From 689344e518c87da932b5741da81ac15e2972703b Mon Sep 17 00:00:00 2001
From: Brendan Golden <git@brendan.ie>
Date: Thu, 30 May 2024 19:42:26 +0100
Subject: [PATCH] fix: all servers now require the dns secret for acme now

---
 secrets/dns_certs.secret.age | 71 +++++++++++++++++++++---------------
 secrets/secrets.nix          |  2 +-
 2 files changed, 42 insertions(+), 31 deletions(-)

diff --git a/secrets/dns_certs.secret.age b/secrets/dns_certs.secret.age
index 7d1f348..e4e29d5 100644
--- a/secrets/dns_certs.secret.age
+++ b/secrets/dns_certs.secret.age
@@ -1,31 +1,42 @@
 age-encryption.org/v1
--> ssh-ed25519 V1pwNA tzgPuOSktRbzGWk2BDFHmbr1Sm05qdYjyRz2/HTx6B4
-U81/Gr5l69wte3fAtN3nYfx5OAMu5x7WTS4gygHUucc
--> ssh-ed25519 4PzZog EPHeQJYsFoEHlgScAHEsu5qvylaTzvcPw3Y2CXOSuWQ
-U2PGDUHKIAR/0qovVc7ovAT9dyn/fOTncfNWrKk8ljY
--> ssh-ed25519 5Nd93w 4CHAkRax2v275ksja2Pxw+5DoZXWNKd3lHZq8+Y1W0U
-Br95FoQN2AZf2io3wFTX7SCHxGoGv2O/8/kbnu2bqvg
--> ssh-ed25519 q8eJgg zds5ccfqHdh67yLnN+33eXwHF5FFKVFAxW8Ecgk7ZHg
-vDZ13K30m+rx+wyteX8SuA5uEI9dZMV/vRJSt9ydKMo
--> ssh-ed25519 XSrA6w 27EVcnWYtJnsl1EJtmbucY3pyXHRZKezi8KN30bK0Vc
-y41vgV5yH3aZJUx0Wl/zP29466yOl2IGgl+6ti3pAVQ
--> ssh-ed25519 DVzSig XRuB0GkA1CFvcq7mc2Nod79+jYnN26dEOfCDcRoS+nc
-Oy//M5W8tspc/YmQjYK8joYYpm3SoKfrKKmrLmSy7z0
--> ssh-ed25519 SqDBmA cSiRVHtiZbLp/OFS+5tOgmf5msgfaTUW+6U9vC8Nj1s
-8pymGU7WaIx3o0WkwqFXgM9lFjvablusQF/9O9xRrcQ
--> ssh-ed25519 UE6fcQ rl54j3p+k4eMCC63Hl2hKyWkKwWAS61iBdhGolnh7g0
-fqO/fSuwRyTAW49t0w/ffTMaIAvBnJrX94grAO2f0uI
--> ssh-ed25519 8vZ9CQ old/mJ0AN9vJmvbr1/0ELh02R8tGPys+rwSj6Tq2Sh8
-W+BcsKswtQv+e7kAjHn6vrdApawGuNwIAK2hNV3SJWo
--> ssh-ed25519 IzAMqA lotJU4JW3eHjdb+ZQ3s2XN7JmZz3FFBh7CJ1t+/+Ghc
-wIJsNn4SUXjtobDz1xzLSe0oEqo3nRlWjJiLqDiHv6A
--> ssh-ed25519 uZzB3g eH+/Tew6AU7j95BBMcUtwnaoReZeFp6CaF1S+JdWUCQ
-VjNNv+gd1JkUVFtJx4H7qDKpOPSkgRVcsJhYFhPxbWI
--> ssh-ed25519 Hb0ipQ k732pON+GqpltKfPmArf/d6wX0L5OLVh6l56M0Vf6UU
-UdEG5xrFoFnjXAb47uPO0lC957yvocPgK7iRrxwBvg0
--> ssh-ed25519 uZzB3g 0Q1BNGOJoH41b6z8YG/QOi8wshGJsPHN7XXMAyIVTwE
-ecj8oOZyRSYCXPXEQXmM/KDZktEpsgyohQtK45Du1ow
--> ssh-ed25519 YFaxCg hHWU1ehve1zeDoilyZh1QjtSiGgii0i3ks7+DCXuPmI
-krPnm4YCmcg98u735WdiwCeMLG/5Ie8rk0/AE7ZP+qk
---- 6aIkITPoSXpoPQB7IqEDvbC5SqQt+91+8SiNZbfrfwQ
-0f�d���r��CT ا��w��w�������TS��=�M�(F	���P��Qж�x*��� T���a���d��]Dt>W0�T�?��i�}�W�.������n0��j�S�ʫ2\~��	s��nДl���e�$ 3ԭ�쨋��8��{i�Y.�uI�|�v�k��Fv��O��Oc�s��A ]:���3p0����\���91(
\ No newline at end of file
+-> ssh-ed25519 V1pwNA JVysrUp8W6swlXv0ERKcVHqSaQr+oA3LC2fogPlwATQ
+3hr+AvewDRSjsPJM3BbFQKAPLCGSl6IHuaOZtHMyF50
+-> ssh-ed25519 4PzZog zR6rKPs9vcvC/nk1qyHip1i9+6kbEgBcLQqDJI7e/hU
+d748TFIo0EKwKreJEdEVaFO9+FxzantexynqvjHucZA
+-> ssh-ed25519 5Nd93w S9jU/4qN3E9s0bXi5zoH0nxuzcGYPXLwqezNJw3TIhc
+oXaibBkKdjiqDuko/GsWKkF5C92FNQIxs+fNQQEP0+g
+-> ssh-ed25519 q8eJgg oCCuyZPi85tb+UxXMtfJx479RLEPtAagH9HkQ3Undww
+YENj+QuWzxgJBCEXcekBGc20TQI2/Q+UKUH0V88h1JQ
+-> ssh-ed25519 /Gb5gQ wv0DOmgF0JOnAIqgjFS/mxMpwovX+m8RYpWxljnN9hQ
+R8h2ZzUBwX2QtSTpS6+Owp6Ih6JYK1MIBJ53xwMbCBc
+-> ssh-ed25519 NtlN/A Aqz2cgvhFaYfOMw/rdQ6BvETChlgGQZN2QvKC936+lo
+WkXzMfw/IJjLXgoddYZ74+i/+yM6+WXykFSH+DkZREg
+-> ssh-ed25519 v2Y09A ZOHo6cr4vyTkgPsJsAZ+LImajSkXVQ3mzAPKlSS6ZmI
+0sAYUb0rJUPNk0egtyksB58uPDN4F+xk7CnPI1DH/EI
+-> ssh-ed25519 XSrA6w 1tciV+KCPcAvwIr1DuG4Eoe2oPNTquT7msB30HnYljs
+LBYy5RQLHMIcOTUcUZ6+MpLYdnfXbSyx4kcNMxMrkKk
+-> ssh-ed25519 DVzSig aarBueaR0rgOhPGIwDeboqBfQvT/dkRvf0swKm4NlWw
+pxEhg8dfxz7obMdyipbpUg7IQeixNJhFfhq72jyx+bA
+-> ssh-ed25519 uZzB3g g6K54jq2HOqx7wzbycJJ3ZTs98OOEb/rYFzNb4D7PC8
+yiVfm+9tFTP2Rje9HLCOWDoYpA8hMnQmovAFRLI8bb4
+-> ssh-ed25519 yvS9bw 8MuNIrtc61CGDQm/6wGBVfRZnjo7/UfbDyRq1Sj04CU
+7Mnbaqeak9ykwLgh3OI3VeQ1EIZo2+80skVZZtEiSGo
+-> ssh-ed25519 IzAMqA AziNzb8XO/A9IaiE5fgxTU9xNvMO5g/z6RG/loOFCGE
+xxbml25nPGs1kDN/yAYOuh26Nzhx/7hOv25/8/bC8cM
+-> ssh-ed25519 Hb0ipQ NDzUtPajSgMdo++L1FD5/Zx6549/8+uz3RmOYFfvV0s
+cIFWJHhmvNtZjyVVBEjKYgZQcmRh6CE5fCCRpb4wPxo
+-> ssh-ed25519 3pl/Kw At1BJ2WKbgJveuLxvhOUWPPJGPd9wc2AuWgQlBtnDRw
+BGuaoiMt3UYwfBGPvG6JJHnQ2Ndf+J5QhsvPaL4F8ks
+-> ssh-ed25519 SqDBmA WWU3AT+9L8SPXPz1sOJaBwXxT1NU5ZlcSjaPQaWydlY
+aceO83wb8oNXCuWY86tOc2UqwYMHJP9y/gQc/SVXrx8
+-> ssh-ed25519 UE6fcQ b7r0Im5jYaaUMY54Tmkr+v/8n/CmfUp6+UrKPzf8wRg
+1nSQ93LLZ4OVaL2D1VE5w/Wk1HaGuyGSe3jIz8cEdl8
+-> ssh-ed25519 YFaxCg cveiV9/m6G8UZWGloGOus3ftaYLTHH0N2ibTh03CqmU
+NIPQrVigfgSIg01f9lzYHHemUi8fZiRllbjCBd8gG90
+-> ssh-ed25519 elCEeg inFC6DXefO27b54O70iRAhM8qzYVFYqJT2xIDDfsqWc
+J4Mr0K3TIlvmY5luZPL9bYKHX1l/1rkRCKxg0gGZxZ4
+-> ssh-ed25519 8vZ9CQ xHkHzdIbHKp+qvkPG5wUgKA61wkCOTziuYbZaDo3FAI
+MQh8gvvKAZahtvqqBizqVVu/rnxznzhZishIrFavIhs
+--- PJAog4mRqJvcK2KqjhWxMauvAstZ02CVEIWo1+cgVMI
+���(>��"�l��F���$\lG�[H#�B�����p���Bp=�q2�"�҇��N�V
L�Eu�#����
+��Ҟ�eY#�����r'������Xp�X`�B��6�1�u[�=�Q�KSq{(�u��!�92�4��
\��D�Y�\Tls��M��ȥ��I��M�U"�>(�={��
��L���j�2<p���d�d]�}��w����S͢�!
\ No newline at end of file
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 0ba160e..80ee5e8 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -112,7 +112,7 @@ let
 in {
   # nix run github:ryantm/agenix -- -e secret1.age
 
-  "dns_certs.secret.age".publicKeys = users ++ webservers;
+  "dns_certs.secret.age".publicKeys = users ++ systems;
   "dns_dnskeys.conf.age".publicKeys = users ++ dns;
 
   "stream_ulfm.age".publicKeys = users ++ [galatea];