From 9001157fc6def4828b957f874a8db2a6412ddfd9 Mon Sep 17 00:00:00 2001 From: Brendan Golden Date: Wed, 4 Dec 2024 19:49:03 +0000 Subject: [PATCH 1/5] feat: add the new server to the secrets --- secrets/backup/restic.age | Bin 2760 -> 2870 bytes secrets/backup/restic_pw.age | 37 ++++++----- secrets/bitwarden/details.age | Bin 1155 -> 1155 bytes secrets/bitwarden/id.age | 36 +++++----- secrets/bitwarden/secret.age | 36 +++++----- secrets/discord/token.age | Bin 1204 -> 1204 bytes secrets/dns_certs.secret.age | 98 ++++++++++++++-------------- secrets/dns_dnskeys.conf.age | 42 ++++++------ secrets/email/details.age | Bin 1419 -> 1419 bytes secrets/forgejo/runners/ssh.age | Bin 1381 -> 1381 bytes secrets/forgejo/runners/token.age | 36 +++++----- secrets/gitlab/db_pw.age | 37 ++++++----- secrets/gitlab/ldap_pw.age | 36 +++++----- secrets/gitlab/pw.age | Bin 1111 -> 1111 bytes secrets/gitlab/runners/runner01.age | Bin 1065 -> 1065 bytes secrets/gitlab/runners/runner02.age | Bin 1064 -> 1065 bytes secrets/gitlab/secrets_db.age | 38 +++++------ secrets/gitlab/secrets_jws.age | Bin 2660 -> 2660 bytes secrets/gitlab/secrets_otp.age | Bin 1110 -> 1110 bytes secrets/gitlab/secrets_secret.age | Bin 1110 -> 1110 bytes secrets/grafana/pw.age | 36 +++++----- secrets/ldap/details.age | Bin 1637 -> 1637 bytes secrets/ldap/pw.age | Bin 1440 -> 1440 bytes secrets/nextcloud/pw.age | 37 +++++------ secrets/secrets.nix | 3 + secrets/stream_ulfm.age | Bin 3194 -> 3194 bytes secrets/wolves/details.age | Bin 1943 -> 1943 bytes 27 files changed, 240 insertions(+), 232 deletions(-) diff --git a/secrets/backup/restic.age b/secrets/backup/restic.age index 9ac27b6521ab08f3b19d327555252c3928fc1865..75ee0c0091f7e881192ae9a497c868ef1300017b 100644 GIT binary patch literal 2870 zcmZXW&+9$=9LEbur`(lT;beh2eecYi`CZ7IGr!OLo^xi-%)Qe5{&nW}@3W9n5|V`l z3(;LEaf`T!WZ|;8HxY|#BPf?#IF(L3>&hG=)UPPPobN>GYA7V3(L zXtl%+(bQ~TS81qYraKt`wp<+4j@W)Pp4Af%2F`Jrfl`=lg-nt=v}5Ipn!q!YSaou< z&-Ss1gU7Ux0w*Kc-pE8b5|-^Ae3W0ZtPyVvG;2ZwjIP<{-oV~E4)4;{s5fJA85RjW zEb)3*uNN4%FZD7?%18tSoobfI%15Ick(Pf#LzR$(=k1c7`>0qXe@xGQpHpBrCTUXG zJ%ID8+SAKy(P66GE;P7732ML3^n-LQ844EB#e~$7X3!3r2P8&wE)dIffzD3sJf_8&2Sxg}vSWwB zy*qHbx2JSG%WzF-s9NM!Sci$$-=^u97lp4-{l-((bQS4FP3#_02ug^CrNkl#KrT@j zT0pB1p+2E!pA;U`0M17feOts4C)W}MuwtFLDI*2@Yz=680EN1}>I0Qu>c&af{7`I0 zDLL&_aT$@>iTx{Hk3PmIXL>MQv3wZso+7ozQsoq%AJdfKrU2A-kDL^45s0(YIIwTT zMs?x=U#Tb!>7;0+Eyk3%B8L+**#L9U6?x(2+Dr!QqTUf)X*8$>=g9Glt|%s60y0s? z^e1l9-T_H!dqY*HKZ$4_3wWSKq+?*s3C|21H|1_WP`4z)&8C8#h1eY0I|c4_t#D3* zHNa`WN9{oNB-py%gBp^1ivV&0P!7mrx2xGv*u0fSNCoNa5a?J^-(}pVU7DvxrX($@ z=$NWJ6`WqnQZn1|8RhIy@G=^hz3%D^L2B#-ZweJsoK_?8tO?^n? zncorzp2Z_p>2ETBsp#vI=8{uhcBpMtU*piglCVaCffWIWhD!g;8iy{~LtNUQb&hz* zEOcMzP3X=^T!Pj~?s7Y;ngYb?lVR`jeKmMNfN><=-%O}nz$bGX-TMK4aD&P5#@z2M zm@>#Dx)56L6~|X=Yz0G#Hu;sJbwM&uEVEH7}6^v8is6Yv!IfGo1-uhnV=HO zP>4uwzWCuSOq6B~`jS#lnSpx5@kuMg%?&us+auiEyD@5^oqYA{m^Ezm3^;vyk%}Qy zS63#yYh##=eHAt+i_*je)Ksuo_egC>h~FZnCbU@IFN>m8JdH}DR!chg*v)L|LrHCg zf)P)m3Jh7b8)IYk+?{Yh^gJ45Cj_I#QfB&C#(uaGn^RFZ@{W&vbsjEzGH8svzJ`u24z1$xa5p601p7l)W@*s*^f=yLIga zqv;aom=t>A7Tu0alx&N|Xz2mJJX}VAGdX~v>ym0iOPG{29!7eSGWYV#xHcqg29 zbg_yGK+G^NUAWy_71L;zeiX~nce=8O9@+*S{Bfn3MM@8r3 z0x^88iEJkQ-i()_Q~I$RVonMG!Et7R@3gC^L|KFDm5fF7gqcq= z*_GXt&s(?6EQgXyV7z0M;oXZKK)7y!Y|qKsYJX`DY;5wPH#}T;i9;7coV!Cq20VS* z<@rGu0Fpg-&CzV4V~;jQ(l{fV^_yqUo^1v94w&nZ!MZXR1nVXRx5v3Uh*C$~s{(IJ zDv7fre%Ldc7r*u1Fa74D-+hJn@~8gu(ieY)eaimZXNUHGd*YYh`{_%+oAJlihf0+Ich?TPv literal 2760 zcmZXVxyuA+9mhpd=z{430XKozEN|w%3Xi#WW@mP0c6Y8Ng>xS}JIBsFqJ@Q|5JV9b z#E1xLp@9g2fQ1LxL=Yh+g|V_yEQ3)|!L8r-4|tx>^ZPyD!%L!vs0?m%-DOqza&=39 z0a`tLX5F^wLlnXo22pDZs>eOOmiWm^9DicO0HHy{N0NXrm(7&leA1^rsS00gq;Tx*~Q;(wM5T(&8Ab!9@}N+ zup%6N^D!-?!Qqgs>x&Mu*8NHeK`GGNGmdYJLbhW^V(vMIjp_7Iydd32d zks1hc@bb1RkwZ1J)z~wes}?+_?W`Ml8`pWvCxjq|lagxw7Uh}lu-lX(%^}xODg(tI z!Lz$gFVm zW#8j{mE?HIT`ma!m#rJua8D95sU}}{@dxd711dVv{IRy$Lc&g6M29WBM94cno;(Viw%x3-W{7?l<45{8xTu96

y8WIO)MXl&!jX;{Oyfb+g_+7zp!*hGA*!oeL`LVB8%4D&=KY@?k-V{Q2n z6Lu<}sdIgeWRW45!CY*lNg_EN5bRu(o!!azWad{hkLY(<$O3P0ov6(O#a0S!TQa{> zwXIYX>c-rvkud~Ml1o}>wV~G$RznNZ%1Ny+`e3;%kOf4htC(0<=|+Q0OrVUZnNUYs zMT#VOT~8YPuBAM**nry`dN51CW;NRxh8CtTb~GJ`<_T@cF{#Nz!Vx zg>8anN(&H3uB#8dZ60sxyXaJR-A+oj`_Pe<@3*<6RN1UUM=@XS48;-fsYp!o*intw*S(T#2T~t^Zl%r7Q zJN+toEa#o>E5yc<&I)z>kxIi_ga_tsz_7yYJidnSFBF z-n`8YHKQF;iwiV^B-^CKuF%xlN~D#O38!u#vJn6kt60n)_ZL_!hh0fu!}wI4X6eQS z;&||q)x*QXy1=TWIisPn$GDAs-ZU}+@LOK=^&sRDI4M=ihfYadsp{(OKYmg9!9U)% z{_qLzMe+StU++Hp@t3~v%c%U0^=bKg`=9>y$M3)Vzqela(X-!t_E*o@?K|&(^@s00 z|62IQGyi(+D}Vjgt8e}7gHL_%>`%V*+#7%Xnf$>de;N5${@tJdsW1Nhm(P9u`t5%{ zbNcZ0S3i=ye*gV(|FvHa&;30RKLlQS^W8Ul^6*)B^~(4g Y{oUWa9e?tj7qj;ssQ)(4fBqN$2j|F%H2?qr diff --git a/secrets/backup/restic_pw.age b/secrets/backup/restic_pw.age index d7a4b6b..ea0bc3b 100644 --- a/secrets/backup/restic_pw.age +++ b/secrets/backup/restic_pw.age @@ -1,19 +1,20 @@ age-encryption.org/v1 --> ssh-ed25519 V1pwNA d/AgQuQidsB5+UMBxg3/YIA/4EVMF9+BeZrEMzgU52Y -gPmTDd4oeIwwJ5ZdnWp/s6cEupsYPY08TBvmL5fe3NE --> ssh-ed25519 4PzZog iR02KGER5WMrs4djPPpMRc3v5qN5FpcpjTkB+O4GyV0 -ibvzSePq1ruF03QBsHRr40VCZ6ZcnWjvcJzybB5vt4g --> ssh-ed25519 dA0vRg pVsTTA9yknN8gl6K/CkY/HnUc8eW1F/pSqXq/Upq3SE -3ymQH0jBAk9ktwBUvth8G9ZdDzr9Ozqi9YNVB8fyvGE --> ssh-ed25519 5Nd93w fSPTiW3c4va0F5IYoFF+QoN4u1tFGRBrMO9lypICiXo -8MgZPPUXJGGOdmGknXhaV0xgJl76dg9B1e5r0Ud/iW8 --> ssh-ed25519 q8eJgg UFiK3B6YB3YR8fVOWOPLlpGuo5pWpK6b7zteIngC2Cc -K+e9B1V7AdimOMdy7YCJ7tJnHsHoQChAmWmOJDIdwMU --> ssh-ed25519 KVr8rw FeMibaL1ITDNByDL26VRXVz6d2FP13SpKoN87RgTYDo -e0LPmpAe9wRRvgKTYq96Qk+WiUhfixiatuWPPi72Nlk --> ssh-ed25519 fia1eQ i5+7lIZDOm48wywy6CRMOLVhHWnmV71WM0QLSbyhqV4 -S5nAEPHEmAn3AGxN04FpVKwVHrWtZS2s/dPeVv4ryCE --> ssh-ed25519 3pl/Kw Mhc4y4szabQQaeBWtZ7mVdDnZYRwtninrBhcyHoUm24 -lQpLgpgU0ak9WDQIJxd5Yz/DUe14szLvsUGxAil+5dk ---- eUzkrzEEXETs3FXa2YqSW4yqQiRLFC8Umr1D+Bq334c -ڙءm }9.I^Y%KcSȮ#hV{7Z'i ssh-ed25519 V1pwNA mGy7a3SPHMxFaJ5S68jaRkPk16Ahxqp7C2YGnK6A4nM +TrEf7fz6yY7G2HXNxhnM4v7QkVrR5D6vdh+eUVbWbdQ +-> ssh-ed25519 4PzZog 5ixIvICVbbk2z8gqvodMAhCevBWdnfmpskWupnpMm04 +r33h6oeu1jQQGs3mP15xtbRq50FGpKwtbbqWbSTQ1jE +-> ssh-ed25519 dA0vRg gUxwHHDBhxpYMxBE+UfTYJ4I8nY7cEdWG1XBSLLWtlY +pNawroXlES4EyNZSUUiEPNy+WNdG9AnHnUl+7qLB5Os +-> ssh-ed25519 5Nd93w AchMesYdEdLHtphyfCumqrdCRFABzNOEf7KfFgQWFAk +Xnier5jnPDl9n8F5r/R4CjBoEvmwAJRLQWnoWoAudec +-> ssh-ed25519 q8eJgg AgmUpmYT5z1qAFZ+uUY5a7huZ8Bhifs1ZuDBlg7ZJxU +kgaKF9t8cEKBc715dNocxA3o+2dwpK8erRo42NzeP9A +-> ssh-ed25519 KVr8rw AafFkG0axLsqGVs/k0DrzLFsKk4uXtqRbJIFhuAmj18 +shiQFq5ZznBovnNXWfTNvSVX/O1X47hK6g13P8r6xN4 +-> ssh-ed25519 fia1eQ AKbaMyAtdDHSpP5taXQQjaunzvO6yZuCOUjgV2+4iDc +yDFZ54QNklvVHUD1AkiaQ0sntqiRxkMGZw9yos/IvcI +-> ssh-ed25519 3pl/Kw KD86EfxdUwpfFW7wqf283Wmdw8o/qnVzXxTCrtNPsWI +L1a9WXktp4a9s1GxF6O7VV14ZPQOp/VqwS286Dqa3Tk +--- +jytGaOhLk0unuAlkbbtAFNde8Z+tKJ/3l3Y3tBgcFQ +VV7P =O]bZjpQKaXINl_v +Hsh3~FW/ ^a\ #/ڇi[fbX \ No newline at end of file diff --git a/secrets/bitwarden/details.age b/secrets/bitwarden/details.age index acae7c7bb8e99451e61872cc0fcca3fa3ae1e0f4..7c53a8d075d8c11ddcd27be00e352781b4e3e5e7 100644 GIT binary patch literal 1155 zcmZ9_&#T*X008jK!*Dq`Jm^J{BFaOvnxtu(M4p2*?Q4^^Nt-53Q)QB-X?``$&zEmn zHr~bDh=O6g!mRU6CM!X19 zCzwAM#1@iaQ1MtHN$jFIDG>xl7Y0}e1g2o3YA~s(C`neW6u4|1BgI8~-We$j69jbH z<~r(v$|OTkAdjtex@J89Zg)``R4_7`md84#IW3t$LW$JsWfay)xRn^ITe-U&1y&)@ zF%s8M#LHZ2iKI)9=KIQU-VpmkHXw&Sp~Cq@uzEDxf$E$>V7*G(OXA!M6{*Y){OV*1 zGdR7FiKr6*4A+BFsn_;aw+Vx0l2yQ>Avv))F(XPnj|=3myA%z+9JQEAZQ)N7AB=3I z2b81_pc?0md$qWs^)~DY+ntj`MP$Pa72_@y*4(j$_UK9w`b!6_ZiFzQaZo5P)S(o? zT1_5Dk)YlYuq=0MyZI+FUn9`V5~{n z4rVPWCU8clA4A9x%6sn)@?iq>-iaTY+1ZAvp6h#PuerrQewm|lf!v-J|n*66x4wk2R!c%~!= zb*NY@7Me^Pij$e)6D2`yP61vex@DNprrs3yXPaIcbBs2pM?7b7>pBLW(`^WtT^lSH*>rXv! z^fh8lJ-T-H_@yT!dwKQz{b$_W{rJ=0J}(*b({JqWetY8M-=*T#!E@W%`mOMTVs!1o ziw`Ov{kM0^{QG-LKQKHXt^YG6=jPqp$Nq@4hi<-{e6n-pr?+f**M7Kj@{zAE z-8u3ZFsdJ(zjj5qh@86leB!$q7G=vGVvyM}RRDI%m25X1Aqd12KrB?@oAh&Vfb2TMXKll#*m0>Q6qAjWnZZ< zDm4WZcQA#-h~_{G-9$t}H1zJ6R6Q;q${n4-A#_8VWp+?i*_6 zgA|jk`4#Np>{xOsk(W`slnBAnn{;IjCXtg_1hlkKE2^MCrgxh{ zH(G2wMa=RsPq;%j%IEDqty+Ulut=REF_(+BcUWU536kVhP)q=tY4r?kId!$^T+3rV zma>tDkEpz?r3-rn7fFj*+e$@3Sv$0spq|^!5Fx^71|o9=m6moyt-~?OT1!0e7`_W? zhc(k#Gz_uYkZe_9a&<0C6hnJRqS>`J5$n2OYI8npvI3IKvVh<=UWLPXYc?M{HcKM_ zHDq{XMM|}}DR|hbyKt4*R8UM~%zh6%tkEUL$5@q&y8&B3gb0*P1Bpj9e6A|X8Q=vq zre~QB-JNBPyzGo*q7rbdz2wP-;fTd3QGBl^CvKcVhEQVcxM+z?X7n}8@_nLGuh*+0 z$i^C|7i&U~!v@Ti90(y1u2NJV ssh-ed25519 V1pwNA xqavLiNuEoc7Gn7MchvoSEC2RrsFDrf9MEGFYVf5vEs -ZwOkERtRi8yxlZ6sUl+mzJ+YFw/h82vV0WzhRjQOTo0 --> ssh-ed25519 4PzZog eiC4yLeOytE1jTUaQDOxtVHsM2jJAvGLrI75XJXRCSA -HJg+GqSKlXld1uB2WPTM28XEygsm3+4iObC7SCMWl8c --> ssh-ed25519 dA0vRg rStUstoZRf0i7Ot/0Gn6zd1cQMQjDlLQ8ScEIM3XMXE -PR2UGWuO5VOBVee3bndRxipU/m2ZRXMo0HQkX8pvTyk --> ssh-ed25519 5Nd93w hn5Oo+ZoIG+UwAb/DUUJmkDcey35fG5WDBgbe494T2s -TxUgeQb8UdxlowGV1/j2Tr7DTNqc6d56NGaFGZfeidQ --> ssh-ed25519 q8eJgg vcWProg0hXGuIRVWXpFSzyS4Ei4YHSdq17A08avwCmI -4iKGWyyGfCKEliEa/9r8y+D5LsyLglFvcUeXyzO+FCg --> ssh-ed25519 KVr8rw 2kNscJDgyfKH6WrfSKWnX5dgRM0Kk7FztGhoJ89VUWw -/biNgciz7/fDOyY6GfwEI57ESdUyRwmKaI4OG5pJs20 --> ssh-ed25519 fia1eQ lv06SnwwoBlmG4AVAeNpeIFgISkt6FktNuRq+P0eJgs -VX8O0FYWrEyBVR13t8AkvIq1VpwFdkMX+wBUQHBzXPI --> ssh-ed25519 IzAMqA b0DnkDgWeERguN/u9wgiBB1sbxHaMXmMZdPOJ14/UDg -tmKw26Fs6iKbVq7BBK60UoQSjykp4BzLW59/ZbbD0hw ---- rR+hloCeC8YmoV34TBL7hLk/4CSfmYKwtAbmtUjHvKE -7RHSIΔC# /:HImIdjklalb\L 6إ/Pܢ+cUM Yt \ No newline at end of file +-> ssh-ed25519 V1pwNA +Bzh++C1+jxdz1VwwhxPpO3XWn8fy7bsP2wX4mlQ63A +1GZxY76fwUOo/t/XeoCOEuxxq+oiU8+GDaasH7VTOkA +-> ssh-ed25519 4PzZog lkqPlBejVuYcBQwAZX96296VjJqyz3Q7J7O7OzfSDmw +x+bGIiw4SYhEePIkF5PLK6KK7EJ8Iay1oQIOJ18DtQY +-> ssh-ed25519 dA0vRg o0tqstSEhdxxdu4Bu8T/r8al3XJpIHvXp7xe8YNbJgo +m1OKX0L8Nn6ZrXI0Sk61fe8JIRbh+os7p0wzCMtdi6Y +-> ssh-ed25519 5Nd93w pYmPUfDB3HfJZDPgNh4Vmdu3UlTimrX4+EtUzSONyw4 +C/URv/SZEtUlI2SBPNTfni4oI+bsYZ/Wq3xilcS6mMc +-> ssh-ed25519 q8eJgg k5Ml805g9vQ5Wv3hozSCAq8EGzvczTfpssrOeBlB+GE +IxRgNIg7Xi1RN9MthSqjsHoaLpsFWoUVd9f+ak9Qm08 +-> ssh-ed25519 KVr8rw 5YvUQVmarpS4FgsFI8EFLz8tucmvs3V3Q8I0hT9q1i8 +Lifm2EUWhv5hDU9mwkOu4fH8zyjEtGXW1qVBbC4dfvs +-> ssh-ed25519 fia1eQ sSzTT/AeSH5y4vyKt1Vl0bnkT11ZXINQi/pGU+M3oh0 +Qm0ktboSsC0/+HBCIsOu2Oa+EAdT/DlStNLRpC+EOtw +-> ssh-ed25519 IzAMqA DhHry81R6JO3xWujL4l3uOmtqvdmk40srcWuXCU03kg +L4AWjbf1+bNXSMfBpC6DTKU1hvql+1mIRemeHZCFXos +--- Jlkn7bKGiezveI2e56iV/3B08/z/JxsJxgyvgZ6WhN0 +|s X#?WٺW(@L [^tnhGc\z^>^D{*.! b \ No newline at end of file diff --git a/secrets/bitwarden/secret.age b/secrets/bitwarden/secret.age index 0fc2d37..fde27b6 100644 --- a/secrets/bitwarden/secret.age +++ b/secrets/bitwarden/secret.age @@ -1,19 +1,19 @@ age-encryption.org/v1 --> ssh-ed25519 V1pwNA LbYb1XP9bLe1lcsAfGwPkK2/r2+TnkkEgfS9fi1YKRo -Z20C/zQluu+Qanf4d9GSj4pLirCyqJpa60H9hodMt5k --> ssh-ed25519 4PzZog IFlhg/gbQpiMugcQZUHwfAnSvhxCwW67XmfSNmYOSQE -nOp4xPFMvIhUH9OUVz8B3L8GI+Um2egjHV0FgmdNwwM --> ssh-ed25519 dA0vRg OAmV1KiprjoIgOPHCYcme2uLiU1xEdohTWA5CiN0yG8 -4/LHk5LCGrpMISvpjfo7QuhnRrE3ycFGwGTQ1i6VaZE --> ssh-ed25519 5Nd93w jv27aiNze8Nxp2ohY7NIRtZv5lBxAdKYGWdqWD12zU0 -E5Rk0r8To4B39UsaZavEkAZlIPiaXswsShMgsyNPMoY --> ssh-ed25519 q8eJgg /o798N6b1KlQfMM9gQf48TF9V7nXORxW4SOpcpYCuhI -RVYXWwZLFL6ZUjGbmXBzEj0+Pe2wpZFPIj5yH9kRIwY --> ssh-ed25519 KVr8rw +N2w/8vvD7/uG3TMYb+9vml/vZhLkoS+03KEDlQWNhs -Hne+3S6vVc5Sx7QJ+OCrPCt4s5usZ7B7WwusnFQLmSo --> ssh-ed25519 fia1eQ PJYYKfL1GolRt90KC52dvUyZ/HjWRJm9vMTjBvrCOkQ -Xc7SpT5TZLTOORLO3uE8tPXKx7thUwaJi3ixngLRljM --> ssh-ed25519 IzAMqA AtoNahZ3dTQasdfP3wf7U1RJyx//Kt82e1TMSIkW6QA -neLAeCvnsl4RDq2H1slZJ+5i3JErqy4aRGoscpRUi/0 ---- W8B6kla08fEkl4Kpp+0eAHj7B1j3WYCDcuwJvAIEW58 -)8G( 򝐞r_t֩z|>od6*0jrT\*v^# \ No newline at end of file +-> ssh-ed25519 V1pwNA ud7vkafWPnZmwU0gvby16a/lB4VVkUhVpqnwvkMdKig +/PR7w91ONFOWIvObEKI+wD9XTxbjqQoMjlar9yqN8D0 +-> ssh-ed25519 4PzZog nttwEm+xO2qLIkb+FqRmDeqbdidUune5CdS9AvHCmUs +raINPneffb9cQ6Zq3Jpwfz0MiIaTtoOI6s+1wB/S5t4 +-> ssh-ed25519 dA0vRg uuSSiAgzEPgfh+VqE2QfB+8fkJlnUJsffF5/3C4Ovx0 +1oFB/dDSQRpcETXb5IxYSqSG7oI8Y0i/myB6IaJqtUc +-> ssh-ed25519 5Nd93w ZZA2ylM3mB4xjxMzLmrYNujWTcjVsgKRzIYVsmPSqXI +30g14yh+pO4moRvnd9Xxe1/QQxmE2h2zHP9mqn8dULc +-> ssh-ed25519 q8eJgg lkPUz5/vn10nmk03AeA1W/6fp3tfyrdLq+kgoR5Cjy0 +fHtjZtjYG18wWhhvZY3cn3FxxJiY41zQg16ltudBue8 +-> ssh-ed25519 KVr8rw E2OijEik9tPfGCeRe+XDV+tKHTOOxojVbG0esTKuLCk +wXIOcUGlmF9GinF+Z81KQNiVACN2pthS1nwCK41IHMA +-> ssh-ed25519 fia1eQ VIfFJCbkM8ZvKKXN3+ZjxXIgK2y9vHpFdQopX25kUAk +utaTUdI2GBRxkDJT6qmxsdbGqjgSRP0ss4ZgQRQhQBM +-> ssh-ed25519 IzAMqA WX0QlrMPSMMvv3KnbOedpKcQrarKBQLHRXThmvveGmU +uz/jl2Ze8sdlCv5G6U1Dn5EiucQ1wlK4+/wwezX6jTI +--- fLAcK+fEa833GdqAvbD+sIr2ViSHQat1WQgPook94Ag +xIi*X|*>!KG7o)EU7U \ No newline at end of file diff --git a/secrets/discord/token.age b/secrets/discord/token.age index d9fed9a832fb9a80e1bfe719974831b2a0bb00e9..a346d9bd6dbec104b3b8803c7707cfe0daecc60e 100644 GIT binary patch literal 1204 zcmZY6+p83H0KoCItk|9;>L7*9lcMW7J3E)%)i7puc4lvLJ$sv_z@5wfW_Nbxw>z^l zdpSN-(2JIbPDytO#4_!{2QNWpiJcReBo&AUx*7#Ngdh=>n7tqWf)9MZZD1uV&+w;% zQ5SkUp%2gqizW6TL0~5=GeweE7O7){u}CAdL5YUOalnC5Zq&ssA+WKClr0w$oZ%2r zPx5J^hr4_}R>=;UEfo!##W+M2gECShyPGxwGV+xmRJ(dp_l!I~DTc&ajgV(82#`WG zjMNz)WD4b4uj(oSK;vE(n?(a3YGW4TL*Fq7Mjcd>F^_>Tmqvv)skKv)t&3n>%LZ+A zR>a*2G3LdRSs3aCdt@fpY9^hGRDg`en%H9{D5mj|m)E;)s%%>Mk!9*Bve$3Sc(u~5 zNWD;Fl^9Hw&$)kx9I;$x(dlhZVp zjU1Ll1IgrAq0{J)T1iynBfjivOopL3maDre9UJKR)W8xZwKg_GJ9;7G;ua2@HVtO+ zHm_Ceo{ly(*H4x1DmlzpB>)g_QZTK)=9$ujXN}$oPbNol-j3xV2lXf%gY1Ey1+ z4`NI|J+uf#F;khTF`iC6GshY_YeayMDiDtmsYO(8Gnr6p6ySPEUA0V z6fDsuRVfn^o-D{rVK}K0MFvyTow$*fXCPJ~MWI$gVL4t7=j&|@OlxIZBPEB<;CWsz zf^MHB%ej{B-c_>GZDW>#5R*^>eZXOZkW{6hldW@PiLO;$tV#h=o@aqHjiVzX3qXuk zU0k+nN;y=FTF(fIR@my3lR}T`!Z?#5rC~RO(pb;{z4lviMhin4(X!mErw9hyaAYB@ zn=Tp#XuqF~^OPMiWHs$zB9mnLLxzqyv`=SXsUasj)1qs4Y+en;44W${4H{0G1a6S+ zVXwosjAAU2NFX*0!jx)Zaa~EZP)ef%0rq`r+@YueJ0HTp>PFlM%nM>Z_RqF2j$Pfk zMSXdZ-E?#Nvp;`xYu_gyy?cCcY5C(FyFM?jEbM2R<=gJU2OF=%)umf2zab|-yR+xM z_KlyS=ic}#_K5QLV(Q?hU(UU7WckA0)rI}%*!Q12@u>Z1?d$ImzTzSU-PQG#k{o|L-UTN2rArb2u>%88~C8l^)L9ruVWd@#!w5A zQD}R^=e)qmOtPuv7l84&w`}MTie?Ew%8ud+3Ajv&sv&l}C^Cf8_vIE>8Wq*3%$ap9 ztDC-AX-1U*XPU5(65?u)En`vS#gSZ_%4rwwG4&1&AfhSX+l z&jMy~Kvtm%R2w+#IOt={Y!v2dDjx*X_PBxz^>J5AWC@{QEfq>ySP1zjiw?|cQ`GEQ zu{tAh78TL<(3R2gKt*LKL3D|n*K`t`G%TR3`VG0svOyc+L#L3AV1JsCdi6fvHG=NA zZBQ17*@8~kaY`(ehhvqlOH8cbnyAn%FXyDW5|0UXOjak3K1lMW$TSARyoOeE0*(PZ zV25-d@)?Wc&;XOu)2u|3Et{{psAe>rzL7*?8f!puoKnGI0hbMXFiiSzmO^nxpk1~u zS++LQBAbl!hE^C0f@x~=nvWZtWdTDg==VAXjI=tw=aRW9>CppDqQ)6bR4d-3Eh(zn z6cf!sQbXK`6%NTv*bbqnPCjP(9E29jlUQlnZ8Gcn49BDyCkr9-8ZQNS5CbY}G;OSeq6iV^Y!+rC<=Pst-}F zmK42y4^;Jp7T|bZGwn{+r~{@mz@?Hza4iTyDlSF#)zWa#j2+qVxoKH$nV^ZLg$7R3 zsaerLV9*we|vvWM`z{lYoQ3xdKHg3{>hF zs;c2)2C70VPe^51w`C$Dn|!IkR&}?Pa_Su183nugv|U8DDadokezBCP2&wh2He1w* z2T$I8^I+rmjrT7sJpRqz^ZVQH+|&DMwQ>?_o?6*?>-6zcOzUIn0q1DzslUS?b`HM? zcE5e>&V?(>HHEYZyzn*xPAb}5A8gC?drKd4lkW9 z-cNaV&O9vreEE}OA0oTqt2cmIc5h#A_ZQxMkz6c%w()1<>)Q*zon3mp2!TH;tMsGA zM}C3!kDAAO?@=H8b=FJP{V$u}pI^(xoA9-_F>d?H&4Xv|bzZ8k*_+$F*Djt})1O#h xEi4_>ccS!(tv5z1w{lPRAmO8}&!PBbddtVP;ki%$Svz?4@^^RlqU*pb?!R}rvBm%Z diff --git a/secrets/dns_certs.secret.age b/secrets/dns_certs.secret.age index edaf67f..02a18dc 100644 --- a/secrets/dns_certs.secret.age +++ b/secrets/dns_certs.secret.age @@ -1,49 +1,51 @@ age-encryption.org/v1 --> ssh-ed25519 V1pwNA 5xvtgxFvEOX/bVAOdBBF2Fyb0euGt95YjhOcfpGgHk4 -6oN4Xba0W5g/d3EX2aC4N6UFVf/oHGgdTxBcMbjIdHo --> ssh-ed25519 4PzZog SjAcOftaZBEAAZ/P+Z9OTira4/QLSMRefC+JkQcf0G8 -zG0R3/r+PBjWj7WBABmHPXpqx18uLyuFMJKB2az9i2E --> ssh-ed25519 dA0vRg k8fekPA7w/QFMVnDfCrpOlfv531/nw9tO7B0d+mWHiA -jp+DndebWEdk9+wt/nvS0LfRsFf8T7+dMffWmx3tPw8 --> ssh-ed25519 5Nd93w dYe/tZ5qHoacI1IBa7yvDL/grZU7Lc40gU8boQY8Wj0 -eBs8fYre18RGW8+RH4J4AleG3kNpCZ0agAfcojSCy2Y --> ssh-ed25519 q8eJgg 9UZdBq2oZ29U/kzeNOGn+q8RbkLbJwM0eSJHqSLV6Ek -vqa610t5XxHiKBSf7veOc09ZFYW7EF1KpIbCpdCsegw --> ssh-ed25519 KVr8rw 1CkykLAC3c615TDRlOeI4GHmqu0VT2kclWkr+DT9dSM -0MyPNEmkHICQZxpKt0jBZpce13c+jn4WC7IJL4uWZHo --> ssh-ed25519 fia1eQ OtFYStmc1y+yqYNaNgHxEheIIVykYAa/uR0dKS4xX3Y -c2HYDyrD6Db3FNLP8tebLngtS2S8LHsmHovbofsUk3U --> ssh-ed25519 /Gb5gQ rAc4CqbqdkIAFystL0rLqGNH56GrKxOBamqhiIFAY3c -RR+NsZe0HQdQv6SgeIqy9IcIChXdvrsspNDBngW6Byw --> ssh-ed25519 NtlN/A 93citgkp9Aj1LDK5UdzJqYVVYaWgt/Cc6yMJka+ccyY -KTcyd/SygOLp4mPI1zGDTKCNT7LfVUw12Bw/qnTnMpE --> ssh-ed25519 v2Y09A +fWNE2zU+lz5KGu2Ed2MHb9UXzJPUAUuBWilF/AS1Qo -UVJWnAjRcD7X6iA/heoWdZTcsUS+1VMG5leIHxWZGNA --> ssh-ed25519 XSrA6w fft3i85PNprS9QqQo2yKr3lx3qHuSVFeVYuT5Gtfyng -lNOo2jQXvaMElQawI9x8vnQN5bnnNefEyYXD3YqwOwM --> ssh-ed25519 DVzSig a5q+imjqWqTzyM3aU+UvvGv3wH3RLTPl+kva+qVSSFs -Pobzi/5ZVyfGhVK4cMqvMqaAol9X4+P3hEaUeHdiacY --> ssh-ed25519 uZzB3g B1D2S87+yPr66EikAqLw7s5pazfQeQUxAj4FFnk0nAE -3lEw0t99aSGqkZdi+ILl3+s+JWRKpY4BHLXdrHfFxng --> ssh-ed25519 CqOTGQ urZpNzMYvDnGR1UgjgrRYp06gKWcTEWUDjyb4fdDTD0 -7jeFeoMBitwGFQLSynYVyIYsEhHe7A8mdl65goiX5c8 --> ssh-ed25519 IzAMqA QmtcH5afcef4NMRX4AMrUHW1tCPGOlJ+gIhhDFkUCSY -I4Yg8vgoYGcsV43qq04+nrhzMJ20eaQjOD4EJM0z2xw --> ssh-ed25519 Hb0ipQ CO7nQSSKrmkQ/C6DuJxesIMJmm99eQytLzJ+3/Q38AI -/kBnqeivoQLMaAA7nX0t4/UAvcOIchEu9bJWxIuUOV0 --> ssh-ed25519 3pl/Kw qUD++i8FGbEAuqa+/v6f664tlVTwHGYF3AmTo0cuZyA -vjImiKQm0SHiuO7jZTKRg/3MKzDExfE+p9ZT2nHZr4M --> ssh-ed25519 SqDBmA BGwTqAeEptBFRbwwVkHZWX+OKQpALqrPvA2+Cl356D4 -Gg69WAtr+AAfYT1G+WcTSIlCbNqS5DyxsZw81DaBSkk --> ssh-ed25519 UE6fcQ 4JZzLWThfgJQSNDDtDp8ayM7N9o5tQ6PVwKMj28inC8 -RyEWRmMbuXezYZntsTdVIbjy/YEbrflqMpirdg08UVQ --> ssh-ed25519 YFaxCg LTsikBkuBwOuc2qrnTAMVtRawZyBosZScefH8qWIqzQ -aLiVK7XFI8iDRTCGH2yJnUpydjTp7NF1Ygok6D2Fo44 --> ssh-ed25519 elCEeg TKQKeAvY3kn5IuvHoS0SWtX647nEn1txDftt7pPQEG8 -OPAFqPGdSS3Ud+gFtMXG0shrXSmVrIBzvwc19Ac1NJQ --> ssh-ed25519 8vZ9CQ NGLF9epPqcfbQWcbtMeYIcH0jAZMvO4P7UbKtl8lGRY -ZJ5afGOI32OYBpWs6pe15z2IB+5xgO04/OsKp6ixT5o --> ssh-ed25519 rmrvjw tfgMxvtTE2vv2qQJtQk1J+YV2UC/2iZSs0nvbVzV1Hc -HW86DML/9MXoTs0WWn/zNi4Rh9SBhaHl2WC2bkiLbmw ---- Q4amxZgWmdHcf7aqav2TpKA8KX8B8ZHuBhzIcKwbFTs -Er<\?@}kR(;^3PJOS܋ ` sb?9x$/~4F  v_p4{5 GZf"BͶ')/]wK%o B*&׫{\ZpKίk} }P=? ssh-ed25519 V1pwNA ikotG+f48KCxKj5DIdhwIEYHtspuBfGj9DvlXLchllk +TQ8OlL5uDpwnjveBk1RbpB+cCOpqlPQtOu7c0/LRiqw +-> ssh-ed25519 4PzZog ptPetu+OMhjcqwIZD2EtPWojceX/p+xFRu8SdFBEBzk +5HKDrQTBiv+hTKhkLtnYOq7sUO8+dKOS52bXGjGXwxI +-> ssh-ed25519 dA0vRg nQ1GTSQwHt806xrFMyqwQ86iBSLbgGDIL+GIWMD3AFw +OPyLNOxp5k40I4WvDStpKun/AdOuWZyEQLPyyFdqtcE +-> ssh-ed25519 5Nd93w uYt44+U3T3DOThXDGvl5WPDPGj506O2Fc271qlw/lBo +tcRUll9+PIfcvcdvIzD8fcIU85+d8lw7ThPetfq24nU +-> ssh-ed25519 q8eJgg wLIZSQp/YAKSohUD5NsbADyYua8p2qik9lRlzdvZuSk +f/b9Jt8Qk7dcor+5xczk7zRzOxTgknGYstcLQv7ztJA +-> ssh-ed25519 KVr8rw InbHZ+pieHIQGGW3LOOfYHS+RkuXRMzxMblHHLOV9Cs +0oHx4kyD8AW5vgpds6EirGHeYznJ+z2WiGmn7+6bPww +-> ssh-ed25519 fia1eQ UTuEfUIL1xVc5W/HSXpVvPxeQriwC6Tot1G0vRaT1XM +6mWM2A8DVPMKzp7ccqTj+3go39xsyKIHuu4zZypHD9c +-> ssh-ed25519 /Gb5gQ Q6uPEnhxFPRulsd5YWVXfrVUJqSN3oM02g4yK2IYUQc +qqcy7z7RohVz/GDpB2FfjE2V42Bs023N6+G4qIJN9Bo +-> ssh-ed25519 NtlN/A F4k9xBWDxeIS+v+DldjlN5e0WQmKH7Pt23XnKxkxTVQ +PgCuox8LSeYaamogydWcXyP4aVCQadeVfnjnFngWC+A +-> ssh-ed25519 v2Y09A Dq/SngPnj9Or0XiVOoo7EQNdsh9mby1F9v2zSZOfMH8 +Y6J+nWC58lxZKc+wMFUGeymONf9LOxJhMonP1Vo/LMo +-> ssh-ed25519 XSrA6w KnF8xhrzss3txgoF0JK84/M7b81NuFeB9Ir4590LYRw +jilyzwKpL/A4CmO/hMOMjZqPfwGsNYsngAw2trX7hKM +-> ssh-ed25519 DVzSig A4EU6+2yqw3S2ISYUBbZYOq4xBEfXoEy1fTUhTzGXV8 +c6CyaaBcdHA6ZNdJApUcQT/ED0hQYPqqyvPF+zwCLME +-> ssh-ed25519 MhHMYA ixDHJ+PFXFxsCu41Ye2Vwlk8wVlXofq2ztKIU9qxH0k +8JBxpk9/nQqR2y6i8GU9PpoHfyitJwIHxMr8nb2Y5As +-> ssh-ed25519 uZzB3g zZAxSWF9i6321ifYiizQn6kvadhQ17/fNkYSgOyR+x4 +H5jsIQmgVgRoMRRQ11K17eD9HqU78CpKu5ylkgqrtq8 +-> ssh-ed25519 CqOTGQ TzL9qPqBl8M3d9whmAaBgx3Wo/hPKc7Q/P6Kt3pPxn4 +BTnEU/156/8BKqdFcWisleg/K69RIiMaNDg6h9MX9og +-> ssh-ed25519 IzAMqA +w67jWJmcVuPwjlkKn5Y/ryZBzA7ZzLl4va6KxfMm1I +mO9xeZV3RYUbGu5TJfnRAaJumAzM5u3wmIByawDdFn4 +-> ssh-ed25519 Hb0ipQ y/srd2GpXb5EMVySg3BYOr+41u/NnJlx/2sQlhRyEg8 +s3Se3Rf8N4WqP6QdmkAmNtgZKgsvmuWfiOpC6pKGNuo +-> ssh-ed25519 3pl/Kw u+QbsaYgVdhbsYBlbuusG/1nOXQ3PLCwtwWE2nUTUFQ +laEpITIyaNx7opXwqT9SHo9qNWCRH0WozQYt8SW1cz0 +-> ssh-ed25519 SqDBmA 0dlLmNcgAOBOUrVUT/t0oaF+AcXUWqkDN3fu64rLx0A +y9Xw6atnsCX66Q+iIMHwsq8vxeL4kxTihIbMut+JMlA +-> ssh-ed25519 UE6fcQ qBrP+r+1jy06z90mQgk05zLog586HGUMDgHTbExoMj0 +TnZAUZUNNIAJzd8Efqb7KqR/n26YXr4jV6zPvZXu4eA +-> ssh-ed25519 YFaxCg SXGoMkrpgduoXNIZXDy93gkzlnKtr1fAOQJxZDcZ6Q8 +jKdd+OufjXk1UYsXcJc/Q4JeiRhCcHW2nrDuBrHu/pw +-> ssh-ed25519 elCEeg jPd0A53zK9OFThb4pCF30/My3QxiwGyGiDp64ob1vWA +L0Rj+47bdVVwii4LIMoI2by9qmzk4H1kHoyEc7rUO9w +-> ssh-ed25519 8vZ9CQ lgEkLneoENKWwNXRtXRbN5VSm1joh7NDSSUn/bp/81k +X2A6sHl6dFe2p9hfVINA1G6nR8lqMQNjBKc1FvM9cnE +-> ssh-ed25519 rmrvjw NX2NPt0SVGc3+2p/ob735mUIb4t9nhwUrdbdFk8CnSY +sL3zmOASMti3QcIfa0CGEcJex95qGX4aeIqO5LS1LFg +--- 9+vokggbkBI5tk1kvqpdPkePahvTIcYWtU1MU1zTyCs +{.xXq55˱{Gzᆄ6 :p6[YUQ`ؼaRS]ucYXH"h 7ޅ6چo=*GiɨLA?ĆÛTpaKa2 n`\N34XrʴI9Adq \ No newline at end of file diff --git a/secrets/dns_dnskeys.conf.age b/secrets/dns_dnskeys.conf.age index 0808d0b..adbf427 100644 --- a/secrets/dns_dnskeys.conf.age +++ b/secrets/dns_dnskeys.conf.age @@ -1,21 +1,23 @@ age-encryption.org/v1 --> ssh-ed25519 V1pwNA +Ug8WtIQLZK1chInj0113Okqae8ImSdTvQYYDD558ig -ao7w/Uow6sCtoqRDr3Y8NjuF6f9P62sKfx5+5+3yV8k --> ssh-ed25519 4PzZog KZwHoIkqMTVHcHma22+hG19oBgCNZ3zZ9fgs0i3NMx8 -hxgtsHVx2KATvEQM790y7foAaWVBFnqXz72CovkbcyU --> ssh-ed25519 dA0vRg QORz3gYpB5PiM5Dgm4s2JNyJSBFTzY15tlC0JNMtoTE -1AuUbuw4YSoyly/iHY2DGBOhRijWoXjsFfFM1pKKlUY --> ssh-ed25519 5Nd93w glPMyqAhDvJSOgief6VEWflVervhftUbNgnDOVtKX1I -xDSl0Oe0UPiWRnFythx/6ErNSy04paTWWKrlheEEzLo --> ssh-ed25519 q8eJgg 4Xs8DKl5BV5E8oGE9MrhBanGuTltQZz3JsCI57UYwiU -c99NCU+f8vbvFq9T+P4Gi51ae5xygzuyLMFGf8px9CQ --> ssh-ed25519 KVr8rw mPvw8t8On+jnc97m5f8x79Kcx9ZhHWyL/YW2zVllqUU -X8CuzLbLfT6sDhZp4rGif9RDD0zHQzjEp+v5PHX2BAk --> ssh-ed25519 fia1eQ CRUdnRPTZQtB/YlTqGcghTUjUlN7avoJ3iip5rNgcEo -IX1fAfmdteXLwXF7S4aFidVmzr7ClQE5Dlh5siyQZPM --> ssh-ed25519 NtlN/A BRTimkF1zqBp4N1cep8+Mzet7cX45ZHTz9NekWNaNTw -//1gIudKHmPM5A/1fJNPaQO5TqbZzV7FDFM8EhEFzIk --> ssh-ed25519 v2Y09A U0jsaGMHVO2LpKActT5oYiJrbw6oLeSwzgzR7ufQpF8 -CfB7xVWpyMHsRZbfwhtlBdZyUwAuLic9R0LBm6vXNUo ---- wiRWKVnnLoriKkk//al7FuIGYKru0nO1/XGhpz6yWls -$rlk=nCxgA3֕^%8sJ& -C&Y(e(jv! ?9^U>fA(1#\0c"Z^4_&ZX6+Fÿ \ No newline at end of file +-> ssh-ed25519 V1pwNA UBWTUleT3gH3VTd/ahMfx1iSc1JTTlZWKxD4Sx61Dmk +rGgE6UbDrVFRBbCfw2+o49aIlk4qOHDNYD5nQnt97vU +-> ssh-ed25519 4PzZog OGYMrxkoi+q8ysF/6+HYm+RQshv6jhZyjqQr+d5/vlk +1PY3xrn9dHVnXOOlEukTwnF0S5KL6AsDRXh5MvWioyo +-> ssh-ed25519 dA0vRg eVrtU8/e3XSCjOHFeujDNIZHPWDq3qcot/+RXmBwYyk +mOFaEqWEnYtKxlilozF2QRyKPsOP3HvNWnQ3KLRON9Q +-> ssh-ed25519 5Nd93w WXvBheSNZ8CJOtyxeK6GBLRgt3n1hgYGGnksp4pUhBM +0mr6EjSJnnJezPk1nXIEpaIMmn30tAFJj7pmpS7vHzc +-> ssh-ed25519 q8eJgg SLkAt5hvW2niDBIqeKjcYZvDR9CkJzu4wf1y+0Fizzo +ZNm7qSf+Bl981GJuZPPjRL1HcCJbZ58eOUQe+jFE7K0 +-> ssh-ed25519 KVr8rw xfJAoIGIRNVyRsPxjlARAFXm3jDnYxBZws0/8mkqr2E +w//2SGsPl3BjEgGIWAsomH8jGwnOKCpn0SJsbb4y2EU +-> ssh-ed25519 fia1eQ MjtOJN21srAeob/eGpKQON1FGebBqvZo1bKfQFz2bhY +eSRZ3DTQ/HfueI4k56nkAmUdy7MARgcNYgPGD5amCTM +-> ssh-ed25519 NtlN/A n5uN0giDnRaRrfa0jCpqkDnzx1x6hQipumVP/dM9Sw0 +J5Z3ETAYMQbugOUsak+k0suWd3SInz2kfRDrJhP5ObA +-> ssh-ed25519 v2Y09A KxmOke5LEOx90sSm3W5gdNHTxk9Smrwya36g8rxFyhw +2FUiiEe5v1CUG/Gkyu1Gw0/tmo64wCIq/vsCjevL3l8 +--- eFkoeakUQHfc0nofk2Sm/k0ujxlkKkahdm/MmMqPHrg +Š +a +5'?c0 5Sh h mȍfZG+>6uϿrzYЍޯѦJ|a>7iYa.P&dKZS̩/Jr;׾io9hNæ \ No newline at end of file diff --git a/secrets/email/details.age b/secrets/email/details.age index 4ee9f379ff01d0c77170c4867a7d90f402da584b..d8c9aa56e9c8dff7d093aff5efb4bc9a8fce66df 100644 GIT binary patch literal 1419 zcmZY7&+FTC9LI4s24cO4Ct-ZCohatLyr|G5vp$^#a^NNl|ew#Ttn;48s{BGp-6zig0S2vj97z6Uxb~_ z;RHw*a4(-1tIRHEs#md)tSfw;9o20y-9Y0t)5(Xurs?j^8k0_bUK?shCkK7clD0Tk z9)_@}L*&>OTMfYvdMhM*lRoU|vd%Su?hGb|dxvRT3?tKbc-x#(ivEKa-a#=f}S-pBCl(%(KEf* zfgOyjC(0^y7gPY#no==SEeS;ykv2++WMz!|qi|nt$@3bn_!PG9TYGissW6-&5Lz6H zBSnrKq7z)ULbN5@s(|1yB_-j`T=fPlYJ0Z6%)rv(Ej?YM+9>cW7;>{XH+B%~fWi+U zg@p9;T1f^X0DTe_ikY0U5Va_VAwz1s5KDC!Qi-?{n_S~?@-WG~(Ui7&LV*$i$h%P@ zgSIsdFe-6n8JKBHv0NlknoL#`Zb#0dhe}FzMOOR%fn{;Z<<~nw7(;mB@tEiA9GzI8 z6ULh4ojGE+zPgAVwCF-92&TaHJ%Zo^eV zYryx|?N&7C-drVQd_0;Ni0hCQvE>qu<_1oRG-+L834}podo$M-+?qYF?VRHn1ASzX zJQx)YD~^gzh*Bzs3$?FB^EjeA_$=DbjlJz+aQ)!G8CnY$Iy$03oiAESq4v=hkpCNq=?srE3iYAmc+XC zkx1<@8C_4jEj@)HDuw+zlTs%<#KWFpQuu}ohOJb=ylx){qiMJ$3b!HncJ4-LfF9+D zb#;=Fd#9(TeHV-%3bhTE8CPVkThf~I5)?0`Ay~^k?+$_li^4$+ymjxXTh*1b`#)X1 z6Mpqy2N(ziGYk${&wD#!l{i@Xt3FE}y+$KAn6` pe0=K!vETggyNjQ`HUDw=@05(GE7$M-$)}Wkli6nN$^47g{sZv1*fIbB literal 1419 zcmZY8%j??&00(e!he^??yXk}#6n=;BTk~uiglUr|P0}W5k|s@pm%N&$&7(=0=SAlP zJ&FTi2Zu62*wNPxQ*;b3f{0#zps>T(#gj*6B69~%-Cyv5@5A!FV=s2HX15QL_(GET zy%OpiU+m`j`q*<}41@5l2JI?g)Ln&?G`Hh0Bn#N|G=0lLjmgr2WiCM}7IZ49a6@EB zO4)W;ATl9^Cfz>HNkX-YOoo>0ftt|$(Uz`~rrL!(*Na2hKh)59YbJh|+N%&Sb3n)A zm$*6$h-o|VC0*7+JQ=Y@3D8wLM?`YE20LtSRw?52Va!NdAIhh}1SY8+U7AK@t^#&atYVHUuWxp!|?LsyD4Nr+ns_{wM*C+KD6BvgHq8Yt`Bw*BcHh}?+Ix&i^ z3SgsC+ZhknkXmI`WLkBjuTXM>m26A0qSKfFPe_LvCb&3KbHtn2>usuK!>sCJn@xl>d|!cPsXLIBEVeULo;mS>3&PsT|@mtkqr0J?Z*|j_-4u)PT zK58q?pe@9A7Fml1X724LFh~eBxUDgU0&q?ple!Y^3T~X~8HPu^njC6{*%FA~#U>03 z%D$kr(kucPW9?o^FfaqK08zw=7;!r2=lr4ef0CYR@rx|cVU^A14v@z_ zDTt7p3@B&4m{)?$9wX~k%cT7l8c01 zD34ZheB5;%JQ$=a*C{Gj=EA)x;?ttpBbNT3tvv=KxKY#x9 z(Py_`f9cutSLmB>Jn{bBU%&c8J^kYE-+uJ!2Y<`yy=Q*-=k4Z|=BbmjSIBCE> o^#|!&=bpRr+fOAPYTqxd>+juChfky0)$6aV?i@Ye`9}QfKM>~GLI3~& diff --git a/secrets/forgejo/runners/ssh.age b/secrets/forgejo/runners/ssh.age index 294bd09506606f954e12f3c04c6f42b3a93bc9ea..7a716d1b83c03bf40c05fa613d047819829ce36a 100644 GIT binary patch literal 1381 zcmZ9{`;XHE007_|9)g1eBFgcIFa$wZj&_f(8#z3-uIqYR+qKtq4-P}ub!~5tZtd1? z#gIVaA;ySA5sg7PAqt`r;glG`2ghA_h(;5@5Fe;;!NWsA;M7FapYJdD^6`?`E|vwY zS*a;%d8MjJfZ?>YKW5i;xn0b;Ajs*rbIyuM2JEQ9lm(xa4H)%TexHHRE82NGuE#44K0XeWK=x zTNzcd`!uP6k)WHf{N8dr!k2N{poD^6E6J=x6-Z}@QC*2*(-qKdRYG($Fu15{7} zya@nox~fh$nZS{VVwQV*ec2}IRKtz*L@gHp4MwtiETUG7iAmaWEB;c>kuODRKo^y+ zs0EiQ!n}u-*aXBy)lk}ou?WnSX+TafzA6`va$pEA2O1z*ilKz;V2W5+OE6jP|M)}= zB6EJXX*U%)sp~O{n<*R_NkTwp(-Y ziA11IWV1xIS3}*HA_X%Nr*wgC+6<9^Z=zQ9iCvOpw+gvNNtI+Kk*h$40(t^vQgDYD z9t&zL-pul9tSV*F&S+D$DXxqW!RZL#h#R046D${oxad;Zz&)f;#RQLxMv56$@fU@O zT9ng#nrW|#Nes^zwPKL*gF&qZq4`FR^k5u|q|G94IG~E*XE?y^mTVQnir}2+ahY|Z z!g5FkCvg~0Foie~P;{eM?xyr4oRj5Vb)uG6c&A9)gCP@3`x;3TY0^$dQ{@B;661a> z6GU~Yw;GDN@gyDKL>?tptdGd3bI(x1bDmw zMLoUwNKuPXNr4QMoFS=_3YAEV_NPS^Ms4lw?e;p8^6IjyPyo;{Z7L~mJlh~BS(Qzz zAeT#+-wTN`CmBV3x=lH^>yhDEW4~G1t;<8NRGt}J15UjepZVt5@s+pxTF>G@ zIR3=#=KFE?tWUR}1#TEkWAph3hW=UHQr~hVd7_Q}X}UU+KQL<3*8IL?PusHx9Gj2+ zyJ8wkOp}#zJ4p=*P z-&^DHo#Snj=`T8~x9-A+hCUuP=yb=NaBMYo&!L(7wHYlt4vJ%goh=Jev;P_v-adnG zIT5&T`mY-=PW@!=!Vk8N4s!jk_B;(;Ik>KJc-{a5O+GqL#$R0O>6vt6W2ABQPRnZ$ z(ziS~_W7Et%km#}2#c-U4<|cXzinxCo&IXWvepIL(eL+Pe`@sXrXFbLUcPyJ;QX8? zhn;iN4?q6Gu|I*Oe^1_cedOJJ%LW$pUmjSpsAZt1dGYo8aX4^#(&jTmvrk}K7w%nr ztFFAD@(elKz7ZhigGjtlGOZ%JwY0fNf^ ABme*a literal 1381 zcmZY6du$U000wX&hDZs)M;s4bC<$tyY<=AIdX2`=yFPZ0ws&pU>z$F%$KCb%zDMuc zVkCTe)-5X1mOFk$kT5D2h@M}j08R0t^Y_x%4$e)+yHE%I%A zC95=RnpCZ{R~6B&J1uSRTU9mR#^+pax6^A)I%`J6XU#Jaqq7l|Tw$pwcqO)J_+`Wi z0)BVYY{Gd>kKh{W_N7xy(ZXe85r}mdP6#U6sh9z)r5pz+aSy4gazqAl0PbLecDK_f zPSilk*?}pg2To+Sf19di21*C*o1U4rVdAt5eQ)%w4>nXg0!WxMv`>V+oAD{9bp^gCKQL7NQ%svLOqbtfikOl!!$sE zOm(8>j^w<6VP(8x#RWSN6p!Z=yU;L;Nh%MeN)g=X2y>=XvL}6stPO)IpoOIO@o3s7mHdTucBZW1=R*JT8jXkSqfPn-g@Z!TG_u0|Ntf z1(2nfh=S1bO+0C=K+FCb=Kw7bPIH)Q0HF$1(t>U=ikdlhfyMO9atDLW0h68Ak{zOHg%N5NRYeEg*472G$V4j=^L=R-@&7 zabh=AjwV91wJGW$x*@t5#AQZJIn*>W9!g81ASsENq(Hi47t6$mm~J{Ojk>*|F|gpV zJDeDWa1Fa1s~IJi3!$W!GY2pB|MqAxvu*q6uzr5>n&G&7!!>Ovcz55kWBaD` z5m)P5kF4)sTp#OlyfCSIs%7t~^M^Kkj(caGUJ<;pn#6&1!V~`+qpMDzT{w42=TTy4 zS$U&=X!-TQg9FaKpGQ7=`>XA*e|GA|er-p)a#DwP_O~?mO!`;YbMeFF8(aELch9(F zGu-QAmd9h(M+0Afhxr!F8(H<{ncl0XrW1t8>@bHf_k> zIlFS>51qS?y?m>?r@Ovx_>+;y==(ztI&Mz?##`Fm)B9xEo!Ref z=D<~3UvvMp_)lum-A#KZ+aDahu;tey`#sWQe&?q%6HjCM=%z20cTHY8e($x?j{g8? C_zkQ8 diff --git a/secrets/forgejo/runners/token.age b/secrets/forgejo/runners/token.age index 6cb6c60..2bdb872 100644 --- a/secrets/forgejo/runners/token.age +++ b/secrets/forgejo/runners/token.age @@ -1,19 +1,19 @@ age-encryption.org/v1 --> ssh-ed25519 V1pwNA 8acWnck16a9QK194orAzlQgQKINum/cyUzJqO6i0rkg -In2UpSbBR6QoTMTZR/GpZJN3x+5CK3hZcEvr5fORoOI --> ssh-ed25519 4PzZog /YeuXUmWrWFohgOSEmUygaTax668bLZpYO2T7KXl8n8 -mgnBBIsPycR6RMhLk4HQei5xQLzVHiBHaooOzZdb4YA --> ssh-ed25519 dA0vRg DidrxIBYvAfPkwNzQXy2+f6inafUafoX8cfUChA7l2Q -/wfxyJAyrQ3Uycxwov+0b9pKKOxPP9mySRK5g4BzMnY --> ssh-ed25519 5Nd93w i+oP7x/eHY/Roj4mdpOFHrBe5rxUL7/4617F4O3jPh8 -yTVD0dR3ljoUSv1qyuKcOvr1fMRm9C8YAZKKjURtCPk --> ssh-ed25519 q8eJgg Y0yxgrLm9/E8nYBg6Yvd0GPbY7PwCJCumQ9CtgWFxxo -9BfGPSP7pTTM8Dm9qXagKaw95hbqvvp7qsFkhQgQco4 --> ssh-ed25519 KVr8rw pXha2ebkoIFX9dMX3uRz+0rcbwcQ1mwPnLWp/wCzx10 -BQQ77pXJl75c6myecmKlEpqHtWB/rSdG6Pwpbxzcfbk --> ssh-ed25519 fia1eQ gCgas1CqGNZ7n09J7iXOvh2xeGgoszn36ABZwiskBBw -3a7WMN9aB6ZvwFyP98At9V9K99hD1vkvSJgnY16/JKY --> ssh-ed25519 CqOTGQ DU1oon3RPo4MCdzigrM2+b3KnTzzTSG/WDSvtBaF1VE -zwKaQnXT004dMojYFXPz9UERL4ULe7mPZ+vwlZMxFvY ---- FWICxx8MWe7awI8P5t0XsbA4Ye0zbxCdMbapTs325HI -w-d!=g&ܞH?IےᕪύҢلLL-ٸU? )VJbC \ No newline at end of file +-> ssh-ed25519 V1pwNA kZ6MC1GXuminn2Hlomkep1wIv1lp6KpJOJcpXkhQWWM +K1B58FSyb4QpINlhuvVv4dGFNjTChU1KNoezZcS/a6Y +-> ssh-ed25519 4PzZog pbxwzRvcsOgY9hd48BZEOH6VHFLn93gJ8yDHQyNIiSI +Fa/Z6si9vyox/pmPvWTndyYCQxo7tcvdlRuTgw6IY9g +-> ssh-ed25519 dA0vRg OW2y/LkN/287NVuRRlSpihR+k/MZ+a0R5cIrHFne6RI +U0ZqipfDlpz9LeXKNWkl7tYCnsBjSQz8q4mETBVEalI +-> ssh-ed25519 5Nd93w jDy3i1Z1NWYqdVdw4h+maaBjokVWNrSfHtSQotb2bWg +PtgX9L78wpJHiX4lmP+H0bfRZd/tNfHrUEAShJ38ss8 +-> ssh-ed25519 q8eJgg BCaUEZ3H3BglgKPAbl/ITQaEv9Jc2rRAoFuPXhy4WFI +DMqJu0vjDJ8rIXLSL17Dx4Aoq8Uhdo4jU8g1jTSvMK4 +-> ssh-ed25519 KVr8rw dKk0SN9SXTQsPwMFiKKMuoRwzTHJB8kr33nadRzBoDc +m2xPKYFMC/y5fKkgaBc+5TVg9ZH+zVSM9I4I3htSm7I +-> ssh-ed25519 fia1eQ NGl1o/38iTm6QiQB7pl0NBkohMZGLMeaXZ37TV184B4 +zk/DTLhuGfhDU3gNA7S0BjGOowteEhR9v5oNmOkWTGU +-> ssh-ed25519 CqOTGQ JbZYKqGfWeVu/JEAAeC6wE4QvKLEeidvggQnm6beJxA +ArogOkTDAnvC1SKPkSGapNix2W6yvku1QFOFs9bvuGA +--- yWZoUAOfSIL4FbWSAvhVkOEbUA1u3XPGKB1gNka/xfo +zlȑ LC$?Hc|۹.-j l}9:KӮU^IO6 \ No newline at end of file diff --git a/secrets/gitlab/db_pw.age b/secrets/gitlab/db_pw.age index b98b8a6..ea6ef85 100644 --- a/secrets/gitlab/db_pw.age +++ b/secrets/gitlab/db_pw.age @@ -1,19 +1,20 @@ age-encryption.org/v1 --> ssh-ed25519 V1pwNA To9tGfYsutlmjqXZbFJ+TttdFAnbwY9odSMEOvItmgw -Q8cWN1VF4bVisWVMOEA6IXqhe2JzPl/9M9UUXWWV0Bc --> ssh-ed25519 4PzZog e3OTx6aEjhNCwyiysZkbwSC8ecVvVaVNfZV/3iNpZCE -o8jHkyg0lptJh2Iew9ZtVi3AUOSAtmDzBIz2nE4mj8k --> ssh-ed25519 dA0vRg 7smMdyMEq1stuvSBUsBZXJoeap4Aru6AsljjFPPpfiM -Ip5qA83bAGtYIeqv1w0yo5obRh+FWYJICgOU5+JoeYQ --> ssh-ed25519 5Nd93w z16A2vTVGdxgKmgHoSySJ9K8cwrQglflrWDhBvZ7ME0 -ILd92pWzyVGnTOXwovlZ3EX7LsFX06hqedW7Ov2CYII --> ssh-ed25519 q8eJgg Rf7U0SdZsP4NEgiDl8Z99tCoOkIwrrl5s0aYpXOG6yQ -tg+Y2WHuokaCVI4CCxuv9UW3GIa8CMuX0JJEWTTkwjU --> ssh-ed25519 KVr8rw YUN5VlTaxW7Niwtm9+FTGOILOklbEGL5EVw1BucGvXA -zXYcis5ANsDGPeFoV1aRzTJiOQY2P1ZLHsJDkE9RFT4 --> ssh-ed25519 fia1eQ TnSlOXGQ0BuVk25Yj9YpWWtYmonlM5h+uC9hUq3MM3E -8KrW7R5AgumY9wLVQyUmKlHD3zcUNIc+VU/X+vvY2LY --> ssh-ed25519 uZzB3g 9ms4lu4KjQED/2AHQwr9oLd/6ws01IxuK7Z05CY6N3U -H/4AnWwt5fnZMvWjmXdoe/Os5ttJFYsMmjaHHqBdAxo ---- zI2RSKtND2Ep69vshrRkM1KOiReF/m5vdY4jIH7NSvA -n I $͍[PU"κZXNnNg dP}GZ?< /!c =  hnZ`0ˆ1nlvfwjE@21{Eg|Q\2e~=Ӭ]fdRn \ No newline at end of file +-> ssh-ed25519 V1pwNA TtxqHD3bJI046SXF61CKfpDRI+HHTRpc/iznIMdQiUs +WWgm2OdnPjj29tIrAMa2sJCNEaR2iTAl/hMfPLv2QoY +-> ssh-ed25519 4PzZog 0I9h+D7DjRwupkHWDUKIxJlVBUWwbCTR1nx8UcEm6Xg +NIYzimYGAo8ou93B/tzjmB1K7hu2tXy4XMRiwlDqI0k +-> ssh-ed25519 dA0vRg 1U+1fUueu2k7FaY8GVN4BAbiF71OvKbGOC4oZ4mV3ko +/fKxmEFW/L9A/1fDIteeTcz/SOv24HNct88oakdAkn0 +-> ssh-ed25519 5Nd93w IjwMC1ZruM915vwA+lExdIq/OFT/4SlWgwOm9xgUPAQ +mOOTbPdcDjORB1GhS0m4/p3MA6TfHXzWXvAMzKhw/n0 +-> ssh-ed25519 q8eJgg mODUrCPf9GAix0jaPaKUs4ws1D9BM4huHbK2mst0SH4 +7qbxM/Wa9pMpB7TjQZgBojXR5qDJUBZvplsrI6EdSO0 +-> ssh-ed25519 KVr8rw ybBiUHmEOyesWxdTEa1LPwI5J/PQaxYi02QJCAuYyGA +LoRQ15hQdVGLj9pJY3TabBFhtPGBvU+bnAa2dzrkOY4 +-> ssh-ed25519 fia1eQ Qu2RTOQiZY9i2SDs0NVlA1zcert0oFcFA3mXDDl59G0 +6akg1POXrvIrzITX6B8yTDw3cCqlxsD0k40mYnv5r/Y +-> ssh-ed25519 uZzB3g xNdZ8eSTFQZ/RcrNR4BpedX2pfceZwPjvgt9Wd8rMwo +kMxoKyE0bjXEZ9tNykOUMZ0uHkqdx///QJB5QnLRhcA +--- 1DKMo46SYm7JlzFo3nZwtaK21TFmapfXqxXzxMXWb0Y +8̋},^mmHv`#?0>ّX;λ LV8=]ԬsEhɂL(`"ZKc1.|G??ep_ۤ +᷎zuPqϪ9SVv~I4 \ No newline at end of file diff --git a/secrets/gitlab/ldap_pw.age b/secrets/gitlab/ldap_pw.age index 3533989..3cdcb5b 100644 --- a/secrets/gitlab/ldap_pw.age +++ b/secrets/gitlab/ldap_pw.age @@ -1,19 +1,19 @@ age-encryption.org/v1 --> ssh-ed25519 V1pwNA aYjPUkjZHoQm86XHx3VbGswLy6VdKNaaHe3f3CGa1ls -HMuWoZj4tY/nWj1nrgOxob1hJJD/mPD3kQnDgJJafeI --> ssh-ed25519 4PzZog GojGaXIg5RK7WjJSCZxJksXvsm9TZTlbHITuksMivBY -4oAuKXtJ4ksvusFX3OM3VpdzfArrglxJTN8kCdhIjrU --> ssh-ed25519 dA0vRg AzGx90D7iz93gHtSvV5oIbBkwgQEpVY7DTRQIZ16IiQ -GlMsor4NxuhHs1HJg62O3ZtPF6CHHFc46din6fm89G8 --> ssh-ed25519 5Nd93w oAyaZjUSGC9moA7pLR4+dzoKAggFuKUNMnRbn/fm2FQ -eHa/2iLWrqv/pPXjgfxtk68MgBX6EYW1YWfs1kXkazU --> ssh-ed25519 q8eJgg xBdXNLjZqKi2o+cbCXGdOOSFnlfPgaxjQb+IK60MYHw -dxV3kTuaJ1ANFgRaYchwAa0kjGZHZ3POc/Wrw/per+w --> ssh-ed25519 KVr8rw TR3AjhWy5K1ntzMx3mZZZWGYi7EvcWiFpTHyU/+pV3Q -Y/xu0hrhaFZdO9YY8vINp3796HZ+LAL+QvBmIWmoS7A --> ssh-ed25519 fia1eQ zF6CArF4sVXzIRenfDq7WHz06WXFdo7vMgD15NI/sR4 -m3sGJNMtAeY/yIq+D2nNncGNxX+KKXt0wCO1WMZmSTI --> ssh-ed25519 uZzB3g pTocgT3gT7VHD7BWt+rGRIqUZYuh2G+1VeTJxyb7Xxs -q5UYfrUVbgaqJCxWKegc0q0PvPR6AZ7AlI5ff4ePfjM ---- 9KS9xFBleYVsxyktikZ+TX9++1wqXmDBZxU3g7vwwLU -<{rU/R*Jd),#9ns!LsW#_wҁ MM8s]ߕ837@YNXl Il^0p"aMfG SdB/s,4!̝rP֢-Cky ssh-ed25519 V1pwNA 2mRcx22kddqldRvOQY7i32z0sMwCuGlbCkJJ8vlJKDY +aL+OgWP6uTute1b5dlPG5Tz12KHeFlCG/Su9+MBTceo +-> ssh-ed25519 4PzZog 67PxsXDuqXhmcyvNAu2jZrDtd+XgUQnEakPw4pR150Y +nOCZQmAhHCptlAz134hin/UKKpuIL+ueRJ7Kzhf5Aiw +-> ssh-ed25519 dA0vRg tiN/eg2X6g4x6KndLJs6ze8i8brhXcsBqP1ZWq2s0T4 +1lx0Qqo81L12eIG4XfQUWYgpimEfgaPweZQ65GTHSaI +-> ssh-ed25519 5Nd93w Iq6wxlnODEkmZaYpf1s3XxKmROa/JwXLdXOtCpXuM3g +0oENjjsAh2c5tIHNEghw1TE50xRfU5yWHnZenYT2UgA +-> ssh-ed25519 q8eJgg HrJ8YlZTp7YhRpKpv5ZBUbxv/777ATRtYzcbGH1JVhI +Cytu763lKuwmLLUhFJo8VunzHxYn75YRLiN3vnhxyL0 +-> ssh-ed25519 KVr8rw s60G0Eusw0rEW3woOFeE++5C4vI8L6NOUXATml2egBo +tPGsNcE3H9crSOCXCkktBzjRq5JyaGvgmx0ZIs3ehOQ +-> ssh-ed25519 fia1eQ P7oFu5pYYdJu2fcqTYbKuENBWiFnNVQxg2N8QAXNVhg +aZUyPG6FpfFo7GixaofYbCeajExpKFME6PBb6fTzk6s +-> ssh-ed25519 uZzB3g hP2SPeZNhsmePX55N6g4Y8q2KIwRONPBEAqSp273Mzk +y2c9S06vYQl9v0G/7IrbEx+kGv3DOnpz6+9+vo1o1wA +--- 7prlMrCmXuXHtiD1+44Pg0LV05OvyIEF9fYkCiLEv1k +_2":Go*.T5.(N4OS6U1 CcO[Q Z#I1 cӍM;/~`=&'?n}e#/q ۱`xjh:?Υ/J3.+OxkYbkdϏ \ No newline at end of file diff --git a/secrets/gitlab/pw.age b/secrets/gitlab/pw.age index cea4bebb871839c8228e97649ba620e6bc6f0809..6ef6846a207a94a4c0b5d046a9c194c60c504abc 100644 GIT binary patch literal 1111 zcmZY5&CA<#0KjpTT?}~8tN73d+(AoC^U^f&;FdOTO`7yAO`7N>?Jw_dP0}=NK^Qu` z_<$gYKJbXU>>vs=E) z2OJWYduF%eboiz*aMHw=^=?0MGR*`WiqZvS$Q^X6%tn~9sQ|nbC`u{U4B@kMUF`St zw!Cm6dz3EYXtb{Zy15>^HK{ifhXtc3Fs-ShDq|uH1&+T9uy6*36Ar7RWg5tu6UvaN z@_jCf6h08AU4VsCxid&Ar|#!oH^#xXtprFuRBgYr*wMZ*@q*37Qzn9%gb)pzG^fC59*fqTrDna2RSH{;032CgU=wCWn*v4{ zeUg*+wT!ey*R9bL&Ue+U?5a8utP&!iiG#aL^zmf zMc~sFV&GB=vUx?+8GK^Ss{~cRM8N>w**$Pl(sDAdYS|F*bA8zk%&jooDSVUNN*2R8 z{=f{!hPJ8$XU$j+keVdq=!60?*A#e@-l(FC`*@aSQ8xt^&MbKm9vSQ5)?j(3x!>ma z7GjTTYL98>7NvFTRb>g;cFY@{b|xz`G454O%w}ULFcwqIW*3keMFYUk(%z21H)NR% zGG;og=84cxm@zx|);P5kGOEqG544r$u7kNXn-%$xM6q?q$fG&3SZw2ULD|_DC8SBQ zSw?LlU6Lff#!_e;#yHhlg}RbgQkA=$?YN~V;$%PJijwHH5EoV=(!j?o)Mzwn(N0e* zJXGje)WqkZK=?Ub7P^L^NR`H(mFp}4X6;Z&Q|PgCPu%+B^`m!heD%`3ONXDIGVkmj zT0JY?JUPZbfUbObd95b<6+u_yY0#{UaiO|KFd2C-L=#bKhV;e)#o^Z*UK9@xOoJZhrq3^~ERO yT|fMYbss%?`H}N?PpnU$8r^%fm7KZwoAKt`ul@7qe;2J=<7>xfn@#JT4EzuOIfJJF literal 1111 zcmZY8%ZnQY90%}=6gG&shhA2Yi1koInwd%FMSaaAGnq^>lX)aFnTUtXdoz>CJTlLN zNIh5uwFo^`L_M@1qEM77D7^@xBCLB6QGC?}tB0j1QVODb-u?r>58v;X-@>t)R$#{7h>j0N{EDloq)M<;n}r+eO;W+BE=2=Q z$UHa%T5hWp-O_0!N(XdF>bPbSKqfhL#;aVjEFnI%N(!lBrKr4FCXkh|YgEgwmQ0ZL zEQ}19(Q3K?IVL*jv?DxQ4$U%)3)3tLzmMzfl@v928FRV_KQmD5xCZkk-p=dtDCf|L z74oT3Hl#TlQp^gO+xB!2@KwSqksfIkC>niwT?>N3(}c0;F!fsB*+{Ey66;aq9hfr~%pn$5qj9$O{o~q|(?2j&cVgN(^mcgpOJ^G^LhC zP4hFOMC}%myCY9ku?4Q62F-|NPz9^??hwXJaJWwSMsSxlRAMa7>!ue$K4~J{3>EVk zs*JQXC8fZG0X-jHiDA-M3!6AMrle7G2$NpmrBMv0Ju24MnkYGg1SAo0h*O0+@_ag(=%vtbX6~MMnMW_tmb-`)f5ljfw zn$2dN1+AqE&cc+)X?JX@Q)kgpciGCJSF}kuqcDU*3mBrtQS>}PKv%;V4OoVoK*_sJI@zI5uo1NhHhw*UH>$nJf0>o#@x@0CUJ zPcgi8&V2I=<+X3FU)$a}{J1B6^5C~uPo6k+{|{$Byt&&AX=1wM=+;?fAm4YB^ zWuuFwC~NgBv{=yBS=eZ&#VR5quBF2EZ-2qZXZr5QP3)r2sxVDnOA8-vP+;^XSeC)a zb+E|YYf?DW2L(<6LPc5^I;M&6-?Yx8CG@yWfs8vNS)fVH1$PN?OOvq@Uef&ydEtvO}47I9!yVxjkLfm_7u+$4mKHPw#yAx z2HHe|8zWqvi};+Z@q;jtotz*yC)RU#PjF7NJ`s2~%frWg!tTmuJnQ#8r9Bwh1noR-U<0SevpbtrlG+Zb>M> zG6Ey@_WF&6cn6)n^1uaj7B3+H>Ss3X?MKZABJAZ_e=3q356Jm zYl=kOY;7M2f*||aRsry%fy;Yj~E zv?#p30|q3CkI)sK)(aLbKqjV|bux2VGsS7{(ok#pur+f68v(kOETvUyh@ZCrfREDr0a8SsCC-}qNEuJ+3wgyK-`Y#c>wpq zfe9^cJ}x$x0b{H+MnOZ#0;?dRvKXfdrOt=BAtdvOEj^nzi5_-;5V{zqrUe@ih z@LU5dRxKeKdl^e`Fj|_q!iEaYnIfccULOuzFbnHxn!39ZGcH$#fRLU%r5n;T;!_O8 zNGSwwoS9w&)OeQUgja3qZM9)(l^4!6asfs}jY^?n5x`c7x-65O8tq)(C95&4_D3ad zlnk(W(}5t2)W8A7zk zN3dFIjGd?20jQ888-EfCr>KYsrlqQ*0g1JEsrX9_DIrcL>p*W;OBo+v**>|fJp%(L z;4e9E65Ae0(c@*HteA6cw#u2jMuP-cWX1`Ol;pFnwk$rh#n7z4VnLgNBr4X}B6Nsx zZGpI}l%RHUYxL@gd5nEiFr4E8w|hPlPirLt2gUM*u3%Z|Tyy;$?&xS7?(48NRR8~- zZMd9SA#WH-N2{lm6llqG+*SKonS`FMAV<>5d!ZCBgfx%}QUx<Uf diff --git a/secrets/gitlab/runners/runner02.age b/secrets/gitlab/runners/runner02.age index 28aefadda7cbcbc9db38f03b6f0fc92186c827a8..4df759a7c80bd0cccd87c9bcee8a133f8a88f794 100644 GIT binary patch literal 1065 zcmZY4JLuzd0KjoUL@es!Z3;#_5RA2X{F5|`kazQF(zI!s)+xy^ucmFDO`3>{2*RDy zoq`AIBrXn$$f1ik2_ndWCMjN1@@>P7yE3luLVUr;iNQLqWGFfLL#(%%80^ATOP*Fo2V6 zYS9gLOsmx1HBsn~9Bp2gV#?>Xh|=y3v9aRRmg)LjyO{NxEP^!T#Em#)f1D`DO7?Z1 zjjnUSy>sS zVxDzCmk&r2Oeu=-2Pj*YS$C{6*@!`2R%2JNgOH79#SZMd-7=z89%NJO#8u~7F%Fa{ zf?Oi#{YheIwW=}98Z=h2KXqmi(xihCe1+L@<4V{rOE2FNKTx?imZQQO6^DqNW8SMYHwTII-Iq853E+djwK01(&W>!M)UmLueLavQnX;;8aqb0;S}-IT3FH z&YWp+tA;66`765>}^=H1}Uby=3?Z+Ox?fs*E@c6S|-F^49d+$Mag!}aCU&AAjUHx$D p!_S`n{Mv6p?`VH!mj-R{|7aDWqwV=Fv1s)4UKN%{R@fO`Ava8cuFe zmqQQ-5#hVj_aR;>FM}1oeXbfl# z;;94UxU~sP8F6J0oys~X0vSy7-73Ih9K}SRB%#I#y6eBgb7l#tJY7x;D;OS z$2!_o6c$KP>m-TnII6sls+ECYAbt!Ba!u> z*IiZhtGtw#I}zVddr4a(6jsN}o0?=6RMEg`&;@uKuPfk9+>NoOxfv&;6C}}*Eya$x z1hY}-n(6|J+=EZZunhZU=8LFi8{*~K0jXz+F? zmWBiT5*SLJ%3v%>!f`RR@)8tuJ6>7)lx$ACNE0xF+ZYfi) z!t9SdwLnfu&yjd;J+*|%R|c=aNlQsGO9hFi%UNXNRH7^R;VdzGlZn-yW65~C=uO7! ze25)yXGJ_$4U&_APT9w~+@^kns9|yJb}4brTwgmANH?XS;cy7=lJRyQiLTw&A;tQ2 zN{j-0fGk5YZ1lp~M;h8Ap3Sz21K}TCUp*GDK7H$%zaIWJ^6&k9|D}tMXP4R^KYj4w z3qL*q)32Yqy#M6MulN4_Uijhi`ODzXpTBxvxW4_%o&P4LC*OVL!I!tbx%&K*0($VW scK3^0kFMW%@jEa3=UHL@?W@WHT)g-0#p~}py7Ss+&Dwu>JMVx0A2T>;*8l(j diff --git a/secrets/gitlab/secrets_db.age b/secrets/gitlab/secrets_db.age index 1d9d563..3043014 100644 --- a/secrets/gitlab/secrets_db.age +++ b/secrets/gitlab/secrets_db.age @@ -1,20 +1,20 @@ age-encryption.org/v1 --> ssh-ed25519 V1pwNA rEsQ/q9FmFkVdXfXfYG3zHN4KvXTfRmZBLEibdzbQBo -fJSlFRK0Oi4OpGBf7Z65U5+OFu4+Ts8MqKe7B2G+gYM --> ssh-ed25519 4PzZog aOPnUpH7F3AS6IauahbpQYYYSX7hSJcix2C1CgUsoi8 -h83ikYOIqng/YKfo2RJc9MwbdaKV0V3DFLj5socRi6A --> ssh-ed25519 dA0vRg oK+zniCPQd3Hw/Bm1/cG6d0If6Wq7VVdxR1nrH/MHAQ -c9Q6gyqil1XvTsl/QB9dpvYHa9Bi8bbfWNNfEx2wwo8 --> ssh-ed25519 5Nd93w B1mA5u9RHQ28ZopDLlJh8Z5Q530tJ9wjOzhMzsJSTUE -KbCpkJ666a/dnnatT5QIcPbEOMP+dUkiMERcc9tRMvc --> ssh-ed25519 q8eJgg ps+fnslUfJUthZB+bLXZdvwXgaM/Jsec5YVJiTZy6AU -vpwxjfgKkieWlxSjWz+b6U0p16zJq4Q+NqO2zXISWbg --> ssh-ed25519 KVr8rw sIxHbaWSfSZVoMIchJnvEPH0S1ZrSa0sS+Pa++yUZ1o -3pn9e3IzOF0JxohMP424AFWw6IrCPm+fnS70cfnKZ1U --> ssh-ed25519 fia1eQ XPBMusFIRQ2mqQgnYPpbn40heCrqiqa2P5tiq5H9fgY -7T2S+TJ5jd7cfnCa9iWLaf2zUHG3YIUZFnt/ek3pHUk --> ssh-ed25519 uZzB3g NxRK4Dsc4U7a3MPQoApPTNdybonx2RdXUGc61WB8l0I -YHoL+K85aXdCTAm33Oc9d1/BD6xFXCHZ8uJCqqn8pQ0 ---- BHDuf9Sxnh49jes8mUA6Rq2cTNqBxpsz51UZgL2np4c -C <\2fkL+\زp&6~ ssh-ed25519 V1pwNA AbGjaacp7Tp3DYhUzCOUzzNlUGXYDTU9vEv1DJpzqww +grRQCuht2PKdwsdbABRIO/QLX2HikbnnPDYDfRNeeOY +-> ssh-ed25519 4PzZog loCPiNwbEIOtBgQnBRSuiCuizZdrh/l4lbdvv1/SYCQ +WMu8NXj0LYaWS0qxcuBsG/GdH/E8C8OmbYb2mYuRkrc +-> ssh-ed25519 dA0vRg 4UnugzCjQxs4Xqii2PWA7prXrjS4wP3wJQtUbrQi4QU +HqjVoiYSZ70DdNRui4yZjR5oGiCyR6Rly+CoM0MEbxI +-> ssh-ed25519 5Nd93w +PwbmFGDmpdwKvuHWLQOJExFZm2P8pl15RpRqeM17Vk +HvDt20lZsSpyZ8z2BShXHlAOzIM+15UpMonz3sqSwR8 +-> ssh-ed25519 q8eJgg SYtYX+5Q35sygmo6PdlUzG04g2bGnSyVGgnYPkJKoCI +nrZN3mp0jxSQfblj0pDE/7/pO2jAg0byTm4HQOQzQBU +-> ssh-ed25519 KVr8rw CzJ3Fn25Lq8zZOAHKKbLsiHhTHlAMDNHv3yLa7gaqSk +O1gss3s7y0VfE6ZS2GkdskeCfLJNytTNfFWz/bzEebY +-> ssh-ed25519 fia1eQ WWju+k3tswiyQfc7XR/txDAIaIjX7Xfnv2IcbKH/s2k +mAxPhLCJjwX68AwGSkJxMSF5PkGPQDSCkBMoCi1Ozf0 +-> ssh-ed25519 uZzB3g EbWWbRWM+8jrtg/ZX8AC8VKMOtf3ch0QrBn5QCia6TQ +8/TISW7rN55/vfkBH9HKx7GKaWAMIEVz6xmtCh5fjfw +--- +L6TvqJA1YZEmK9PDIzh2r5wtzB1BI+qz+i9JotMejk + }sIc>}5bTТrN1,4ONRzf=اNx7һ[)G gw!sN>#ggGҩ\kت2g#@ao47wx6mfCQ2H +>maH/uv \ No newline at end of file diff --git a/secrets/gitlab/secrets_jws.age b/secrets/gitlab/secrets_jws.age index a06e1f383780915f1c7d0ff44e51c06a276a06ee..25926fdc3eae492e990abedc4491e15fd9276b93 100644 GIT binary patch literal 2660 zcmZY6`CrV51IO_sVp5@FNogqCrep4DM#^`tu9<0$=9X%jndURo%zWm)upN|yw3Y6% z+QN6WU!g?Fxf^n2lc?NFE0MA&k?;3s-@oAbc)j0Zxhzbkk?3t&qXN`~gL*m4jDUni zLk$KXOeRHQFbF)9htOIQ2~Zf`%Ffim0T=>7Rx6BFGF+dIBFO+5nrHxYpq;6avH-Q- zq!7ptX%s?WWK%SKjF%k$dB4iwsWmL-H=>l{J zlglw+@n{l_5pPLg8!{zob2^}kC0M|3H7NmZX3L>A6kf^X>m@p!PJuAO;0d4+Zxo}c zT00j5x9i|YQ9_1+Wshe776_Ibqv8q_BA!~nkI?}(6NxO$6sj?DP-3x*In=~-B45bB zL`a3WZ#7J!6pyk%NxF#mbe)`s(r5BHN}3p!$&Vl>O412@wE&=6$XcVE8m~#BVN`So z6GY;b94U70`MHr;wj;z= zl@JZ;GgVr4rbI3>k$7@7)hw6M5gf9P$-pagaH<@k<9^#_64{9;IaDB*neA{mJA)=t zawtlJmMg@g85I2g9!F9+j10TpK*YdgfIJBYk)r7QSTR|}U?rMhj1ZV!6hg8xsU(nt zkF#Z)edFW-ATOSK34DQlwtP6WNtE zq7Wli(jm()pH7JV81Fvq)H)ly;ML0{vhzCWjpv6_uA^Ic6rE2i)pYk>&p{5br-{6C zc%`ta#BN+1GOa6)84F;GcR&$U2P<*1+gOM7+hGnZe<(FT|74C^_qjE1+*@~lY$))! zQq)@>AL$1|ZoPl?g?j;0+ck{)|Xu$ z3iA5|9X#CQxeXd7F5PG-c0PF|=o#F;tp)P)uz$zf?&lLfofT+xJf+B!(Y#`N*ZUP! zjXn#vcAfgQJ^(VtiOW96k#t?(zdAX+s7bfy-N6S-XL|xj#pqYg`)+k~RPVD+t;`z; zNd5h?io*Ml^?So1K4qrl(7Y3t{dYQ4ZNFNd?5nv$@dsz~p9H$lmlN9~dPoeAWq;yxU!{F>j)8{Z3;)4|kfj~ZFKTqh<^zi?*F%&>}Ax-?wP(3AU3)-a{X)mW4C1p z+SN`+Sj)p@l3Q6Wr85tY7Co?vN7}*9p0VAIb)E}WHOHQ*bd3EPAF}(|);SBCA85vY zMoJ5NTIY{ms(g9c>%{eyZ;lO}b)*SmtqV(kDfqsrZ}{w)2Zu4YE1eDLds4?6k|Y;R zhUZbXsq2spTS|ix+6(rrh5h~PN>{y8io{Yf;_i_$XK8f^DtGp4?^RB2{*n`D>G8{} zT*D9N8T|S`*lxPib_V#H$5xcf8q?+-xg zhv4lMIsT4si=Sd98CfeHaooP2(4-azVv{SthR8Q}MPXap0%);p{9toMxv$ytaz|FxyR=WaDk-UfgJ@z#WKfGu%s+maH2tR}6!v!K z!KCV{s3F(*`WIWKpZ(_WvF}sa^J7E4jp0jy`*rV+Lx+&wDU;EUf=~TrH*Mc%xaX3# zExP(flAx(;;KGrtC`X6ML2oQ0WRu&AKk}=jd)`j{l^Ra;_8)4=% zr)}GGW)17fqV^YsAFfi4yNfZBsX_eVyseI|S3ei*rQiACkKQxJYpavUg#P8Ov!}** zdyW+j+QCSh{>|JQ?;nmdgicHi6?he03(js5H$Ehmm&^?AvJ|;z&%lz83nH3+%39Dn z9z8e0*zQsCHkB|(Rx|LqF|C18`H$1lUbp4Hjo$lsd(_ErGEY;QWjvDoPkI0Oji<)4 zB4V!YIQf_Btm5L~aO8OSM#pzi&BCbnoR4d4J$k~5ApB})r#9Vw-_`2MY*~HW?x1Ue z?UR@Tf1cYiQ9C-dGADG~in+GxH7>M?{d_m1xbV?F8)4C`Qz)(UT_HF3zM*K%-`Mw= z?0kIG`|x*+I{B%R0L_h@jx6rWfdiLFS#{K1kt@rd)QnYjHsg;DohZkKP-aVS{~TC< z+GpJ~Oqo-ns;P?_jC~p<4Xov^$9enAD>a{PV$3W&1hR)Bf874vrHKjVqp6lBWgX!^ z79!qU-c*K2b#M>7p~0?c8GX@|(}^?wT>%9)h7X5Tbv;8ZP-VNN&vx6gJh8Ro85=qs zCS!$TrnrtdTW~J2#eJ!F%_#(uLyt8qNv$n;%saFH^I6g3>BVb$ z-L?&V=z;Vvxztba0Ufu_%@Op!R-|!-!-G32#(clO33s^(Z%x*(?_M^u2QvHNqWt7Hv%a+ZII@2uYl6eiPe(6|3t#=)&xZE zZTi#milf!d;X^fRd)r1ighF+VJgUcK2yW8f>52r gj_5N3)u%n~OpaB1?Y}(otF3(L-Xq0S8Tf5&!@I literal 2660 zcmZY7`8(7J0D$qfYzk@H3QJpqbeP86S2>!)%zVwo40C1EnEPPH+%rOVByuEO7O7;V zwxmL3cN|fQwB5Q7MI|W}$?nhXU+{UJ_j$z%8AO&WG1&Dcl`c6%XHY;ba5qRe$Y@kT zWKskg4ab9caJ`j90BKcFjS-AjV|Xe$8Vn`SC`uDIGDa*xMPk(qCKRB^&|n2Ug#^R7 zp$THD455;tQ7SkMMx|?$xzSPjVL}>932-2C|EH#GFK1RM_Fjv6aj*Sj_X5lD6G#xudM2KQ?HDWMTo;Meh}Z&CVk}gV$cfRA=z1d3NH8FgA`O~IaFfIW zv7{uMg&RXnG2yguy&^_u)k$!6tB|1Qn3K(97$XsBrh2altKYQpG%{O5rHEAPowh;ID-|Wp^3G8k^|4f7zp|}ArDY#nFfid#% zl^8CI0ci=zLW@+UwCe>NGJ_I@)vAO5N{)g7Mn2XoNy0{{EC{=ZM9>i2_zI#JE{@S9 zCG+%{XqC+f*zu8UF-*#}DVS!WhC|ZQj0%cgMFPIp%pwO7sQ@J*VMrn~g@k6oaY`ab zs)ZvN8nX>fktK;WR3=^~SJK5X2A)t!aEpR!QZyW}F42PFX*JPG5i1rQX^s`Mp=Pp% zBQXofVyuKGfzvqum4rY*kq8b`LU8D`03VAbS;;_YRuck!HhZx&%xi*3{IP%o^rCoLgmEH^9Vh>+-qvSxgfPz|0g6V(e zc-wT=p8mHv1IFyDts8^D6QoKMtuAOuMe$UTt?EetV|P#A9=!WycaL3voclZp^Wod% zpW~;Dp)O=x`&>5|efytsd`IcXnbDhL6=ONG4jtN9wT+o#m2ABPK`iaDyI8uiZ=Ih7 zeGkC4-#PKikyB?PS1Ag-=ZYQ``L4r$m_y&N@Z}NLclddwwOy4<&?BALix;1;hW(NL zA+`Ih4ZTCfw8__x&QjviPy3vn0WHZIbsn60XkTAaX0BXbPny21H2C6~h>lx5MeOzB z&zR8kfgR0@GuAT1&v=4o4PQ#c{rRokvxYKc<5#K!>Mfm!<s6^0#fQg_;9(?>Wb5A?BbkZQ=b+<8HANc%>ElKSvzX^5J!+*vsE^T(+}ULE6G zUN-q0}i0D{q_W;ZwVxT$4ucjqh?svFD`u zm32NUSod+1`9KdLv@GdAT=K9%JAcNau-k#Jv*$k#pG0UM#2;Ifl0e^n^b}-C3=rb1 z`seKOrvX7?F!zv2z9na?mcjMBxmG{xu!Gr^hfIeJT+Yg`PI!^M_{QK{XBpNHx%QQg zv^p%rJ1k+Ru5}*pIj*dPahx~urBR+LY&sKYr-n7CJTk-2bh?V>R^R3YeBI}Mu=fhP zb=gbP+xN%%5Z^W@)m2$trVLJ@jS?NH$9xms&4M&&`Z(*ZuYU`tW!?|DTK~F?(RLw0 zUvnwH?$=eRGSKI{`~&Wn{>WlA`oHhJI26S1NpqY~cvcKf_M8K`r8@G4>3XLeyy-!4 zcGOP^FOGQ!k3MXw)33X>Ipo9DnHR&gui5WgG@GBa?D*lY4r>0RjB!KB8t9{6jzXJS z@Vj6Y$0L@94^{*Oj+fkDBF>zytM_Rcsj4#_PC8z5VR+QlUOM9oeq_~q?4gyPk9Ebj z?7j2bX~UI}6jtvh*2nWjnTwh)zwZ`qa83p<&D$_XaH1gi$6%~)C*jHNr#tgKwLhG- z@ALR_96PF_>q48u76AjILZ`H=wf1g*KZm8a{CyrbG5f{byq2j&m;4?Yo&B40CtLri zcIk|0e-}`7@5AXH(lpcAYkm&trWY5>E31VQ(JsWs;!7u+Z-(SxSZDuQO}O3^kmE5o z|4e-9vPqJAFRqyd-m9z|DrlB2U2d3fNclGX<@dJSItR+{v!Wv8V+}ii1x8N}3 z>#8SfL7D^U<;=<+^-Ew~$D#d@*sm2|o2H+eccEYUaZTd_o2R~BO3tbosu@;(l)PS9 z_~#UUV8nto`xZQqUidl(n(gM{mYw?MakjuUfL*IPTGIlZEF z%ht(eVf#G>XmiJ+y$kCgY4!D$_ba!{k6K$vAAY-3>kjqrPTQK{|5$zN^!WuDs9*f+ zFu!u5l64y{ci*kuuu^((2e!Ro-lT#D-*%=QK;wI5jr8uk&a5>Fd3*Ms@Wle%yDkc= e+S2WW+8$CW8-yx6Mk!QQI2P*B0GYi}NWfF6XpwdkJ5zu*HuzCYcu_wCS3syOqa z@TDkmnmN?ie-%hmci*}giL`%34u9=m4Ki){@SYb|mB5?|@7 zKv1I=1h-^NL70V+GH z2{b$nYhMu5Y|(U(Ovu$pif61Y&TzEQUOMoPntTKz&d=<(*<*Xy6fJx7T5-zQWM!5F1DX;JzQ{!;MqFIk%mmyE_ z7(@>f+LGCxtTM1Dl(-(5r#6Fu1_|f?t7N0qM8^Tx&4QOkbfB$Th=b4kajn|iu(Ih@ z?3*GX$!a`u$xc_J<_&G#bXlmF;aJFperk^)I><~XS_ZO9b4hGy)RJ4)C8?i2V1FO5 zVL2uTuGi+Apf`=+dN!N*70nQc8F^g}2Fd1lVcSy}#~b`NXJ6hqZhrhG^2_ezi97Gy zCaj~serxwWgOACh=N~?%{AdO@24}ABogp6o`{{=lFOlEEFCwG`?0tFo#V-DNK|Ofm z$@eFtbE~_*@9dnv_vc$be0A-a_0{X2JbL@qPq+H)h0E{dw{Kj!{@mHiPrduf-pQ5L z&cC0Yzxc<`o$p_J7BG}wcW<8i=h4l>*B@NC_tE_iPfiZCukU|%boThl2X|iRUi%O0 C-h){H literal 1110 zcmZY7&CA;a0LO6=)LA?@K@kSC%7*yFXL)PW4RYlg8&Z zLAJqj^6*@T2*RU`xuFM#%z>93y*$T(V`DG{5fMQIpYyZ7-~->^&v5NsJ2JCvvi9TX zLY%qa25#(LZ05PQYgZhTvClW?2lP=RB23?k5a7< zH8g`XYitq-R7YI^K(8}|Lud25Qru=;w;8FGT29N#7Kx5T)Egv;OcH__$jA90@a)+Dv`BC}l>?=r%vhew z1Z*&i04qfGg|@|4j|d1hv@9i~Y_J+m99W_VUM^Ul<^iBSl4`dZ&LQ;C+L z0h@cYrmi<4!Z=FUCVNYLJJB1-va0LjXK3q0Q#1q8$7tgA0W06=*kp+F1QC_Jyko7o zXLfUZ1Gc3mHc#b^iB+9>%M&Uj9tjW?B4#hLXcD9`x((`VT-Olk$Bk*hNnMev6&{TQ zWaQTaeMO;NU>(v92S;?YDumd|3b`gvmMrEqg&vm_HK#y~IAMcLN{xAlhFhiT*OWq1 zBj4djCc-@s#}Gzus8TV&!j3ruh;XUv6d-IIf0px}xYArH!${CoT4T&fxMOX1x49}i zXegu>G7RuBTyrc0XycftE1c3dMv6wB<1r;fErC(v(y2eU5AM8k>bg-p{qEg!r@ug6 zc=Gthr@y?q*ZTX1yTASW(SOY{+Q0VR2j`Bizy0*^j4R$N5B9E+&6f1m`_F&7&wMP3 zukWzPgEM!&*?;*<<^Ge)M_Y>js;(!`JTp@z>WM%4h!v9!q+_ diff --git a/secrets/gitlab/secrets_secret.age b/secrets/gitlab/secrets_secret.age index 67ac2e3eda53d94c78c29e8b070c3d0db9c32e1f..60b9321c64a1de3d3664693e0b0a2c0ab2c452a8 100644 GIT binary patch literal 1110 zcmZY7%j??&0KoBy?ot`J+YTP0?iPMFX_6*6OlaCPNs~6Org`Wk&AVwHO`4?5K|Ht( z5k!Uu^`}lyMD*f(;9&>d5M&4SHqeWBP#B8nri0-R)bnqD!RPS(+JSfArB1QWw^5cp znH52|hC2sO0c9B;cy15FU=mosc{3XTc-)iJFyxi)Vi;=!S?MV-RyZ|cl+83>d(sZ2 z;(TW>)S!c4>3B)2Ysl`!LWmJ1Dz*e9xeIXy=L^>0usv4OA;=NjaSfGPD+_>Xkiim( zLptjAx=bvA=v?i7{l^*z6ZL4dMkp*T)D6N*rjE8zf0$-g)zIE6_MCfXw0yB4^s7^gp1z#N<6P(F~%;~Kvxh@t^Bp>>v)4$(QW^i2t6xFphr zij+A@2W^YZoxqC=!yhGD2X>5|+s?#bF$=XgA;)PHGadcGES-iv)hpgO;+unDH zAK9=c0}|eXthB+CeiCi_YA74ZGT6kHY{$~nQmYBcs(e-KMhmoK?KT6m%g~ak5uwBh z#+LImc}fp`2y-fAx$+V=FG6Td-q)?NS_%mOuy*(TRbbRp3`t2|$ZaDkiBgFBeNAl5 zH8>ZWk-_1N9Cy-f31+AsM-!~YAy|k>C0dcNON%ROZ-yJi>zYPc=#BV)w}S&fh+vXQ zRkEA$+BjO((ls~-@pIColB43{Ca%#?pJdcy>|H5GxC|YfBfabt-Ei1yYp|f zf6gAfuz&2M!-ubYbN)Pa`UgS!>A89F2K?I9_Tsbr{NF#!8}BZ!e$q@{KKCZ{sk1sf y`Q6#G=HJiXzSBQ-d-K`#wf)cQCxPES|M=7cUq156i|;h|I@gX~h_5{K#nFGs`GE=m literal 1110 zcmZY5&CA;a0LO7uWLQLF!$7hy2ap`hM;81p$l{sZ3+zn>e0oiOq9Cfm%@oTtP=)Ew+oYi0cVv=0V1jsAVOI_?v}k?gZmDgZZ>PevB5wGWxQr0XrwBh zRi`az<~k_5on>JdYLGve+W01}eHJ$|MqKkFtBv}Y<>+NC!LkI7rVxzuD0aHw-v3fZW*yP99JFuq)0KO;PBb zAlAcy&iRaJlPlk+aBz~)E=sk`v>m3k=Q!x9hg4m!sr+r833bvWy?KIbjP60H8!aj3 zf7-eiicthu1(8xJZC6;eqR0#$p?IuT8Jt5y)gjwfsJQkZoeVT}(4x$2uxMsI_gD6yelZXe(h4mEV_Th02Po!zl+dv& zRJb;#Y!zF@)!r!HOw^i-lbDwgP*SPIAPDW&+b_4#`=7jN-+lHJ_|(DKE0@!YKV9>^ z=JyK+cO6$RJ^t}q_e~#q;rOjP9(nzF8GGZ{XV;ZCPd<2BCZ64Y?SWt2bJx7{KYxDP zRb3`7k)Hy={u8gh^7r)@AO8L(@Y`Qsoe=Ll@y!SSp1v%+^!~9Q9((%F8>hbb8vD_^ yc=E&dZXI0V-uZ6u ssh-ed25519 V1pwNA Je94T4psgEbYV6YBZ2BSQ4JZbKubHtPEKNuVjL9CaSk -Fp8uHwymTnjkFQBfezrFj2ycXsYrnqqW2+KeKfsjONY --> ssh-ed25519 4PzZog paDltxaTs3odGMIkWFMuTfe+LnO2RqvRTqAi7pK8EB0 -+ZtGVOK71gSGzgY6nSlDT32Q6IQFFvZd8xMp42GD/xg --> ssh-ed25519 dA0vRg 2ZGLw9dW0qbzkJb+M1DhhEaW19VaPdgy9YvzxeEuZzw -Gycx9hEatq1jOQpE7EqF4G8y3+XvRnIC8oNK3hJmOzw --> ssh-ed25519 5Nd93w uyUnDy48bjq4cfG/HfIF57bnCxNGSFze18MTW2XmDmc -TWCJRIC3J9KyjbCaM/WmCoD0x2MtrGGKVgHCA/TBe0I --> ssh-ed25519 q8eJgg qPb7JIMkwOWIWw4yIhQku0u6d09QqFKtOXx1gC3XowA -8+YLpW8xzEzq02zKFhlbjOggEWfMZ6j2G5RGIq/TE/o --> ssh-ed25519 KVr8rw zcZRh0qTa55ENUWXRIPk/kAv3tKB0+anEQ+IuEhsFjY -8oN0U8jD1BA07XOS4idvHgu8LA7/E5aciLZOshsZJJY --> ssh-ed25519 fia1eQ gkdxv6Uda41PT9GhALDwPCfzzSiCDWluZG5m3WRwKAQ -5YSmnIYFXmBgTur0Z7PcLOT9ANvLJgIech5gp4Pqwjk --> ssh-ed25519 rmrvjw H0ZmvmeUIpb4ZAUvh+7k47mUmZidcsKxDHC2oC/100A -IjYufbdJxMMANqicCHQQAU0Vh/NvROfCfaxJBM3rai8 ---- TrZyyHaK0o4ot71wVxZzBT+3mVrVUQ3jKv6FuWNO4Mc -R3g GVgX3cP\ygqqҷ"KO(. 8ͷ&3p)4:MRSpK \ No newline at end of file +-> ssh-ed25519 V1pwNA CGCG7vFUJ9hUdJWRax68aDpHZEREFnrjo3expN7oUTM +/eCKERrmnmceosD45BENTxtoyLmjGmGVvxkGWAtCRyI +-> ssh-ed25519 4PzZog DSUIoivSmbzN0AvKIPXhtjTBft9D9AaRioe6biuh6XQ +XlV7xKGi2BY+sCgJCEiSB9AlpXFoQnbeIxKxNhPRetY +-> ssh-ed25519 dA0vRg sYBG5Ld7lMw+cm5zUgVR9Bi8YVwDrRglII36Tj8Jfl8 +cQMY6UyMrRtfoU6mn0pg47Vf4DB2KcjwiRHEmvU/Rmg +-> ssh-ed25519 5Nd93w H3k1nFMs8wkqsVKzGp3n4CE7MuyxJWRZ+xgSgDbnuzw +2fff1rsfvE5NikWjF9gkvHuthgLKLOey3PebYG26yNs +-> ssh-ed25519 q8eJgg UR21V4UAJ7/ALE7IcfMVYO3mD2jbanhBu1fj1iEjpBI +8Yl7/sLlQmCvGJvKZt1B4lJMSnPt6gHi/k1u6Gm2sII +-> ssh-ed25519 KVr8rw ur14/Gp1Z9ODFFVaUf50i4+ELKy9RHmsXjbaj5h9IGI +FTZn1ZuBixaehBW3hnVjfXrt2m8co1KSp5aUTA+TRdg +-> ssh-ed25519 fia1eQ 5bmpon54otL6GnIhyYT7CbLuCR8vk0td3kPBGxsSWCU +PSngrN6yQODB/Vmu8ka3vvDv5DkShktyOWrhzC9K1LQ +-> ssh-ed25519 rmrvjw J6YtkhTuDaUtc8LUp/zfvQD3LST00arsbe37bZw4nAY +r3TDmtyB0Cc7Mx8EXb1yytvpF3+4//6cy4jkK+cWTls +--- mSjAJK/sd2Qj4Ffuee/T5LTADcNLVTCcKL/4VlqZvd0 +RU$iUXsf_o/&c&{*ي/h\L[%=,Qq \ No newline at end of file diff --git a/secrets/ldap/details.age b/secrets/ldap/details.age index 4b5366453d97dd98d38d344056f76678a605f2d3..3317f9c781e97deeb182539d180a94b617759a22 100644 GIT binary patch literal 1637 zcmZXTTg%%70EVYt=z8H$gb6w==@CJ z9NiJ8&UOJcw(f3b*>Y=c!w3T5O$}O=Jki9`4ObGd!zq2dGDL-PEMTM5p=~UMYH70} z5Q|jbDnQw9WSdQnmQxzh(TbU%$x2A6R=jE1>JU~ap$$p^I#>o7?m9bZZLyxkP7{z= z({?7thQd;!vXu@TU@q4avfI?gBaSOPf>0~rsZ zP^`0ZXpl-L6}+03G`Evx6JQ}b&9yJG5{Dx&+|BIa9GcHEq-U%bB`c80h;CEetmmk@ zD-5_sO-gboReGXDT%@_oGW9x46xd$L3vst*d4?-XE%I6KA~%G$@mAR^y+xpUOl$+7 z0;FNj(=J5nTFgY)_=AG&Mtq+@#iUjCvqt0;%BW*&#@f$tf(vmhaDhn=S`^hN=4cZ( z1Kv`Wrpa97mSFRd<1}p{$ii{IJ*By6Oxu9QsA#$}{X&BHC8tQF-ctt44o!PfqtXL$ zq*z3TC8X*^gWd!j#3N;-gmbEImMW!)NdT=E#=zQHlF?EuEt@Xv1Z@-xv5kwGoINmG z;09e-MA~LRcN;{boE}jKW-nB!A+Ub0*Qc^EyG)efY+a19i1HOQSafR0wdg5d;=@*M z1{JuIwr~w-E;UIJ&WpI0<#YxS-Yn@rV#JmiH|SHxR5c&5KG7Yl2INCNSGpDbrss@nj~(9R}{_bJlk# zKOKs(lSR%P);u4~l8R{XwpuIWqLR!62i>4;84zJ9VN`?=O|<(`1?z*cOe>+(+v&ER z)nvLk&nw8=6MOS#RrI;O#9a!Zq1aO7H+n(`u&l~a%N;L23wq3<_{ z+|w|Uuck=J7)3zEEq>9%*F$VPodtz9A92z)T}3Q1x$y3-t)^#*G85zzKtFH5p> h+2P~iclSMb%{`y|`;&NVs$Ib!d>mtbIs;sG{6Ap(JDLCh literal 1637 zcmZXU+pFY+0mcO{r6a7YSOlxv!IpM0p3P;F%nTK2ZZpYblF9wHR>^%bmt-Dwp9mG{McDd9C zo)O0lmc6eby9Oc)rXEZ;C-2SKo2 zd5+0eL0mI_8W5sPXdWu3p6)VDp~Cu{qXpz(CEU;gGE`z6+n-X)XkixV9JTs7IZAnG zNIUt=WTXsqQ4noLWP3tqwG|n%=vbSZljL@UkQ40%wwR(7(KvC*HOgj1 zC8R#dScJ-Kls8uL>1PPt-2YGU8|sWUXRumtm!JM9VHWgIy)GL9@VMeO6U-tl1-PK z8-SOyvSvmFxwGXmUsouqYNR8plrfJS)Nx6$t93|b8kN+ zsWav_RP)4$JE#<(c!I^y+~(x&yf+`tXiyx3oYaXJjS^bfm@USj4$n4bEvdUfm#-jD zkOYfnvmHZi*0F7c72@i>;;`Efw5bL6s}i4$Or%@N_9Rb6WJc++h?vNP7<ZfDI~Dxe74YaOAHXrx|-&d?PzVo@peIt+|lk@R4Nn558n?uZ_+XvIDb&vEozF zKoVEdVqjZ%16We5WCK)_jTEevdaCqV51jkp!ktf_xp?_M$B)b|oc{XR>iFsXYxhd8 zKYhA9`it}XcmDgC%OCyu-G}zB1N2+Jd-Dbzo%nJ0G3+FL|4ILwCy(9s&i-pd>fr}} z{?@|y?`MxZ^!Wvf{}8?7joH+8-3&+kq zbM(nqzWwc)zdpAAfp*N#~<9Ues%l{_0&GU|Nj@y|K|PcCx87M q51&1M{o}uU^5Ufz+NZ7!Cx7}G{~UBOz47I>8h-E7W0yXCN&X(WY%c@= diff --git a/secrets/ldap/pw.age b/secrets/ldap/pw.age index 2b4c4c079968029196cd027d40802a3db2b97084..e5deda43ba685036906fda9dbb0f1e0667d49baf 100644 GIT binary patch literal 1440 zcmZY7&Fk9)9LMp4C{jf{xQVD(k+DPg`O8z&WRtlxP5R42o9CnnQGklkQbmV-@Vl{wb0<1j7a!kHl1m{Ep6!`g(4 zM6sR=QM++F1>aIzz*h_n#FsRoDq^4o*rc5z#jb`*t(^v4XobZz z2WM==mQaNa^${$Al7JU@3?mR`tt16?M?zqNY=>rObjA^6%rPXZ>Fiin4TmXO9)#AJ z@2}bbK9~w>5i|O(HYdSa3AzC>ErV!*=Flv1Mx%w6*8`LA_b0><&TV;-q=ebx&SVCG zoi^GBjpam%k!T9`&`Cvv_DBMZY>QdNpxo-(JQ78{X?1s3>rLhavgvL&8qJn%>~AMZ zy^-9NYmah$B311yYy4U2V1*o=Njm?s#D2pgzY%|!Ft1t zOO&r!YA{Vue_r^@g)am*fp{j+DV6P5y3B#ShUmc)Hq|{U)Q4_Wi$q*uYClg0j<0OgglYvn z-o4FVIFKiIH&C|EqX=ero+(6HxwXmr8JA#cn;wnh6fF8=fEq4l1RYOsQvrz$*bhrv zq3I-G>BSUt7htc{QK`wMfVozjltMSV8rzcNob0k?ZpkvU9JtO*3-D%cf;62Iw%Avl z#I^MiRoXg5mTHoAl)7vzWp2{RIMlI<#7&h6t2W)>R53N}q~R1I0jOcRAM9$C-42lZ zKRE*V3Wy1+#D{&mI*^JX!P+7ShzJ((S%Jwzi*7&=veT=Mv?_FqXnM?|;{P;ZJt zqgjYcs-bNgtcqP2my9}P6)~RiE|(i4{ga=;&%B2{roMdot4GdLZ+`pJ-BX`m`0JB1{Ksc!4?J=0hWY8+zdXww`uXOW z!|z^zzPSCv@0Y%N_~O~4kFu*H-;if79RL3OQztK9A_U}1=aw~Qub;kiZuQ$kPaZGV R$L_r-o%#CQozCsU{{XA7=9>Tj literal 1440 zcmZY7%M05C0LO6!57L1SL=j=ogUY1VCTZF<2#%zWywf!A=CCbo9!=6D&ASQc#gk6h zK|wuC*gQ>9hB5__p&mq#IbpDy;7QqFu!+iG7kBW~{RJPsKYpfbckO7M*1Oz`qgUe8 z?Ui7w`&v88HeK6-1_KantKhEUu{Pq;4crW9bu|bTom%sxA{J^5-GVF^uMag?XpGoxV=|oQxPz|q zA{Mkjge;#P%i(t5%xa+{5b|D>7bz|O3`hDyv;6M-BSxlQ8)>v*YMcXC$$`>YdN$`E^_h=!<@m4YOS?q zI7spxKA??c?PeS?_v0{doDfDWGMSOBH~CK1(It{GAetsa3uX-` zQx3IcWYezOhU`SBVPzu60TV+gk?%+N5}p@()m-cb=7R`hT-m`yCEXU?Kr%FO^V)H0 zaMEzYJfTrCvU6=4xn40{Z+MK}0iL8iq%mqbN~<X*Z17?ILa zH+`+cObf9WWFi5RK`RosAr}gQAc{Pf5wm)UOlf4Z^y8+)&GlGtb%ERg8oqQ7+Z@jX z?L~V6m?bmzNzM^+z7J>PeZG>ZV3%r4kLhg~MX4e&YdRR_wj_q^EqauuGKI`Ko4E|E z3e7FE6qk@p-q+4_PZ{IR#*nf@jcPD1!P-Ly2ucZ|7_$iRK4wZQ!7w^wiwjdv;^{4k zaMcFLh4S^HPwg<>w@sL&+4c>R#V%=-x zjG*LTM-`=B;z^I1rvNbLA$y2Sa~>Zc*o>h)FmBB)mY_r;Dyu?r3nPfP~pG1mohqDPjtl$Av+w`^2mml1Z}SfZ5qLc+W$)ii&2uLi+K|Cp?%{* zJ2(%>9P#Ij7mEv6M+v40BfT17aBHY$!@T26Rm3hh8e4_UG6b7Wo#OMPZyLT{#yQ30 znznlI$!@o8JlG`#5*k;>5@qCBu0owgtU(c|EpSFDhMc>Usaum2Xr24@)0ZwVs;5KW zcE!8De0S^ARqMi&PhGtJ_B%f|CqFM9`|QYHCvV)jQa=C0==?e4%vUFZ^Y4Fi?u)zk z*JlCp(hK*FkM7@k>*bSp`^eGGBR5R(BZhnPllOi*_Tlzy{^i9hFIIOg?2l)zKAy%O zpZ@oD_~-HCA3S&F&TaJa(WkH7eB<`@AMSO3`uppDZl1XDvvcg(Q|#$?3IF@<>(?&t KU%kXW`ul$p7V!cA diff --git a/secrets/nextcloud/pw.age b/secrets/nextcloud/pw.age index d1e20c2..02fdf3f 100644 --- a/secrets/nextcloud/pw.age +++ b/secrets/nextcloud/pw.age @@ -1,20 +1,19 @@ age-encryption.org/v1 --> ssh-ed25519 V1pwNA wC7Nch41YKEjrwpf/sDR+SUWKm1porqP2DyQhz/MLh0 -Mu8NGcxWphZZLgb0F7h10EJGCPiontn6y2lWNSldNGw --> ssh-ed25519 4PzZog 6H6fsEDq6xiIkmIy6gUUGL+Mm03HSEaSGnjel3EO8EU -xzqv1RZijhQqeiWIFq7ReVzh2JLtBoo9HmZJ1VXrMPU --> ssh-ed25519 dA0vRg UC9Vm0pLH8N9XGxKAZ/3Efe/9SRvx/rlxCYx0u5oljg -gF4IFYdCIXfvPPrOsJFvGMf1PzrSyureKpOP66ZHB1Q --> ssh-ed25519 5Nd93w 338ts/scFEwjZ+3f4Vcd8C9Q//E/ZGoSxIutAxKgpAo -C0vs3fiisD9FsZ8gYJZj/I81mT3Psw3g1jN5ztyuDQ4 --> ssh-ed25519 q8eJgg eIHEYfE/50IRNy+gnNmqQD4jtVgJRla4ilAQp2gYfjE -bFNJA6KPlBiZWrB5vjyTilXC+rkW+xqVSWcvHln9H/8 --> ssh-ed25519 KVr8rw Kq/0pxm2r136ezrKRugC1So2cIIx2VTShPv6WTc6m1E -W7VrsPf9jkkxqndVjrFuGBwqJR3v4hwig7Fed9xJSAI --> ssh-ed25519 fia1eQ 1sA1YfEKVatTzHV5Wd/tzqwRiIPUBQlfoKZkJpxRYig -lLtPzvg8H0y+FpfGfF/Q5g1nCap1TgW2wipIKU+Q+WA --> ssh-ed25519 YFaxCg zUYYpsC6BXvPRcIignITwUmvBhfhy9EnxFeCFg1niQk -QcmAhpDajw2lJyttDX9kn+0bdugmYYifSl1esaa3xpU ---- 0sQ4g4YxMBe/VBe39F9ZfwVh9XEOHYHqgiX5oakBzPU -chWp@ "L[)t/+My' -8K[m}q1{]OS%ᙯ> \ No newline at end of file +-> ssh-ed25519 V1pwNA ZlR8h9qHUL9sOogTAS4jhOkSqgeWOMgrI2jpzZeB43E +c1B+g2ke5kRtFZ1us5Sb8gxYdb7DUx5l1IzVAfbXxW4 +-> ssh-ed25519 4PzZog uPUS/whEnUBue936Q95LCG31yz987AGVTULqCLfQrSs +cGgATnRDcpNJ7CRUkouyoDk80EYB/QgzkX5snfs2qjg +-> ssh-ed25519 dA0vRg gabrxTdlYIjZWYnRMdID7aLu3hgHKmTG6RQHMMnsdjM +HIKk6j8Cntw6/SAtbAjDTSDqXhRzItris/gcm3UQT2w +-> ssh-ed25519 5Nd93w 9enbyAo/XabNmXWppWZWC0Do+6hwzjLPc/RgpFSsOkY +tLBW23QTKZKYZ0nlJ1WDdqsu8u0vsyNoZ10qrk06p3E +-> ssh-ed25519 q8eJgg 4Un1ZATrDODVT5Nr1qNkQzfhBeWcDkujxvFmXumHKl4 +MW1gkllR6yl4FiR/84jV04TgN/B4WEPbmrIWPVG7yKg +-> ssh-ed25519 KVr8rw ld3Xw4y/UIN6RADoJt+2gwnMbcl7qC4sF2X/pJcdJjU +8b3N70CMfQpXY01EjNxn4dZJ2PwbWG7JgYgfOlGfZT8 +-> ssh-ed25519 fia1eQ 5J0q5b+gAlELovtLXXTwr9jfhOl5L5SEy7+qRxUicCQ +k4Xd1ypatsY4rFPAVZoA89V6NrnLxrIrWBhYCY0BEis +-> ssh-ed25519 YFaxCg UgvKYVP36n85x6AaAIGysm9Kzl4TrMip9GTxVMRuWgM +HuTioTpbARDViBacuvqHM2WDNvL+hDyDCb8YJW2uukE +--- ig5Vtym6PTLi2FyPk/bdMBeQV8qICqxGONQGU2lGfxI +z|^ځ~0]|Ѹ"Qzb"gmr냍u ye$c \ No newline at end of file diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 9a9b5bf..f473e25 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -33,6 +33,7 @@ let marvin = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIAme2vuVpGYX4La/JtXm3zunsWNDP+SlGmBk/pWmYkH root@marvin"; calculon = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGsmeBfh4Jw2GOL7Iyswzn4TVNzalDbxDgh7WuQotFxR root@calculon"; ariia = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA4kV6W1/tP/nf2ZWNhRoV1mK04R4pS+c5vdsA1n5gpN root@ariia"; + optimus-test = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFv0Hb4qfzXUll+Hct1NQOE0bCf0MpE24Cqskd8vAFyj root@optimus-test"; systems = [ agentjones @@ -40,6 +41,7 @@ let vigil galatea optimus + optimus-test glados wheatly kitt @@ -88,6 +90,7 @@ let galatea # Games optimus + optimus-test # skynet is a webserver for users skynet # our offical server diff --git a/secrets/stream_ulfm.age b/secrets/stream_ulfm.age index ee6ab1ca90c527cefcfbd446b361346e0aa72260..c91deb681ff928b31b06507081aee6a24fd2730a 100644 GIT binary patch literal 3194 zcmZ9_X*?4Q0|0PEND&V@bkHe{b{{%qmz|j18>($)r)_p-lt+>rQ%N2v-sn)CN_rBh zNY3OXl=L_{l!{PENvZe!-1qi9B)T+&DtpsQUJNN~7>2y**aTEj& z2m5=m!5UKt+KU!Tlt&rhe3D7YfW%2-K(NqgE*8%wVV1Q*v zEFLBz2JuZ=tv?vfq9Q4A!M|@&XpoUE@nXe*HA=e5KiGg%FhpEj3%rKZp&%_{&0uU6VA#(U+xLFVeWPv$I3L3+bNC76X5Ug{6QCT7w zlo+gw*6Ae}nUFvOm;rPHLm@PA3@incffW+S60;zVEctzlMTyB0i5EwJA_-;w1hSHk z_J=d#B$8l&94nxp;bs{sB!ox?prM9PiWy5_IY?Cs6_Q1k$8iZ5HUP=S0m*p1f@nZe zB@zi=s3aH_&^Rtm5NyEzzERj(l-A^hK(DHO~w;=*t^ zsTztgnuS`iise8=QK?uMB#5p?2jlldDPU?T*?@w|U>t!EMKE|mDOAXjGLnN9ZBi%@Jbnxf&t(Eg3Je0Im-%z?a4H3+ z(1#FlFq28hi;~i?A_qS|KQDg@MaeZW_Lu~;pct`=3X!y9=UmU7zSUM_-n8x7@iZDCuVMu{p&y zVeq|)eUW0?_rQd@iBqw8D;o|~=EYP!IS9vW;(Qg?T^ahe`&)NS2>w|-?AF}j+wIB& zOht?RUe(8pNNH~c?fT1?l|_vo({?*ghe53BlQ&f^CwC|u>@6q^`cqBBH7jr2uu&Wt z-#Rq8+Tqd>&t3|)Ru;3*Htx?RoOfPRjicugdKqh{BeI^J^L9K}e>Xjx{{R%HudapAN}|e)Hy!BBzg|SIFdN$T=5NY)DJgc{$^`H zf_L|)e@Bl-rATdZv;GbNM!oHN@_v^!FYSCw^1YLm?BKlI{`$H5b}X!Zs=k-~dil`f za>`chO_^iH-(l>6M@G43UGh~IJLOB*feS?Nvz><)2TD=%*Q5&P^)J|%nIAoNN$S5U zrAhrkMdhHS{S;imhCLf+eU74T*mRjE|>JGY1bmdOMHP9mUeY!I#$tT)Z zmTP1s(*Fo^U48dZXRWWgIFSV>gS(pt^HY_zqnqUIJ5Ja7o1q&%?soH8DLjX(%eJ2X z*S?X^$~l-@BU>((5S(7s{Wwl+Xbfd2#Nwf7OXO!AF};!E{?yoX4Y$HbSw#8K()P1+ z`=#zQr~huB;So}&T&^AaSz8h9Qb}zG_tJvAb~FACn-lQ)I)zs@n9ekse%Dz=>4i0Po4z1l;4@kvDsyw^Yn` zaVjo?AG;U7sla0}GodoanVmN>zyiieT5cGdh=*?O>6C(EyC}X zJNMnO|2h`_Wob=0Hx=_ViF8C{D4IGMvD&;nftP|{{9=G|-V3u|yg0>TpSC?~(>iuT z>_$P&|idgnGAS1q-*)aO7sCwxaE>qsGBN0cIL~f>{e}GmiJ2B<&lO9(-gAz(4Ztd^;6A-{inx! ztqL}$ZiPi&9IF;xiU&OwEenYIzOK3Ug*hbU!xK_qQ9<5?Cl^8}uHJ#()BUv2MS(t{ zyPC^?B0oQE1aG9#acPe$JQn=f;ZaMIVBnLXyB`c3J5k^fIzg}h7Bq68_vPUq%FUwW z^!be&W=q(P8&%r}@@7tKI53;L>TlEo{e4WNniL#2$rtR+7vfx!& zFe`f{Kw9}}W&MhXn4=Z*mRuR&##cgiwp;y&b=)y&Cbi}LyI(~Uc7@8Y{lPs|eW;Ba z>M6dlNp@(?_9X}E%Di4nuV3~DY%87V`GIIFExK1B-?FCO3Ua#eNQw7@mPXVWSQ6Q- zVBuiEH_)xj&${87C5A@8?b&+!c`luwo1&|;-Xb$1(ob7F+q7ke=h)YHUfP#^zVuP$ zYT60Vu4UFF$(7!3?)x&*kh0N^K=% zku_B*9aW3+EAy^dvtM1!$n4jaFX5R{BX5T>O3!PtI3J|=lDSi6# z5*xd^@`4qRuJz>n#M@>#QWyJ%)jDyLs#%zbzH`-CaxzH-)#YouV^?8H0k+N=Z=tV( z=S^u(=HNu@y^?H&?-!FI-=yD-A0^!zv0uFGYXKkfk(&HzjpI%n?Xg`>P|w=36o4n` zkbOVGt$P25KR=;Ep1rF{u;9F3yhT+k`gb~N&+GU_WItiU^%JCz+kZWWB`@_q|KVP4 zeg{XRWl~lgTpPzGx-~;!I|9E47FDfGA3O;fP24;41Xh-?ccS%IY8CIx-A6YVW66Sh zNZP`=ZUIXkS?#jgmjg=vXKR(~^?+Q|4PeUZSYO+Jmicv6ts$k7t7x*b_ED8Shyt=o{uD;}lR`UqM;d%<#k;uq^G3R+2P!P<5jCe~hMq?}gYFZJFIeW(U*O$2 z6KdUfCEQt5u{M2c_2o6~hq8)ZSXZMm$dbQTrF9g%zJDmCIk|VEV7Tk=$7Nq}XElog z<~&@*oap~{zWtqL6EFK+k2t*j!rpC%ds1#JIXyUdiJQ}3GnMA}ApU!sEcC_IL7u&b zl;ZjPB6sT7vn{SRX*1K`n+hye!#bOtYQu&>)v5b^1^Y|033U@UMn~?%JM--7M9cZ5 z?qP(z=$G(5^!BBrb{~%R9jyy!*fAqM_9|>4qR>;j&U(|}=M}em=RRBDT-2>auJ&91 z4D2qyKIFaGWig9V^5bmz^4K)Tz1uRjb#VLP;cwXEOKp0-W|b%VAI#HXfjI9l-@cFX zciFGQdK1uc-LA3Oox`K69p9!6&-RiwZHsBvlPz6^-}xP#z&4w9&*j{lZ{HWaFM6GR vOttc^*L%jPYx<;5jgyQ4&vo?7_nCoC5!87$7-+8z#~RY~`M%nI<@^5u6QYqq delta 3123 zcmZ9Kc|6mN1INqJu^fd&p;38qHQQ`6S24SMZ5T6KNwbq(w%N?c^i&d_R47Lg<%mk< z$nhXYBuYw(@~EDtr+y*j=#b;r-_PHlKi;3$>-}CZTQEEAsEL6yU2tNC!Z+B5hEj7# z5Ke47lEs!1{epOMI3yS#uw3I|4gs=YEGQr{L?~lNq5-%7h$4p~lwl~5(1)S$!*Er+ z5EmX?jG>@dJRDw01vzGf+oPrxl641FQ z7>1#cDPvs8NLnb7Ac6zPP?xO!)n*zpPtEf~st`0O17zPhvgoMNdQP@Z& zi_JhHe1f6_qU0bYg&FK1VY`G#C;(Z65X313Kp4QsLdk5pln5uv81iVQI9kq>Nd7AT z2$i|Y;=mM%2ufnY6k%Ke+%=LZ2-dKnavUT;NrMyQDAKQ^t}?8ch~NRRAP|ia3Hvp~ zNqHh1i;aTQW%yuB3=>Iqj#i1uL|!Dr0p}CKiKhh7|BK^BF`=9wus_5lfa<4)2TE~~ zq`;6MpSTzfk-Y4I+u4g{Q-ENA=* z%HM}0Mu>ye-tsUE59BN%p)mxJCZ5V8aL^)vhEZ@7L?MGHhDZ4miBN1jfD&@07!nN4 z135W4fxQ7=IRJt374c|HG=d0V5JVzb0;eOLkqm$z=TDVzplZ5;40Uk<>31Sb{~b?A zx#mz@7<0L!AtxP?y!(GkL)3xiB{>Nug1mQmzAQ#GwTz4CmyCaSgAGB~7F znro|^v6!Car>#uS+OKt6lmF_IqM~2s$*8qH*$6X$DJjp!oPjXSRM+*iAG!Rhxmts3Tcr|P<2b3`(cubSU-##y9M{R;E~jAFMK?wr&3bSN zmHQt(6A1p@3?%Ed#_J8`$!yH0w!q9+Ui5qPJ#1~qiv}A^Seb`cT9Ajg1RUM-xt9yK zj{sWsVd~uO-)QLQ4U}=cO6)cM+_=A$9B#$>ndP6FgM0Ui!6>8d^i4!IqJN;&GQjcxl$NNc;n3ET%C2nWXKcwwF?7#Xyk{J2(z+>KCU%` zC2*nfDI=|}|hexa&xM%Xc5PF>(&vzJxo|rj3ZM z9`j7yH!yo(!WSa^!Z;9lqX-q#xP5BkwliF@ZYq-5Tw&p+KmXM`K^r@c7QxhcbtX!GvCeRReoxXd3P18@t|b&yYFWG(@vDcizedk}fXt z?m&hirl(_i_N@Ei!hV*#kf23_DTpD@+LlIGflh0Z?-!=%F5bspo~LXNbKCP7LC)3K zQDHp>8-#Xi&xKe0&HSrimBTO`MY(b6a$e;QFwf$*ds~hJm_IL*E>n)N`07zhoeeF= zd2hniFvWWNDd}e0FQ{QNPyeIS`%TZ6*#G{8 zAoG#+uJ63A_!pgO*SV{^lGhKhpmBXaXht@|8Y3Q*di_4A43`qYBlE`Afm`i_7dWVl zabnt=$0HYD$$@HxO^PI=(|wv1gbYGCHa z+!~~Y42wDax96any!$6jbZ{&-jO?s9FBwdQf) zxA(VSUeBFC|5N)-^yJmG^!!ZEv5=itx4g}SfwlF|H@RF&-&E0MnYi&zvcfIu;C17D zl+MKGk8hrs{WLmJ=+A#&GY_-gq+4|BVN=fr(`plS{vQ3KeBGbC=O4(DQ=Zm+S6&{< z&~N?L*6fIV_X#e~>b!S>0)Cp+nPC2r7 zW7hL~;cKpq7$9d(G=4L=lKux`!8E`1AGaNU_u7__Cwcv5?jaxG zZpSGN4m|N7-FV$KyY2WD&HDN}np!(3a#6G8(U;YRGRZUTr#a=G=G#qiSZG=0p!=Dg zx;^HPoU5YVlS#@?zw#Vg%!`lxUKZ`kM5ue+*d3K+{X>-zjqk*Ls zP07=Oj~CFgydcE5hi9ea8655}%yjkwk{FT7LlpgG7*f1KYIA#8sJslqFe z5vp|uqKleenIHG5`Bt>8(#Ful>b%FJ?$6HGFkYPox+Xdwgq0o-sQm=MP-)2tyhh^+ z$ro7Pc1S9zhsVtKB)u*e+pv%J4QJzSZa7Bv{!R^@1+!9jm&ZH|%B=yV+Wmk#K$Jyy zl&NL!>rQa{hr0)tx*m5!GyTF3)=lTEn{Ey)KVkJQ?O+6YpwjCY8B;v)#$q#H6a`y; z^$f?oXk8Q9jjgz4!jEal%YrnYa7B{vx{|6V}N80XF4xtpET3 diff --git a/secrets/wolves/details.age b/secrets/wolves/details.age index 5173592c9b3681b5df999d7bf2b42ba8193ebc7d..31b96ee529b1522538a04715aa5bca3dce6a7e23 100644 GIT binary patch literal 1943 zcmZY5`*YKV0l;yflxy5jXlT1~%fLJ~U`{GOBtHnpA=|R$mt@)UODrt5B-^qr%d%u! z5{$B2NyzBRV*%P*$PQMTj+Ly?+fqWuRw%g@QfM1kUu-FbcB8vA?YhfoN6YrZe#-uW z&wan?9NW&8>8e_hIidWBP|X2#ldgTeUXt?dEMtZslS3ajRT>zqPv_G}F_4g=v9PP+ zb44n0y$bsSj$%HXMATRf^ye*9J!4LKK^?9on6OrMv93@(%2|WaVvUa|Fz%;ZMohC+ z3mBbu1|YFW3Ntk@tWiQv&!wH7V5yi-h#+o@6>5Oh$%2ef)iRpZ9Q9WHWeLWSx{Rql zon6butrVD#I4feYR*OYo5#WP-%)xo_IOS1;q+5+s4k#ST&D0p!SdZlNvKq@~*l?*3 zw@@B8Q==%lRttDc85qM9k?Ia?w5a6=mloQNi z4mMs9iV%b6ISl&0HV9)JmWG}o%V-8INJ+1uVB&*5SPGv4a|mD)0D@DtNAKj zfdySDsZnGps45`fV?c+E4`gYNgb0~XAw{}zfQ}nAte|2E0-4z++F5@tr>7zzlQksp zAkIW-e=eF2ni~vWE(R6ZZZ(%cIg+aL(WJf3#dH-E)V!cUwM5CFQgiZovyCCBvK+Bl zoiHWg3dckOLeT2vz?oVgUbR;ndR&z1EL@JjHdSsYd>Nwos@U zh!!KQD~57HqhTkcj6<LW-0d zb19O@+RP<9=l5t;6Au|A+CXRWEEz4N>~>4W(m({AS5`2~L#koY5 zL=EO}9MSnfCqzJIE$g?3Qz#3-IBTS6q5(!CNZwwd$QbCzU;^xtQ!}+1r8zA*J)p{h zn~0!JtqvGsY6VT=ULa}>F?^CF!*d7+#o`} zqBV#6b6lLH;)WoeroaY0Q$sUGu0rTh3D5*ACCA99?6oB=Wg)^P=~R{!3)xJVGy9NY zDP4qtJOb-7lD}Rnm<6a#5xGjO?)KY-vd_e(9V}k=`W4O0^LWXrx|PsO?SCf&MW#w{ zo}@Qumnufq<LPq?qu?5o6jb1`SG0j0Dp>C*mSq@>h68 zb{Tc+o`0>mqR$4fAUT!$DL(P4@bM1@niqyBW`l*(-NQuhvWI(g z)9>RV)-?Y*OpQIce%0BrXW!lVGj*bE?5Un_^)24DV2AgC7f!*y?Rkb=h}=BB^p`g_ zVtel$TJxKM>E<-IvHQWlb+oj$K6rHJ6`;j+Va_}McGoP>vMu-RnrPZTcW~cjwQci} zz1t6T*&m(y@#NfuIQ-8?oT7O0FNanS^*?h4zyGBx|LB+l+?sf6M35e5Up{r;zT$Y! zcxaMt+tD;RwtkvFIcw*mKU}wcGq6DMOp?qj2i%8#z`R)>UP#?&+1(r2JiPLdbk|gvFGT}Sa{aqYpJe> z?s<08+U4Wl=o~!|FMT;!7`)f`z#FSvOSWE~H}L5we;3pGtCioMTHO8R=$fSyL*3sz zoA~6!BKsm;%k;M|>yGF{wIyq}pWN2l=b6)*8b5!i)I4jiw%+4e+rBut{5fst(&6FP za-Gc=Pk+d^SzkFWHC=$d*ovC_F7BCEonC!&uk?qJQ`eQPDyU*{s@cEAB-4iDc&h4Jxb$H+FXMTVEU)`HuaP@9w-#-Q%^^~sO f>CD1<`n}J#-aRX~=EnA6YOMYS3VaxK1WJ|Uz zS+XuyEbf`$d@tS*<6fSPbS@u)4L%f%og32?9(FL`PuCkQlHynqV~RmCVD zofY_Skcqn4%6)BQ7A#excBd{NAr^?#D1;%ZOq>M>C|znMn7oh<;RVy5(q(GpeFeY6SI0&q(4Gc4`AukHU!;zEcnCUDLjRVx{s z_8M69FrO`p(OGiPKxmHG;bAbx)aLkg42KRF^~pAxXYPL5R?jg>kc`e%47Mc z+_1cGk;>ltWNWJ(=hCW_0K$$eSk@4&RtlBDhVG4o4A5WqU>u3L(-BV&^otSO?qA;C%cRC?P}JBd~MU!U~|IFnggIk_zR1ETMfo{o0+ zdH)k@`*^2!C%AX#K=1TcInJzRTuAOV5V%quaN4{r%XI`Td6;ec`Ts?$BcS=gs=M2Vc(W3FT#m zTKne<$nK6$rN>6%@E;$zIrHK#cRlmHl!_|5sx9o?rt6E;_O&HU>3mwq)qZTv^gfqe_@(|V2{-T!@XB-GM3Yx9Yvd#;oxjuC#qQP~Nv@_creK^oZ~L$18eA)A?P+1?H3QUEA0-X9hnK<(F z?I}~&1paY-LH`el1JAd8JM!U*C7%7jqLbJ6+QO~a{cg||9ty2eJt_l;8!D`zat$E zzr;TBUNO^qmwRqBCSK((bkDdvwCVNZ;~SARmrlhm-g@!Eor&~SZS7k#X5ShjPds*Q z&ve_^)mgN8`rW;*@eSfbM>3Uf)v@VstYTI@|JkC=$i$XWJR_` -- 2.46.1 From b13683e40c4f55b20145a7f251a76ab0d1b484d6 Mon Sep 17 00:00:00 2001 From: Brendan Golden Date: Wed, 4 Dec 2024 20:09:32 +0000 Subject: [PATCH 2/5] feat: code from https://github.com/pelican-dev/panel/issues/533#issuecomment-2466168233 Gives us a start for workign on pelecan in nixos --- applications/pelican/nginx.nix | 110 ++++++++++++++++++ applications/pelican/panel/panel.nix | 64 ++++++++++ .../pelican/panel/pelican-install.nix | 28 +++++ applications/pelican/panel/pelican-update.nix | 46 ++++++++ applications/pelican/wings/package.nix | 19 +++ applications/pelican/wings/wings.nix | 42 +++++++ 6 files changed, 309 insertions(+) create mode 100644 applications/pelican/nginx.nix create mode 100644 applications/pelican/panel/panel.nix create mode 100644 applications/pelican/panel/pelican-install.nix create mode 100644 applications/pelican/panel/pelican-update.nix create mode 100644 applications/pelican/wings/package.nix create mode 100644 applications/pelican/wings/wings.nix diff --git a/applications/pelican/nginx.nix b/applications/pelican/nginx.nix new file mode 100644 index 0000000..b1bb259 --- /dev/null +++ b/applications/pelican/nginx.nix @@ -0,0 +1,110 @@ +{ lib, config, pkgs, ... }: +with lib; +let + appUser = "nginx"; + name = "panel"; + module = "pelican-panel"; + cfg = config.modules.nginx.${name}; + serverName = "${name}."; + dataDir = "/var/www/pelican/public"; + port = 443; +in +{ + options.modules.nginx.${name} = { + enable = mkEnableOption "Enable ${name}"; + }; + + config = mkIf cfg.enable { + modules.${module}.enable = true; + networking.firewall.allowedTCPPorts = [ port ]; + + services.phpfpm.pools.${appUser} = { + user = appUser; + settings = { + "listen.owner" = appUser; + "listen.group" = appUser; + "listen.mode" = "0600"; + "pm" = "dynamic"; + "pm.max_children" = 75; + "pm.start_servers" = 10; + "pm.min_spare_servers" = 5; + "pm.max_spare_servers" = 20; + "pm.max_requests" = 500; + "catch_workers_output" = 1; + }; + }; + + services.nginx.virtualHosts."${serverName}" = { + root = "${dataDir}"; + listen = [{ inherit port; addr="0.0.0.0"; ssl=true; }]; + + forceSSL = true; + enableACME = true; + + extraConfig = '' + index index.html index.htm index.php; + charset utf-8; + + access_log off; + error_log /var/log/nginx/pelican.app-error.log error; + + client_max_body_size 100m; + client_body_timeout 120s; + + sendfile off; + + ssl_session_cache shared:SSL:10m; + ssl_protocols TLSv1.2 TLSv1.3; + ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384"; + ssl_prefer_server_ciphers on; + + add_header X-Content-Type-Options nosniff; + add_header X-XSS-Protection "1; mode=block"; + add_header X-Robots-Tag none; + add_header Content-Security-Policy "frame-ancestors 'self'"; + add_header X-Frame-Options DENY; + add_header Referrer-Policy same-origin; + ''; + + locations = { + "/" = { + extraConfig = '' + try_files $uri $uri/ /index.php?$query_string; + ''; + }; + + "/favicon.ico".extraConfig = '' + access_log off; + log_not_found off; + ''; + + "/robots.txt".extraConfig = '' + access_log off; + log_not_found off; + ''; + + "~ \\.php$" = { + extraConfig = '' + fastcgi_split_path_info ^(.+\.php)(/.+)$; + fastcgi_pass unix:${config.services.phpfpm.pools.${appUser}.socket}; + fastcgi_index index.php; + include ${config.services.nginx.package}/conf/fastcgi_params; + fastcgi_param PHP_VALUE "upload_max_filesize = 100M \n post_max_size=100M"; + fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; + fastcgi_param HTTP_PROXY ""; + fastcgi_intercept_errors off; + fastcgi_buffer_size 16k; + fastcgi_buffers 4 16k; + fastcgi_connect_timeout 300; + fastcgi_send_timeout 300; + fastcgi_read_timeout 300; + ''; + }; + + "~ /\\.ht".extraConfig = '' + deny all; + ''; + }; + }; + }; +} \ No newline at end of file diff --git a/applications/pelican/panel/panel.nix b/applications/pelican/panel/panel.nix new file mode 100644 index 0000000..c5bc198 --- /dev/null +++ b/applications/pelican/panel/panel.nix @@ -0,0 +1,64 @@ +{ inputs, pkgs, lib, config, ... }: + +with lib; let + cfg = config.modules.pelican-panel; + dir = "/var/www/pelican"; +in { + options = { + modules.pelican-panel = { + enable = mkEnableOption "Pelican Panel"; + }; + }; + + config = mkIf cfg.enable { + environment.systemPackages = [ + pkgs.curl + pkgs.gnutar + pkgs.unzip + pkgs.php83 + pkgs.php83Packages.composer + pkgs.php83Extensions.gd + pkgs.php83Extensions.mysqli + pkgs.php83Extensions.mbstring + pkgs.php83Extensions.bcmath + pkgs.php83Extensions.xml + pkgs.php83Extensions.curl + pkgs.php83Extensions.zip + pkgs.php83Extensions.intl + pkgs.php83Extensions.sqlite3 + ( import ./pelican-install.nix { inherit pkgs; inherit dir; } ) + ( import ./pelican-update.nix { inherit pkgs; inherit dir; } ) + ]; + + systemd.timers."pelican-cron" = { + wantedBy = [ "timers.target" ]; + timerConfig = { + OnBootSec = "5m"; + OnUnitActiveSec = "1m"; + Unit = "pelican-cron.service"; + }; + }; + + systemd.services."pelican-cron" = { + script = '' + ${pkgs.php83}/bin/php ${dir}/artisan schedule:run >> /dev/null 2>&1 + ''; + serviceConfig = { + Type = "oneshot"; + }; + }; + + systemd.services.pelican-queue = { + wantedBy = [ "multi-user.target" ]; + serviceConfig = { + User = "nginx"; + Group = "nginx"; + Restart = "always"; + ExecStart = "${pkgs.php83}/bin/php ${dir}/artisan queue:work --tries=3"; + startLimitInterval = 180; + startLimitBurst = 30; + RestartSec = "5"; + }; + }; + }; +} \ No newline at end of file diff --git a/applications/pelican/panel/pelican-install.nix b/applications/pelican/panel/pelican-install.nix new file mode 100644 index 0000000..75e3f53 --- /dev/null +++ b/applications/pelican/panel/pelican-install.nix @@ -0,0 +1,28 @@ +{ pkgs, dir }: + +pkgs.writeShellScriptBin "pelican-install" '' + DIR=${dir} + + echo "Installing Pelican panel to $DIR ..." + if [ -d $DIR ]; then + echo "Directory $DIR already exists, exiting" + exit 1 + fi + echo "Creating directory ..." + mkdir -p $DIR + cd $DIR + + echo "Downloading Pelican panel ..." + curl -L https://github.com/pelican-dev/panel/releases/latest/download/panel.tar.gz | tar -xzv + echo "Installing Pelican panel using composer ..." + yes | composer install --no-dev --optimize-autoloader + + echo "Setting up the environment ..." + yes "" | php artisan p:environment:setup + + echo "Setting permissions ..." + chmod -R 755 storage/* bootstrap/cache/ + chown -R nginx:nginx $DIR + + echo "Pelican panel installed successfully" +'' \ No newline at end of file diff --git a/applications/pelican/panel/pelican-update.nix b/applications/pelican/panel/pelican-update.nix new file mode 100644 index 0000000..d359d44 --- /dev/null +++ b/applications/pelican/panel/pelican-update.nix @@ -0,0 +1,46 @@ +{ pkgs, dir }: + +pkgs.writeShellScriptBin "pelican-update" '' + DIR=${dir} + + echo "Updateing Pelican panel in $DIR ..." + if [ -d $DIR ]; then + echo "Directory $DIR found, entering maintenance mode ..." + else + echo "Directory $DIR does not exist, exiting" + exit 1 + fi + + cd $DIR + php artisan down + + echo "Downloading Pelican panel update ..." + curl -L https://github.com/pelican-dev/panel/releases/latest/download/panel.tar.gz | tar -xzv + + echo "Setting permissions ..." + chmod -R 755 storage/* bootstrap/cache + + echo "Updating Pelican panel using composer ..." + yes | composer install --no-dev --optimize-autoloader + + echo "Clearing compiled template cache ..." + php artisan view:clear + php artisan config:clear + + echo "Optimizing Pelican panel ..." + php artisan filament:optimize + + echo "Updating the database ..." + php artisan migrate --seed --force + + echo "Setting permissions ..." + chown -R nginx:nginx $DIR + + echo "Restart Pelican queue service ..." + systemctl restart pelican-queue.service + + echo "Exiting maintenance mode ..." + php artisan up + + echo "Pelican panel updated successfully" +'' \ No newline at end of file diff --git a/applications/pelican/wings/package.nix b/applications/pelican/wings/package.nix new file mode 100644 index 0000000..fa483e9 --- /dev/null +++ b/applications/pelican/wings/package.nix @@ -0,0 +1,19 @@ +{ stdenv, lib, fetchurl, docker, gnutar }: + +stdenv.mkDerivation rec { + pname = "pelican-wings"; + version = "v1.0.0-beta6"; + + src = fetchurl { + url = "https://github.com/pelican-dev/wings/releases/download/${version}/wings_linux_amd64"; + hash = "sha256-a2T4BjqS8Hy5YqwDEJpbvGqqsrVjdRhxvJLgk3MCXag="; + }; + + buildInputs = [ docker gnutar ]; + + phases = [ "installPhase" ]; + + installPhase = '' + install -D $src $out/bin/wings + ''; +} \ No newline at end of file diff --git a/applications/pelican/wings/wings.nix b/applications/pelican/wings/wings.nix new file mode 100644 index 0000000..0dd8b24 --- /dev/null +++ b/applications/pelican/wings/wings.nix @@ -0,0 +1,42 @@ +{ inputs, pkgs, lib, config, ... }: + +with lib; let + cfg = config.modules.pelican-wings; +in { + options = { + modules.pelican-wings = { + enable = mkEnableOption "Pelican Wings"; + }; + }; + + config = mkIf cfg.enable { + networking.firewall.allowedTCPPorts = [ 8080 8443 ]; + + virtualisation.docker.enable = true; + + environment.systemPackages = [ + ( pkgs.callPackage ./package.nix {} ) + ]; + + systemd.services.pelican-wings = { + description = "Wings Daemon"; + after = [ "docker.service" ]; + requires = [ "docker.service" ]; + partOf = [ "docker.service" ]; + + serviceConfig = { + User = "root"; + WorkingDirectory = "/etc/pelican"; + LimitNOFILE = 4096; + PIDFile = "/var/run/wings/daemon.pid"; + ExecStart = "/run/current-system/sw/bin/wings"; + Restart = "on-failure"; + startLimitInterval = 180; + startLimitBurst = 30; + RestartSec = "5"; + }; + + wantedBy = [ "multi-user.target" ]; + }; + }; +} \ No newline at end of file -- 2.46.1 From de1aea7abddb43318ed9df75ae7a0acc46606b14 Mon Sep 17 00:00:00 2001 From: Brendan Golden Date: Mon, 9 Dec 2024 23:08:39 +0000 Subject: [PATCH 3/5] feat: got teh panel working --- applications/pelican/nginx.nix | 29 ++- ...-install.nix => pelican-panel-install.nix} | 10 +- ...an-update.nix => pelican-panel-update.nix} | 10 +- .../package.nix => pelican-wing-package.nix} | 15 +- applications/pelican/pelican.nix | 244 ++++++++++++++++++ flake.nix | 4 + machines/{retired => }/optimus.nix | 10 +- 7 files changed, 294 insertions(+), 28 deletions(-) rename applications/pelican/{panel/pelican-install.nix => pelican-panel-install.nix} (93%) rename applications/pelican/{panel/pelican-update.nix => pelican-panel-update.nix} (95%) rename applications/pelican/{wings/package.nix => pelican-wing-package.nix} (73%) create mode 100644 applications/pelican/pelican.nix rename machines/{retired => }/optimus.nix (79%) diff --git a/applications/pelican/nginx.nix b/applications/pelican/nginx.nix index b1bb259..587db71 100644 --- a/applications/pelican/nginx.nix +++ b/applications/pelican/nginx.nix @@ -1,6 +1,10 @@ -{ lib, config, pkgs, ... }: -with lib; -let +{ + lib, + config, + pkgs, + ... +}: +with lib; let appUser = "nginx"; name = "panel"; module = "pelican-panel"; @@ -8,15 +12,14 @@ let serverName = "${name}."; dataDir = "/var/www/pelican/public"; port = 443; -in -{ +in { options.modules.nginx.${name} = { enable = mkEnableOption "Enable ${name}"; }; config = mkIf cfg.enable { modules.${module}.enable = true; - networking.firewall.allowedTCPPorts = [ port ]; + networking.firewall.allowedTCPPorts = [port]; services.phpfpm.pools.${appUser} = { user = appUser; @@ -36,7 +39,13 @@ in services.nginx.virtualHosts."${serverName}" = { root = "${dataDir}"; - listen = [{ inherit port; addr="0.0.0.0"; ssl=true; }]; + listen = [ + { + inherit port; + addr = "0.0.0.0"; + ssl = true; + } + ]; forceSSL = true; enableACME = true; @@ -71,7 +80,7 @@ in extraConfig = '' try_files $uri $uri/ /index.php?$query_string; ''; - }; + }; "/favicon.ico".extraConfig = '' access_log off; @@ -83,7 +92,7 @@ in log_not_found off; ''; - "~ \\.php$" = { + "~ \\.php$" = { extraConfig = '' fastcgi_split_path_info ^(.+\.php)(/.+)$; fastcgi_pass unix:${config.services.phpfpm.pools.${appUser}.socket}; @@ -107,4 +116,4 @@ in }; }; }; -} \ No newline at end of file +} diff --git a/applications/pelican/panel/pelican-install.nix b/applications/pelican/pelican-panel-install.nix similarity index 93% rename from applications/pelican/panel/pelican-install.nix rename to applications/pelican/pelican-panel-install.nix index 75e3f53..da372e4 100644 --- a/applications/pelican/panel/pelican-install.nix +++ b/applications/pelican/pelican-panel-install.nix @@ -1,5 +1,7 @@ -{ pkgs, dir }: - +{ + pkgs, + dir, +}: pkgs.writeShellScriptBin "pelican-install" '' DIR=${dir} @@ -22,7 +24,7 @@ pkgs.writeShellScriptBin "pelican-install" '' echo "Setting permissions ..." chmod -R 755 storage/* bootstrap/cache/ - chown -R nginx:nginx $DIR + chown -R nginx:acme $DIR echo "Pelican panel installed successfully" -'' \ No newline at end of file +'' diff --git a/applications/pelican/panel/pelican-update.nix b/applications/pelican/pelican-panel-update.nix similarity index 95% rename from applications/pelican/panel/pelican-update.nix rename to applications/pelican/pelican-panel-update.nix index d359d44..a159659 100644 --- a/applications/pelican/panel/pelican-update.nix +++ b/applications/pelican/pelican-panel-update.nix @@ -1,5 +1,7 @@ -{ pkgs, dir }: - +{ + pkgs, + dir, +}: pkgs.writeShellScriptBin "pelican-update" '' DIR=${dir} @@ -34,7 +36,7 @@ pkgs.writeShellScriptBin "pelican-update" '' php artisan migrate --seed --force echo "Setting permissions ..." - chown -R nginx:nginx $DIR + chown -R nginx:acme $DIR echo "Restart Pelican queue service ..." systemctl restart pelican-queue.service @@ -43,4 +45,4 @@ pkgs.writeShellScriptBin "pelican-update" '' php artisan up echo "Pelican panel updated successfully" -'' \ No newline at end of file +'' diff --git a/applications/pelican/wings/package.nix b/applications/pelican/pelican-wing-package.nix similarity index 73% rename from applications/pelican/wings/package.nix rename to applications/pelican/pelican-wing-package.nix index fa483e9..088ed4f 100644 --- a/applications/pelican/wings/package.nix +++ b/applications/pelican/pelican-wing-package.nix @@ -1,5 +1,10 @@ -{ stdenv, lib, fetchurl, docker, gnutar }: - +{ + stdenv, + lib, + fetchurl, + docker, + gnutar, +}: stdenv.mkDerivation rec { pname = "pelican-wings"; version = "v1.0.0-beta6"; @@ -9,11 +14,11 @@ stdenv.mkDerivation rec { hash = "sha256-a2T4BjqS8Hy5YqwDEJpbvGqqsrVjdRhxvJLgk3MCXag="; }; - buildInputs = [ docker gnutar ]; + buildInputs = [docker gnutar]; - phases = [ "installPhase" ]; + phases = ["installPhase"]; installPhase = '' install -D $src $out/bin/wings ''; -} \ No newline at end of file +} diff --git a/applications/pelican/pelican.nix b/applications/pelican/pelican.nix new file mode 100644 index 0000000..395f155 --- /dev/null +++ b/applications/pelican/pelican.nix @@ -0,0 +1,244 @@ +{ + inputs, + pkgs, + lib, + config, + ... +}: +with lib; let + name = "pelican"; + cfg = config.services.skynet."${name}"; + php_pool = name; + domain_panel = "${cfg.panel.domain.sub}.${cfg.panel.domain.base}.${cfg.panel.domain.tld}"; +in { + imports = [ + ]; + + options.services.skynet."${name}" = { + panel = { + enable = mkEnableOption "Pelican Panel"; + + dir = mkOption { + type = types.str; + default = "/var/www/pelican"; + }; + + domain = { + tld = mkOption { + type = types.str; + default = "ie"; + }; + + base = mkOption { + type = types.str; + default = "skynet"; + }; + + sub = mkOption { + type = types.str; + #default = name; + default = "panel-test"; + }; + }; + }; + + wing = { + enable = mkEnableOption "Pelican Wing"; + }; + }; + + config = mkMerge [ + (mkIf cfg.panel.enable { + services.skynet.acme.domains = [ + domain_panel + ]; + + # using https://nixos.org/manual/nixos/stable/index.html#module-services-gitlab as a guide + services.skynet.dns.records = [ + { + record = cfg.panel.domain.sub; + r_type = "CNAME"; + value = config.services.skynet.host.name; + } + ]; + + environment.systemPackages = let + dir = cfg.panel.dir; + in [ + pkgs.curl + pkgs.gnutar + pkgs.unzip + pkgs.php83 + pkgs.php83Packages.composer + pkgs.php83Extensions.gd + pkgs.php83Extensions.mysqli + pkgs.php83Extensions.mbstring + pkgs.php83Extensions.bcmath + pkgs.php83Extensions.xml + pkgs.php83Extensions.curl + pkgs.php83Extensions.zip + pkgs.php83Extensions.intl + pkgs.php83Extensions.sqlite3 + (import ./pelican-panel-install.nix { + inherit pkgs; + inherit dir; + }) + (import ./pelican-panel-update.nix { + inherit pkgs; + inherit dir; + }) + ]; + + systemd.timers."pelican-cron" = { + wantedBy = ["timers.target"]; + timerConfig = { + OnBootSec = "5m"; + OnUnitActiveSec = "1m"; + Unit = "pelican-cron.service"; + }; + }; + + systemd.services."pelican-cron" = { + script = '' + ${pkgs.php83}/bin/php ${cfg.panel.dir}/artisan schedule:run >> /dev/null 2>&1 + ''; + serviceConfig = { + Type = "oneshot"; + }; + }; + + systemd.services.pelican-queue = { + wantedBy = ["multi-user.target"]; + serviceConfig = { + User = config.services.nginx.user; + Group = config.services.nginx.group; + Restart = "always"; + ExecStart = "${pkgs.php83}/bin/php -q ${cfg.panel.dir}/artisan queue:work --tries=3"; + startLimitInterval = 180; + startLimitBurst = 30; + RestartSec = "5"; + }; + }; + + services.phpfpm.pools.${php_pool} = { + user = config.services.nginx.user; + group = config.services.nginx.group; + settings = { + "listen.owner" = config.services.nginx.user; + "listen.group" = config.services.nginx.group; + "listen.mode" = "0600"; + "pm" = "dynamic"; + "pm.max_children" = 75; + "pm.start_servers" = 10; + "pm.min_spare_servers" = 5; + "pm.max_spare_servers" = 20; + "pm.max_requests" = 500; + "catch_workers_output" = 1; + }; + }; + + services.nginx.virtualHosts."${domain_panel}" = { + root = "${cfg.panel.dir}/public"; + + forceSSL = true; + useACMEHost = "skynet"; + + extraConfig = '' + index index.html index.htm index.php; + charset utf-8; + + access_log off; + error_log /var/log/nginx/pelican.app-error.log error; + + client_max_body_size 100m; + client_body_timeout 120s; + + sendfile off; + + ssl_session_cache shared:SSL:10m; + ssl_protocols TLSv1.2 TLSv1.3; + ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384"; + ssl_prefer_server_ciphers on; + + add_header X-Content-Type-Options nosniff; + add_header X-XSS-Protection "1; mode=block"; + add_header X-Robots-Tag none; + add_header Content-Security-Policy "frame-ancestors 'self'"; + add_header X-Frame-Options DENY; + add_header Referrer-Policy same-origin; + ''; + + locations = { + "/" = { + extraConfig = '' + try_files $uri $uri/ /index.php?$query_string; + ''; + }; + + "/favicon.ico".extraConfig = '' + access_log off; + log_not_found off; + ''; + + "/robots.txt".extraConfig = '' + access_log off; + log_not_found off; + ''; + + "~ \\.php$" = { + extraConfig = '' + fastcgi_split_path_info ^(.+\.php)(/.+)$; + fastcgi_pass unix:${config.services.phpfpm.pools.${php_pool}.socket}; + fastcgi_index index.php; + include ${config.services.nginx.package}/conf/fastcgi_params; + fastcgi_param PHP_VALUE "upload_max_filesize = 100M \n post_max_size=100M"; + fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; + fastcgi_param HTTP_PROXY ""; + fastcgi_intercept_errors off; + fastcgi_buffer_size 16k; + fastcgi_buffers 4 16k; + fastcgi_connect_timeout 300; + fastcgi_send_timeout 300; + fastcgi_read_timeout 300; + ''; + }; + + "~ /\\.ht".extraConfig = '' + deny all; + ''; + }; + }; + }) + + (mkIf cfg.wing.enable { + networking.firewall.allowedTCPPorts = [8080 8443]; + + virtualisation.docker.enable = true; + + environment.systemPackages = [ + (pkgs.callPackage ./pelican-wing-package.nix {}) + ]; + + systemd.services.pelican-wings = { + description = "Wings Daemon"; + after = ["docker.service"]; + requires = ["docker.service"]; + partOf = ["docker.service"]; + + serviceConfig = { + User = "root"; + WorkingDirectory = "/etc/pelican"; + LimitNOFILE = 4096; + PIDFile = "/var/run/wings/daemon.pid"; + ExecStart = "/run/current-system/sw/bin/wings"; + Restart = "on-failure"; + startLimitInterval = 180; + startLimitBurst = 30; + RestartSec = "5"; + }; + + wantedBy = ["multi-user.target"]; + }; + }) + ]; +} diff --git a/flake.nix b/flake.nix index 6ae4c98..bf876fe 100644 --- a/flake.nix +++ b/flake.nix @@ -148,6 +148,10 @@ # metrics ariia = import ./machines/ariia.nix; + + + # games server - panel/host + optimus = import ./machines/optimus.nix; }; }; } diff --git a/machines/retired/optimus.nix b/machines/optimus.nix similarity index 79% rename from machines/retired/optimus.nix rename to machines/optimus.nix index 6f36726..e766795 100644 --- a/machines/retired/optimus.nix +++ b/machines/optimus.nix @@ -16,8 +16,8 @@ Notes: ... }: let # name of the server, sets teh hostname and record for it - name = "optimus"; - ip_pub = "193.1.99.112"; + name = "optimus-test"; + ip_pub = "193.1.99.85"; hostname = "${name}.skynet.ie"; host = { ip = ip_pub; @@ -26,7 +26,7 @@ Notes: }; in { imports = [ - ../applications/games.nix + ../applications/pelican/pelican.nix ]; deployment = { @@ -39,7 +39,7 @@ in { services.skynet = { host = host; - backup.enable = true; - games.enable = true; + #backup.enable = true; + pelican.panel.enable = true; }; } -- 2.46.1 From 58787628d224ac8b139306e5b20ca06fbe202d1b Mon Sep 17 00:00:00 2001 From: Brendan Golden Date: Tue, 10 Dec 2024 00:43:48 +0000 Subject: [PATCH 4/5] nix: fmt --- applications/pelican/panel/panel.nix | 39 ++++++++++++++++++---------- applications/pelican/wings/wings.nix | 23 +++++++++------- 2 files changed, 39 insertions(+), 23 deletions(-) diff --git a/applications/pelican/panel/panel.nix b/applications/pelican/panel/panel.nix index c5bc198..a1bcfd4 100644 --- a/applications/pelican/panel/panel.nix +++ b/applications/pelican/panel/panel.nix @@ -1,5 +1,10 @@ -{ inputs, pkgs, lib, config, ... }: - +{ + inputs, + pkgs, + lib, + config, + ... +}: with lib; let cfg = config.modules.pelican-panel; dir = "/var/www/pelican"; @@ -26,12 +31,18 @@ in { pkgs.php83Extensions.zip pkgs.php83Extensions.intl pkgs.php83Extensions.sqlite3 - ( import ./pelican-install.nix { inherit pkgs; inherit dir; } ) - ( import ./pelican-update.nix { inherit pkgs; inherit dir; } ) + (import ./pelican-install.nix { + inherit pkgs; + inherit dir; + }) + (import ./pelican-update.nix { + inherit pkgs; + inherit dir; + }) ]; systemd.timers."pelican-cron" = { - wantedBy = [ "timers.target" ]; + wantedBy = ["timers.target"]; timerConfig = { OnBootSec = "5m"; OnUnitActiveSec = "1m"; @@ -49,16 +60,16 @@ in { }; systemd.services.pelican-queue = { - wantedBy = [ "multi-user.target" ]; + wantedBy = ["multi-user.target"]; serviceConfig = { - User = "nginx"; - Group = "nginx"; - Restart = "always"; - ExecStart = "${pkgs.php83}/bin/php ${dir}/artisan queue:work --tries=3"; - startLimitInterval = 180; - startLimitBurst = 30; - RestartSec = "5"; + User = "nginx"; + Group = "nginx"; + Restart = "always"; + ExecStart = "${pkgs.php83}/bin/php ${dir}/artisan queue:work --tries=3"; + startLimitInterval = 180; + startLimitBurst = 30; + RestartSec = "5"; }; }; }; -} \ No newline at end of file +} diff --git a/applications/pelican/wings/wings.nix b/applications/pelican/wings/wings.nix index 0dd8b24..af32740 100644 --- a/applications/pelican/wings/wings.nix +++ b/applications/pelican/wings/wings.nix @@ -1,5 +1,10 @@ -{ inputs, pkgs, lib, config, ... }: - +{ + inputs, + pkgs, + lib, + config, + ... +}: with lib; let cfg = config.modules.pelican-wings; in { @@ -10,19 +15,19 @@ in { }; config = mkIf cfg.enable { - networking.firewall.allowedTCPPorts = [ 8080 8443 ]; + networking.firewall.allowedTCPPorts = [8080 8443]; virtualisation.docker.enable = true; environment.systemPackages = [ - ( pkgs.callPackage ./package.nix {} ) + (pkgs.callPackage ./package.nix {}) ]; systemd.services.pelican-wings = { description = "Wings Daemon"; - after = [ "docker.service" ]; - requires = [ "docker.service" ]; - partOf = [ "docker.service" ]; + after = ["docker.service"]; + requires = ["docker.service"]; + partOf = ["docker.service"]; serviceConfig = { User = "root"; @@ -36,7 +41,7 @@ in { RestartSec = "5"; }; - wantedBy = [ "multi-user.target" ]; + wantedBy = ["multi-user.target"]; }; }; -} \ No newline at end of file +} -- 2.46.1 From 34b2ef6a8464b811b003f93a5f19c502d9939148 Mon Sep 17 00:00:00 2001 From: Brendan Golden Date: Tue, 10 Dec 2024 00:44:38 +0000 Subject: [PATCH 5/5] feat: got teh wing working its not 100% ready for prod yet as there is no way to transfer from ptero yet --- applications/pelican/Notes.md | 16 +++++++++++++++ applications/pelican/pelican.nix | 35 ++++++++++++++++++++++++++++++++ flake.nix | 5 ++--- machines/optimus.nix | 8 +++++++- 4 files changed, 60 insertions(+), 4 deletions(-) create mode 100644 applications/pelican/Notes.md diff --git a/applications/pelican/Notes.md b/applications/pelican/Notes.md new file mode 100644 index 0000000..8516be7 --- /dev/null +++ b/applications/pelican/Notes.md @@ -0,0 +1,16 @@ +# Notes on Pelican + +## Panel + +* ``pelican-install`` is in env that can be used to isntall +* then go to ``panel-address.skynet.ie/installer`` to finish the setup + +## Wing + +In the config the ssl must be set as so: +```yaml + ssl: + enabled: true + cert: /var/lib/acme/skynet/fullchain.pem + key: /var/lib/acme/skynet/key.pem +``` \ No newline at end of file diff --git a/applications/pelican/pelican.nix b/applications/pelican/pelican.nix index 395f155..e0ecce1 100644 --- a/applications/pelican/pelican.nix +++ b/applications/pelican/pelican.nix @@ -44,6 +44,10 @@ in { wing = { enable = mkEnableOption "Pelican Wing"; + + node_name = mkOption { + type = types.str; + }; }; }; @@ -211,6 +215,26 @@ in { }) (mkIf cfg.wing.enable { + services.skynet.acme.domains = [ + "${cfg.wing.node_name}.${domain_panel}" + ]; + + # using https://nixos.org/manual/nixos/stable/index.html#module-services-gitlab as a guide + services.skynet.dns.records = [ + { + record = "${cfg.wing.node_name}.${cfg.panel.domain.sub}"; + r_type = "CNAME"; + value = config.services.skynet.host.name; + } + ]; + services.nginx.virtualHosts = { + "${cfg.wing.node_name}.${domain_panel}" = { + forceSSL = true; + useACMEHost = "skynet"; + locations."/".proxyPass = "http://127.0.0.1:8080"; + }; + }; + networking.firewall.allowedTCPPorts = [8080 8443]; virtualisation.docker.enable = true; @@ -219,6 +243,17 @@ in { (pkgs.callPackage ./pelican-wing-package.nix {}) ]; + users.groups.pelican = {}; + users.users.pelican = { + #createHome = true; + isSystemUser = true; + #home = "/etc/pelican"; + group = "pelican"; + extraGroups = ["docker" "acme"]; + # X11 is to ensure the directory can be traversed + #homeMode = "711"; + }; + systemd.services.pelican-wings = { description = "Wings Daemon"; after = ["docker.service"]; diff --git a/flake.nix b/flake.nix index bf876fe..6699f9e 100644 --- a/flake.nix +++ b/flake.nix @@ -149,9 +149,8 @@ # metrics ariia = import ./machines/ariia.nix; - - # games server - panel/host - optimus = import ./machines/optimus.nix; + # games server - panel/host + optimus = import ./machines/optimus.nix; }; }; } diff --git a/machines/optimus.nix b/machines/optimus.nix index e766795..dbc085a 100644 --- a/machines/optimus.nix +++ b/machines/optimus.nix @@ -40,6 +40,12 @@ in { services.skynet = { host = host; #backup.enable = true; - pelican.panel.enable = true; + pelican = { + panel.enable = true; + wing = { + enable = true; + node_name = "node01"; + }; + }; }; } -- 2.46.1