Ajout configuration nextcloud

flake.nix

@@ -57,6 +57,11 @@
               modules = [ ./hosts/vm/neo ] ++ baseModules;
             };
 
+            nextcloud = nixosSystem {
+              specialArgs = inputs;
+              modules = [ ./hosts/vm/nextcloud ] ++ baseModules;
+            };
+
             redite = nixosSystem {
               specialArgs = inputs;
               modules = [ ./hosts/vm/redite ] ++ baseModules;

hosts/vm/nextcloud/default.nix

@@ -0,0 +1,16 @@
+{ ... }:
+
+{
+  imports = [
+    ./hardware-configuration.nix
+    ./networking.nix
+
+    ../../../modules
+    ../../../modules/services/nextcloud.nix
+  ];
+
+  networking.hostName = "nextcloud";
+  boot.loader.grub.devices = [ "/dev/sda" ];
+
+  system.stateVersion = "25.05";
+}

hosts/vm/nextcloud/hardware-configuration.nix

@@ -0,0 +1,46 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{
+  config,
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}:
+
+{
+  imports = [
+    (modulesPath + "/profiles/qemu-guest.nix")
+  ];
+
+  boot.initrd.availableKernelModules = [
+    "ata_piix"
+    "uhci_hcd"
+    "virtio_pci"
+    "virtio_scsi"
+    "sd_mod"
+    "sr_mod"
+  ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" = {
+    device = "/dev/disk/by-uuid/342946cf-cf7c-411e-9e8f-876ac18aa443";
+    fsType = "ext4";
+  };
+
+  swapDevices = [ ];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.ens18.useDHCP = lib.mkDefault true;
+  # networking.interfaces.ens19.useDHCP = lib.mkDefault true;
+  # networking.interfaces.ens20.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+}

hosts/vm/nextcloud/networking.nix

@@ -0,0 +1,81 @@
+{ ... }:
+
+{
+  networking = {
+    interfaces = {
+      ens18 = {
+        ipv4 = {
+          addresses = [
+            {
+              address = "172.16.10.146";
+              prefixLength = 24;
+            }
+          ];
+        };
+
+        ipv6 = {
+          addresses = [
+            {
+              address = "fd00::10:0:ff:fe01:4610";
+              prefixLength = 64;
+            }
+          ];
+        };
+      };
+
+      ens19 = {
+        ipv4 = {
+          addresses = [
+            {
+              address = "172.16.3.146";
+              prefixLength = 24;
+            }
+          ];
+          routes = [
+            {
+              address = "0.0.0.0";
+              via = "172.16.3.99";
+              prefixLength = 0;
+            }
+          ];
+        };
+
+        ipv6 = {
+          addresses = [
+            {
+              address = "2a0c:700:3::ff:fe01:4603";
+              prefixLength = 64;
+            }
+          ];
+          routes = [
+            {
+              address = "::";
+              via = "2a0c:700:3::ff:fe00:9903";
+              prefixLength = 0;
+            }
+          ];
+        };
+      };
+
+      ens20 = {
+        ipv4 = {
+          addresses = [
+            {
+              address = "172.16.4.146";
+              prefixLength = 24;
+            }
+          ];
+        };
+
+        ipv6 = {
+          addresses = [
+            {
+              address = "fd00::4:0:ff:fe01:4604";
+              prefixLength = 64;
+            }
+          ];
+        };
+      };
+    };
+  };
+}

modules/services/nextcloud.nix

@@ -0,0 +1,43 @@
+{ pkgs, config, ... }:
+
+{
+  age.secrets = {
+    nextcloud-db-pass = {
+      file = ../../secrets/nextcloud/nextcloud-db-pass.age;
+      owner = "nextcloud";
+      group = "nextcloud";
+    };
+    nextcloud-admin-pass = {
+      file = ../../secrets/nextcloud/nextcloud-admin-pass.age;
+      owner = "nextcloud";
+      group = "nextcloud";
+    };
+  };
+
+  services.nextcloud = {
+    enable = true;
+    package = pkgs.nextcloud30;
+
+    configureRedis = true;
+    hostName = "nextcloud.crans.org";
+    https = false;
+
+    maxUploadSize = "4G";
+
+    config = {
+      dbtype = "pgsql";
+      dbhost = "tealc.adm.crans.org";
+      dbuser = "nextcloud";
+      dbpassFile = config.age.secrets.nextcloud-db-pass.path;
+      adminpassFile = config.age.secrets.nextcloud-admin-pass.path;
+    };
+
+    phpOptions = {
+      "opcache.interned_strings_buffer" = "32";
+      "opcache.memory_consumption" = "512";
+    };
+
+    appstoreEnable = true;
+    extraAppsEnable = true;
+  };
+}

secrets.nix

@@ -26,6 +26,7 @@ let
   jitsi = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB6jVMIZ5y2oXX9HOkw7r5UUjw95MlFaFuu7FnEC0Q8z root@jitsi";
   livre = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEVfKNokHG6ig32hhQxTep+fKFmKahlDClPrX/dP4/gb root@livre";
   neo = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMGfSvxqC2PJYRrxJaivVDujwlwCZ6AwH8hOSA9ktZ1V root@neo";
+  nextcloud = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDkKR/lvSKiZmuwcpnZPAYIJ2hnsNvO2k5vNaAYWUCXT root@nixos";
   redite = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOwfVmR3NjZf6qkDlTSiyo39Up5nSNUVW7jYDWXrY8Xr root@redite";
   thot = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFKNg1b8ft1L55+joXQ/7Dt2QTOdkea8opTEnq4xrhPU root@thot";
   two = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPpaGf8A+XWXBdNrs69RiC0qPbjPHdtkl31OjxrktmF6 root@nixos";
@@ -38,6 +39,7 @@ let
       jitsi
       livre
       neo
+      nextcloud
       redite
       thot
       two
@@ -51,6 +53,7 @@ let
     "jitsi"
     "livre"
     "neo"
+    "nextcloud"
     "redite"
     "thot"
     "two"
@@ -65,6 +68,7 @@ let
     jitsi
     livre
     neo
+    nextcloud
     thot
     two
     vaultwarden
@@ -118,5 +122,7 @@ in
   "secrets/neo/database_extra_config.age".publicKeys = [ neo ];
   "secrets/neo/note_oidc_extra_config.age".publicKeys = [ neo ];
   "secrets/neo/ldap_synapse_password.age".publicKeys = [ neo ];
+  "secrets/nextcloud/nextcloud_admin_pass.age".publicKeys = [ nextcloud ];
+  "secrets/nextcloud/nextcloud_db_pass.age".publicKeys = [ nextcloud ];
   "secrets/vaultwarden/env.age".publicKeys = [ vaultwarden ];
 }

secrets/acme/env.age

@@ -1,22 +1,21 @@
 age-encryption.org/v1
--> ssh-ed25519 iTd7eA a8H1iSFJQ99fdY5aIyZoedRVuB66+pIpgw3doydu6FA
+-> ssh-ed25519 iTd7eA w30gKHk3aIr4iSS/GxzHufANrGovNhVtMPL0DnTdPRI
-HRvZs07ovO1e34AsJbC9d2ybMqB/DjQGZlkEvdTUsBg
+xugUZ5/kftdhbh8ll1Gj3bUzy4YlJVDzxaOoP74lLOI
--> ssh-ed25519 /Gpyew hcs5lB9WNAV33HPEI/xwa0zWiR+2XE/8hHqB6BMQXSU
+-> ssh-ed25519 /Gpyew p1Gp2cHLeVMhv7j1Fi/pbQBXt3TC/4fVqAGrdpJEFms
-K+9qcpVXJFJdzKROYtegcBAPr6yx2J8kQp8SdXGp1oA
+cTSGM+bsrYdZJCJHE/d0APsYZUknfYNARejUmMyuuvY
--> piv-p256 ewCc3w A2IOcgyuo9gjutoV70398qJMjEbiTeELmuIUkujshdxi
+-> piv-p256 ewCc3w AlzO0R3TjT1/p7C9aEzSaOfjGwisHx18m+4apT/rPjpu
-0filLXpTkxcN+puPhkngFBGe60mchnuEBEkB1kd3ySo
+YFYq+ZbpCCu5CErqAThb8AfuX2Ww9/9dz9gz0cSi5us
--> piv-p256 6CL/Pw A+0V9DCKaD3H8FECcIytIkQJ+xpFcy2ma+JBQLeYRXSJ
+-> piv-p256 6CL/Pw AzVc382i52bhepX7m6b49AvaECv2Xese/8q7c2mIU/Q7
-aZeNEaLTh3uEQvDkkBwDtg83aANDxoUnuP1EqCdTtZg
+NV/O8WSiid1SP6SMDL4ZD57EX1/R43dZMMqPlpL1DWs
--> ssh-ed25519 I2EdxQ WtsOCvaqwhLG9eZTeTb9fAOnChQxdoH73/EQeQnWtmc
+-> ssh-ed25519 I2EdxQ q0YB2UAdcCsONywIaQJlOwW0vELADA2pk578QHvstWE
-GRjvVMl01FRGLQ13BPtx78H2pqXmrx3l2bl/WUCLiSM
+6uhIuiq9h8pmQFCzrJFKnnutEdiHPU5MRUFoRkRs+bs
--> ssh-ed25519 J/iReg 310sd0jMY18VVcSs4tktB7zDvcEQYGQi4EL7+xAEy1I
+-> ssh-ed25519 J/iReg U0qvA7LdkaslhyoOl4HgrjmgfMWlKrDwbpfLmNRoCz0
-/DfwBYxAWBIv4Qp3FHeYkOSqxzICFtmxSSvqPH7Plho
+nnRvEoMacpbL0oSosttyMG2/nkYQyrazvPRy/pCqN54
--> ssh-ed25519 GNhSGw liOl4P4Vm5ohFhgyeAggjuy1pazAn5QOdLJ3z0/6uQw
+-> ssh-ed25519 GNhSGw BQnT/ZSlEzY7twAGPVrHown46wmw/wV8LCR/ifjHegw
-pkPOUwJ6ZFfvmxOPuDTLOy2T3FLTUHjb8LSKbxx5Mjo
+C2CllVK39xACODkJm6lUsTY0fKwwfd6h6lJZ6QF2Yuc
--> ssh-ed25519 eXMAtA 99UxNpHUc/0mSB6P1cdaDl3T0eD+EpyWSGx7cMtXWUk
+-> ssh-ed25519 eXMAtA JzLqLcyiE82kUNbqGk/X1aNWpfQ70oQPxZbkQ5ncL2c
-PHr3c/QmO677qku1MfmjA2UkLfl/JnE7tN+GQjbuhlY
+OEly14GTAG7Hf6jIVXgZPsG3lsbT30lIc4Vi4vpkxqQ
--> ssh-ed25519 5hXocQ LhyO1Zawf/VcIFGVJ95mDmlRJqTQcWRNvFGD9zphPSM
+-> ssh-ed25519 5hXocQ u5ajUd6HKtwX6Xqr3Q3rBWst/uaJF39Kp/ep/UAZRXM
-2rD6RbsGNu2TSsTbkBgyAuLpoYsQQwwaROkszopMBfg
+OsK+Jw//f8NyNt/VM5oHheMC9TVIfu4MfI/hpF6fSJM
---- XqQJ6u0HrdjbuQ+kw1+B6xKQFaLR7rY3kIS890N6coA
+--- LzBjn3s31Kq+ExsEilRxpufWAkfCt8M1QXtzJB1zdhE
-1máp2óº3ýˆð¥
c (¡eš´pŸG”LaKÙÕÕ×Ä/údæKûY,YÕÈ*n}›,k½k“úkZŽ@²™†lbyä?Ÿ©Ðƒ.R;Jj
_‰µí{—¯/ÕƒG<DvXƒ¤9Ĉ>tN)!¨>*Ì$=üÉlNžpj	/†Úˆ·>ô0O‚!åG–1ë
»×5õõUÈë·&
/a·ýv‹1H&¯=0àjÎ<6A>®\áøˆ<>©¼ø·‹¤Á<C2A4>~²)qá­¶ot~
+éðpyÔ_8&”Mëïùß´:1.UR/Ô
fšéN`ï2ªÛHÍI§WŸ–<ðWÃÁYn¯°Þò\÷K+Ș?/ú!Íj¿¦Üô®½ aOß!¤ŽÜ½$w €Í 	*ÂäœIeÌ-[»q¢%—€µYñun<75>àðî6±½µÎÖ„îúLIY›Ó{&l·úÖ]é7®P*ßÍ÷L,â4Â;jcŸs#ËäHUQCÛIŒ¬¦Ž÷w¬k4Ô<<¯uAŽb¨ùpÌÁò ïFiÞø™(@Z‡Í–S®òY™î(=9,%“¡¾m–.VpCÖ€jMñ°
-Ñã²Å¶Gy¹ó~Òãî$c÷‰ª(óCs&mhjš¢”?mRü

secrets/apprentix/root.age

@@ -1,19 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 cZNEGg hx2K+BJ2BE5shiuYVL8lNDebSXOslE+D11wInEU5AC0
+-> ssh-ed25519 cZNEGg DGQJ2+SXyMVE5U43jLwvgAeVZvcjhe+u03l174+qoTU
-/Voe2mVa0VBiowquOfiCqBwbsNWKlqJw19Rshncmb08
+4KRlm86097nMlUAI1O7BoVbX2jWjj9jBcBs8ifAKYXI
--> piv-p256 ewCc3w Atur1opHkIZnyRdfVcSPmXJ6pnC8KRSoTDTgRdpXhQ0a
+-> piv-p256 ewCc3w A1PksvobVh3b9vICu7jiHr0WWKH9ipcO+ux5A1FJf0uh
-BeNHX/8DygcMRjv+BYCMJEbx+yUiiOz1yRQ4WdpCkEA
+hMp0bBKay7G7/vCO5641hZ6t4jhOqmSKh9v0rWskB0E
--> piv-p256 6CL/Pw An/25v/ZffNknCs1+Z9oUHEa9sltmBbaCGw5zGtPlS6X
+-> piv-p256 6CL/Pw AoLJsw6HlrDaf6KlPBYMkT1oWx3S334nuBBopyz1nd5z
-Mp3IpX/1m45V1PVIxnh50hp4ymL3VjCnDZ9+n+pjoro
+/4E0t9LR32NOuOLD8RZy17Jy0D5wT5Njs/j/0sRyp+Y
--> ssh-ed25519 I2EdxQ MFQL0HlTcYBeQe5W+cAegZNrtvYh67YfaeQk5lKBkxI
+-> ssh-ed25519 I2EdxQ LWHbSA4k8m1tdK8WmG0Ku3LmbxrLDkI9wp6ISLD7YBY
-6YtFHaJBmdC05zaeCNRUEOx+XdAy/KSSJbIFDAjqk4I
+13UerzOiO3DlPo9VJH9uEEu8KWqEMn9M9BDNApxgRS0
--> ssh-ed25519 J/iReg pRxUVtZLA7OlkbjZPNJY+PcWBiwu0qOUymXTACmOGws
+-> ssh-ed25519 J/iReg RT3nL3r6SkrI57KIRpIkEerL6lXZPH2jW+VmQMZ6Cgc
-wLOQy84hbkdjSiqywOU+fAoZkUg84cdUP5mmehv1Les
+5Av0ttNqOTqokdLOHiIGtVAeIvsWB45PQYfLyvQsxTw
--> ssh-ed25519 GNhSGw oSRxaxlY2LyuB5QBkfQ+vIpmI6uFCCi2l4IqPrQxWgk
+-> ssh-ed25519 GNhSGw ZqK8MGNxHn63IwpnDqu0HmESeTyb6BXs5XvgL2v2MFw
-ePpTSXekzXDwSUZj6drtsvlnaKxPjgu+j5afvNsKbQk
+STw4L2lg0S2dlRNKZFvPKL5LugpYAiCindkPZKxnUkU
--> ssh-ed25519 eXMAtA v6zL1bc8aR2fgESNZcmTtGPk5pjVj0UGiBd3SjqGLzc
+-> ssh-ed25519 eXMAtA 6xD0Bwr8/AyddH0bUWzbzn7EQ/wLkZ6sOcI9McPyhyE
-amsA5x2C5dQBzqL1uu6popDmDkKEhm4WPeK0J361vNQ
+9XB+tZ/AI0euhiVNfqVxcjyl/yAa/8MGKL2eSamssy8
--> ssh-ed25519 5hXocQ DPduJx7pfwr8FqMTXEPq3zXBhyElZTj3Ouy0d3S8RnI
+-> ssh-ed25519 5hXocQ s/oUbEeLMiKMcDQlONnKs5aiXPwXIfOSYBOfYpirRwE
-m8K+tCRbGmnf6IkkPAa+scmGmiEy8QAvJppj0lvHYXs
+mt+avXG5OZGsRAjiqBhEOPDPJJyVF3QxjnysQL0cdiM
---- Oelwm56/V9NDvorDKW+xqISHYjsqEs6HG/pYf5qTX94
+--- wWzldW4gculBWeA1b7CC7OWGROcuQG9+1XoT+WXlMIU
-<EFBFBD>ÄžuÅ•{ %§i[V<>4çkX’+dî	â'žBÎ<´«{<7B>ËhÉ%ïóP×ï)Åöm=`ò¤Ô·^ôI
+žGµ#ÀзRÐï\æïGqÔ‡orÑaÛF'<27>1mÒ<ØU•b8Æë汦úÿk}–*KiÕÖÔßZºpV

secrets/common/root.age

@@ -1,31 +1,33 @@
 age-encryption.org/v1
--> ssh-ed25519 2k5NOg YmbPaKvtfcfoBEHw3yNp5vhE+XVzUprbyBK0MDmmeD8
+-> ssh-ed25519 2k5NOg R7LQiAyDlWUIGv07HKT24orFUpilkARnJLSbke6PQhw
-SRKPmndyQT/dCl+b8Cvu5Vh2VOlpMd3x6Vvw0uO4iOQ
+VhjpI3ckvvmjOIf3qsQ5SnT3DCGfVnETLnRrn8s1YcQ
--> ssh-ed25519 iTd7eA 3Rue4QGiodPqjeTKKM0qN88HKwCWkmwBMWkNjA/7TmA
+-> ssh-ed25519 iTd7eA KtF5R5rhsgd/6IyvqU3VthVuR4yaJMZ9wYTUprvCMFs
-Uk3I820rcpL5YlqcFkL6zdnNNoanI0qDi+mhMXKVxuE
+L9mFlgz+j19B9T3NUtNnwXPqEkcaZNFgDPHdtRZmNfs
--> ssh-ed25519 h5sWQA 9zcxhz4bEox4G2dSRcXoQkPpwY54LT8ZVpSpvlsbgig
+-> ssh-ed25519 h5sWQA FmOJ9g9yft5EU3mQjSDJf6720YyT0KedqtM8K1VP7Ek
-u7gerFg6oEW3AbJs+fBbpZhFlPTsEjU2J2pzuYTQXpk
+7c2GoaJHPMT9wE7P6m2EdvG7W+Z22uFSEexZYNF/szU
--> ssh-ed25519 /Gpyew ECbV0DgETfbvF+Q1SrjJlELMszd9jYr/531fnwhR0hY
+-> ssh-ed25519 /Gpyew UKRw8oimxOOHJFrZfjmeed6XTnG6++nT+YYeKxCLlUA
-WNpIJes+t7AAaMoy/w0VY+ZMlL3cdpYmn6+MN0H+FKY
+zutDIFTtJbfemFyaUA3CD2XNSGQLUnPTfBmm5xaCIes
--> ssh-ed25519 LAIH1A hGk2swRwo3+RfgA7YEBTTBGjQfsCLomVsbibWSYDsWY
+-> ssh-ed25519 /b16EQ CDCW26LonJjMa2a9gTHpMkYRPTQDv5BG1GlknL0omls
-s24C/xWNaCDyaLmjCGs6jDranUM7oUDioHKphihr+qY
+4T/RDEWKXngBCnNx7oMMcCeLsruHC8TiY+XFunM3Y7o
--> ssh-ed25519 qeMkwQ 8awNaR9XeQkvpI6myrt4Vw8Zf+rMTEp3GlviMrVnd1w
+-> ssh-ed25519 LAIH1A 6YQ/wWfybtkoB56RGtV1P1cjhjd3lbv9M7tA2GscP0g
-WlhYTdfgQ4SRfLJ8JwudQXboOftvVV1xKrf50JXMe1k
+qvYQ8OLhe1R1lmeGreo0AlMizbh5WSpDvJ4eE4Q9I4w
--> ssh-ed25519 TqxOLw dZt5AZcQquKWFaqw7ukmQvwDyTdXhgdEE/8vZste+1k
+-> ssh-ed25519 qeMkwQ NzbgIQoGeAHzEQX4Q3siFhrdv4LWR00mNVCELBHYRAc
-Oxl2ZWb35uDpaoMFQPtJAmjzozNsCaMxYpj3jvJXAik
+x695BWcDLyh+Q3paLmSl78G7pEinwbYewG/W9tSmYA4
--> piv-p256 ewCc3w A8A3ROxMWx9TqoJOizACq7Nn/lhZKM17X66+2B8YQzUE
+-> ssh-ed25519 TqxOLw q1tq5FI3IxJDSr3dG8Boxblmz4ay4UfcjhzM354zT28
-KdlLlekWwdJEH/wEXm5HciAtjkS5cxYmUWkej7TLbX4
+sD9uD62c7FfHgdRNSry/PkITNbRPQU8c2gMnYHga77c
--> piv-p256 6CL/Pw AiOTq8eaVT1xRTHPTyNe4AMlh3vIsbci8YjTr3pwMU97
+-> piv-p256 ewCc3w Azj2EtKmCVDPEkJ4No6NI4wTIdBGckLysnF2icakL2AT
-n9BKSF3ErIkUVCQi/7IXovV28vj7EbZw5Y89EHYEc7A
+AT+1OtjbrTaTUhdtzGo/IXkpLHQiamsfUTcBjSGU3Z0
--> ssh-ed25519 I2EdxQ iucWeurkE6h5oi0abTGcX6ARNczx5UAGDJ60TetbXxU
+-> piv-p256 6CL/Pw AwPhJoek77XsOUGVD9UL8IRm9xxU0tz33YkaQvnx7Odh
-P5af2OXIgjrXs2NxZ0Uqn2n907oAl4eXcAl3GyS5l24
+D5ABLblJmfesuX3lXfZF7IjOg5HH7T9QxIPZVz+x53Q
--> ssh-ed25519 J/iReg RHmuEjgm8BkXSmY/CSm79tBAEVKr1DAco89zCDqgJDo
+-> ssh-ed25519 I2EdxQ mymczDCrBSzkwtWezgg2/+51clREFqS+uWoIGElj53I
-xeZiAiICN9y9jdPpeV5HnksRnmZCDS6bp5bOlhIqRQM
+ie5LeaLy+cZNaP/QcnM4W7TspMm9prDvn5qLWVH0VMY
--> ssh-ed25519 GNhSGw uRhFkAlkmpm8fjaPYHCj3zrnauItBnZSKvBDhiacmEE
+-> ssh-ed25519 J/iReg fkA3ye7ZdyRiPmPy+wc9irEv1NHI+drFr0H/K6LWRyI
-UXkvpqB6yIvtafeyb3eLuemR2rdkzm7ZkxRBuZ5vm9k
+8xtLDCFwWc+yPKyplx+B+/rQWNrnQhJVqQWi+mX6MQo
--> ssh-ed25519 eXMAtA BbFvjDyTd4tjqqECd5syWrpO7b5SDdYBmGGzJI5A9X8
+-> ssh-ed25519 GNhSGw MYZ746YwxU0KWm8LfjzUFsudRxnZziwIYJZ/w0kr8TM
-5wDNuBCpFsW02tBO2QvSrRs0MKUgmRgqCfuTxaovoC0
+WmU0VCUOET7eR0xaa68HwQnP95Q+JZMYfNFrKDn6uHE
--> ssh-ed25519 5hXocQ 7JpeboYqxK/xmrqw6YZzzFnutiM4OonHjN3bm1UIG3w
+-> ssh-ed25519 eXMAtA Leon4paFjqx3/+Ntr47Rfv2Ua1AYbhEx4c+RfKhXvzo
-lux99mMAaHuu1Yzrty8Q7D3jPYgZHWhcP3WOYth1sLo
+P3TwNvzNWLQ+qlsyUB9F/74yKxbbiEOQTf8jJCH35WY
---- /CcrdzDPefk+EA7YxAtJ4cPesIFb6RZy50kDV2FTU7o
+-> ssh-ed25519 5hXocQ DIn5vObTDuTHPO1uWs0IvrER9wRL01sLvZ3X820wZT8
-'‡ÕaJ¹¯†9øÉÑ“Kù“ÌÜhDJþâÏWŸÅ$Ñ+†‚|Õ%Ô¨)ðÕÃN™ny@ÉÌFà•ûE ·îjx
+fZgYicMGLkaerYoIjlVQKz9dsp86lk3w6EPzTkIzZxQ
+--- bHzFiHwmHeK1gWiMdpjRcVqqD87DzfeRg0duQx6ysXY
+ú™!U<>‰&"Wòsý¦åm]oŽ¼EüEî“ÌÚÑ°-
øƒmŽ;ï?Ú–1-øU£RЖå?–5ûÅè

secrets/neo/coturn_auth_secret.age

@@ -1,20 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 /Gpyew v0IqoUYfieE87jMKBLBXcc1amCW4Yvv0IRdRbwPS10E
+-> ssh-ed25519 /Gpyew I+o0g+G8y355TFbqtcM5o7gaIlU6obrElztEqyG/hSA
-M+i/CVbVYt+Ync6WjXQuurcwjUaormehyhAUf88jVn4
+Q5To3FdID9klN+oaQio/ezJGtXwWTcReV17vPHB/9js
--> piv-p256 ewCc3w AxDlsQZUVtsbd3+mbL9xrp1tSLetzNnyyfA8vpvzGTlK
+-> piv-p256 ewCc3w AxXg5afuNrbV0UkxV4/PFl8JHB/5XrB50qRCwV69UKOC
-vFCIppHYU3xJIA04azjm1Iep4KKsgrtgabMzfPK44n0
+yh9n9wo4Pp2G3ft0zAGuTWA3f1/bgjz0GyrWw7k+q1A
--> piv-p256 6CL/Pw AlgXPmHKl4SX+ZBcgg5d1yyjIIW3ZbB/5jPDljjSedez
+-> piv-p256 6CL/Pw AzV2ogPEkYn3+PCbadJGOZlzwtdqV5BSsQJ9/vj8qx13
-tbTih/OlT6sd3C1K7SdYFawUsHDTrbPf0ZaOH5+UFUA
+am4dIBX9Gb/lu9aeNyVF7Tc4v+NEvU/0wh9VpBgvoUU
--> ssh-ed25519 I2EdxQ QddIpLDoWFRzwKh6a2AT1A+/FJ+XNLG6dn7bXhHeMG0
+-> ssh-ed25519 I2EdxQ GNvxoQSVLUtUBmsjAxXl7KY4F/qffHdKxalv+li9fiU
-K8hJxagVv4HQ0yjrvb25wEWtI3AJBUzsc6RFuOv2k+E
+ZBoITiCzZkvs/n1dfVb2TpEsgZsv5xdhswNBR8CS8RM
--> ssh-ed25519 J/iReg FUvDVYnluuwFUVc585stre42Yq3DXHO/9dYagJx0MDc
+-> ssh-ed25519 J/iReg qabrf7tIWzwFFC725mc/ltmSnurzI2a+uGfV1IZ2ZQc
-IThjI+lcHpud7iXnvDULPUUVr97RV3SDLrFuATOlIww
+lLulK2xzQo/B7fxtONMManuPKCDcZdgCu7+Reap/Z6k
--> ssh-ed25519 GNhSGw V6svkQ6B/rpYGyyLbhZRJfZkzFRInYPvbUFeKGDsBDM
+-> ssh-ed25519 GNhSGw r6IZ5bBllBzoe0fVLnYixzXm169ToJJLxWtk5Ntqfjc
-dO+b8Eq1E5JHULnDfIJAtugboMTSTtcvD/brJAwf8qE
+PAUNkVab3Igs1xZxKCOXNqt+5MDQZ8BtG4hu9g0VwPM
--> ssh-ed25519 eXMAtA Q1mwgmya5U87Q75c2KhhLUKfaDRm/WhHnoPCAyJB+zs
+-> ssh-ed25519 eXMAtA ANqgeZyRsTyxkw7qOolNtzTWdwfk6s2wDgvDv26fQ28
-Cj+BiSc1v2kdOjkuZSCiNUnB6oRz05kAGH3PwJyz9eA
+OBjUfcrQIriO1OeQQ2Q4d+5YYb3BE9kjuGYsBaynLDM
--> ssh-ed25519 5hXocQ 1zO9Ob5Fo4JUYG7vUYdaBcL/1++4vqZQc7zVrNPyUEs
+-> ssh-ed25519 5hXocQ Q0heQNnArk/qhb9Kj2w9rQEiZ0zEJVIWOg872zI5FVU
-giGdiXDB4Q16y8qH19y+aq8bzZaG8xgFzDJ3QkbWqUw
+Cl5MR86EsDCrv0x0MDZ6TVTeYwJRQwbx0SON+RNetF0
---- 8z2WQTx5KtMtdNlIgkzUwKPatgX5sM19u60iUZCoxOo
+--- 222uHrYdjohx324V0u/DhPA2ysDVZQWDoYFsE30ZEEM
-_>eRb!”ÎPú¼Z‘#Z²U¶%˜pØq+7Å…"ìs-K"„$
+L^Ô·³ q÷}ñ¢®Ù\$R¨âÌS>êhÖa2^îvD€‡J²Ì“®…Ï.#R<ðUü3¸Û,q-u¿Ç=`ÞÄ™$íÇJ”M÷ÊoNÖRd¤s/©Æ̇µ‰<>ˆ9Uóáñ"^¼Y<>¼ëT Ú€Ò;lŒ²Ø<é5ˆ‹Û«L•JV€~³ô
-¢M®áSþô}¥’²´’êàëì+µ½¢—dãÌ5Q	ª˜ŠÙŸ+a:
ÜÅ­Î"+s
%c/ÿ£€Ä<ëRÈC~õÖ×õ9AˆÍ£\ÑI•fúqQñ•

secrets/neo/ldap_synapse_password.age

@@ -1,19 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 /Gpyew 8DFDxGaZWao+vO9qxc7f5O477lK7RnGI1RDBIxySpz8
+-> ssh-ed25519 /Gpyew yZtfG4hE5TBzpzD6S/28OddZwLsqgcNSQa6e8+JyCyY
-TKZsz+XOy3O7Ev8Uel7RzQw53eTPe8/6IltBLCx7dDI
+FH6GEdPguLkhV84QUk6kHRDnwUZELDLUugIui+1zJ6Q
--> piv-p256 ewCc3w AuDjekUccsQysWccrX2KIlqqSy482h9dmBM+N2599B6s
+-> piv-p256 ewCc3w Avf5Q8WC48dLP+/rlU5QO+1s/VqVWoWtYBiBbXfFx2a/
-X3ZD4NEdRmIVtNNHUtMcpWsa7Z6gSSxfNjMbQfdw5VE
++GXkatBHYDAae9J+vwGv7OaTy07+Eyj/rR/OW6zsBoQ
--> piv-p256 6CL/Pw AmuREh4r0wVcpltIZjXTI4LqmHz6bKMCJk3FOPShnwBP
+-> piv-p256 6CL/Pw Ayvd6ZOMzXve9hS4RqFhQL/+6GDL8MwQbBsD21CiqW/V
-q6es8bKoU9dXIWegdY8418Nq9QLjEf4Xmn4RUMozV1U
+0QsN+HrAGwhi9dWQQ5kty1oT3UCaxdMxSJapyFvKqxA
--> ssh-ed25519 I2EdxQ 0hXF3v4y5kSEZdR4eg/TZbcRjHQMyT3iu7ucYoBm/FE
+-> ssh-ed25519 I2EdxQ RZZPo1KhI1coIJkMZU28Hu6OC+zYmx772imhavSUC08
-aj/i/gRRPMdOFG0urrG5bcT6NGgXQ0IdT4IUoLhLrHo
+S+N2TKY8iVuvDxO0cp0X00E6Pnz4g/z3IOe4vAEjs80
--> ssh-ed25519 J/iReg K9SLwdDMWuUpyRM26ysJHATmVk8rsfi90NZ8Z+h5XnM
+-> ssh-ed25519 J/iReg A3MZLyoT60I/urysAafeGtXl8owIgwnjHfzvhYfUOyY
-0yQ+b1augkDHdCVWPI9uvq1IzgOBwQ23S/Fp54lVce0
+GPCTk+w7eZkbBZbXBQD1uVmJC/BPuGbE3B9DMEPjO+s
--> ssh-ed25519 GNhSGw 0/k4x4mxXWKyqhwg2LeFIau8Zdx0ebPPYWfcppGEfUo
+-> ssh-ed25519 GNhSGw hPEhdrC1iUg1ql6IqMELVIt7xGV6aXdms+ccLDCiiwg
-njIid8JCI+41KyhIzQTj4T4DKmQ2GxRRrN6P1U6ywFc
+d/AV7f6Sa4/sdAro3No8SQRKtjJbmmwXGHfo3Yopx9U
--> ssh-ed25519 eXMAtA m9yyWKx2xE55CHRgeEyTrft3dZUkJjmWdZh+M1Nf73g
+-> ssh-ed25519 eXMAtA 4L0NTwX4pm4EVOrzLZHLpI9p0xGO2L+6oewBgONaP04
-97B5ztSgE1BXzNDnu0ZM+oowj8wEkxWYoiNEs5qXhGs
+QeuOGIcynsgNxS1Tcxt4t6zmp7ZbH3z4Pc2YSsfulRM
--> ssh-ed25519 5hXocQ 1Z8OfB3R7un6+JGu4MeBe2lzvf4kIRS8L1TUJ1JAygM
+-> ssh-ed25519 5hXocQ mKNhyXNhZ3w8E9TLyRPw4E5xCTWS0rdPUI0deS5w5T4
-GmkDdKbrUgaF1aOYKRJCFTC4gIdvoYzmIhGoHbOWOW4
+S7vU0YwciXdoob/aRJJlNFn4H8MHPHbR1OKaZMzA52o
---- 9wriBEhA/Kil1/4DRfn0Lj8KXVxU01JOtzdY34HkP1I
+--- rXetlaYBjE+LvB0dOzUxsQfY0uNiCCxB/GNt2MhMeFM
-—QÊ‹;q¬z¿[<V8]G Â:kôæåïÌeÐv•ÓD1ȵCFÃWÒI<C392>p:õÅiÏ(»#zË
+ÿ=>I¦k £íöêpYOýR‡5ëq˜3cÎ[è(¿˜Õ¯ýjR´\ãuK/Ÿ·XÍÓ"€˜ZgÁ

secrets/nextcloud/nextcloud_admin_pass.age

@@ -0,0 +1,20 @@
+age-encryption.org/v1
+-> ssh-ed25519 /b16EQ 2TwoNzaZTwIGexHTEGkeKkaaPY8FZwSLK8vRrs6DtjA
+3vWdNDaItig+NsTynD8nEoSO7y3kSE+702CBi8M3ZUY
+-> piv-p256 ewCc3w AtArEDIq2ucTbi+cyHwbm3KOxu0zcxJ9NpwpNM/OiJG9
+Csb9fqB2GTs1Vqv/RzToBvy+ZFu3sM2+dWGJxi/I75U
+-> piv-p256 6CL/Pw A995Wv6Rr8KI3uNySUx7+scl21WTAUV7mGiJL/nHEjZ1
+GAC+fJOaSfa5p3k0kymGeCVrJ265GFIwnvOE3sz2Fyc
+-> ssh-ed25519 I2EdxQ AcahYL1gWtUq7Wsdj854kiayln8SlUI2PGVkizu1uU4
+0kZnDO4az2HN0yDIUatBufv2Wu+2WljkESIjEbX6XJ8
+-> ssh-ed25519 J/iReg 0QOGkIdXKJYWFVi1Fp8uHxJ9l/6UW4PV2MVLK2cIHRE
+IUV329cRll9sIub7+LkEctbk2BX5Ou5oebEsyBfNCD0
+-> ssh-ed25519 GNhSGw oMy5sfYVRwAjSvEH0UFkB/ruamAtrtijpM620dQdmz0
+1nMpZta4inEY+QqIeq/YvKHXSqHjrV0iRvXYZKsVQLs
+-> ssh-ed25519 eXMAtA vu3qUo0pNIxvWo1X8n5qIf9FW6mnKHgUigLOPU3fmkI
+Scfk4meyywYSVT8ykshYECi+VP6chfCgIt1cVnjMUFc
+-> ssh-ed25519 5hXocQ 9LxSLOxr2vaCorofPGVDf5GjcR7BKHiiMwxP0G5EtW8
+waCrax2N/W3nttJPNuw18dWNG5qQZYYW1N8aL2tl0R4
+--- z6UX540krBaTdIwE3uRuFKsH8L52AhvOZ8XGOz2rkbw
+æJo±­e—«.ûs÷¥#7äßs®—°Oéņ ^ÙZ„M,ÆŸ²mû
+ª+½ß6w2¡

secrets/nextcloud/nextcloud_db_pass.age

@@ -0,0 +1,19 @@
+age-encryption.org/v1
+-> ssh-ed25519 /b16EQ nVdsLuycGf9Kx/Z5GXImOqQJ9JQLLulL2L7pOK90kHI
+lBlvF6hf2xO5B3ef367T1Fmi6UtqSipa1GqF3J8eqLY
+-> piv-p256 ewCc3w A7gwfXbK8HchflKFxTYZ32C4+XzoaVa0UiQ7sIYqAsdC
+eyxwoJLsKYAQ/zPKmE8TiZl4rGUmwUIUI1k1/efjjqw
+-> piv-p256 6CL/Pw AzwXjhdTsh34WLQ5vtrgt+GOe9DLH/992SXIOLxMKA9W
+zx4Ndo96lc8t6xwFH8tY3dkEsX7nRN4L28E/ABklo5w
+-> ssh-ed25519 I2EdxQ hji6G9rsA7pwqKFHrzjPv+woLtv7hVdYBixXkr/i9z4
+VAxzuOQnSQ9EzeS/B8S8J/jVkm9bdU4woecuUw/sn5Q
+-> ssh-ed25519 J/iReg e9BXKkcepz+wGrlQl8TRmmc9WqUu3m8CNSg7iWXS9D0
+8gMgyztI5ecYlyMetbKF38cQKRySGPYYSbqGPgIrn48
+-> ssh-ed25519 GNhSGw HzQVxgE1GgxgL0iWBvrrwJYPI5E8UX5o1Jj4IE9bzUA
+ow8MaoU690JhqhVDpGi+ywjm68rg2ivxvq9IibPIoj4
+-> ssh-ed25519 eXMAtA kR3PbprkCYRANf1YY2jFmAb0kZ9ZzRhfHZPaRLyckxo
+ogEXAM7ZIM4iqgA5DqPEx8m+8PYJLuNzIskyc48hy1g
+-> ssh-ed25519 5hXocQ sPViX4MA3JKgm/OT53Hqln0cq/fTO8hGD2Ds4V0kGyY
+3HI0CzS2sSJswtgNa/hUOR5MANnrPKmieBbaisALWrE
+--- xvkUDrhvdTXIu+WWrGBOuL2kOkUAku7eXUHI3mpHUEw
+¨(xť<78>4qŠE7曼WoJN9®2ëµ5u¦Źä.R˛t(\ĎůĄ¨H'¨}ąM´¦ů <20>÷ŚŔď