From e0e7591b1b5ae4fa8b1ed78968fa3d17f2f6c09a Mon Sep 17 00:00:00 2001 From: dish Date: Thu, 11 Jun 2026 21:55:56 -0400 Subject: [PATCH] [marvin] add paperless secret-key to config --- hosts/marvin/services/paperless.nix | 5 ++++- hosts/marvin/services/secrets/paperless/secret-key.age | 8 ++++++++ hosts/marvin/services/secrets/secrets.nix | 1 + 3 files changed, 13 insertions(+), 1 deletion(-) create mode 100644 hosts/marvin/services/secrets/paperless/secret-key.age diff --git a/hosts/marvin/services/paperless.nix b/hosts/marvin/services/paperless.nix index 2ab83489..35e475cf 100644 --- a/hosts/marvin/services/paperless.nix +++ b/hosts/marvin/services/paperless.nix @@ -73,8 +73,11 @@ in ''; age.secrets = mkServiceSecrets "paperless" ./secrets [ + # keep-sorted true "admin-password" - "secrets" "oidc-secret" + "secrets" + "secret-key" + # keep-sorted end ]; } diff --git a/hosts/marvin/services/secrets/paperless/secret-key.age b/hosts/marvin/services/secrets/paperless/secret-key.age new file mode 100644 index 00000000..fded3c6d --- /dev/null +++ b/hosts/marvin/services/secrets/paperless/secret-key.age @@ -0,0 +1,8 @@ +age-encryption.org/v1 +-> mlkem768x25519 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 +SQ+kPnx1197jXsBKrWTNgZ54M/RIq7jlgZ9SQ6A5ztI +-> mlkem768x25519 2odRge5xub+sYP++drtSBI2ARqiFN0EYytx3I7y3v6uLZHw8aHCzte4Ej6uuYHxYHb3j/KceQ+CqKTj2mZekI0QQHO4tlttNnY2OE1+ccov57AyzSFOz9TEBvcW4HSRlwqyWU37vdunHTyZb9KMeRojztfVXU4nxGX5C6eOYM/f2vOlmKfCoUU6T09sFD8fUvGgeDc6hFBLR9NQnzgN1OZIieBVc3rxghdGVzsRsUIAhjMvPCq7biveg+JJspSXoCuVlstvHAw9F41GLPC2erkG7HItjWQkxjJalPKyCyufAGTXjNXgMeaESfGllHwtwT7Q96Id87gcZ6us1zgaBZT7Ywha72ZgWLYnZQWIUA5H+pTZCbxEQZbMsAMAgXmySYT332yrhQWGq960Oaymphj8xhyiE0LXQbI85zV9GLFqwwLhtMZQL6SVsLgC0Ut0FFiR3vKnIgSspI707/s78K+jOjobchobi4acDYBMdsZHGNlLU5PORYINtktDva9DvTBc1t6wrVaJLUYou/8IT2njdyed6u9zNjgJyUyrxyYsc01vYTJXCZlaPC3ZzMixNRLNrnfZGHQzRU01VI03zBQLIcpSqeSSS9BlPD1Iwd4hnYgptSemb5TJKK/9Oiw+vAcKyfcK7LR905gZGFgkRPW8+7ZrbpLW9cHdzr937cV7J1b9mzDX9jiK6giXAErrVr1zWnyET6aYTiQphIauPKbD1995gxCe2Fpdz5mWpn7jL6lvZpuDlJkYEJ8RSzk3peNnF2zmoRU1JtZ1MVRydtaRfwp9OvXQsDg2D1fsylMcQ2CqcbwXuVge+Iqvn7nT4WaciM0Agb+I4RFaCUmbUShRniP7d+Zgen/aHz+eF9MDW20kxVbmuR7K12MF2K2pWcweZ6v4QMpZaTISHOSNy9GR94C3duAgxsKnAOK8dCOTE10edU0bjB1jQkb1od0CtBvyTNYJ+v9NhJmPX8eInWOeifG9lYbN+ZDOvoTd2fBKjaIZRtQDehul/PexTcHOGYUsnM71HhY6j50tVFokP1u7GW/Q0yhcAZXH+hpC4Vy17rECHj7ugZKfZyk16689oDmtsKQXTRhJKWU4Hh9Nwp4Vih02ituo2b5HLRj3GVyWwDrIJLneYglblAUSoFNqRn4j/S9cS4k9iJGA1ehNLaj7jH1X9FmebH0VxCe4c7FftDOGwm/8kwHT48la1ri1WXThlZiak6Uqy0ya7tecL1kuzTfeoHQ6KnmkndS+McUKayEG8OxN7UoeW2KJMRFTJ5hqfJyGOtYalcVWdT0L913MmuL4jdgFt8E9UW5zI+E1nZ4s5imXkRJbpHOkU4P4cd0WmboyWNnGvXEXTYL2e1KgNvcH6mmCswxf8PJ8/YYrftnkjT+zxD6OlRHk7kelnnrGJTmuInHJ3etyKuTsTrcK+0ClPW/ccJPMzGyZHOqUbhEiuSTz15dwviI/mEIfqoEMj5mm1B7E1hJ0CfvvHEA +gQ1rcixjwaY1RmGWPPqkzcQvYZXkrdO96QnzdNVq9w0 +--- B4eEwVl7ZxJXLLUQEgoAEQCS1mYPwcW41VLgOxyYKiU +U$>i��'ւ��rء��DK�(|��*VmJ�r +��g�ԁΤ@���4�PrM��0����s����u^L�8�v�v�����7������@�Lŕ!3� \ No newline at end of file diff --git a/hosts/marvin/services/secrets/secrets.nix b/hosts/marvin/services/secrets/secrets.nix index 71af08e7..3b026d9f 100644 --- a/hosts/marvin/services/secrets/secrets.nix +++ b/hosts/marvin/services/secrets/secrets.nix @@ -62,6 +62,7 @@ in "paperless/admin-password.age".publicKeys = pqKeys; "paperless/oidc-secret.age".publicKeys = pqKeys; "paperless/secrets.age".publicKeys = pqKeys; + "paperless/secret-key.age".publicKeys = pqKeys; "shelfmark/secrets.age".publicKeys = pqKeys; "shelfmark/oidc-secret.age".publicKeys = pqKeys; -- 2.51.2