrGG=f^4H&l z#kI8s$-+0{_O{ME|L501{j$Y37CsG`@sqbl>6lHy^EBPwotD#;t8>LS{95@S+bScF znMdf;>e_khFIg$sIj^<6G~?lO5#y&5Zhk1;n>DTTs;9Sp&820}-QOu|*nKy)zxerV z;jve<78Dn|Xm5GXyDwN((|q~v84NqNdG{Z2nI)Ywt2@fz$i!uT#jiiS_y6Gbnl{_Z z`{SNfS{I5${kz(|@l9If=G@JB51c;l&wLaw9#*i;@#)OhKRTJ!&lz$w?#TLQzV>_4 z0fxU@UVJ(ITX@rvt=D@pC1$SnczFLeqe`0V>b8=L-&fD=yPeMMxN+i~S!Ow}wwz8+ zYFLv%1b25HzQ2y``?+He@9wqS(5AeYF{k&9grnP$-NJoo+Wzh$ zEP_S#&tD}ic)($`a?K6h-Ze`KtzP>GP2ys5j$Goet7BgS? zrB8I*yRzz6so0li4*hK(?3ydLn45b|+4VEG>-vVrUs^pR@5z5-p1$5Fe0 zI4-_d(Bkq^w(Wil=TYyuXHqw%xBlF%nV75owRWMqQ@r!U8lfXE1ea7^xVm6@qMfm% zbZypUV-`O92XoqWK9>q_U3WUEDtWzuoA8cx%ddKYZv|D@f69<2OnAVDW>z^%cd2Kp1!iteqZ2sESdmS6&l}uT8%{|Y~#wnKN zvXimhYQr~~n7rvb`MuTeORW9AX-~-CxNCc(IU{GDn74VuiTpj&8!S&R=?@jT+vt0s zZRbypEw30gl-f&W13roAK?l+)U=;cF*fFyH-hPKRXsA>7H`m{=2SUX>oda zifYT=lC~W(pSbn6<;`PR*ZeSa<*6C-XFGV9ORCrudXOuM8#Yx!8zUtv`Zr4e{?5Vyn#bt~tJ{9>#oNL2#%fCMT zRP~DEbJC{v;9dNR;e78?`L<5}sdC|`FW;n)%T{mVQdy-Q@J{@^eV=#SrB_LNOt};u zEZTTIHO+J8SJmCY@vFanjDK)_dV~|-Wvv*NYyX#gzUH0qu=4AEX3ir!;vc!~3f8sT z!guwB?!~<9ka<6@*74w9B3tp)hImagCtFG;@t=ofm8XR)X|M!%nM(*F?_UA?7 z8|4S*vX~ZX#5zg4zGi97Oo@8&z2=F)WLwec6IbOae|W6-@5A(n$6lYm&3U9|dH&Xx zgcQHXRmRR=m&MQd8ZN9eG7J+4zXV2tq-XN2fw61kC&$j)wlRhtc%slOV^xkLd z3m>1go^YNoqb|#(HN^FJforp+Xo^6s+LrE3l{=m>Y;;EL^%0b05r=%q-)LGYl)qnYUw_<=pOPi!OgunV(^J zgGIyAQ1i~_yOG{zUv?V*X}45Z7a-|*@hZoe4f<1hu3G47&pG*_@TRCV$CGDgrS3i` zWZpJor$?MCzt4|*0atD2Hy=E0Ceby2@AN{Mdpnd%TFT!TRX&wHes62W0`~g>|Idbf zI=v>CVei{Di;fB%_J4i-=8c=SAsL(A9oCDFuYafGF?p72w$Sn$=dUc>S&=67F5Ppt z^xH)t>h(trcuY$Y92Y$g{1d9XFZ|N;-nos6r|z#X+Lvz7`s{6*pT^0;8*B%4FR^^) zo6~EsKKNs@_mOQE#O@uGJ@tQ~_sc!ihnXfB3K{M?>pD+-9&5Dw)J-a3+VYDnbvw>p zmD(G_uqE|Z%H1Wm=B}y{|7|VdfAg6e=jpi-%ui=ZivDzo+flXaP0u+E7LgkVFYs@S zYN+ZvA8?38apHdeqPYQLy~R9=Og0;W_iW`VzTM`elIE@4Ve#oqGpF;5k7BBPD&aF* z7*dK0?~6T~vxR>_yRlhb{Th?dy0HBF)xSyCGHBRdWk9`cv7%3%oW5G&TV^GRm9IrpQk(eegKYf0Ade+#bXx&B}H?{~`a?zsw< zQ|+d_R5^G@=TXPCe>*Qc=#r5*UNUWlWAt5*n_j2R9*_ulvGMh3LH7ll|NRhPGP?WW zRPV84fBq%c+TXn%P}e=}ySq^R6agXT3EcUsyY+%s?hHG#xaZy-)d`!jm0nAU&6E;n zi=4if_h5KLCgUQl(xMw@3&cg_U!LqeacozC1J}L`%l8_agDhe?kMjhcUS9sc^z#0> ztox72mByd!oUuUmaO#xD`xf1i`M2j%zQTfM^5u@ZcSo%(;#Gcqi;dO#x0D$3ib<@T zoA=4?PTBh8?{b#;yCk0ew>vIx7uKld$i6V||DN>E-Osju4v?O&w?|uR??N@6_JoK# zCo}pk&F#GPy1#A0*6bpW@2jOU%Bv<_G+N%Rdi!&S`Q5N1$1AUA%;9=+x~YuMf3cOh z#mmI&Up;=RJ$;(C<>TY}p0grXJ^5OkDmJlAZC$mizo6u3!aK{}w@zkjCFY-y`6)i3 za98d${U_V4r8YTdc0KOYk5Jjl=&@ARr@}2irO{BYed?_L={8i}CzPn)*QV z+dal79Nddu{;xaH=6