Merge branch 'collabora' into 'main'

Collabora

See merge request nounous/nixos!28

flake.nix

@@ -45,6 +45,11 @@
               modules = [ ./hosts/vm/apprentix ] ++ baseModules;
             };
             
+            collabora = nixosSystem {
+              specialArgs = inputs;
+              modules = [ ./hosts/vm/collabora ] ++ baseModules;
+            };
+
             jitsi = nixosSystem {
               specialArgs = inputs;
               modules = [ ./hosts/vm/jitsi ] ++ baseModules;

hosts/vm/README.md

@@ -6,6 +6,10 @@ Voici la liste des machines virtuelles sur NixOS ainsi que leur utilisation (par
 
 Machine des apprenti⋅e⋅s sous NixOS. Toustes les apprenti⋅e⋅s ont le droit de sudo (les home-nounous ne sont donc pas montés).
 
+## collabora
+
+Machine collabora (libreoffice en ligne), accessible à <https://collabora.crans.org>, mais surtout via nextcloud quand on modifie un .odt, etc.
+
 ## jitsi
 
 Serveur jitsi (vidéoconférence), accessible à <https://jitsi.crans.org>.

hosts/vm/collabora/collabora.nix

@@ -0,0 +1,46 @@
+{ config, ... }:
+
+{
+  services.collabora-online = {
+    enable = true;
+
+    settings = {
+      ssl = {
+        enable = false;
+        termination = true;
+      };
+
+      net = {
+        listen = "loopback";
+        post_allow.host = ["::1" "172.0.0.1"];
+      };
+
+      # ouvre seulement les fichiers depuis nextcloud
+      storage.wopi = {
+        "@allow" = true;
+        host = ["nextcloud.crans.org" "nextcloud.adm.crans.org"];
+      };
+
+      server_name = "collabora.crans.org";
+    };
+  };
+
+  services.nginx = {
+    enable = true;
+
+    virtualHosts = {
+      "collabora.crans.org" = {
+        locations."/" = {
+          proxyPass = "http://localhost:${toString config.services.collabora-online.port}";
+          proxyWebsockets = true; # collabora a besoin des websockets
+        };
+      };
+      "collabora.adm.crans.org" = {
+        locations."/" = {
+          proxyPass = "http://localhost:${toString config.services.collabora-online.port}";
+          proxyWebsockets = true; # collabora a besoin des websockets
+        };
+      };
+    };
+  };
+}

hosts/vm/collabora/default.nix

@@ -0,0 +1,24 @@
+{ ... }:
+
+{
+  imports = [
+    ./hardware-configuration.nix
+    ./collabora.nix
+  ];
+
+  networking.hostName = "collabora";
+  boot.loader.grub.devices = [ "/dev/sda" ];
+
+  crans = {
+    enable = true;
+
+    networking = {
+      id = "49";
+      srvNat.enable = true;
+    };
+
+    resticClient.enable = false;
+  };
+
+  system.stateVersion = "25.09";
+}

hosts/vm/collabora/hardware-configuration.nix

@@ -0,0 +1,32 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports =
+    [ (modulesPath + "/profiles/qemu-guest.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "virtio_pci" "virtio_scsi" "sd_mod" "sr_mod" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" =
+    { device = "/dev/disk/by-uuid/ef139717-388f-41f3-b707-b0f75af3f546";
+      fsType = "ext4";
+    };
+
+  swapDevices = [ ];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.ens18.useDHCP = lib.mkDefault true;
+  # networking.interfaces.ens19.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+}

hosts/vm/reverseproxy/reverseproxy.nix

@@ -136,6 +136,9 @@ in {
     reverseProxy = {
       enable = true;
       virtualHosts = {
+        "collabora" = {
+          target = "172.16.10.149";
+        };
         "eclat" = {
           anubisConfig = "${anubisMirror}";
           httpOnly = true;

secrets.nix

@@ -32,6 +32,7 @@ let
   hosts = {
     apprentix = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDCJV6jqQWEYuwi+OJ9r/4TbBN/cK9NvYWNiJhpFzcc7 root@apprentix";
     cephiroth = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOsBGkhiu6l3jeo15cQHMu3dPyL025zXPV2ZH02EDYEt root@nixos";
+    collabora = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFa2D9fREtO2r2oIx6q9JAKFUHtxGbgEPMjkx09DQSU8 root@collabora";
     jitsi = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB6jVMIZ5y2oXX9HOkw7r5UUjw95MlFaFuu7FnEC0Q8z root@jitsi";
     livre = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEVfKNokHG6ig32hhQxTep+fKFmKahlDClPrX/dP4/gb root@livre";
     neo = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMGfSvxqC2PJYRrxJaivVDujwlwCZ6AwH8hOSA9ktZ1V root@neo";

secrets/collabora/.gitkeep

@@ -0,0 +1 @@
+

secrets/common/root.age

@@ -1,38 +1,39 @@
 age-encryption.org/v1
--> ssh-ed25519 2k5NOg cR5ohdfnKc3NNlGxdVDsLe+jAmLBIfOiaGfFAPPmrTg
-848H6k08p4PzbkD+c4AdtGAK0D3fxFFOEzrvqvFDgbg
--> ssh-ed25519 iTd7eA AWwcHOwmn5hHn3POEFF5pJpvWJ8lcbrMe3n3JqBfyX8
-D2PdIh6BFBocjfNeDLY6f9Th0yixTBp7V6sMVEzoXjY
--> ssh-ed25519 h5sWQA pWqJ5nuVHkg6rFvGn+8tkdH/cKQ/xwIMED/giZeCOGY
-GOKAPL951GOkyQxM2SEst9Yv7Omhp+y22zW/Vbu0x0Q
--> ssh-ed25519 /Gpyew kRpo5sKEN283fFQpr2ML9GuhpugiqRsQ0Ezc4BjBKlQ
-8hKJmmgoNapIruh1hc+EUyB/uZVKvtZrocPPd68naMk
--> ssh-ed25519 FtI9pg Ieby+KtL7TViX81m58F+y1Ll3aZubWndFBOpVEEr5jQ
-JhpUwA+U5ppm+SCPzQ0JNA/hjGGUGd+6xpDenjPsnt8
--> ssh-ed25519 hTlmJA HTUuHAiK0jRB86m9kxk+K/U9b7cnTLwJ6DizUhpNOjw
-T6VuoPzd196TizLAJgi4xa4pMXlF8nzrbQMENRbRlY0
--> ssh-ed25519 GCcVXA 9mjW03T5ockAAAtZtVjIZTIYOXwaCeG4nAK+K/97EDs
-yYYVpyomBECUSw+huUaX7p9TdBclUukd0m1tZbrOP/0
--> ssh-ed25519 LAIH1A 6aYzD3onWE/lZE22Y+ZRcXqZX8ODq8gM84fvtIuG3ws
-kuNjmtOxsCC6xpsMpDN+d5/nmKgKo5Q2n/NvVEJGqVk
--> ssh-ed25519 qeMkwQ UkTD2aRW1DcE1pwwcUY5jdzFry47IOfrgcFeb/7U0iE
-0K3bYslOGMvhvD52C/OYKWLCSD/GFYUnbAMNGOwJ4O4
--> ssh-ed25519 TqxOLw ucyZoaPMI+iC/lC8fdZlSwL70ScqA/18rFgZKGrWbw0
-fNLP3zECUQUOz33Rf2XZLHiY4uSt6oc0z5U7x0GBmtc
--> piv-p256 ewCc3w AocWW7SEg3MVI/sCjCHu9obVVVVbFcfFazpmTTR+PRMj
-498jlz/DJgqzZxmvF6sRHruaOK9ssXpuM1UfbZwzWE0
--> piv-p256 6CL/Pw Au/taJ3kM3uj06PdSgUPHC6UVCCOYDbMY2m2Eofbi63V
-9NRjQxdkGM6lNnRvqWyR7ugweuvw4R6oCG2Qm8JBPuk
--> ssh-ed25519 I2EdxQ nek4QEs28RjB5LmGI8QmI+PovaBsP20H58HLft9t314
-7kD4VKhSe8GVI6G5nEEB9S75nqiWcw2KIq5yXQW6pkM
--> ssh-ed25519 J/iReg NaSxlV2jBjaEHjddB2x5wiUfu8dqzgPOKB1vaRo8cUY
-b2Wak21uSh9FEcCsXAc9zjuakI0B7e2D4j1EmyKHCS4
--> ssh-ed25519 GNhSGw /0K7Q0S2PLsIa4gFjFpwcXYHhRuDdRJH16FMX2/tJhs
-ti7iUykOROYtos8+jPlQoyCur3hhgZumzzaqHwE/k/g
--> ssh-ed25519 eXMAtA wx6srIjvJ9E+lZzvg6jvtAVmTg/0B6x6f1zv8D6LuEE
-iFjLVZ/c/pevSRzoBUee07TX2/tVFUThvvP6Bek4LIQ
--> ssh-ed25519 5hXocQ an1+7W1qN6bEdGXBfio99DzkTcZC6gEOm2ZQe11x5Us
-cbPU+Ih4aUVSOOveg/mQnV57Tn8boE4CKusOag5ZgNU
---- Ya9fvOnvystGbDpL8ti3cqD4sNIaMNF1Yv8OuviMgjI
-÷Ÿ¬®Våj&q‰nŒZ6Ê# ;<3B>
Ô8ƒBùùC§âGE1WsÌbã
-4Åö.š	å¯èÂ0»cjõ¡A]I#äM

+-> ssh-ed25519 2k5NOg rixa9J3x5WdikZ6JHibUNLkfUEego8cw13Rgc36mnRs
+FlG6znZ0aLWhCRRwWUHx2U+ZToxFfHu1QSzYe/l9xwQ
+-> ssh-ed25519 IJtQuw AiiXbhEE9A1pkMiW4h6l5RKHis4llQcJ8WLu06LKk1Q
+D/1sfNrhz7Was7oxF9ZqsTDqDBkgJKJNVMfiwur51Pw
+-> ssh-ed25519 iTd7eA Jfe3jwVemfIRsYnZ8TJXPH5XuRwIwRy3E248XuJNeTw
+2X8C8FclOe/P0H7qzlLQFLeKROxMBzaxCoz1Hu5Hd6c
+-> ssh-ed25519 h5sWQA 1Swe7b/WMDhSmkAyt+PbSLiknAhTo1E1mU5+uhaLmDc
+6CDLzLfASC9w44QpdCyJtssx8x/VOuTByTeIKV11Z4s
+-> ssh-ed25519 /Gpyew yZ3kTu7p1C/NnJ+BoxsF/xzOLI61MWqMVALHmjtNEQI
+vmwHEhM/wHB6SmBvLBNPLgtX3RH4cZy6XRXRxXtsq1E
+-> ssh-ed25519 FtI9pg Kn8jreESgKXYa8fEiFEZ2pLRUY/VNLEkXczjIguQrwE
+KdhE5rcyg3Jc4rsi5LWp+gSBdv6zfMo0mwviCCddVlw
+-> ssh-ed25519 hTlmJA /3lbvEtosyxvVEMAqmeSiK0DF5RInFnSlinOSFOgWxo
+mAYTH1QV7w4S1TP2oatxUPGTQyvrRtsWYVlcnm5xE08
+-> ssh-ed25519 GCcVXA Dr07WpX0Qi05oEmlRzgQthdtbgrlaO+TdFS/CLvKDyM
+CLylNARieN1GZkuV9sAdhhpmWZvDWL4lohjkRsiDbvo
+-> ssh-ed25519 LAIH1A REb7bW3Y/vmXgOkW8aRg+PPld9wzeOZJtt+wScgtiis
+bxgn6glfkRFZ9Wzed3vDMoos2DREGwcDWDBL57B7MVA
+-> ssh-ed25519 qeMkwQ vct0Kj/eftIkrNF49TivKblzjC9yZ13E6tUmgsgOfEg
+7vprQz4W5wia4yeeK36rwZXYOJH6Y7WBX3nMHBIHRqI
+-> ssh-ed25519 TqxOLw pYvP8YzTWpQSul6z1knYscHcZujz1qBGe0NrZMEGWgQ
+ThjtCv5Q3RUS0nx1tgmLCUGUm9vl+xGGMgtVJdBeMhI
+-> piv-p256 ewCc3w Av0vCaFCAf4z2VCJvDC3lM+axi6Dt0feRqYlaM1WfhKb
+bgBwt+eBETbag0brDkf7U9WtL3YUlUIG9P3LOZrb6o8
+-> piv-p256 6CL/Pw AoQCx9k25qfB3ZdLGBRxjp6iBblQvt0X8UyqD01JFtOH
+XuCe++pFvaAzoA60RHh9MfPrH5QTLTFy1IC2ywXo2GQ
+-> ssh-ed25519 I2EdxQ xdILzgBR+CE+qvOuX47s7jbrJy5rZcl+9ZK9zk+PVFg
+K2JlwcH2pAlabAjVTdmwp+Z7q/CaPole2A40Eqvsmfk
+-> ssh-ed25519 J/iReg ZpN/2brbFb/l8b9KVu7Bn0f4ZA/a4j0HztOhaPQENVc
+NAq98et+NUBpt7oEMeYAFJdHmTVoBiO63ck48wMNxac
+-> ssh-ed25519 GNhSGw Mj1k9wyJfeVDfNPqGMoTLzVHrmH42NE6wFe4hZgq6RE
+pfek+KZadR7+no/gWXI2SxQiD8Nlkljsa7zVPJTwnZo
+-> ssh-ed25519 eXMAtA X6duIpj4N9iYrOL9fEzIhQDNOa+Pb+1dw0mBWlfKLm0
+IOfpyQ2yiZ5OH/bj+6j0x0jrVI/kQnszPYn7k+fBm5U
+-> ssh-ed25519 5hXocQ EV8/gTsmgG5u7VDPOXoFuY9c3CTs5a9H7xBoaJ2TUV0
+P6iwu1q+NxyEE/FS+hxo6Lr1+nXFYFFxgRK3RQn6nVE
+--- QNRD5jh5P5LTJfukLP9zLSjXLPMUHZvP8w5J0Bhyvrk
+O/f¸ÖœÜˆŠŠV­>Ä6ÎÒ}Æ8wú¶Ù§G#Oô$:$<24>[é|æÂGÒA_?,䎠@N0zFÉÅ

secrets/neo/appservice_irc_db_env.age

@@ -1,20 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 /Gpyew CfIsypY8RtS9xiEz41Os6yTEJ0jLyq9abLnmD1BmIxo
-kY6DRThZg1hsZsy5NtIwvronzqY+DntxMi/oJU2Lj1I
--> piv-p256 ewCc3w Axo2RjgPlDAGnV1KDiFwrKyYeb0ScsjaQ0ayZqWEusHm
-FSPAP9v5jXgaus25xR94woquDnz6CCPawXpzUxgLBEw
--> piv-p256 6CL/Pw AxaFajLGlSPKOL3C13kdA5txo3XzaGyyJrEDeR5EGZFX
-qNSby8foc3TUeMRkbLGEf/KhGMftfDdVs0yF/RJ0LBk
--> ssh-ed25519 I2EdxQ pz+wkE+wVN4zQgM6zlOECWXzsGXNjhqEItmTGPKleBk
-24kTeX0aj4LWrOlEyhKCd4vj3+d0Rr3xynC4yiS3E04
--> ssh-ed25519 J/iReg oYbqvVH3yyGrJHgruNtIDRlhqVyetK5o85RpxYR1NiQ
-5k+78ZQsox92gUGw8JDHsK2dE09vMskLO5QDCAX4C2s
--> ssh-ed25519 GNhSGw rVguQoCqPt7EcodF4+4QLkb3LZcfIRu7PqdhR2W/QgM
-xTHsVt8uQldI+l+dWaOmLIkFAnkal6wlNwqsrG8JoHg
--> ssh-ed25519 eXMAtA UcfI5tfsqs9wCacaTfH4U5E1kD7Mvk4kkruSbiwQngs
-+mWFtbwsLW9fGGo4VKPc1JT2Cz66XBoVHNbunZyc2qQ
--> ssh-ed25519 5hXocQ CrXLt0QWY5gKVYRpjoE2ipTkI99bOsz3e2RlHxdQlyY
-aUrsUJgVtCCSyh49XXINzxTlCtFVD9vESoHSu2GK2oU
---- yw1hzyJgwgfb66dS4w4uuY9v4Dvtvjis/aURt3Uaa9c
-0.zË.`¡Óu žF/sF7ò"RKDÞímÎß0ÓRÏeB_ „®Ý?ÑÐÑ<C390>ìŠ+î®?eŠ’Õ¸—ôæê•Gé±Óú7RÐÁ•…vÐ(dÖŽ"F„>>6åÊIM0@ƒš
^ƦÛý
-ç<EFBFBD>´¤´†JBV`>ƒ{:jt[†y<E280A0>¡6‚¿ãÕ·»Žt2I5	€»NûÞ8HôÖ”N0¬jaîÜîÝî@Áj¼·?p}ÆW
+-> ssh-ed25519 /Gpyew cxK0iiJC+ecMX4u3IrF6p/Cf4NboxlMa1pbDWEpn92E
+p1orXxwVxgRLRLN1Stt4LpLjA8Rbt9uQLwWZNbO56nM
+-> piv-p256 ewCc3w A+NxDMud0tfmUZC2JqU7nzncvQjWctJw5M3GAmQagHGD
+cPmE/A+8e69mfBYI1m5gA0HBHXipZXP7yHM4/WVaLbU
+-> piv-p256 6CL/Pw AtFDllfQT3kkJLZ8+eONpd8hSHlFaer3ma3mb3v3dKZS
+MIkY8F7oyUB9tV4jRASHkFOLzSz13YM0PtybR92nS4I
+-> ssh-ed25519 I2EdxQ TLIiVKI2i0p4VVb/8ud9Y1vh1ZR3mq5A0bbF/l2ZOWQ
+Um5IKOVL52pXvPGODcFnU0yPeCzPRaj89JIiKO489Gk
+-> ssh-ed25519 J/iReg ts38FU+7jCkZ3DTxjNoYOI2iwq4ZKQ20WilVe7erc3o
+KXbBYhoXsUj9Frg9UdaahYX0Mk8Js1xGFbT04pKcGRk
+-> ssh-ed25519 GNhSGw lciilsorSxfiAWxSz5XDKgpbyAjnlxpEqZRUT3W5WDA
+FdeA5DlsbmZxxyJKsHN+mYQACkWbF/JNHmA95jWk6CU
+-> ssh-ed25519 eXMAtA 78cofxPzWl7WDKEXxKv8qwEBBzaslA94pybM3+JVrlM
++s22rQiJAiPpnYVwDvLUxXf1IMVG/zEpY1G0AhW61Bs
+-> ssh-ed25519 5hXocQ e2DIqVjDOjJRvvwdS+kMsiHxtNUeY7Wk8VCvcef+2GM
+w3XGB3Th1UWKk8qJjK2H6Z8/s9iT7LfseRzn2Y8lffg
+--- GvxwAzF1sb52spFwyQyrcCyaboTTUWrqOVwUem3+xos
+º¾<EFBFBD>.T‹
!õÉ-'³# êu®¢¶¢úrÖPžþ«z±¹Í(+õfÄÖžû^kû¡<>qR¼v¨‡<17>ÍéZë½–è€]ø•âR&p;£ÖE¯´¶´ôâWMÑö	¸Cwß	zºMÔôŒ;ÌT-¿^P"ïßœzËgyÎÃß‘
­Mà€‡èö•š „níæ×ÑÓÑ¡Ô[Ù‡Œ²xõN'~¥ªˆÕ7Q´Òâ÷<C3A2>º¼<19>ŸÐ†ÌR/ÏÃJî¤c

secrets/restic/jitsi/base-repo.age

@@ -1,19 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 iTd7eA WseG1+SqvezgyoBLrgak/0tSvvbQQ+QIJqZyCPUggzo
-Bh55tP5c3HTswx87AoYgObE1PAresp9lfJaWtIm03fI
--> piv-p256 ewCc3w A6lCxXXrzlGIO0Qx1Fc9uQzO9b2+xZx91KFCBrC5fnxD
-2ID5qSJX6sZTbKI57Ao5dVF9il8Xhs0PiVk8eSQ35Sg
--> piv-p256 6CL/Pw AyKjnMCiVQ5XWJ+RQfu7lLxq4m8bwLdiRmofFCBjdnxY
-iyuKo9p9pBuq+aYVxOwIFImTUJwpli09A6OiU+vQsH4
--> ssh-ed25519 I2EdxQ eU1NDqc9CEn8NpSsQHlw9UY3o/Et+T2q37THq3TeHRU
-vmaNfgxmmJNTeFApFAjak2hGrQWWUKa+wajkBgS4z74
--> ssh-ed25519 J/iReg ipTx8RW/K9Ai2/qonG3G3sd+00A50CFYa1WjRY0EiGo
-n/zGjEICesORNjRIqChXdGa9UnP47KsMwfU6tiRMaaM
--> ssh-ed25519 GNhSGw Is8GR7vI/M3raf9eX4rnViRdWbnufy7e+1hofdx68Ds
-nkCoEH+pNDFgi+lsns4sfS50o88AgcFobgzQoyLgaxU
--> ssh-ed25519 eXMAtA jwhasU+1JyJHTZDwd7NyM5EE9kW0DJBdqtYx8pReN30
-S5CHvyxHXsbyQmehSjVa37Bz/xHPU/nQXiuCsbqmDao
--> ssh-ed25519 5hXocQ DJhIB+JMelQjtXuh/fbN5UtzxXQm4T5aPWf29NNEd2A
-wY4QrgVJSkMi59CRzAuAe1I5YuVWIh5XS0v0IWB4I8c
---- WtoelPBHgCE2zfHo91uvElSB9HhLOk6Oneza66wxPUo
-ą˝ő…4úúŢGÚµęŐ…ž3ŘÂ<C598>ąüKż¨AZ6=Ł•Lg´ˇ<C2B4>Ĺ<13>%
Ľu6>>“o¨Ü•W˙]B<>ćWŤ2ĐÂs~›ÁŇ	Ń—·ÔĺuIăčř(I˝ŕľŚ2§<32>d7DŐüiíSmÂÔŮąÔ*ń6Ţ,@<40>G)čiÝŰEĎôšiî	eAµ
+-> ssh-ed25519 iTd7eA NBL3Bsxu+pJp70FkH2uTtuxDucDieYeO0eibd9FsGxw
+Pzq+8ERUjhzTkDA9hI6qqdAtyoqKqK6RSV5QR3WftM0
+-> piv-p256 ewCc3w Anv2d4fKXnL/cMIxz/ZW+LFJb2Ni+wey1IM3Ym3ZDcnP
+nte0aBeGuFeE66A4Ey5LCj4Mq8Le76B8O+kNEl009EA
+-> piv-p256 6CL/Pw AuwcgEu6JuG5TJTUfc8zo9g5hDUxfUNbBopIyxM53hEl
+PfAzB80xr9NtlvOtpD5N4aUizs7YOGjz984LZ9ABRPk
+-> ssh-ed25519 I2EdxQ oemhG8KOwvf2hT8hjFtq3S9aSIlZG0Rf0DXziEoPli4
+bPHXRVEPgO/YVmrXy9WxrZDEnt4VeFFTxJohNiqZJoo
+-> ssh-ed25519 J/iReg 4rk93eGRUJEDM6VbgK/28/0ciPas+j6ns5owgL6kdDM
+NEdvXX8Nt/1s7WrKOGTe6S6WAHsns4I0f84e3pX/pe0
+-> ssh-ed25519 GNhSGw +HbWTUZyOp6DKX7LqvDQ7j6rqBctdaDPd5zPEVnjSzw
+ASo+0UFzk3v80tXS3RWpOpm62HSAa5Vvy6XV9Pvo2VY
+-> ssh-ed25519 eXMAtA iU+9uulqgGuOuzAtb5o2/DQNbT+/Qf6ig0bBrMzPo2E
+wYs60s8A7ornmrTjvkrbhGTpS6KpDS1C2duaZ+uFpFM
+-> ssh-ed25519 5hXocQ oKTF7U5lc/nQywTE4IyxT8W8i9/9ZEv8oNDQt79WKlw
+BBzL6UAehvIMHBCgF4GJB6+ayeZjCDZe4tZ3AbRiLWQ
+--- AjpyTaW93Gub1u7zwqrw/8MbJBFBZmPsNMXlXa9jRu0
+˜ÙµTH
<01>mXjË:øÜÊõ×38Á?}ÀŽ–£$-ÜÌ4÷(«ð<>ìžýK<C3BD>ñ(42·óR¹	òTy¯*±ãK_²ü7eçqc˜NÉeèše€At¤7¯&VbwQ”¹@1d´…Mü„<C3BC>ÌãìÎÆë·#×°ûú†tZ7CP<><50>iÕk

secrets/restic/neo/base-repo.age

@@ -1,19 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 /Gpyew mx+zUDoJlBkJG4GUEJpTmF+7cekgNMAqGf8L/hLKdAM
-TBwEFgEWExFwuINvzdrfck6mnBCIpUAekZdTBlX2jyw
--> piv-p256 ewCc3w AtCGtCqOkpF5bFUtuAiYe84lT+1G6MxDNkRU2pUqk18B
-3/G5szghCSHCvmiCc7/y8hOZyanfbU71VI1P/CQ4g8Q
--> piv-p256 6CL/Pw AmvS4ErSMMakjmPgkc6uuAW93uB7dkmLzwIWLnfELyXc
-0LzlaXihUe55n4gSERN2IyQvjBZ1sbBO/sg3QuLSiaQ
--> ssh-ed25519 I2EdxQ cwwjiEWrJhC3QlZxbCEGjVBPf3jlpjgroeDBzHh+NXQ
-V9avgV8Fey4NRK1SYZNUThYncU7zfKU14U5EvQ2kasg
--> ssh-ed25519 J/iReg BbZPEVsU+QcuK+R7O/iyM5QynQ01ve5mpYOmGS7T/Qs
-VN2037c3niLVO/wCpl2aJag5yoH04Xs5sFRwNgf9Szk
--> ssh-ed25519 GNhSGw LGM6jIDcmvJJjst+IZGZtIFqopu3VA5pJsX30LKh7BI
-cHv8yBQWrrZGnfP+/iN5kboEQHR5fBCNWXkEED7f8vg
--> ssh-ed25519 eXMAtA RXk5YHqqh9G8XIlFcm1yFHjEN7yRQwjT3+OIAu7JHj4
-xNZVF7sCfEIGU6fFrPutCks7b+ZYrXXmPrmsm68Iqjc
--> ssh-ed25519 5hXocQ sCyqDVxD7B/hHT69Cwr+eI/kYI61Ea7fW974qrv9+hc
-WyHRkS/KyupY1/REGTrOuVsCkAUgOZdZBDNU66fq3X4
---- ySHYrP5bMWtiO3uer5Updjm5yAOeuX9fnUFKH4vwUSc
-“"˜>lÑØäJÁ»<>î®ï!]@lð)yùýCpà>á¼™kîí›ö†'Í#Úöh<>7|n	aa*MÇ»cæ
Ïk2)o>çL¥†´Dó>VÖæO¡¡ýòžGÌIX¯/1¯€ªc!QsMTºë<0E>ÅS)d’Euc>Rýûy(Z_ؾ
+-> ssh-ed25519 /Gpyew VGIv5je1W6AiulkqG5G25p0TIeJNRNTYLUUpuV89UHk
+z+BkqduxSDDFLQ3NasqKvb6V8AN8CA3YYjYV7caj0h0
+-> piv-p256 ewCc3w AopvoViWxs4qnGEWNskuFqMOly3Fzh/ymjHtbRgMW+du
+4tf6XUtOcB6ySAdUJxvYFIZ8e1RBir+3cPxRNPqHHZA
+-> piv-p256 6CL/Pw Ah7ybTGFJWYo1Acs9ZxCIuVOay1OBETqjrOrKXXxbnAH
+DoyqM7vu9Q0Hja59Sw1RhiDS5QPR02gxwPXlp3Iu1ZY
+-> ssh-ed25519 I2EdxQ mgYVnLewRv3EPS4Q1wVvQYQWyC+6sB7w/WX7t5vWBkE
+kyDdmxmqwLQVOl8MWD/6oMhNvH3RD4m+rjuqf309jno
+-> ssh-ed25519 J/iReg +187WiGdOKeB0g+KLx3i4X6JErDUx5572K15e40hiU0
+5XTb/YksFU45FEeR/aCLDthaITTlGhW+g29OiTErS7o
+-> ssh-ed25519 GNhSGw eSUPrMYXWLP+zvAKW2QmYWS4NnLgtu8fwO7gSLhW0VM
+J1GQSYkDY9KtNbQU9zI3lCMGHuv2DLyoz3YxxCYyNmQ
+-> ssh-ed25519 eXMAtA GBL0bxQpgcBlBpIRLexrYntJ05uBiptLRsTDtZtmuzk
+VEQb//O/dPd0Jg4PuO/H4uBhrYm8Ttkslqql3T9DeYM
+-> ssh-ed25519 5hXocQ JQ7tqAoFurlpjxUhT3zSNjrZ2CICWoUcuHAgz1zDFgs
+ssMa1FEF5QJ2F0C6C21A7QLVivm3k3slkVw0UvoiW+s
+--- VCsT7GvKPHvJ134XmIbjRSGLXqJhI6ZN8Kz6kkC4wAk
+bUsýrŸ7”28ô¸¶ ‘ÍSN	1y½©âò¹}‡¸Õ­Ç{
µEªÀý³¹L§HúMà€ê¯Kw\×åçGá!f”iE®Ðî·Ta%`´yTmÛžÔ‡—<E280A1>
Þ¥C±´Õø×ýDÎ-–2ðÚ	0ADôXê?‚ÛahDP[Ž

secrets/restic/periodique/base-repo.age

@@ -1,19 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 FtI9pg 699sQyv9A2DsVBx0u2Q+StW7VP8+DiUX+uUOZDP9BXc
-7xQrHSWDkEGu9iPBx/jiiDmJ8+KRSfeeLqjtSHHIKxk
--> piv-p256 ewCc3w Amal1a3gRYmqp2KDdlgN7mWzPzJG4EHeDNbBnDp9ZK75
-LtEh4MK3tpLh/IIjuD+dXzlOeNK2Efgjwy8L43A8/gw
--> piv-p256 6CL/Pw Ap5uHl9tOPVkCB5/BqxgKGhtGjVxooNiVAAagKiKfxO1
-zhMl4yVJOe+dzjwcaYQBCjYs47iikeykXFznYAUoF8E
--> ssh-ed25519 I2EdxQ KXijPMp2Yb2ccGAfmX/xw3TB+Wcw5+WALWLwE2MUJF0
-X96+UxQo5R8+sZt0uCdauFdnDUP4otRs4QlAVWbS+ys
--> ssh-ed25519 J/iReg WZykIiadzSf9FrirQODpSPJc/XMggldDUuAUvSA6kDw
-JQeaP8u8fo3l8xbZYGTyEft39KYRVYzPXvtQOk9hhqc
--> ssh-ed25519 GNhSGw Iwyy/AoqxB3ZP8L2fh/tIUMo5VhNnB2A2qouHzj34Hs
-FFzA/w9lm1EHubBipx6kqQAPw0oBjiFVxkKoZDAqM2g
--> ssh-ed25519 eXMAtA fXjp2bJasqd3A0qO8JHThWgchw9Zb2lnAA5ux+z0+Tc
-5UIgx+fg1a5qzEeXHmCzVPlUy3T7uwosjDN5DU3acCc
--> ssh-ed25519 5hXocQ VaoJWjpaDZXOvPgw0oFWuvFWJm2U/wT2KlgaPG7QggU
-NpqFs3pzV91c+5dMcdsjHz3br8jxKg3obeMj1M2NBR4
---- 1XXLm39XkQcmHtbW2Gxhw+NtGvB6vaZtavkwBYL7sZQ
-¡—X–&ỵçr²ïNg:u!`ºg3í”/^1æ1¤¶¾yâ/È-ð
:<16>GªâSŠˆ¿ˆ”*P7jälˆ&‡ø	Ø w0ø>W¹g„Á¦ä<C2A6>õ13mÉö»-SÃü§ZÁžÒ¨X¯i]Z§b6º %ZÈT®Iu<49>1Þ:—Œ²Òµö33ŸÉý
ý·~N<>åäÿâbÝ
+-> ssh-ed25519 FtI9pg 84M0DR/waZJecYdVydTblGWiQuPrWmwChaBhvRI8hR0
+yyp1wy2ZlogcYusQWl2+DPgang74L8NjIaLkHeS3ePM
+-> piv-p256 ewCc3w A8R+4Jk7X5BsRrwnGYaW2G5C5zP6/EvrOtHLzsYFpQRe
+CZ2jCJdv7rzwHM/YXTfdyIR6bwLrjjcWAwzWiOnEi44
+-> piv-p256 6CL/Pw A7k7rUBLLn3KAhOX4+La/EpNs65oLXxDHUqHKKFyxA7/
+WPZxcRI6WmpO0bFt7tO4FQs1W50kN1TajTo8SjkMZhw
+-> ssh-ed25519 I2EdxQ ADaaFiOXli3C6TT8vaYdEb68QVugODorRCyHTuyslyc
+wmTpGtXYujiod3lBDnnybkiAhlXPQbUN0y6/5WBHj/Q
+-> ssh-ed25519 J/iReg QvlPwhiV3V1PeXWDlHyzsiaH19hD9b6f9Ep4iNbTzzw
+/jG8Aw9i18uX2kc6eC8hvC9DPOnQOoRtdaaonLG4DZ8
+-> ssh-ed25519 GNhSGw WxQ7FjjFbjwMwG9Xlvg+WH4O9S+1t/UufljELhwL3gU
+wd0wEBdy+mKKfMCbXKRvu738sYJdfEX2A6zRJF2Xll4
+-> ssh-ed25519 eXMAtA nnRbMSCpsL9r9T0m+jconJckGxElbAsHOSeIulMIOkQ
+nlmUTC6ft7tWUHjDhSvO+wkYKScmfbKQuqEL7pp4SZo
+-> ssh-ed25519 5hXocQ uR2akyilpGC39cubQPBiugUBXTQ5OK3BFHDWmFp5dV0
+lcy6gLtsrzZEOK8F0Cz4y4l5Nuudvpp+4ueYA1L0LH4
+--- vMqM0Cl26W6SLxU9QkG6fl22YCFBGzDrir74ZuFTgIM
+œe7„˜k=X“<58>nÖdŠc`:dZT½áZ†é¦m$/ó&ú6OsÍ$yFº<46>ê<14>oŠzaL+¸<>9"ѯh·áငû!@7>òQ0}¼<>?ÈßF-§øc‚(Š×£"CJºµ_ùœgùc±g'÷”pŒ#þ'ó‚ÓsÓsµ]
»uU®ÿ±FÀñTÑ¿Rƒ1«€

secrets/reverseproxy/.gitkeep

@@ -0,0 +1 @@
+