preparing to move headscale to vno1-oh2

data.nix

@@ -28,7 +28,16 @@ rec {
 
   hosts = {
     "vno1-oh2.servers.jakst" = rec {
-      extraHostNames = ["dl.jakstys.lt" "git.jakstys.lt" "vno1-oh2.jakstys.lt" publicIP jakstIP];
+      extraHostNames = [
+        "dl.jakstys.lt"
+        "git.jakstys.lt"
+        "vno1-oh2.jakstys.lt"
+        "jakstys.lt"
+        "www.jakstys.lt"
+        "vpn.jakstys.lt"
+        publicIP
+        jakstIP
+      ];
       publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHtYsaht57g2sp6UmLHqsCK+fHjiiZ0rmGceFmFt88pY";
       initrdPubKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKns3+EIPqKeoB5OIxANIkppb5ICOmkW8X1DOKJPeRWr";
       publicIP = "88.223.107.21";
@@ -40,7 +49,7 @@ rec {
       jakstIP = "100.89.176.2";
     };
     "hel1-a.servers.jakst" = rec {
-      extraHostNames = ["hel1-a.jakstys.lt" "vpn.jakstys.lt" "jakstys.lt" "www.jakstys.lt" publicIP jakstIP];
+      extraHostNames = ["hel1-a.jakstys.lt" publicIP jakstIP];
       publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF6Wd2lKrpP2Gqul10obMo2dc1xKaaLv0I4FAnfIaFKu";
       initrdPubKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEzt0eaSRTAfM2295x4vACEd5VFqVeYJPV/N9ZUq+voP";
       publicIP = "65.21.7.119";

flake.nix

@@ -61,7 +61,6 @@
             age.secrets.root-passwd-hash.file = ./secrets/root_passwd_hash.age;
             age.secrets.zfs-passphrase-vno1-oh2.file = ./secrets/vno1-oh2/zfs-passphrase.age;
 
-            age.secrets.headscale-client-oidc.file = ./secrets/hel1-a/headscale/oidc_client_secret2.age;
             age.secrets.borgbackup-password.file = ./secrets/hel1-a/borgbackup/password.age;
             age.secrets.sasl-passwd.file = ./secrets/postfix_sasl_passwd.age;
           }
@@ -85,6 +84,7 @@
             age.secrets.root-passwd-hash.file = ./secrets/root_passwd_hash.age;
             age.secrets.zfs-passphrase-hel1-a.file = ./secrets/hel1-a/zfs-passphrase.age;
 
+            age.secrets.headscale-client-oidc.file = ./secrets/headscale/oidc_client_secret2.age;
             age.secrets.sasl-passwd.file = ./secrets/postfix_sasl_passwd.age;
             age.secrets.borgbackup-password.file = ./secrets/vno1-oh2/borgbackup/password.age;
             age.secrets.grafana-oidc.file = ./secrets/grafana.jakstys.lt/oidc.age;

hosts/hel1-a/configuration.nix

@@ -59,11 +59,10 @@
       node_exporter.enable = true;
 
       headscale = {
-        enable = true;
+        enable = false;
         clientOidcPath = config.age.secrets.headscale-client-oidc.path;
         subnetCIDR = myData.tailscale_subnet.cidr;
       };
-
       deployerbot = {
         follower = {
           enable = true;

hosts/vno1-oh2/configuration.nix

@@ -53,10 +53,11 @@
           "/var/lib" = {
             repo = "zh2769@zh2769.rsync.net:${config.networking.hostName}.${config.networking.domain}-var_lib";
             paths = [
-              "/var/lib/.snapshot-latest/private/soju"
               "/var/lib/.snapshot-latest/gitea"
               "/var/lib/.snapshot-latest/grafana"
+              "/var/lib/.snapshot-latest/headscale"
               "/var/lib/.snapshot-latest/matrix-synapse"
+              "/var/lib/.snapshot-latest/private/soju"
             ];
             backup_at = "*-*-* 00:01:00";
           };
@@ -99,6 +100,12 @@
 
       gitea.enable = true;
 
+      headscale = {
+        enable = true;
+        clientOidcPath = config.age.secrets.headscale-client-oidc.path;
+        subnetCIDR = myData.tailscale_subnet.cidr;
+      };
+
       nsd-acme = {
         enable = true;
         zones."grafana.jakstys.lt" = {

secrets.nix

@@ -20,7 +20,6 @@ let
 in
   {}
   // mk ([hel1-a] ++ motiejus) [
-    "secrets/hel1-a/headscale/oidc_client_secret2.age"
     "secrets/hel1-a/borgbackup/password.age"
     "secrets/vno1-oh2/zfs-passphrase.age"
   ]
@@ -29,6 +28,7 @@ in
     "secrets/vno1-oh2/borgbackup/password.age"
     "secrets/grafana.jakstys.lt/oidc.age"
     "secrets/letsencrypt/account.key.age"
+    "secrets/headscale/oidc_client_secret2.age"
 
     "secrets/synapse/jakstys_lt_signing_key.age"
     "secrets/synapse/registration_shared_secret.age"

secrets/grafana.jakstys.lt/oidc.age

@@ -1,13 +1,13 @@
 age-encryption.org/v1
--> ssh-ed25519 gJrHQg g0cUapt08wymIYGH8cI8P9vBjaG818mmV4BW9yJb7Fo
+-> ssh-ed25519 gJrHQg FIcNGRpq57RyXSx7ggde3ix79ijt7EHnU8LhMRrXiGk
-/kT1CMN2oe4BqcPeb/scHANlC7DdVa1uFB1k1h3oSGU
+feCa7Xln/wTFxSfBt1wW9nJDUunp1ng01kRR4fX3wtk
--> X25519 /X86vIxq5E7CNzoWg7hHAj/57jfWQrJY+968Nf00IXI
+-> X25519 9a/Z7fQMlb2Ossnx6OQfOEn+Sc7EkjH1qvRnAUNO3nI
-cKui+bdQ754Tiz99m4omq29BH2b0d/gNAx9PjbPcioY
+gfpPM7RauKm2NnOfER+zJvJjaVEZOmXjxkbWKFGOUGw
--> piv-p256 +y2G/w A9y1M2rOLGK/+RDsd4crWsweJwwngmchoHA0Mll4/gg3
+-> piv-p256 +y2G/w A4oYywSwobBVMGs3RTxmvnh7TQV1FYlNYrUVVqEjFUFa
-ZPpfflSkWW4EHggYLOx2ji0fRVU6YJJE8UzULRXOhMk
+qVGtilxTsOOkYaSQ8c8Io4JCqxuJSHB8szEEWc9HWNU
--> piv-p256 jNqd3A AxJFZsZrrh8tkwacjv+fZZ3q4Q4siPDwsS1xiune9+HF
+-> piv-p256 jNqd3A AsVFA1wUy811MHNgMoCLvd3ETXbd8XxSr3uCgqGh7414
-5K+zJva+g9ZhzOKD4tsutZJ6rsxoLzUaRTFPXbUwxrA
+d366KUCPHzScDv4A+9DkUcqRgfnpzoHwKXPTI6RM1Pc
--> "-grease Uy E' 4<(:Of ;4gD4YCS
+-> pKOSD-grease jSg. !!V_P>| +K ~E
-ZU4GUoXlKqEU
+JklMXPMAv8vHnxBr/F2g4tAKmDoe0ub/G45MSxmG5E8/HtE
---- 4ww60rHhKhcXJZQdDdROkgQyywCwdIQ/kgFKHwmR6/U
+--- zzyjEbFgNDFzw+NQaFyCJlqmkuYubPu2VKnkR2RHIcc
-%<25>eL<65>?<15>5Uǡ<55><C7A1><EFBFBD>g<EFBFBD>J
<01>
+<EFBFBD><EFBFBD>ܥ<EFBFBD><EFBFBD><EFBFBD>lJ<14>NT<4E><54>s<EFBFBD>ۍ<>-LL<13>H<EFBFBD><48><EFBFBD>|<7C>C<EFBFBD>b<18><>J;<3B>k<EFBFBD><6B>JQ4<51><34><EFBFBD><EFBFBD><EFBFBD><15>`<60><07><>U<EFBFBD><55>g1<17><>ur<75><14>{[<5B>_Q<5F>rR<72>[<5B>=1

secrets/headscale/oidc_client_secret2.age

@@ -0,0 +1,14 @@
+age-encryption.org/v1
+-> ssh-ed25519 gJrHQg /05rQ0bweVNFPoI6a7w4CMk8iKdObSnrK5mzU+OtAls
+fEO5kDvRF049alg3AMxTwJ+KiFoh+o/6gRYxFUEdIRI
+-> X25519 rGiyMZnRwYcvcoFkBXfwxDy71/F7RC4xL2ILY/3KAHE
+9thFbnnBvOJsopicp366uU3bJGJ2Tu4ETkhKFRWFU6A
+-> piv-p256 +y2G/w An1oipHxaTcuwMJtW2C+J7fiE4rafB19fCxouyW6k8Ml
+/JsGUuNknM1K9PEfrwOPr2r07sChEgy80GFytvH+1Tw
+-> piv-p256 jNqd3A A77/PWu+DQbUNVjv6CeDB98nSZPojVXlSmk8Ed8cW0Ya
+WPseJycaWCvC15+RvjJSpfyMR2kB8+jK4JIsE6fz2ws
+-> +WA-grease Z[ q+*
+p2PdS7tDHpBr3/2EQbUXqFs5H9hAkgvMy2hiYJR5gGgLjXXFdteza2DHAP4knXfZ
+iBXIy54
+--- H4QPWaIOL3GIPmPeRirGJ3W9zqjryG/cb4f+tMdJ8do
+OU<EFBFBD>"D1<44>s+<2B><><EFBFBD>& <20><><EFBFBD><EFBFBD>^<5E>)ĎI]J)"<22><>|<12>b<10>a<EFBFBD><61>2<><32>dcRﰅ )s<>x<7F>s*<19><><EFBFBD>s<EFBFBD>¦<EFBFBD>iH<69><48>L<EFBFBD>em<65>m1r<31>2

secrets/hel1-a/borgbackup/password.age

@@ -1,14 +1,14 @@
 age-encryption.org/v1
--> ssh-ed25519 vDjOfg 7G6AKoMP48rkdnmUTx3JoaVKC8vSJ/JwlFFCoh/x0T4
+-> ssh-ed25519 vDjOfg uZsTUwEu/YMai2awdIq/BQFWY3abjsVwkMEmdXnGdRE
-ZG+sv3YHaDr6wh7vu6c/Y/gfS02qXlVm6w9Q+DtaUBM
+Qb2875RKIevWlZLFI6p8nzYHJZWWBEaneJN3O3av9Nk
--> X25519 oX8s1kdObP8huSEMlzhuiZNnGC7uz4ln/3A6mMDI2Dk
+-> X25519 w4QdhZ6T83yEtmMmHYxuM6OzvfxKYnDRSrFNnT/DUEU
-gO5lVYwUTT+Due0S8MtAnXktRvr8oGSOM29WIP9MmEE
+0/wyhwb9l+apT4f3yLycoNdc8KAGD7jN01MP+rIQSQw
--> piv-p256 +y2G/w AwU2AGr0kQzwqdLH0x0jZr+FC6ERWkpE4uTW4gab/pYg
+-> piv-p256 +y2G/w A9zY1wzeRZns4KLJw9atZ3yeht6C3hn6ZX5/U6/gKsZj
-WYPix2q28T010olJcK+FH8rOqqN2h5CcHxvT1TmT68Q
+WDgCACCvTzWvrGEnyxH/5m8IYF2L+V0Oju+Bpc207oA
--> piv-p256 jNqd3A ApHqnQC3K3YbE32XV7r98uF/E7PhyUup21yMbgHuS+I5
+-> piv-p256 jNqd3A Aup30eQTR+vsmv1cax857STTmDcLZt/LYGr04A1b+gvN
-ec9Y+5JX5fNBjI6t1bjOdARPGmTaqYOcDhtZgru1Rvs
+EfrHZNnE0kVYs5pFPjMEJBGGvQWQMCduBYcLimR/5uM
--> Ce^Yz-grease ,JTHPY L+/=
+-> 8J-grease
-sESApKm7G6joyMmd2d3KWswKJ/8HMaAgteBHECLsa69531tLEt+ujkCdwR0jqb+n
+Ke8pF2bIDFLnG7x3WE0nVjs0/b7uiUCWsKkiMGfmGWweEPKp12WzW0I3nbY0W+RG
-BfF9JHqAecuH9eYj9eW7i7NcvoAtbNQJBHAo
+mkg2tLP/e3f3Bg1ojHGLAxviPNarGMLHggHfqA
---- mcMmuohtYTYiuEkcH1RHStI9R37avlr1LoutOkofD9g
+--- OpZ8utdErw6Y+ft54h+M8U7RqSpiMrVLmF5CeVgsOXA
-<EFBFBD>حt<EFBFBD><EFBFBD>*F.;<3B><>Wc<11><><06>-|Kb#<14><>\<5C><>
+<EFBFBD><17>0<EFBFBD>S<EFBFBD><53><EFBFBD>=PF<50><46>%<>)<29>t<EFBFBD><74>H<04>GP<><50>WD<57><44>^Q<>A##e%<25><>A~<7E><>UA><3E><><EFBFBD>

secrets/postfix_sasl_passwd.age

@@ -1,20 +1,17 @@
 age-encryption.org/v1
--> ssh-ed25519 vDjOfg EiYel1eqHtQEj43hiu6quafyM99P45uFjZY9lYoi3zA
+-> ssh-ed25519 vDjOfg 6fa6kHvbSkI6F9S54u7FMduv+YmuHUGTIZz0CiQhhnQ
-LZwfmsWIk5h92Cpwapbp3yaCS7CR5UrxEvyT5Cq4rKc
+sb9iRMQeU8w8GIh4/iczLHfq4HmFEEClyeVq0cTQ7rc
--> ssh-ed25519 gJrHQg LWRDAEKPdaN8twZQIMDdfXt3trtFDlo7XNHwtUfy+m4
+-> ssh-ed25519 gJrHQg 5Vne+RdTULf2Pqq2X9h2uu0Q4hGX9/FjfWcNkTJa0D8
-cGyusZ+nAYIbSf8HNk56kaBvZmS611GgKqSNbFcXKrE
++Uv7KvCDlAhPhS3vVwzH+SLFMkP2fIiuwvAETksdasc
--> ssh-ed25519 CBqt6Q +u/wA8HvtevNso40G7XTtNSNKAqx4YEfMHQkenOK0yI
+-> ssh-ed25519 CBqt6Q +gmJpUrMj+6ximFLkdW67k8TKfOQR1YAz20aPsixXxk
-d6TvbjYzab8x359nCn030BWXdim2ctr3zgcCA5lK+S8
+pM4H8b70EF/Ga4y77BPobxuUF/FawBcrLjVBxEdtvsM
--> X25519 Z7fou1Qt4oIKI8SQ84B+q7xkThME3TSADNqvAsvLC2I
+-> X25519 qbNRcP9+m4kubmSsRYE6vIU0F3x5D5hilQ27CP1O+GA
-rxbx10UaMCaYQrsH9JAKpWoS8LMwYh4ohkW5n300b5A
+BRiup/KQxlqX5JoWy7aJjon14Mruxv1JvftFshuyZKc
--> piv-p256 +y2G/w A1n6AYJiG0tx27wTrmqxr6rkm1OgRV+AzgJHHPUD9wr3
+-> piv-p256 +y2G/w ArRtqE+8sVRYvK8r6yj8UhYhCJeqzH1fYGo4yK6y/Mpa
-mR3Ac2aedvocKhfZa1meYHa5D0vx3FwX/94WKIIxNDQ
+iJRdwpx5glVPzuI60f1tSbBsWfECWIkUIY6wiIeF+yk
--> piv-p256 jNqd3A A9VMS4tvV7B5qXyrZiheZMNTpLayaXvh4f/aT4Ey8Afh
+-> piv-p256 jNqd3A A22i9InHF96PSCvrPWLmgS42MLwJwtMJAVYr9u4qjmD1
-kRk0hnI94fn9lv7/9wUg8AT/98mPbD69xILMmjA4vfc
+iqV25lJ5k+Xg8L+Q7Xc9EFQV+QnSJZgUJDy/eD8PKn4
--> d+-cp|lq-grease ,2Lg! sJ a ;,
+-> DcZ0C-grease
-ubRiOvE+OzriAqp2TSsMn9LjRQq7Vw+1mTLZVdyR2m2nNbq1b27AmKZGzi2MyWxi
+auoi
-NfA9KyiGW42U0W46
+--- XTP2L0fnjBcOJuu3VkZeGvO2QSVngpBuNtvQsqnXRDY
---- q1zYEFDCyNoHsbw/H4/N7uqO8+N2+ip3FEoSOPpTzUY
+<EFBFBD>M<><4D>(2[o<><6F>ӂ<EFBFBD>D<EFBFBD>}5<><35><EFBFBD><EFBFBD><EFBFBD>$$<24><>*<2A><0E>RZ<0E><>ƃ<EFBFBD><C683><EFBFBD>}<7D><><EFBFBD>TA<54>/<1D><>H<><48><EFBFBD>%w)o<>$<24>37Cet<65><13><><EFBFBD>Z<EFBFBD><5A><EFBFBD><EFBFBD><EFBFBD>7ޮ/<2F><><EFBFBD><EFBFBD>֩<EFBFBD><D6A9>'<27><>9U<12>><3E><><EFBFBD>S]<5D>E	<09>N<EFBFBD>j<17>kV˕lK<6C><4B><EFBFBD>u<EFBFBD>
-<EFBFBD>w<1C>}	<09>pb]<5D>3<EFBFBD><33><EFBFBD><EFBFBD>f<>˸:<3A><><03><><EFBFBD>"1<><31><EFBFBD><7F>g΀XE<>n{<7B>vzR<7A><52>F <20>LT^Ƌ<><C68B>.&<[<5B><><EFBFBD>c<EFBFBD><63>|A<>7
-2<><32>L+|I$<24>F<EFBFBD>,<2C><><EFBFBD>4<EFBFBD><34><EFBFBD><06><>KO<4B><4F><EFBFBD>s<EFBFBD><73>u
-*<2A>DdkgG<67><47>Q<EFBFBD><51>&Q<1C>?<3F>

secrets/synapse/registration_shared_secret.age

@@ -1,16 +1,15 @@
 age-encryption.org/v1
--> ssh-ed25519 vDjOfg m4rtRYPY07eFsAlic15EtlYeZM96le2riRPmbHYvqiY
+-> ssh-ed25519 gJrHQg ffxdmFgRbbThAPsXCqrmqlJeaKj50YS+hM0GYGLTQkU
-iOdi9y+on0YMKlhTX3MX8KHNzQq0LRySZ4HTgXHVQeA
+MxEkjQzTlJ9GGLpohAoVa7w1AJKaxCJRca7dYGLtBzA
--> ssh-ed25519 gJrHQg EiUpoCUJXu9HSk/wRPQ+RHIIPQP1otYZRu8iMs782Fk
+-> X25519 8OTgARYYgWi1PeFLEDUndJ9xSs/W9Z6p2hETrWaurkk
-hlBg3Tipre4ufVYnIVmRAd7dWK0PqCOCuLRfQ4v4I/4
+D4DvfXCZ7TrloVYbXx/DLIrW5yW5PhhEUzOrte3RPac
--> X25519 /86obR8d8Jl8aaKncq08i7ZFuo5DQzLp64eRlCB0MHk
+-> piv-p256 +y2G/w A4iElwc6M+dTz/LVi0l/vO73zSf3bE0t8gT0/zGF9dWq
-yJa+Vo6JF5y2Y74hKXyB33mU5/HTGrMFJCw9Qa6l/Ug
+mKdyh0I/8Dmv4DRpcE+RhPjp8tTuV3UI0uI/LYt0noQ
--> piv-p256 +y2G/w Awl4liKWL0vySkiJhn0BtSsOTpXWo5w2mghdxOrvZXB9
+-> piv-p256 jNqd3A Ai4ZOf+hB30/3IkpLVzeDBbBkoAbsSP+/esY3SACYt4G
-FgTT0D96jUrFM/LWCgeYdvkm20K1ev8y0cD4F69DaLY
+Z/DYBsb8TVt75Nvt9KNPqGuGhLRtT+KJcNsgTjRDsBE
--> piv-p256 jNqd3A A8zrAGaoqSfNPu2nN5kpDgxzf7U3LSLRai/ybOrrxw/a
+-> p-grease %V0%NL0/ Jqtp61!y 4 %*ii3\%
-L1NlIPrfPal2psnMXJyWXMojGURZCZvu0Md6MLlAlPw
+3CEt8jshnha3CaS3g1/gsHuNonR/Nn17C+aOmMUt7+HTvoVZpsSWMb+y5q4LR1S0
--> ia-grease 8* vU>`M"YB 4g(+@RC 0EBf9>`X
+vHsquuywbw257q4E+foJPlKXtK/nbRATvKXpHAC5sSPwbw+aye4zSLWU8rv+yA
-DkPPlaWTheaefP4kLlUy5nr/AUe1O/ZSx2ZSy53cqYkfIMLabjJtLyOk/GGOD/FO
+--- 0O9vjzCZYCyhj+Wpf9n8JTUqHmXNLifflFBpYvLFL80
-OK3AVQTOMzPjWychVK3XSvXbmupMia3kyUy7HrBiOXZZlxJxKPwrW8E
+<EFBFBD>
---- uPWs9132FkHzQ7UWsf/9fehJjXipMH6uNFBnMHW1i3A
+?<3F>l<EFBFBD>t<EFBFBD><74>7-R{<7B>Bf<42><66>8<EFBFBD>@<40>W<EFBFBD><57><EFBFBD>t<7F><74><EFBFBD>4<EFBFBD>K<EFBFBD><0B>UI&wU˘<55>m<EFBFBD><6D><EFBFBD>O<EFBFBD>"<22>y<EFBFBD><79>O<EFBFBD><4F><EFBFBD><02>lJ<6C><4A>I<EFBFBD><49><EFBFBD>&<26><><EFBFBD><EFBFBD>W<EFBFBD>B<EFBFBD>=2<><32>e<EFBFBD>{<02><>?<3F># <20>
-D<EFBFBD><EFBFBD>yV<EFBFBD><EFBFBD><EFBFBD>?<3F><>2<EFBFBD>&w"<22>
<1A><EFBFBD>ia<0C><>#<23><><NDB<04>iK<69><4B>ܙ<>Ae-<2D><>M-<2D>0:<3A>c<EFBFBD>eK<14><02><15><>L<EFBFBD>\<5C>&<26><06>C<EFBFBD>'̵<0C><><EFBFBD><EFBFBD><<3C>>7G<37>

secrets/vno1-oh2/borgbackup/password.age

@@ -1,14 +1,14 @@
 age-encryption.org/v1
--> ssh-ed25519 gJrHQg 4DJpYHmiOF4ayMzU+ieivPbylNWgUd2KNEXSCLzhjFw
+-> ssh-ed25519 gJrHQg ESiJkK+AbUYnpPzWzJwT2vXCekr8JFKVHAluKgYj+lQ
-dO8WiWQ80IUUp2vhN+8AOgaFGg1SH3D8KCyL0shYgRA
+Y1dVxVehvXp982Uv8yFkQMd8bDxmtK6q/vwAV41B6ao
--> X25519 WRne9Vn+HsHn8p0+DxDlvZkFuSHkYknSmhlW7oz/V3Y
+-> X25519 QNnqg1/Bi911Y7W2fD5oTgfbeuhknXHkoBLjTLOH6RU
-vGMUhOP1/Iz4IXxT/+s7+73HHVT8oqY1EJfis766aZI
+upXY8JVRjSTfw3kGQIVl3B+HP3l5mIug5KJCSQfnPgg
--> piv-p256 +y2G/w AzQGzm/IlxT2j4zw3u9HZuYFe+r5bRAyISjguP48DJgR
+-> piv-p256 +y2G/w AyXKFigaApuL9nF/3hO5+KYg+I6dEZ8jt8MdTLQ1Uo2s
-NA0ZK/kSc6OBqCu+rmVUi21/CywCcjSwniQpmB2/OMI
+lkncgwZebVAQi8IfoqFdfwBU9Im5z6t95fUxalY85uc
--> piv-p256 jNqd3A Aj/f+ri/L2HV37sqS/OjtGFRvrvvITVNujJf6Ocx+J/v
+-> piv-p256 jNqd3A AxkBvH1D4M0SKXUcU0xLkVlOGs5N5chQibVBqFyBqATn
-mGfmsGgtPGSOwKzFdcdVJv1uJfySwh2BUz11ezQZbVk
+DiSN52dtvrtigH7Ab3WKNUh04b72KT0oTprIDRVZAVI
--> B5;G1N#:-grease
+-> 6jYgXN-grease
-1Zyh9jJi0wubWSP8TNZpfkLt2yehKWpMQebhdLoNvMAAKjGN8jtigs2OAXLYh7aw
+GEvhMWqEB2ERO1F0rOxJacf5QQ
-xQAwNTmvLVc5TzQUSsY78XJhlOpkNb6S5d6138X1T6d8nJrK
+--- ZXufptBo8uDjjxBH5szEVCV0mttzfhra2D0jMijKcFo
---- arNYIfnO0eTAMufSdw2i1+nGfGhIfLjUvzj0PQ4ziEs
+<EFBFBD>X<><18>T(<28>ܥ<EFBFBD>Ω<EFBFBD>$,[<5B>ִ;zm`<17><>3<EFBFBD><33>k<EFBFBD><6B><EFBFBD>J&E"ԫ<>9
-<EFBFBD>U<EFBFBD><EFBFBD>x<EFBFBD>Aĺҟ<EFBFBD>7<EFBFBD><EFBFBD>}Z<>Vˊ<><CB8A><EFBFBD><EFBFBD>
+<EFBFBD><EFBFBD>

secrets/vno1-oh2/zfs-passphrase.age

@@ -1,14 +1,14 @@
 age-encryption.org/v1
--> ssh-ed25519 vDjOfg 43+2JoYorh26Gq+ztkmoqXprHS58vyfaOsPhE+asBxw
+-> ssh-ed25519 vDjOfg Q1sECRy7lkHYa3bFIQQNNbaIfEjdZShkdGjPqTipWEU
-sk5ko0QXXriYU3hD5C9Mi8QJhZH6NZVcTg7Q+7rzOeQ
+OzCOnN56ti6HmLFwYOKCZ81qnhCTGNoMtdaOrSPDsRA
--> X25519 gIvRquOza07NBLJmR9BsOnpJd8PVNm8er5tLRkBGtQs
+-> X25519 gIWhWpUrehSyghn/Eok2Fg2bKo0/28n01+bB3DXaPDA
-VlR87DXF+/3TQrExmQq5DXql0NkIXmUuBx2viOQP54s
+i71PJ/nJAgvZuwDwnTeqvxXsQr09VCOlpkCZ3V3NQ+U
--> piv-p256 +y2G/w A+vGb4in6Cj1w/pp4tRNVIcasJl9WoKRFdwi2eDllNHd
+-> piv-p256 +y2G/w A2rC4hbY48aKDwZ08hMZPAXTMP6dtUxVboG5ow3bDXPq
-haqhVAjZp5fYVJmawPzWxM6r3QJbqarCZiAxc4l7HlU
+wK9Co8sWTygN+Mp+3ZSy+JLV5TRpA/ZgXoCoqSqtipw
--> piv-p256 jNqd3A Aoc8Aw2FlUvn8+Jp63pbsa5qzeg4pWEzTOAiIQqQZnfW
+-> piv-p256 jNqd3A A8eWt9X0EyPCwST/tutbEjUcyJ3Id9cL7fFkm75SeWKI
-E4hgbvUnbRUdq6/N3xTKMZE7oxNDIo8eAUarDdh4TiI
+caMp+o0ziLQLpJukTSEqnwkhE84bXIL76wTu3JAEpKo
--> =H(-grease
+-> G`=je-grease z hi^@N@
-99H7/vADBtIrsHwjg0nlVHzbdgAzlVIWROmT9yysEJlcsgv+u8myaA6Beg2Nwajf
+Q+3IMD7GELrAEPoCeL0i
-8WmI5T8HyMve6bdb+TbJOaN83FkLIC8vYPqYyDes3BVg177Yx6kZGmkGx0sx
+--- IOqB7rGBpsOYcNf81wMJfwAox7zL0+lyKVzh6ZhuJH0
---- QxfUZt0OBr76ZT3SdiOr4//E+uh3NQl7F8MirQjRLAA
+<EFBFBD><EFBFBD>=<3D><><EFBFBD><EFBFBD>ѹ<EFBFBD><D1B9><EFBFBD>o<EFBFBD>
-<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>(LJ9<C787>12<31>KF!<21>P<EFBFBD>=6<>1<EFBFBD>=Be<42><65>z<06>!$<24>{<7B><><EFBFBD>U<EFBFBD>gV
+x$D<><03>G<EFBFBD>C<EFBFBD>1<EFBFBD>2<EFBFBD><32>'ը<><D5A8><EFBFBD>VL<56><4C>P<EFBFBD><50><EFBFBD>]UT