Thor: wg-quick and simpler key deployment

flake.nix

@@ -101,9 +101,7 @@
           age.secrets.spotify_password = { file = ./secrets/spotify_password.age; owner = "bertof"; };
           age.secrets.wg_psk = { file = ./secrets/wg_psk.age; };
           age.secrets.baldur_wg_priv = { file = ./secrets/baldur_wg_priv.age; };
-          age.secrets.odin_wg_priv = { file = ./secrets/odin_wg_priv.age; };
           age.secrets.oppo_wg_priv = { file = ./secrets/oppo_wg_priv.age; };
-          age.secrets.thor_wg_priv = { file = ./secrets/thor_wg_priv.age; };
         }
 
         ./modules/nixos/users/bertof.nix

instances/odin/common_configuration.nix

@@ -3,6 +3,7 @@ with lib; {
 
   age.secrets = {
     garage_bertof_odin_key = { file = ../../secrets/garage_bertof_odin_key.age; owner = "bertof"; };
+    odin_wg_priv = { file = ../../secrets/odin_wg_priv.age; };
   };
 
   # Use the systemd-boot EFI boot loader.

instances/thor/configuration.nix

@@ -3,6 +3,7 @@ with lib; {
 
   age.secrets = {
     garage_bertof_thor_key = { file = ../../secrets/garage_bertof_thor_key.age; owner = "bertof"; };
+    thor_wg_priv = { file = ../../secrets/thor_wg_priv.age; };
   };
 
   boot = {
@@ -87,6 +88,44 @@ with lib; {
   networking = {
     hostName = "thor"; # Define your hostname.
     networkmanager.enable = true;
+
+    wg-quick.interfaces = {
+      wg0 = {
+        autostart = false;
+        address = [ "10.0.0.4/24" "fdc9:281f:04d7:9ee9::4/64" ];
+        dns = [ "10.0.0.1" "fdc9:281f:04d7:9ee9::1" ];
+        privateKeyFile = config.age.secrets.thor_wg_priv.path;
+
+        peers = [
+          {
+            # baldur
+            # allowedIPs = [ "10.0.0.3/32" "fdc9:281f:04d7:9ee9::3/128" ];
+            allowedIPs = [ "0.0.0.0/0" "::/0" ];
+            endpoint = "baldur.bertof.net:51820";
+            presharedKeyFile = config.age.secrets.wg_psk.path;
+            publicKey = "K57ikgFSR1O0CXWBxfQEu7uxSOsp3ePj/NMRets5pVc=";
+          }
+          {
+            # odin
+            publicKey = "LDBhvzeYmHJ0z5ch+N559GWjT3It1gZvGR/9WtCfURw=";
+            presharedKeyFile = config.age.secrets.wg_psk.path;
+            allowedIPs = [ "10.0.0.2/24" "fdc9:281f:04d7:9ee9::2/128" ];
+          }
+          {
+            # oppo
+            publicKey = "OBk6bHKuIYLwD7cwjmAuMn57jXqbDwCL52jhQxiHnnA=";
+            presharedKeyFile = config.age.secrets.wg_psk.path;
+            allowedIPs = [ "10.0.0.3/24" "fdc9:281f:04d7:9ee9::3/128" ];
+          }
+          {
+            # thor
+            publicKey = "rpwR6n4IE96VZAmQDBufsWE/a9G7d8fpkvY1OwsbOhk=";
+            presharedKeyFile = config.age.secrets.wg_psk.path;
+            allowedIPs = [ "10.0.0.4/24" "fdc9:281f:04d7:9ee9::4/128" ];
+          }
+        ];
+      };
+    };
   };
 
   time.timeZone = "Europe/Rome";

secrets/baldur_wg_priv.age

@@ -1,20 +1,20 @@
 age-encryption.org/v1
--> ssh-ed25519 13iwjQ RyDOz2xzrnQr9pzP0h3Xi7jNVnWB9Uqh//AbhfrrsE4
-4E3Jt/awJLYJyx3nTmH1c1oUvyXf4SHZ9QKtIqpnahg
--> ssh-ed25519 7MB20A /VrHLuoAcxZRnQB4NxWTWC8OrmHNtiS7BjA89RbTbE4
-RMbCFTqIvY1a9/iQEm4KZQ5/kiWL/KrfupdyNwlfMIE
--> ssh-ed25519 IvyYug vkox9RQ0JhYSckf3sanMfFUi4k7KKvQ1fFJRJJF3w1Q
-s6a/Rk7yINjvkEEaFjA5OVl1iK2plqZ03K7HeAJ6jEo
--> ssh-ed25519 v7O/FA PX8BxRBjY1Y1H2fSMsmJwj6L6c+HOyLU8PTbUunRRHU
-ddY7e4WHmoz/S2WtwlGJuD6/Za7Zx4ebLHPlxTUg1RU
--> ssh-ed25519 Wzv8ew kPUVryzPgynCMElAcAHeoRGwKuAYdvZGG0NTg44oqwE
-5/gZluJWU3D6M8u5wTCOoOKb0V7Le2xqdh4IJoNGBHk
--> ssh-ed25519 XgC3XA LGQHY5utBKQWoIFc9WyH7NbUF4VNQzzBayxF2Uu7dRI
-rgX05l50DiZVrQmnkueaQ8bEDb3TvFNryW+HnE4oHxk
--> ssh-ed25519 l795CA e5g3DNOKjWe1EBrDmvlDpsQzsH8fThXOWH+fbVW5hXc
-Tn62/FaSeiHJEhGkUEXPJWr6qzuOvUQ3tJm2vgrPw9k
--> l~73{-grease 6\$
-V8e3/VdAai1yRak6ka/Br6Tmu+HywWFTsp4Nce9dT7Ax+5r4EhQIX2eGQXYoKL9h
-C7ZaXJ2kNgFDOmynpTmMblhM4A
---- cPfiMi7yP1zq8OCBpH5d8GWnA52a3IVkeCiN01UaJ2s
-\X\顯PEｯJｻﾖ<EFBDBB>6(圉ｮgﾗ燻槁R<E6A781><52><EFBFBD>_&佶弯ｲ <20>ｾ;j都o<EFA8A6>ｦ<19>{X8｢ﾊｱﾛE唹;ﾏ譎ｶe
+-> ssh-ed25519 13iwjQ HTgIm0MS5NAYMgJHL7Hjij5iWEOIjiOuYIWC/NZ/EAE
+EhWybEFiC2YpWpa1L1SyMHHcTBfYt7IdofzkbA4+Rw8
+-> ssh-ed25519 7MB20A nMNL4+Nl7eaGRxCia8PTPzN2W5B0rsCmL4TXpsHh/Fw
+2KM8cmxb7Ebslv5vwdN4x+98QKJuc7iUVdXc5wCePuI
+-> ssh-ed25519 IvyYug Oq4qmqDVPlpXk616G349Y/21cpwloYFelc+5qzI8agM
+CsaKj4rID2nT4FWUXel7DZ9rCyo0drm/9nLWaQa3aM4
+-> ssh-ed25519 v7O/FA da21G32CDcgEE5m8143WIg1tRWTGUBQfghK2xARCygU
+MonRGxbAGFU7qQCnO4BPjlKzn/M7H+xCidpfkucAjGc
+-> ssh-ed25519 Wzv8ew lt8NGN1CmGeX9HCUgqwi1D3bvL70fDhX9GKui/XR/Sc
+RKJb/BAcI6hJzPeC7uI1KWL/vYGep5tbWYzFDWAfikI
+-> ssh-ed25519 XgC3XA rje5OFh/ajUQVbvXcLD9ldBV+bwc5NJ7yPzVjKNfBz0
+hR5Xm9gsN5quJMq3sLTGqnAYVLAUgu/OkWaMMF2nfrw
+-> ssh-ed25519 l795CA jq6T3NomhEIbGjUSXqb5ZclNd+xP+tFT9hMNCmfoxm0
+CNJLLwrfH56gvV7Hg6BfmvbJsc+b2p1inVP/uvDtNaQ
+-> !-grease
+R3EpLUrq7ZY1Tg2PTDrx26k6nonb55Paxw
+--- YSOsc+ENGLvhe22RvHqqJzqu7s1APAD295haGfx7A+E
+¸L>`|ËD«Uój©à„¡vñTʆGˆÃµ{<7B><>†M¥Ç½QÚ¿
+Þ)uö±«iE„aÌ
È4,êðZ
ðK4Ïø(N¦*$ûX’?

secrets/garage_bertof_odin_key.age

@@ -1,12 +1,12 @@
 age-encryption.org/v1
--> ssh-ed25519 13iwjQ cyCv9791Eos58fHGMtryIbZvgAbzgWzt+LZ6xqFAzC4
-uFQ4qK8IzGIZ/SSFIg9b7mNPHBgkn1NkjX+bkZOBu3c
--> ssh-ed25519 7MB20A E+69W6J5hiXqcHjico0uxQ0rtKhHjCeQGPTNwpCFb0U
-88tD6wGRdygj1DdXji1o8SyjXJQsHED++onY5GJzDfQ
--> ssh-ed25519 IvyYug XCBD6iaBoQczsO11kjHPKr/jJYH/qyFnz3nzWJLXizI
-yzCHVqipa9pXDSi3vLyAQOZ34Hfk3EYj9xSaA8GhpNI
--> Lge%;/,R-grease 6W {fv| f]>3
-qjAy+K+VIZIQWc7eZ/SO+XMHB44uMWbTF+7MI4SC3SAGEE194VjUmLZagFUjHW9S
-xU6gPHDtbOgAvJeoVjKj48k8DAy7pcOsz1xqfSVn+1dQnITcGUZMlc6haGo
---- YsHfC63GHf9JJII4OKKSn4oFlsdnTs121LkpxF1aZn8
-¬ªw]¦°µûm)Ùû<C399>¤Š#ùÄ>EŽ$…2<14>ÛqÝƺ©=-ºXo;Àm”Ø›ç®*DZ™¥ý7¯I#W5õi<C3B5>±ü‹ÕKK§žÍ‘D÷Fa7<61><37>çz<C3A7>€C8XºÃÖx&ö•R§<f´¹ãî4adÚނ׌ÏnÊ<6E>¨á
+-> ssh-ed25519 13iwjQ MDCuhbXcSxEv2fHTqyrI9qiqF3fjYXxUshGDfiXQ7ko
+nxajOoQVriIqBcgU43fmjya2Qj4hkK7JLh5k6k/kAec
+-> ssh-ed25519 7MB20A dPEZDugWp+EciWEHOaQBF93pRuQBNGcdCuSLA1OQXDo
+P8rFtYR9hpoZmjp+Pl8px1iO0I+6wNItTR4+x5go1TQ
+-> ssh-ed25519 IvyYug RgfQxwZYP8yxiE7Tp7jpNPIpgXxbVQ+Myoq4FDe+VTk
+6Qd1O+OWHjJgMTcyALVPgq4C79j4AADyhCmDL1DklRo
+-> .U^j8-grease %xB_6G( X<66~L, ,#8dS$\8
+hepvWLef4ciT8pbqqFWBYbMLPLkr9bgYqNfsLnI5FOw5qjivfeJil+/Ek3uLoDOs
+JivMgA8gOXPK4AwNyRbS0Lcuy6KUDQbjxmE3Zjwi0D82WjQ+5e8diaA
+--- t9Swt+YnT38baGT9UhOvKIDpJ/VwjFx7YBiZVe8KoNw
+&¡ò*
ÀÝþcxÊ(„I{<7B>wöok<6F>Ž£©ì¨)ìV	ÿÜ«R¦‰9<E280B0>›xã^m1û¿L|ª´­‹
t_1’È=híp—Çw˜î±\匌nhBÌǤPž=aÕE<C395>u™œ
}ÿ³ìÛŽ±}NK¿¦¸½ÓPVÊ

secrets/garage_bertof_thor_key.age

@@ -1,11 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 13iwjQ JNIb379d+dNabgVqSpFB294mK8+k7NPKJQX8mKEzuH8
-puKWL9qNMLWZDHrQVmxNZ7YKrRlFlSLnYMXqbERmXi8
--> ssh-ed25519 7MB20A dklcfIFj3QiG6d+TeEpgzmf2dsieh2cM+tQoJgmbSD4
-O/3nmRW5/lopDhNO5eS/xWRGgr7nhdJLEvNvR+/yPxA
--> ssh-ed25519 v7O/FA /Mi4MWnUWoe43AGj/68VfeJ1Hk8TyqUgXYNjPNMUeVw
-7HoLZRNO3n+WRVakA+fK/lgu6Ruyg/DOP0S2hEmojo4
--> 1`R`v4Yb-grease ] ywaX.
-IoF9c6SPwQ
---- qMFNi8LNUGKx1TeX+h38uM+lSAMskuqF3/Xnfvi5GF0
-BÑÑ—!P0¶8Miž; ˜ò»á®<>tnüÄ&·†;¶Ph·2éþvf`y—›²£Ýֶؑˆ‘ÓI—ÃÑÆPÆÆÇ·Öãv²²)`ÊBÄ;‚.#5í¶ÿ<C2B6>éŸQW^~eÈ	þìÕîÕóA’7<E28099>˜˜<CB9C>Fµté`–
+-> ssh-ed25519 13iwjQ 7DURmgNMfx+6yl0lKVsEddsDF4lWV/r9nMPQCORHkyg
+2j7ir1yIl9kzxT/LyaShZuoxe71N40gYmRBxcMhO0mY
+-> ssh-ed25519 7MB20A mawRpxmKDw5ehWI0pbmZmOxZS268YizvVS2IEgk1JSc
+8IsMYTy4d8AL7ZD+B4T+tMWUuHYPuEFiRhXmuy0UjI8
+-> ssh-ed25519 v7O/FA biU3XRo8HRIXk6GTtm9dPZ3yDWp2YNF99T1LuCXExzo
+7d93dHhZMEpCTzXZ4CGz9dGx1rRCao/ayHUgB0yEiMs
+-> %r*-grease
+WZODXQ9zRYlSpSSNvcDeL0L9RtL3eQQ
+--- GSZKFrU8QZIMkQRuruV1rs8zdtl2ubU15zMSRkcPmkQ
+H³Ïqµš²üDãDàËÃéÛv²K—îòÿ0Ð…sæ©;hÿ
Ô˜õÂݹÛÔ…Æ"@…á‡*ÑŸyÚ"H?72Ëè	<09>¸z©*,Ð<>’G~ufÕÝé@l«†!˜fÍ>¶eׄ–W¤÷ÊÔãM•ž„­Ýÿ%7\t"åY„

secrets/garage_tiziano_loki_key.age

@@ -1,11 +1,14 @@
 age-encryption.org/v1
--> ssh-ed25519 13iwjQ hBLrqcwBpdnPT5fmZIvyl0hZMRBh393UBuG4HebzAl4
-W0z/DbpsLMotl5z+MJcyAcImH0I84VB8cnGg8LNMsJY
--> ssh-ed25519 7MB20A DMlY1D4f64Iw7OoLkH09R5g9TaKk8h/V9J9xEWuDfRQ
-GU6TrEfzfhvvEQbDkzETYIhCzjFpEsTEFSsbjXL/Ba8
--> ssh-ed25519 XgC3XA 8EStjHuAgmC3dgBCdRN9kdKGl1hObQHTiet+dTu4wXg
-iwKtaPg716SU4zt8ik+lNe72GAce/bThccbCE/KnFUI
--> D-grease r!?a+A
-sY+4gQaEg6719Dy0IL4DRZgTS2wkusRzjd0
---- zSC/T4so3DrVbS9luLC6KRwKW0+eMmMnuACzGDM4IU4
-ó‡ñˆ`†	¶2[ß½£¬ÎD;@†Åœ.ŽÓŽ‰{c>¤¬oFŽï0S|ÈËÃÑ<C383>Tô÷G»gE%M.þðÃc<C383>È
˜Ä,¿'Ôº9}…28i<+8M["[ĞÔ‡%©,l©y¿;sL›~“LX>î¤;B`ž±<C5BE>ØM€_
+-> ssh-ed25519 13iwjQ 3woAZR7dm07GamFTbu2dCq5GO/9496s/WOOYjm4/23U
+oiOyguUxWxZDK37fNuIkE48tG03qTHjL1S9wsml+Sbk
+-> ssh-ed25519 7MB20A rZCZ1SlK8rrY4YTXz9o4tlx21CwmWB2yzDPDtBBC2mQ
+IOeSCigCRrPizmfbmVgmV2rmcqfxKPh3+BsHfWxlOSg
+-> ssh-ed25519 XgC3XA x+ZqLfldofvXEYqvbHLOVJYYvKMpDXoUKRyo/821RQw
+d+Pd82d/aBjiYBFiUvccfyrXbYUtpIAU1oGQYZZdxI8
+-> K3-grease vv ">R<5y`Z f8/J
+uFkkLegrOvBAkKbWs97lAKDF3vXF0t0zBeL7UC09hvt9vR2Dr+BVtvm1ijLqRpxK
+dULBdobWAIUlC+zqLW1ovD12WWkvymDCJP6WQjWot8E
+--- qpR9ASStBz5YfV1NMlTwGOpA41lhcK4MrqAingWD5uM
+;Œ†g¢¹›ìž	Û;…<l¤Âoö;
+™¶9<EFBFBD>ÿ*Š`<60>ÊôÒnð¬ÊäU˜,’‡)*ã	1¬*ÂÄd2{ñÝâŠÁ<C5A0>v|ÐpûÏ“ºÛŠbk
+%DâûR75¾<10>‰PÜ6àAôÞË0Ìf!½ v”§„j7j0Þo

secrets/odin_wg_priv.age

@@ -1,19 +1,12 @@
 age-encryption.org/v1
--> ssh-ed25519 13iwjQ 5MO0JE6hPY/uL4mII+Axp6FFRbIOpd5dL2lEj9T62Xc
-3D8Eu7yiawNbLFRilGrwId4hqI8AvwtnIbHPLfHSakY
--> ssh-ed25519 7MB20A XDBiNJVWgynVxFF/r044LZBOlAhoJP2soBRdgE3rcGU
-CFFdnSYCrhZnNc1BNSR7MzP8ucm2j+Keg/7fvg1h314
--> ssh-ed25519 IvyYug ST4+U+uVK3XZdFE4iorbXXW8DI+OHBBk9IIlXLu3l0U
-js++OiBfjgeqo7lO2+doADJqFmYzOt3MsB7O93wGDyg
--> ssh-ed25519 v7O/FA g9k7IucmawQfeFSDlt1PlNkRqQxq5UVpJM3tUK2fFUQ
-5iiTQP88uRyWy2RY4Kdym+1VMMtvwaLD+ZU1cfSppPM
--> ssh-ed25519 Wzv8ew iK2jVsKv86cGh5pdzZ4n4Ef8mtWGwVARpcXqVmRtWkM
-sJCv99OCPLjdAdOoyasAutMjnyHB3hbqXSZvR2pjxsk
--> ssh-ed25519 XgC3XA D5BcgMn2y5DyZrwXivK8D/G2iqs+2cEvqUXxXDAUADM
-tBbVSB0ZuihWKW39lGVRNPWZAUNT/SjUvs/BDwMNxps
--> ssh-ed25519 l795CA AhH46SsmP1heTaw6yY1HNl01kz0c6UB5hAVlFBTKMlw
-kKECqPPd8NzwPdEGIEl/hhlWl0I8hRtWvLYdO/vcNKI
--> 5-grease ZUgr00 t"|B Y8jZ
-DzXpmqSe9AZh2oef6s8btPcXfT6JL2kmhA
---- bx1iC19lCMo2pgpAPp8ESqFtN5fAjuzAylObUWjy9zo
-û–x'fv™È’›ˆ¯8ý œûM´ØÃî-7hzÙE·<èÒÇ™'JùEÈøJ…±)¶ö<>é¦Ðef¢ÝÚáð;F¹Ã²£ûÒ”
+-> ssh-ed25519 13iwjQ 4vfkhu82gQ3o1MrMtZ/AEv8VVqlFm+JruzPblRZ2chE
+MrC35LC0h4aS6FwqyZ8yq4ZhxhTwvDB6fQjA+l+MeB8
+-> ssh-ed25519 7MB20A SXdvtfDd4cjpZ0FFJcB/hyhlLJDV5hnJy9VhDXobaXE
+Ic791Eqmz/xwYOIiRgy52TwwdOliGwv+IPMfUQVaFI8
+-> ssh-ed25519 IvyYug KzePWeKe0R1S2Cj4eJVCdaFgHCeNHRs0eopSf7X1gw0
+OHh2CgqfX37G/QJWAr+ENz0gap0/25gLTzRggFrb2ac
+-> *eV7<t-grease
+Wqz2mLz4NaaPL5pJpXvXYHM6h8DJV9oiZk55BgJrDLXYvKqwhF/aS4b0R8WjggcS
+pedmdWtb5wacDMQSGO9Kn5W+wobcO/lxn1YignvAZe/e
+--- 5jk1djqXow8GSBtqBE5eqtf76rOcam3iKpLwxyRnv2U
+býE{äc›°aÛmÅ«<C385> ‚Ž¾óyØQš_m“¯•,ô‚ T\"&<26>'oA¨b®×z𪯹®üK“&š{`íEãi§ë-

secrets/oppo_wg_priv.age

@@ -1,21 +1,20 @@
 age-encryption.org/v1
--> ssh-ed25519 13iwjQ L902+KFxLZfTQyp6KGtc8CmX38878cMmXXKf7d8wbWs
-yCp4sa8Ad7APRyiozlRTgUBuj9ol3tTkhLQZpf88x04
--> ssh-ed25519 7MB20A bA4H72Ew3gwCrGC+8zuC129l6+pN6tEU5ooBaz0E9Ec
-EaqaBFVi/JFGvOnqW7KXhumfxx8cs41jREjlL/cu2hs
--> ssh-ed25519 IvyYug 7BStG7x2qgra5HNqiIT44V69YbxOp0y0uN/3UqxGuEk
-B2pFicyZmtS4pKx/usMegVeIyeesAtYaXec2Vvy7/dk
--> ssh-ed25519 v7O/FA Nd0HLbnJpBNYFoHd0oxxKCXzkhF0lpwD0lgnBGKd6HA
-McJrbQXuFPjkYV8bhw4p4+xWrlAslhnbkJmy4WLkXrI
--> ssh-ed25519 Wzv8ew DSRTmBZ0gi47OaAL5f4AAMvSx4/5IRO2njEAe7S9KiU
-gTyKispOlVJ4hv1aDmoRo3zkUddwG8YjpAUWZ3ZR5L4
--> ssh-ed25519 XgC3XA JSb9PhQ4mu8ihqUU9YjfXElyLeLATe3ln9UD0INZBUI
-A+LMuCiX2XLoyelhqcHXWJngXP4kvTPXKcLbTHSGubE
--> ssh-ed25519 l795CA Cyu6QzedfRgZPX0MUzpiajC3K4lhWyuWeCVQ68uUmi8
-+fUmBYVlRjtoHaV3Z3MeJ5dpXYKyLtpCHFNCKuXWTAc
--> '6J^,}u-grease 1j_b22r/
-q/S44GKfvl6TYESYUI3rZcuqwrUKTrUTO2ycPMSroyj29KmoAYFRtmZKuxA9epYz
-0Qs/FZrz14MP8ofrpqM
---- XH5EFu5uN5U0BdCC08Ud5eYo1La6VxfQJj9Frsjmm3o
-ᜨܰˆÕ¿W—äz+<2B>%Æ*8i@—Šë	UüÖJâàø¹\­Dƒ¸Ý:ãÚ{N’&¡rCÅ\œ
-òT¶B{j–6Â(<28>ø¶¿/ÑG
+-> ssh-ed25519 13iwjQ 3Fnu5eYdImLSFr8pyTeQn3TqyZFK2NAlP9s0aY2DVkM
+YTvnQsIboABiPOnG+A4yZjz0rdx5zIjTpV06vUgLss0
+-> ssh-ed25519 7MB20A rVgJ37EHC3jiOMElrT8d4tuoKrxvpwdmvkfpCD2WGCo
+pNdT9uxAbizBlrJnfKbgELatpydVTO6ZRSjs2hGuNKM
+-> ssh-ed25519 IvyYug o4XD48JA3D1leIZZ8dOCI1xks3akFogX4LCO0GN/Sl0
+UIzHMG+CUsjMlRtuVUMPON4+Tj3sua0j3/VESCzynv4
+-> ssh-ed25519 v7O/FA Sg5Xv5HHk2J28IzlpS1QNpgbBcASdxxcKxGZMYDEoyY
+CYcP9ymGOANfJFH/fcm1K2ZVuzfj3XaEjhw7eDBPON0
+-> ssh-ed25519 Wzv8ew 6+kdq8KsIt9DygW+oXgAsPo1aeY9FsQAtS/W7xPWQD4
+jY0dYuun0ui/WRrTNRxYde3mqDWm85vIo1tQEvnDVxU
+-> ssh-ed25519 XgC3XA oBwxVQzDO09KpbY/0Zag0nYZPsFpUXq80FYX8pQBAwg
+KQgxthZlj0SGVoPwzl83J2UiHfx4ZroeZ5ycM40Oz8I
+-> ssh-ed25519 l795CA v4+x6aXUUIIfXxWf/C9w9UNXK8mQsofs43JOehaDR3M
+LGxvkjNTt/5ZoBIJZCDC7f3+dKWjBehUIQBpvu2M1Ck
+-> xpG1S|-grease VUytEDfP %4ac )N
+OmPEP9ET92FdAZRD3gQhpukku23pP6pb5t6iJnK7CYeTI9yxdhx3UJC+8BqghNA1
+iIk16ftDezV2sgcId4hxP1Yj1q7tSV0XpiRnPVI
+--- 9VMj22O7np2obV6/wX4cltTQi2Z24a90pHx0nYksKIc
+š&7‡(ÿÉ òÞæ²ÅtV<74>#ÊJ5+õ0RŽÂ›GuÂUžÔÀóÖÔÅš/”Nh'æ‡Ï¬ÏL…£wâzš(ÉÎÎŽ5!ä$¥|

secrets/secrets.nix

@@ -24,8 +24,8 @@ in
   "garage_tiziano_baldur_key.age".publicKeys = devUsers ++ [ baldur ];
   "garage_tiziano_loki_key.age".publicKeys = devUsers ++ [ loki ];
   "baldur_wg_priv.age".publicKeys = devUsers ++ systems;
-  "odin_wg_priv.age".publicKeys = devUsers ++ systems;
+  "odin_wg_priv.age".publicKeys = devUsers ++ [ odin ];
   "oppo_wg_priv.age".publicKeys = devUsers ++ systems;
-  "thor_wg_priv.age".publicKeys = devUsers ++ systems;
+  "thor_wg_priv.age".publicKeys = devUsers ++ [ thor ];
   "wg_psk.age".publicKeys = devUsers ++ systems;
 }