diff --git a/flake.nix b/flake.nix index 3105b8b..1db1c87 100644 --- a/flake.nix +++ b/flake.nix @@ -183,6 +183,9 @@ motiejus-work-passwd-hash.file = ./secrets/motiejus_work_passwd_hash.age; root-work-passwd-hash.file = ./secrets/root_work_passwd_hash.age; #sasl-passwd.file = ./secrets/postfix_sasl_passwd.age; + + syncthing-key.file = ./secrets/mtworx/syncthing/key.pem.age; + syncthing-cert.file = ./secrets/mtworx/syncthing/cert.pem.age; }; } ]; @@ -217,6 +220,9 @@ synapse-jakstys-signing-key.file = ./secrets/synapse/jakstys_lt_signing_key.age; synapse-registration-shared-secret.file = ./secrets/synapse/registration_shared_secret.age; synapse-macaroon-secret-key.file = ./secrets/synapse/macaroon_secret_key.age; + + syncthing-key.file = ./secrets/vno1-oh2/syncthing/key.pem.age; + syncthing-cert.file = ./secrets/vno1-oh2/syncthing/cert.pem.age; }; } ]; diff --git a/secrets.nix b/secrets.nix index 39ce782..4e95889 100644 --- a/secrets.nix +++ b/secrets.nix @@ -36,6 +36,9 @@ in "secrets/synapse/jakstys_lt_signing_key.age" "secrets/synapse/registration_shared_secret.age" "secrets/synapse/macaroon_secret_key.age" + + "secrets/vno1-oh2/syncthing/key.pem.age" + "secrets/vno1-oh2/syncthing/cert.pem.age" ] // mk ([fra1-a] ++ motiejus) [ "secrets/vno1-oh2/zfs-passphrase.age" @@ -48,6 +51,9 @@ in // mk ([mtworx] ++ motiejus) [ "secrets/motiejus_work_passwd_hash.age" "secrets/root_work_passwd_hash.age" + + "secrets/mtworx/syncthing/key.pem.age" + "secrets/mtworx/syncthing/cert.pem.age" ] // mk ([fwminex] ++ motiejus) [ "secrets/fwminex/syncthing/key.pem.age" diff --git a/secrets/mtworx/syncthing/cert.pem.age b/secrets/mtworx/syncthing/cert.pem.age new file mode 100644 index 0000000..86bd401 Binary files /dev/null and b/secrets/mtworx/syncthing/cert.pem.age differ diff --git a/secrets/mtworx/syncthing/key.pem.age b/secrets/mtworx/syncthing/key.pem.age new file mode 100644 index 0000000..b6df4c0 --- /dev/null +++ b/secrets/mtworx/syncthing/key.pem.age @@ -0,0 +1,13 @@ +age-encryption.org/v1 +-> ssh-ed25519 9Chcgw P/bENwK3yfI5NdxdC8YVeganiy4ODUW0QWuiHAaFiBc +4JO9vzsSR2y2bVgjmpMhrgh6se+rSGLCSrJ/k9LX8yo +-> X25519 2W9lFxPwEqj5heJXYCmn8M7D6dWGEhsUWxCoV1HzXV8 +fjo4ojyQK3RjYb4h1TDQm/2uR8IfK3mYZbhCTf/NuIQ +-> X25519 KKo/aLMqNOAcM3tWohpKN0AZud8ubnTNGhFO1/42iSU +hsKLuvvDQEokwkeztfvveUb8xn+WBc2+qAd6s0ql/t8 +-> piv-p256 +y2G/w AmbXY6MfCS+PZQ54ToMsQH5K9NPqdKvunw5ClHX3Xn6B +IRUcptpLBi+8adms3blbwtn1hKD1zaYTQ8J50iuA8qs +-> piv-p256 jNqd3A A4p0ff23NFjr7qo/OjK7FzYWdOw/ZTqBlCr/kLgejrea +VQCQdtnh0x2hP0kianV8Ws5cRTbZSEmhzNog0qXNoU8 +--- 2SsYbgl5CbQXCn+0fo6jaKRAszd9pqAZKKvt4TXzCkw +](2Pˠ_o*ǍoVϡ{̯w!E{Fiί-XȵVD"~4!{>k8JLJ|_l[ :2!THI'B`15qT")Zgi &Z(Β {pY4'lu@.G.7ynyM s+a.wLUW< \ No newline at end of file diff --git a/secrets/vno1-oh2/syncthing/cert.pem.age b/secrets/vno1-oh2/syncthing/cert.pem.age new file mode 100644 index 0000000..0e4fbe5 Binary files /dev/null and b/secrets/vno1-oh2/syncthing/cert.pem.age differ diff --git a/secrets/vno1-oh2/syncthing/key.pem.age b/secrets/vno1-oh2/syncthing/key.pem.age new file mode 100644 index 0000000..69e1f2c --- /dev/null +++ b/secrets/vno1-oh2/syncthing/key.pem.age @@ -0,0 +1,15 @@ +age-encryption.org/v1 +-> ssh-ed25519 gJrHQg QcefJQFfP1vJkz1dREfIfRuZqkaqyntwCPc0EWdTQXQ +51cv9xbVemaB6s3cDh/foeTOa1Gn7OMZYl2LPN8HaTs +-> X25519 tab2JA6NR2IMuCJQT040B+LJtfsEgpYiQPbwiyKD3Uw +vU0XGKX7FM6b34qorhw4ApqG8rqV988DAfohGg0otjc +-> X25519 YJjIzSMsUc3KAs439Sq0DbpmMGjS6joAxK9vA5YF9ng +r0YydtNFzwbUEphhDbFuRC4Zde8oFvPFmnLkIV9ttGo +-> piv-p256 +y2G/w AqFs3CHec2ascpls+aFekOHkZmi98a1YrC7aMPAuHZU2 +thP2ZpboICu3vjPskve1uVjthUl/JQR96/9bB9MfizE +-> piv-p256 jNqd3A Au8GYmvF5auV29DRZYCoT5aVXmxhZv/mvh1d/Hf7rwgy +uyV3GiiCNo1Xf9ADVWTGQPHj7cqBeskzMuTC1WjT5Pg +--- Sxj64ei2lKlvzI+LN2XWWesF4Q1DZQkMj2k62EX71U8 +kEО>.{Ɔr/2`0@kJgqݣBlgv (и(ҖIM^DD >ESqB;%$pDs *Q9%WQ{(KŒ;Ԕq0gǣے;N$Pv,k^)KD@=BTؔ~xI6ڑ_IkS[eXߥ [T!o + ( +C}r$a[[W*>*3NڳYUl6ܝvPFpu & \ No newline at end of file