diff --git a/flake.nix b/flake.nix index a92eefc..870262c 100644 --- a/flake.nix +++ b/flake.nix @@ -101,9 +101,7 @@ age.secrets.spotify_password = { file = ./secrets/spotify_password.age; owner = "bertof"; }; age.secrets.wg_psk = { file = ./secrets/wg_psk.age; }; age.secrets.baldur_wg_priv = { file = ./secrets/baldur_wg_priv.age; }; - age.secrets.odin_wg_priv = { file = ./secrets/odin_wg_priv.age; }; age.secrets.oppo_wg_priv = { file = ./secrets/oppo_wg_priv.age; }; - age.secrets.thor_wg_priv = { file = ./secrets/thor_wg_priv.age; }; } ./modules/nixos/users/bertof.nix diff --git a/instances/odin/common_configuration.nix b/instances/odin/common_configuration.nix index daeb41a..8ab9b9d 100644 --- a/instances/odin/common_configuration.nix +++ b/instances/odin/common_configuration.nix @@ -3,6 +3,7 @@ with lib; { age.secrets = { garage_bertof_odin_key = { file = ../../secrets/garage_bertof_odin_key.age; owner = "bertof"; }; + odin_wg_priv = { file = ../../secrets/odin_wg_priv.age; }; }; # Use the systemd-boot EFI boot loader. diff --git a/instances/thor/configuration.nix b/instances/thor/configuration.nix index 53a36bf..1e55375 100644 --- a/instances/thor/configuration.nix +++ b/instances/thor/configuration.nix @@ -3,6 +3,7 @@ with lib; { age.secrets = { garage_bertof_thor_key = { file = ../../secrets/garage_bertof_thor_key.age; owner = "bertof"; }; + thor_wg_priv = { file = ../../secrets/thor_wg_priv.age; }; }; boot = { @@ -87,6 +88,44 @@ with lib; { networking = { hostName = "thor"; # Define your hostname. networkmanager.enable = true; + + wg-quick.interfaces = { + wg0 = { + autostart = false; + address = [ "10.0.0.4/24" "fdc9:281f:04d7:9ee9::4/64" ]; + dns = [ "10.0.0.1" "fdc9:281f:04d7:9ee9::1" ]; + privateKeyFile = config.age.secrets.thor_wg_priv.path; + + peers = [ + { + # baldur + # allowedIPs = [ "10.0.0.3/32" "fdc9:281f:04d7:9ee9::3/128" ]; + allowedIPs = [ "0.0.0.0/0" "::/0" ]; + endpoint = "baldur.bertof.net:51820"; + presharedKeyFile = config.age.secrets.wg_psk.path; + publicKey = "K57ikgFSR1O0CXWBxfQEu7uxSOsp3ePj/NMRets5pVc="; + } + { + # odin + publicKey = "LDBhvzeYmHJ0z5ch+N559GWjT3It1gZvGR/9WtCfURw="; + presharedKeyFile = config.age.secrets.wg_psk.path; + allowedIPs = [ "10.0.0.2/24" "fdc9:281f:04d7:9ee9::2/128" ]; + } + { + # oppo + publicKey = "OBk6bHKuIYLwD7cwjmAuMn57jXqbDwCL52jhQxiHnnA="; + presharedKeyFile = config.age.secrets.wg_psk.path; + allowedIPs = [ "10.0.0.3/24" "fdc9:281f:04d7:9ee9::3/128" ]; + } + { + # thor + publicKey = "rpwR6n4IE96VZAmQDBufsWE/a9G7d8fpkvY1OwsbOhk="; + presharedKeyFile = config.age.secrets.wg_psk.path; + allowedIPs = [ "10.0.0.4/24" "fdc9:281f:04d7:9ee9::4/128" ]; + } + ]; + }; + }; }; time.timeZone = "Europe/Rome"; diff --git a/secrets/baldur_wg_priv.age b/secrets/baldur_wg_priv.age index 43239cc..2bebcc7 100644 --- a/secrets/baldur_wg_priv.age +++ b/secrets/baldur_wg_priv.age @@ -1,20 +1,20 @@ age-encryption.org/v1 --> ssh-ed25519 13iwjQ RyDOz2xzrnQr9pzP0h3Xi7jNVnWB9Uqh//AbhfrrsE4 -4E3Jt/awJLYJyx3nTmH1c1oUvyXf4SHZ9QKtIqpnahg --> ssh-ed25519 7MB20A /VrHLuoAcxZRnQB4NxWTWC8OrmHNtiS7BjA89RbTbE4 -RMbCFTqIvY1a9/iQEm4KZQ5/kiWL/KrfupdyNwlfMIE --> ssh-ed25519 IvyYug vkox9RQ0JhYSckf3sanMfFUi4k7KKvQ1fFJRJJF3w1Q -s6a/Rk7yINjvkEEaFjA5OVl1iK2plqZ03K7HeAJ6jEo --> ssh-ed25519 v7O/FA PX8BxRBjY1Y1H2fSMsmJwj6L6c+HOyLU8PTbUunRRHU -ddY7e4WHmoz/S2WtwlGJuD6/Za7Zx4ebLHPlxTUg1RU --> ssh-ed25519 Wzv8ew kPUVryzPgynCMElAcAHeoRGwKuAYdvZGG0NTg44oqwE -5/gZluJWU3D6M8u5wTCOoOKb0V7Le2xqdh4IJoNGBHk --> ssh-ed25519 XgC3XA LGQHY5utBKQWoIFc9WyH7NbUF4VNQzzBayxF2Uu7dRI -rgX05l50DiZVrQmnkueaQ8bEDb3TvFNryW+HnE4oHxk --> ssh-ed25519 l795CA e5g3DNOKjWe1EBrDmvlDpsQzsH8fThXOWH+fbVW5hXc -Tn62/FaSeiHJEhGkUEXPJWr6qzuOvUQ3tJm2vgrPw9k --> l~73{-grease 6\$ -V8e3/VdAai1yRak6ka/Br6Tmu+HywWFTsp4Nce9dT7Ax+5r4EhQIX2eGQXYoKL9h -C7ZaXJ2kNgFDOmynpTmMblhM4A ---- cPfiMi7yP1zq8OCBpH5d8GWnA52a3IVkeCiN01UaJ2s -\X\PEJ6(gRv_&ɜ^ ;jo{X8EO;晶e \ No newline at end of file +-> ssh-ed25519 13iwjQ HTgIm0MS5NAYMgJHL7Hjij5iWEOIjiOuYIWC/NZ/EAE +EhWybEFiC2YpWpa1L1SyMHHcTBfYt7IdofzkbA4+Rw8 +-> ssh-ed25519 7MB20A nMNL4+Nl7eaGRxCia8PTPzN2W5B0rsCmL4TXpsHh/Fw +2KM8cmxb7Ebslv5vwdN4x+98QKJuc7iUVdXc5wCePuI +-> ssh-ed25519 IvyYug Oq4qmqDVPlpXk616G349Y/21cpwloYFelc+5qzI8agM +CsaKj4rID2nT4FWUXel7DZ9rCyo0drm/9nLWaQa3aM4 +-> ssh-ed25519 v7O/FA da21G32CDcgEE5m8143WIg1tRWTGUBQfghK2xARCygU +MonRGxbAGFU7qQCnO4BPjlKzn/M7H+xCidpfkucAjGc +-> ssh-ed25519 Wzv8ew lt8NGN1CmGeX9HCUgqwi1D3bvL70fDhX9GKui/XR/Sc +RKJb/BAcI6hJzPeC7uI1KWL/vYGep5tbWYzFDWAfikI +-> ssh-ed25519 XgC3XA rje5OFh/ajUQVbvXcLD9ldBV+bwc5NJ7yPzVjKNfBz0 +hR5Xm9gsN5quJMq3sLTGqnAYVLAUgu/OkWaMMF2nfrw +-> ssh-ed25519 l795CA jq6T3NomhEIbGjUSXqb5ZclNd+xP+tFT9hMNCmfoxm0 +CNJLLwrfH56gvV7Hg6BfmvbJsc+b2p1inVP/uvDtNaQ +-> !-grease +R3EpLUrq7ZY1Tg2PTDrx26k6nonb55Paxw +--- YSOsc+ENGLvhe22RvHqqJzqu7s1APAD295haGfx7A+E +L>`|DUjvTʆG{MǽQڿ +)uiEa 4,ZK4(N*$X? \ No newline at end of file diff --git a/secrets/garage_bertof_baldur_key.age b/secrets/garage_bertof_baldur_key.age index b070d8b..39c31f7 100644 Binary files a/secrets/garage_bertof_baldur_key.age and b/secrets/garage_bertof_baldur_key.age differ diff --git a/secrets/garage_bertof_freya_key.age b/secrets/garage_bertof_freya_key.age index f68cb72..ab3646c 100644 Binary files a/secrets/garage_bertof_freya_key.age and b/secrets/garage_bertof_freya_key.age differ diff --git a/secrets/garage_bertof_loki_key.age b/secrets/garage_bertof_loki_key.age index 0af64e6..4ad4858 100644 Binary files a/secrets/garage_bertof_loki_key.age and b/secrets/garage_bertof_loki_key.age differ diff --git a/secrets/garage_bertof_odin_key.age b/secrets/garage_bertof_odin_key.age index ebcf42e..07d6d69 100644 --- a/secrets/garage_bertof_odin_key.age +++ b/secrets/garage_bertof_odin_key.age @@ -1,12 +1,12 @@ age-encryption.org/v1 --> ssh-ed25519 13iwjQ cyCv9791Eos58fHGMtryIbZvgAbzgWzt+LZ6xqFAzC4 -uFQ4qK8IzGIZ/SSFIg9b7mNPHBgkn1NkjX+bkZOBu3c --> ssh-ed25519 7MB20A E+69W6J5hiXqcHjico0uxQ0rtKhHjCeQGPTNwpCFb0U -88tD6wGRdygj1DdXji1o8SyjXJQsHED++onY5GJzDfQ --> ssh-ed25519 IvyYug XCBD6iaBoQczsO11kjHPKr/jJYH/qyFnz3nzWJLXizI -yzCHVqipa9pXDSi3vLyAQOZ34Hfk3EYj9xSaA8GhpNI --> Lge%;/,R-grease 6W {fv| f]>3 -qjAy+K+VIZIQWc7eZ/SO+XMHB44uMWbTF+7MI4SC3SAGEE194VjUmLZagFUjHW9S -xU6gPHDtbOgAvJeoVjKj48k8DAy7pcOsz1xqfSVn+1dQnITcGUZMlc6haGo ---- YsHfC63GHf9JJII4OKKSn4oFlsdnTs121LkpxF1aZn8 -w]m)#>E$2qƺ=-Xo;m؛*DZ7I#W5iKK͑DFa7zC8Xx&R ssh-ed25519 13iwjQ MDCuhbXcSxEv2fHTqyrI9qiqF3fjYXxUshGDfiXQ7ko +nxajOoQVriIqBcgU43fmjya2Qj4hkK7JLh5k6k/kAec +-> ssh-ed25519 7MB20A dPEZDugWp+EciWEHOaQBF93pRuQBNGcdCuSLA1OQXDo +P8rFtYR9hpoZmjp+Pl8px1iO0I+6wNItTR4+x5go1TQ +-> ssh-ed25519 IvyYug RgfQxwZYP8yxiE7Tp7jpNPIpgXxbVQ+Myoq4FDe+VTk +6Qd1O+OWHjJgMTcyALVPgq4C79j4AADyhCmDL1DklRo +-> .U^j8-grease %xB_6G( X<66~L, ,#8dS$\8 +hepvWLef4ciT8pbqqFWBYbMLPLkr9bgYqNfsLnI5FOw5qjivfeJil+/Ek3uLoDOs +JivMgA8gOXPK4AwNyRbS0Lcuy6KUDQbjxmE3Zjwi0D82WjQ+5e8diaA +--- t9Swt+YnT38baGT9UhOvKIDpJ/VwjFx7YBiZVe8KoNw +&* cx(I{wok)V ܫR9x^m1L|t_1=hpw\nhBǤP=aEu}}NKPV \ No newline at end of file diff --git a/secrets/garage_bertof_thor_key.age b/secrets/garage_bertof_thor_key.age index 0035da9..e0df16d 100644 --- a/secrets/garage_bertof_thor_key.age +++ b/secrets/garage_bertof_thor_key.age @@ -1,11 +1,11 @@ age-encryption.org/v1 --> ssh-ed25519 13iwjQ JNIb379d+dNabgVqSpFB294mK8+k7NPKJQX8mKEzuH8 -puKWL9qNMLWZDHrQVmxNZ7YKrRlFlSLnYMXqbERmXi8 --> ssh-ed25519 7MB20A dklcfIFj3QiG6d+TeEpgzmf2dsieh2cM+tQoJgmbSD4 -O/3nmRW5/lopDhNO5eS/xWRGgr7nhdJLEvNvR+/yPxA --> ssh-ed25519 v7O/FA /Mi4MWnUWoe43AGj/68VfeJ1Hk8TyqUgXYNjPNMUeVw -7HoLZRNO3n+WRVakA+fK/lgu6Ruyg/DOP0S2hEmojo4 --> 1`R`v4Yb-grease ] ywaX. -IoF9c6SPwQ ---- qMFNi8LNUGKx1TeX+h38uM+lSAMskuqF3/Xnfvi5GF0 -B!P08Mi;tn&;Ph2vf`yֶؑIPǷv)`B;.#5QW^~e A7Ft` \ No newline at end of file +-> ssh-ed25519 13iwjQ 7DURmgNMfx+6yl0lKVsEddsDF4lWV/r9nMPQCORHkyg +2j7ir1yIl9kzxT/LyaShZuoxe71N40gYmRBxcMhO0mY +-> ssh-ed25519 7MB20A mawRpxmKDw5ehWI0pbmZmOxZS268YizvVS2IEgk1JSc +8IsMYTy4d8AL7ZD+B4T+tMWUuHYPuEFiRhXmuy0UjI8 +-> ssh-ed25519 v7O/FA biU3XRo8HRIXk6GTtm9dPZ3yDWp2YNF99T1LuCXExzo +7d93dHhZMEpCTzXZ4CGz9dGx1rRCao/ayHUgB0yEiMs +-> %r*-grease +WZODXQ9zRYlSpSSNvcDeL0L9RtL3eQQ +--- GSZKFrU8QZIMkQRuruV1rs8zdtl2ubU15zMSRkcPmkQ +HqDDvK0s;hԘݹԅ"@*џy"H?72 z*,ЁG~uf@l!f>eׄWM%7\t"Y \ No newline at end of file diff --git a/secrets/garage_rpc_secret.age b/secrets/garage_rpc_secret.age index 672b575..f529043 100644 Binary files a/secrets/garage_rpc_secret.age and b/secrets/garage_rpc_secret.age differ diff --git a/secrets/garage_tiziano_baldur_key.age b/secrets/garage_tiziano_baldur_key.age index 8d5172c..646ea26 100644 Binary files a/secrets/garage_tiziano_baldur_key.age and b/secrets/garage_tiziano_baldur_key.age differ diff --git a/secrets/garage_tiziano_loki_key.age b/secrets/garage_tiziano_loki_key.age index 2580e4b..794f521 100644 --- a/secrets/garage_tiziano_loki_key.age +++ b/secrets/garage_tiziano_loki_key.age @@ -1,11 +1,14 @@ age-encryption.org/v1 --> ssh-ed25519 13iwjQ hBLrqcwBpdnPT5fmZIvyl0hZMRBh393UBuG4HebzAl4 -W0z/DbpsLMotl5z+MJcyAcImH0I84VB8cnGg8LNMsJY --> ssh-ed25519 7MB20A DMlY1D4f64Iw7OoLkH09R5g9TaKk8h/V9J9xEWuDfRQ -GU6TrEfzfhvvEQbDkzETYIhCzjFpEsTEFSsbjXL/Ba8 --> ssh-ed25519 XgC3XA 8EStjHuAgmC3dgBCdRN9kdKGl1hObQHTiet+dTu4wXg -iwKtaPg716SU4zt8ik+lNe72GAce/bThccbCE/KnFUI --> D-grease r!?a+A -sY+4gQaEg6719Dy0IL4DRZgTS2wkusRzjd0 ---- zSC/T4so3DrVbS9luLC6KRwKW0+eMmMnuACzGDM4IU4 -` 2[߽D;@Ŝ.ӎ{c>oF0S|яTGgE%M.c ,'Ժ9}28i<+8M ["[ĞÔ%,ly;sL~LX>;B`M_ \ No newline at end of file +-> ssh-ed25519 13iwjQ 3woAZR7dm07GamFTbu2dCq5GO/9496s/WOOYjm4/23U +oiOyguUxWxZDK37fNuIkE48tG03qTHjL1S9wsml+Sbk +-> ssh-ed25519 7MB20A rZCZ1SlK8rrY4YTXz9o4tlx21CwmWB2yzDPDtBBC2mQ +IOeSCigCRrPizmfbmVgmV2rmcqfxKPh3+BsHfWxlOSg +-> ssh-ed25519 XgC3XA x+ZqLfldofvXEYqvbHLOVJYYvKMpDXoUKRyo/821RQw +d+Pd82d/aBjiYBFiUvccfyrXbYUtpIAU1oGQYZZdxI8 +-> K3-grease vv ">R<5y`Z f8/J +uFkkLegrOvBAkKbWs97lAKDF3vXF0t0zBeL7UC09hvt9vR2Dr+BVtvm1ijLqRpxK +dULBdobWAIUlC+zqLW1ovD12WWkvymDCJP6WQjWot8E +--- qpR9ASStBz5YfV1NMlTwGOpA41lhcK4MrqAingWD5uM +;g ; ssh-ed25519 13iwjQ 5MO0JE6hPY/uL4mII+Axp6FFRbIOpd5dL2lEj9T62Xc -3D8Eu7yiawNbLFRilGrwId4hqI8AvwtnIbHPLfHSakY --> ssh-ed25519 7MB20A XDBiNJVWgynVxFF/r044LZBOlAhoJP2soBRdgE3rcGU -CFFdnSYCrhZnNc1BNSR7MzP8ucm2j+Keg/7fvg1h314 --> ssh-ed25519 IvyYug ST4+U+uVK3XZdFE4iorbXXW8DI+OHBBk9IIlXLu3l0U -js++OiBfjgeqo7lO2+doADJqFmYzOt3MsB7O93wGDyg --> ssh-ed25519 v7O/FA g9k7IucmawQfeFSDlt1PlNkRqQxq5UVpJM3tUK2fFUQ -5iiTQP88uRyWy2RY4Kdym+1VMMtvwaLD+ZU1cfSppPM --> ssh-ed25519 Wzv8ew iK2jVsKv86cGh5pdzZ4n4Ef8mtWGwVARpcXqVmRtWkM -sJCv99OCPLjdAdOoyasAutMjnyHB3hbqXSZvR2pjxsk --> ssh-ed25519 XgC3XA D5BcgMn2y5DyZrwXivK8D/G2iqs+2cEvqUXxXDAUADM -tBbVSB0ZuihWKW39lGVRNPWZAUNT/SjUvs/BDwMNxps --> ssh-ed25519 l795CA AhH46SsmP1heTaw6yY1HNl01kz0c6UB5hAVlFBTKMlw -kKECqPPd8NzwPdEGIEl/hhlWl0I8hRtWvLYdO/vcNKI --> 5-grease ZUgr00 t"|B Y8jZ -DzXpmqSe9AZh2oef6s8btPcXfT6JL2kmhA ---- bx1iC19lCMo2pgpAPp8ESqFtN5fAjuzAylObUWjy9zo -x'fv Ȓ8 M-7hzE<Ǚ'JEJ)ef;F \ No newline at end of file +-> ssh-ed25519 13iwjQ 4vfkhu82gQ3o1MrMtZ/AEv8VVqlFm+JruzPblRZ2chE +MrC35LC0h4aS6FwqyZ8yq4ZhxhTwvDB6fQjA+l+MeB8 +-> ssh-ed25519 7MB20A SXdvtfDd4cjpZ0FFJcB/hyhlLJDV5hnJy9VhDXobaXE +Ic791Eqmz/xwYOIiRgy52TwwdOliGwv+IPMfUQVaFI8 +-> ssh-ed25519 IvyYug KzePWeKe0R1S2Cj4eJVCdaFgHCeNHRs0eopSf7X1gw0 +OHh2CgqfX37G/QJWAr+ENz0gap0/25gLTzRggFrb2ac +-> *eV7 ssh-ed25519 13iwjQ L902+KFxLZfTQyp6KGtc8CmX38878cMmXXKf7d8wbWs -yCp4sa8Ad7APRyiozlRTgUBuj9ol3tTkhLQZpf88x04 --> ssh-ed25519 7MB20A bA4H72Ew3gwCrGC+8zuC129l6+pN6tEU5ooBaz0E9Ec -EaqaBFVi/JFGvOnqW7KXhumfxx8cs41jREjlL/cu2hs --> ssh-ed25519 IvyYug 7BStG7x2qgra5HNqiIT44V69YbxOp0y0uN/3UqxGuEk -B2pFicyZmtS4pKx/usMegVeIyeesAtYaXec2Vvy7/dk --> ssh-ed25519 v7O/FA Nd0HLbnJpBNYFoHd0oxxKCXzkhF0lpwD0lgnBGKd6HA -McJrbQXuFPjkYV8bhw4p4+xWrlAslhnbkJmy4WLkXrI --> ssh-ed25519 Wzv8ew DSRTmBZ0gi47OaAL5f4AAMvSx4/5IRO2njEAe7S9KiU -gTyKispOlVJ4hv1aDmoRo3zkUddwG8YjpAUWZ3ZR5L4 --> ssh-ed25519 XgC3XA JSb9PhQ4mu8ihqUU9YjfXElyLeLATe3ln9UD0INZBUI -A+LMuCiX2XLoyelhqcHXWJngXP4kvTPXKcLbTHSGubE --> ssh-ed25519 l795CA Cyu6QzedfRgZPX0MUzpiajC3K4lhWyuWeCVQ68uUmi8 -+fUmBYVlRjtoHaV3Z3MeJ5dpXYKyLtpCHFNCKuXWTAc --> '6J^,}u-grease 1j_b22r/ -q/S44GKfvl6TYESYUI3rZcuqwrUKTrUTO2ycPMSroyj29KmoAYFRtmZKuxA9epYz -0Qs/FZrz14MP8ofrpqM ---- XH5EFu5uN5U0BdCC08Ud5eYo1La6VxfQJj9Frsjmm3o -ܰտWz+%*8i@ UJ\D:{N&rC\ -TB{j6(/G \ No newline at end of file +-> ssh-ed25519 13iwjQ 3Fnu5eYdImLSFr8pyTeQn3TqyZFK2NAlP9s0aY2DVkM +YTvnQsIboABiPOnG+A4yZjz0rdx5zIjTpV06vUgLss0 +-> ssh-ed25519 7MB20A rVgJ37EHC3jiOMElrT8d4tuoKrxvpwdmvkfpCD2WGCo +pNdT9uxAbizBlrJnfKbgELatpydVTO6ZRSjs2hGuNKM +-> ssh-ed25519 IvyYug o4XD48JA3D1leIZZ8dOCI1xks3akFogX4LCO0GN/Sl0 +UIzHMG+CUsjMlRtuVUMPON4+Tj3sua0j3/VESCzynv4 +-> ssh-ed25519 v7O/FA Sg5Xv5HHk2J28IzlpS1QNpgbBcASdxxcKxGZMYDEoyY +CYcP9ymGOANfJFH/fcm1K2ZVuzfj3XaEjhw7eDBPON0 +-> ssh-ed25519 Wzv8ew 6+kdq8KsIt9DygW+oXgAsPo1aeY9FsQAtS/W7xPWQD4 +jY0dYuun0ui/WRrTNRxYde3mqDWm85vIo1tQEvnDVxU +-> ssh-ed25519 XgC3XA oBwxVQzDO09KpbY/0Zag0nYZPsFpUXq80FYX8pQBAwg +KQgxthZlj0SGVoPwzl83J2UiHfx4ZroeZ5ycM40Oz8I +-> ssh-ed25519 l795CA v4+x6aXUUIIfXxWf/C9w9UNXK8mQsofs43JOehaDR3M +LGxvkjNTt/5ZoBIJZCDC7f3+dKWjBehUIQBpvu2M1Ck +-> xpG1S|-grease VUytEDfP %4ac )N +OmPEP9ET92FdAZRD3gQhpukku23pP6pb5t6iJnK7CYeTI9yxdhx3UJC+8BqghNA1 +iIk16ftDezV2sgcId4hxP1Yj1q7tSV0XpiRnPVI +--- 9VMj22O7np2obV6/wX4cltTQi2Z24a90pHx0nYksKIc +&7( tV#J5+0R›GuUŚ/Nh'ϬLwz(Ύ5!$| \ No newline at end of file diff --git a/secrets/secrets.nix b/secrets/secrets.nix index a55020c..76405db 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -24,8 +24,8 @@ in "garage_tiziano_baldur_key.age".publicKeys = devUsers ++ [ baldur ]; "garage_tiziano_loki_key.age".publicKeys = devUsers ++ [ loki ]; "baldur_wg_priv.age".publicKeys = devUsers ++ systems; - "odin_wg_priv.age".publicKeys = devUsers ++ systems; + "odin_wg_priv.age".publicKeys = devUsers ++ [ odin ]; "oppo_wg_priv.age".publicKeys = devUsers ++ systems; - "thor_wg_priv.age".publicKeys = devUsers ++ systems; + "thor_wg_priv.age".publicKeys = devUsers ++ [ thor ]; "wg_psk.age".publicKeys = devUsers ++ systems; } diff --git a/secrets/spotify_password.age b/secrets/spotify_password.age index a069efe..3f96866 100644 Binary files a/secrets/spotify_password.age and b/secrets/spotify_password.age differ diff --git a/secrets/thor_wg_priv.age b/secrets/thor_wg_priv.age index e7d79ee..ba14b5d 100644 Binary files a/secrets/thor_wg_priv.age and b/secrets/thor_wg_priv.age differ diff --git a/secrets/wg_psk.age b/secrets/wg_psk.age index a4a3d8d..bbb05ca 100644 Binary files a/secrets/wg_psk.age and b/secrets/wg_psk.age differ