diff --git a/hosts/vm/reverseproxy/default.nix b/hosts/vm/reverseproxy/default.nix index 4c56498..149c493 100644 --- a/hosts/vm/reverseproxy/default.nix +++ b/hosts/vm/reverseproxy/default.nix @@ -11,7 +11,6 @@ boot.loader.grub.devices = [ "/dev/sda" ]; users.users."nginx".home = "/var/lib/nginx"; - users.users."anubis".extraGroups = [ "nginx" ]; crans = { enable = true; diff --git a/modules/services/reverseproxy.nix b/modules/services/reverseproxy.nix index 23146c3..b16205f 100644 --- a/modules/services/reverseproxy.nix +++ b/modules/services/reverseproxy.nix @@ -160,11 +160,15 @@ in }; }; - age.secrets.anubis-secret = { - file = ../../secrets/reverseproxy/anubis-secret.age; + age.secrets.anubis-secret = mkIf cfg.enable { + file = ../../secrets/common/anubis-secret.age; owner = "anubis"; }; + users.users."anubis" = mkIf cfg.enable { + extraGroups = [ "nginx" ]; + }; + services = mkIf cfg.enable { anubis = { defaultOptions.group = "nginx"; diff --git a/secrets/common/anubis-secret.age b/secrets/common/anubis-secret.age new file mode 100644 index 0000000..c8978ef --- /dev/null +++ b/secrets/common/anubis-secret.age @@ -0,0 +1,57 @@ +age-encryption.org/v1 +-> ssh-ed25519 2k5NOg vJx0IZOYhHz43vQzVr1l3WKOA47KvuZHABbjCSkyDyc +dpPto7vF79CyFr48PbtSxCAD+ZJCsl5I4ay7SdzVt/8 +-> ssh-ed25519 IJtQuw yLKjZrRQwfCEcjXWt+xLbIEeGmjKk+L1Sd8BynfWSDM +c1A2aP/00gd+RNJ0U7JbsCEKt3SIjPdBK7oyitTzcE8 +-> ssh-ed25519 7aCZxQ RmKLxBTLB25TDXljK+tcaaYEbKA4lIav0SFkOARxAQ0 +yXBoYj5M3oUOhPIka2QlUiOjuDksAnmHEqbLwufT/kw +-> ssh-ed25519 iTd7eA JCtRRxf6p0II9f+5A8mrrYlCcW8iWxFi5rJ6NEXbVR8 +OYs5n3sbtnF/mDzz3fn6q2VNisIaGhffNUFLdsadsek +-> ssh-ed25519 h5sWQA 7EEuz/l+sEkcVaDkjqbSlhLwU44XnAdKU3KeJpZUyzc +CFFzEx79IWvDSxdGwANKf2n9+LZ0a6D/1k0VqawsxWU +-> ssh-ed25519 /Gpyew h/Gh1PlQvDdQdtiXT9Ghjm2pQSzog3sYWnJsCervzGM +hrt71rpDuzq+rDC9STBYQV4ftHq3xIFrsvLfwhNjRDU +-> ssh-ed25519 APVFfA FquBOApkpOrMaucnMbH+jpaDXpmXii15R1sVrZelCXU +4INSA4kJkbqwogN+4rSEMdsTQfEmJ52WZenMMzP0rzE +-> ssh-ed25519 FtI9pg 9FAWkNL+cYSlQf7esPYkTdwbAiQ52i/qiVOGSvFou20 +g1cpR4lEg2RkcaqPDMq1DDT/Fq1kJCW5phm/twztDQM +-> ssh-ed25519 hTlmJA h9NBQhMmJBMa8j8vkYPWt8E2JjML3bftoN6cPJJF0wA +MgUcTPi1kwuZ0o/X+Xsytbd3Dh89GmAhil9lmiX3ep4 +-> ssh-ed25519 GCcVXA eRV5eomZ2Gea7sAnisWg3Pl3u+7irf6oCqKonOu0Vg0 +Mv6jVtjhysRNYbuKv7y3YkiVDZ+SXg8gqw8YKRgzsDk +-> ssh-ed25519 LAIH1A nqt1T1SWAqCQjDFyQ6hRNv8YjGXTddTgG/hFrsZgSSE +UtmklHs7LGauKBIL+a8AhynpTrgUI6VytZ4Wbb34kco +-> ssh-ed25519 qeMkwQ lO+FiKqQoBnMGO67A1TXR1YzF7/QTacv2ts09VzXyys +iNMOd/p1RdE62P/iq4lTDfAOpeBElHW/WpD06HwrnoY +-> ssh-ed25519 TqxOLw 1yJ//aVMQuQk53miM7jXcmoUHyuHHGgmj/HZaQgdWFQ +OOXlGGLq9c+oMeYbSJtMabswOsLmrFaV61OKp9JgVbY +-> piv-p256 ewCc3w A96w0Iu7gjTE78vUYKYc4qkfNxSQ3Dc7UZ57NaybW3aM +x4dolBQvdVXPH9WG4Acfb5P3+P0XGYnatTdWbMAdc54 +-> piv-p256 6CL/Pw AjWilABi8S/6z54406QUcbDkvdE7WnZNQqHKlW9wsILW +nXKMLlxnKNFVrVt/bA0I1/BADO0ISZcTyUAMlSbH86w +-> ssh-ed25519 eOAUSg oTX5olmW+vDTSnQP22OUWiCWdur4BskfynxVqxKr8Vo +SnRdaMHMuA6lkj4vY3fVbRefTYpeGUrlazEbrWDDdhM +-> ssh-rsa REaZBA +IDJz8Nih/2SwgBQF/8bFV9v3khRMNLOnzpxO6gB0yGXt+EIHj0Qv+epZCjvzVTfQ +o+8xYIwR6vWoii5tiAm0EWCwnd9JDv+QKINVmqP8giAgDrvEJB8M4WymalSZBAST +waa/oNjWJ2mw+5KUJmccYnuVwv8e2mkw9hESVVCth+iHw+VnEUFizdwIs2xpMtXG +TBjHlY3VoKZVhsIx8fEFaonIXr6oS4p465f88Lyp0XNkaYoHoNmf/HUynForKj64 +nfvespj+/WA9kEtioS3kZ3H6RFz4n8Iu+ChtZCWvhBV1Fh/et00wekT4Cj8Vp3Xx +73PcuWX38sA+29OLJJeHrCbytP7AKr4l1EO5v8PIAwENMOKF8E86Eo3pFfole+AW +N3GjoDpPRkDI6AROGTgEzwTAcNPFpS/eU+MMmk+YOaxH+Zw8QE46JLJuKwoXXPWT +UWDfp+svZl28SXvX07OhaD70X/tNh4I3L0V/mulfUtLVSROxWqsCyXonrMc1l4q3 + +-> ssh-ed25519 J/iReg I1r8WgXiwvpW3Wdh7n+x3klmmP8DPsOr3MAjtrGUTys +srbX2alz5IJmTpHbABXxCh9MojoBeZkGnLjrA1NnXNM +-> ssh-ed25519 GNhSGw OYRIC2Z05IpY878QYLp5Vl0HmmFkMZtax1ISHjG1wT4 +hvVddsGpxnWezoXFOZwzz0q7nVKUYavs6onJ3RBUVIw +-> ssh-ed25519 eXMAtA 3CaW+F37vX+MVcoO7wfS0DzN619wnffDJAFm1BMWskc +3AIAwh9zUIaltgyHCjlFQp9RFQT2tJSYtW8K+oe7xDI +-> ssh-ed25519 5hXocQ KOGkQVn2hBVDwmEbjPPrvf5G1djDgkHi2BIE524fnzs +JiIuepxmUsDM0Af8oMi1e30iOMjMW4DGUORiK3kaMvs +-> ssh-ed25519 bRHVVA pHXhoEa1gSrFbLCP/1EbipOBjUsVhDpJg5xwScxn4BM +VnvQjfhUYK4ozuEKqAZC8EUznviRoh2VRNoOqUVdwYM +-> ssh-ed25519 HgW9eA y3xPFwKkNwurIIsAxOdLojfxa6OIID9PU/fI/i6fVkQ +RH1Sq4WwqAa/6yWHAVcgXVmoEsNBmECas1AIseNutcE +--- nAgOtvCchgYapVbzIA4CW3r7ntg9mCXGEYuCdtBgZHA +=;àß”arÇÚa8±g~óøÏ{}Ka[Bû]gf'¢}‹¹þ8[yÂKÃ¯æÆ²]«Ñž+kµƒ\$†Ö�NU(&ùÎ÷5o"^Ö¼©0!È÷ØécÛ²Vœë(á \ No newline at end of file diff --git a/secrets/reverseproxy/anubis-secret.age b/secrets/reverseproxy/anubis-secret.age deleted file mode 100644 index 578c302..0000000 --- a/secrets/reverseproxy/anubis-secret.age +++ /dev/null @@ -1,33 +0,0 @@ -age-encryption.org/v1 --> ssh-ed25519 GCcVXA qD1f4YdP88JvuPLS6H416O0LF+rKN/gJ+gPf0lFWIRs -B0LuHjXX0UiHHTwY7v1HqP4VF5/5yn0d/gNW4zUOC5w --> piv-p256 ewCc3w A8Wnjz7tLNpV/m5bUzuq/MBTHn+jQiaCSUb4vFvGDH7N -gNBEsgdHogaz3OSJBelB39bGrOBt8+hkNXpAYcFcy28 --> piv-p256 6CL/Pw AoJBcpyhK+hpZOfHOBUHh0Kivvn6YJ4xepo7IWppbMuJ -f1fwsu8okH7F+6nSHowxHpTdtjU72lvd6FmwFIMmV8E --> ssh-ed25519 eOAUSg 0bH2dDdNzKapr54HKndKJpKO5iTQtbhY957NIJQcvBo -LYVsTuKNsE4JlBxbf2e+Qo9ZjRxnz6saEHEjyfCcAjc --> ssh-rsa REaZBA -Pho7O15lWd5/2Uy1OQmA/JzE0wmOji6IPKGj03nK9aYSQjsTTc30YhNCrkddglGX -MCClDyGDlQ0mCwHKVfpFeeSC9VQWQDDYk90dM4MF//6hHPqU/zn8dR25NyxDgyyi -DVrCFB+S09LsKI4isbDoCru6fWXfdN4Fj8I44c64dBpIVh4XhSzUtmlzmge//35C -y6EvAjVIhVTbbgnQ5CJFgnRlSPaN5BHDq76aJ3c+8Ajkjowa2YcYu7w8asi7PsIs -WH6J2qMIPvPdxOEKczGc401ysUfz9fNFKs0Xx4spduwv8I3Sv4ImURDkYmCl/k7J -rwRXbUGr8JzZu093cmkjVxDrSfb9VhqlZVJD7uc2VSTk8ntwStLWafSuE03bIN2L -on0t/4/wXtvFtwlGoDe9QGYAJpPYWM0ZUPMZfpddOz9vYvL1+6nUcDroLMvCIItI -blwJZ0970K/Je99SmI3+6mUEAw8nJ/pBFaF/LmTJecypLEalLNsu2IALyCMIdTa0 - --> ssh-ed25519 J/iReg fpgi4t31rVl+KvOYd0Ph0Nd2gInJAZXNhQC5ekpv0kI -lznh3YwmqVr05vjWxf1HKRWAFZGXbypAYygjUe+ELlk --> ssh-ed25519 GNhSGw 2cVptD/h5NWcYsjPPwQcP/b9tjJPDbhjDKh2hKhA5GM -JZvQvXkb1RRw+NHnJ+HMV5tlwiBnLf4+cwm6J2hZD9Y --> ssh-ed25519 eXMAtA axP3hHgfgWJScGLIGpYgu0iYW1qZRQzMK9XjIeszrnc -rBzAqSVoRqj/drZSOlxSIZLgZZU/wqGML1gKCEHtcy4 --> ssh-ed25519 5hXocQ b3kjoM+FfQ434V7X8FdpIHVFjTn4sc+psj+9jyRljxU -l5rna7ap0ydVXPCSr4qrPnu2MV2n7XwoSh/T87OkuMU --> ssh-ed25519 bRHVVA 92Rj1gMmueSHWzxsKWVs+7nF4JzuekhfaB2u5AWnazk -yg4qa9lyHsGCOXWOTm7/XH9F8JzvRLjzsxyXe88oXnE --> ssh-ed25519 HgW9eA mpIFRqMXj08JuyYLf6Hx4p9fOLbxXZquSMAjh0e/lSU -h1kvwnu+mLOeRfVFUXgE9IDo/MQ+4gtkYwrF3JWQfwY ---- MCDm2NH5NWgwnFYQ+zJ4obfdxWpiv3BGohnIJ1bRkco -_Ö¹`ðãFËÉÑvF3[;œç197%»4¼90MÞ[ï¼Ip¢:Ÿs|ÈñC�RÃ6,CÔè÷;á[³;<§Éû¤b(´fqÀg8îp÷p÷ ÷Dk p/ÐwîÒ¿$9Ý\ \ No newline at end of file