diff --git a/flake.nix b/flake.nix index c212442..22cf912 100644 --- a/flake.nix +++ b/flake.nix @@ -65,6 +65,11 @@ modules = [ ./hosts/vm/redite ] ++ baseModules; }; + reverseproxy = nixosSystem { + specialArgs = inputs; + modules = [ ./hosts/vm/reverseproxy ] ++ baseModules; + }; + thot = nixosSystem { specialArgs = inputs; modules = [ ./hosts/physiques/thot ] ++ baseModules; diff --git a/hosts/vm/reverseproxy/default.nix b/hosts/vm/reverseproxy/default.nix new file mode 100644 index 0000000..b724d32 --- /dev/null +++ b/hosts/vm/reverseproxy/default.nix @@ -0,0 +1,15 @@ +{ ... }: + +{ + imports = [ + ./hardware-configuration.nix + ./networking.nix + + ../../../modules + ]; + + networking.hostName = "reverseproxy"; + boot.loader.grub.devices = [ "/dev/sda" ]; + + system.stateVersion = "25.05"; +} diff --git a/hosts/vm/reverseproxy/hardware-configuration.nix b/hosts/vm/reverseproxy/hardware-configuration.nix new file mode 100644 index 0000000..2934c64 --- /dev/null +++ b/hosts/vm/reverseproxy/hardware-configuration.nix @@ -0,0 +1,33 @@ +# Do not modify this file! It was generated by ‘nixos-generate-config’ +# and may be overwritten by future invocations. Please make changes +# to /etc/nixos/configuration.nix instead. +{ config, lib, pkgs, modulesPath, ... }: + +{ + imports = + [ (modulesPath + "/profiles/qemu-guest.nix") + ]; + + boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "virtio_pci" "virtio_scsi" "sd_mod" "sr_mod" ]; + boot.initrd.kernelModules = [ ]; + boot.kernelModules = [ ]; + boot.extraModulePackages = [ ]; + + fileSystems."/" = + { device = "/dev/disk/by-uuid/06e48549-dd3e-4c66-8358-0445378affc0"; + fsType = "ext4"; + }; + + swapDevices = [ ]; + + # Enables DHCP on each ethernet and wireless interface. In case of scripted networking + # (the default) this is the recommended approach. When using systemd-networkd it's + # still possible to use this option, but it's recommended to use it in conjunction + # with explicit per-interface declarations with `networking.interfaces..useDHCP`. + networking.useDHCP = lib.mkDefault true; + # networking.interfaces.ens18.useDHCP = lib.mkDefault true; + # networking.interfaces.ens19.useDHCP = lib.mkDefault true; + # networking.interfaces.ens20.useDHCP = lib.mkDefault true; + + nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; +} diff --git a/hosts/vm/reverseproxy/networking.nix b/hosts/vm/reverseproxy/networking.nix new file mode 100644 index 0000000..1207999 --- /dev/null +++ b/hosts/vm/reverseproxy/networking.nix @@ -0,0 +1,53 @@ +{ ... }: + +{ + networking = { + interfaces = { + ens18 = { + + ipv4 = { + addresses = [{ + address = "172.16.10.151"; + prefixLength = 24; + }]; + }; + + ipv6 = { + addresses = [{ + address = "fd00::10:0:ff:fe01:5110"; + prefixLength = 64; + }]; + }; + + }; + + ens19 = { + + ipv4 = { + addresses = [{ + address = "185.230.79.42"; + prefixLength = 26; + }]; + routes = [{ + address = "0.0.0.0"; + via = "185.230.79.62"; + prefixLength = 0; + }]; + }; + + ipv6 = { + addresses = [{ + address = "2a0c:700:2::ff:fe01:5102"; + prefixLength = 64; + }]; + routes = [{ + address = "::"; + via = "2a0c:700:2::ff:fe00:9902"; + prefixLength = 0; + }]; + }; + + }; + }; + }; +} diff --git a/secrets.nix b/secrets.nix index 7957792..47ed54a 100644 --- a/secrets.nix +++ b/secrets.nix @@ -35,6 +35,7 @@ let livre = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEVfKNokHG6ig32hhQxTep+fKFmKahlDClPrX/dP4/gb root@livre"; neo = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMGfSvxqC2PJYRrxJaivVDujwlwCZ6AwH8hOSA9ktZ1V root@neo"; redite = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOwfVmR3NjZf6qkDlTSiyo39Up5nSNUVW7jYDWXrY8Xr root@redite"; + reverseproxy = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDuXFrEEALXW1T9b7WB3xtUsIWaEHat9+QdaV24RUFhW root@crans-iso"; thot = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFKNg1b8ft1L55+joXQ/7Dt2QTOdkea8opTEnq4xrhPU root@thot"; two = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPpaGf8A+XWXBdNrs69RiC0qPbjPHdtkl31OjxrktmF6 root@nixos"; vaultwarden = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICn6vfDlsZVU6TEWg9vTgq9+Fp3irHjytBTky7A4ErRM root@vaultwarden"; diff --git a/secrets/acme/env.age b/secrets/acme/env.age index 35b0750..93c44f5 100644 Binary files a/secrets/acme/env.age and b/secrets/acme/env.age differ diff --git a/secrets/apprentix/root.age b/secrets/apprentix/root.age index c88217e..27b91cb 100644 --- a/secrets/apprentix/root.age +++ b/secrets/apprentix/root.age @@ -1,19 +1,19 @@ age-encryption.org/v1 --> ssh-ed25519 cZNEGg hx2K+BJ2BE5shiuYVL8lNDebSXOslE+D11wInEU5AC0 -/Voe2mVa0VBiowquOfiCqBwbsNWKlqJw19Rshncmb08 --> piv-p256 ewCc3w Atur1opHkIZnyRdfVcSPmXJ6pnC8KRSoTDTgRdpXhQ0a -BeNHX/8DygcMRjv+BYCMJEbx+yUiiOz1yRQ4WdpCkEA --> piv-p256 6CL/Pw An/25v/ZffNknCs1+Z9oUHEa9sltmBbaCGw5zGtPlS6X -Mp3IpX/1m45V1PVIxnh50hp4ymL3VjCnDZ9+n+pjoro --> ssh-ed25519 I2EdxQ MFQL0HlTcYBeQe5W+cAegZNrtvYh67YfaeQk5lKBkxI -6YtFHaJBmdC05zaeCNRUEOx+XdAy/KSSJbIFDAjqk4I --> ssh-ed25519 J/iReg pRxUVtZLA7OlkbjZPNJY+PcWBiwu0qOUymXTACmOGws -wLOQy84hbkdjSiqywOU+fAoZkUg84cdUP5mmehv1Les --> ssh-ed25519 GNhSGw oSRxaxlY2LyuB5QBkfQ+vIpmI6uFCCi2l4IqPrQxWgk -ePpTSXekzXDwSUZj6drtsvlnaKxPjgu+j5afvNsKbQk --> ssh-ed25519 eXMAtA v6zL1bc8aR2fgESNZcmTtGPk5pjVj0UGiBd3SjqGLzc -amsA5x2C5dQBzqL1uu6popDmDkKEhm4WPeK0J361vNQ --> ssh-ed25519 5hXocQ DPduJx7pfwr8FqMTXEPq3zXBhyElZTj3Ouy0d3S8RnI -m8K+tCRbGmnf6IkkPAa+scmGmiEy8QAvJppj0lvHYXs ---- Oelwm56/V9NDvorDKW+xqISHYjsqEs6HG/pYf5qTX94 -Ğuŕ{ %i[V4kX+d 'B<{h%P)m=`Է^I \ No newline at end of file +-> ssh-ed25519 cZNEGg aA4gg8meHPlPgWWhptiiMVWTc38qgpCj5+xJWvKeS38 +dC7wXMRWTRsE/RU+TtgqVK5a8+BNCVuNfk1hDfYw9nI +-> piv-p256 ewCc3w AvB66cuokBwh2FKU2Jrl0jhdllPpRFn8RDmgQDcPdYcZ +jt+74rVkLPNHLvmkclLpFRDVpiVYSahraOoQJ8BTj+k +-> piv-p256 6CL/Pw AnNfz5CMzMUZrAZ7j5UgEjV/l2EDLIsmkVy6LJJdJUf0 +krwym6R8IOQKsOvozX//BZcRGYA34c5wzrojStd46bY +-> ssh-ed25519 I2EdxQ /8Z0ty2leVsvNgtfD4x5it0HxAC6t7QtAVVymMRwGio +YIXcur8LZjxl8BVnIpg/XQ4XUFyHsC3cV21I0aWMkKw +-> ssh-ed25519 J/iReg uU+hnNhbjOL+PMzlGNYEupfyExP6bx5h2ubGEDs8B0E +be2yUIJPmVbnDlkWio6WfuW9BNMippSjhJErv4wdV+k +-> ssh-ed25519 GNhSGw nRCKAQQGuwOwo+Q+1RHCvH4vmKc96KB78PW09GgPmUo +hqv9eOsP2G/GgV2EK2R1IjSEDSaRW/YzkLCFLhB5QHU +-> ssh-ed25519 eXMAtA 1m6aCjxd9y97ItslUtBz4gjECqbA+jfjj+Xu43RGTi0 +UQy2w9U35uFBaBTYoCFXZH/WN93K9XpWmElZrDh9EUs +-> ssh-ed25519 5hXocQ TybYHK1wUwiy/2YQO5clsM9etDXUph3VGtQyWLrcvzU +oZdYqfO2+BDzvcPvX8zgG/PW4Rgos+JiRv2uHp1km6c +--- n8iSU7siL1RYrZH3qbRbEtD7H9MgFw2YuuwlCZkNEXw +2Id( i ]H+*LC4<"@W^;h0hR>n \ No newline at end of file diff --git a/secrets/common/root.age b/secrets/common/root.age index b00783c..742e04a 100644 --- a/secrets/common/root.age +++ b/secrets/common/root.age @@ -1,31 +1,33 @@ age-encryption.org/v1 --> ssh-ed25519 2k5NOg YmbPaKvtfcfoBEHw3yNp5vhE+XVzUprbyBK0MDmmeD8 -SRKPmndyQT/dCl+b8Cvu5Vh2VOlpMd3x6Vvw0uO4iOQ --> ssh-ed25519 iTd7eA 3Rue4QGiodPqjeTKKM0qN88HKwCWkmwBMWkNjA/7TmA -Uk3I820rcpL5YlqcFkL6zdnNNoanI0qDi+mhMXKVxuE --> ssh-ed25519 h5sWQA 9zcxhz4bEox4G2dSRcXoQkPpwY54LT8ZVpSpvlsbgig -u7gerFg6oEW3AbJs+fBbpZhFlPTsEjU2J2pzuYTQXpk --> ssh-ed25519 /Gpyew ECbV0DgETfbvF+Q1SrjJlELMszd9jYr/531fnwhR0hY -WNpIJes+t7AAaMoy/w0VY+ZMlL3cdpYmn6+MN0H+FKY --> ssh-ed25519 LAIH1A hGk2swRwo3+RfgA7YEBTTBGjQfsCLomVsbibWSYDsWY -s24C/xWNaCDyaLmjCGs6jDranUM7oUDioHKphihr+qY --> ssh-ed25519 qeMkwQ 8awNaR9XeQkvpI6myrt4Vw8Zf+rMTEp3GlviMrVnd1w -WlhYTdfgQ4SRfLJ8JwudQXboOftvVV1xKrf50JXMe1k --> ssh-ed25519 TqxOLw dZt5AZcQquKWFaqw7ukmQvwDyTdXhgdEE/8vZste+1k -Oxl2ZWb35uDpaoMFQPtJAmjzozNsCaMxYpj3jvJXAik --> piv-p256 ewCc3w A8A3ROxMWx9TqoJOizACq7Nn/lhZKM17X66+2B8YQzUE -KdlLlekWwdJEH/wEXm5HciAtjkS5cxYmUWkej7TLbX4 --> piv-p256 6CL/Pw AiOTq8eaVT1xRTHPTyNe4AMlh3vIsbci8YjTr3pwMU97 -n9BKSF3ErIkUVCQi/7IXovV28vj7EbZw5Y89EHYEc7A --> ssh-ed25519 I2EdxQ iucWeurkE6h5oi0abTGcX6ARNczx5UAGDJ60TetbXxU -P5af2OXIgjrXs2NxZ0Uqn2n907oAl4eXcAl3GyS5l24 --> ssh-ed25519 J/iReg RHmuEjgm8BkXSmY/CSm79tBAEVKr1DAco89zCDqgJDo -xeZiAiICN9y9jdPpeV5HnksRnmZCDS6bp5bOlhIqRQM --> ssh-ed25519 GNhSGw uRhFkAlkmpm8fjaPYHCj3zrnauItBnZSKvBDhiacmEE -UXkvpqB6yIvtafeyb3eLuemR2rdkzm7ZkxRBuZ5vm9k --> ssh-ed25519 eXMAtA BbFvjDyTd4tjqqECd5syWrpO7b5SDdYBmGGzJI5A9X8 -5wDNuBCpFsW02tBO2QvSrRs0MKUgmRgqCfuTxaovoC0 --> ssh-ed25519 5hXocQ 7JpeboYqxK/xmrqw6YZzzFnutiM4OonHjN3bm1UIG3w -lux99mMAaHuu1Yzrty8Q7D3jPYgZHWhcP3WOYth1sLo ---- /CcrdzDPefk+EA7YxAtJ4cPesIFb6RZy50kDV2FTU7o -'aJ9ѓKhDJW$+| %Ԩ)Nny@FEjx \ No newline at end of file +-> ssh-ed25519 2k5NOg t32c8XvPUnNVEXPozGcApf7QEBwBkgiEe1zLmGT7LQA +D4NuIyMJl3yRO/ESlEJhME+//JsMPJtk8nl4EcMhR3Y +-> ssh-ed25519 iTd7eA qqHaAxq1ymmItFJ9PAr2EPWhbwzngrwpnwImGGGZiR4 +7eDI/hF6HNu+b8AtSKdCSiQuLwcWUxR7174Wg5z2HTU +-> ssh-ed25519 h5sWQA fOcvn/RKWzvRUS4SKI7smzVbsWocqtxA8370Hcs3mmg +sWME+371vHErjahrHA8+eqqO+Bd8QnxfcYietwUC65M +-> ssh-ed25519 /Gpyew OOcfnMR2Ass7kWlN/Mg8I/96zqaamr21kJ6Od/SdXwA +Qb5C5YfXy3VoQqDS85PtHWbKL1CN1lGKXUAoBUSanJc +-> ssh-ed25519 ndorwA dLvcBbFpeMcJ8/890Nqr2F/SS941R4QIpzfmplpkyC0 +t08TMC91ZZTm/peRiTvMKaXh8KEis3Xd8MQoO3VOjTc +-> ssh-ed25519 LAIH1A xiBdmCCY6/J0eMLmvxc3SVGko/xfoRvPfhD69kZF3Co +aNnbsnYmeOFqs89AcZQjHM6g4rff1ukcGFbcMwunskU +-> ssh-ed25519 qeMkwQ ClSt0YLAw0Ed87RYIIXDsGnbJMVIbjVCMsRc2v6pbmg +z/23VlFPtnlDXuahIWDpd3Wc0YTR8HyqZvLWwUdDVPc +-> ssh-ed25519 TqxOLw cB3vhLvW7fZt+47i4OUFx5JNONDFG9o2IbcbKASXR2U +USgOG1RFqO1GBUxpcF0lqEG6iVoTBnNcsWZ9BoAHvHw +-> piv-p256 ewCc3w AhdeDZzVI+VxcncaGarPxxY24TqVMj3R6VVPDN5MzNJN +8pbWbNUYpgwyaX+fJP7SWXTf40cLCrzcg2PU0Wp8oUU +-> piv-p256 6CL/Pw AigcQdSY9+vvNqwdMzlmjCrT2O3Y4/YnTQnxqoOXX+Lg +zI8rJaPzNX93BAiiMkrGqYc5jjsA/nqdNCJoxm1A5xw +-> ssh-ed25519 I2EdxQ V0jYjzjJaogJJMkY/ubr+GvsFttvxcZ7bvDP1M/KJkk +5mKLM7HAfA+s4RfLYi3eSpRKBD+bjvXdQgtdkIbI8+g +-> ssh-ed25519 J/iReg W7q13058CrpdjRVg6pYuWeMWQJRvy5HOxaYDwb5jDBo +8HgKGeW3AY7GgT3fGVb0G387rgaCxf3saHy8Dodl2V8 +-> ssh-ed25519 GNhSGw zxo4R4J0r4iAhKdTzowqKJJfbH4fT0QF4RgqNcMJGEg +L3f5FsCyu3AhBXgAaWwcsUxlwCEyyX9MazBrX+g1Yic +-> ssh-ed25519 eXMAtA IBkEVbPoa2HlQEIUP2PR1YZpe5vwEpraLDhIPc7Ll3E +ufmVD2VgVc1ctSTK86CTqDtKVPbub2L9UrH+6N4O4S8 +-> ssh-ed25519 5hXocQ ilfvB6Qkk9dwG8jLUq+KaHVLYUr/7SIs+hIdMjt0ImU +smU0IJoDQGzT6iLVafoaZof3+V55+lyySJ9HlvU6h04 +--- Z/MNH+zwKJn/RqOGzUi3kFSrAbz/1rAJFANRcVFBiAA +DYE׳T$f{_ȐwVVa6le:1h_ѿJc5#῵jK \ No newline at end of file diff --git a/secrets/neo/appservice_irc_db_env.age b/secrets/neo/appservice_irc_db_env.age index 61087d3..17c80af 100644 Binary files a/secrets/neo/appservice_irc_db_env.age and b/secrets/neo/appservice_irc_db_env.age differ diff --git a/secrets/neo/coturn_auth_secret.age b/secrets/neo/coturn_auth_secret.age index 2ac1e90..e3eb2d1 100644 --- a/secrets/neo/coturn_auth_secret.age +++ b/secrets/neo/coturn_auth_secret.age @@ -1,20 +1,19 @@ age-encryption.org/v1 --> ssh-ed25519 /Gpyew v0IqoUYfieE87jMKBLBXcc1amCW4Yvv0IRdRbwPS10E -M+i/CVbVYt+Ync6WjXQuurcwjUaormehyhAUf88jVn4 --> piv-p256 ewCc3w AxDlsQZUVtsbd3+mbL9xrp1tSLetzNnyyfA8vpvzGTlK -vFCIppHYU3xJIA04azjm1Iep4KKsgrtgabMzfPK44n0 --> piv-p256 6CL/Pw AlgXPmHKl4SX+ZBcgg5d1yyjIIW3ZbB/5jPDljjSedez -tbTih/OlT6sd3C1K7SdYFawUsHDTrbPf0ZaOH5+UFUA --> ssh-ed25519 I2EdxQ QddIpLDoWFRzwKh6a2AT1A+/FJ+XNLG6dn7bXhHeMG0 -K8hJxagVv4HQ0yjrvb25wEWtI3AJBUzsc6RFuOv2k+E --> ssh-ed25519 J/iReg FUvDVYnluuwFUVc585stre42Yq3DXHO/9dYagJx0MDc -IThjI+lcHpud7iXnvDULPUUVr97RV3SDLrFuATOlIww --> ssh-ed25519 GNhSGw V6svkQ6B/rpYGyyLbhZRJfZkzFRInYPvbUFeKGDsBDM -dO+b8Eq1E5JHULnDfIJAtugboMTSTtcvD/brJAwf8qE --> ssh-ed25519 eXMAtA Q1mwgmya5U87Q75c2KhhLUKfaDRm/WhHnoPCAyJB+zs -Cj+BiSc1v2kdOjkuZSCiNUnB6oRz05kAGH3PwJyz9eA --> ssh-ed25519 5hXocQ 1zO9Ob5Fo4JUYG7vUYdaBcL/1++4vqZQc7zVrNPyUEs -giGdiXDB4Q16y8qH19y+aq8bzZaG8xgFzDJ3QkbWqUw ---- 8z2WQTx5KtMtdNlIgkzUwKPatgX5sM19u60iUZCoxOo - _>eRb!PZ#ZU% pq+7Ņ"s-K"$ -MS}²+dã5Q ٟ+a: ŭ"+s %c/<RC~9Aͣ\IfqQ \ No newline at end of file +-> ssh-ed25519 /Gpyew gai0MQfCfwSfBzDBJv73bhnq9iVPOaMWiAEreD/UtnM +QMeWI04foPgsRzMX1F0nLDC9SdXQf5ppnE6rd9QxElM +-> piv-p256 ewCc3w A2FX1OBPYM5MURRjR6Ln7qKL+RX55d9NkuYKbNdrGb+w +nwuWbj2uMDrx37tOSmBBXj8v8CwrrCr0lvIdM2QMmyw +-> piv-p256 6CL/Pw A+f/nymPOZUDBGnP/cdI5AktixcLqZt+TeovLLVGEWvJ +iDtI7GN0XZLC/4MHsuVsJ/PptBsrUkJzQ1gFLo4U+xQ +-> ssh-ed25519 I2EdxQ bWVJe3wOH0yBDUfI98HjkCGFGSQxUlS1kSrsjJPCQG4 +K5fLZae/fWGwOtXVOz/uCX/V/yW4ENUNyUQ1CKhrZTg +-> ssh-ed25519 J/iReg OepkrI3v355nO15NOeQkdd1z5/mGXg2hiNn3jElSrFE +g6uO7XFhiypdyEqXe3shhRAi6nmA6A3g03A3JsP1cD0 +-> ssh-ed25519 GNhSGw KXOMd3wolTVrDwlaBVmVxlIxSRdIJnJmR757dZMvuGg +UYYH88IRkelLeq1exBnbArq3jlCfG0QBfKXvfVW8isc +-> ssh-ed25519 eXMAtA FRplHv6bc4xJl/D5Zp6pyYkBc2B8CUff9tipA7JHlkk +cn1aFh2gza5Nybvcu4g7J8zpM46aC9OFY42U2rJvKtI +-> ssh-ed25519 5hXocQ uzyWcBtrc61NolPn1+5TWr9pqQByZw0hnpBuDwWyrm0 +aCcVjj7WAWDeqT+J+Yid0M4xgW8OUr42MZ4LI0l8/SE +--- 0u8BTWljIOLPIYKhLdNksQsrpvBi5GG4XcKardKPal8 +~zmU2ϛLFKS$t(vLa(a_=hDf;ҋ ssh-ed25519 cZNEGg 1IExuYocHQMUARzOIlb1wEMF4XYRF4wsKf3YyDzAuAE -jU/FpHsXSgO6LmXQnlZwiTZtTmqTHJ/ftFRH+TzW2Wk --> piv-p256 ewCc3w ApldHeqzV736VZnV7K8FivXC9ZJTQ4uVbwS37QC8my2c -ePkP37ESE3LrvlAXRT/bC38bEr81KdDY1hphmFZQjPQ --> piv-p256 6CL/Pw A1/F54DYuMTiegKSk2EmLtJc+Ow9SzZGuxmpCtAxwDY8 -gF4ws4resurPQgDJ1Xad9/xwVvL+qrqoB352dctXpzw --> ssh-ed25519 I2EdxQ y1dT+umEWWE3jLL4pvbCSzxcQBoDvP1iY9LMI+4jjhk -6TxUadoIzp98+UmZxDnZzG/Ujzmz78zxswJtrxcyA2Y --> ssh-ed25519 J/iReg eFS2Vj0srrjZZva71rL6SK+4hpr8Py8ywDtva0ESgQc -aSTyNlYJJTl2J8xRrYMlYJ2ynvzkfuWrJNfsvBLpw24 --> ssh-ed25519 GNhSGw 1GdlvMDIlg6mMhVbEzFPqAj7NQLavgQh9XXg9juG91w -oCwmcCFOqzNqa19VmBPU/mfiRbkap3/yqLZuVGrnKHk --> ssh-ed25519 eXMAtA XOzDKhoGWJufceYvYOYYBGj0Alk1dkCXK1LqC+R9Ojk -CFjSpPpVsJyr4qowR1wR4O7J+vhdi3uDTwfppf4j7+U --> ssh-ed25519 5hXocQ 4mlMh1Q9RN47TKGAlhoRfseuft1qw0HWGUewF/eC5U4 -2nhvo98zEImfRjdA7RumzA0dEQiFsl7EP1iGVJudJP8 ---- z+Rt9J0j3wsKrvCOYmvG3Bx7lXXs9YQjkwL4HyLjrDI -SnVW1"E)hf` pV#I%rF]j ΛڨYu -ǤXt^1ҩ|m0O:1$I/A1;+rEqL9K, v~*kv˥knG9b \ No newline at end of file +-> ssh-ed25519 cZNEGg cVspodmv/K2h9J/wY52z4p9dWJgOyHEUgJdaTyuEmE4 +ZsvZ+BH3LAR2RGsBRQb5AseD8z0SwKw1773ip6mHcd8 +-> piv-p256 ewCc3w A4ZkgyrYPH6JkaVAZ3GwMpQOtmv6xo0Kwa9w8p4pS2IG +vGGx3CDsh2z8qRAqBJ4iXCOdoAVJnpgPnKPB2K6a468 +-> piv-p256 6CL/Pw AonmucJCtKUwGAM+pcmCcn4QT/Gkz4LaBUQ7Z1odgq7F +sUmvQNNuAPQNfZ31W2PoZReO/gOV+t9cbYQKrcTdpJU +-> ssh-ed25519 I2EdxQ JbXNPYWarOPqVPVcXcHUGoyJkX2IpHBCAWTo0pWduy8 +G6q968SsMOLsc8K/jAZ6GW3b8YVWCN7TVIQYSZIcjvw +-> ssh-ed25519 J/iReg 9+Jam3ZE85ziBY0Y6mAHjdiKf2VMiakGgZYGCEz/TU0 +fHmRqBGeXTO7E7K2uK/GtzmEjMjD9/uCl2bRZLQH5PQ +-> ssh-ed25519 GNhSGw O6XhiPbbN02sjUEXQ5s5pDA7PkiBWzQ1ojeKwA0MHjo +PM7b/P9FqFgR7aQdtpgbwsmsj4BJebQdZTyUhy7gH88 +-> ssh-ed25519 eXMAtA sdgjjzFsgL84QrzGFlkj1fWvYW6WvX5Gy3qEULF3+mU +CNrsb+FVyKtMudv94M9x2sERTpZgmpWvb/cDjR1vSXI +-> ssh-ed25519 5hXocQ Y6PzjviKuWYIBCvIY1Y30AXlEmGHPRBsiL4F8hdAHQE +gmFAHNCE3rVW7Lpbdmy+9rulaIyPeTt7WPhYjRrUIuI +--- qiDghF0Z9Z/xugkXQQbhEAc2Z3ibSUN24yFktYH/+yg +xߘU`koml~|MВH_2) 08CozcF@h,}w[$ӌCO6NHD*UT7I\=XѻlشJYw@dVzd͛?ǹ \ No newline at end of file diff --git a/secrets/restic/client_env.age b/secrets/restic/client_env.age index 6c9746f..075f602 100644 --- a/secrets/restic/client_env.age +++ b/secrets/restic/client_env.age @@ -1,31 +1,35 @@ age-encryption.org/v1 --> ssh-ed25519 2k5NOg XGZP4EH1IDkn3p4ePkfsWtsW9bMSVO0AvmMfJH4W2WI -5Mr/qVQlMnLE588JVpwrg67eHNo5Sm3pS0+hKyIXjZE --> ssh-ed25519 iTd7eA e8azFJdubW6QdX028QsyiyveLwXC/keqUKAOo7ov1WU -LtJU9FPHPJsQ0OZ9VkVuIR5euMK34UuCnv2YKza+eCY --> ssh-ed25519 h5sWQA osdcvM48i4O8blpFNWitglcC8ZDTQBI1NulDB7KQ8RY -2yaVf/txYLO/hG8aT+gUcCQkuRgUusrx+d4x700XZ/M --> ssh-ed25519 /Gpyew ZN+vKCfaHbLDrJazqMVAmiVmEf7/hzzJC2k5VrHrG2k -k8xCSXCeIpU/n0D/y1nRz5AIEdzZi77+i73xfhhzv60 --> ssh-ed25519 LAIH1A SoRMAtJ5hai4Ose83POu2PTrarox1MI98veJaUqcNhw -qZ0jUzIGnIWm4sR6l6QXYfCszIYT59b26I2DQca2BL0 --> ssh-ed25519 qeMkwQ by6fhcNSMrV1Lv30zCCfhZRs3x26OHcqUHfFYlsizgo -3khfxvt5DqFUPiA0I1rg9HyKBnQMPeSwEVNKG+txTd4 --> ssh-ed25519 TqxOLw 9lVMAb4NRSrKByLZmKuO6vy0k01wB65tCc4umewmzSM -ITdmhUt3oMpht9jSiuJXSckM7yI7ZeUaOza2wruWV9A --> piv-p256 ewCc3w A14aX2GMEbTgkcGFLcUCbiL+zt7b2BnnIABfe4jevPM9 -91FMwVTbhwauvucF76Xl3X7fD+1PQHBAtuL58EsW/mk --> piv-p256 6CL/Pw AtvjWTogb40ZYcFhe+NBkBNmtTTFKxtlwn48XVpPWowy -8oPkdrBttDuOZIxFB/8WHoo0ufuFOp/oI7QHHh83Lkk --> ssh-ed25519 I2EdxQ ILSdic9OWDS68w6uK7FE5a0KyrjoXYxb4fFw3vS8/Hk -zD22ZiBw9N9H1+yXwQgc03J+t34d3h9l1yRx12zVqyM --> ssh-ed25519 J/iReg 5eIrm4COB80DxYnx0n7g2hrqhchZcw0zhn4AD+vdQQI -Yd0K7dNZwpeTTsvjKb7SrOwDaPQLVUS9IhrtQgWZkFs --> ssh-ed25519 GNhSGw su9SMmlH8f1K/7N1ggbGGTUm1zM/p0Whgjye87MaZWU -BEJwAlduPYI+rMCyZUYJKB7aRpsQlKr6HIh5hYpVxN8 --> ssh-ed25519 eXMAtA Yxo6gFb1CsRI39KU9/wR0u+VNYFvRsV1G96CwkFSdgE -27E7XV3aVNxppX4bfta/XQkVdxo/XGRCk0PUDWJyeww --> ssh-ed25519 5hXocQ NbomDCWlMeNi4X0Tw6TJ2q7LVLv/206DHScIr9ijrG0 -hQrBPaut1XIfroDxL+KGSkGrRZ680O7US3WGIJu3zCc ---- Dtvnt2AyqssEE3RYew+Zuq14E4YGRVkccEL2qssodTA -}( IR F8ͯXΞ6dhLKd}WǗIO-HϾE’ctЃԡO^8]n^*x+R#%g2 =*`j瀰~J \ No newline at end of file +-> ssh-ed25519 2k5NOg Sx09giwaVXXVJO6EKm0jhwa2UMvqcHyuDhX86Na9sio +AZ2OocMQt9uMJ89P9ZJ6prhc29Hyn2Vf170x6OkSOeA +-> ssh-ed25519 iTd7eA oAGx54EyWiWtCPNlEz0MAEaSEjb0vkiSvAD9fHaYwEQ +Gxp5h9Je2O7vGxWjsYip7QR+x5YSBSUuV14aIUFX3zo +-> ssh-ed25519 h5sWQA 5szi6CNMYTYE2ed3E3Ny/MpFf3mOr37mrFgWDv1/pRI +fURWEkvYOWFTLG+YeRGippwRx76AVPC8ZiVdQTBw3g0 +-> ssh-ed25519 /Gpyew RZslC8fR9okA3exKN6Yw3h6YUxOpB+ILBiP2OyiuoUs +Km3tMEiIcKz7578mIs8J1mOaVC/ergtUUDre3i/aVDM +-> ssh-ed25519 ndorwA inSLSkCsUCU+JEWCTb7mS5q8EHxBN91gxr/VwNzxbUE +tkSdBaZpEW/CBU9pX1cRyKwu1F1rwI/p22xz8mNf3JU +-> ssh-ed25519 LAIH1A xCu3mnqf7DjTEDHvt7HHsYDmnd3M9EUir+P/J4Er2Fc +H+2pjPjGHEbbRIUNgUo0VLUEr2yULmr4z+4+LMc31hE +-> ssh-ed25519 qeMkwQ ziFC/prsHuZdA2t1wLWs6kbB1by+Sz9VtLYaM3pgwWk +/tNj4d1JMIoNJUFCPlmNrcrdDsm9ETumFkjI9rLjx34 +-> ssh-ed25519 TqxOLw b9I2EWoeLwGuqj+0jDjDQfBupKEGoDebluMGcQdX52k +fuRzQyhkhswLMWI0QWiiNVxXFNfkc9Fj80sSGBzcqqk +-> piv-p256 ewCc3w A/jt37hu5emVdqjgUm/wIHqT8qwkAXmVJRs8Z5lRYUoG +Y7GcJVLcaOZAGQnq65liE7yix0knWTaQuGngR+J2TtM +-> piv-p256 6CL/Pw Areml0IsDpTlLwBwrmjW2kMUnsI/mcoR9dczQXcX8k2Y +BNHEBuw2NWRcsKiPsEZLq0f+mQpC0MialfyqqwL0reo +-> ssh-ed25519 I2EdxQ +HtEglYiowkq47CbpIQLPixBNDsubSNJMoq2UiNtoF8 +PMdIucCqrqmPAiEdKj/aEwsqHS8ms3Ky3Ba5qhjKn1I +-> ssh-ed25519 J/iReg NAyHitQLopW5BRWBOAM+BLeDWSYhDXgyFwM+cN9M0BQ +wleH+H2tgiM6z0/QnFQwPrz47hUbuaxjFCSlM1GUveM +-> ssh-ed25519 GNhSGw EY6PuWO5YOPb9s7NlqfSjdJ8MfWp1ncedMfSzxehJQI +8epJ8vrIIaGx1k5chspNamYbznAMiIvgKtVK6kPWNoc +-> ssh-ed25519 eXMAtA XVR/BWKUW8lB18QSw5n5UbIvBVpLv9kc58xp7tqJ3Cw +m2kksol4d4IE9yw4dvkSZQtT8Yz6+7Hd3ewMyeZTdZ4 +-> ssh-ed25519 5hXocQ WVREzx8zXfkWQu3+Kw2lJEK6n1+BiPbxxW1NgxfRDWc +23yydDtQuuGbLOr8AMCbQMhApSvQcL88V+VL39SpVsw +--- g5fVjspPyLuWZ1RzqNZ2N2BvP8xIYJYPgVtCFWbKBhE +p J 0&MWʷ&q RRE27JؘI7SX!$1xJ[ +Vgކ"P7'}&W3Ȣ5l%()/Z7c.Tmbh_U! +J̬ \ No newline at end of file diff --git a/secrets/restic/jitsi/base-password.age b/secrets/restic/jitsi/base-password.age index 44d3dab..4687d51 100644 Binary files a/secrets/restic/jitsi/base-password.age and b/secrets/restic/jitsi/base-password.age differ diff --git a/secrets/restic/jitsi/base-repo.age b/secrets/restic/jitsi/base-repo.age index efc311d..e560779 100644 Binary files a/secrets/restic/jitsi/base-repo.age and b/secrets/restic/jitsi/base-repo.age differ diff --git a/secrets/restic/livre/base-password.age b/secrets/restic/livre/base-password.age index 6ce01fb..aa4a40f 100644 Binary files a/secrets/restic/livre/base-password.age and b/secrets/restic/livre/base-password.age differ diff --git a/secrets/restic/livre/base-repo.age b/secrets/restic/livre/base-repo.age index 39575ea..4a5df9f 100644 Binary files a/secrets/restic/livre/base-repo.age and b/secrets/restic/livre/base-repo.age differ diff --git a/secrets/restic/neo/base-password.age b/secrets/restic/neo/base-password.age index d445971..a95465b 100644 Binary files a/secrets/restic/neo/base-password.age and b/secrets/restic/neo/base-password.age differ diff --git a/secrets/restic/neo/base-repo.age b/secrets/restic/neo/base-repo.age index ef64cac..684844e 100644 Binary files a/secrets/restic/neo/base-repo.age and b/secrets/restic/neo/base-repo.age differ diff --git a/secrets/restic/redite/base-password.age b/secrets/restic/redite/base-password.age index 35d1b35..25450c2 100644 Binary files a/secrets/restic/redite/base-password.age and b/secrets/restic/redite/base-password.age differ diff --git a/secrets/restic/redite/base-repo.age b/secrets/restic/redite/base-repo.age index 2f072c6..2f12dba 100644 Binary files a/secrets/restic/redite/base-repo.age and b/secrets/restic/redite/base-repo.age differ diff --git a/secrets/restic/reverseproxy/base-password.age b/secrets/restic/reverseproxy/base-password.age new file mode 100644 index 0000000..47fb260 Binary files /dev/null and b/secrets/restic/reverseproxy/base-password.age differ diff --git a/secrets/restic/reverseproxy/base-repo.age b/secrets/restic/reverseproxy/base-repo.age new file mode 100644 index 0000000..3dcea87 Binary files /dev/null and b/secrets/restic/reverseproxy/base-repo.age differ diff --git a/secrets/restic/two/base-password.age b/secrets/restic/two/base-password.age index a50a037..dd03d3e 100644 Binary files a/secrets/restic/two/base-password.age and b/secrets/restic/two/base-password.age differ diff --git a/secrets/restic/two/base-repo.age b/secrets/restic/two/base-repo.age index e010244..756ac21 100644 Binary files a/secrets/restic/two/base-repo.age and b/secrets/restic/two/base-repo.age differ diff --git a/secrets/restic/vaultwarden/base-password.age b/secrets/restic/vaultwarden/base-password.age index e2d9fc1..29602a7 100644 Binary files a/secrets/restic/vaultwarden/base-password.age and b/secrets/restic/vaultwarden/base-password.age differ diff --git a/secrets/restic/vaultwarden/base-repo.age b/secrets/restic/vaultwarden/base-repo.age index 875d74a..f293b0a 100644 --- a/secrets/restic/vaultwarden/base-repo.age +++ b/secrets/restic/vaultwarden/base-repo.age @@ -1,19 +1,19 @@ age-encryption.org/v1 --> ssh-ed25519 TqxOLw TPSKklkAk6ieiAFWi0KDVGsJfY1olwbogFtFTZm6pnM -W4q+4ouL0aPrbQv7fL9pNkJCCxDOffQ1NwQ9g7qtX6U --> piv-p256 ewCc3w Aill1yMo1Nx4JRj2i1n+RKMej69N53gqYtqRmh27wFi0 -hv7NLBpq4p1nBC14BvH3Wp19NF8nSw3OGQREkZWLw0c --> piv-p256 6CL/Pw AoO81MY44pgb0PqsvNwvOF07RXKMb969VfL+bFgPas8r -5BZoU3SGWB9DpDQ3NYbMPIj/Y/+Y23VzzW7ZRibG6s4 --> ssh-ed25519 I2EdxQ /3QOTzDfiXNDu6skJ+xbSm5tAbFAs1kDPRPT8lTsijI -k090fLhAIDW499LG1QBRTrn4C9iZusnq4dlnr2uMH68 --> ssh-ed25519 J/iReg qVBLoJXL5JdrDXsBUlgx2Fo9N7yC0IuV43wbjnQy51M -JvkncBSQfqAEw9Rv+S/98sqLbjX2y06rBLcJEViPwRY --> ssh-ed25519 GNhSGw YYfpQPqyFnyGKIR0pH8c0frRSnPrsA7h9PDn+MJ/qGs -i3CuTwxcIrwIyiHmM6RsF6wWEKBZEZBzETRcHqFZS14 --> ssh-ed25519 eXMAtA 2oXrZNY0qi8hxK8oJFFdHBI3Bvoc3Y8ElV+CvqpMZHU -pc8r6mihvCIl1kJIZjioM9Wd15L7SAuHfubewB89oOA --> ssh-ed25519 5hXocQ ql5ccRa7uG+qeWlzzV8IbNM6kKTB+MikuqRq/KV0kUQ -XjC1V1dsBlu8dGUx/hEGOPnJkFFGx1/vfkm417SqE9I ---- C2trdYb263gv5x7o1lsNtXJInIVr/WWhuHfH8XNQxqU -!+v64%^y3f39gׄuhE1hJqn-7fxVuDAEʣv;:.HZëq/y:9jP}@RtN8tRށYw'ui]\#1 \ No newline at end of file +-> ssh-ed25519 TqxOLw fM+balMhijr4j6y8qWHsDq5IXsfdDOkrVDTtdojZExc +XN682+RCk1TRSIXeZ2ihqw4zMyX9aGZ/Jr4PeFzynuk +-> piv-p256 ewCc3w Avs41I/2QemhhrY94MFMEM7g29uOl/tNHw30ThNLEvpB +uPpt5ZC7TOTYt854jdLo/uCkEBSJHrVjPTImsVgxfGs +-> piv-p256 6CL/Pw AwX3QcSAG7SOB7I5n7t1Pc3O5I1N56ogWgiz+/UwBJH/ +E6lxKxOp5mahmlUmW9E2HWfeS+PFhwrNX45DQrxx490 +-> ssh-ed25519 I2EdxQ XJm7B7A7hfCQVHA/f7T2pf6uiryQzT+5cySwazdlXiw +aCV9fiEmYdWXwpprBk6GmW2ky49WrQ5ear5RMYbB0sw +-> ssh-ed25519 J/iReg j+b6Y+OobOl5c+voRqCBEXQfmT3ggACKabva8W3xMi4 +PPC7U5ITLByEjY7lJE97UtpQJdVPoLleNkr217fZAQQ +-> ssh-ed25519 GNhSGw 7OFDHMMbeBxQPPwqOSQDwhW4ETKMd7vYbsrmGO2191M +P68nCeJ08+X6togrKZLFOyjyeKg4rCmsNIBNvC0h0No +-> ssh-ed25519 eXMAtA oUzk0qcvlyLEIU2M4tUTlBtnCJzNDsckvCq8Nv0b7gk +ypI5evKuVyAK2jxvuTJ/L73JprzkVweEojZGN+YXpaw +-> ssh-ed25519 5hXocQ 3CAdO3SaioGKj41FsCk6oV8AW650CBg2aLc5mIAjqh0 +MVTrGPSBVTDVFepAP/FGNGH0lwQ0Zse5bZXVuYpMWQ4 +--- qIB3+RfL1fNLxWqHjVrEzfwsjgJDfPIDEKvunVN3kHY +-,~% !ȶ ѮK i54]UcZ)߰S+oZ"t+*U'rt|#JO9-5Lu5xڥ.EgƎG䂊i(N \ No newline at end of file diff --git a/secrets/vaultwarden/env.age b/secrets/vaultwarden/env.age index d2d5d0e..a269e17 100644 Binary files a/secrets/vaultwarden/env.age and b/secrets/vaultwarden/env.age differ