feat: we now have a sso/oauth server ther we can use to connect services to

Currently works with Proxmox (VE and MG) and Forgejo

secrets/keycloak/pw.age

@@ -0,0 +1,20 @@
+age-encryption.org/v1
+-> ssh-ed25519 V1pwNA /0giXND9iXet45Qdm45LbVQlIN1JYDiIJ1EFpMn+QgM
+qxCesmTuF6auI9upI0V9rJSiSfzENLLHXIMrDewjvf4
+-> ssh-ed25519 4PzZog iSvze8+tKCozFbiXcc8BGfQ0qrlVUHNEPc0E13505wY
++queuxWzkBHBR7q1pHhBahdSqgKYmpOZ2avC+S4u2tk
+-> ssh-ed25519 dA0vRg MAQ9mfNn3wwB0hFaV/Wg6nxM1vafopAeJynREcbSvAA
+VjD1Sy41PEy1TQ5Wc/R9gh1gN/T8y/bUAdItWRz64GQ
+-> ssh-ed25519 5Nd93w RAh3fYyjUmldiUFkw59/JZDTgZ+jrVd31akiV1UgYGM
+HvoJTTxM+sCkXIDv0+FtN4ACkTy7tqr/BNeTrR8Jumo
+-> ssh-ed25519 q8eJgg c4+/61Jhm+/QyV0s3ikemMqhWBRb+ous4kl7Psx5/WU
+GUqakK0Rrsgg48U9QkcpV20zvQAswk/anoACzORuxiU
+-> ssh-ed25519 KVr8rw /mBl8ejPUBEwVsDVFcwWfW1i0tIG5JH/OWlRSrRk+TM
+K3SJpjAm6VDtsBk6HyDdLgbImh4If5Od2qu+sL8Dj9Y
+-> ssh-ed25519 fia1eQ khFHXNgPUQ39oTpd1lWycrMUin8Ii2pawwFY1vIhRSs
+2XhIsPrtN+XOBlTR/sEaaG5XCLlsIroYspOaEz+cM2U
+-> ssh-ed25519 IzAMqA u6W5klKqqGx22yCJx0yGgwPs3vs+iAeH5z36isWL8Co
+Ij4ncciynno2m9ZKtAegFy5mjAGS86jM7NrCL73LROc
+--- mINzTQYjXCu318AiJxgsF7az4LUGc9iVS7hcyfFNTQs
+m½Ö.ØÝ>iõ~‡ 8$§pB†ÀÑ<C380>zhœä:´Ôq“'S£:„LdðšÿÚ
+¡”
ñŸQQøLÙŠ<0E>Ï{,;ѵÙä~©#

secrets/secrets.nix

@@ -99,6 +99,10 @@ let
   bitwarden = [
     kitt
   ];
+
+  sso = [
+    kitt
+  ];
 in {
   # nix run github:ryantm/agenix -- -e secret1.age
 
@@ -148,6 +152,9 @@ in {
   "bitwarden/secret.age".publicKeys = users ++ bitwarden;
   "bitwarden/details.age".publicKeys = users ++ bitwarden;
 
+  # Keycloak/sso
+  "keycloak/pw.age".publicKeys = users ++ sso;
+
   # grafana
   "grafana/pw.age".publicKeys = users ++ grafana;
 }