From 4a277fcb3ce22c8c0c1832644c9f72d79123118b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Motiejus=20Jak=C5=A1tys?= <motiejus@jakstys.lt>
Date: Fri, 2 Aug 2024 14:00:18 +0300
Subject: [PATCH] fix headscale secrets

---
 flake.nix                                 |   1 +
 secrets.nix                               |   9 +++++++--
 secrets/headscale/oidc_client_secret2.age | Bin 681 -> 791 bytes
 3 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/flake.nix b/flake.nix
index 9f1ae6b..89b48a0 100644
--- a/flake.nix
+++ b/flake.nix
@@ -207,6 +207,7 @@
                 motiejus-server-passwd-hash.file = ./secrets/motiejus_server_passwd_hash.age;
                 root-server-passwd-hash.file = ./secrets/root_server_passwd_hash.age;
                 sasl-passwd.file = ./secrets/postfix_sasl_passwd.age;
+                headscale-client-oidc.file = ./secrets/headscale/oidc_client_secret2.age;
                 borgbackup-password.file = ./secrets/fwminex/borgbackup-password.age;
                 syncthing-key.file = ./secrets/fwminex/syncthing/key.pem.age;
                 syncthing-cert.file = ./secrets/fwminex/syncthing/cert.pem.age;
diff --git a/secrets.nix b/secrets.nix
index 10dfd8a..a933728 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -34,7 +34,6 @@ in
   "secrets/vno1-oh2/borgbackup/password.age"
   "secrets/grafana.jakstys.lt/oidc.age"
   "secrets/letsencrypt/account.key.age"
-  "secrets/headscale/oidc_client_secret2.age"
   "secrets/vaultwarden/secrets.env.age"
   "secrets/photoprism/admin_password.age"
 
@@ -53,10 +52,16 @@ in
   "secrets/mtworx/syncthing/key.pem.age"
   "secrets/mtworx/syncthing/cert.pem.age"
 ]
+// mk (
+  [
+    fwminex
+    vno1-oh2
+  ]
+  ++ motiejus
+) [ "secrets/headscale/oidc_client_secret2.age" ]
 // mk ([ fwminex ] ++ motiejus) [
   "secrets/motiejus_server_passwd_hash.age"
   "secrets/root_server_passwd_hash.age"
-  "secrets/headscale/oidc_client_secret2.age"
 
   "secrets/fwminex/borgbackup-password.age"
   "secrets/fwminex/syncthing/key.pem.age"
diff --git a/secrets/headscale/oidc_client_secret2.age b/secrets/headscale/oidc_client_secret2.age
index 2a5cc3795ea44c518860839c3bdf2e104ead8bcd..b8cf7c42a2ffe1d4a8fd23eacb1559a29d924e40 100644
GIT binary patch
literal 791
zcmZ9}z02Hm0KoBLp<qDh(9y~vh;7p|Z<k9lJf%tQ^5pe$$=yAdWRYBw%jNx-<njs*
zZVqjsV<(-I4&o%Zx{Gyl5&r}yL0TQOxM=@^4`04+7)*oQs|Ik6iu|LZ3Xv9rrVl1{
zeVPV7PLdciIhGrD&Q7*j9ZNKZQKDAm89-fgtvj?C9~*2R7Q`W8ur)o{i;U=?g}P(4
zz$%npW;~@^9u|$as!_SmRbrN<n(m*s)rj#pTED4<awQt!r14w|#o9H{ECxPBqjt22
z-fyq?aCNQ`n@>XyugXw~1p_KA6WQ1dZtJ|RF0yRCr?pwYdm<Qo8N~SFG$NUBAne|L
zty%wOQ2?YuX!lan8q}tg_PpK+%UFViQA{qKUJXW)ru9+D6R0|ML6(ZSBVI0ba;F$l
znbLraRXuG^UMu2^?DUb9lE&^o0;j-yN;+$bG?(6P05kkV8QIxCXo%t>nzJSJ85&77
z-W5<o<x8SMw;F&EWQmxDSI>nRE}9Lomwm@d*xpi+$jkx#S^!Zy1vojMzyp4XbQ3n*
z%1PsnrNBo%6*usfpo>#I<2S9t2Yybc+(4eM9JU+?NI~Z_)h(oKX>v;=LJ~Y5Di?9+
zUQoI%$FEYEKO73O1ML5-cvboYJ7Eb<{%21q!wZnA#kk_uV|pM0T*hh~=Nffy9?orC
z89M?%oNVuC#Y178>MxIOC7fvz&O?q9u|ey3^vI|k%b(VKnn2U(bfP<21agTYXa>vV
z$d8bGNV>YNBDt=DObsl-=@@UMVj6nq&M)5eM|bc3{^YOp%cmE={(0a3_OqWh@7;d<
z!>gAss#`Cvee>jffB*d97e9aS^5$EQK83E1pODY?=8yM2{Oym=z3-o2+kf@8E?qos
UyLYcA7q`Fu?#9z+_N$No25P|vX8-^I

literal 681
zcmY+=J&V&|003Z7{J5MrJ9cn5DX~e~CMkmW_L4MB(xh+GHo3wL%}4XmT-qc}(zl?q
zlfOU^ImE%uFVMkJD7p!{IOwR`AqZ|NF8T`|c&46<yRn_3<tkXj*A}T)D@Y8#QOPnN
zcO9zPBwLkPqEBg1X)AVS#d%2(EJ~%7S%6Wlt_QMzRCiUK80zz}!!T;l<ax|y_8ZFh
zNSP(5&IWd`o%xAAv*0F-a&b+&++eh#sDs3h4*qE7UnmfLVydiJz5|7YW7s2<r^~qn
z*>V+*Qqjn(sj4BfoIxIw$Mmez$}ATwNmY!iK`A&x#6-3+(FA`}QyB?*gK=Tg<v#-J
zcx%fynUTj(>(~k$#`Oph+FE}A0&_zGh0JZr&>JF)B|%@H41p}V$nRF`0n*m}L5~rG
zp$rZhN*Ng<tMrwG2lGF|GAQsR)uby`M0ILq1^CN0YWBPFYzh@s<05)tm14*9>LJ%M
zRoDs3f^6rTkTxg`sF`OG-tQxnOmaqDI!K@k-Uh9GHzpcKSrsIb<7%P}|Fc3haq6G~
zA_2yd-D6;fkJ5f3(=h3Z^u%uX9c84<1eA1{L<dYO(y_*xV-<l8Bv5FqSql?6@>{^K
zak>|KA~)wHBT`KfAvMEr9IyB?%{0@5rstfziF?wd&qlTe8(nTFPP{?NPSP^7U~fng
z7&`a*%Lj=2EAq*fx_;)<$zwMBS)2y*<8N0F-)^VhFMh1<ytw`O&a=%+@#&@aI}hxK
qyUN}kaSEQluzURO)%|;i^5xc#<LBG$&H9yFcfYdT=GiwVkA4A33FYzt