diff --git a/flake.nix b/flake.nix index 7f747b2..e4d64c4 100644 --- a/flake.nix +++ b/flake.nix @@ -71,7 +71,12 @@ specialArgs = inputs; modules = [ ./hosts/vm/two ] ++ baseModules; }; + + vaultwarden = nixosSystem { + specialArgs = inputs; + modules = [ ./hosts/vm/vaultwarden ] ++ baseModules; }; + }; }; perSystem = diff --git a/hosts/vm/vaultwarden/default.nix b/hosts/vm/vaultwarden/default.nix new file mode 100644 index 0000000..18e2c6e --- /dev/null +++ b/hosts/vm/vaultwarden/default.nix @@ -0,0 +1,16 @@ +{ ... }: + +{ + imports = [ + ./hardware-configuration.nix + ./networking.nix + + ../../../modules + ../../../modules/services/vaultwarden.nix + ]; + + networking.hostName = "vaultwarden"; + boot.loader.grub.devices = [ "/dev/sda" ]; + + system.stateVersion = "24.05"; +} diff --git a/hosts/vm/vaultwarden/hardware-configuration.nix b/hosts/vm/vaultwarden/hardware-configuration.nix new file mode 100644 index 0000000..9b113d6 --- /dev/null +++ b/hosts/vm/vaultwarden/hardware-configuration.nix @@ -0,0 +1,32 @@ +# Do not modify this file! It was generated by ‘nixos-generate-config’ +# and may be overwritten by future invocations. Please make changes +# to /etc/nixos/configuration.nix instead. +{ config, lib, pkgs, modulesPath, ... }: + +{ + imports = + [ (modulesPath + "/profiles/qemu-guest.nix") + ]; + + boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "virtio_pci" "virtio_scsi" "sd_mod" "sr_mod" ]; + boot.initrd.kernelModules = [ ]; + boot.kernelModules = [ ]; + boot.extraModulePackages = [ ]; + + fileSystems."/" = + { device = "/dev/disk/by-uuid/c97aeccd-b88a-407e-a08d-f821a3f34936"; + fsType = "ext4"; + }; + + swapDevices = [ ]; + + # Enables DHCP on each ethernet and wireless interface. In case of scripted networking + # (the default) this is the recommended approach. When using systemd-networkd it's + # still possible to use this option, but it's recommended to use it in conjunction + # with explicit per-interface declarations with `networking.interfaces..useDHCP`. + networking.useDHCP = lib.mkDefault true; + # networking.interfaces.ens18.useDHCP = lib.mkDefault true; + # networking.interfaces.ens19.useDHCP = lib.mkDefault true; + + nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; +} diff --git a/hosts/vm/vaultwarden/networking.nix b/hosts/vm/vaultwarden/networking.nix new file mode 100644 index 0000000..5e870b4 --- /dev/null +++ b/hosts/vm/vaultwarden/networking.nix @@ -0,0 +1,53 @@ +{ ... }: + +{ + networking = { + interfaces = { + ens18 = { + + ipv4 = { + addresses = [{ + address = "172.16.10.159"; + prefixLength = 24; + }]; + }; + + ipv6 = { + addresses = [{ + address = "fd00::10:0:ff:fe01:5910"; + prefixLength = 64; + }]; + }; + + }; + + ens19 = { + + ipv4 = { + addresses = [{ + address = "172.16.3.159"; + prefixLength = 24; + }]; + routes = [{ + address = "0.0.0.0"; + via = "172.16.3.99"; + prefixLength = 0; + }]; + }; + + ipv6 = { + addresses = [{ + address = "2a0c:700:3::ff:fe01:5903"; + prefixLength = 64; + }]; + routes = [{ + address = "::"; + via = "2a0c:700:3::ff:fe00:9903"; + prefixLength = 0; + }]; + }; + + }; + }; + }; +} diff --git a/modules/crans/nullmailer.nix b/modules/crans/nullmailer.nix index 23bb4ef..fdc6aaa 100644 --- a/modules/crans/nullmailer.nix +++ b/modules/crans/nullmailer.nix @@ -4,6 +4,7 @@ services.nullmailer = { enable = true; + setSendmail = true; config = { remotes = '' smtp.adm.crans.org smtp diff --git a/modules/services/vaultwarden.nix b/modules/services/vaultwarden.nix new file mode 100644 index 0000000..4cb76a3 --- /dev/null +++ b/modules/services/vaultwarden.nix @@ -0,0 +1,46 @@ +{ config, lib, ... }: + +{ + imports = [ + ./nginx.nix + ]; + + age.secrets = { + env = { + file = ../../secrets/vaultwarden/env.age; + }; + }; + + services.vaultwarden = { + enable = true; + dbBackend = "postgresql"; + + environmentFile = config.age.secrets.env.path; + config = { + ROCKET_PORT = 8222; + SENDMAIL_COMMAND = "${config.security.wrapperDir}/sendmail"; + }; + }; + users.users.vaultwarden.extraGroups = [ "nullmailer" ]; + + systemd.services.vaultwarden = { + path = [ "/run/wrappers" ]; + serviceConfig = { + NoNewPrivileges = lib.mkForce false; + PrivateUsers = lib.mkForce false; + SystemCallFilter = lib.mkForce [ "@system-service" ]; + RestrictAddressFamilies = [ + "AF_LOCAL" + "AF_NETLINK" + ]; + ReadWritePaths = [ "/var/spool/nullmailer/" ]; + }; + }; + + services.nginx.virtualHosts."vaultwarden.crans.org" = { + locations."/" = { + proxyPass = "http://localhost:${toString config.services.vaultwarden.config.ROCKET_PORT}"; + proxyWebsockets = true; + }; + }; +} diff --git a/secrets.nix b/secrets.nix index b14e26f..b2665f4 100644 --- a/secrets.nix +++ b/secrets.nix @@ -6,7 +6,8 @@ let korenstin = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIh26Ejn/syhvReixauY8i85+XD8P9RRJrPQGEyAQ07l klin@nixos"; lyes = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHW62pK9A6E8pEwmSnTp6oKXac+bbOJ4VkPvNLa11No8 lyessaadi@crans.org"; lzebulon = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJRSBsRgd/ITK2An7q1VXoeDPbcydR3FkQjHoO+1tAAO lzebulon@archframe"; - pigeonmoelleux = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHa+ptSTNG4mnGUEGSkHTNDzyUGeiMnaWS2nDvJwrYTp ratcornu@skryre"; + pigeonmoelleux_0 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHa+ptSTNG4mnGUEGSkHTNDzyUGeiMnaWS2nDvJwrYTp ratcornu@skryre"; + pigeonmoelleux_1 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA41j5jdFj18OSHONx4QN9mMT+oBmtdwb1vstNavGOnz ratcornu@vrrtkin"; nounous = [ aeltheos_0 @@ -14,7 +15,8 @@ let korenstin lyes lzebulon - pigeonmoelleux + pigeonmoelleux_0 + pigeonmoelleux_1 ]; # Machines @@ -27,6 +29,7 @@ let redite = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOwfVmR3NjZf6qkDlTSiyo39Up5nSNUVW7jYDWXrY8Xr root@redite"; thot = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFKNg1b8ft1L55+joXQ/7Dt2QTOdkea8opTEnq4xrhPU root@thot"; two = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPpaGf8A+XWXBdNrs69RiC0qPbjPHdtkl31OjxrktmF6 root@nixos"; + vaultwarden = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICn6vfDlsZVU6TEWg9vTgq9+Fp3irHjytBTky7A4ErRM root@vaultwarden"; hosts = { inherit @@ -38,6 +41,7 @@ let redite thot two + vaultwarden ; }; @@ -50,6 +54,7 @@ let "redite" "thot" "two" + "vaultwarden" ]; # Groupes @@ -62,6 +67,7 @@ let neo thot two + vaultwarden ]; acme = [ @@ -105,11 +111,12 @@ in ) ) { } (remove "thot" hostnames) // builtins.mapAttrs (name: value: { publicKeys = value.publicKeys ++ nounous; }) { - "secrets/common/root.age".publicKeys = remove apprentix all; "secrets/apprentix/root.age".publicKeys = [ apprentix ]; + "secrets/common/root.age".publicKeys = remove apprentix all; "secrets/neo/appservice_irc_db_env.age".publicKeys = [ neo ]; "secrets/neo/coturn_auth_secret.age".publicKeys = [ neo ]; "secrets/neo/database_extra_config.age".publicKeys = [ neo ]; "secrets/neo/note_oidc_extra_config.age".publicKeys = [ neo ]; "secrets/neo/ldap_synapse_password.age".publicKeys = [ neo ]; + "secrets/vaultwarden/env.age".publicKeys = [ vaultwarden ]; } diff --git a/secrets/acme/env.age b/secrets/acme/env.age index 14cc6d0..35b0750 100644 --- a/secrets/acme/env.age +++ b/secrets/acme/env.age @@ -1,21 +1,22 @@ age-encryption.org/v1 --> ssh-ed25519 iTd7eA SOdizgV+LHwgOVZlLWlW0ywVXHEzmGjBTEAbpbSGBAs -4AO1uVgvA+jkpgKrdFZD0BIMRmxGbKavfYZdpgDh79c --> ssh-ed25519 /Gpyew Tl0BGQR5Y2gEVRT08vx0LOouwZgGeB8w51r8Opt2Mgg -tsmtuQPnV7LM1ZByAsVyDrRwl4TkwQ9qioHR0/dDraw --> piv-p256 ewCc3w A4seXIEIpFDXUUNnAgrnx4vYhbw3ii8lBg9SpWiGJLte -LInyfV4f0sPsJcK4qbzmPQBcyxFimDleNujC8sNSu0k --> piv-p256 6CL/Pw At0UITcGiU6NQ28t3wAHlStnvfuQNvRUg7lOluxRo+a4 -Tw7/nTlZjKVEwsAWrnsFZ61v4S2olIKsYyGbQC0GI7o --> ssh-ed25519 I2EdxQ bFTORPs47D3JQEXa1i1Zv6gm39Jbqh6UwrwWrYtuLnM -jX28nZJ3WbfC30eq1Q0VCSmrBbrm3Nog96aWrxAsI5s --> ssh-ed25519 J/iReg F+xTdDl1YK0XT5NMudO9Oz+tMrOU/CDX85NbTcMxPTs -rTFkioHgePRwCLeKhqeVGYewnxCcgl+05YM6re30WEo --> ssh-ed25519 GNhSGw cMADVhvNtNaMO/bKWpB9riONTiukhJqeNarPa+zuE18 -X2XeVei3FHNwHZ4q+MxYQHkQx4qgjtxVtwRdv1dFo7s --> ssh-ed25519 eXMAtA VjP7gBICaF5BeCYYt9wXhY0WEkEU1SfVvCrl5MmvhDY -s6x46ikGHX15DFuwjo/q3+Ldx/hFriUT9dZ4iVJyG7Q ---- NoHZglVeoiTggX8013Hj4PAlZVFkKOc1kAheXoT5QhE -iFE -dPU0;*1+8`fP1(FN~7/'tMb -Cen&Ux7C+S l4 i]ҙo3OQF>?S>$Fv-UGϯL*ڮbo>˴zeak ssh-ed25519 iTd7eA a8H1iSFJQ99fdY5aIyZoedRVuB66+pIpgw3doydu6FA +HRvZs07ovO1e34AsJbC9d2ybMqB/DjQGZlkEvdTUsBg +-> ssh-ed25519 /Gpyew hcs5lB9WNAV33HPEI/xwa0zWiR+2XE/8hHqB6BMQXSU +K+9qcpVXJFJdzKROYtegcBAPr6yx2J8kQp8SdXGp1oA +-> piv-p256 ewCc3w A2IOcgyuo9gjutoV70398qJMjEbiTeELmuIUkujshdxi +0filLXpTkxcN+puPhkngFBGe60mchnuEBEkB1kd3ySo +-> piv-p256 6CL/Pw A+0V9DCKaD3H8FECcIytIkQJ+xpFcy2ma+JBQLeYRXSJ +aZeNEaLTh3uEQvDkkBwDtg83aANDxoUnuP1EqCdTtZg +-> ssh-ed25519 I2EdxQ WtsOCvaqwhLG9eZTeTb9fAOnChQxdoH73/EQeQnWtmc +GRjvVMl01FRGLQ13BPtx78H2pqXmrx3l2bl/WUCLiSM +-> ssh-ed25519 J/iReg 310sd0jMY18VVcSs4tktB7zDvcEQYGQi4EL7+xAEy1I +/DfwBYxAWBIv4Qp3FHeYkOSqxzICFtmxSSvqPH7Plho +-> ssh-ed25519 GNhSGw liOl4P4Vm5ohFhgyeAggjuy1pazAn5QOdLJ3z0/6uQw +pkPOUwJ6ZFfvmxOPuDTLOy2T3FLTUHjb8LSKbxx5Mjo +-> ssh-ed25519 eXMAtA 99UxNpHUc/0mSB6P1cdaDl3T0eD+EpyWSGx7cMtXWUk +PHr3c/QmO677qku1MfmjA2UkLfl/JnE7tN+GQjbuhlY +-> ssh-ed25519 5hXocQ LhyO1Zawf/VcIFGVJ95mDmlRJqTQcWRNvFGD9zphPSM +2rD6RbsGNu2TSsTbkBgyAuLpoYsQQwwaROkszopMBfg +--- XqQJ6u0HrdjbuQ+kw1+B6xKQFaLR7rY3kIS890N6coA +1mp23 c(epGLaK/dKY,Y*n},kkkZ@lby?Ѓ.R;J j_{/ՃGtN)!>*$=lNpj /ڈ>0O!G1 5U&/av1H&=0jΐ \~)qot~ +ŶGy~$c(Cs&mhj?mR \ No newline at end of file diff --git a/secrets/apprentix/root.age b/secrets/apprentix/root.age index 24017e6..c88217e 100644 --- a/secrets/apprentix/root.age +++ b/secrets/apprentix/root.age @@ -1,17 +1,19 @@ age-encryption.org/v1 --> ssh-ed25519 cZNEGg uRRHS8/vsv+HdtnzBv030V6t4t+D83BTvbo+urA6KEE -3vyBxkv2OvKW2yxZicgTn7DB/5qHwNOKgrRl+EaEYyc --> piv-p256 ewCc3w A9gVVQvR4Z/GQKf7CAE6Y19sLs6YO1BNrIls5Hy2QUnp -CKjuobW9dTvAQ8m6k29Ft5vlyf1ukqEhsrbwkZLcFlc --> piv-p256 6CL/Pw A2bbIwJfcbIlsfR5tJZopMXQaWrYXTl4z3JrMWzYWNuq -9zcXc9usX7F2qaEasnQZzS0dqNg6UqrB4krvCzMRhzk --> ssh-ed25519 I2EdxQ y4c0Z4xxhJMXH2Ej2AXNyfRdowqqn7xDpKdMSE8K1G0 -FIByr72GUA6XcPtNIy58DPsI7RCyFO1MZrQjqgbFEFk --> ssh-ed25519 J/iReg 0IUi0nvIQ0EP+kYxIEw2B5WgY9vP0BIIw+xE/j+XaTU -1ovtzwIE13/etKz1mMT2slbq6ZJ1JpSoOHeIBphlgbU --> ssh-ed25519 GNhSGw gefnPCvWFMMRUdL6yXOG580b/pQxzqpqJ/5nsSsIAmI -zjIjQiO/1wjteJmkmPKP62zDyZJkbaievkV//dXiEGU --> ssh-ed25519 eXMAtA uKvtz/zyt2UCWuuzI3sQerCwjzU2+4bNawRCzFA4YBY -ezDyL9NgmIZuyX06Suc64viWNXVEImIU4kH2AH3lD74 ---- 0m8XP8zS+MqhBXxgykk1n3TvAFtwxcQmHm8lzl+8Nd4 -{3' ssh-ed25519 cZNEGg hx2K+BJ2BE5shiuYVL8lNDebSXOslE+D11wInEU5AC0 +/Voe2mVa0VBiowquOfiCqBwbsNWKlqJw19Rshncmb08 +-> piv-p256 ewCc3w Atur1opHkIZnyRdfVcSPmXJ6pnC8KRSoTDTgRdpXhQ0a +BeNHX/8DygcMRjv+BYCMJEbx+yUiiOz1yRQ4WdpCkEA +-> piv-p256 6CL/Pw An/25v/ZffNknCs1+Z9oUHEa9sltmBbaCGw5zGtPlS6X +Mp3IpX/1m45V1PVIxnh50hp4ymL3VjCnDZ9+n+pjoro +-> ssh-ed25519 I2EdxQ MFQL0HlTcYBeQe5W+cAegZNrtvYh67YfaeQk5lKBkxI +6YtFHaJBmdC05zaeCNRUEOx+XdAy/KSSJbIFDAjqk4I +-> ssh-ed25519 J/iReg pRxUVtZLA7OlkbjZPNJY+PcWBiwu0qOUymXTACmOGws +wLOQy84hbkdjSiqywOU+fAoZkUg84cdUP5mmehv1Les +-> ssh-ed25519 GNhSGw oSRxaxlY2LyuB5QBkfQ+vIpmI6uFCCi2l4IqPrQxWgk +ePpTSXekzXDwSUZj6drtsvlnaKxPjgu+j5afvNsKbQk +-> ssh-ed25519 eXMAtA v6zL1bc8aR2fgESNZcmTtGPk5pjVj0UGiBd3SjqGLzc +amsA5x2C5dQBzqL1uu6popDmDkKEhm4WPeK0J361vNQ +-> ssh-ed25519 5hXocQ DPduJx7pfwr8FqMTXEPq3zXBhyElZTj3Ouy0d3S8RnI +m8K+tCRbGmnf6IkkPAa+scmGmiEy8QAvJppj0lvHYXs +--- Oelwm56/V9NDvorDKW+xqISHYjsqEs6HG/pYf5qTX94 +Ğuŕ{ %i[V4kX+d 'B<{h%P)m=`Է^I \ No newline at end of file diff --git a/secrets/common/root.age b/secrets/common/root.age index b518bc7..b00783c 100644 --- a/secrets/common/root.age +++ b/secrets/common/root.age @@ -1,27 +1,31 @@ age-encryption.org/v1 --> ssh-ed25519 2k5NOg 4z9gZoi1nI43RZpsVo7kSb60CU66nu4Oo7s56cJ2Ixw -2q2Mrknk2dV08G1otHSuw1urEGMN1M1hYcyNiG3QnK0 --> ssh-ed25519 iTd7eA 0P+Sf77RiouUH+iNfs5pF5sZfv70ftHEG/4yte37XDU -GH8m8byRAvhejFmuz+w54voA+eJ+0Yar81Rn3gIgVP8 --> ssh-ed25519 h5sWQA /yEbgYKBMYORahR8QJGvij38L6ZrrqI++r2qhYeXTHA -Z3BtpgpPEpUD1KGSHtiG5CmtirZ1A7DQO3td3Oqo1NU --> ssh-ed25519 /Gpyew LARrYViDn0gY+btUSfjHXViDuZYNjTpUAuNJbW94CG0 -cwWydv5Rw2uN68FyHl5lM0eQDGdynTZWlpI6pAF8g9k --> ssh-ed25519 LAIH1A B8ZLqzCOcwoyMo6b1MmKSkFjmv6FMaf4CDE4SzSCoBU -50XcmcQTqvucREZsnQ4HeYPdARQ866jNWoR345DbDpg --> ssh-ed25519 qeMkwQ 2LiFHYAkXJEOfztrmBHvLgoXfJ/HPaJU7nvgp+ZDSl0 -zozvn+kuZjgItEKs2oiRQIaUJxudwxaVJVp0nUyS5dA --> piv-p256 ewCc3w AuQP+ivA9YK07EYYFfnQiIhvNNmvu+qsuVR9Yt2XWg9F -BNyG1dQGq8w9+DB3oh3SnK5mLh8u1mfYMMJwVKHhs2Y --> piv-p256 6CL/Pw Ak+XUKxT5yuugIxtyU+8uUKvtkCXRK0zBtThXF6IFvnt -qmLMR1Re66JDre17cKRLGH2OwnT/jivdTrQbg1p3y08 --> ssh-ed25519 I2EdxQ 2u4egDAtDBD7KsrRvlHLQzgUf7EHGVBs+5cM4lUgMFY -mFP/mmBctYOXk2cEwJl/0O4+LLp2U99Uz3Ttk+wWHr4 --> ssh-ed25519 J/iReg ciRprevMRTpyfJY6rvXEhawpSnG2MhoCHA8fp3wARlU -qt8UKsjg+m9FFl0Ke3+s/D4dPjT9OvUtM0WqbPJ2y+8 --> ssh-ed25519 GNhSGw 4C56O7f1cEtNH7vhArrY0/gUCIGenVy1c/g+iY5JdBc -McTWwmOr0JvZ241sW2dkTiLNJLqDnghdarxxA6Bi2i0 --> ssh-ed25519 eXMAtA X33iEIce1PKaJyhCmezY6QvUfVHCcy6cNCJ9MoRkRzs -afNufk0j4RD6qzhXAE+QypiTKjon/+SwetBKJDpBGFM ---- YH0BJ2SPwVZOJOiAWayJzajKmIRcGHH3DGK9Bdegrzs -p8 PveBK\|*DPiytj9T>IRL+"!Y3"(/w \ No newline at end of file +-> ssh-ed25519 2k5NOg YmbPaKvtfcfoBEHw3yNp5vhE+XVzUprbyBK0MDmmeD8 +SRKPmndyQT/dCl+b8Cvu5Vh2VOlpMd3x6Vvw0uO4iOQ +-> ssh-ed25519 iTd7eA 3Rue4QGiodPqjeTKKM0qN88HKwCWkmwBMWkNjA/7TmA +Uk3I820rcpL5YlqcFkL6zdnNNoanI0qDi+mhMXKVxuE +-> ssh-ed25519 h5sWQA 9zcxhz4bEox4G2dSRcXoQkPpwY54LT8ZVpSpvlsbgig +u7gerFg6oEW3AbJs+fBbpZhFlPTsEjU2J2pzuYTQXpk +-> ssh-ed25519 /Gpyew ECbV0DgETfbvF+Q1SrjJlELMszd9jYr/531fnwhR0hY +WNpIJes+t7AAaMoy/w0VY+ZMlL3cdpYmn6+MN0H+FKY +-> ssh-ed25519 LAIH1A hGk2swRwo3+RfgA7YEBTTBGjQfsCLomVsbibWSYDsWY +s24C/xWNaCDyaLmjCGs6jDranUM7oUDioHKphihr+qY +-> ssh-ed25519 qeMkwQ 8awNaR9XeQkvpI6myrt4Vw8Zf+rMTEp3GlviMrVnd1w +WlhYTdfgQ4SRfLJ8JwudQXboOftvVV1xKrf50JXMe1k +-> ssh-ed25519 TqxOLw dZt5AZcQquKWFaqw7ukmQvwDyTdXhgdEE/8vZste+1k +Oxl2ZWb35uDpaoMFQPtJAmjzozNsCaMxYpj3jvJXAik +-> piv-p256 ewCc3w A8A3ROxMWx9TqoJOizACq7Nn/lhZKM17X66+2B8YQzUE +KdlLlekWwdJEH/wEXm5HciAtjkS5cxYmUWkej7TLbX4 +-> piv-p256 6CL/Pw AiOTq8eaVT1xRTHPTyNe4AMlh3vIsbci8YjTr3pwMU97 +n9BKSF3ErIkUVCQi/7IXovV28vj7EbZw5Y89EHYEc7A +-> ssh-ed25519 I2EdxQ iucWeurkE6h5oi0abTGcX6ARNczx5UAGDJ60TetbXxU +P5af2OXIgjrXs2NxZ0Uqn2n907oAl4eXcAl3GyS5l24 +-> ssh-ed25519 J/iReg RHmuEjgm8BkXSmY/CSm79tBAEVKr1DAco89zCDqgJDo +xeZiAiICN9y9jdPpeV5HnksRnmZCDS6bp5bOlhIqRQM +-> ssh-ed25519 GNhSGw uRhFkAlkmpm8fjaPYHCj3zrnauItBnZSKvBDhiacmEE +UXkvpqB6yIvtafeyb3eLuemR2rdkzm7ZkxRBuZ5vm9k +-> ssh-ed25519 eXMAtA BbFvjDyTd4tjqqECd5syWrpO7b5SDdYBmGGzJI5A9X8 +5wDNuBCpFsW02tBO2QvSrRs0MKUgmRgqCfuTxaovoC0 +-> ssh-ed25519 5hXocQ 7JpeboYqxK/xmrqw6YZzzFnutiM4OonHjN3bm1UIG3w +lux99mMAaHuu1Yzrty8Q7D3jPYgZHWhcP3WOYth1sLo +--- /CcrdzDPefk+EA7YxAtJ4cPesIFb6RZy50kDV2FTU7o +'aJ9ѓKhDJW$+| %Ԩ)Nny@FEjx \ No newline at end of file diff --git a/secrets/neo/appservice_irc_db_env.age b/secrets/neo/appservice_irc_db_env.age index 2b54a13..61087d3 100644 Binary files a/secrets/neo/appservice_irc_db_env.age and b/secrets/neo/appservice_irc_db_env.age differ diff --git a/secrets/neo/coturn_auth_secret.age b/secrets/neo/coturn_auth_secret.age index a3b608c..2ac1e90 100644 Binary files a/secrets/neo/coturn_auth_secret.age and b/secrets/neo/coturn_auth_secret.age differ diff --git a/secrets/neo/database_extra_config.age b/secrets/neo/database_extra_config.age index 3297a97..cbdd4cb 100644 Binary files a/secrets/neo/database_extra_config.age and b/secrets/neo/database_extra_config.age differ diff --git a/secrets/neo/ldap_synapse_password.age b/secrets/neo/ldap_synapse_password.age index d1b0851..a9b10a6 100644 --- a/secrets/neo/ldap_synapse_password.age +++ b/secrets/neo/ldap_synapse_password.age @@ -1,11 +1,19 @@ age-encryption.org/v1 --> ssh-ed25519 /Gpyew GGtk6DYlauerByL2ia9uqYRRnwqwn+oeZZUfRpDzhh8 -OJ0qDoPCz5FXCXDOHJyGlcYhBRvMPIyrDuTXVR6pYiE --> ssh-ed25519 I2EdxQ rHELcLTEsfu0sL3Aw2c290Zf9EmdOIO5gmhLS6lRMiU -AKX6RMwbLn3J1IKsjSTfxn0u/XlT0W76JKXfcfMCkqc --> ssh-ed25519 GNhSGw LPx7cnjBfMcDwZ4hqfP6y++D2FVtlYbzMxfVkfF86hY -QjXtb0IX9wtvCw1ms4A+kG4Nx6URhIT9e2nzyRSpI0U --> ssh-ed25519 eXMAtA sB1Ew2t6yjQoYW6OpH/bFCo5PO+a23nF/OrCrl9d+iY -73LkKS8y0bYR+hGPVjHxHc6VDZ5mscAMPfLwS+a0slo ---- B5T496c9WhW9A7EzOhy7vshIjNFgTr/kfW1mi5Cc5fc -MZϖD7Up{Z~*Xѐ \ No newline at end of file +-> ssh-ed25519 /Gpyew 8DFDxGaZWao+vO9qxc7f5O477lK7RnGI1RDBIxySpz8 +TKZsz+XOy3O7Ev8Uel7RzQw53eTPe8/6IltBLCx7dDI +-> piv-p256 ewCc3w AuDjekUccsQysWccrX2KIlqqSy482h9dmBM+N2599B6s +X3ZD4NEdRmIVtNNHUtMcpWsa7Z6gSSxfNjMbQfdw5VE +-> piv-p256 6CL/Pw AmuREh4r0wVcpltIZjXTI4LqmHz6bKMCJk3FOPShnwBP +q6es8bKoU9dXIWegdY8418Nq9QLjEf4Xmn4RUMozV1U +-> ssh-ed25519 I2EdxQ 0hXF3v4y5kSEZdR4eg/TZbcRjHQMyT3iu7ucYoBm/FE +aj/i/gRRPMdOFG0urrG5bcT6NGgXQ0IdT4IUoLhLrHo +-> ssh-ed25519 J/iReg K9SLwdDMWuUpyRM26ysJHATmVk8rsfi90NZ8Z+h5XnM +0yQ+b1augkDHdCVWPI9uvq1IzgOBwQ23S/Fp54lVce0 +-> ssh-ed25519 GNhSGw 0/k4x4mxXWKyqhwg2LeFIau8Zdx0ebPPYWfcppGEfUo +njIid8JCI+41KyhIzQTj4T4DKmQ2GxRRrN6P1U6ywFc +-> ssh-ed25519 eXMAtA m9yyWKx2xE55CHRgeEyTrft3dZUkJjmWdZh+M1Nf73g +97B5ztSgE1BXzNDnu0ZM+oowj8wEkxWYoiNEs5qXhGs +-> ssh-ed25519 5hXocQ 1Z8OfB3R7un6+JGu4MeBe2lzvf4kIRS8L1TUJ1JAygM +GmkDdKbrUgaF1aOYKRJCFTC4gIdvoYzmIhGoHbOWOW4 +--- 9wriBEhA/Kil1/4DRfn0Lj8KXVxU01JOtzdY34HkP1I +Qʋ;qz[ ssh-ed25519 iTd7eA ktPtHZZ/+e2knf7YT58/ejjo4yqOerXJQ14JfU9ILBQ -NUJFutka+8RGBXsW/gn+y2zS68D6yHJo8KqjLjwfDq4 --> piv-p256 ewCc3w A2IoLrli9N3qyiZvxKQLZg/LXIS2OqtoDKyeAbGPb+us -tmNIdJqzDAuNCQkl2Jq3u5amzYpfePJotzn2vzc/mAw --> piv-p256 6CL/Pw ArfivG/h3oKHEhIFlE073h1XppcVmWjsv3U+zB56j8Db -jxqzWk0I8/om/lrduJzTTL7rnNcX6nLFZLP56yVx1Uk --> ssh-ed25519 I2EdxQ Do2vvD+CNF7MDtZiYyIHILuGlGJWE7+cPKU+5qd0nBM -LdsMG37dzisNjfZ/Fduuckc0GC0jSfbD3rlmSUBKGi4 --> ssh-ed25519 J/iReg ulKX+/TFErYoLbdfUoqFDFw89yKCHTnJsvAVXoVN6EQ -3+9rqrAt1nqDrNJzAHU+NU/b+0sLJxTovSDa0tPBda0 --> ssh-ed25519 GNhSGw GevFYiD6G0GG+Vvnsbb7xZ5T+ysZwJ7ZRTDcjMCe500 -tsG1aNZdpxdnVhpbV9atHptidXZ8dvLI6ht7SlEWDT4 --> ssh-ed25519 eXMAtA 2Ebl9bg/Nt+m3M+TyoXIH43tfliZQ7kroGf2QOnyaVE -Zng4Ci0raemfl2xjK1dPd8uxlvX3Qd/ycI4f1DoJfiE ---- WNg4DqhbLUxAUSRgmbA2JrOhHKSUk09U7OQFN6g9mPg -Es {fKdr@qX \)H5e?LG)5_In=I=LHI)Y~FP^i5ޠ.#O&#v)(hA =_6'cGrXn \ No newline at end of file +-> ssh-ed25519 iTd7eA uRrBI9CzlE7xB9xZzh2tR9rhhcO8ECV0vcutdGUVxC8 +yap+Mg5Ym0Yo1H0+TKDaojKzmnoNofHqVrYK9gbkSyA +-> piv-p256 ewCc3w Ay7iGAUKVd0RFNHOkZ+SiBWBd1PIwCOVkcQ8EcLdfjcT +M+rII7rd/Nj+aE7NGNKM4zbEAkBpaWMwrSd3YDVCjPU +-> piv-p256 6CL/Pw A8UmdQQuWgttNdgGh08IF6AnNmbeK1KTqQ4ln1ER7xm8 +mTSK68h8V7vRoRMHAg4rC+V7oUXZ5IDjvjUW1jUIMl8 +-> ssh-ed25519 I2EdxQ rN6TtZQJJp5cQkE5ZMwWJs2+bWUSbEp38hlJZlzMUAo +a87eqROq47yNH6f7g+ZZ4THNgzvV5qqDoIkc9fik0wE +-> ssh-ed25519 J/iReg DhQaCrBS1lQGFOOnLg2rICE7uPw+9/nJV52Xu7EydQM +YN11U8v11KH8CjYjQv9EqphNlxCUohqn4IqUWRCechQ +-> ssh-ed25519 GNhSGw +CauAMGluNGn7ghPdeY/JgeTyWNIxITvL6daUdRw+hY +XgVJiyzDjltfSSdelUSoueHZASUHDEf3r0ch4tMLKj8 +-> ssh-ed25519 eXMAtA B4H6SVG3mYZZ+RrOXXo/DEB19XRWiGuHLb7mZ8ATghI +3puinvyt1PmZKZRHCFbQUxg1czzSLaKgfbIdUPOp/mk +-> ssh-ed25519 5hXocQ 4ag4hWaM6nah0wb7QhdyIQYvQ2Czp+AC0WYI//k6NHw +XXcsQk+CJYhhKu9JeNf9IXlh/pfUmF3LWpw2JGhUA14 +--- h6qtHaw3GwCzXMMRBBeq5nbhrCuCC2IloLHM/10OQaE +uQ:mw Is#u ;R{JN&m%d@ș gk` qhKϪ/Y/]܂&sF^K3sEn +d` ssh-ed25519 h5sWQA /nZh6IZdBtv3woGAynnhXZXtNfKDODEoYCpVmHHhmyg -/UN8RBQr+0Wu5rPzFosqsmmiAAj8Etqx4eyzhLzcQ5g --> piv-p256 ewCc3w A8r4CYBN30fKpvBBaWomaepl0fxZwpUajIh0+BAmwjko -P/qLiF22BlrNlkT2EsxXCBBh6al8OaTtL6IVHHmeemU --> piv-p256 6CL/Pw A9H4fgwM3EmBo50xdWhNuWOnJjFFMigtrBQ4a0Rvx8N4 -jes6k2hlyuX5Ech5qTiChseaVI3YIzXG3p3UpWHylB8 --> ssh-ed25519 I2EdxQ LPJmQ47OOrMu88w16HV3GsJTpTcoG1Ug27BRCMrWSCw -OLgC8l7K9qOV5QA27uzPFIgMd+Ho2L/WyIUYCZEam4w --> ssh-ed25519 J/iReg 911LIrz86R1AWVKra7YkM3YwWKSOgkNHtFAgDNRYWB0 -J6DWXqaDVN3Z1LVo7LgqpjjBVjR2L2P1TZULu1FMeo8 --> ssh-ed25519 GNhSGw MQk3YSEF9jJjgH0M49LhlJzvcqdbBU2aqVpnxeJeZ2A -c6xqYIkdFIAx/wqAEeIoR3GrHsmReSDbzt9jtRPKsMs --> ssh-ed25519 eXMAtA KvWo6kdZcf3pjDZXTPXhHsGPrzE+wVai15ZT7tjia1U -be3K3ljtE1l/AAQ79l6D50SRJvLmVsT5lfY901Zyej0 ---- zfk/PCQfQSmHRlvwG50i/sHtPD5MXBuFfIKmPH6sbiM -W1O2_ݲ# c\SX *Z}Y-Y'䷺3 " kcU;Vnřm(5ȓ - 0n%hZj9O;Ch6QcgoTfDc \ No newline at end of file +-> ssh-ed25519 h5sWQA UVA54f4ih1Y7DeHl8JaR5xx4aNZmYSWBH3rSDVx+V30 +9DkQJ8hh6vLIzHy1Jh7evdTC0IxJfZ8h5Dna95mhGdM +-> piv-p256 ewCc3w AnSKSHNZoIlAOaJ8yuHASConbMyE5Xe9pYBRZTH1Bmpp +tDvSbnzs1MmYGD2ADjrPcQ2/CnYbgFKAFgx+LCwSKwg +-> piv-p256 6CL/Pw Akuc2AE0t7UEi2cc7MKsELdEJI9j1HArytxKs8ALhhkF +CtYo5aBfkeUEdeB8WtD6+aJntmUOLgV3c0YqiIa7mqc +-> ssh-ed25519 I2EdxQ vHAuEyr61iU2FNZ0a7qoGxMrdwhTsxyJY5md5decugs +XeUhYGi/sPLQ1S60TL752+w0A4esESNwa9nb3dyy6T8 +-> ssh-ed25519 J/iReg ukrGz/sElgVRVYZezBP9zbK85owb+6SieNmx2+6LQUE +cal2YERpuidS4flDyOd0p/wendfr2RNPtTP9MXxAxtM +-> ssh-ed25519 GNhSGw BndztlGUOHgsxE5gpUZXjipFnKijFm9C6iu4MZGymFo +hD3xvuydadnbTClB/Oe48zyLXgk21fYdSPlLiZIG7TM +-> ssh-ed25519 eXMAtA dM6ndCAczkhAmvKTP/ZKPN8hvun6VQdzZbDfJ5VApWo +REcIqzrOHyO/Rloldxvxp2y1kTk/nKrD1WPDFrX78nw +-> ssh-ed25519 5hXocQ QW1soBQzuSD0UyTagoTswDdLi0Clw8YUV41wvGtIpDs +z4YXC79z4YoJrOq3HRISGWotcoq/6bR99dKd/PimHlQ +--- i2Rl65MgbXq5oGglcGefPDQ6yWdi6+Nl4/SYTCvYZq8 + zl[={ +:ȏ3@HcAhpgdߌ̲ptn#E:!dA'X?<ڶdl&ʂ ]+A9䗜hp. 5 ~b \ No newline at end of file diff --git a/secrets/restic/neo/base-password.age b/secrets/restic/neo/base-password.age index 15a51e3..d445971 100644 Binary files a/secrets/restic/neo/base-password.age and b/secrets/restic/neo/base-password.age differ diff --git a/secrets/restic/neo/base-repo.age b/secrets/restic/neo/base-repo.age index c17d4f1..ef64cac 100644 Binary files a/secrets/restic/neo/base-repo.age and b/secrets/restic/neo/base-repo.age differ diff --git a/secrets/restic/redite/base-password.age b/secrets/restic/redite/base-password.age index b83837c..35d1b35 100644 Binary files a/secrets/restic/redite/base-password.age and b/secrets/restic/redite/base-password.age differ diff --git a/secrets/restic/redite/base-repo.age b/secrets/restic/redite/base-repo.age index 2f4c341..2f072c6 100644 Binary files a/secrets/restic/redite/base-repo.age and b/secrets/restic/redite/base-repo.age differ diff --git a/secrets/restic/two/base-password.age b/secrets/restic/two/base-password.age index 0483dd6..a50a037 100644 --- a/secrets/restic/two/base-password.age +++ b/secrets/restic/two/base-password.age @@ -1,19 +1,21 @@ age-encryption.org/v1 --> ssh-ed25519 qeMkwQ rHm8PBJzgu5JUR8LDwtfYKC1G9nNTp/RDhBwcE3gpX4 -bffg24UPtdd592oqZmRE5vBeLOawd06Ly1oQpPFWV54 --> piv-p256 ewCc3w AqnnaM/0jDUtsn5Pd2kOwNYccVX3qwh/fC9c2Xkn9oM6 -RZcY6yFcGTR5OkUFJ7NXHNZkfP2gHwixfR2jD8j6F7U --> piv-p256 6CL/Pw A/wYBpm+pSebrFJQaHAi6s160F6q66ZqNv4U0CPF/rqm -uyfoXqTdchDgdWLTtxiyr2GT9coVTcY0TodoPAXtOEY --> ssh-ed25519 I2EdxQ a0dWSVEUmhLbJ2kfXjvjDvRMtuCtRktm2m1pbTQpgzE -M3EgtQZw7Nyg/KfuD8R+Txji3PO/vQA2EtnXe25sHKw --> ssh-ed25519 J/iReg eoIguFRQZYm6dEUzz+BhblhT+e/auOZD8Sia/h6/yw8 -SFPkrWh++D7drO68mYpTSdYuarXtxuba4/ExYyjTcJw --> ssh-ed25519 GNhSGw +WPoU/HXAEyMS6IfdjhwX/GvoQMLxRyNKkpeN3tgu2U -gWP4dU+yBPsc01w4ORdjelYZGm8yQ9ad+4odR8zv7Cc --> ssh-ed25519 eXMAtA geKWTCA1dU7CyiQFpuILO0zuppQLpgL9ckTuj3f2IUc -3z/xc0qlMttG/bMY7C+W3cEB1AQCkunbTExhU0V4QFA ---- oBKJY7LxTDs/My0AHe1ctI8ZXl0ns/AoCdCpEJq3/aU -<:*oS[nl L2$77yB;a/roTT"}B -0>jDL~Ā5(a(UvRrqCԹ5Z(Xs=2ۏ"i(Ju{\W /Nݯ/{{igǛ7Fg[ Pv#)ɔzQu\ 47w3zcÝrRQ' -v6VUƣ1[3- \ No newline at end of file +-> ssh-ed25519 qeMkwQ lhh6bd23FH3Hn404o9sJl+KImq+RXNRZFqPKJcZQ7GI +S2BQK34VYZGSSeKOqelBfcKxB0HbxK9ewRexg/PE36M +-> piv-p256 ewCc3w Am4uoXzdmiXDC+qZJVVZNc/FrN59U33cUi2D9+9mAI79 +oFKbEIomM3OfoPDIqRI8I1tAfN4bgfQOMgoZJp2OZvg +-> piv-p256 6CL/Pw AnSOSCc21ekFkc5p7W8fBOciNqfBn+wbn5KHVndgNjdV +EWq20DFhf9b1Cf7ARSSMrndiMcE3DinSNfeR5Uu+KLY +-> ssh-ed25519 I2EdxQ jrt85s0g6aCA/gs+UCzcV7Pkt703Fs145MPfus8P7Cg +GmBwegl6mmT1WOSMVzpH+V0mXPdW0aC76SSVPGGHBIk +-> ssh-ed25519 J/iReg 7Z2Ttvl8MDnwELutnNJUtMSe+DK7VhrDEtwmBTaI72M +PPEXp8cT0MfViIxP6TZX4NaIbU/cncfmRVx+/gP2ztg +-> ssh-ed25519 GNhSGw ET5WTttkMHIjv3P3c/PFDv0GJyf8SjanS3hLHsu9QVM +6FolJs4qL+NPlTRQzSJXt6PucFfZBAWqa32tD627IuY +-> ssh-ed25519 eXMAtA lMbetQOb1LaoGTgTOyM5VBiOZkKY9VI2roJVkTxwXSc +G07M8nFdtHrSHSBMBWDFPcGbBEVn1qWO8xHIV38YBXs +-> ssh-ed25519 5hXocQ SrxklvHG54MV6CbAvAiW28oTkj4XZmeAWipOwtvz6Gs +XdO/tq4NzjOg6GJ8nzKzxY1SvCbFxpfVtOs6hrXexuo +--- 12HUkojZ27/Vd1c/fWLlS6dS2uljdEMAt5tf9KfpRwg +QFW7@r(UXCGUWK6伯YL40.Gb%#vg3RYtSCoIRJʡH~FC/|%/i+CAG|/N6 +2ddK.+Ã{lؙýxSI6xs +cKdxl)Is/`Pl;@zE{==K?;?4_4sZ Ǻ^7$tjCFt1,-/A *;~A|n] |p \ No newline at end of file diff --git a/secrets/restic/two/base-repo.age b/secrets/restic/two/base-repo.age index b45143f..e010244 100644 Binary files a/secrets/restic/two/base-repo.age and b/secrets/restic/two/base-repo.age differ diff --git a/secrets/restic/vaultwarden/base-password.age b/secrets/restic/vaultwarden/base-password.age new file mode 100644 index 0000000..e2d9fc1 --- /dev/null +++ b/secrets/restic/vaultwarden/base-password.age @@ -0,0 +1,20 @@ +age-encryption.org/v1 +-> ssh-ed25519 TqxOLw iMZuXgSnnXmHDKBBHs6YPXEMwwtcdgsaihjpkAPYrjE +edSt34wE2HHRBMXZu/gv4SKPR7KxN0T039MLh4Yipzo +-> piv-p256 ewCc3w AgstvDL5bs/UZvT4HHn9NQNgn8VHJX/g0cq69BiYzaZl +I8EWzc2Hw+Z+TuWE+HCWZs6LtWnUWAmC+s7rriuG9yE +-> piv-p256 6CL/Pw A/dNpmMfuyBthJeCAg8MIc4u0qev7jHYTzDrr/OytM86 +ewf4X9yh8H0+2gdE1RE20icim06ciA437VYt09X5Gds +-> ssh-ed25519 I2EdxQ 92jZgegjMYyFuwK5qMyWsKzOVWqlRbFKDDeRMqmPd1M +nLIlUmuwg9kVNmVSADfUNMm7ZQ6PeXzfYMh18pTYjM4 +-> ssh-ed25519 J/iReg ziY2ocNtOSVf0OwEOPmSrAgDBl6Nm4rKSnntwCNBTwk +biIVFJQUtFziGoYfv0OBuz4YFHeO864s9i3DgdVO7p8 +-> ssh-ed25519 GNhSGw 7tQP3WezCBNCl3fsU8Q6/6giMy4R9YNc4DeIxSVOMkw +iXzpCxQXMIhlBeFsS7nnCUzIAcDtMpZ5TX7cVnoe/Pw +-> ssh-ed25519 eXMAtA D9Bl7uaTXNMaGXI19ATvz3k439LWkZ928t6ovGENAnQ +qZKqimQZca7NmCIHQ/SNlMk+8zQBXxmYCCHc4e44sT0 +-> ssh-ed25519 5hXocQ 51yTklDMwqzYYhl9WzlRX+uWM/er864bswT0OVX/jHQ +MUgoD/ItyXk+gNZp/KuHvT+Jax4YodDfwPsQB2Nr+rQ +--- TJoILZK3ZOfiH8yEMEP4iTUzdbQc9u5XXAu0YI9R9Ms +e _8=a]=xxq6[;4ub~caۆG"|հP%gKwt:cm]v& vST TW!Tk:?g^ֆAe ^W[Û?.aQqLH~IBrɡ%Gvu!AcmH 9AW;Pgo 4#鎭1٭Uc@WR.)\l&U%F&ЇyyW1FL> +nhm8(1ap䈝-oe1|WS \ No newline at end of file diff --git a/secrets/restic/vaultwarden/base-repo.age b/secrets/restic/vaultwarden/base-repo.age new file mode 100644 index 0000000..875d74a --- /dev/null +++ b/secrets/restic/vaultwarden/base-repo.age @@ -0,0 +1,19 @@ +age-encryption.org/v1 +-> ssh-ed25519 TqxOLw TPSKklkAk6ieiAFWi0KDVGsJfY1olwbogFtFTZm6pnM +W4q+4ouL0aPrbQv7fL9pNkJCCxDOffQ1NwQ9g7qtX6U +-> piv-p256 ewCc3w Aill1yMo1Nx4JRj2i1n+RKMej69N53gqYtqRmh27wFi0 +hv7NLBpq4p1nBC14BvH3Wp19NF8nSw3OGQREkZWLw0c +-> piv-p256 6CL/Pw AoO81MY44pgb0PqsvNwvOF07RXKMb969VfL+bFgPas8r +5BZoU3SGWB9DpDQ3NYbMPIj/Y/+Y23VzzW7ZRibG6s4 +-> ssh-ed25519 I2EdxQ /3QOTzDfiXNDu6skJ+xbSm5tAbFAs1kDPRPT8lTsijI +k090fLhAIDW499LG1QBRTrn4C9iZusnq4dlnr2uMH68 +-> ssh-ed25519 J/iReg qVBLoJXL5JdrDXsBUlgx2Fo9N7yC0IuV43wbjnQy51M +JvkncBSQfqAEw9Rv+S/98sqLbjX2y06rBLcJEViPwRY +-> ssh-ed25519 GNhSGw YYfpQPqyFnyGKIR0pH8c0frRSnPrsA7h9PDn+MJ/qGs +i3CuTwxcIrwIyiHmM6RsF6wWEKBZEZBzETRcHqFZS14 +-> ssh-ed25519 eXMAtA 2oXrZNY0qi8hxK8oJFFdHBI3Bvoc3Y8ElV+CvqpMZHU +pc8r6mihvCIl1kJIZjioM9Wd15L7SAuHfubewB89oOA +-> ssh-ed25519 5hXocQ ql5ccRa7uG+qeWlzzV8IbNM6kKTB+MikuqRq/KV0kUQ +XjC1V1dsBlu8dGUx/hEGOPnJkFFGx1/vfkm417SqE9I +--- C2trdYb263gv5x7o1lsNtXJInIVr/WWhuHfH8XNQxqU +!+v64%^y3f39gׄuhE1hJqn-7fxVuDAEʣv;:.HZëq/y:9jP}@RtN8tRށYw'ui]\#1 \ No newline at end of file diff --git a/secrets/vaultwarden/env.age b/secrets/vaultwarden/env.age new file mode 100644 index 0000000..d2d5d0e Binary files /dev/null and b/secrets/vaultwarden/env.age differ