From 9954c0f177a2b1d30620a6e7cc0327b16926b79f Mon Sep 17 00:00:00 2001 From: Daniel Patterson Date: Tue, 26 Jul 2022 16:06:32 +0100 Subject: [PATCH] Rename server 2 to bigding --- flake.nix | 4 +- hosts/{dingserver2 => bigding}/caddy.nix | 9 ++++ .../configuration.nix | 14 +++++- .../hardware-configuration.nix | 0 hosts/{dingserver2 => bigding}/prometheus.nix | 0 hosts/{dingserver2 => bigding}/rclone.nix | 29 ++++++++--- hosts/{dingserver2 => bigding}/synapse.nix | 11 +++++ hosts/{dingserver2 => bigding}/tmux.nix | 0 secrets/dungflix_bucket_account_id.age | Bin 931 -> 1030 bytes secrets/dungflix_bucket_account_key.age | 38 +++++++-------- .../dungflix_crypt_remote_obscured_pass.age | 38 ++++++++------- secrets/dungflix_crypt_remote_pass.age | 36 +++++++------- secrets/rclone_password1.age | Bin 1016 -> 1010 bytes secrets/rclone_password2.age | 38 +++++++-------- secrets/secrets.nix | 4 +- secrets/spotify_pass.age | 46 +++++++++--------- 16 files changed, 158 insertions(+), 109 deletions(-) rename hosts/{dingserver2 => bigding}/caddy.nix (90%) rename hosts/{dingserver2 => bigding}/configuration.nix (74%) rename hosts/{dingserver2 => bigding}/hardware-configuration.nix (100%) rename hosts/{dingserver2 => bigding}/prometheus.nix (100%) rename hosts/{dingserver2 => bigding}/rclone.nix (50%) rename hosts/{dingserver2 => bigding}/synapse.nix (81%) rename hosts/{dingserver2 => bigding}/tmux.nix (100%) diff --git a/flake.nix b/flake.nix index 70d1a72..1718de6 100644 --- a/flake.nix +++ b/flake.nix @@ -76,8 +76,8 @@ hostname = "dingserver"; headless = true; }; - dingserver2 = hostSystem { - hostname = "dingserver2"; + bigding = hostSystem { + hostname = "bigding"; headless = true; }; }; diff --git a/hosts/dingserver2/caddy.nix b/hosts/bigding/caddy.nix similarity index 90% rename from hosts/dingserver2/caddy.nix rename to hosts/bigding/caddy.nix index e54cad3..218e961 100644 --- a/hosts/dingserver2/caddy.nix +++ b/hosts/bigding/caddy.nix @@ -74,6 +74,15 @@ reverse_proxy localhost:8096 ''; }; + + "bigding.squirrel-clownfish.ts.net" = { + extraConfig = '' + tls { + get_certificate tailscale + } + reverse_proxy localhost:9091 + ''; + }; }; }; } diff --git a/hosts/dingserver2/configuration.nix b/hosts/bigding/configuration.nix similarity index 74% rename from hosts/dingserver2/configuration.nix rename to hosts/bigding/configuration.nix index 0c2d91b..f16640b 100644 --- a/hosts/dingserver2/configuration.nix +++ b/hosts/bigding/configuration.nix @@ -25,7 +25,7 @@ boot.loader.grub.device = "/dev/sda"; # or "nodev" for efi only networking = { - hostName = "dingserver2"; + hostName = "bigding"; interfaces.ens3.useDHCP = true; firewall.interfaces = { @@ -37,6 +37,18 @@ services.jellyfin.enable = true; + services.transmission = { + enable = true; + settings = { + rpc-host-whitelist-enable = true; + rpc-host-whitelist = "bigding.squirrel-clownfish.ts.net"; + }; + }; + + services.tailscale.permitCertUid = "caddy"; + + users.users."daniel".extraGroups = ["transmission"]; + environment.systemPackages = with pkgs; [ helix kitty # For terminfo diff --git a/hosts/dingserver2/hardware-configuration.nix b/hosts/bigding/hardware-configuration.nix similarity index 100% rename from hosts/dingserver2/hardware-configuration.nix rename to hosts/bigding/hardware-configuration.nix diff --git a/hosts/dingserver2/prometheus.nix b/hosts/bigding/prometheus.nix similarity index 100% rename from hosts/dingserver2/prometheus.nix rename to hosts/bigding/prometheus.nix diff --git a/hosts/dingserver2/rclone.nix b/hosts/bigding/rclone.nix similarity index 50% rename from hosts/dingserver2/rclone.nix rename to hosts/bigding/rclone.nix index 17b46d8..0cfdee9 100644 --- a/hosts/dingserver2/rclone.nix +++ b/hosts/bigding/rclone.nix @@ -5,14 +5,19 @@ }: let mountdir = "/var/media/dungflix"; - file = '' + rclone_config = pkgs.writeText "" '' [dungflix] type = b2 + + [dungflix-vault] + type = crypt + remote = dungflix:dungflix-bucket ''; in { age.secrets = { dungflix_bucket_account_id.file = ../../secrets/dungflix_bucket_account_id.age; dungflix_bucket_account_key.file = ../../secrets/dungflix_bucket_account_key.age; + dungflix_crypt_remote_obscured_pass.file = ../../secrets/dungflix_crypt_remote_obscured_pass.age; }; systemd.services.dungflix-mount = { description = "Mount the Backblaze B2 media store"; @@ -24,15 +29,25 @@ in { script = '' export RCLONE_B2_ACCOUNT=''$(cat ${config.age.secrets.dungflix_bucket_account_id.path}) export RCLONE_B2_KEY=''$(cat ${config.age.secrets.dungflix_bucket_account_key.path}) - ${pkgs.rclone}/bin/rclone --config="${pkgs.writeText "" file}" mount dungflix:dungflix-bucket ${mountdir} \ + export RCLONE_CRYPT_PASSWORD=''$(cat ${config.age.secrets.dungflix_crypt_remote_obscured_pass.path}) + ${pkgs.rclone}/bin/rclone --config="${rclone_config}" mount dungflix-vault: ${mountdir} \ + --transfers 32 \ --vfs-cache-mode full \ - --vfs-cache-max-age 48h \ - --vfs-cache-max-size 100G \ + --vfs-cache-max-age 168h \ + --vfs-cache-max-size 200G \ --allow-other \ --no-modtime \ - --buffer-size 2G \ - -vvv + --buffer-size 4G \ + --rc \ + --rc-no-auth \ + -vv ''; - postStop = "fusermount -u ${mountdir}"; + postStart = '' + sleep 5 + ${pkgs.rclone}/bin/rclone --config="${rclone_config}" rc vfs/refresh recursive=true _async=true + ''; + serviceConfig = { + Restart = "on-failure"; + }; }; } diff --git a/hosts/dingserver2/synapse.nix b/hosts/bigding/synapse.nix similarity index 81% rename from hosts/dingserver2/synapse.nix rename to hosts/bigding/synapse.nix index 578157e..442b716 100644 --- a/hosts/dingserver2/synapse.nix +++ b/hosts/bigding/synapse.nix @@ -8,6 +8,17 @@ in { services.postgresql = { enable = true; + ensureUsers = [ + { + name = "matrix-synapse"; + ensurePermissions = { + "DATABASE synapse" = "ALL PRIVILEGES"; + }; + } + ]; + ensureDatabases = [ + "synapse" + ]; }; services.matrix-synapse = { diff --git a/hosts/dingserver2/tmux.nix b/hosts/bigding/tmux.nix similarity index 100% rename from hosts/dingserver2/tmux.nix rename to hosts/bigding/tmux.nix diff --git a/secrets/dungflix_bucket_account_id.age b/secrets/dungflix_bucket_account_id.age index 9eb543e9fb7674a02c466e438dafa3df81318ece..6e328111a8965cec67809c60f4d8d8803ff18ea8 100644 GIT binary patch delta 943 zcmZ3?-o`OOr#`dTB*V-oH`L3oDk-(x%Q-n9Hz2RrKfB1>wJ_1bH>fZq)Gx>@D%Z?8 zn=8P@Eu~!BFfY@`zrdtCEI8QB*Vo85FW)D(G$KDEH_bIO*|a#bGSJT~pG((Hp}06h zH#Nn`)YQ;Y!KuL1Gtp7OC%q)aq`V}kATTi})HOvr&CSd-z0xc>JHs!^JGao-(>pcC zJI6e#yvo^^E2JRU&&Cr6fJe(A?M1D6k-O z;z#lDqTqGABb%!+eX$@r>f(9;TKamU-T; zrA5Ua$?g%_K9%m_$wodERqlZWhCXg?F8UR&!A3q_*-pt^S`9+lyq`2~fUhGFHE zSpiX18N~$|{`$rdhMqnpo?b47Ax_x_p5=~{&oYYFC;9m%rI}{A232{vm_@keIk~yH z=cGECd3zWJ6jtWC=0zE16nJ@=W`+848G0tAd*r&5S@^rBnfPZ}_&J-q=DUTv=lgmk zW<~l2ITpJW2bSq)C6>6N$AEj4hkHc1LXfkerEhUyNNI6ox><&!wnu$seu#NhW`TDI172LxdO_RBTDsw!H!@@%fo%5ZHO*}pG z&76`GL-bQp9Rt&=+|n&8oJ=w;jEm|EGIA;dQ@u+4D+)7mBJ`7@T(S$(eBBdsx!f$% zL);@nvh^$T(n^E0Gu^fGvJy?bLed=zOS8Qrv$%A1brme~0*j)25?%Z%Eq$ER+;S{@ z41Ih|TwP6lBi+MGOjDDh(up}06h zH#Nn`)YQ;Y!KuL1Gtp5YvLYj=!azU0(mTpMD>X31&&{|X*{iC|-#pWx)V(0fG07_{ zJVo2NG{i8Ht1QerGqJ)qC_Ez4-M6a1B;PqPD<`EW-8s?HH7Lh9SzkLdvm&R&Hz>t( z;z#jtw@^nz$HYSS&>X)&^N2)Cufmcb_s~LZ_r&zv^vcBSfY3bS)Zl!t@;pbbFbk8+ z5(}S1Q}fiah_oCZx01?8^F#~t!ie--4^#bImq;U%v_x+MQ~l)0@r>f(86iH&B`#&@ z*%?LwrWsC2m6jGs!6}uV+7bDlsrimYhB*=L`Prt0rOw%0zHZv3f!XFR*#XYs=7xR& zRk^;o9*LRd!9f|J9?n5N+TP`k*%6)@sY#KO&oYYFXNUVm`G;o|8yY7k7ML4Fx|@aj zN2It^q=g%prxI#0ghU0qT1I4ZRaO-y`e}P+Y5Rm!IT|{eI2Pvwxp|ft_!wp< zhFUl#JNra9xlz|U#@e3u}_6TxpBQ|rJIpwxVLds zRZdipOPOC~xTAZDTWFMVF_)ovW>Q&kg@LJSZkAbyr+IjRe~NaJQHWcbPiT;Sd3dB- zqIacdQE6JJBf53w27V<*fePk9E`Isuj*cGTo~Dtekru(Zk-k+?MirKcf!YOy#oDGm z^|^UQrg;Sw6$V^BW#$#3kr^ey`B5b%!MPFUAs$|aDV07EMed#k#>rJ?Ng-+OnHFWm z=IJ2o;tTU46|;2Hi&7JdQx(eGxUxNpOp_9Qvl7FDJh^mrbrsAUBa3|f(%dSu%2G2+QYv)E??tQkSj5X* tV^(~!LgCc*P2xw`vTlD$`L^5ikg3dy ssh-ed25519 eYYv1Q GcFIRQUBNoF44b+9aD1DRAfsF0AetKwfC9igTbh1tTU -EHgAe8RRhDUtsXYMZ2ryzMvBcVANnh1aPTCg4DHCv9Q --> ssh-ed25519 Bp5IaA MSq26kJ+qwc42Kb9DkXFc31PkV8uGhPUt3MMstqAdyQ -c6tDttBCh0+6aPcDpXAik81dAqNXiJB2rQ7UxXuzcPk --> ssh-ed25519 T/DpgA oa44TfDCyh8TZqzPDYvmPtmksYk9e1L8f1WuW6d/8js -8yCe2lGXSXT8d1HPTdjAUEGytYoMadDkHT8GBI5MpdA --> ssh-ed25519 qMgRFg wuC+2k2ZNSMLk37VPZ3+IH7Z4yzy2q+PyjLrpjb/mgk -S0aRyhXGubFOCoYAyB7HzK/qJGoQYuFYQWGujhq1+vA --> ssh-ed25519 dMZXNw pijVpsFNoQvFVtzy4FdJ2ePXLa++OuqIT8u2iC19cW4 -/nBqQXpYaDwIao7hI12emNyr3iXYCSn7VoGHm4Z/Swg --> ssh-ed25519 GzHGXw 7ubv4nhMTq5pAH90hHcIHbmOCl6+2Hyt6hVIlw/1m34 -zaGOSRdvCX7dqxflSGwX8esb1KwkCCGvEk+CkOddqHU --> ssh-ed25519 70Nt2Q bSiqwyY2Hd08hb2RSjG64xAr0pLIWAwWRt8Cg5Ja+CM -SYGXJUrFvR9nNnUbxCeTg8im3AeA9EEKDaWpnMspI7I --> x<:I9G>-grease cI}?v={ -53Rz2v91Q13wg//ocQfqrw44pKE9GdOfZbn6uGTfM5j9pWbwbvE9UeZTCoFYg7J0 -vRscj8CIN76ZSDB78W+VXmMCmb8yip38HgSm9099HQ ---- DcT2Likks5nt9wv3W/+vqweGgTMuBFJzxkufaxepdis -ii #DmXXB'eϣlgas"Ed{7'!z%3'R$ \ No newline at end of file +-> ssh-ed25519 eYYv1Q NfUs85CEft9jTh44fnAnN/PcdOQ2mdEByoNkyUCNrWQ +MvA9BA3RoV2DRovXvlJzbY1E5lXdNSvkV82gtNCh6PA +-> ssh-ed25519 Bp5IaA lSrjQhwuY8ZiwVC82azl8rqN0/WasK4ZGRq9ohWDAVQ +CPBY/Eq7MJ6Em+h6ro3HtfRqn9gn5BR3z//dA+SHjxw +-> ssh-ed25519 T/DpgA cv9z3Ihe/GydTPMSXXiNFxNFQwVYyZBDO1TVGCygoAo +t4yCcPpM2Z7sqN55GbXUuLE0hvD7jXU1dCqOHcDT400 +-> ssh-ed25519 qMgRFg jAcoxq4wyu8rYQGrt/rKUFSwp0Hz4QL4asEuJdA6nl0 +K+bqqoheMofX+iwcZYCE4Y558m/kzqUHyieaDQ8jJgw +-> ssh-ed25519 dMZXNw imeVQpYX9guxDPulzYYeHedYxZsmTngy+jgpQulRo1Y +kpYgC6nzrhZsXkYHAl1273fwZ345towB1K84riX+Y+Q +-> ssh-ed25519 GzHGXw fgC690PsBF/lgRF9zwZqhvRkrK9Pm65tcZUWKzxookE +haaWg3MNhKl1+CodRS+4MzwRVsKgVaox/Kf2YnmBNVY +-> ssh-ed25519 70Nt2Q 46a4VTEFv80jOpVl/54J3sJhBUS4G1XqrAoPReb3gjs +ihr26HDZ40F6WJEqJmQgkjAUnnrz0Tc0ck26yLW0wOY +-> @c_kw-grease Au)%'xOy C/ A$Rd +X7eu3QrQyKDn +--- pqgV/pzN+qsLtrbL2382/1056D925Ko5y5Oe3vwWmoc +h3|wzbI0/:U.m(/ ssh-ed25519 eYYv1Q khr3/s/xFo4EpsGCsHLms8H40RyIjPrb/hfd7PhmAlY -yogyfUy9Jwk7xlb8+KZQEaN+gKDNz7b2s9ZUpRuDm9w --> ssh-ed25519 Bp5IaA Nb3GffR/ounxsqXsCvn0Eh6jf4aI9QHlTxMA6kPazX8 -Yej4nhFNovHDCK9YiPLkPi/A4DG7xJHfW7bdLZSvE3g --> ssh-ed25519 T/DpgA XHDbl7aPDTVOsrstvwJY+S8svjoePuBuapL6jZt4mAU -0rppuzsRaAc6hmWhSTPicf39TmWYN5ZyYWQNaXd03PE --> ssh-ed25519 qMgRFg qxIX03u/+i8Afl5VzZW9VH8bR5lUw5/2z/IX+tcKX1g -Me5yvrZP616p4gAOHJ8Y/xEHhbeNL+PYFjF2qosmtbY --> ssh-ed25519 dMZXNw lXMNJhPZiaZKWpMg0itvN4FGA8wUXFYtFQNlCzovgDk -Yj2Hhf/GokUlKYiLRFODKYlKSssDwEA9C9ZvykZEnRM --> ssh-ed25519 GzHGXw ZTZ0/24YsPNnU+zEmMNj20lZ90KVzXfUPkPSBoEUISQ -U0XRE0Usr8DqVBdke7TgTBmV2Y0GfzNH2hlHh+lalgo --> ssh-ed25519 70Nt2Q ADPeje1YQThZ8LfBQUZSYqVvrM1PapGjrct+5t7DbRk -d0/olcBVPn7kFrVDVvwBJZAuRRhOkt4Do6PQL+JevyI --> Jgy_dr-grease Z|ur|A?p a9ev[ C~znjf0Y Fh? -o3Uo0ZUT4ejThYuHNhnDHes0SHRRiewOvpAscdhfQeVL0A ---- ht263O1mnxSboyH7yOgDyD/Tq7sPa4tIXi0kEO/q8xc -n"9x|P`"~9IXP5. *DU)Ӭtʇ256f؃S[Ŀ:]ƴQ \ No newline at end of file +-> ssh-ed25519 eYYv1Q IGdoQqDAFgxgWVlqEpZJvG9gE2KCKoXpMmvburw8Fhk +66QE8kwl63xnvYj7nwmT6qR6Jj8fCfrzf/iAB7U+AU4 +-> ssh-ed25519 Bp5IaA n3lgDi3bCV0t/TOjqdsNTRxnAlCs0GxoPPjpnaeIrzQ +Ip98hCbmz4W8+NY85DWv/nHHmLANfwo0rNaI2N6N0kQ +-> ssh-ed25519 T/DpgA VGDYHrof8rh7WTZ3DOrTIVcfyKkVbLJTL8bDDSfS4C8 +3o3A3jfTL8L0dbpv9Xe3Oy93U3XkkjhRX0tqQtSZDtw +-> ssh-ed25519 qMgRFg Jchcic5fvRBviRtbdUyMl76Ea0aGW/7tRWkTt2habAg +91DpFYKWqA4rawbzkEEkLNRay352vkuU0srVBwYFkco +-> ssh-ed25519 dMZXNw Sa+BZdY+YLrlQkX7G7VSF/k6oVAVo17zSgXbq1OiqR8 +xu894gtzqTFNDyvzwtejNw3WkMnVQLcpIaVF0CgVODI +-> ssh-ed25519 GzHGXw 2WNPWILkiCseWMN5GHpfNs9T566GV6dUxqse+YVXTSA +W1MT/CHcZKefKb+7UK8PWwDP0cDCOU1JKpiXTk0vY10 +-> ssh-ed25519 70Nt2Q QnL9dyxLSG64ncFRCoLOEWtBI1y0qRDj0a0TESW4bXY +kHHQA72guLb7YYbU7/CTawylq1uNzcgNRwpS2z2WzeA +-> hg3-grease +O2O1JT79k6zrpiuexN5i/1eP5cTzjOPjHS3BCvprA/JxSxUNrV+a1RFFmLb6OTad +8cR0wG66tw6xaYQLvxWiKCzh2AqXkQ +--- tkk6rwRnFGtrrl6Z0kDoqS/NPV4hFhlKvwJ52zGuy+U +B]$Soe(kV8caLG(ȗFYmɒh1ďyLѩzJ!gD{nU +N0 \ No newline at end of file diff --git a/secrets/dungflix_crypt_remote_pass.age b/secrets/dungflix_crypt_remote_pass.age index e893b62..bdb1132 100644 --- a/secrets/dungflix_crypt_remote_pass.age +++ b/secrets/dungflix_crypt_remote_pass.age @@ -1,19 +1,19 @@ age-encryption.org/v1 --> ssh-ed25519 eYYv1Q Iy+RuK6mvXhyFka/GPfVkXBLCr7pgYnh2zvaIGobfRI -DY3nNtetNhaFQkQ9iPIWchwD0Z8Mqt3GchecGuO736w --> ssh-ed25519 Bp5IaA TmFGzIVBoLeVTR4N1D/YDrU03ZwDf40PEr5Ie2ZCd2o -jgrFx+B5m9p82bdfc/v9cOSIFU2e4EB8T0Fx6RxBacw --> ssh-ed25519 T/DpgA mnSN2SUsWaezAjQau98DFFnCsTlhMqX3+WaE54vwTmk -NAlWYCjP75FBLi3ddGiPxEh1vxtvJDx8rzKhge8u/R8 --> ssh-ed25519 qMgRFg aZRn9NH6n+1XqsCS3huW/PSPolbanliGpvzr3dXVDjE -ICidk4CzZ0JJpkMDAK2VIVyX7MePgJiszsSsTroD3Tg --> ssh-ed25519 dMZXNw QRVSAvCoiZXRmYk5E/t208+8qthwkOX7kcgzSMpu9TA -mXqWyEDsv5h9edzGenfRp2nymUdLZuH0nG/kFU0CXIg --> ssh-ed25519 GzHGXw uhhVxwcyZ9TXZARQi2qZH0i5ssJFCJDTQXVrpX7M2nw -aLktj6YmuSm2noiEkg/jJTG65WqHaTpcEvTtHbfljq4 --> ssh-ed25519 70Nt2Q +mDpgV26XurIuT2rO83ck/PxVOpByVdI46KuZcMlbV8 -QvWWonsL0yPUpEWR+pbyekYJ57+L5EPnrg+E9beRw6s --> /T6 ssh-ed25519 eYYv1Q HzNRL7zq6Lrum/2tHKjacsv1Y0LlXmgOZNWLXAk2lWg +no6sDeinVG3TPu3UVOEDauVrHqmJGzMgHB6Dr6UNrDE +-> ssh-ed25519 Bp5IaA 9UvpQHut2BFiXIkR+q1A/Ik4AYvwghddk9Fi5+rw4mM +Zs/ggJfYh/epVFRiJEnvICceCnlZBifeGLRDI/Eosj0 +-> ssh-ed25519 T/DpgA k40Cb32UbfjsApxi0ccO4u8xP12uWpTot02BSCUvP08 +LfXJLsRtNklus14Pg3TsDt9MMbRi9SrH7uvefK9Hxso +-> ssh-ed25519 qMgRFg iS9incss6tduf58gxdA8R5dqnwpXFy9PB8ZwNVWbvyc +e4KTD8Z4fUeaLAiqKGQXi/AIkyjlYEUNraHSB+TFhiM +-> ssh-ed25519 dMZXNw DKMC+uCWkUEOF2fFL6o41UuggAzcWHwM5TwYzw+5sjQ +zu/YdI+pzudPH7azRqwmDvf81m48EZYK9c3UcVPTaVI +-> ssh-ed25519 GzHGXw OX7ylQzBuyzErkhOpiUrBPhlGx/TrAgK5KuI6yEo4EY +DxeylfaVBkDEWxxRz3KCr5UZsREfqXwoAnC5tAdyFL4 +-> ssh-ed25519 70Nt2Q pcGNeTUV7utxnH5a4H78YOvr8cpORGkQ7p8hh569zz4 +STlbScxYbWXV3B8T+2PSiLfGkjKudkXwkRG67ZHlwtE +-> s-grease +FHLY7TFsme9Wd43MaAzpXiolSX0 +--- b2uVM8dc8IXnmG4fb/DjApdEJ3yngTDN8d7J0mbYYYw +BљVEMNM=ݫ?]A%52/Xv5`[ \ No newline at end of file diff --git a/secrets/rclone_password1.age b/secrets/rclone_password1.age index e37eac0c77c0d03caad521cfdd898148d647378b..71fd33eca82b19b29330e382ad3eaffeef3a9e84 100644 GIT binary patch delta 923 zcmeyt{)v5pPQ96@zOz|&ih-L&K|q9Il4q1fnrT!>WlD-uVV+Nwg|TU{exPx_Nq%ye zE0=yshOfC>c|f>pRb`-aa;S5;fpdy;Wr?AeX?~S~Po;Tku6bpYdquHPHkYoQLUD11 zZfc5=si~o*f>VL1XQHD*QeLikVwh`UiEmPoxmi^~gx03#hC^vktXhCP6kyLKFQ_Ixy8Qb0WOYQewK~} z7Nr)2si~#eWiGzP1_c%6LHXI*1zE+WnU+!dIf0cq{@ICsA&$k9;~B-n-39!*jFTqcTjmiqm~6EVWCuy&MB9Q#=gZ zv?~fqfwHJGnYy~_w-z| zN`H?u(-K!NUv%rt4g5-s0u@{=b6f&4vK+n4@=CJPjlvu&i_LvQjWhD|TwER9sW$q3inH<^gNnH<+)N6LT#{Y%y(%lbqe`oMd`nA9b0f74Djfr}iX8*f0y7HBN|N&Q zog+ckWtsWwrWd6q7N;tdDLAV5+H&Psx;v(8J4S>=xh9*K7+V@Rn;B#WnWm&^M|c}q z7<;D%FVk#%or1H} zERSq>xky*Edz<~!NhW&RuN~xGCd{IkDqQhzpXWr?O_VW};DKuA{!6pQo{DRCsY@WL8#AL4I~hP*q8} z0hfNVt5;TDsZns1r(u9sp}t#sPGn9>iECMEq(zpCmuF!?XkVL1XQHEmZ-j-Dex#vOx_6SJiDPDVnwxi6M21s%SWa1nqicCtL6B2M zmbrIEkV&`+SDAmXQ>j;Wu#aDXV@QCrc~XjpTUd#2Zc1fTs!M*VXIi#zdS;HRM@otB z#E;_P-fpGIWoD%Ysad93?j{E2#*x8Q0r^D%-s!>FY2N zEzUMKbSw%hs5Hs)Oe;$c4ht_b40UznimEKGtjaTYclOFLw=~R2cJ?xIF48v*H1^2x zv`q2~$#G8i2u}^sj9Mfd4svK8m%c1}aH*?oC*FqEj;`GEy!w`#b z6H@~>qfGt8Y;^0)4g5-s0u}N-{IebX4gDPh{5(org7ZqWz4F`~BLWhW9G$Y9(hDO~ z>MNa{y~-?;BP_TgU5is93X?*L(~I0($^r^Z{KK3xv&#JpjZMqTqf9fRveGK6D%~92 zvm-&)DQhU{rWd6q7N;ussbxlUx%s6#YMTU9MB$?g$IY4W)?UnYA1Slwmve14QsSBx zxzUT^R_VMyTuh0~Yie1(*FU?s!MmJyPUK-hM$!LEN+!f{CmF^cZ~6N6Ky``3Z;6sw b;wl~&R85wD^*Sh ssh-ed25519 eYYv1Q orNUIjQ31WNU/r2PMRs779co/1GUAxO6djbREjw6Ols -D1hTwMEK+Z8G7mXQ9dSMJml5T/IEsKuM2lYM1+JflIE --> ssh-ed25519 Bp5IaA NNSWoj9TxWxx6bNzmbeDBl9tD9geBVDUV4Y5T0Z4zhA -tkbG/ycB46Q8VOEvZk4THqWc1SmBVagjjB2WDNBKhQ8 --> ssh-ed25519 T/DpgA Jrx6fRf2zGbcORUggDRaZCRmMnf64mLNsv5Eum0yjyA -TMfk3Axgjd6DInr6650uU1uNwTAXw1w5HoUMgaZy7bA --> ssh-ed25519 qMgRFg K5/Al1g+V/FfRLph2qoz8v7HglFn6JVhVUC1EFbh0Dc -5Oad66fE3Ag7dPGZFagELEyCjBwnyHPCmrhFPaHw9xE --> ssh-ed25519 dMZXNw IaP/8gg/2c5dbcm4j52kfgpp3dbltgLtubW7o7CttUo -20Ec6H6wMWDjWGctFLlTwBtxTnXtlA9iA56Y+axWDhc --> ssh-ed25519 GzHGXw x5nHBFJAclVL6NijEPSzSvKiz7TfoaxFpA+Lvx9wJTo -T6XN3qLE08wUdgPXjyuxlwAWs3qIhv0wVyEEUJvI42Q --> ssh-ed25519 70Nt2Q BIknGhzqb609nqY+gEs4rhU9JVkffkV51yXFIlGM33U -YW3ikDfbHrtiReaCHGIBmNRjNlrglE+peDPkNAWSbr0 --> 80Pp-grease $,4[1 #)oe7/ -aFHoVmFz9rqAFoMagXt1YYzx5lNOk0lhXtHiL+dyFVTxgNa7XOhwFZD5jC4DUDE6 -XHmFiyKK ---- nLxTvnGSwrNWu9iVFSU37mMKMtJIA/xGMnpxCEn0k/4 -]t(csWA#f,cZBh˫5bEK'B!EHQiֳv!+ \ No newline at end of file +-> ssh-ed25519 eYYv1Q LZwJmlO0K8OZBQcBp2KiirS6dOi0MI4QL3KZJAbSlSA +VN9IF2McXP7T576+HMnC/H8rBQPeuiFViCXKYVTYGxM +-> ssh-ed25519 Bp5IaA V9hkpjVVQlfB7jHbxHWcrDtXBAFsQdZM+wq8XB8hrHM +40DsgVRpRxwnhTuc+KY9W5DAP2er4f4gwUS3XFSsP1Y +-> ssh-ed25519 T/DpgA YyovZ4r5p2Y0b0YMB3ybtj7RGa6YJIaCQvS4N8ACy30 +bdWFxWQcgIbNspUSwtiytErZ105fQtvTmNazsprzVpU +-> ssh-ed25519 qMgRFg I3+nfZVN7qNUUDpoLt7/lrlhH1dacQAoMyTeLbypD1s +SJspcVYfX6HuRH9lsAsnt8FR/n3J99Bax1dj/CC4dnA +-> ssh-ed25519 dMZXNw 8rZ8Z/3IM9mkI2K/SuHsga96jsZ50Mw1nGiR3IGQVwc +CDzSdHl+xQktP8p5enfaKS9zxJaTdf6YcgXbVbQMrmc +-> ssh-ed25519 GzHGXw dP0X4HBhvAMw+6JoA0jT76jyjyykrzHwSvYub6Rskmg +2wgzuGKxv8SFz1DrMfAsHcvtprOqWEo8mporTPwhrVE +-> ssh-ed25519 70Nt2Q 5FfUOwKURR9Zv/uXaqWDzQF7Ms0xkdINA1Rz02tZ4Cs ++MqPawyZvwCZUEcN2/5nZt/Zwf59jm8h0BFsHyWUX9k +-> n<90Kr$R-grease 2 +uQ51BhliS5bfdIO2YS68nlf4lS5oVSfqXFIGoVhHO0cwuh6cckL4aqNim/S3uNRf +/J/a482wMBY2gchhnG2qyhH/UF8 +--- 3UkEGyyoK/ejTo6/0rB8BvzBt0P/JnqubGZUIIjF+eY +A9Q}[,Hf-{^@^nb@C#d}X1n+ \ No newline at end of file diff --git a/secrets/secrets.nix b/secrets/secrets.nix index c48af86..27833ee 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -12,8 +12,8 @@ let system2 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDwfy5oG1heHoQlZgrTxqlW+oOTB8NdNcNm1IpKyqfIA root@nixos"; # pingbox system3 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMzy0KqakqljVqgA4lvfTt65cikgPOKFvBXF0WS0LxGP root@pingbox"; - # dingserver2 - system4 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINxzzoExkmb0kP+6OS2omcoa8xe1ETc+FAhU5gBuBUDR root@dingserver"; + # bigding + system4 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINxzzoExkmb0kP+6OS2omcoa8xe1ETc+FAhU5gBuBUDR root@bigding"; systems = [system1 system2 system3 system4]; in { "spotify_pass.age".publicKeys = users ++ systems; diff --git a/secrets/spotify_pass.age b/secrets/spotify_pass.age index a85d5a0..c549cef 100644 --- a/secrets/spotify_pass.age +++ b/secrets/spotify_pass.age @@ -1,24 +1,24 @@ age-encryption.org/v1 --> ssh-ed25519 eYYv1Q ARvx7I8huD6Y+Lc/SMbKB2iTU6C66GOH++zio7ad6jk -t1ZsoRH2Ea/nSzKdFxg82FWxvEQwrq0VtnFmj+bQZ84 --> ssh-ed25519 Bp5IaA lVMdtGO/5v121axjWNSWO0hStjZD9oJeHj7ABP8byxA -HLz5ZlRX3icX8EgNXXuMbIzEFUf+knC8wy6tYOYQjWM --> ssh-ed25519 T/DpgA YYSFysNZRKiA29Zxr0jp+/4uOwgUvAsAmIL5dWUO2Ak -1KIM0vVs3JtHeh/nZIYoauTIPWquCyNPcFYcJ58KIZc --> ssh-ed25519 qMgRFg zG8RUgzjF5/udkB3xllBtb/qYnoe7/zT7xG8MR82TCU -5724QzfCyotFCr1sFAAqDnaw7fcTDnStISfFk6SuaO8 --> ssh-ed25519 dMZXNw 8Gok6lsdqB43O9EAv7UrCCcOss/AfzOysmXNp/eIjDA -RnBc0F/oLwiQYNNm0LoNS+qq6vuMP6rWzrPEvoM78sk --> ssh-ed25519 SukvQA jqmw5LdpZ9mIXh/B4OX2jv6nA6hQ217UtmV+H7e9JEw -nqMoh8G3HmtUgIsdQ2Zk8IlXCRuWnjDpEfB5CxW+IiU --> ssh-ed25519 GzHGXw k9JOvh+jSMtaFZgEcfF6xDHkBoLmUzZXWVaH68PVwls -8KwmNUVQiVLsVDcNknxRex2NGaXEX7r9JxR+jPFuq0Q --> ssh-ed25519 RD8X/A Uups2+qU6SD7zoPFUvc0egGHBdWWe9u73MJ4JDFiDW0 -Hq5/jIKEww1pmgRYzL5f2AgnD/tHlgPl8pbdHWB+cK0 --> ssh-ed25519 70Nt2Q CgPTHM5d4KyhMIh9+lfr+I0yNrA0qaU679+KP0E8BSk -GLx8IU1iei5tvk4LVMpKguHRZLkMWcm+lxOeXOaQ+UA --> 2:1M:-grease wu5!E6&C 0z1@G. 49&iuyn -t/V9l2chpGvtQE/XThv2p6z5stra+HVhUFwJGMs/+C7A3IYnJLFjD2HP9YZWqYYN -sqViOiHM8ektR9o ---- G0vcbW7UTdCe3kwfbmq41MSmVb4SkyduYUpaC2es60c -Ҍ58;Ͽ%{voqK=*N}cs \ No newline at end of file +-> ssh-ed25519 eYYv1Q 8X3FuReH3fF5dMbsv1JD06sLPzuSHETNkexe5TPzwDQ +enOmE4nzDW2P875OJ67WbVgDf8KOvyM+PK++MXIM2So +-> ssh-ed25519 Bp5IaA /Ch6pIPatUUZ85V8ez16vg3gT7m18pN5VIQnQMWb1zc +P0TKAOQ9WmmG/XsgtDQH7K7T5u7kfp4ask7CUQX5cGY +-> ssh-ed25519 T/DpgA DWWm4K0Nw7172KGRrxsjXbOLLwaToPCzXeh9xxKMO04 +XGF+IayfmxbK2S92q7kDW6TYIAzhinlepXycFxNuP5k +-> ssh-ed25519 qMgRFg XYJZc1W4BtXSgX3betKVVQhoaY0VNXDVyBXC2x9CUl0 +ENV3gBE8EFV+Vt6A+u4Z3a8mZr19S5ss8EKM90ImiH0 +-> ssh-ed25519 dMZXNw DExWa2Geljp7urh0KD+wSrcwiKuAh+vTW0chTrb1ahY +9tkLLqMBO0FlfXqTTdA9OexRWNd0+ZxodRicBQUOB7I +-> ssh-ed25519 SukvQA 6jvPmMGRUoQ083cj23sdtQEm/kfCrUV58MI4HslR0VQ +FLXYaalc4+Q/XLJLUmbR9ezc/hbV9zclFs5Tq+Y0dnM +-> ssh-ed25519 GzHGXw gDIhdpxcdJgQ1h4+cn1mKiaVjYlGAD7rGAp1LCLXIBQ +dUQjsL7V3/2J6L0TaGKmV9yKwPZDIsc7hhEsuVm8sy8 +-> ssh-ed25519 RD8X/A ZO2vhhD9M3+LpKQKHqjD6m+kO8KoC+YeIhvpdrr5IQ0 +/ZktLnDSxCmgPotVAXO3WANIVxjDHnYQtR0PUwuoWuk +-> ssh-ed25519 70Nt2Q p0mwjAbQjGQ5tARyXeR/8UyHSyykWx2QifRvUOiXG0c +g1VA1dIPBjxx8zwy1g5H0vlqE9FVY6/Ea8p+Vm8u5qc +-> 8G~_C@3-grease Gi?*J" Z`2H D% +wFlnZJfC6JeZKaNv7U14Yhqj2r9qpD/3VHzBmtPEfBf19e+bMSPqjYQNXJTw37PL +QCBsnrdrAuzqhYEKUAiGfk22q0W7v5YiuNNyUGLXGmwM +--- NnXeTCDpsMYESz1uN3HcG01ajiTLkjAzqNA1v8Y5dts +3Z}Uz