diff --git a/.sops.yaml b/.sops.yaml index c35c914..cadf8cc 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -1,8 +1,10 @@ keys: # Hosts keys are age keys derived from the host ssh key. - &jitsi age18wsmva2ndn774jwan44sl84kckg9f9n2tpd62g7fy6vcq8eg9swq6zsyg3 + - &apprentix age1yew8ls8j5pq45k5vxfhxh5xvlnesyfktd0mskxmwq4t53vmezdaqax3aqk - &neo age1ed9esfstrdhfl3650mv4j3mjyum70245f903ye6g0f5t2ept73nqyksh3g - &redite age1utlywxylme0z3jenv4uz8ftcwteg9877y3zf46fu7zwjjwa05g7q88w8t0 + - &thot age18rv8q7stsn2zv4gxuj4g4ktkeywkg2wngtdwza858jjme8wdvp8s9hkx00 - &two age1zlpu6qum5xcl07hnsndp78tllqph5jz7q8fr5ntxr88202xq9u9s9r2y7x # Nounou keys. @@ -40,9 +42,28 @@ creation_rules: - *jitsi - *neo - *redite + - *thot - *two - path_regex: secrets/acme.env + key_groups: + - pgp : + - *_aeltheos + - *_bleizi + - *_ds-ac + - *_esum + - *_gabo + - *_korenstin + - *_lzebulon + - *_otthorn + - *_peb + - *_pigeonmoelleux + - *_shirenn + - *_vanille + - age: + - *jitsi + # Secrets for apprentix. + - path_regex: secrets/apprentix.yaml key_groups: - pgp : - *_aeltheos @@ -58,8 +79,8 @@ creation_rules: - *_shirenn - *_vanille age : - - *jitsi - + - *apprentix + # Secrets for neo. - path_regex: secrets/neo.yaml key_groups: diff --git a/devshells/default.nix b/devshells/default.nix index 19101ee..651a139 100644 --- a/devshells/default.nix +++ b/devshells/default.nix @@ -6,6 +6,7 @@ pkgs.mkShell { packages = with pkgs; [ nil nixpkgs-fmt + ssh-to-age sops ]; } diff --git a/flake.nix b/flake.nix index 127cc14..c062bf9 100644 --- a/flake.nix +++ b/flake.nix @@ -18,7 +18,13 @@ }; }; - outputs = inputs @ { self, nixpkgs, flake-parts, ... }: + outputs = + inputs@{ + self, + nixpkgs, + flake-parts, + ... + }: flake-parts.lib.mkFlake { inherit inputs; } { imports = [ inputs.treefmt-nix.flakeModule @@ -28,11 +34,16 @@ flake = with nixpkgs.lib; { nixosConfigurations = { + apprentix = nixosSystem { + specialArgs = inputs; + modules = [ ./hosts/vm/apprentix ]; + }; + jitsi = nixosSystem { specialArgs = inputs; modules = [ ./hosts/vm/jitsi ]; }; - + neo = nixosSystem { specialArgs = inputs; modules = [ ./hosts/vm/neo ]; @@ -43,6 +54,11 @@ modules = [ ./hosts/vm/redite ]; }; + thot = nixosSystem { + specialArgs = inputs; + modules = [ ./hosts/physiques/thot ]; + }; + two = nixosSystem { specialArgs = inputs; modules = [ ./hosts/vm/two ]; @@ -50,15 +66,17 @@ }; }; - perSystem = { config, pkgs, ... }: { - treefmt = { - projectRootFile = "flake.nix"; - programs.nixpkgs-fmt.enable = true; - }; + perSystem = + { config, pkgs, ... }: + { + treefmt = { + projectRootFile = "flake.nix"; + programs.nixpkgs-fmt.enable = true; + }; - devShells = { - default = pkgs.callPackage ./devshells/default.nix { }; + devShells = { + default = pkgs.callPackage ./devshells/default.nix { }; + }; }; - }; }; } diff --git a/hosts/README.md b/hosts/README.md index 749c47e..79ff9c7 100644 --- a/hosts/README.md +++ b/hosts/README.md @@ -19,12 +19,27 @@ Voici la liste des étapes à suivre pour ajouter une nouvelle machine virtuelle / $ loadkeys fr # ou ce que vous voulez - / $ mount /dev/sdX /mnt # monter le disque dur sur /mnt, usuellement sda. Attention, ce disque doit correspondre à celui déclaré dans la variable `boot.loader.grub.devices` dans la configuration de la machine. + + # Faire le partitionnement (pour MBR) + + / $ parted /dev/sdX -- mklabel msdos # usuellement sda. + + / $ parted /dev/sdX -- mkpart primary 1MB 100% # Si besoin de swap, mettez moins de 100% + + / $ parted /dev/sdX -- set 1 boot on + + / $ parted /dev/sdX -- mkpart primary linux-swap -8GB 100% # Si besoin de swap + + / $ mkfs.ext4 -L nixos /dev/sdX1 + + / $ mkswap -L swap /dev/sdX2 # si besoin de SWAP + + / $ mount /dev/sdX1 /mnt # monter le disque dur sur /mnt, usuellement sda. Attention, ce disque doit correspondre à celui déclaré dans la variable `boot.loader.grub.devices` dans la configuration de la machine. # On configure maintenant la configuration réseau # Vous n'avez besoin que de configurer le minimum nécessaire pour que la VM ait accès à internet - / $ systemctl stop dhcpd.service + / $ systemctl stop dhcpcd.service / $ ip addr add 172.16.10.XXX/24 dev [interface] # Faites attention à ce que l'interface réseau soit la bonne @@ -54,7 +69,7 @@ Voici la liste des étapes à suivre pour ajouter une nouvelle machine virtuelle /mnt/etc $ nixos-install --flake "/mnt/etc/nixos#" - # Mettez un mot de passe quelconque pour le super utilisateur, il sera remplacé dans tous les cas. + # Mettez un mot de passe quelconque pour le super utilisateur, il ne sera pas remplacé. Pensez donc à le changer après. # Vous pouvez maintenant redémarrer la VM et vous ssh dessus en tant que votre _user. ``` diff --git a/hosts/physiques/thot/default.nix b/hosts/physiques/thot/default.nix new file mode 100644 index 0000000..ed4cee3 --- /dev/null +++ b/hosts/physiques/thot/default.nix @@ -0,0 +1,43 @@ +{ pkgs, ... }: + +{ + imports = [ + ./hardware-configuration.nix + ./networking.nix + + ../../../modules + ../../../modules/services/nginx.nix + ../../../modules/services/restic.nix + ]; + + networking.hostId = "bbdd1133"; + networking.hostName = "thot"; + + boot = { + loader = { + grub = { + enable = true; + zfsSupport = true; + devices = [ + "/dev/disk/by-id/scsi-3600508b1001ca2198968a17f65ef3963" + "/dev/disk/by-id/scsi-3600508b1001cd540705e8551011ec02d" + ]; + }; + }; + + zfs = { + extraPools = [ + "head" + "backups" + ]; + forceImportAll = true; + }; + }; + + environment.systemPackages = with pkgs; [ + apacheHttpd + restic + ]; + + system.stateVersion = "24.05"; +} diff --git a/hosts/physiques/thot/hardware-configuration.nix b/hosts/physiques/thot/hardware-configuration.nix new file mode 100644 index 0000000..c04f8b9 --- /dev/null +++ b/hosts/physiques/thot/hardware-configuration.nix @@ -0,0 +1,66 @@ +# Do not modify this file! It was generated by ‘nixos-generate-config’ +# and may be overwritten by future invocations. Please make changes +# to /etc/nixos/configuration.nix instead. +{ + config, + lib, + pkgs, + modulesPath, + ... +}: + +{ + imports = [ + (modulesPath + "/installer/scan/not-detected.nix") + ]; + + boot.initrd.availableKernelModules = [ + "ehci_pci" + "ata_piix" + "uhci_hcd" + "hpsa" + "usbhid" + "usb_storage" + "sd_mod" + "sr_mod" + ]; + boot.initrd.kernelModules = [ ]; + boot.kernelModules = [ "kvm-intel" ]; + boot.extraModulePackages = [ ]; + + fileSystems."/backups" = { + device = "backups"; + fsType = "zfs"; + }; + + fileSystems."/" = { + device = "head"; + fsType = "zfs"; + }; + + fileSystems."/boot" = { + device = "/dev/disk/by-uuid/8E4A-8E9F"; + fsType = "vfat"; + options = [ + "fmask=0022" + "dmask=0022" + ]; + }; + + swapDevices = [ ]; + + # Enables DHCP on each ethernet and wireless interface. In case of scripted networking + # (the default) this is the recommended approach. When using systemd-networkd it's + # still possible to use this option, but it's recommended to use it in conjunction + # with explicit per-interface declarations with `networking.interfaces..useDHCP`. + # networking.useDHCP = lib.mkDefault true; + # networking.interfaces.eno1.useDHCP = lib.mkDefault true; + # networking.interfaces.eno2.useDHCP = lib.mkDefault true; + # networking.interfaces.eno3.useDHCP = lib.mkDefault true; + # networking.interfaces.eno4.useDHCP = lib.mkDefault true; + # networking.interfaces.enp4s0f0.useDHCP = lib.mkDefault true; + # networking.interfaces.enp4s0f1.useDHCP = lib.mkDefault true; + + nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; + hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware; +} diff --git a/hosts/physiques/thot/networking.nix b/hosts/physiques/thot/networking.nix new file mode 100644 index 0000000..5407168 --- /dev/null +++ b/hosts/physiques/thot/networking.nix @@ -0,0 +1,52 @@ +{ ... }: + +{ + networking = { + + dhcpcd.enable = false; + + vlans = { + vlan3 = { + id = 3; + interface = "eno1"; + }; + vlan10 = { + id = 10; + interface = "eno1"; + }; + }; + + interfaces = { + vlan3 = { + ipv4 = { + addresses = [ + { + address = "172.16.3.14"; + prefixLength = 24; + } + ]; + }; + ipv6 = { + addresses = [ + { + address = "fd00::10:ae16:2dff:fe76:290c"; + prefixLength = 64; + } + ]; + }; + }; + vlan10 = { + ipv4 = { + addresses = [ + { + address = "172.16.10.14"; + prefixLength = 24; + } + ]; + }; + }; + }; + defaultGateway = "172.16.3.99"; + nameservers = [ "172.16.10.128" ]; + }; +} diff --git a/hosts/vm/apprentix/default.nix b/hosts/vm/apprentix/default.nix new file mode 100644 index 0000000..972dfe6 --- /dev/null +++ b/hosts/vm/apprentix/default.nix @@ -0,0 +1,33 @@ +{ config, lib, ... }: + +{ + imports = [ + ./hardware-configuration.nix + ./networking.nix + + ../../../modules + ]; + + boot.loader.grub.devices = [ "/dev/sda" ]; + + networking.hostName = "apprentix"; + + security.sudo.extraRules = [ + { + groups = [ "_user" ]; + commands = [ "ALL" ]; + } + ]; + + sops.secrets.root-passwd-hash = { + sopsFile = ../../../secrets/apprentix.yaml; + }; + + users.users.root = { + hashedPasswordFile = config.sops.secrets.root-passwd-hash.path; + }; + + crans.home_nounou.enable = false; + + system.stateVersion = "24.11"; +} diff --git a/hosts/vm/apprentix/hardware-configuration.nix b/hosts/vm/apprentix/hardware-configuration.nix new file mode 100644 index 0000000..db17483 --- /dev/null +++ b/hosts/vm/apprentix/hardware-configuration.nix @@ -0,0 +1,45 @@ +# Do not modify this file! It was generated by ‘nixos-generate-config’ +# and may be overwritten by future invocations. Please make changes +# to /etc/nixos/configuration.nix instead. +{ + config, + lib, + pkgs, + modulesPath, + ... +}: + +{ + imports = [ + (modulesPath + "/profiles/qemu-guest.nix") + ]; + + boot.initrd.availableKernelModules = [ + "ata_piix" + "uhci_hcd" + "virtio_pci" + "virtio_scsi" + "sd_mod" + "sr_mod" + ]; + boot.initrd.kernelModules = [ ]; + boot.kernelModules = [ ]; + boot.extraModulePackages = [ ]; + + fileSystems."/" = { + device = "/dev/disk/by-uuid/9d40d40e-4b3a-4740-9773-6ac23df546ac"; + fsType = "ext4"; + }; + + swapDevices = [ ]; + + # Enables DHCP on each ethernet and wireless interface. In case of scripted networking + # (the default) this is the recommended approach. When using systemd-networkd it's + # still possible to use this option, but it's recommended to use it in conjunction + # with explicit per-interface declarations with `networking.interfaces..useDHCP`. + networking.useDHCP = lib.mkDefault true; + # networking.interfaces.ens18.useDHCP = lib.mkDefault true; + # networking.interfaces.ens19.useDHCP = lib.mkDefault true; + + nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; +} diff --git a/hosts/vm/apprentix/networking.nix b/hosts/vm/apprentix/networking.nix new file mode 100644 index 0000000..548d59a --- /dev/null +++ b/hosts/vm/apprentix/networking.nix @@ -0,0 +1,65 @@ +{ ... }: + +{ + networking = { + interfaces = { + ens18 = { + + ipv4 = { + addresses = [ + { + address = "172.16.10.150"; + prefixLength = 24; + } + ]; + }; + + ipv6 = { + addresses = [ + { + address = "fd00::10:0:ff:fe01:5010"; + prefixLength = 64; + } + ]; + }; + + }; + + ens19 = { + + ipv4 = { + addresses = [ + { + address = "172.16.3.150"; + prefixLength = 24; + } + ]; + routes = [ + { + address = "0.0.0.0"; + via = "172.16.3.99"; + prefixLength = 0; + } + ]; + }; + + ipv6 = { + addresses = [ + { + address = "2a0c:700:3::ff:fe01:5003"; + prefixLength = 64; + } + ]; + routes = [ + { + address = "::"; + via = "2a0c:700:3::ff:fe00:9903"; + prefixLength = 0; + } + ]; + }; + + }; + }; + }; +} diff --git a/hosts/vm/neo/hardware-configuration.nix b/hosts/vm/neo/hardware-configuration.nix index 5ac6215..be3f8eb 100644 --- a/hosts/vm/neo/hardware-configuration.nix +++ b/hosts/vm/neo/hardware-configuration.nix @@ -1,24 +1,35 @@ # Do not modify this file! It was generated by ‘nixos-generate-config’ # and may be overwritten by future invocations. Please make changes # to /etc/nixos/configuration.nix instead. -{ config, lib, pkgs, modulesPath, ... }: +{ + config, + lib, + pkgs, + modulesPath, + ... +}: { - imports = - [ - (modulesPath + "/profiles/qemu-guest.nix") - ]; + imports = [ + (modulesPath + "/profiles/qemu-guest.nix") + ]; - boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "virtio_pci" "virtio_scsi" "sd_mod" "sr_mod" ]; + boot.initrd.availableKernelModules = [ + "ata_piix" + "uhci_hcd" + "virtio_pci" + "virtio_scsi" + "sd_mod" + "sr_mod" + ]; boot.initrd.kernelModules = [ ]; boot.kernelModules = [ ]; boot.extraModulePackages = [ ]; - fileSystems."/" = - { - device = "/dev/disk/by-uuid/89589639-21f1-4899-97e9-d1de6eb16d45"; - fsType = "ext4"; - }; + fileSystems."/" = { + device = "/dev/disk/by-uuid/89589639-21f1-4899-97e9-d1de6eb16d45"; + fsType = "ext4"; + }; swapDevices = [ ]; diff --git a/hosts/vm/neo/networking.nix b/hosts/vm/neo/networking.nix index c3d4dee..f9139aa 100644 --- a/hosts/vm/neo/networking.nix +++ b/hosts/vm/neo/networking.nix @@ -6,17 +6,21 @@ ens18 = { ipv4 = { - addresses = [{ - address = "172.16.10.137"; - prefixLength = 24; - }]; + addresses = [ + { + address = "172.16.10.137"; + prefixLength = 24; + } + ]; }; ipv6 = { - addresses = [{ - address = "fd00::10:0:ff:fe01:3710"; - prefixLength = 64; - }]; + addresses = [ + { + address = "fd00::10:0:ff:fe01:3710"; + prefixLength = 64; + } + ]; }; }; @@ -24,27 +28,35 @@ ens19 = { ipv4 = { - addresses = [{ - address = "185.230.79.38"; - prefixLength = 26; - }]; - routes = [{ - address = "0.0.0.0"; - via = "185.230.79.62"; - prefixLength = 0; - }]; + addresses = [ + { + address = "185.230.79.38"; + prefixLength = 26; + } + ]; + routes = [ + { + address = "0.0.0.0"; + via = "185.230.79.62"; + prefixLength = 0; + } + ]; }; ipv6 = { - addresses = [{ - address = "2a0c:700:2::ff:fe01:3702"; - prefixLength = 64; - }]; - routes = [{ - address = "::"; - via = "2a0c:700:2::ff:fe00:9902"; - prefixLength = 0; - }]; + addresses = [ + { + address = "2a0c:700:2::ff:fe01:3702"; + prefixLength = 64; + } + ]; + routes = [ + { + address = "::"; + via = "2a0c:700:2::ff:fe00:9902"; + prefixLength = 0; + } + ]; }; }; diff --git a/hosts/vm/redite/hardware-configuration.nix b/hosts/vm/redite/hardware-configuration.nix index 9b5a7eb..c61d274 100644 --- a/hosts/vm/redite/hardware-configuration.nix +++ b/hosts/vm/redite/hardware-configuration.nix @@ -1,27 +1,37 @@ # Do not modify this file! It was generated by ‘nixos-generate-config’ # and may be overwritten by future invocations. Please make changes # to /etc/nixos/configuration.nix instead. -{ config, lib, pkgs, modulesPath, ... }: +{ + config, + lib, + pkgs, + modulesPath, + ... +}: { - imports = - [ - (modulesPath + "/profiles/qemu-guest.nix") - ]; + imports = [ + (modulesPath + "/profiles/qemu-guest.nix") + ]; - boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "virtio_pci" "virtio_scsi" "sd_mod" "sr_mod" ]; + boot.initrd.availableKernelModules = [ + "ata_piix" + "uhci_hcd" + "virtio_pci" + "virtio_scsi" + "sd_mod" + "sr_mod" + ]; boot.initrd.kernelModules = [ ]; boot.kernelModules = [ ]; boot.extraModulePackages = [ ]; - fileSystems."/" = - { - device = "/dev/disk/by-uuid/6aab06d9-2d09-4929-a680-719c6818a663"; - fsType = "ext4"; - }; + fileSystems."/" = { + device = "/dev/disk/by-uuid/6aab06d9-2d09-4929-a680-719c6818a663"; + fsType = "ext4"; + }; - swapDevices = - [{ device = "/dev/disk/by-uuid/24f88af8-323d-48e3-8872-402b8bbbdc13"; }]; + swapDevices = [ { device = "/dev/disk/by-uuid/24f88af8-323d-48e3-8872-402b8bbbdc13"; } ]; # Enables DHCP on each ethernet and wireless interface. In case of scripted networking # (the default) this is the recommended approach. When using systemd-networkd it's diff --git a/hosts/vm/redite/networking.nix b/hosts/vm/redite/networking.nix index 0b1e35b..8ec9ca3 100644 --- a/hosts/vm/redite/networking.nix +++ b/hosts/vm/redite/networking.nix @@ -6,17 +6,21 @@ ens18 = { ipv4 = { - addresses = [{ - address = "172.16.10.139"; - prefixLength = 24; - }]; + addresses = [ + { + address = "172.16.10.139"; + prefixLength = 24; + } + ]; }; ipv6 = { - addresses = [{ - address = "fd00::10:0:ff:fe01:3910"; - prefixLength = 64; - }]; + addresses = [ + { + address = "fd00::10:0:ff:fe01:3910"; + prefixLength = 64; + } + ]; }; }; @@ -24,27 +28,35 @@ ens19 = { ipv4 = { - addresses = [{ - address = "172.16.3.139"; - prefixLength = 24; - }]; - routes = [{ - address = "0.0.0.0"; - via = "172.16.3.99"; - prefixLength = 0; - }]; + addresses = [ + { + address = "172.16.3.139"; + prefixLength = 24; + } + ]; + routes = [ + { + address = "0.0.0.0"; + via = "172.16.3.99"; + prefixLength = 0; + } + ]; }; ipv6 = { - addresses = [{ - address = "2a0c:700:3::ff:fe01:3903"; - prefixLength = 64; - }]; - routes = [{ - address = "::"; - via = "2a0c:700:3::ff:fe00:9903"; - prefixLength = 0; - }]; + addresses = [ + { + address = "2a0c:700:3::ff:fe01:3903"; + prefixLength = 64; + } + ]; + routes = [ + { + address = "::"; + via = "2a0c:700:3::ff:fe00:9903"; + prefixLength = 0; + } + ]; }; }; diff --git a/hosts/vm/two/hardware-configuration.nix b/hosts/vm/two/hardware-configuration.nix index 8e55b35..343fb21 100644 --- a/hosts/vm/two/hardware-configuration.nix +++ b/hosts/vm/two/hardware-configuration.nix @@ -1,27 +1,37 @@ # Do not modify this file! It was generated by ‘nixos-generate-config’ # and may be overwritten by future invocations. Please make changes # to /etc/nixos/configuration.nix instead. -{ config, lib, pkgs, modulesPath, ... }: +{ + config, + lib, + pkgs, + modulesPath, + ... +}: { - imports = - [ - (modulesPath + "/profiles/qemu-guest.nix") - ]; + imports = [ + (modulesPath + "/profiles/qemu-guest.nix") + ]; - boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "virtio_pci" "virtio_scsi" "sd_mod" "sr_mod" ]; + boot.initrd.availableKernelModules = [ + "ata_piix" + "uhci_hcd" + "virtio_pci" + "virtio_scsi" + "sd_mod" + "sr_mod" + ]; boot.initrd.kernelModules = [ ]; boot.kernelModules = [ ]; boot.extraModulePackages = [ ]; - fileSystems."/" = - { - device = "/dev/disk/by-uuid/49b72b3e-4c52-46db-8655-d7e3d93c1c56"; - fsType = "ext4"; - }; + fileSystems."/" = { + device = "/dev/disk/by-uuid/49b72b3e-4c52-46db-8655-d7e3d93c1c56"; + fsType = "ext4"; + }; - swapDevices = - [{ device = "/dev/disk/by-uuid/98accdb0-7e99-4280-9fb2-43ccbbefaeb8"; }]; + swapDevices = [ { device = "/dev/disk/by-uuid/98accdb0-7e99-4280-9fb2-43ccbbefaeb8"; } ]; # Enables DHCP on each ethernet and wireless interface. In case of scripted networking # (the default) this is the recommended approach. When using systemd-networkd it's diff --git a/hosts/vm/two/networking.nix b/hosts/vm/two/networking.nix index cf1a09e..1840458 100644 --- a/hosts/vm/two/networking.nix +++ b/hosts/vm/two/networking.nix @@ -6,17 +6,21 @@ ens18 = { ipv4 = { - addresses = [{ - address = "172.16.10.135"; - prefixLength = 24; - }]; + addresses = [ + { + address = "172.16.10.135"; + prefixLength = 24; + } + ]; }; ipv6 = { - addresses = [{ - address = "fd00::10:0:ff:fe01:3510"; - prefixLength = 64; - }]; + addresses = [ + { + address = "fd00::10:0:ff:fe01:3510"; + prefixLength = 64; + } + ]; }; }; @@ -24,27 +28,35 @@ ens19 = { ipv4 = { - addresses = [{ - address = "172.16.3.135"; - prefixLength = 24; - }]; - routes = [{ - address = "0.0.0.0"; - via = "172.16.3.99"; - prefixLength = 0; - }]; + addresses = [ + { + address = "172.16.3.135"; + prefixLength = 24; + } + ]; + routes = [ + { + address = "0.0.0.0"; + via = "172.16.3.99"; + prefixLength = 0; + } + ]; }; ipv6 = { - addresses = [{ - address = "2a0c:700:3::ff:fe01:3503"; - prefixLength = 64; - }]; - routes = [{ - address = "::"; - via = "2a0c:700:3::ff:fe00:9903"; - prefixLength = 0; - }]; + addresses = [ + { + address = "2a0c:700:3::ff:fe01:3503"; + prefixLength = 64; + } + ]; + routes = [ + { + address = "::"; + via = "2a0c:700:3::ff:fe00:9903"; + prefixLength = 0; + } + ]; }; }; diff --git a/modules/crans/default.nix b/modules/crans/default.nix index 0beaa9a..23f1492 100644 --- a/modules/crans/default.nix +++ b/modules/crans/default.nix @@ -21,10 +21,14 @@ # Enable some utility programs. programs.git.enable = true; + programs.htop.enable = true; programs.neovim.enable = true; + programs.screen.enable = true; programs.tmux.enable = true; + programs.vim.enable = true; environment.systemPackages = with pkgs; [ + nfs-utils shelldap ]; } diff --git a/modules/crans/home.nix b/modules/crans/home.nix index 9839960..0ae6c23 100644 --- a/modules/crans/home.nix +++ b/modules/crans/home.nix @@ -1,14 +1,32 @@ -{ pkgs, ... }: +{ + pkgs, + lib, + config, + ... +}: + +let + cfg = config.crans.home_nounou; +in { - fileSystems.home_nounou = { - mountPoint = "/home_nounou"; - device = "172.16.10.1:/pool/home"; - fsType = "nfs"; - options = [ "rw" "nosuid" ]; + options.crans.home_nounou = { + enable = lib.mkOption { + type = lib.types.bool; + default = true; + description = "Monter les home nounous"; + }; }; - environment.systemPackages = with pkgs; [ - nfs-utils - ]; + config = lib.mkIf cfg.enable { + fileSystems.home_nounou = { + mountPoint = "/home_nounou"; + device = "172.16.10.1:/pool/home"; + fsType = "nfs"; + options = [ + "rw" + "nosuid" + ]; + }; + }; } diff --git a/modules/crans/users.nix b/modules/crans/users.nix index 9a7352a..80d3ff6 100644 --- a/modules/crans/users.nix +++ b/modules/crans/users.nix @@ -1,17 +1,21 @@ -{ config, ... }: +{ config, lib, ... }: { - users.ldap = { - enable = true; - base = "dc=crans,dc=org"; - server = "ldaps://ldap-adm.adm.crans.org/"; - daemon = { + users = { + mutableUsers = false; + + ldap = { enable = true; - extraConfig = '' - ldap_version 3 - tls_reqcert allow - map passwd loginShell /run/current-system/sw/bin/bash - ''; + base = "dc=crans,dc=org"; + server = "ldaps://ldap-adm.adm.crans.org/"; + daemon = { + enable = true; + extraConfig = '' + ldap_version 3 + tls_reqcert allow + map passwd loginShell /run/current-system/sw/bin/bash + ''; + }; }; }; @@ -35,11 +39,11 @@ }; sops.secrets.root-passwd-hash = { - sopsFile = ../../secrets/common.yaml; + sopsFile = lib.mkDefault ../../secrets/common.yaml; }; users.users.root = { - hashedPasswordFile = config.sops.secrets.root-passwd-hash.path; + hashedPasswordFile = lib.mkDefault config.sops.secrets.root-passwd-hash.path; }; services.openssh.settings.PermitRootLogin = "yes"; diff --git a/modules/default.nix b/modules/default.nix index bed0b34..1515e9b 100644 --- a/modules/default.nix +++ b/modules/default.nix @@ -5,5 +5,8 @@ ./crans ]; - nix.settings.experimental-features = [ "flakes" "nix-command" ]; + nix.settings.experimental-features = [ + "flakes" + "nix-command" + ]; } diff --git a/modules/services/libreddit.nix b/modules/services/libreddit.nix index 1a6a568..35157b7 100644 --- a/modules/services/libreddit.nix +++ b/modules/services/libreddit.nix @@ -7,4 +7,3 @@ enable = true; }; } - diff --git a/modules/services/matrix.nix b/modules/services/matrix.nix index 5323538..0277ca8 100644 --- a/modules/services/matrix.nix +++ b/modules/services/matrix.nix @@ -3,10 +3,12 @@ { services.postgresql = { enable = true; - ensureUsers = [{ - name = "matrix-synapse"; - ensureDBOwnership = true; - }]; + ensureUsers = [ + { + name = "matrix-synapse"; + ensureDBOwnership = true; + } + ]; ensureDatabases = [ "matrix-synapse" ]; }; @@ -19,14 +21,22 @@ listeners = [ { port = 8008; - bind_addresses = [ "127.0.0.1" "::1" ]; + bind_addresses = [ + "127.0.0.1" + "::1" + ]; type = "http"; tls = false; x_forwarded = true; - resources = [{ - name = [ "client" "federation" ]; - compress = true; - }]; + resources = [ + { + name = [ + "client" + "federation" + ]; + compress = true; + } + ]; } ]; }; diff --git a/modules/services/nginx.nix b/modules/services/nginx.nix new file mode 100644 index 0000000..e05c89a --- /dev/null +++ b/modules/services/nginx.nix @@ -0,0 +1,12 @@ +{ ... }: + +{ + services.nginx = { + enable = true; + + recommendedProxySettings = true; + recommendedOptimisation = true; + + clientMaxBodySize = "512M"; + }; +} diff --git a/modules/services/restic.nix b/modules/services/restic.nix new file mode 100644 index 0000000..9f0d302 --- /dev/null +++ b/modules/services/restic.nix @@ -0,0 +1,19 @@ +{ config, ... }: + +{ + services.restic.server = { + enable = true; + + dataDir = "/backups"; + listenAddress = "localhost:4242"; + privateRepos = true; + }; + + services.nginx.virtualHosts = { + "${config.networking.hostName}.adm.crans.org" = { + locations."/" = { + proxyPass = "http://${config.services.restic.server.listenAddress}"; + }; + }; + }; +} diff --git a/secrets/apprentix.yaml b/secrets/apprentix.yaml new file mode 100644 index 0000000..2f73660 --- /dev/null +++ b/secrets/apprentix.yaml @@ -0,0 +1,220 @@ +root-passwd-hash: ENC[AES256_GCM,data:wHR2Uk5qdfDE2MWs3rkkW72mpeDm1dz5Kg==,iv:SFw5rt4QiJOseWU+CMzbto6CAr6jjnXc8kwnSKByJyU=,tag:zNME8ZxbvWcaEe3WbAWWxA==,type:str] +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: + - recipient: age1yew8ls8j5pq45k5vxfhxh5xvlnesyfktd0mskxmwq4t53vmezdaqax3aqk + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCbUt2SE01clNUVldyMnIw + RXUwbDJCcTZwUWx3cHFLbDBqUit5M3FPVzBnCndkamt1Q2U4THQ4aHlmWEtoRHlD + emtVWVY1enl3ODBaTEdxUDJnRVkrVzAKLS0tIDZLWDE4eUFzOFhBV1pjMlJ1c1Zp + b0NObmpwMHpTU0YxYk1kN3pFdE5IWjQKQhFRtDHOK/sfV+pNhivQDX8aUf0IVaJy + JCT60MR/M0JD8+k2JrwkZxJy+wOqivBuQwdzL68OnslQtGR2E/Slog== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2024-12-07T14:51:53Z" + mac: ENC[AES256_GCM,data:zgvseloTGUaJje6emsM36vKzYp0flRlV3UIVRMs5PbhrsGNrQIGnL0FkBGBFN6Rjss0KxWeZby0cK7QKQuZvwfvGN+HZi7sYI0AEVjgNPO6355zKRSxx80/oAZYyNLvb61INwaMdee+PbbVF96qY+OcPMT59P6TcdbqV1LRogX4=,iv:TGHgxgoD6oBrKZh2pYJC7d/67skmfSSF4REF1I/Kh0k=,tag:wNk2W0NQgN4antRq0cyyzw==,type:str] + pgp: + - created_at: "2024-12-07T14:16:40Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + hF4DtMjybqIQmUESAQdA/ZBC+dXCHwm699TtX2UdrJ5MU6e4ogFQOTUvE/V0kR4w + rgqplX13xLq86pt3ujxMbsE9zs9zLLh7oeliktR29vP6KfsocPfWF2FfLKimRNYd + 0l4B4VmexVAn8APL4HlaPKJAQJz8CbWoesAD8IbnKTD351gxRUWgH6spEOMN2KLM + KIvyGV7SrLCSmPUgKTwDM50NQm4b+C7lv1nBreAydfgy4j6MoplDwuguZWmT7DqD + =P3Im + -----END PGP MESSAGE----- + fp: 0x40CB48A443B03B5DBA484D279A130774C458F4D4 + - created_at: "2024-12-07T14:16:40Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + hQIMA8m7r5bNaN8eAQ//Yx9rjU4bBAdMIS5fFIrCFnCvvvacZfSnhaPm7175L4eU + 8S3TrDX9cEIFxXuLgJEMKMxcouagtLPqahJEqe4eoVHi/vDhst0663+3/noNfdkB + 2IzHKaQxobXqD+9RblJf8Fcv0xQk8nLePoIExfmK2ikhaHzUmTqGk/FUgS9WjtbT + 2x3+i9oeNF9fpKFzloTfxQGoXVU0+4oB7Krwas7n3RmAzHpRxO8e6i+mZ54SL8B0 + roKu3NUwsBVEppwA4BfJy+c8PFpf7Et10bBQ32ORMyeCP0XkX6WQ2wLC0X2aYjqL + nWWhUAS9WTE7r64P64smFFN2b+nqFnEEaVMhDx4cbIwZy8xw5nNSKY1ckSle8qkX + 0Vi7BXHMytxNPog2ra+PPs1l8Bi4wqRLCdRka4eNeZQQJ5jddn583MYbsK/AveNP + l1VSE7Qv2LhiPATqWiFRHMYri8L5paZF7l3g38LgtrhNOE2SKS95U87NJg/bUnWc + 9//piRa9jxuwA3RWaz3qCJXuDrTo13RtiKpGUF115CP7lTb29snTb7wUYTCKblv5 + NwpjyAt3jgGEfYGWX7pTAFUV/ZPMTpF34ndN1WSBYjTGte24Yfu7dZrENIhak+n0 + sipt3m7Cn/aB0Pv39VE4uMNEM7wmorkJmxYGY3AaU7+NW8RpHwIjDDudaruJSqTS + XgHgD075H9uS6+xO4uMNyWIymo0wbjb3gxYxqZFVQLJcfNp0jlL5TyfL0VFIniRt + nN/UDOqAdCQI9hLfGwGzFt/hyTL3Hn8ZJTGJcnzBXQCEUBp/0oYN1X7ZIa0CjSE= + =nzNo + -----END PGP MESSAGE----- + fp: 0x9487E782E043EC0D9E0F6C27D46D7E3364433208 + - created_at: "2024-12-07T14:16:40Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + hQIMA9A+dmzvmzOLAQ/+I+ROcX9MIvF/7vmXASAiYInPtLu9U8Ug19Pj+AXuVadX + 3R3op9PvwS1IbXTCN/nkAhEndOLFUbRR0SxCED14xolsJH+Lrnm0cuuqhVzCkg4/ + g7wedh5GoJcX7AiZ8RnviVixIU+fVm41UPA2eLetHIgFfoLZafcHqQSOPC1+lUj5 + jECr2cVoQsBKCxAYN9NwGar46q4QJiNFpeLrYo98Xb+8qUf7Czc64O7/X+gft3/q + bGAZmcGN8YvTSy9ELnDPRPbMksrcNZoNNDyJ0wRjoVCsErj/wG3IS+yBxSLtpxMB + n71mylqojtu9qSxvOU5XAbiO8RJvI2kt5sbCl3r6JAUgVZVqzHwvxsWQPrAmRaIU + J3DkQlem63pVLbFfhjaDIhLE5bS/ODy1YrSSPgvw8tDgqyv9jN4OdiRgTPgJXlSe + IVfbJubFgKCdHxZ3gIpGd8QX7BwlNPqVqZCEZdijo1tmF7EgPj04l111CCecQIyI + o0xYst4hcc1tfjicUjiiOmB1rK01Y4QWheR6c3k6tZa5+of3QjBtsdgMRGmai1lz + Hz6oH0wL672ti3Td+j1gLHupFYF2XBZrERKRtbJJkPiO7yIbu2Cu+4xdBrwu6khu + KN/I8IS3g2ZdigI9gtoArteB1qAVNZNdRWjUN7Av5JEsyCCpef2Exvi17ppHLbnS + XgHStUrR/Zmun/r3IZZG0rKioNBcRC4nuw6Ky+bv+qyseFiBWldSBnNfnrIER6jV + kiWIexVMekdlZ424ee/tmgKf+ROwvTJIR69H0lOcETujALXedWBrMoNaaK+3+CA= + =NpUl + -----END PGP MESSAGE----- + fp: 0xBC354C0D5CC674D11D3EF7AC2BD76BB280787FB9 + - created_at: "2024-12-07T14:16:40Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + hF4DRBWo2b0h4f4SAQdAle9eSFMLrJXyleUg0J2h/xhkELTd8LKVbHKGetpDKkMw + alZE6czx6HLsTcKX67zUL6ugHePYHd+pboUkFogwJpgkIIyU2+ofNn1YqW1WzVBX + 0l4BY0J5TZly6XGyy75UiC01nZcuXbEqSnvflHG8dCPkrtapnYE+NbkMAWm1r+Re + xI1fZ9UlbzXFv/V/oEXIewtuSdB9s7vly7D/KvffKC3nOD9P6oVZyNJZuTNTEC63 + =wOq8 + -----END PGP MESSAGE----- + fp: 0x572D19D312825B1A504C9003531DDDB6EB559FBA + - created_at: "2024-12-07T14:16:40Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + hQIMA2iXGbkufjklARAAltyeYNFXHJotSZszOP3EwjcaQTGJ9PWkgSfBnZmm3kJd + 78DhtrQ4VPtj9U4ZfUuXl/ePK51VI4rixioo/7afKWWi34mEWZH8QvpZWNhD8s0D + GVds7dC1VjqOMdPX04rI8+8BUGzrhCRBT5bTbaN9D+R2Xe5jI1qEVzdtRHP75UOw + myCzqdG2Xy7CZTYyGKcBBJLQkxTsZadxeGDVT5QKUjYMSjLQ45rtreLlkN3esUoI + A2e+Gh3CeaEek784dU2nYmgzzOTI2QnozyEz13/Kvz2hvCY2BhlT3vGr+GLwxoun + Zwjqlv398SQyW6DMj9Oztxd3Pl87GxpwRWeVL9H0f0vfDSNFPAY51FRcKCJZ1wrU + 4XFvgrtSO1pIyoj8kisYC7STkB39RKsVJ1gyyTGgIHcBvwAIWDfBc47Ekwn90T9F + WJmv696cxTy4GtyjMd8FsuDvpMP0YPfi0ctbHRNPSNVngS5e8rTNzItZyKNFHFIW + uygQWBDZMI+ay0VkEoYl73oeqASBXDxlr7gmL7jKKN7wGupydggPaRNrQr/Wrmuk + 4hmMg9Mwh7FS8Ve5I6dTiucqZW+xEvwGpT6saz0yEUr7XE+zrrkTUMAb2CjpGZ+w + lEBUPyVSf73bATN/n4gi0SwFRog6O/S/6tkYWkIDzx5Vs43G04p2TxQCXc85In/U + aAEJAhAbEUFXGj7MVXN0mUM+RxiapyAU6S3Punfhrk3jsckZOPFhwc9c3RvGXzhq + QEpeHKIVm/oX0xCJ9YcEIFvdgyHaqm+Sd3L1dehYrhCzLLisV9/ivSXECdC6UsT3 + Go0wZ/PGMlKx + =euxN + -----END PGP MESSAGE----- + fp: 0x270A71E7908CA9D9252000B01EFEFDF3F7B80B01 + - created_at: "2024-12-07T14:16:40Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + hQIMA4Uty74yOFxLARAAloRgO344TAsArBC6zdjWz6T/Ea1W8irpNKY8vyBrHt5u + CeKlWy+7ufEH3cDI7vPeLvUY5v83jK30p2R0uNrctAxKWxA88FxKp8UC3dW0UpWG + J+fhmzNhID4/fw++NzEpcErisB8OONEtK1s70HFEJ+3ZLCB2FOL36brAD094Hj3U + RkmRZFexGuH32XLuI/tWfahpG21wNwOUl3UZc+UcgcYC0UuZ+JOkRB/NUn26+LfJ + szoivDUk71tC8M2DZTqKEfhLfn9dAo+oGhh+z889tvSyM+OhdmoCPoSbrHqa9vHV + vKWj5UCPkg8cUkVkACgGzE7/2CibD6D/MjrUIQI979dNZVOGerI6ltvU0NePC2WI + ppN2OZVTWSR80FnAG/qMMgoqVW+3RT2RKFaguMLfzIZ9mHJmWJP8JCCIGUjlf5Bp + uYQnE4scl9zq2RjVMIz8LZOrBUln/wu50NVswxEkIaVEZaCFvFOHcA5fy36mOUaN + aKGUd5XzrN5LJ/2Fh5X8fGsoYaanGX/XN22zKQ6QLBbEOAGpSf27dztYrXQAtUVe + gkkp6iL1e0CujViu9uXCgt+XyNg5ReJuRrKQHpnxIDlxI7irJOKdI40f7jcWR21Q + ybvjo81GBxpzjEgqRX2kqGXKzycdbuk+IbtnHJBSbITIKH8zFYxNaOQT6RXsUjDS + XgEVTM3sAR767EZgK6QFRNHGCjc+x/u0uItqaEO0wBTIhIMrdh1EOvRrVq768oNY + cxqMeYNMuqbP9/8LNMqzJSxBphGOkbwiaUijALY1syMDJbqZ1CgkPWH3RsNJJ54= + =hMqW + -----END PGP MESSAGE----- + fp: 0xA534E46682DD8C35377352C88DD28608BE411065 + - created_at: "2024-12-07T14:16:40Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + hF4DIBqTX2T418ESAQdAp665HoLg7r76LztlYrQhbUIOys5R3jvOng2T76vC6Vcw + 05L3TI4c/h+rm6rHEOLwAXXNda/xtNKVWi/Pl0/Yuy4Ispz4VETSwIHYG4AehUOV + 1GgBCQIQ7ML7gSRf3HebptDFvEm4F1G/IIKs+GmSGvpBYaYGVoFh3roX6CMuRALd + wEF8YPGTJIBz0nE8CmUZyjSlk9c/XDEeJUnAMCDwHQCp8rd8DOYw8KB9gbuqWZcC + Tlt6fx7vTW75kQ== + =4wfP + -----END PGP MESSAGE----- + fp: 0xFF7D1156D33F4060A4B15BFBD6CDAB8050CBBE7D + - created_at: "2024-12-07T14:16:40Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + hQEMA7auZh4eKOkIAQf+I+Mwg7cnO+DGUvvMC/eR8TSIowoZwrUEFzo2gDxLKc4P + eAdB/cEbxzmVCyRmi95IE4v+c/5C+8FNjncD/RAyzMknXt2ychnE7r/V/I6jk204 + UO/QCxA4qTOamcrS7DDeNXFa4jtJyA1ZsS/7XAw/h1EywRnJlJFVoPGiNaMfRdCI + j0qovqaAbGtdWten7YwuwnAX6dWPMz4ioKzmAbTA8vVqtz/O9Pn3wVRX8ScZy64U + wV74Wp2a6dmR6PFNIP1TyFA2xJ+c6mQnyp9IV7ggkIO5PClKaF7ec43OcD11ERiq + 4d/GGxpSh2Ot0fG3tNQOXp+HghS7u9Yky8Tf6Ia/3NJeAQMwZtlrUAxdxx0JrwZ2 + TdMaD23pnY31QCIUi4UJ88f2DND6wN7j5zjqz2xlAxbgZiFEf/S0rKnp23RpZf7C + vEJrrJfBZAiMHIiTuOUNEX5bVStTqSB9mxnKsnJCxQ== + =aXeC + -----END PGP MESSAGE----- + fp: 0x49BA444CDC680527B4835F7C3C1AC435CD1F217B + - created_at: "2024-12-07T14:16:40Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + hQIMA11f9zoCBF1cARAAgoJdyillpkxJ0j93cdT7PXe+AwjrEFXjcIYbUV1te25B + tSlD9ilhBjipaTKkatvPierMaqEOzmA33wkDw9N/gdSJSeAEJ0CVgCwFLWeV6apx + D+YucdrrO05r8lLbpANv4eVAboZU5AbLhPnHHPsxVlgckrNtydlnvJgLgp4qDh0w + yZhNmJWNPzk4NWz0JyMAmqS0SaWFQX5iMX18iN7ZEzvhW7OYAkU8ZkLh3nbDoPi6 + mQG6acn7OxV6edj/Pbj6DEh696j0iwshwF7QWqYJI4v9CUYv1VKCa7bzNCrcFNOl + qrUz1Ig8otLv3VchH/b0dOeCaHbK08YCZCMKfhLMG2NkDav6dELfgVn+pfIyaRyA + pua1xgnfvhVKdv9ZiaTI5P2kG2ady2suyIQ9jeG/PYjEhAuiLCiU/PeXVnnJRgzJ + CwtGv5CIsGnsSIhGrwvpj5xqwmt9VyYcsfFlRbK4GIaC0Mk5AoIpYHrwbHzX7BTg + qgaQz73G1K2PDOEklSiA8jQzaE0AEjDX6wOvrElBpHrhMJ/CfbPDyAlp2E4gDU36 + RJC8FVfL+q8uHLTzH11IshXGMkz/YLvkn65bGFJuZLmoGiJ/D8Ihg8yhGX88NW2D + sxEHmMBP7K9kfOkzm6J/YLzUshiEb0TZThUqKjEVx9+im8R29IpJatwKpNohhNDS + XgEaxyXzX66J1c3De2dmKpIR1iocYyfVYhula1CwPc75sqw9tRp+cVDL8i5Yn7nG + UG6bJcBth/MImg5ARYLGEUwQGWEqhHoSuQDRr1g/arSLrjbET+J6+7rwJmceySQ= + =SkJc + -----END PGP MESSAGE----- + fp: 0x9AE04D986400E3B67528F4930D442664194974E2 + - created_at: "2024-12-07T14:16:40Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + hQIMA/HTIsSK0VBlAQ/8CG6lZfxbXQz8I3c4qdRZ71CjGTZrfeQdhSEnSCvjYqWM + udsitJU4aw1+6DTfJr53S/Q7RYQcxpAWKJpfawL+N4nkw7Zdbb9YuXZN+sTeoAfw + XV2GsbkD9FOuoMiPUY9tfXeY6LrWFuf6FgCxF3ZVttYaBaSSzI5DOX+Nb/uWWsSP + wKk0lZvxQTbo2VRq3ETMadmobI7JjstV2X6WpLS7FGpHIB6BMypGonbB7uRkYH2z + +rw0KARfVW/V0CSEs0J7NtpyfQH+l5UvlFndKtAlUIvM0QUMg5yEOKgF8b9Jvrse + zDiEpeze2OZWQaHJSZkUF9ZDm+mNpF3GlcrRDhI01+ceVDMflOeg/7X9x1s//r1a + LnxEDqXSpiLwxqEi6lKKhXqhHg4VMGRtmnGkB6sHa4UBNMsRCuFMmlwNulQNqcqy + HXrQ/gLjY/cws80HT9f8xGXbUOuCPAFIdqE14Xmq4tlKcxIWoFUgUW2UF6ix14z2 + NvgPG75sNarnU7bJ+LaU+/sX3NtVpQv+Li3IZ36NLb1K3kJs/qclZOR47k/mIxeY + MUWIt9TwOSV86jfVAfnsRX//N+K2h/xchqIrg2knqlueXxWPvlp/ilnOO948VmfZ + AgKhLHX5ItcOiP4r5gxShqijT8ka4wK9oB8YP3NWbHuO7AHkyTuDBOjhWOSY8QDS + XgHf6ZS6d0yvD5GDICw/D0PvxCsO2EsDGgbjKIUNt+Do23bgRUPDY6ASKC4NV0PP + LHsoHcKyAX7yIBMq2GddoHldtVBiCiJOZKraaJB1dCEdDS1KEMjb1wIfNlqBKp4= + =ljdD + -----END PGP MESSAGE----- + fp: "0xFA47BDA260489ADA" + - created_at: "2024-12-07T14:16:40Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + hF4DYIEGJeT64uMSAQdACF6vmNwDliN+1IkgTTO0SPuvpR0OLhxks+9oS+8d+y8w + JPxG9PPh+u91eFtanZWK0beCNPuG0AQrSDzL4E4Z58gP0VlJ/bTzjVdKG/umEaIq + 0l4BrDu6CHYDgq8eeUB0pGahxmr8Zk9ngUrfYEuRL54COkjCZQ1hcn54UiTkRBvU + HZ3M21q7OZdtpg2Ot7tAa5P+5dBGIoSjz4PyqR629pA4H30q1lU6Q/0jRHp0rc5G + =iCEK + -----END PGP MESSAGE----- + fp: 0xE474A4AB587CD834813DF35D03FDB411169D6C8B + - created_at: "2024-12-07T14:16:40Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + hQGMAxrcfL3KHjCOAQwAtJ1/AB1buFLWwJOpT77K8hU/TgXZZBUVIjHqgMvr17GJ + KXh2l+HN+EszzadTp1nz2Hmk7rmo8SF9K1Hx2+xQVkaYXpzJQpdr9U76ETKgiEDE + at8FnS8Qguva5RtemiB/5QEU89n52FqgkJrp6xO1pCgSKuMT+zKHzTA7R9ktHRVY + F1aadImQQcaSi+zPk5oJvXLFvQPSo9imK1+yiq3FNWpcHTZE12baK/zvdA3ufVmd + nu93AmFJQ3oRJpMfAw/Q6hvdLFB0Ueh0JJ2iviaQf5xavjffO8l4E9zSw0DHh2ac + MK8Lt6vb3vYa0xZxtECOwZoy+HFxSHRFxacQxQMvPjWlqyUxleUvZcJ7ilRQMV0f + VKLlgfXkxu8Qv1qx7HtgFYsXXeDodUnK4/3LdQNZnP2eZHdZ35+G8jzM8xZWZ7rF + QIiHKcf3BvHp0ExbeJWnKlkh9Rj9VlWp/CyChso8NR8grH4vEtSJ+P5C6tBxzwbm + IAbz3UTiytwysxbuph420l4BCz1fQ0lagS9BtlpYSTv67ZQmetHochI1a88OAK43 + saz9yDwtwW1WuoDc2sLA7cQFxWPn2Uav3pE45IcnIua+DpD1l2Q4xfBNA7afF8fE + w3PZc2zuVfL7zpx5LpV7 + =xrME + -----END PGP MESSAGE----- + fp: 0xD5B872E407D438721E5887A000E765FA7F4F2EDE + unencrypted_suffix: _unencrypted + version: 3.9.1 diff --git a/secrets/common.yaml b/secrets/common.yaml index 379a005..b933c72 100644 --- a/secrets/common.yaml +++ b/secrets/common.yaml @@ -1,247 +1,256 @@ -root-passwd-hash: ENC[AES256_GCM,data:TueFl3zXBTnpVtduQTLIzYCn2cNnxECiFEf7F+zBeq1A+lghV2ZUf82ZU+fajI/fcjMij9xMcLOZchksUkRRZ9SNHsoDTamiChC3ecOsxcndR/SElN8Wpr2yqsV3NNAt/4EF4leNyEdrJg==,iv:Lo6/odISnTOVd+dO3tRJZVYNzivyXuPowJWk+d8C+Ck=,tag:1zEh8Umy1tgM+SnqOLxvig==,type:str] +root-passwd-hash: ENC[AES256_GCM,data:7/7AduuEfrhmwmAn6UVkc987nyFxsmTFbSBrD8c8t14=,iv:X5SK83w1VGrXPuUrt6Lt8Uu1JQW6GUWwCB7LmZzIdUs=,tag:pUKd2fdRGkDxVqS5io6phw==,type:str] sops: kms: [] gcp_kms: [] azure_kv: [] hc_vault: [] age: - - recipient: age18wsmva2ndn774jwan44sl84kckg9f9n2tpd62g7fy6vcq8eg9swq6zsyg3 + - recipient: age1y3l4j0axyltq80d5stly43h42v0wfsc9mun0qcm92qjfc8tn85hsnmadgz enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4L0xzQWEySzNYMjNORGlP - R3lvRGo1N2RzWXVoNGZ4Q2lsSCtYMVBoQm1vCkRmd3NSNjNaTG4yMW9pL2hPRVFp - ZFZPV1F2Q1ZXUXl0SVpQcW5xdFVUVlkKLS0tIGliR3N1VkdMRS9BSXBCY01ZbW0y - MXlhd2VrczNCWlVUZGUzSTFpMDRnbzQKBlMNagdEH6BKdz4H8ti+fbGwvaohkpDF - ge7uT+GbdJaVKj1+tlrGwB0NUGrP18kQ0ArYqovfP6d/qECWLViQPg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyYzNocXZJTUhpU2tFRmRh + WEEyVlRYazVtYjFFQ0xQT2krVXpNSkNwM1RvCmtlQXZDZmlhL3hQdjlhZUlwNHpa + UXREMHJHNTNpUHZENCtCOVpaNDdYeE0KLS0tIGlFSkFheVY0bEhsTk15bExZN0J1 + NFB6Z2lSSmtIUXdqZHZyT1hoZ29kOWsKOhm0E9PhbvbI3eWyBlHZ42/Pvur5leJ8 + Pn4Pg9LYLKNotAjDYwA9lEPlp2pJiTKepGOyRgSIph49nYG1cfl5eg== -----END AGE ENCRYPTED FILE----- - recipient: age1ed9esfstrdhfl3650mv4j3mjyum70245f903ye6g0f5t2ept73nqyksh3g enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvUGxzbjZtUzQ3Smloay9G - K1NhTDBFWThQWkxJNFNrYzAyV1UwaE83UHlnCmhwLzEydlVSbU1GTmhqZHh6RzBo - a0FWelVwb1E4QkVLTlN3enFMQ3k4bEUKLS0tIGdrSTVIVVJ0a2sySFdWRDEyUmw2 - dGRtNTIzMTUzVnJKRXVheXNLZzJjUFUKgb8vHhnpQQJvAJuz7eUNeNNf2/Z4lc8o - qOmpip14nII6JpnPo/uv6Yf6QbzcDcwIYEnJVZ44XYvPDPgIbsSyYw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxejNGS0NUdmVGTXZYditw + QmdubDZmOEVvSmVwVytOZDNXOFhISG5PbFJrCnNPWmdoTjViSWVZQ0tuRlY3Vi9X + ZmhzL0c1ZUtyczdOb1RYU3lwbk9vT3MKLS0tIFhCR3pqSFpZNVRsOXhGWFhGNzI4 + TStMU0xYbzdxR3JQUmdIVXk4T3pRVm8KPqy8m4GNd7g1TAwRFwNVw5N3WcXDKx3g + 6s/w/5HPTmWhsH4joPbCj9L10nZAU54Qe+ZY7weMVxXXgWLNUWOm8g== -----END AGE ENCRYPTED FILE----- - recipient: age1utlywxylme0z3jenv4uz8ftcwteg9877y3zf46fu7zwjjwa05g7q88w8t0 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRM2U4Yjg1bGVPRUFVN3Ry - cDNrM0ZCaS9Hd1dXRkIwWEJqams2UDBSN3dBCkZJU1J3TDM1ZTNaSUlELzNXQmZt - YUxxZVVKWHVrL1lzYk9MZGRKMDFIdFEKLS0tIDVxbTlYNDE2R1BvVzJOUGF6WXZI - RUZ1TFpsMThjTlg3cXVHcHZOWGNnMUEKcdcIXPxaOjvm9TFGZu9HLdEuxXvnQ2gy - pWbmZmCK3H2or27dLwMn0y56KaQrPQS2+LqAkjrlBuK6i1NA/IONIQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrZGNaS0xGdndzWGk2NFJI + Yk1zdk9oV2NSbTdqUHJzMkdjeUFacEdGK0NVCnVuY0ZpREJzelJPSGt0dGhHVVJX + S1d5SElTanAxanRiZTBta2JCNHJxMzgKLS0tIGdoQnZ5WkNqYkQ4YTF0eWhZY0g4 + NUhkNHA0eXJobUpFWmVXWlJFeTczZkEKG+rObffEUxnC7QBr79Y4z1rxH6Xd6Zq9 + b/k7FeqPm15feI7qYUfByrZJvkO34mjDYbigIzIULZ7CnnvNbCN8YQ== + -----END AGE ENCRYPTED FILE----- + - recipient: age18rv8q7stsn2zv4gxuj4g4ktkeywkg2wngtdwza858jjme8wdvp8s9hkx00 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOT21IdGFEUXlVKytkblZX + cVVhaXlKOFJyOFIvS2lIbzJYcVBHQjdpRGpJCnM5bmc3azZNQ0t6OXBMMHZvdkNF + Ny9CRU0zWkozTFJqTHY3ajFuWkRtUmcKLS0tIGVWVHBXNVg2ZGFKaWVDcDZaQlNU + cFBzaEVoUDRpNGNseHZzMUxUNGJRT1UKshSr1mxzr0cHKRwA8Nmyj02TOrbbdOM8 + XFjeo/g6nQEC/mpC0E0DZwZNkdaq2OWY5e9kNRn/HlYBbQb9wRzDHQ== -----END AGE ENCRYPTED FILE----- - recipient: age1zlpu6qum5xcl07hnsndp78tllqph5jz7q8fr5ntxr88202xq9u9s9r2y7x enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpSytFYlVBVmlPa3NQOFE1 - VjEzcW9tSm9ES1NhbTY3Yk5QV2F4Rm5na0VNCnZHYzZHUjFrZkNYWldDZmNpcVkr - TmRRelVuVS9DdThBUmN6UkNOeExBTXcKLS0tIEoydlh0OUVxQkZkSzU3d3gweklF - WDdHS3Y4N2Vma1VzRHdPRk1HK0hPMzQK7cv/8g8OfM97Ur3PurwWfeh82/v53TCH - WVMgI6KPB8AB7fjyfZCAqr3Ihe7x/3wK5lWO/h4xzv4xcuH9qLMt0A== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4V2tOY0l6dSs3bEIyOWlC + ZkdxcEYrSVZWdEg2QlAvYXFxNDIxUzlKMWhvCjNtTGluV0Vhc2h2amwwUkdNd29B + Zk9wVnhwNG14N3Z3aEhnOWVoWTJTWHcKLS0tIDRjdlR2MmQ2U2FFTjFGbWpzOTVX + WnpsOFgwZ01jYjNBbXFvL3c4T2F0cmsK07tekO8aEc6LVNnNe8Uo59m5es4vr2X3 + dH/YwqMW55+YyN6AkfzQd+7+VqlkE6YTXfbON6jSwOAhAKjapRC38g== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-02-05T21:38:50Z" - mac: ENC[AES256_GCM,data:ZUA6Ij81846B2xumn9YjrlRufj9KfoItf2MCViVbIlQO97or1rJAz+iWxmf/I0YNzhOKzuchyG0X6669fUkePk0qNKrk9HBQLX7BM+O51qgEijrqq2SXlo8hyNTC7zUFL202yT1ATL8uD7lgBZpqgxBOcYp9D7+dkvotzFTOAco=,iv:2o7OGekocDF3Lj8OCnLOwGBBs/k13R1/a0CH+GTFsyQ=,tag:FqPF0Vvbuc5/D5tRLA+r9Q==,type:str] + lastmodified: "2024-12-07T17:37:07Z" + mac: ENC[AES256_GCM,data:D27C0Ymorhf35u82yZnAKhYe+7RJe30AxzfBWxeFd+ppN2UkLNHDAyAFdoNn+P658vUDrS+c7nvAyAoBjXKJBjbifJQw7fdHBjih2tqs+ODkP5Ln9tCnnR6JTlDYv4uik3RvtA6VXuNcO3vikJyrfU98rbV2V4h0/728Ys3TKZc=,iv:6k0gEL/PucUrEIJPKIpm9dL8sm3mmkzEGf7D+d6TJzw=,tag:rdBWjatmuA5jzabHXFTSXA==,type:str] pgp: - - created_at: "2024-11-19T16:53:01Z" + - created_at: "2024-12-07T17:36:46Z" enc: |- -----BEGIN PGP MESSAGE----- - hF4DtMjybqIQmUESAQdA1cLeDA/bsfaxP6IIuPR6W4MI6gMN/0fXxdHRAfe6amAw - VQj6xb9GhLBHsw1heB8OWap/Sru3XKht3nVY4d/iepSgwfDtIupSIT8AYm+2L22t - 0l4BTpXy1Lqfi36NPLgRwnTpp6XlbvbSxPz1qquqrbbU6zs5NicQx7b0PZEJSMGx - lNoYq+j4WVV5BWVZeFgwkfCgIF7xg+FIZ+iALJ0oz0Z1DMEm9xHfJuHd/ftxHRaE - =o8Yx + hF4DtMjybqIQmUESAQdA2msgdai5xT2XAga4nnhvEbu4BucrmyeL5EMf6cJa0gsw + 7+B1Mb/Z2fBhLV1uiSJIGyNU4pphzu45Difb9LFTJAtLWGgyIUcVPWZjW6ssgcuv + 0l4B8pAmvGrdAZYVzUrQDOiiE0QiMWetF4lROM0w7TcpV5qToTWnRFO32ZtDUW/V + vL6KfyacFKSQ+hD2xS3Wqi75hOzkLrBWE8EK/hxZwdurnV08MGWrNTj0wXrR0OFq + =hA6G -----END PGP MESSAGE----- fp: 0x40CB48A443B03B5DBA484D279A130774C458F4D4 - - created_at: "2024-11-19T16:53:01Z" + - created_at: "2024-12-07T17:36:46Z" enc: |- -----BEGIN PGP MESSAGE----- - hQIMA8m7r5bNaN8eARAAntYLkghxgdko3xMTN1AaI/ici0w1b3b24b7z+WjmHcIt - RN48mngh97MxzlyujiFu2IfZfCbIr/cQe5C3gvNqhrprs8CQoIgqc5q/PQ5Rw4zf - 4MA+WDHgw9BDQXnWfs0Xxnr0X1rBHnPSJNFUSZcm8o3s4HIrIcxZU3AIU7wmiG6L - 6WOybg2VGfzgL0UaXWVb0N6Ep3vR4Fn2I9hVHw5ESLHhUFA/dvq7eZt39bCQxHzn - L8jVgwvnpI4bO9boK70+f3HV9caApjktdhbzA2c5liiSH3Xd31go9WTa4tzEbH6I - 6waHQpPGGLbes2nj74kU1YrH4GhtWkKgvuN2t9WApENMRx9sUiYxCKJjtV/h/pZ5 - 0BYR7ZcUXpJKdSiSY4gtwGJkeFM+Hr33wzi0+Mayy124eke6kIKgsqfPD5XsVOsP - Oi/ku+G2FGT8C+yqaFQwcF2upAP+gSWbs+ehRD46rqlHZdqHLUdU7iE6xrPocfEo - sr1kEhRqhlnBsz1v2GAfjv+sNJgnAIuc074k9m1X3udZZVFOPomBbauoraOj7Nt4 - BQB/boUkliroEHhJdX6rf9if2oELlATtnsQu2saxUw7G0i+x40nQ4cvI0oxK9pcN - kUSXP+Jo2hjl+hY7IWFTuxQgfwLnC6Fj7RDBRCagBnfT/255diM0vmSkZ2rb+rXS - XgH19Z19YE8wjpA0gwEbhTkaDTSgX87GuYS6SUFSHd96rkTdPY3XhaTHht4sXVOK - 1dOY/0Or4z6FAbYy8zTLZ3pcTbxiYuajFX7Pn0PrsYnE2YeBZSj5/MoNNloF3jY= - =9y2E + hQIMA8m7r5bNaN8eAQ/+OY6RAm3Z9QHDlR6YiS02VPz9NpNrTrysFvhSR9SOFpVR + k4dAY8/9wKm2nrOb2mo0xm6vG+0dAfNgS8gLl44LMobKmx5C+A7ybOpODffV7pnO + bIJZFc+UKQ7eGM9m5aFDNQ8dGx71RMQqNEy/Q3H7HFZngJFRKNtg/QxLs8VIYlp7 + 9lYDg46TNKTWBZxN3Fzy5B8nUePReDnEaEBpF7+gCeOdq5/4VYMzllcL9UIPq9Do + H3471ulfVGItiYMgDyLKgUBpjbJn4+cG/f5DdJvoVuT2lOO05nnCu9AyCglSbkUR + B5dQDwONNL0/USo6bkuWiza9JQKSASN93h5JIw5e/5zjk4ZCG2ajX1DpaXL6bB+s + nse60rdKKB9jFqBhXFszHYJww4DOFVX374gCXp71Rr+Bx2fO/DGY1Z1mMz302Zbt + qNebLRKwzk6UsoNag7ab0/MWMZPCIKtf/Xcq2PUkEFOL9IIA4LixkV2puNJ4C1Wy + b8Q0uCm65dj9rzjKeX9H98SWEGStgo5gQhf8QHl9yyxj6oCZGUcIeBmTZCrVgAOw + 0I8vj7B6Lilj5pJBOD+9eEWUySRfF9kkVsgfVoXl4FnGWO8XytU7lwuh00kNmH79 + Ua0gsXaUPb9KC2YzvmqbUtI+kanRM3Zthhho8D2R498dCh8NDPZl5DqTLUX9KB/S + XgGZ44Xm50sE+JVqzrZ5uA995FboS1+TgUpOwb4wuMRVmc5ExgorNDiLiDNmXOAl + rYBCV6/HYTTzwQD4eGVXdRjsUs4G3ObYz7/NIySDE3pTQxK23ZhAVPXcfH51Qx0= + =LNYN -----END PGP MESSAGE----- fp: 0x9487E782E043EC0D9E0F6C27D46D7E3364433208 - - created_at: "2024-11-19T16:53:01Z" + - created_at: "2024-12-07T17:36:46Z" enc: |- -----BEGIN PGP MESSAGE----- - hQIMA9A+dmzvmzOLARAApnk5K3hr2ue/G5c/UfXQuMdWZJpAYrhn8rh21C4Z08Fj - 1YHo/JHVd6pStJ8INfFWTUKNt+rJmNFG9gnwFwPkfE1VSdixL9/j+3zWg0q+FXDR - vJkVcVCEyYEnEAHefNRd3iexs4LcRiWKTt15pD2CG6ma3Javl73vt9Mi2+BefXpU - TSWiLAuNE0MDESW3CdCk6qu1HPKjrvPKH/nTLsFtAfcp5VGtH8QIlfS6HUOYQ7XE - o11kqdizDVeechMgxNA//q94CoBc/DuOIV8+HH9qZSIjHPPScLFVpVHQOFKhaE1l - rdOpXOfMeGXWWmEkiVWD9ymrvYteror3aGhPRnbI1Q5qqWG31Em3XbI6B2UeVQNS - hRFddI/SEPmLgrrbFiCY9mG2EDB+O8c4IumNKRwAjoMwkP73phAMYWibuJp45Ma1 - ruCO0QS9mXRdFl1QIVQdNlIqI5REDQdvVv79IO7S6tZkNVugs1w3tUGHv6KSk2zu - OqydxVnrG1zvSES/v/VBEqSw8C4xkJuvcfvdU4XPvnCrBnKq8ZCo/eSer97VQGSv - mMu2dXXfbqI4CxzJERwiRjCkp3yYDUxh3bTilNzY3Q+yt2o902WT1tEcKCH9jpch - A3UDBCFxvFfFTGOwzDn2XA1J3F9fibfox79mqK8KbC8UIKPgEdigjD+7r74/AkLS - XgHL74KB0RCSHVKdYLUk57FAId49czYcvh8tOVOtiFRDMbmETQEoL2lGhNXs7qri - hhvXf4NTyGsdLUMlR4lkW2Jy1sRp0KxP2CivuG6GvHbhiVo65NK4DTMUE+HR6lU= - =OtnW + hQIMA9A+dmzvmzOLAQ/9HRna/80D8+Uvh2WtsTXKAJUo4/tEwQONPm6ZGtel6BF4 + 4oWxXcxW2VN7CaXmUDVP9Bp7Y/RuEpGeB/SxmKtdnOr6sxofMqqNJXlsbTBGissP + NuKJ8ERORhay/aY+eUo9BIYLO1Bisu75HRn4bHPTQSfYL4ZMN/Y5vunQdpecsHf/ + ws6dBzoA4z2m+RtAhA9HxqzDtFLyMvgaD14Gimnw7kP20yL8gUyb/HliwJ4YqhGO + 8x43AKAt5M8pMmn6y1ADKKT4pXVLe+UNtXAoo88fl9CTjyPN3oyMLqADdAA+lEGj + 2+7BLxuIhSn0ANKADOQNTOfZVqcd+53/WkpVUc/sS10IDWnK9hcPSHqMZnyOmuif + WFdI5OTKKaEV7Fid6/z5dN11LZDpUXZ3AUFBDMdWsNX7PeLC3YXKyBL5NQ+BcYr8 + L9YhbOWv3yWWtjltacB7wT1SApKs5F/H2QgGgEqbuJXUM+A2DjjnmiGuEZLxbIwq + J2PSrYQVzUdKcqY7KC8l6QJNZtMhnrehhZelmWPdOftsEAGvUhBSz1Z33H52R8KA + wctkFeD4W5ojlj3Vu1/y4JOsdGXK+5HvHHarvnLk0fU2HEjz9ZlRosw9iFPoNxAO + /31zt0Ndsmi10EWbMSJl9tek1qVSbbf3C+szCo+I3gVOMNXTClpfvGwyhVL2w8rS + XgEGXkUZFskXtjuR2fCuQJq9tyiTMAfidhixLgYXaZWEXRpbpznCvoaMONL2Pw+t + NUw8YfZu/Gn8SMK+DGZv2uA+EBPIIBmxX1pWqMpSoZFqljY2Z+h+WWtiHppm9dc= + =xqAR -----END PGP MESSAGE----- fp: 0xBC354C0D5CC674D11D3EF7AC2BD76BB280787FB9 - - created_at: "2024-11-19T16:53:01Z" + - created_at: "2024-12-07T17:36:46Z" enc: |- -----BEGIN PGP MESSAGE----- - hF4DRBWo2b0h4f4SAQdA4wqDvhem29fQigQMSZDkpC7YuaMiXlh59F8XqfMoZDQw - wCFvIXg3WPtVCLQykVcer/E/mKkSVPGighH3HCq0nLlqknKFeCzpvw4QDfEbtUL4 - 0l4BmYTU3C91Q4n1zQK+kC1vxsEpG/TuDcv4cW3zU9sW59dP4x2yZm/VEEaFKoPE - VmDPw8SdMIDQLRBclLNmRrJlgLpykwy+Z1Ft2LyrrEfOUhh38+HeFsRU1HDAvX4I - =ErOj + hF4DRBWo2b0h4f4SAQdAAb0ghvdz3cxYFC0ad7l+nim9fSR35bLl7ZKMKkik8jow + mBpPv63L68zr4cvtPgbJfCcekgTPhQFSf8+4VrhYxrw4g+pGGyAi2P2eW4Lt3btw + 0l4BFzsf+E7YJ3NPLSFsBABrrW49m+00n0jNorbNeDgcmuB3nlq+7Sw3ndLICxfz + UmMGYr+dyEvYmPwIs0Ly/VovpZdNirI8u9H3wIQ19aUAZRdhQoQ0Ewjs9pxhkFXy + =/ivD -----END PGP MESSAGE----- fp: 0x572D19D312825B1A504C9003531DDDB6EB559FBA - - created_at: "2024-11-19T16:53:01Z" + - created_at: "2024-12-07T17:36:46Z" enc: |- -----BEGIN PGP MESSAGE----- - hQIMA2iXGbkufjklAQ/8CXwvY4luhyGMttDy0/xsztotznwwCYjgg1E8F12Nw0IQ - lmq5Zy6CSCi/sarJoUtH7l2vf4qXnJPp6Fp2EeWJeI95Z7NuMLcfrhlYRVch+6fq - Up1ikcGjpdrevYp8lA5oDxEojrev/21m1y+bOz2N23Zng5cGacW7SS3Pat/Orjd3 - gyAcAlWydhWSknumrk9aRJvVRwIy5sBMePic8tsv8hANfUUmy5RSa79s/iRS8u6y - Zz8icS4zl6EqO5CpizTJwFDBRnWmPCxhz++uXHaQiVySDzU3duylJWaHK7U4YP9y - My5KW8ZSYlK0DAv7iio1MSw+1eoRgaBlR2s9rQHLCMIN7XLPL4Q+TOrdtpHF23OV - x3shRsi1y0wBgNVPOmF64RQdYznpATClUJ0q6d4TBNo6QWpPSkaiRqVBJcq6q3rJ - YEPtNGlH0KjXWsADIKR5K+pStUx1XhV4c/LJnu7x5q5Jm1YDVpAhmB3hP+6Fk4K/ - hwW/0MDS0gk+IrE2zUdjEnrt+b1GUBLE3GgrMqwXTUSNJux0hy1ZoXtoZh2cus4+ - HplZSPBfbzcOtg0C87qNzy9mAaZXfhQisBJHCgZJYrZQFnEtbj0JqrBP/7eZKmoG - runkoV3GOb1R6Z0muxprJ1t2ud4Gkc/INRzVGZRhq1Sny9XgsPI3Hw8BZHcUhx/U - aAEJAhCr9okJ0aeCG4uKi/jAHanKBQSssDQl81UXr/G3VuoHLquBWLX9alcpNtQ0 - t9IVO43lWgz/6kDe43IlagAVYFPF+GfHU3+RYmAVvMDMAVRg9vWBVh6KssJC+6g0 - WAx2tY8zRMyw - =VEuM + hQIMA2iXGbkufjklAQ//Q5QxxFpdzA/VmHGfTmAYnp6Iy+fkeQDYKhKWbvrozpql + +e/nCsn/yZr4JRqhGsV7Rfct0pcldmsvwT7Rk3gItO99I9/FDE5AYgxs2UDRX4sa + UGqtvLC5EUVlZXnpOfmSSB2IE/u8s6kLeuKOnfKzmC+eCkkopWWOAMpkrXJQUXPu + hKV7x80MF7Z4yQxNGywHMMpPdIwl3WlYVkF3MZm/GqfIla80fioaet/VNNPkmzC1 + JiowuuJWfupF4qEYJPoUBCdn6c3gOMJQ/jmXYjEaIekKOsCuVq2rVnjfUn4VcWxG + nuB7eHUHX4+mHvQeMNk6mpDWcG+BBTlt1TGUH8Pa++LmntbbzXnKhc4wtlWPWXYb + Yp60krOu/4DXwgmo2U1EBd0/GrxMHf5kqDwhAKLTkKLohv9zScN3oI60E3BAMC+Z + K3pABKZus9mYgFRWo09fQCBND85hOwqQnsfw2Jvg8vf4M4pWUV9aeNZo7IwjgJVO + UlfchpmrUPKOo6MAbLCY/nhWY8AuRH6mZ/zc7iIOpdZvdR3S3YDyxsX5vxM8d0nV + 7eoxPNAwG34nE0kOwgeTrjwle8cad/ih4jq7ByVyZQDvTGbZRWjQoTtt8AclOgQC + UVb1ByDtVwfptcDCic0yeg5lkHkPNNDpfCd906lcTyeF+Q8gKXAuORMOCt4JoIfU + aAEJAhCJ6hCJc8YHQP2Dpnd/ZgFwa4A7KZCmrQcVzC5dKiDbDg3WbbaTCjChoAfI + l08mRCGonClDkglCI025wmFU2HdSJiw+7VvpB0Xhfnag45tNMa7DOR5GscWfizAl + CDmT6Wmt8kkv + =snPs -----END PGP MESSAGE----- fp: 0x270A71E7908CA9D9252000B01EFEFDF3F7B80B01 - - created_at: "2024-11-19T16:53:01Z" + - created_at: "2024-12-07T17:36:46Z" enc: |- -----BEGIN PGP MESSAGE----- - hQIMA4Uty74yOFxLAQ//QJVlwTy74q4B6bFXIpdRa7g1c+QvnQxgyDudl4/liG/Q - 4dYpmpHZ58sNQjHyfr4L/WdquN3yruFzDSq5SgHiPi1sGlj2UFT1QY8/hHQfJjCk - nu00X9Prz7Rq9wFe8XPPWotZpS2KDCmYeKyUEoMTwWG2MyFenG5s4/bVbWyxzqDf - 44cgSOCCX/7V6TXSCIjacXF/3zVdBsXX+NyrP8selSNUlSRzMV/yQNeTJ5hu7U86 - kD6jVZnzJvbRYSplJkCGSw8fkOTpa/mA39KDLaXIm7JcZARQyEtqXzwUOVwTKieC - 6d8Xl3Do5SE5lYsuptMEvCL8FNH9uyFkwrgF+reWRdiE0qACxkRhleIGUG59unLC - Z42mbp8ezDKphJCuuIOxQwjT5hpO7ETI/0aP+AdORHei/GbAAOgkThSr1f+susXo - wQqh1vESy8fbt2IYby0IO5BEr8LZfJI2CyMTMmyKr+pHxTX7tkI2hx7iNnh/SEUr - 2VoDR7/GtjUBdmoDWjCEmVRaIHg+EC1wLM3XMEAMeibKI9Iw/ywO2WdZNSOjZBbd - CgxCViB9oMqlRazMbY4d+wQo9S+x8aOVzIRdow6aeRiDLixMZCwMaUmKPu02Rr8S - 25DeSVT1/2J4uAzUwwaRumWxWKqiv3QhpaSizpiRMfjSH0PtNhVRdh3BIc8NWLXS - XgHlHuJMoFqBLqrqVQO1fgNFjarSkUwzYxvK/s880h7f9YNMpNNpSKEOr+w4JQqi - 3ftVVYPoiJ+e6VqbZawism54G6zT52NCrUHZ8Ut3Zu2K98h1rKiUL6mmzRwYmWk= - =0Nnk + hQIMA4Uty74yOFxLARAAyQNkJUZ4zA7TJFQOs/Ivrz5RiAkY66wmJ2IXpCnrEqe8 + fKiKdRIdrVpg9rznmSQ+/uRm8DwQxX+L7RJr6sXlR+hSFCy79zzLs2F9aJ8t+X97 + /JYYJKVcTQSfyH1whZ4yLtSj+sJBAe9dA5qTrz/T0x8Q2fVyBYWI/PYJ6/sB9X+1 + ZETKuOdXvvtElgJyhmF0zaaIJmTB0W6JDowsBH8FqwG6n8Cq4KEwFWAwaRi1rZ3p + lhE5hivBr4F3CL+BJELFqRF55VxWTSNPJkXq1WL89jy5yJ2utRgFMocN8AAQ+RgY + I9sepoaC1YU+2kg7q3kKQ+y6DPqpnjDdWrY9Omqlftt4dCHPZZy7w53NcwAJLSxK + ocVwHNYtThpi9DbpCBYQhX+V6Y8bq9FqoQHFkkiIWF+xVyjojrQXbMBqdmkJzC8Z + VeZYkbyH5rNGOPluzOQfKHNT6molOY/eK88IWA+omEQPvmszpdSsX6Kr0v961p85 + p+7ZphPfoRV4qrxhqjhnOyeRe66LTbBFl0E/VUzvre/tN5l1AAAnOTvHapLzJMje + YAInBFwXJm5viDmCIiX556UZLkdIagYmghzLvw/PKBH9uATitlDi6ustMnIPnvks + PS6xPC76BVG6yU0W5NQjGqm+4QTfwyaBq8Z9V/Pkr37grh+/zg9NJD8OK3+41UzS + XgG+zf4iBmwXPvjT2xFUAirYn/vdGS5c7YwUhqlB4tlWeyRPQqs7tLhUZwnlik/J + pnKP589XMAJG49NRHNO8WIuRF451//4vTF5q/kJ+4GVbH2RHWuYN2V4xvmeg/KU= + =VXai -----END PGP MESSAGE----- fp: 0xA534E46682DD8C35377352C88DD28608BE411065 - - created_at: "2024-11-19T16:53:01Z" + - created_at: "2024-12-07T17:36:46Z" enc: |- -----BEGIN PGP MESSAGE----- - hF4DIBqTX2T418ESAQdA9kBzNT1rCbaImb8jbHoaAgKYsA8yKKUqoM/Jq4nO/Uow - HZ1OjII3G2m8V9xh/YyyyadiUIB9zK4gcXmGwPfRJMFLJfBFxQoODBCMS/mjAjVe - 1GgBCQIQqLUkyf2nPFXm2Kr4Yvm25TpykDDRGnHcYDTsv3CC+ZvWNfRoLzNObOki - RR3nTVWMFkl/XtL15O2vtsdZ+uTUWgV7aMf3SUfrnZao0FxFAwrDGRTg3IbMewUE - UsHEcNUht/UKHg== - =b3QZ + hF4DIBqTX2T418ESAQdA+mp0iY55CP3o0oJ6RK9xYCdqBva/4RO8Br6hSE9WHw8w + xrb5IEITYbuLFgyst0fMuC6TyAmsKqOTT02tuFwoFPmkIQ+Ggap2UTOrWUmNHNWo + 1GgBCQIQ5qq9Z+Zm7RdtQTP5dwv+ZI+Cs7VwwbqvNDwg3PjgYD+JCZTochOn803k + S7hd0KOR/O+cYpqyglu/Qh+wvf1qsDqCSgcKcVmgGC2X+AuZv6fkFgsiSuoWMHfe + t2TZQWEOjdvxEg== + =xp70 -----END PGP MESSAGE----- fp: 0xFF7D1156D33F4060A4B15BFBD6CDAB8050CBBE7D - - created_at: "2024-11-19T16:53:01Z" + - created_at: "2024-12-07T17:36:46Z" enc: |- -----BEGIN PGP MESSAGE----- - hQEMA7auZh4eKOkIAQf+IVg++pNdHTZUnx4zCp3poz2iOAam0FjaqCrN3J0uOSdv - WSaYfUY/eR0mtIEY3SfJOGUFpL36F3wT8FnCiIr3BiTsA3odyeC8U3pRMMSEMbv/ - rg13dKB7ZQ+5OnA+8Nekm1XmQ8wS/niyJLCKLYg4G3wbr3zkLy8x4g6b+q0hsnnP - 4cX7YvrVVPa9WcPy+DUIITwfdGNntMWQzl8FcrqptAqq0H5Z0VNb76vrmYEY9X4s - 8HmsS7QWyvTI9X2Xin7w/eLsY63qkdHgFVZFlReV5ngMOdL7HdraXQJuoPljfKhi - 8YPG4xKXW1Kbv1CvCIWFDafvWWFwrZekPnCsc9kRL9JeAT6Gza0lSNwFHvPV4mZl - dv95LnDtALfQOb2TIqGUAeSLFh0CELIMdhg2NgEqEf0g0cn198fTmynM+Po8BVlu - p0RW8iVXn4Tvz6kNgukbfoWQpiijZvxOntrbue0z9A== - =8E8F + hQEMA7auZh4eKOkIAQf7B9rJ1OoTg/nykZBFjKqSXVwdY/20KiqIWoBjn1WPF5sX + sLxJBYXGmCGNfLR383AI2g6KJXNvhOKUjVfWJCkrlzvXOcyCmGwvlBgCVcAoX7ha + DjT1wafjl6zpa/Lz2EZDrpabtCblfBpIS4pB3VRS7d2Cwv93CsthrWrXxyWGZhM3 + G8sK2EFxYDDGo/fB/MzTz8TS8y7TS7hRLSG3xEJD+nCMb2zAv5TFuBhH7ltqYBcc + 7j1D7SrVS4eAw2Q1YkiBnG6u2tiEgElW01GCl7dRKQTbCmfpvmtfrg6WvrB686Tc + OSRGdAXiO8HHnTcKaWpX/uUTxlRkg/B0gIECwuprrdJeAVHkx7//EpusCU78L4CI + 9VkRSU+1veQrc6VAgD4E3mprfs68gzR6mfBf53gVnXXt2w0ps9n27Y3/+EbxIk6i + pzdX3CVZT0hyfQYv9B+aKMW/dI1bNaEiXONVzsxZ7A== + =PVq3 -----END PGP MESSAGE----- fp: 0x49BA444CDC680527B4835F7C3C1AC435CD1F217B - - created_at: "2024-11-19T16:53:01Z" + - created_at: "2024-12-07T17:36:46Z" enc: |- -----BEGIN PGP MESSAGE----- - hQIMA11f9zoCBF1cAQ/9GEKpJbdv2wTU1IFWfvX4Pd+UwNTzE7MjfCEjR/28w1sX - wwppdgr1BvW1lPFulmYqiwpH6bnUtz5DtNk3rIxkP1V8p0akzjWX4hiwYDT/J07C - Di1xP2gPJNC5cxDFYoF84/InWzmMNHyKBFbSb2XFsvh2YtpKfOHt258bW3Ix0bb8 - ceFfNJZSDj5maQu1XqR18Wm/u6o0hqP6mmiK8Dp4njvR/a0XbrkYVkoqLX9oEF3+ - aXgDYZ6uBKLnHGnj8+Es7TENdboDj9By3vsnL9ui9nuZWo033TVpjowWFSQsfelY - EuLoR9+8WsIj7xpskaGq4bkfGuz+sUyyhLVOrG7lsr74MQfn7uk+lYHkbC/RBMyO - KpOm1QBu2i7901TnSHV7gfzBw65hpNAUMQKhGkaF7UGui41wBa7lSwj6l79IZ0Ed - 01V2ifqfgIvoGlsjuHvR14H6dmuYGjVxhzqDSByzDC6jOWoYjiItTMX0brxNGNOo - p0OXlllp6rMJPQNCCxmoMHpxKPatJX6XS+GKVpZs/6TV2j1xz15bOWL9fC4H8tZ4 - nurYDVpQGIWH9KcEWHi9WlFMr7i8pkhX2DRoFOczNZWBBJ14b5WRwVN5QiKqLXaS - qcAXXfdo6gfCLRZFRVWWZOJ7oAY+GTs6X8OwK/7O4nccMaTSoS+SKkJPU0WY61PS - XgGNfz60fDB8fku66meyXVHkEtDZdMfUcmcpIfUPprs1kRfRswkJmTyVyGJdKNKz - 20Pil8InkQ9qbK6Coo8y0imEwqJCh88ZYLS4A53XfzKtQLwPtFESrrt++uJN+e4= - =mO2q + hQIMA11f9zoCBF1cAQ/8DGGOwf/htYHZup1pzf8Gt0O/MZBDX89nYqALwJWMBKg0 + W9bwwpVNwuhQQGaq7yU11ccLms9J8mUEMxiGJI0817cK27Zn3Rh3sslxryDZ53wK + eH5OtRYAUC+Q6IWHc8xhuVYdBzMKKFeQadgdBo1hs7exy/FgevQSVaxb5xy/jKCs + bGYTe3O5hnQlpRlQmMmsidXqpxPhlmmGd+FRJpqUrW/O6amuwU/2CfONSu5COx+z + bfPP09EnXH4h9ZET6GtrIt/hXJyzUDhQLiMZ2rCgFT46RyOX/PEr9tg8ycbjMGXE + 5F5Cc0nWNqXnB4q67ox5FpTgo4ChuA7fodPuhyH9T/2YVGOBhiPohfrkuxHQ3f69 + NOq0jO/mCZS3LyiZ4yIt0shdkIQZrHhq5wy7KZl/TjLsxUpg6QtG3g2MswbD7nUv + NfnA7146o4FsMW5ML/Cef/YmZdlRbHnAfUbs7+g2Gv4Bet/42EeTcEJhGhWfUWiS + T7F6HqoqiLYicrFv64YBN4m4tuV16CUpy9+ZJY8Vtrfv5008y1pMTf+tfSQz6NOF + 7IRlAFeOp1cDIaD7iKeyWI1iJbv+V/X0/WbaL4Lh3DuDu+APVJW8suYtn2cEe7Ay + XzoLojXv+Uk0qV9y2XPRRMmQi/a1t/5Guymz5Odz9MZKtiBlMA5UMz4ruPcPIszS + XgGXH0cv2m6T+lwdlVyCIqt324dMqc2nw2wLPsOdJ24sNpXwrHxjh3yg43w0edv/ + jzlkx71DhbKsbjrQyRGRC44oFkTcHBzrlG33g1px+YGldtUaHZGcQExOlZKRvsw= + =P4ll -----END PGP MESSAGE----- fp: 0x9AE04D986400E3B67528F4930D442664194974E2 - - created_at: "2024-11-19T16:53:01Z" + - created_at: "2024-12-07T17:36:46Z" enc: |- -----BEGIN PGP MESSAGE----- - hQIMA/HTIsSK0VBlAQ/9Gqv8ifZPE3vNxEtED9glDrORtim9YR2Cpa+00fNzrTgb - uZwIarDt9FZNxPXCOFXElWw0pEoj1VM3QVkUrbO5Vqr0kPSMuytao7drncPZqFRt - FIls6wINcBLAEYjoqbhPxBfGunlnoiWp4r/eo76hdpXnrY+kQV8hAsN/820cPmF7 - 1spCv88nd3bPpE5Ekb4cDAhSl6x7WuT9diELy137LpuQER0eNneqTXuGn1L3ckNz - meum4XN9o/heOyUgX+JFEa0Sb7gJ0MWA1ymuv3NFtNjcoxgRKc4nTueocDamxazm - 9rD4+TWkLpG3ghjlOfRSYmm92kSUPMp3kg50loGSuRXyhlJpRmVWY0eOO+V+61Yy - RUAW6nuSgJGr3vaUsAI/Gmo81QpeFmu5SOsB3kbv9I1Hrl946PGMsyCXt8RuDaL+ - 7G3gzAezCkeu7DD6wXorL3Rt9stGGKh2zMWihdLbOY3652B7NPQtP0SwFEe7IQc0 - bqG4GdRby+es/ImvgbpY5sOVdUSNabg+Msq3FItYJn3VWwxM0pExje9l2GcUFCQU - eEktY2W1THLtt7k3cfz5I6qjhEn42zJ3BhK1cvLDUoBFygEaIav0E38N8Dy2A2Kr - 7O+8q1owrJ+JqicDyFvTcmW1jtcl96zhk0L85Hp3CP73RFXRoGTgHu5C8xWumILS - XgH+KAG3QYJfU3cqUy4nl5aBPFVeplaGYV8JdAe6Xnwrvpm4CPv7jM4V1h4IWiw+ - 5tbZ//EMW4d/S3dhOmn65nozTrafp6ReaaR/gIzODwymDBBNVVQFWAkVnGza190= - =Ki76 + hQIMA/HTIsSK0VBlAQ//ep9FOEokS5/i86xOsWIekOPYvi3UN6baZE9IoRlE49w2 + 6O8kAoxLNqjxep7Y75a6S6qkIyCb3uSf2bf7Wc8WQgHSWVZY017G7O1i98wdbEi8 + qry9ygekcJIPjTuHxE7RadNoABdUi7mfeS6Kv3qEyCbCpO9ZVweqCQ4KzLu3PWiE + TReHT5+ZeWUvZUjpB7ZzKchvh/34vYF28/8gTJZw11Lv9ehIF6tN/vQA5kNL9v9l + MWI2z6DusNOWI4gfIWajFwkLg8/7GmgQ+ThFET4RzulVA9ul7kmcVDSoMpSOJ/HW + CTYXdJZyNzwg70qbLMOMglfJTY7Fc2a0+ReN/M42bQdW/M5P7Hqay9DNagb7IqNy + E782iVdhS0gNsV2zFWlbhs6OLbOvYkqWduM5JII0P/eJEaSeChEtzwJQ5xzK+U9b + 15O/VSXgeWjmpxTS6gZLGBuSEsVbOfcbfCxECMl88pbkpy3Fz49o8OEiJ6/8Xtr7 + Olo3+UYqDPUfZKBpITbqYwcufsVnd/4tFaTHKlgblR4wR02aTCxJm0iGnK0KubU5 + TItsMFgqQujWf4IE10StZVUi1FgU+4zujUGep4AGFSzANNFaa2mJXTpPt09P/H8z + HBq90ZBaDF33T6U17Xkn1NR5ESp/iWnYLW9BSVV5avKti2pwsMuZBY6n4ye7TyvS + XgGdXytbbBLdp/xeXp80EkO1NJh0OpvjDUiFHudccVAP31dOUOCQAZQCDEX8f14J + iiHr+B72NrPR0/reLDyP7D/Su7isXn+V66GtpbOJW42nu2elKdCeO3cDlgJTCMs= + =HJlu -----END PGP MESSAGE----- fp: "0xFA47BDA260489ADA" - - created_at: "2024-11-19T16:53:01Z" + - created_at: "2024-12-07T17:36:46Z" enc: |- -----BEGIN PGP MESSAGE----- - hF4DYIEGJeT64uMSAQdAtl8B+3uEPeBWzgzWpILRaXEO09pHttBhsEMQozRWECMw - QPiYcYzJCZHk4kBap2yD4WOv9/BZzy8FH4vzJhym4U8vvt2WrvYw8SFvIFpK6crY - 0l4BGsVSf/nkbG7IL6UJ6v65RcNjRXZdUduZp3VllE4bd5inZP8np5ggrDeq1THp - AhducNDdtmf2RNp+Mq4TAgOmSIUkEWPYsaAWaEhbQUcY7ZoBNPwD95YGQvp+7yGw - =bXDI + hF4DYIEGJeT64uMSAQdA50X4+sbx3oJ+ZyBVgnlVWEm647fMtmUOO0baw1RdSBUw + BOfInzsySFnQvc02duUigld2F3ACOlYwKVP8FRv+jfGi9Mxh44ljUVw+u7deo14Z + 0l4BGi/lF0cFFTK72V0ddZYq/Qm8bm+yubM8T1UfNnZhTfUfbue2cvZSkeVaROZd + rsIJY7GRl1eGHVR1jsEpLgTMPWMI2nTSUyAmxr8o7PXCoiKGA/liSHdCvKnvIPIK + =ML1v -----END PGP MESSAGE----- fp: 0xE474A4AB587CD834813DF35D03FDB411169D6C8B - - created_at: "2024-11-19T16:53:01Z" + - created_at: "2024-12-07T17:36:46Z" enc: |- -----BEGIN PGP MESSAGE----- - hQGMAxrcfL3KHjCOAQv/Zf/rEcojghY9Eqx6Amsz8LOzLUx6HMUVezoDpEJOQ+sU - XckkGFGHfBvBHEEi9/tnR5kpVDPJrEGbU6uAvolEu7XpdijYYwMxiihikHJvaczD - 4skcvwQehC68jnVF6zrFGb4Po3ulFcyOajggBdjsf0KKI5YO100cqxYz73ROHKKf - Hd+ZZSxtyQjQrg6ePrTCDPe63VvzfBeYwehsTZWkKlvhKlSivyG7XfddTOKTDi2a - o3kYnpgzv3Nba4wlfvAX0WdKCWrLUGlcyrJMvb6k7qzjppaZuXkN+l8VDbW2CDGT - dnp2ipXRiHmjK4olE/XuAMx1ZMq6jjfHaqe3fXwSfDFqPYgel1ieXLy+yY/Zrojd - yhrCWk3A6w1mZXZWJJlrWIyXkjVJBkBZIPXkidYQ05R3ICLqTUIry2PwkE7eerq9 - o/zuq9vmyej5Xn6vLQcZqJiTvCCSQtQCPUQyvjfW5PhSAS/xS9rBv4/Wsvvy3/aS - MowcFvt3Jp7ys+v3w/yD0l4BYz/CdUYNmzNWgdhzjNb0nK7zZKv8bhfw9geciORn - aXkXtYSdf5lko2ZR+5eDnbBY+wMVAni5bDS9+yE5lwUJ03eBqPMf6PLcFMtUQ+jE - toiBI3SQqELZZoBxkk6/ - =HOfv + hQGMAxrcfL3KHjCOAQv9G9aQDkBDtEDu5PotXxb7/uJ5qRvBFALfu8O22Bq0GMiC + 0edP7O9TwxVBt0kdVDMxgoldrPfVkpswA4P9qTfw/MdvrtZ9E/aaxpM3XbYzWMru + keJrW9r17J6Tk2i60D5Kut6Vl1sHVJd9NB2S8ERI+Rn6D3gwM2Kpm2PTh6lI+iWC + 1Uwt1M7eBe0wSPChpPGxt0Wlf+Ad+NqylH6SeAZMsXUlk2sjb9sX3NyiVLdZq9rr + JmkRWftIRdtyOO/Nib5E/0lN7kKy5OI6oXzmXnLExFnRIZhfyUOKR5qxM3KLoGIR + Xr89jFAu1j/2Gb5tnB8IJzq53ro2m3y1Fo+zYCJ5VqAnxFX7S5ItICAWxLSHkHFO + hUrM5QkMfQyLHHY4lSoXnS1rPKBV6QdrVEn/08nQihU0+jzSVRcS7aVCBk4mEbCN + RmRC/tOIW0fiihBDMF3ufYWxuNHqO3RKRNJ0fLSkJ4NTZYzGdZ9Kzp5UwUYFhDFZ + CWg2Q3/KpYQYYRVNsq490l4Bw7Xig9bUO3W3K66wSlsXcmmQL+nmqc34bal3BQRe + AQ7+0PQZObNI66MHgNoRqAe7/dtx0Ca+j+WV0rqP3AYNbaMkj5USb+3AmbbToWRY + FoX5+YCcFiI1YpBgP6Sc + =zwdT -----END PGP MESSAGE----- fp: 0xD5B872E407D438721E5887A000E765FA7F4F2EDE unencrypted_suffix: _unencrypted - version: 3.8.1 + version: 3.9.1