add hasel to data and secrets
14 files changed, 82 insertions(+), 43 deletions(-)
M data/default.nix → data/default.nix
@@ -16,6 +16,16 @@ system = "aarch64-linux"; maxJobs = 4; }; }; + hasel = { + publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIaV14RWED5RhN5XIDhdV48d0OIw7eFf1t5eSIiCZ68D"; + domains = [ + tailnet + pubnet + ]; + builder = { + system = "x86_64-linux"; + }; + }; smrk = { publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINU03etY1me+35aJ7DTJID60cHlvYx6lV8A6V+OiR7hr"; domains = [
M secrets/codeberg-runner.age → secrets/codeberg-runner.age
@@ -1,8 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 knHzXw uB7baYwlumujat6pBv27c2+8Lb/TCSqwgmM2ELrrtiA -TWpxDGegypqS5Tl0xTd///Oi5Nuvv1y/4cm4ijOanjU --> piv-p256 VBDKjg A3aNB8hEx2Mrzr5m/ZuhNCChMg5Z/VQzX6l+ioly2A2o -E3ds5WpoKEMWJXz0QLHN2NHPijgxiJp2VqnfiLZH3Gk ---- 8wHfNevBSPyUszb3ClBXYb6cHEvnEbTLqXPmpfb03Lo -fgÄ\!îuL‡p\Õão‘ -«Í³€Ââ²ÝoC¸È1Ÿ-~»Ëݳßå(f¼§ÑÁŸí¤c"ø x'Ø"dz�“Î×�{¥¾êd{¨ñ+-> ssh-ed25519 knHzXw zDBOZRpkI4YFjN9eAJReFZWsbUHqO4tdcGFHU/iFT3M +eEkFZ1OEPa7+TkvRkFbq+isSLAvpXM7TirwjFMba3Lc +-> ssh-ed25519 J6Hb1Q Pk4KYNPBzInsdl6HBRK/ESLHW+afa7ciY99sUMhFYDY +J7lNfjFZuhUqTriix9m9Zt7G5Mjnejb/Sy94q5Ekjig +-> piv-p256 VBDKjg AsNmVJoV9R82QS2lEM2o5Pg18mAop2WjXanaqIfQb8zq +9ydl9iAW779ibI/60Q2vwjSXkUGNJu/UaPRIzllthVE +--- EOwoK0LAWNHvcDPwbitNGNlzGLRq/5mC5LSjvUc/51w +iý’ ùeÚi3wŽˆž™•�®6¾÷Ê‘ID I»ÃßjIÄÌ^šØM«KÈ+Á÷ÏÐÑQù¡Ô2Xtœµ·:-”|,íTaF‹0
M secrets/dyndns.age → secrets/dyndns.age
@@ -1,7 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 Ao4N5w EOiCh2GTIG4B1luBjb+7f6sOPC4xZ7dyHEFNWlaYeGU -abPg5ipxJwZs7e0ItDwcZIW2g6ll9zRS3DrBVZ6mw2w --> piv-p256 VBDKjg A20h2eq9yd6Tq0kJKZAnYNGvKjW4LwfTxTzPD3IUBTTj -NT+w1weYJ4mId8rk9tycZqBFPZeBsHHSyvXO2SFjpog ---- HH7d3XOgQzm5yAW25HokReY7UREe4RLi7ja+15EpBZ0 -[3ÔˤÊ4û(hB�+!T·›ûnk„ûÉÊP'(mÐîå[еUž»Ro„êªç÷ëb±§éE›ïÕ¼�²nf�2§Ç›ÍNy™?tóU~�"΀à˜(j'¯Z9@“–NŒ+öü i«±› žú´XÆ%Ý…g”÷÷¥Ü ûðúqÁj=ÛiÖ1´©f9“ï‰ææE¢÷•³Ò³OÞª‹àë…>Ñ;Bæ|{nâ‚¢æéöìc=Ù+-> ssh-ed25519 Ao4N5w PvP2UZSAC8tBBy9ZNcn4LaRr/zmFfP68UJYq7VrngF0 +B/3Z5gfZ+s9VfLSmbj84pSaKyHI7FExLmKMwSx42rxk +-> piv-p256 VBDKjg Ai85BAM5nW8DSl5AZ6jayGk3I8BSYXo17fXQOZ6p3D8Y +Jz3a7QlUivslsqHFr8MPL5yUI/dI5wgbzfXQ0EIuQBQ +--- T5Kmgur390CBbKtQnAEVcKun2YyClWjXfezifpQO63w +°ÿÞͤKÔ7¼À’™ÔÁ’va´‰å•!ÐP·¸ *`çœgÆ‘§ÌÑ�•M€T\‚BÛ¸”ôs·>Y–ó.—r£Åb´C[³.§ŸD’w_ñݲÏÖD®9ÏÌzb�Î7dB+‚hyÅo È‘ Ä” +â‘cœ,[¼`ùöÿG`ž½2(k‚’"RKéù +úÐ8¶ÂËÛJ·«ð[Ù¤ÆbØÞ4#››øèÃb;›/Í·MáF
M secrets/paperless.age → secrets/paperless.age
@@ -1,9 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 knHzXw b7xUeiBKWFitxt5/Hgme8OuXa2ehrlBKNFndy8x/6AU -o8PcZWDwotTYW/BgvV/XkQxv19SXOjof0u0HSTWddYw --> piv-p256 VBDKjg AlWjA8nyYcyTeGa9PMlREOBYi/OOTLr+0B8OrJgRYEc6 -RpWAvt678ErZe5UHIA57/P6eTuvAtN9y0wPN6/m0xQc ---- cmX5eo8WcLyywVsfthEyRiBhtvw/0mPynFMzGnPNYVA -XºP.'òã&Ç -õf3�€†!‹b;ü|GQWùxQŸÛiêêøêª%³�3¯PÀ��w@=�cSÒ{H_}OtÅ$"Ï=TB2—C)`Gâ\gJß -Fº7%¿ß!±�´(mñ'#Çn,¸½wxëëò@A‘’Mp“¬÷R,#I ç#ÅVLQ4ôÓ ºG—º6ÕD�j>BDä–eûßTB+-> ssh-ed25519 knHzXw iHL7gKdeuMPmW1jAEa5uqjCEIv0aYKR64WvOaETSAGA +rSabxDcHlVk4zGB6parJNWhfifBXEAxk+hl/LH/8aqc +-> ssh-ed25519 J6Hb1Q 90NwE6PXfr4PK8zvBBrEnkDBs2LqPJ583JnqIZL2LSE +nCEf0R7MJqdmDeCN4h+goUmIF5fPls4ZmUiNKgom+Cw +-> piv-p256 VBDKjg AhbeR6t4lyRJjrCdQLBaN07gtg8GFvOD5+ASfl1FnMf7 +KFan8RiO93NGsrhOfvCHNHsfvkDhcU0kluWvXu886ms +--- xP+n7VWy37/AACghQABCAqxUZWyfa/oPuri4dEdQSis +�ÇMðú¹b3ê²”¾~6Àrœ6W-&ÒU�=fÐ0ØøÇɃDó3Ûºkèÿ´O.+�<0Ë1·ÆtdϹõ’,×;µD8�›ÄÌ*.úDñ¥½êÕ:mûË ®ùèE&�òBK}$}~À˜Câ¦Þ”ˆ%q!;—ѲDÿ7âÁ�ÈÇÖ:ù#š§G^•‘¯çq–_GÒ›Ðíór
M secrets/pocket-id.age → secrets/pocket-id.age
@@ -1,9 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 knHzXw +8hmYU68U1mR63Gs7t4dRDMpLnqOOBIVXSWPHRRY9l0 -5+hFbN2Myhxt9oxd6eRmS4zdvO1JlCEELDbotNo5FaU --> piv-p256 VBDKjg A6NiZNP/0K3zOv/h7sZ2lJXNFWJpRaE+BTTrX6gSTqMB -0IU4Iqqr6E2Vu4nXaNxcMaOElkpZeBAOL4A87G4LFGc ---- Q5avRQiZmLaMkqUwI+T5JqGuq7KfnZZP2Q5oDGYCKBk -�I�õ/E˜‹~/Ïd5ûUÌI½Ýfb¹ò û*Ú|Óc-÷@sLýFÒòbºÍæÔÅF›Ú -´¤¤E5Úèå;5<ò\M=:á1Òö¡3¬¹ãk‚ -Oÿþ ´+-> ssh-ed25519 knHzXw tKVHWsOTI7XO9OXjgYuEK6bYf1HE+CDkYJNEOSDzDzk +RK7UrBuq7QtT75Kneom+XJ+OFnoB6eJIKi5W46Fai2Q +-> ssh-ed25519 J6Hb1Q CO4+zpfhgGxy2qPrVgC8d38pX6NbylfPHFVr4+3zvx8 +MQ3Mg3wEHeJ3VdmPYQwE6Zltd7z2jyiKmMJg43qi7uQ +-> piv-p256 VBDKjg Ap3rGTsSg06cczjMGCrZlBHnIdSvW8z44wdA0nRXTcxt +LfafN80F4hS7QicsL9p5EuVWN7NciJ6aQxw3AXTnXFY +--- IEBwT58mSJJHf4HvSt7fR4o12gQ6o/8oKRapsr/a3pk +Ç„.i:gÈ �ÿ…é‚jg8ÿ(7ëò$vŠ GÓÞ}q W;Œ}Ä£�»O¦ßœ{¡—±òÞÖWÆ¿PÁå¹&ÕØW¦5ÉùPÝŒØ}oKÛ[œ ž—ôW1/
M secrets/redis-website.age → secrets/redis-website.age
@@ -1,8 +1,11 @@ age-encryption.org/v1 --> ssh-ed25519 knHzXw jPtwXJIgTdEw/uGaUHnDmkI73NzwwBst2R1gsYGyZHM -bp55xknAOwd+fojuhPPH6iiTSq6nDI8pJncPNHbKy+k --> piv-p256 VBDKjg AoPLFWGxN4rHhEcPxuuZivPv5alhqvlbtfwvULEBxb+/ -NDm7CJZ2gE6sJOPik0V+9adeOL+6hYv+zc+pMmQmGkE ---- 9UViCoIJm4treBHyhyDqmaP5k1Cw0WGt7MlJvsLVKV8 -lÐ4CÇ(ÌÌžh -“Á"€!ÅŽõzË7 õï<�&vÒpCØß¹WqT×s'¾¬Úó®cË^s]�s+-> ssh-ed25519 knHzXw B3WDmToc2NAgTQck2LZFQU76H0WTPk5TAee51sfsC30 +AuMaHs4wE6M0xvJ50KN8Mh1VkQKNvoi6gJ1O0N3rnuI +-> ssh-ed25519 J6Hb1Q 1xwYcOQe9VqhdQ1vZ0C3XZWR6LT3z2jEJQQ8VRzy120 +uO50Hb4SbHGU31gFCOpyKyoVgG1Lfezq+h7+WneAA+Q +-> piv-p256 VBDKjg A6pDNe63rF9X4w8ZqH5+XO9TEIYP9Acf0IrBpsRnB42s +fALrFDf9pqmPXCXYVJEy+94B6xLk3Uq3CPZ9OPJCgbE +--- OnCHJ44yFr/evsSEa0g190kUiPE+G8rfrDI8MMKLltk +ï!ÒÊùÀA +N½€HDsh•iQCÆ'Öa"Ë® ÂC,ÊB!ýË +§–G>wˆÅp‰{*ul¢ú6�lßv<{
M secrets/secrets.nix → secrets/secrets.nix
@@ -10,22 +10,45 @@ machines = builtins.mapAttrs (_: (builtins.getAttr "publicKey")) data.machines; secrets = with machines; { acme = [ + hasel smrk r5 ]; - redis-website = [ smrk ]; + redis-website = [ + smrk + hasel + ]; caddy = [ r5 smrk + hasel + ]; + pocket-id = [ + smrk + hasel + ]; + binarycache = [ + smrk + hasel + ]; + paperless = [ + smrk + hasel ]; - pocket-id = [ smrk ]; - binarycache = [ smrk ]; - paperless = [ smrk ]; - powerdns = [ smrk ]; - readeck = [ smrk ]; - codeberg-runner = [ smrk ]; + powerdns = [ + smrk + hasel + ]; + readeck = [ + smrk + hasel + ]; + codeberg-runner = [ + smrk + hasel + ]; vpsfreectl = [ smrk ];