diff --git a/secrets/backup/restic.age b/secrets/backup/restic.age index ff1ec0b..944ad4b 100644 Binary files a/secrets/backup/restic.age and b/secrets/backup/restic.age differ diff --git a/secrets/backup/restic_pw.age b/secrets/backup/restic_pw.age index cf3301b..3ee1a8e 100644 Binary files a/secrets/backup/restic_pw.age and b/secrets/backup/restic_pw.age differ diff --git a/secrets/dns_certs.secret.age b/secrets/dns_certs.secret.age index c774a45..87966ac 100644 Binary files a/secrets/dns_certs.secret.age and b/secrets/dns_certs.secret.age differ diff --git a/secrets/dns_dnskeys.conf.age b/secrets/dns_dnskeys.conf.age index ba93d21..2c44b75 100644 Binary files a/secrets/dns_dnskeys.conf.age and b/secrets/dns_dnskeys.conf.age differ diff --git a/secrets/gitlab/db_pw.age b/secrets/gitlab/db_pw.age index 25fcb03..d030ca7 100644 --- a/secrets/gitlab/db_pw.age +++ b/secrets/gitlab/db_pw.age @@ -1,15 +1,15 @@ age-encryption.org/v1 --> ssh-ed25519 V1pwNA EbcKNppMc8Hq9CzalGP8tvYMl9qLyKQiiNILhw1l4zA -KSeA3rVxWG2ID+k3AE9lBrGjEqRFLohhXzQBxxaAcoc --> ssh-ed25519 rIwlvw dAEdSuZAdPKzGGm2v9fcZCMnRlqzQDoGXOtyuyuuezo -VcvtlisTT4HAih5rvUwDf1nTO6WHCzu7IYmkc5MTxvA --> ssh-ed25519 q8eJgg vYulFK34+SJmclt6MzOQ90dsl55Hm6jinU7ZQGOzT0Q -BUnfjyd+RVUvgtO5oV6OtBzDFvVeRy4VG/9IJ5tLp0A --> ssh-ed25519 uZzB3g KqwwJMZpsdu6dMeiJFD0ElSnzXKtD5Y5e3KsharU8nU -zx8ILlqatXmVCbz91HK+gipiCA+UY6gITB1hYGluzJY --> vcbD%9-grease } b->U-FWa P- -kNm0DVuSdtvR0wFNkOpMig ---- dLxnlUZ24wxKq733+FBkyCh5PLRHjxv+oza/07SIC6w -nD~pA}=IJDߕۡ29H y,EC;| 4xT 86 ssh-ed25519 V1pwNA TjC5DbimRqNNh0UQsk2YMgxoVZOQkWsNB10TmlPZLUM +H2H0Jpztcbn15L1Ff1teeWgZaoeKszVWG2GJKkBFuWA +-> ssh-ed25519 rIwlvw 9wk9lmhZBsiM5ifMGxlo+8YAKy325ru7u/MZA6gEzng +cAZ0/OqScj9x6vt4gvsrtqi36iIbT+n+iTySssKh3Fg +-> ssh-ed25519 q8eJgg Jn7hc5D6m/P7qxdpfQ2hRKKQPchrwtKhV6crxW05RTs +jM16eEteWG2ezgVnBB5t5JrhwnsAKr4cz8srqiWKzR8 +-> ssh-ed25519 uZzB3g qC7Mr+9evdjoSka/x5criNYkuha4SuAp/yrCK6dcUWQ +JPHRq5iV9aP2/tBPAuq8wI3eQN2JHH6jNZfK2Fckshk +-> ):,9TlwC-grease d?Jj?5>< +I0u2aN62wlBng0jlPPGRwXz5zJbcxW7PLOwHkRkLuHcNNtimd5QpRcr984eBa2hD +HF7n +--- 09T0lHOZiky+5dFYWvhtP6iEHrhHaub8bymCKwzOJmY +`>b_x+{1d%g5li]y܊!$h6AGn3SwNLR1LЊt +q]A arȎDד;Mnk 41W؟֌c2Ywo>}7PW()MWʺMʯls< )E{$j] \ No newline at end of file diff --git a/secrets/gitlab/ldap_pw.age b/secrets/gitlab/ldap_pw.age index 95aae10..6fba186 100644 --- a/secrets/gitlab/ldap_pw.age +++ b/secrets/gitlab/ldap_pw.age @@ -1,14 +1,14 @@ age-encryption.org/v1 --> ssh-ed25519 V1pwNA wA/YRb8jtwinG//1eRPoZyttRyPlw3yz5GzehwXEblM -+x1z37qvygiNTT+5Pte0mSiRZ7/yOp7zvnFnAh3eXzA --> ssh-ed25519 rIwlvw 9EQIizbrzNABTIL7Cuvo0I13FuRHxDAfulzsyp5Tqx0 -ZS5zXjb0GIlrCTsqa17CUeU74sI2MZQmfB5CBhdrgKU --> ssh-ed25519 q8eJgg RiLz6n/T5BHJC4tMqwT6KnKitZWtr1YcAoyymepFkHU -lDuXkqf0wsu/e8VjnafkKOL49PXCEkuuKu6gc5Apfmo --> ssh-ed25519 uZzB3g Bs/1gz7X+VMhr0GES0mGseVhYrLV+a8bogNpkD1NazY -0aeSKkzQauE/+eY8ovxMiKJAOSxJp7/C6cxh9AReavQ --> +GE_-grease -469+iiU7XLdJsLOp5VyRIX2FLBn5ybpSt8dsAh6wRw ---- 28s+1uin8vvT5M+SGdWL7spSf3S74yJA28bYCkY0s3M -sOE ssh-ed25519 V1pwNA D1opPiqtt5raCD0PE2+On/Zgw+lavSHgYKbtJF+1xhc +jIN+eavLzY3UB8qCBWOOr/r6IZX1MZ0RTlKfJTtSbcE +-> ssh-ed25519 rIwlvw z1zGn7NX5x9n75SM8oXOkvRwoAwyCXvzqZhWMXOGImE +NWsqkm+nDv2dQDCnhfaWpKaBaF9nrQA5PKFl3FthtI8 +-> ssh-ed25519 q8eJgg icVubOVJOSB3Wd7vnvEShwy7CsAMJchY/vuIMt0+p2E +OBz5wsfT3STCzzgmBgPdSQWr+xc91Dfo+ulleLK9l1k +-> ssh-ed25519 uZzB3g gkyX8KZKJ6NL4OpsxKVKVK37ikAp9yAGxUjd0iLWzXQ +Nuk8JFO6wrjmDKiLnDaqBqW+AY7+DHYLSeV9gf5H5Aw +-> V8-grease #% :0txQ > +CP/AZC0nCj41Lly+GryRa2gmYFG8lsY30DtG7NgqY6AVj0bVHbwwOzx9oGA3xtu1 ++KsWhWAcvxc +--- LL4fxXc9VX5VeGj5epHEIkLmpab/t7x8YMyNgkYsFLQ +b^NXq8 *:ѥ QYb~ %c?bϛ[1EH؈C}+0~av Prj#KP`Ő; P13툃_m=L#dr*vúp"8<]th,D [`- \ No newline at end of file diff --git a/secrets/gitlab/pw.age b/secrets/gitlab/pw.age index a6b0854..1f96682 100644 Binary files a/secrets/gitlab/pw.age and b/secrets/gitlab/pw.age differ diff --git a/secrets/gitlab/runners/runner01.age b/secrets/gitlab/runners/runner01.age index 15ceba3..1744c77 100644 --- a/secrets/gitlab/runners/runner01.age +++ b/secrets/gitlab/runners/runner01.age @@ -1,14 +1,15 @@ age-encryption.org/v1 --> ssh-ed25519 V1pwNA zfq1BfPaVUFSBQp9N511d9dH/7OOaXCV+g+cbYMZphw -50UdZD5tpPVR2PKEHPaPVhi/1x8GXoA/kDRKNAs5OnU --> ssh-ed25519 rIwlvw pKhv0WXm8Cbc5KjZgI/b/NJvF8rTzzxdBvON8HBRgVY -Wyzj2gDrBawwxoirJgR24gIrYi6oaV3R1dki6cpepS4 --> ssh-ed25519 q8eJgg oP4w7oRI4suBuIEZ6SC9SOw991WGDjd4103m3ADZuTs -Clt4xDr+OrS4MtwK+1/7LmTM0P0jGhqvZD4+cPg533g --> ssh-ed25519 yvS9bw FimWkJGigumVEyx2CV96SfwXRkl8aPHdgFTVAlMSa3s -etHz9IbwrOtzDAMXKQ0xa716OCLeJYX6rGgvLI+7Ngc --> OQ)-grease -FmK6wjGW+7g4g+/HorXpNDoGV2G0RW6HYHlJfzHVhpY+o9No2et/q/lOOkly7+GQ -MMijO83k9LMwtN0zqY4aZfv4kpcJWQhjESUuY+FX ---- uleDVma8uLL0beHr7DTDVlNz218xZuKHeIa24ANkpJo - ej& ~'֏ø0pf>.)b 4rdtŧnH{K5W$72b}EAԭ+ A;T2`ģk]qK> \ No newline at end of file +-> ssh-ed25519 V1pwNA /clF9wEgEmZU7oZOi43/v2Yw38nyus3wSRRUzp0E8wg +6QnIUcflziL5PYackBLajvytsOV96wrG9nFNsM3ynzM +-> ssh-ed25519 rIwlvw vYvZvGAOMxELDatChXAzEC9zFnBWxFN0KRErzwMNdEs +AI+dEFBq0zJqwa9n3SyKTSQqSFYh9qFQnhT1Tr3BsnY +-> ssh-ed25519 q8eJgg flfcupENWbVQ//GuhPWxpAt1+rKXc17m+g4wzYZPfHg +WFO1BbGZlLXol9R/v/+XebFmYk2N9ySLKC8VlLIEiIg +-> ssh-ed25519 yvS9bw eiWowc3zoNqz0H7cqWquHmHmqY7SXZ6sbZ+XzFUzCFE +Dv/rvhTopgE2laAmC7p3OY7Xc0uMBQokbiILSWc+0NM +-> 3[c,@'x=-grease - 3o@k`Y zNBg^xF +hr73UbV7XGWlHDzfomWESZf8RNmYDlMaDm0bxh8zNL6m3LkxU25tvftAMwkzVtif +eLADxhnI +--- 4Voj7IVxfRs7/89Cki9PL+aXPV+IMGMcWuc1cjuyhRU +x+A(ǁl),O!"S;;pA^)RQ1<(߂\W݇ZvPVs51Ua\1*SU/ + 7y \ No newline at end of file diff --git a/secrets/gitlab/secrets_db.age b/secrets/gitlab/secrets_db.age index cdd483b..6934358 100644 Binary files a/secrets/gitlab/secrets_db.age and b/secrets/gitlab/secrets_db.age differ diff --git a/secrets/gitlab/secrets_jws.age b/secrets/gitlab/secrets_jws.age index 148c60d..5ec637e 100644 Binary files a/secrets/gitlab/secrets_jws.age and b/secrets/gitlab/secrets_jws.age differ diff --git a/secrets/gitlab/secrets_otp.age b/secrets/gitlab/secrets_otp.age index 4a7662b..aa25623 100644 --- a/secrets/gitlab/secrets_otp.age +++ b/secrets/gitlab/secrets_otp.age @@ -1,14 +1,15 @@ age-encryption.org/v1 --> ssh-ed25519 V1pwNA yv25GV2kuwXTU/hxE34ybWt5a8EqJ/VlQ44q90FiFhw -O5Y236IJujwbJKRceCmqWzmeMT51Lg2GOoxVybV2kos --> ssh-ed25519 rIwlvw Ivvet9xAdzT3cONFxCmB2KoU7R672hlFVS6PN9H8YkQ -3NtQR7IpeSkD+aKoOH4jUeSDRu3+xpR91WHQnu0XmJE --> ssh-ed25519 q8eJgg vXlcQKk/QsGht4oPTbpOI3SIA5qq6htalZaC4brpNFI -FQzb/TcZOqtK0w7AxYeB/hNNQ0UwKn8YadyjoHmXiY0 --> ssh-ed25519 uZzB3g IWEkV5hOPb6iBpgNByNQfQkMoUITXZkHVLKkI/qA3AQ -UJoXL/i656DfRNzQyPKKpzLgXGWw5mPhvQrR8IyeDWI --> p3}N/u>-grease gui -4R5c1q04NPXKYCuHBmLXYdUW2z5/fCLaTp8AV02MpZ1W458NBqDG9gsXOBcg1o1i -eA ---- 0iTQml3iIebXgWCeK6gBu7MjW2iVa1AmUherR1lRqa0 -CQnӎ U!FVUbK,Hi U)s)5˟lVR&21e`x(U5b/n/V gN) OE:\Q~5 ﮠ)vF&mE{LXF?柩KQXۺ \ No newline at end of file +-> ssh-ed25519 V1pwNA n+nAfsTposX7lyNEDSYfPrAEdLEgLx4Jj2Y00yVfk3E +NrtcL/FaaFKpXgUITbNby6ePXCeKALdhsAY/wIYji3g +-> ssh-ed25519 rIwlvw x3e5S+n59DmdjRoRwwnPrnCjJU86s21f+sGM8ACczgk +r4ucjan1nqdJ8oMC/AGGxDYLQKNllCSNUJHvXTYzkEQ +-> ssh-ed25519 q8eJgg buPBic/APo3xcrUaGlxdtOyzV5I3fSZ9xL/+SXgcDWY +lMe216HpOdOSQ+7bdrFASmCP1kEeW7viOpqEerBrWUs +-> ssh-ed25519 uZzB3g vugTWgwhcrJFVLdKLzOX/Q5VgLpShPd2AEP9/G2QPnE +YXeFw3C+fdC9V0iMxq+QdEllG6AsRi3j0YaoRKCZFXA +-> v4gvO-grease '9WE x$#:\zh 2 `/< +uz9eGfsOZoXGI5CS4SuVsgbX2T32Xb6dNIAgR0LPQq+cuUDRMHITAGnI5uMTykOp +lU9KufA/IBIRrIKar8Ke16N2AuJMjrLjV/w +--- Ovf178SvMCjueE2y1Wc2ABfTdYX0xXyKJjKvjfle0L8 +/^Y} U6as2Eٖw^g.wټ" 2 +% E72 #3b \ No newline at end of file diff --git a/secrets/gitlab/secrets_secret.age b/secrets/gitlab/secrets_secret.age index b98fad0..3bf916e 100644 Binary files a/secrets/gitlab/secrets_secret.age and b/secrets/gitlab/secrets_secret.age differ diff --git a/secrets/ldap/pw.age b/secrets/ldap/pw.age index eabbe48..7a10dd4 100644 Binary files a/secrets/ldap/pw.age and b/secrets/ldap/pw.age differ diff --git a/secrets/ldap/self_service.age b/secrets/ldap/self_service.age index 9f57833..e671d6a 100644 Binary files a/secrets/ldap/self_service.age and b/secrets/ldap/self_service.age differ diff --git a/secrets/secrets.nix b/secrets/secrets.nix index af1cbd3..827ac62 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -30,6 +30,8 @@ let neuromancer = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID7NRDOGzSO4XVEezMS/9pI3chKbOH0fw2aikLRvea2P root@neuromancer"; + skynet = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAIFPXJswth8H1k8+zrg8vCnPkfG1hIIa3wR9DBmjpB5 root@skynet"; + systems = [ agentjones ash @@ -42,6 +44,7 @@ let kitt gir neuromancer + skynet ]; dns = [ @@ -73,6 +76,8 @@ let galatea # Games optimus + # skynet is a webserver + skynet ] # ldap servers are web facing ++ ldap diff --git a/secrets/stream_ulfm.age b/secrets/stream_ulfm.age index a59261a..9d284cd 100644 Binary files a/secrets/stream_ulfm.age and b/secrets/stream_ulfm.age differ