diff --git a/secrets.nix b/secrets.nix index dc591eb..932be09 100644 --- a/secrets.nix +++ b/secrets.nix @@ -1,9 +1,10 @@ let - motiejus_yk1 = "age1yubikey1qtwmhf7h7ljs3dyx06wyzme4st6w4calkdpmsxgpxc9t2cldezvasd6n8wg"; - motiejus_yk2 = "age1yubikey1qgyvs2ul0enzqf4sscq96zyxk73jnj4lknpemak2hp39lejdwc0s5uzzhpc"; - motiejus_bk1 = "age1kyehn8yr9tfu3w0z4d9p9qrj0tjjh92ljxmz2nyr6xnm7y8kpv5spwwc9n"; - motiejus_bk2 = "age14f39j0wx84n93lgqn6d9gcd3yhuwak6qwrxy8v83ydn7266uafts09ecva"; - motiejus = [motiejus_yk1 motiejus_yk2 motiejus_bk1 motiejus_bk2]; + motiejus = builtins.attrValues { + yk1 = "age1yubikey1qtwmhf7h7ljs3dyx06wyzme4st6w4calkdpmsxgpxc9t2cldezvasd6n8wg"; + yk2 = "age1yubikey1qgyvs2ul0enzqf4sscq96zyxk73jnj4lknpemak2hp39lejdwc0s5uzzhpc"; + bk1 = "age1kyehn8yr9tfu3w0z4d9p9qrj0tjjh92ljxmz2nyr6xnm7y8kpv5spwwc9n"; + bk2 = "age14f39j0wx84n93lgqn6d9gcd3yhuwak6qwrxy8v83ydn7266uafts09ecva"; + }; fwminex = (import ./data.nix).hosts."fwminex.motiejus.jakst".publicKey; fra1-a = (import ./data.nix).hosts."fra1-a.servers.jakst".publicKey; diff --git a/secrets/fra1-a/zfs-passphrase.age b/secrets/fra1-a/zfs-passphrase.age index 60bd2a2..564d0dc 100644 Binary files a/secrets/fra1-a/zfs-passphrase.age and b/secrets/fra1-a/zfs-passphrase.age differ diff --git a/secrets/grafana.jakstys.lt/oidc.age b/secrets/grafana.jakstys.lt/oidc.age index c472d0e..d57af92 100644 Binary files a/secrets/grafana.jakstys.lt/oidc.age and b/secrets/grafana.jakstys.lt/oidc.age differ diff --git a/secrets/headscale/oidc_client_secret2.age b/secrets/headscale/oidc_client_secret2.age index 7df8815..b9ce6e6 100644 --- a/secrets/headscale/oidc_client_secret2.age +++ b/secrets/headscale/oidc_client_secret2.age @@ -1,13 +1,16 @@ age-encryption.org/v1 --> ssh-ed25519 gJrHQg 2TKvT9YFW22mbjANJjbKhCqPqKwYv3GZr1bSV0CzhgE -NIyjdm9WT/8LQ0szyCRxIa9bzdUWohowm4m5dsU9bEI --> X25519 i5WclbqkJl23Jz8NVNJghCy9/XeTaEso0lHDG8S5KSg -77TpPA2RypjHM5NLdUL196aLoGBbR03e/lt9KF2oZb8 --> piv-p256 +y2G/w AgsIQjG6hywcA7x25G28mgET2lNStll3Fz3+7pdPsefy -z+CH3RW7B0dzS0H5wyp00JR3mLL4TH7agCjXq0kpA4g --> piv-p256 jNqd3A A89LKrgTNHPRwgiUXwjH9VZbJwT7nQJtHsYajJAfNQgP -Jj5mzevirEJzYAARaUn+5GNthDuWJvZbM2wz1ofS4ec --> ]2C@Q-grease T p%= -nc2CE42g1ZEMFkMTVY+TdXZVE1Q/mjAiWiLvk/2DthKaMp39mveG ---- dBdEiLvbitUOT0RWmdEK1yBmP3UpbD2BNzob09P/8u0 -@Ή:ɭ8B-ɈUkzRR~>^޵L;BW[$oJt-W \ No newline at end of file +-> ssh-ed25519 gJrHQg EitcpJhSxkEBPeGmM54KOJukXOZxpNAaYx2r/ERyQ0c +k95RTWKTVvPKaOewwEIl738TmO4lNaymBG3ZknlZ18I +-> X25519 4Ol9bY0i0aVa/RjOpxpluaf3tlvRkJEbyVxdzD+3kGM +ltfDGIFYSq5gIpdLekcTr9yMqejLPFGIpE9qVxTbGM0 +-> X25519 3vvOFt3yjsmv1WbI8lIqLw9w9MgvuI6Maykc5d3LrgI +cZDB6WFCpPLvwMCRNjQQA0xN+MYIvpOhxr570nJEsQs +-> piv-p256 +y2G/w A3Wqo+8gQiKp2AB9cQriM/1qdMcMpC9+lZFevKV4TlNA +PkMjf81xz1pMhn8LtbLP0nNcgz7KDq1qTwGGSBx0Qs4 +-> piv-p256 jNqd3A Aku0DwWp0GdjXVxuEVS7tjeQNx44rUvrgVA0fel3Vye+ +oEYK6/cLFQ2zidB9pBhnJq34yyGrRD5lR2yMY9Ra1M4 +-> oX:z~SX-grease =Ii&grH +vfa6eG3vHoRMGopPUGTOW9nmmB7RV6w76JhrBfs9br3nKGbCJqO4b9HfTIlkg/IY +mGG6awSsneHU +--- +eame5bX02ruANOAZLNhrlu3eHLwe6EvrEQT4ITWtk8 +_:u8p-mmf#K>27mwyMp;"mƑSIӡ]UVc$H^@cΨ4Q,]) \ No newline at end of file diff --git a/secrets/letsencrypt/account.key.age b/secrets/letsencrypt/account.key.age index 8204c18..7f0ae75 100644 Binary files a/secrets/letsencrypt/account.key.age and b/secrets/letsencrypt/account.key.age differ diff --git a/secrets/motiejus_passwd_hash.age b/secrets/motiejus_passwd_hash.age index e51d0e5..0778eb3 100644 --- a/secrets/motiejus_passwd_hash.age +++ b/secrets/motiejus_passwd_hash.age @@ -1,21 +1,21 @@ age-encryption.org/v1 --> ssh-ed25519 qDkIVA wdh6PCvCQP9iUHs4Zj1k93BWFrWkIJw+e69oVT5cuAk -YoR/RWO+j5bDiO0Agn6EqZykwN4a7pOs6dIPrXVRCN8 --> ssh-ed25519 gJrHQg E1Ya5nKTQzAU20bcgAKgTiKUU7+Gi2HXs+1gHEK1wGY -u8AK33E6GHAK4r6fLCxReiW7ZfwfSNUyC7Thetc+i1k --> ssh-ed25519 CBqt6Q wzlSzFIB+GuX7uYkqIq3y3EHBSnkRruo5TDrvl58P1Y -Nh82Zwo72AeigVtKMgUbpderYS1Hn1TF5MNy8hf/LzY --> ssh-ed25519 fqSa6A GGMNKDARX99Ob7LwiGPE2iAaiu1zFG2otEb50VWsGCI -v3sxjuwGnQzlWofev64QuCuNuP9ShztlqvsPrg5XvH4 --> X25519 +ZzYIcZHZiC4qfOfbuh6C8+i37Kl02D7KqSAPXVc4jQ -3vOZ0eIeIax2RTY9uW6mPfFNpDyqEsh9FH8aV7KYUGU --> piv-p256 +y2G/w Azty3dGpGmc2Krl7p5aIzmxMQQ40LGU7gbEdVkh9mslX -hnPuL2jXTVMWr3PYt9Nz07iDyvL2gw69i1R7UbxGTGQ --> piv-p256 jNqd3A ApPsEmKOID1zWurmrMoH1HOzCkGBFUUPjRr5RysZ9G9Y -vzHYlllvowShpfiRZh5dpFfKI/9sPOvbIMykqnm+igM --> Eo-grease scx%Ti -yD0cMx1oCUBudOWFxqfFGe2wnXXlQ5+wpgmmxwgZdat+szTW8mo4/4E5tt0qnHNb - ---- 2yOBXSb2xnCN4K1i9vfddj54I7/gOWMuNKk+KtpfSLQ -_k][^Rxy7ȍhw -R-, Y)~Sjk  K@.^ɖrgo"Y<*ƷD 4A eh!`ިWp[2)o \ No newline at end of file +-> ssh-ed25519 qDkIVA P21fey/alIzYmLPsRzviPu6TAwSoan0i/jHtBykB6y8 +asfX0Jd0+8qVFAaTsI2EFSgcA0sAdgjmmD3MCx3WTPw +-> ssh-ed25519 gJrHQg jOFMWmiU2+XlA8vzwoJEFC226/um79isPWKUI9kvUX8 +jwE6dSX2fVflOFJjxBA/Mj5NAm9HB3IfJEADzJrEZvU +-> ssh-ed25519 CBqt6Q gXub5t3x2FpyZP0u5XlDNBY283CcnNqbA/1RR94vawg +zKzhvNGMm/E8FSqod/w4m8OVBldV77ZWxDXk7ODp9N0 +-> ssh-ed25519 fqSa6A 4HrsSBrBg2vUj+BWyqYPMwCrJ2VKFLvG9U//Yl4yPQI +8LOJPezOGk6E3dsH/QAZJftBSQSl8gPh1GASMdYsN7k +-> X25519 ekEq2HgEztXVXZwY8hX9X9jaLjPNppy7L6p4kLpbm3A +aGy/uU/ANTF2AnuLHMBVG1Gkcr3U/4lOr47CAWXd7YA +-> X25519 qTmW7PF83nOtPKkteX/TzmhcV9+ESUA83PcvGFod4wk +SETcXaVbXVywvPm+9LZZz6OY8EpBtVTKbN1sGFAnZpI +-> piv-p256 +y2G/w AuYojaa0aWt7WdDbHQlQ4LmdAY0RsbZeGJ+vTWWnb/Do +4NF1oiEWI1/BqoVhrqm0V1nPWjjFTJu1HvqM0q+UKVI +-> piv-p256 jNqd3A AwKBjLd4oJ2IiVB6wwbT2XQpkFLw/mwhl5WocNqAhJpE +C9uwHm/d86zyM3G2Efg0NKC9stTxmxy6hiUiQ1NzVJ0 +-> SwBzL-grease L Ko$8 #mycU'7p +MMjvD8CggHGJ28OTvsUlRDQxtC3xktLY0MPM6+nZvOzGvBU +--- DRXa8A26tYKF7nY9DM/Qu0xIGHxYQf00iYi1Ac2igQo +~p哎1_U7{Ap& 0G/n4>7q, չC!<_l"s5~ jLXӊ#9B!EKBFl\b@[&7.JE $,, [s81I8V \ No newline at end of file diff --git a/secrets/postfix_sasl_passwd.age b/secrets/postfix_sasl_passwd.age index 98cc3a7..9272147 100644 Binary files a/secrets/postfix_sasl_passwd.age and b/secrets/postfix_sasl_passwd.age differ diff --git a/secrets/root_passwd_hash.age b/secrets/root_passwd_hash.age index 282c9a4..69a9f8b 100644 Binary files a/secrets/root_passwd_hash.age and b/secrets/root_passwd_hash.age differ diff --git a/secrets/synapse/jakstys_lt_signing_key.age b/secrets/synapse/jakstys_lt_signing_key.age index 0005054..52f6ef4 100644 --- a/secrets/synapse/jakstys_lt_signing_key.age +++ b/secrets/synapse/jakstys_lt_signing_key.age @@ -1,14 +1,16 @@ age-encryption.org/v1 --> ssh-ed25519 gJrHQg WN2Dylz85PM6g3BHMvfncG6a8PsJk/0ej5Lu85u+X2U -3a8RCKifhMjSoa/Y2MU+SKkT9Fh04xnoRzLHgYFW4Vk --> X25519 V2HPIoXlFCBev3K6nPV7R46O1lmt5g3Sw7F4xHi7UQ4 -ZIUySyEwM4/kzetyeF8dCbRhMvdFGKgwb77XAQjEzkU --> piv-p256 +y2G/w A2lHfdZGMUuFw9OzW7DS2dPBg/Nlk7E5/USygY87T4wy -R8iQz34CH4WhQvVu0+tiMwzwjebxuBGhBgKiV7834QU --> piv-p256 jNqd3A A8MxG0AsSbhHB/2unZHM1dV81d/IodrhkVcZw2C4eDu+ -PsNah5VxQJtpzd8g27FMqKy2bZZhkX4CJMlmLU49Xqc --> T-grease sb -71qgLtUE+XZngN+wKQnq4g ---- LbQPta2gUFsX33rzHF+x7ZHFjVj088paP05qnZehyfE -ŅڒL:)W|%~w9]1 ͖ -:dvE4*@ǘ=(ss_6?q}B5//} 8 \ No newline at end of file +-> ssh-ed25519 gJrHQg qApVSXEzjbS33/6NALdIVwCOeijJ7N8iJ50xnix9+Rk +R3/94MxRIb89X6u6OMP9VoSfEf1eLiqnjKoAymBqFs0 +-> X25519 TV+2EnqI3dSbSN0z8TAeF/T0+khCB0BWZBVpyxmU5kc +u8l1T9CnUpoyUg73GkHGrffBLkbp2qrMyhZSJHRRwdU +-> X25519 K7ISHQldwwmRkIMvtcpEP0NODV+fmnephjmwBerhfnQ +h/ZhFG5rW8VNnZaq/RoTW3V7ID5mV2MVp2MFr/OLECg +-> piv-p256 +y2G/w AhZcJsWZMNOHDkCBxR2lv4GilzuDz8FfEXClnWW/cmeV +Fe+YmrJ/74Ic1NEABdSFONUEU1rml6XAKtMFIy7yx10 +-> piv-p256 jNqd3A A7CNs2h3FoiqY4YEEy0tTFUffMKYnXY9zL1YFspUl/qa +9+zGzfDT1yirPg1O6dDUmGy9y9i3M1Wz5TQ7PuXLe3k +-> $-grease +wqrqDJGOPZM +--- SAdZnR8B73iuItiXSgVKB3tRlnonOhSoOCQoTimo5Ko +:MDL"*ֳ X +yv"&\B=A,ˠ"tBA@X5))ΉUz3.f \ No newline at end of file diff --git a/secrets/synapse/macaroon_secret_key.age b/secrets/synapse/macaroon_secret_key.age index f954e10..daeb088 100644 Binary files a/secrets/synapse/macaroon_secret_key.age and b/secrets/synapse/macaroon_secret_key.age differ diff --git a/secrets/synapse/registration_shared_secret.age b/secrets/synapse/registration_shared_secret.age index 661210d..9481b6d 100644 Binary files a/secrets/synapse/registration_shared_secret.age and b/secrets/synapse/registration_shared_secret.age differ diff --git a/secrets/vaultwarden/secrets.env.age b/secrets/vaultwarden/secrets.env.age index be2d5a9..f94f023 100644 Binary files a/secrets/vaultwarden/secrets.env.age and b/secrets/vaultwarden/secrets.env.age differ diff --git a/secrets/vno1-oh2/borgbackup/password.age b/secrets/vno1-oh2/borgbackup/password.age index 81a2e4f..96c1494 100644 --- a/secrets/vno1-oh2/borgbackup/password.age +++ b/secrets/vno1-oh2/borgbackup/password.age @@ -1,14 +1,16 @@ age-encryption.org/v1 --> ssh-ed25519 gJrHQg rKe07p70h/iFrB9SPq4cRo2nexzjZiU+Gx0S0RGn5xA -iXN40fLa3/UZ+5KukzeImwbCPBCP2180PdPYPgteDMQ --> X25519 b3+Bg1PKLTmIp2X9+Xejh+1OXEV0Nb3DYTLAlOu79jc -8HkST7iwBbIQ8SCjEuD/Vrg2yOnaGrNzlh7KNNol1jo --> piv-p256 +y2G/w AwVMn6wv37RMmcVasERArVyzcESTkaRXpjzarDE+kzPi -9Ol9wRAvtEEup0osyBMU9A0WCtg33jkOVfJ4H0XxfzA --> piv-p256 jNqd3A AsYLQeTvjRW6xnSg2VVI8foqcjkIleW9EQ9CNS1ccM8v -hDgzL17J60+0pzvvtjH4hbDm1WIJXncaJgj2iTrOBgU --> qMs|YE7I-grease Rr'\xV7 :.{8a! T0fC -DU05IIClLkJVDM1GjtAFb3hsMACmbV9+v4YnW6vQ5MhHQUXUyujc+Bjv7ZsdZkJE -HoM0NQniUvHRXCfndhcCfqoU96RCNr60rmW+AdhwUMrwhf1bFWU ---- qqgdZHC7hmUCYmsJ6sbcILQanqOSlkceg2B/POSM2jk -`x w5"'1Uy/=.x: 3N \ No newline at end of file +-> ssh-ed25519 gJrHQg dDlR+yma29q10Z+9bThL26row2jX+GVCoe/Rd6Ycgh4 +bABbS8rmw7dDdQfWE9cMBetH/DgEiwP0N/qTuuWvYUM +-> X25519 +4IgKMCr5N9t0AUa7Arcm2graiBJg20MSFbPpQTt+y4 +NxzeNlcBwEuNBfBtjkXSSbV1J10mVjhLJ1bU9wZx0FU +-> X25519 wiDISK1jRkiQP+nbdeuZ6UHOEctLdqicZr/MyPIQmFY +jlrRdVKWUydDG3gcu253SkmA9DwHZMzML2MvarRfygg +-> piv-p256 +y2G/w ApORIwShakZrXB7JSBox83Xn1f8trWq7lt0+mvT4ZgaY +gNA8m/VQV9kdIWuDB/6BiuuIoThLoAFcRcsMD+FL/l0 +-> piv-p256 jNqd3A A+ce6Rpe6zu9l48BbH2YpWFG8KBnUDn5XOMOutxkJf+S +MZWz0IbWA4TVpkpXzGqu36YUbDENi63HpWrtuCazGD8 +-> D2u-grease 1FN |u ~WjU>Y 1LW- +WUV+2rW4qb6NTd5U5k1qrNZiCdQ1XSrDCxEi1K4KY4sWG+BUmj+HZKE+deNRRMxO +kK/hnMrB4BqE4ero7kpmHFSQnrc7dHREDHfnvitVi7QirRvfi5WhTrEf +--- SJZmDSANC4an9Y9A/2mmk56+L6mtqANnaa+YUcROx/U +I-~UPu܉!Xt22.l"֪K \ No newline at end of file diff --git a/secrets/vno1-oh2/zfs-passphrase.age b/secrets/vno1-oh2/zfs-passphrase.age index 1a1e944..c293fd0 100644 --- a/secrets/vno1-oh2/zfs-passphrase.age +++ b/secrets/vno1-oh2/zfs-passphrase.age @@ -1,13 +1,15 @@ age-encryption.org/v1 --> ssh-ed25519 qDkIVA r0ozV6n+aH+R1eCrG2qbIIeQpLHldzUoydzD9daTvC4 -3DY8MjGm8Juos3AKFC6ASbHrrV9CgVcExYZLFQ3+5Os --> X25519 4B8uuFlpmXj0BNJiddB4lrzFw232Z0mvSPPJIqhECDg -z9XjqiYrCcgx7py7aX41HKYa7qBc4ICqlRYrA3B7eYk --> piv-p256 +y2G/w AiMAHNgPxaIgizpHs9IbTu7Y9Ycfks80j1mEkStFGAUz -wD/LkNXi1L6kLCgouJsWE6cwsMK1pyfxXkBrEUOqElQ --> piv-p256 jNqd3A AwdMd7VxIkcQa27rn6w21E8G8cVFJKq2mLS5RX0LtzVI -uLMciaCY46wGSgVaai8zf53+RPnRN9UnngbNA9WBOvc --> e&0fstD-grease KGAZ )\$ +`Z -pJNv0a4mK+gyvQBSMV+LewAWWg ---- 6o4EQN4gGx1wlv1GvyPVRLYL5cCRhbgmdeFbgaWy6KM -JdRFcuV܎uӊMr7Օ s=o )Ě97ł! \ No newline at end of file +-> ssh-ed25519 qDkIVA TlHc5oUNEgiMKairMosIys8YmS79PP0Yy0GaTYmB+To +098OtXyJA+vtNFIxxAOmLGaH4OReBRw+ce1zcwljdxo +-> X25519 oVqQz+f3wsHtE9y8buwItuOvYos8LfVn4Flp9w+PHDs +fwKuxwmz41Utf8hmrQOiD2Z6CXcHzRHndXpsPAKK0sQ +-> X25519 zQEIB1yjyJPCmgMZWT9+7UFSmMA8mIZ9UOBjIMdh/yc ++NFtLDlYmerbwXnDTgSVLjVszLGKU7erIBWR75U6Dx8 +-> piv-p256 +y2G/w A/3fA0zpo7gv0DtkA9XbiK4r6B1FN8MHUd3eulGMgzP+ +0D4b+H1vsaTIosDMqQMSMGaeTu4XuU9K+2mdX7YIV24 +-> piv-p256 jNqd3A Ar7LkcdhRQg+e1KO5TeHvC7kb+p1rDhCVDqB1A+Cm+0l +dtCa77a0Z0Mtj8bw7UeYYwPS7jbAeM0znH9FBJ6mn30 +-> ~WO-grease \ UB_ F: z& +XcuVK4BWORW3Hr6ibAWrf45iP/DZY11Flb6fUfmu +--- OffL/7R+aw+v5Se18+fj9sRZVU8XlIihPyiKiDKi8Qo +"j gtdI*dbFz .Ϳ&d=]iNT| \ No newline at end of file diff --git a/secrets/vno3-rp3b/datapool-passphrase.age b/secrets/vno3-rp3b/datapool-passphrase.age index 3712f91..5e75b8a 100644 Binary files a/secrets/vno3-rp3b/datapool-passphrase.age and b/secrets/vno3-rp3b/datapool-passphrase.age differ