bertof/nix-dotfiles
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix s3fs mount and secrets

Browse source
This commit is contained in:
Filippo Berto 2023-07-29 21:38:06 +02:00
parent 502b1a1091
commit ccce9fbd31
No known key found for this signature in database
GPG key ID: FE98AE5EC52B1056
20 changed files with 151 additions and 123 deletions
Download patch file Download diff file Expand all files Collapse all files

40
instances/baldur/hm.nix
View file

@ -7,6 +7,28 @@
}; };
packages = builtins.attrValues { inherit (pkgs) nix-prefetch-scripts; }; packages = builtins.attrValues { inherit (pkgs) nix-prefetch-scripts; };
}; };
systemd.user.services.garage-home-s3 = {
Unit = {
After = [ "network.target" "network-online.target" "local-fs.target" ];
AssertPathIsDirectory = "/home/bertof/s3";
AssertPathIsReadWrite = "/home/bertof/s3";
Description = "Mount S3 bucket in bertof's home";
StartLimitBurst = 5;
StartLimitInterval = 200;
Wants = [ "network.target" "network-online.target" ];
};
Service = {
ExecStart = "${pkgs.s3fs}/bin/s3fs -f -d bertof /home/bertof/s3 -o passwd_file=${nixosConfig.age.secrets.garage_bertof_baldur_key.path},use_path_request_style,url=http://localhost:3900";
Restart = "always";
RestartSec = 30;
Type = "exec";
};
Install = {
WantedBy = [ "default.target" ];
};
};
imports = [ imports = [
../../modules/hm/__basic.nix ../../modules/hm/__basic.nix
@ -26,23 +48,5 @@
# ../../modules/hm/noti.nix # ../../modules/hm/noti.nix
]; ];
systemd.user.services.garage-home-s3 = {
Unit = {
After = [ "network.target" "network-online.target" "local-fs.target" ];
AssertPathIsDirectory = "/home/bertof/s3";
AssertPathIsReadWrite = "/home/bertof/s3";
Description = "Mount S3 bucket in bertof's home";
Wants = [ "network.target" "network-online.target" ];
};
Service = {
ExecStart = "${pkgs.s3fs}/bin/s3fs -f -d bertof /home/bertof/s3 -o passwd_file=${nixosConfig.age.secrets.garage_bertof_baldur_key.path},use_path_request_style,url=http://localhost:3900";
Type = "exec";
};
Install = {
WantedBy = [ "default.target" ];
};
};
home.stateVersion = "22.05"; home.stateVersion = "22.05";
} }

4
instances/baldur/hm_tiziano.nix
View file

@ -13,10 +13,14 @@
AssertPathIsDirectory = "/home/tiziano/s3"; AssertPathIsDirectory = "/home/tiziano/s3";
AssertPathIsReadWrite = "/home/tiziano/s3"; AssertPathIsReadWrite = "/home/tiziano/s3";
Description = "Mount S3 bucket in tiziano's home"; Description = "Mount S3 bucket in tiziano's home";
StartLimitBurst = 5;
StartLimitInterval = 200;
Wants = [ "network.target" "network-online.target" ]; Wants = [ "network.target" "network-online.target" ];
}; };
Service = { Service = {
ExecStart = "${pkgs.s3fs}/bin/s3fs -f -d tiziano /home/tiziano/s3 -o passwd_file=${nixosConfig.age.secrets.garage_tiziano_baldur_key.path},use_path_request_style,url=http://localhost:3900"; ExecStart = "${pkgs.s3fs}/bin/s3fs -f -d tiziano /home/tiziano/s3 -o passwd_file=${nixosConfig.age.secrets.garage_tiziano_baldur_key.path},use_path_request_style,url=http://localhost:3900";
Restart = "always";
RestartSec = 30;
Type = "exec"; Type = "exec";
}; };
Install = { Install = {

4
instances/freya/hm.nix
View file

@ -17,10 +17,14 @@
AssertPathIsDirectory = "/home/bertof/s3"; AssertPathIsDirectory = "/home/bertof/s3";
AssertPathIsReadWrite = "/home/bertof/s3"; AssertPathIsReadWrite = "/home/bertof/s3";
Description = "Mount S3 bucket in bertof's home"; Description = "Mount S3 bucket in bertof's home";
StartLimitBurst = 5;
StartLimitInterval = 200;
Wants = [ "network.target" "network-online.target" ]; Wants = [ "network.target" "network-online.target" ];
}; };
Service = { Service = {
ExecStart = "${pkgs.s3fs}/bin/s3fs -f -d bertof /home/bertof/s3 -o passwd_file=${nixosConfig.age.secrets.garage_bertof_freya_key.path},use_path_request_style,url=http://localhost:3900"; ExecStart = "${pkgs.s3fs}/bin/s3fs -f -d bertof /home/bertof/s3 -o passwd_file=${nixosConfig.age.secrets.garage_bertof_freya_key.path},use_path_request_style,url=http://localhost:3900";
Restart = "always";
RestartSec = 30;
Type = "exec"; Type = "exec";
}; };
Install = { Install = {

4
instances/loki/hm.nix
View file

@ -13,10 +13,14 @@
AssertPathIsDirectory = "/home/bertof/s3"; AssertPathIsDirectory = "/home/bertof/s3";
AssertPathIsReadWrite = "/home/bertof/s3"; AssertPathIsReadWrite = "/home/bertof/s3";
Description = "Mount S3 bucket in bertof's home"; Description = "Mount S3 bucket in bertof's home";
StartLimitBurst = 5;
StartLimitInterval = 200;
Wants = [ "network.target" "network-online.target" ]; Wants = [ "network.target" "network-online.target" ];
}; };
Service = { Service = {
ExecStart = "${pkgs.s3fs}/bin/s3fs -f -d bertof /home/bertof/s3 -o passwd_file=${nixosConfig.age.secrets.garage_bertof_loki_key.path},use_path_request_style,url=http://localhost:3900"; ExecStart = "${pkgs.s3fs}/bin/s3fs -f -d bertof /home/bertof/s3 -o passwd_file=${nixosConfig.age.secrets.garage_bertof_loki_key.path},use_path_request_style,url=http://localhost:3900";
Restart = "always";
RestartSec = 30;
Type = "exec"; Type = "exec";
}; };
Install = { Install = {

4
instances/loki/hm_tiziano.nix
View file

@ -13,10 +13,14 @@
AssertPathIsDirectory = "/home/tiziano/s3"; AssertPathIsDirectory = "/home/tiziano/s3";
AssertPathIsReadWrite = "/home/tiziano/s3"; AssertPathIsReadWrite = "/home/tiziano/s3";
Description = "Mount S3 bucket in tiziano's home"; Description = "Mount S3 bucket in tiziano's home";
StartLimitBurst = 5;
StartLimitInterval = 200;
Wants = [ "network.target" "network-online.target" ]; Wants = [ "network.target" "network-online.target" ];
}; };
Service = { Service = {
ExecStart = "${pkgs.s3fs}/bin/s3fs -f -d tiziano /home/tiziano/s3 -o passwd_file=${nixosConfig.age.secrets.garage_tiziano_loki_key.path},use_path_request_style,url=http://localhost:3900"; ExecStart = "${pkgs.s3fs}/bin/s3fs -f -d tiziano /home/tiziano/s3 -o passwd_file=${nixosConfig.age.secrets.garage_tiziano_loki_key.path},use_path_request_style,url=http://localhost:3900";
Restart = "always";
RestartSec = 30;
Type = "exec"; Type = "exec";
}; };
Install = { Install = {

4
instances/odin/hm.nix
View file

@ -48,10 +48,14 @@
AssertPathIsDirectory = "/home/bertof/s3"; AssertPathIsDirectory = "/home/bertof/s3";
AssertPathIsReadWrite = "/home/bertof/s3"; AssertPathIsReadWrite = "/home/bertof/s3";
Description = "Mount S3 bucket in bertof's home"; Description = "Mount S3 bucket in bertof's home";
StartLimitBurst = 5;
StartLimitInterval = 200;
Wants = [ "network.target" "network-online.target" ]; Wants = [ "network.target" "network-online.target" ];
}; };
Service = { Service = {
ExecStart = "${pkgs.s3fs}/bin/s3fs -f -d bertof /home/bertof/s3 -o passwd_file=${nixosConfig.age.secrets.garage_bertof_odin_key.path},use_path_request_style,url=http://localhost:3900"; ExecStart = "${pkgs.s3fs}/bin/s3fs -f -d bertof /home/bertof/s3 -o passwd_file=${nixosConfig.age.secrets.garage_bertof_odin_key.path},use_path_request_style,url=http://localhost:3900";
Restart = "always";
RestartSec = 30;
Type = "exec"; Type = "exec";
}; };
Install = { Install = {

BIN
secrets/baldur_wg_priv.age
View file

Binary file not shown.

22
secrets/garage_bertof_baldur_key.age
View file

@ -1,12 +1,12 @@
age-encryption.org/v1 age-encryption.org/v1
-> ssh-ed25519 13iwjQ 3evCb5M2t5/qI3AkoXFwDzswW9AofCkqN2Ca4qqLNVY -> ssh-ed25519 13iwjQ T8WFR+jpiGnzHP7E7E5jj4pl7SsWDkC9FdqBQ2X8dmY
gNtgLnv/DaKVS+HI59WMziISxUltnK56UWAbU12W1yc /q61iSC+mwHHCCyRiQBci4edvb3t+ZDUjULP0zmBa0Q
-> ssh-ed25519 7MB20A Rmn3xlZ5nhf6+nMrhZsYRf1TDnuKA7W879FJqGQ6DkY -> ssh-ed25519 7MB20A UScCTlABJKMocqgEE2zU8rp+ND6nRfI8vwjki6LoC0Q
1gQlRxIV0ABpRScI0Qhq0yzsP3pyL7Qc95wADMOrZvo i4JSJeeuavrAAYZDnThtDfkcpbYZpvWHPCrs0RgDFS0
-> ssh-ed25519 Wzv8ew M9PZsh+aDheaL7m89l3g/3ecq/YmJeH3mbtt8Q1QaUA -> ssh-ed25519 Wzv8ew PqgRzMfoG+pa13AkvzDtiBXsCybuyZvYHorPpELx3T0
RcWXxJGJiNwbz1+f5pYL0L3+jpSyTg1Q2+PIZWsrC/s 1StfjLr5eiHeCN4+slh6iXGnMsh1NxklM92wikeMZFE
-> xdK^*-grease d -> yhoA<Yx|-grease $5weSkNA ^j
uSLYEtSHXLHiDSiYjd4VAgIaA2qhNIXnam5zF3llgchSrk/3G5fUtAZ57i6ErnVW +Pk/LkSWndZxyak6xsBd5e5Of3MMRtoOxs3grIc43Bx+keOqAJBVU2IuEWiWMnma
LXqj5uXVJrG5O0tc8aVDz3Y4NjUxXRwVxYM eAoSbeukywmgxLftbz+ppTE4YQlyc2OiFLflwoN5QOdV3ZDaLg
--- /9L7n8gpyvn7/hSHqF5ROqm6vDJsf6T3Uy63b/jBCGM --- XasY9PCRKIsxAK71yBnZvuk9OZ5UUJaYzD3F82LhVM8
Âr.–·©s6ü½Ÿ®yØ:ö!I.)Š­J2¼pc•[Ee(<28>?hP¿¨QL[› <02>‘ ‹¢¿•3ûy_lÒ”•kÞ¨´²æчb³î<1E>F–lŒfò‰<C3B2>£z¹Ûµ ú{UO)m ˜Úãx¶ÉK O¸éˆ«âØé¥ ÙžÈ6»Ôh¬ç¦•§ ¾®£„eñ<7F> ÚyÊ[mÙ =”XÙ ––BSÛcàmHÆy<ôÿý<C3BF>ª ÙÈ‚"YÆϺ'#--ö=Q<>-XÎvìá ·fp2u~³;‹JPD¼вî×y„Wßt*%;¹æ‹£„Ãx}b;Î6µ

BIN
secrets/garage_bertof_freya_key.age
View file

Binary file not shown.

BIN
secrets/garage_bertof_loki_key.age
View file

Binary file not shown.

22
secrets/garage_bertof_odin_key.age
View file

@ -1,12 +1,12 @@
age-encryption.org/v1 age-encryption.org/v1
-> ssh-ed25519 13iwjQ HUm59qVC9lTDIYYsfTJWjNOTmMWACQTcHP7FKSh1ClE -> ssh-ed25519 13iwjQ cyCv9791Eos58fHGMtryIbZvgAbzgWzt+LZ6xqFAzC4
7NTTSRRwnz03BE/058KUvGt3MUn7Qsbijc/5iugXPN8 uFQ4qK8IzGIZ/SSFIg9b7mNPHBgkn1NkjX+bkZOBu3c
-> ssh-ed25519 7MB20A WdCZELRUd2SvqBv2EfKy+pMGeSlRZyehSzwR6/WfDyw -> ssh-ed25519 7MB20A E+69W6J5hiXqcHjico0uxQ0rtKhHjCeQGPTNwpCFb0U
HU2DzLP2ULxwFIZwBtPvY+WStTQQGguIJJ1ohZPVeek 88tD6wGRdygj1DdXji1o8SyjXJQsHED++onY5GJzDfQ
-> ssh-ed25519 IvyYug tMdmpOkbf7/wT4XHHO08Zil9UbBJyxvGQ+vY5imqgGg -> ssh-ed25519 IvyYug XCBD6iaBoQczsO11kjHPKr/jJYH/qyFnz3nzWJLXizI
BEbZWGHnP0PkPEJKvMA+HnsOdszDCX6ZG19S3z+LjY0 yzCHVqipa9pXDSi3vLyAQOZ34Hfk3EYj9xSaA8GhpNI
-> tS-grease \#1- ]&%Te8 -> Lge%;/,R-grease 6W {fv| f]>3
h5Lb1J1nkusHPt66wwJLwQwzFxc qjAy+K+VIZIQWc7eZ/SO+XMHB44uMWbTF+7MI4SC3SAGEE194VjUmLZagFUjHW9S
--- gvPDP7Pe/Xifc89egw48dJx1v+uQUGWbLMmFFW5BYtg xU6gPHDtbOgAvJeoVjKj48k8DAy7pcOsz1xqfSVn+1dQnITcGUZMlc6haGo
öËçÇj ÔI7zsÚ¹§"C|•nø¸@Ö7ˆæö snB@Š…Ú[{¾t_âÆÈE¥ïukOª$<24>0Ö®·‰¡Í]æ<j3ÑsÇt 45L÷p& c.!á?¼ˆ¤\<5C> --- YsHfC63GHf9JJII4OKKSn4oFlsdnTs121LkpxF1aZn8
T¦dS‡»/ëK4ÖÔžò<C5BE>êÍ­*ò4(<28>Ž ¬ªw]¦°µûm)Ùû<C399>¤Š#ùÄ>EŽ$…2<14>ÛqÝƺ©=-ºXo;Àm”Ø›ç®*DZ™¥ý7¯I#W5õi<C3B5>±ü‹ÕKK§žÍ‘D÷Fa7<61><37>çz<C3A7>€C8XºÃÖx&ö•R§<f´¹ãî4adÚނ׌ÏnÊ<6E>¨á

BIN
secrets/garage_rpc_secret.age
View file

Binary file not shown.

21
secrets/garage_tiziano_baldur_key.age
View file

@ -1,12 +1,11 @@
age-encryption.org/v1 age-encryption.org/v1
-> ssh-ed25519 13iwjQ OS0cNZt+0trDUEx+LQyuNyuRRpTlVKHhwsFT0k5uKwM -> ssh-ed25519 13iwjQ LqqTmN2iGWVn2oD2WU7ObR5OO4dyV3D2FroONRGsHwQ
FbbGfJTyvNw2d2IP7VzJWYSIfJXf1tvh0iUFouiVA3U 31I+PB/K/Jf/71l0F1JA3EaJMNcSgwozim+hxov5T5Y
-> ssh-ed25519 7MB20A D/7Cx9iBBke+WB8n73pODNGVIevXMFtEcU+3tYZvySE -> ssh-ed25519 7MB20A ZhLSkSWzy/M0J31hSKjO50kDDIBLpefDI4LewaeGEyQ
f7lMSG9v51Sj6SE+YtyJ7/mR7uadsxtLpwc+GGENl0Y rqHe01q2Ht25R9pXqJhcAwP7NAI4G0pHb/l5EKzMgMg
-> ssh-ed25519 Wzv8ew 3HkqjxNUmxb03+K0TNYR17ycLFEH6MDd1WuCt5s6Hk4 -> ssh-ed25519 Wzv8ew bVYHFPqOdoxSF27yGxpPR+yzdapdntqDsXCcZ3OjYz0
yqZ7g2X33tzG50SA/fEVTbUkKStWnJwty4ac7JlqMp8 QPaxhF8OIh20MpPHbedwcSUts8w/tvXfe+TzP8+xbUk
-> ]d_ZO-grease {n;r}1#@ 0dRl n3bFCrdE -> =usKd;>-grease
X7t701CvFJv8 Ui0CwUs
--- qU4twOWvO8/0VepbmqgIM/wBbWiA/YCNfa0g1oNlLro --- w8Hi7+yQ6uXC5kZa7yAm+13aTFFU5PoWr+QHvCBANTg
 Åo÷„àªäȃPêýâøL)\ñÅü)0–ÒøIÙ´¡…Xš &<26>Ï ‡aŸÈ”Ž©Y<EFBFBD>þ]½ºWÒ(ËC…&müþ«$f‰úO>•`.•*Ï)Böoߥó‚Ø*¥»(½³i¡„E7éÝÆCñýÁ~yìÀ<C3AC>ÀuI!<13>—Èâ-H¥œ*JÕ*ÌC˜dQ7²‹Rfd?¬ìzñ !©§?É)Xø5‹
׃5¬B¤\Y<03>TÛ±úëUSKY윮¹dÅTúÏT¹5Oñb´z‚{ò‚ÜBØÙ›TÆäø½9-‚£â»Ãíýæþ± p¿åWØ/

BIN
secrets/garage_tiziano_loki_key.age
View file

Binary file not shown.

38
secrets/odin_wg_priv.age
View file

@ -1,21 +1,19 @@
age-encryption.org/v1 age-encryption.org/v1
-> ssh-ed25519 13iwjQ 5/eaXuPnPtmxKle+0sln9LwKULrvM0gfl6BI6EbAbX0 -> ssh-ed25519 13iwjQ 5MO0JE6hPY/uL4mII+Axp6FFRbIOpd5dL2lEj9T62Xc
Jc1SvuisV13xIM6g33IgawoNnmfuQhRJwozk2QGrvSw 3D8Eu7yiawNbLFRilGrwId4hqI8AvwtnIbHPLfHSakY
-> ssh-ed25519 7MB20A IyjgPwf6gXzUIgadjAMqc2l/ixefRdXLA71V+IdGRkY -> ssh-ed25519 7MB20A XDBiNJVWgynVxFF/r044LZBOlAhoJP2soBRdgE3rcGU
kO6M9yAlJ0Yl1R9DwSgVAYnJuXaVjOeNos177erkgCU CFFdnSYCrhZnNc1BNSR7MzP8ucm2j+Keg/7fvg1h314
-> ssh-ed25519 IvyYug 6A1n+laWjmyK31wTaizyrBj3vP3Mx55I47TbeLl6lD4 -> ssh-ed25519 IvyYug ST4+U+uVK3XZdFE4iorbXXW8DI+OHBBk9IIlXLu3l0U
PJNKBATGlbdFBtevbtTcnT3M3yAi0lbbuhc5biKdeVY js++OiBfjgeqo7lO2+doADJqFmYzOt3MsB7O93wGDyg
-> ssh-ed25519 v7O/FA A/if8tjgSK3gfoFy/F9j/bs9SRRpGEf4OqjD3c9ENE4 -> ssh-ed25519 v7O/FA g9k7IucmawQfeFSDlt1PlNkRqQxq5UVpJM3tUK2fFUQ
BGGLe9JX3HEUWz+ahGg6eZD24em6CSICnpnWFKdqKn0 5iiTQP88uRyWy2RY4Kdym+1VMMtvwaLD+ZU1cfSppPM
-> ssh-ed25519 Wzv8ew UgDdk7DlrJN0yKf8Y8CeTRawQ+W/j4ulewABoPkqCWo -> ssh-ed25519 Wzv8ew iK2jVsKv86cGh5pdzZ4n4Ef8mtWGwVARpcXqVmRtWkM
+YfB0fBIFL/2/4bhuid2LgtDzerVrY4VnwuBRe0kzF0 sJCv99OCPLjdAdOoyasAutMjnyHB3hbqXSZvR2pjxsk
-> ssh-ed25519 XgC3XA ehN64Rpd3OA9OayhBNn3RteM9oF+rS3V9iTUodoeTjc -> ssh-ed25519 XgC3XA D5BcgMn2y5DyZrwXivK8D/G2iqs+2cEvqUXxXDAUADM
qNoKqEqvdBehdYRXZdRvrrI2GCYInDQC6ogYsMyi4N8 tBbVSB0ZuihWKW39lGVRNPWZAUNT/SjUvs/BDwMNxps
-> ssh-ed25519 l795CA hvQtpq/u7yOM7gXoP6iJsu5y92HSsGEMCoopUkSASGY -> ssh-ed25519 l795CA AhH46SsmP1heTaw6yY1HNl01kz0c6UB5hAVlFBTKMlw
S+t1tR5HdakBrOQmM93FeRIrUhstR4CggwdBKHkGLlE kKECqPPd8NzwPdEGIEl/hhlWl0I8hRtWvLYdO/vcNKI
-> J-grease BtP1 Y\5oY,nO cFV}5i nv_OF -> 5-grease ZUgr00 t"|B Y8jZ
lQxN+ckl9x8fvRg+y1ymjak5e0WCHzdw2BmTNThgthGgu726N6m1Zc6SNupSDQPL DzXpmqSe9AZh2oef6s8btPcXfT6JL2kmhA
13SuiU+vzGa9DgDW7I8NapKpWL25HET1KRH8SUiopFuHcjSTqAFUQTTN5CO0vw --- bx1iC19lCMo2pgpAPp8ESqFtN5fAjuzAylObUWjy9zo
--- 1mV0nPhPnCK9b6HGNivMOpEiM6061RBGHH6s0rdCGco û–x'fv™ È’›ˆ¯8ý œûM´ØÃî-7hzÙE·<èÒÇ™'JùEÈøJ…±)¶ö<>é¦Ðef¢ÝÚáð;F¹Ã²£ûÒ”
°^ ìpJù æ!‘¿3­œ¿ ë÷ÃuÓ!„¸[q"ºÏ¹âPq³Ó°¹¢œJå'Äg·•$£X
§£- Öæ\ØÁX](&<sÈpG¹á

38
secrets/oppo_wg_priv.age
View file

@ -1,19 +1,21 @@
age-encryption.org/v1 age-encryption.org/v1
-> ssh-ed25519 13iwjQ jqXMizwZ50RgEi6BYizItJcDtc6eSCT8iLnvY9jSu0s -> ssh-ed25519 13iwjQ L902+KFxLZfTQyp6KGtc8CmX38878cMmXXKf7d8wbWs
4/fLtAIUFf2Bl8RHukEKvbFogdgRc8sCI9YsHV38OTQ yCp4sa8Ad7APRyiozlRTgUBuj9ol3tTkhLQZpf88x04
-> ssh-ed25519 7MB20A pEP3TvazbBsJpMWpDZv5KImhNhEgM5gyi8E1VeeGMBk -> ssh-ed25519 7MB20A bA4H72Ew3gwCrGC+8zuC129l6+pN6tEU5ooBaz0E9Ec
WTHz8qlLNdtrFN4P8HECo9smTyFOwpkMfPWS6JtmkJw EaqaBFVi/JFGvOnqW7KXhumfxx8cs41jREjlL/cu2hs
-> ssh-ed25519 IvyYug nKzXy2IKAD3ZU9riklr3YcWgkyiEvRtn2jOPaBWIjU4 -> ssh-ed25519 IvyYug 7BStG7x2qgra5HNqiIT44V69YbxOp0y0uN/3UqxGuEk
LXhcnOU1xyaWDnI57waHQcrCh4j7cQHQrqmOtINeOiM B2pFicyZmtS4pKx/usMegVeIyeesAtYaXec2Vvy7/dk
-> ssh-ed25519 v7O/FA kM7V+YAKBXNZhjxC97AXQpvmC3RYThFNO+cba4seglA -> ssh-ed25519 v7O/FA Nd0HLbnJpBNYFoHd0oxxKCXzkhF0lpwD0lgnBGKd6HA
2grknub3XXDfs1kAkBMHJFLbvPPyRD7KJpvtTqwD814 McJrbQXuFPjkYV8bhw4p4+xWrlAslhnbkJmy4WLkXrI
-> ssh-ed25519 Wzv8ew G9/i+M/ZXdF7Or4yRoa2WIx+gL0ZqNSD9CeY0UEhsVk -> ssh-ed25519 Wzv8ew DSRTmBZ0gi47OaAL5f4AAMvSx4/5IRO2njEAe7S9KiU
YmcQhtWP6DewLpED5CzCuYjcS8HO6VzoVl8BFGGkl/I gTyKispOlVJ4hv1aDmoRo3zkUddwG8YjpAUWZ3ZR5L4
-> ssh-ed25519 XgC3XA VSe4z1ZuvgCfMGJ+yEKcs3nMz6teuZcsyWoc3EAQvhQ -> ssh-ed25519 XgC3XA JSb9PhQ4mu8ihqUU9YjfXElyLeLATe3ln9UD0INZBUI
0CHZYU8gQ68JN7K3Dmm2lsUKfay/wqiGJihSyCqtwXk A+LMuCiX2XLoyelhqcHXWJngXP4kvTPXKcLbTHSGubE
-> ssh-ed25519 l795CA WQy4KibcRyBB6BBQoHiJM+wEAQ4YgUOeL8y2EvjTMTc -> ssh-ed25519 l795CA Cyu6QzedfRgZPX0MUzpiajC3K4lhWyuWeCVQ68uUmi8
zXD27aCa5fpeIKstjRGZ8GQSFKNT0MGcr9VsVCbCW8c +fUmBYVlRjtoHaV3Z3MeJ5dpXYKyLtpCHFNCKuXWTAc
-> P-grease ' * )~~$j|* i3U0L[7 -> '6J^,}u-grease 1j_b22r/
1cwPET/A+MRWOHC5+IBllmM5vHQYhIu9LZ+g84HHMFNlChV90hQthUorq/I q/S44GKfvl6TYESYUI3rZcuqwrUKTrUTO2ycPMSroyj29KmoAYFRtmZKuxA9epYz
--- 5NssGvuGj/Sy/aCN6IaqWIkmhZs7O7S2VMtHt7BFlvk 0Qs/FZrz14MP8ofrpqM
Ž%–<>ÈÜ›4Bß—Eª ëüE°6ñ t®-ø×¼cX½¹¿¤bÚ —]o®·cÃÿ'¢=‹Lš;'hêñXÒ‡Mé°LäB<19>ˆS<1 --- XH5EFu5uN5U0BdCC08Ud5eYo1La6VxfQJj9Frsjmm3o
ᜨܰˆÕ¿W—äz+<2B>%Æ*8i@— Šë UüÖJâàø¹\­Dƒ¸Ý:ãÚ{N’&¡rCÅ\œ
òT¶B{j–6Â(<28>ø¶¿/ÑG

2
secrets/secrets.nix
View file

@ -14,7 +14,7 @@ let
in in
{ {
# "oauth_proxy_client_credentials.age".publicKeys = devUsers ++ systems; # "oauth_proxy_client_credentials.age".publicKeys = devUsers ++ systems;
"spotify_password.age".publicKeys = devUsers ++ [ odin thor ]; "spotify_password.age".publicKeys = devUsers ++ systems;
"garage_rpc_secret.age".publicKeys = devUsers ++ systems; "garage_rpc_secret.age".publicKeys = devUsers ++ systems;
"garage_bertof_baldur_key.age".publicKeys = devUsers ++ [ baldur ]; "garage_bertof_baldur_key.age".publicKeys = devUsers ++ [ baldur ];
"garage_bertof_freya_key.age".publicKeys = devUsers ++ [ freya ]; "garage_bertof_freya_key.age".publicKeys = devUsers ++ [ freya ];

32
secrets/spotify_password.age
View file

@ -1,15 +1,19 @@
age-encryption.org/v1 age-encryption.org/v1
-> ssh-ed25519 13iwjQ Pt3fLaHeHIGm+goWfbGI4N3AUnS8XY/weHURsDAkLlg -> ssh-ed25519 13iwjQ L10Lk7aJ80kfM4Csu0lARIZxf1oqJ2Whfir26AxkKnQ
p25GUiURF/L5CkC9e6xqKhFAtpZfiVOVgsNwlUyplQg YqkFFeMqNgxiMBpHNdDoWp+RQQofSmrAqMCZAbOIBcM
-> ssh-ed25519 7MB20A 7G4JkxxhG3CXuP/LEI9wCEs+/U/iLUqa2Aq+zKO5cHU -> ssh-ed25519 7MB20A AKlhIQuTauFZOklJn+YnnH4FAoJ8V7VrWj2vbCl3EDE
dc+xKMGxN9WB26WIbxnGAtuDIiiYlGrmRzOEWrnebjQ +gVFmxc6rQLGHoCVMgxMPRbD0kjWU7vGbKJipKABfu8
-> ssh-ed25519 IvyYug tI7c5xMooKX3Xh2/MEL5i8BJon6HbPGUb0SvJxJywGw -> ssh-ed25519 IvyYug yWsOiadiQ+BEBUF/4nqrMJDA8sHBKGh6TF/tXBHoQnU
gyQCovse/Gv+A+an9SYCZe/mC5GtMiQH7+2cbTA2qaQ kAjgnXHKIAXqGRNMFWWJFF2uKTOoYA3Alxsld7ZpeAA
-> ssh-ed25519 v7O/FA IODREMgQc9XwffhNXZ1Jz/mebOTidijJyrhfqMPu/UQ -> ssh-ed25519 v7O/FA D0HfLpQqb1l3QEmqWgRn8HyCcvYw9CPRzAIzhEthZm8
W97CXQjE+Jrvh5N7PLfhHODIHjUFW+mPID49eZuoLSk uQ8s5wzo9ThZB3Bw3x90Vz0UQF8qBXY32QTs47vrf4k
-> f-grease ~f(u9 -> ssh-ed25519 Wzv8ew k8r4Q6mlwNWKbV9bXiJZmuSpEPBlCXIEIuPYh9A9Smo
WTuK+TySsehBCUKfQaeuyb+pKEU5cTF7r7OO1CukJy0fahZVFuFAphe1QnLWiocO HY6CMTKuIIAeaykfjxo3nc2Cd+QOrdAkYy87idBgnDk
VnZgE78FWCeDIkN3xHPfIHgkC14e -> ssh-ed25519 XgC3XA MM7wy2NIFX/gXWyhmrhHpum9aezV2jD9MmuotSbcWFk
--- UJx1d8EoQ10hKSiN4ZYxL36CeDZajPOeLMhUH4/Kmp8 q8gOv/8yb3M1gqOKT0NSBwkPFNdI5YczE68XA8yAWDA
’ò/8ýMö? C·KÇ“´ÂUù•Çš.pôù -> ssh-ed25519 l795CA k2pE0tfxcO8+4IVU6fIL5jEqg6QXNNiGyYEAOxt5JVA
þïd/Ó"*Q•º^×é”,z–t 7RsBlppD3sInjNBl392uHxnnqJTUK03p4A7OumVMLiQ
-> 24-grease jVf(* CCoG[Ms 3to)
ktgWCR+vjMZ15aL0TNROzD6FyZmllsAkhsSvH1+A7nVVb3Y
--- HPvuYw9mTGwmfxDBuM01HvOCF9pSj/7YxpdZt0YKVo0
^­þ#Üw„+Ç3Áö·°<04>b”SÇ•ì,+v;›½¸G’[ÎI4Žë=0¸ÿEdlŒúU

39
secrets/thor_wg_priv.age
View file

@ -1,20 +1,21 @@
age-encryption.org/v1 age-encryption.org/v1
-> ssh-ed25519 13iwjQ acitCjcKTwbY+hdXurS31ou3RmvWu7cDtOE7fxV4EQ4 -> ssh-ed25519 13iwjQ SsqijZi1Ze932BCFfXrlPMDGhqrc7IrODczqHP6SrDs
RlpODUwasLVOXern1Ytm3XYEwVH2EYdUoxaJz6gnZus F3nqluy/Yqgm3elan+uYVJtIiysEAJpy051bdMrUu3w
-> ssh-ed25519 7MB20A awjDnDQVyw+fS6zJXOo/0UH6gga8gSur0Tlkpchx9Sk -> ssh-ed25519 7MB20A 1lehcVyeYUhHnHoaYDxeYVSyJXnuHw6kU+5VSYmICyc
ZN24KSE00xVWDcCS5g68e4a5MtLCENQrSmViIUEfjRw Waj0cIIp87R86V59k8lsTsGz6Zdq5ey9+8Z2V1o0Dco
-> ssh-ed25519 IvyYug PiXguYIcypLOkUeZijg5TbsWaQdvwFYq4QhO9EjGoy8 -> ssh-ed25519 IvyYug lkyVVrRhD7RiV9jOAQfoxMPFVp4VLXm3edspWcZiPB8
LlShI84lC6w67Z/6Fbc/Nzz9wR4Miw8WASsENV04G04 rGwFxSt0HgMFjhlLt+DKxo+hbic9IeupHmSuw4RZ02g
-> ssh-ed25519 v7O/FA I/ytxm56tzXJHlesn10fdxPfVSA54dWdQnq+MfYMwDg -> ssh-ed25519 v7O/FA ha8NTXdoYC2xjnbyyAc3k8mSTEvOMzS4Qu0a7b6domU
7PngLe7xkPvh4ppy2HTUrHXi3q8zSo4cw/k2pj6i8c4 nN4T93IAXZMqaGgpiEMQztQVtdohrkNwIx0uwGXiqoA
-> ssh-ed25519 Wzv8ew dzq5x0caNMwialI0r1zm/ih3GNC0bT3nCnkMGXCVvzk -> ssh-ed25519 Wzv8ew 9aCs0lMdbsX5kwUXX5AjtI/V18qeTyhKvlKJOGdbIT4
dqt0fVfYGsLv9TFm+uU6MxS9R9XM/wng3vl25/IFT4k xFl4FBvVRBpnzHGeL5GcbNCLDwHiacPEPTUQqtjx5n0
-> ssh-ed25519 XgC3XA oVweJyqaV+IgSSRT/ntL52AViOUTgKfQtol4qvEkw0M -> ssh-ed25519 XgC3XA Wxqh/uu4stk/p3sABVoYD1T79bjtFdfzi6D6TXjSJgs
FC+sHP5sFnSK7Kx3nTe1uxcnR2RK7JUpOL7O9DBhUU0 wo/O9Bvpg22st0LmSAQooDrTDn6TKNddUvKkTeEiIcA
-> ssh-ed25519 l795CA G3tznD5ipEQix2ElTcCXFscBgT1negJ3ipmGEWM2GQo -> ssh-ed25519 l795CA 3wVKZ323lx1CdvH7KZSSW2MII7oKZ4IJWnBNujnPjj8
4df/3fFZ3GX0XEWNU0y81X1OWzzdFe1MCNdt1zgMMGY 2QyIk7y9recKC45IBZkjAK9TAd5mAyB39jZ10x2GqJI
-> d),cs?-grease ]i%I iajelhaH -> uylRI\2-grease T2
Z1/98kAjvVtkP5HE9Bjb8OlIv8CAad07j9fJPr7pM0HYFAiv7QT8++AuTfg4YJbZ wIAU/E+AFsyNgPkfj3aRnzjIKcvRONRs+yU34b9ePPQdwaW4JrHArsn6U/eJh/jR
iJPP y1h/hllohEMG36XuwRLhybpE98v62mnc
--- Mbkb+7okKmZJqckz6FiJRqY3N2bUGqtx3A7xFVCSn28 --- 3s40j440g3i8MqE/LA6qgaM6KT/7z+MJO6WYozLUzOk
e0Œoï"ËWŒ4Ã4£Í½êïàïãHbù*«k?à20Ñ6$îûx v„íÆù§o.¾¾« õ£$3ˆ7±›ÄÇ÷(¨FøŠÁ°td gòŽ•_Â{<7B>ž] È*MÈϪÓÿ’<C3BF>ibV€«<>éGSQöa~¹ë…°Ÿß<C5B8>fè+øCë·¢IëW
º@FS'ñ¾ÜX <0C>$×Z5¥òñ

BIN
secrets/wg_psk.age
View file

Binary file not shown.