diff options
| author | Franck Cuny <franck@fcuny.net> | 2025-11-21 12:56:36 -0800 |
|---|---|---|
| committer | Franck Cuny <franck@fcuny.net> | 2025-11-21 12:56:36 -0800 |
| commit | 09d43a6a72308bc572458d1ca86d05d20c209176 (patch) | |
| tree | 89569e05b88d2656f198ea99c700d4cbcf2e688d | |
| parent | ensure we clean up /tmp on boot (diff) | |
| download | infra-09d43a6a72308bc572458d1ca86d05d20c209176.tar.gz | |
add argonath to agenix and rekey secrets
Diffstat (limited to '')
| -rw-r--r-- | secrets/argonath/wireguard.age | 7 | ||||
| -rw-r--r-- | secrets/cloudflare-env.age | bin | 526 -> 636 bytes | |||
| -rw-r--r-- | secrets/do/host-ed25519-key.age | bin | 611 -> 611 bytes | |||
| -rw-r--r-- | secrets/do/wireguard.age | 12 | ||||
| -rw-r--r-- | secrets/nas_client.age | bin | 474 -> 474 bytes | |||
| -rw-r--r-- | secrets/restic-pw.age | 16 | ||||
| -rw-r--r-- | secrets/rivendell/wireguard.age | bin | 367 -> 367 bytes | |||
| -rw-r--r-- | secrets/secrets.nix | 7 | ||||
| -rw-r--r-- | secrets/ssh-remote-builder.age | bin | 831 -> 831 bytes | |||
| -rw-r--r-- | secrets/vm-synology/wireguard.age | 12 |
10 files changed, 34 insertions, 20 deletions
diff --git a/secrets/argonath/wireguard.age b/secrets/argonath/wireguard.age new file mode 100644 index 0000000..b7b559d --- /dev/null +++ b/secrets/argonath/wireguard.age @@ -0,0 +1,7 @@ +age-encryption.org/v1 +-> ssh-ed25519 pFjJaA EmdY+85+yyVrltWCR9Mp59JGvB2erIGE+wguKmNNSXg +FQCg5PsYDIRhgZABEa7SSytyxkr8U4DJZ1A9IKDJ3p4 +-> ssh-ed25519 nr90TQ +0etsNnTfOET5zD+V3KDqnCZkqfEMolGA1+eN/F4sis +CrfmST/tWubv8FY8csoYGatDHvSYqFvaX2o3/qpnr+E +--- E6iTo+pQCKVPwrDrTLtxsOddShXZB8bg7ama5EV9l34 +?; 5}#ؑ*NJrcYݢ:oGވ M X0Uʄ
\ No newline at end of file diff --git a/secrets/cloudflare-env.age b/secrets/cloudflare-env.age Binary files differindex be85fa3..01b6a30 100644 --- a/secrets/cloudflare-env.age +++ b/secrets/cloudflare-env.age diff --git a/secrets/do/host-ed25519-key.age b/secrets/do/host-ed25519-key.age Binary files differindex bcc607b..55dae25 100644 --- a/secrets/do/host-ed25519-key.age +++ b/secrets/do/host-ed25519-key.age diff --git a/secrets/do/wireguard.age b/secrets/do/wireguard.age index 0ad78aa..a9f9107 100644 --- a/secrets/do/wireguard.age +++ b/secrets/do/wireguard.age @@ -1,7 +1,7 @@ age-encryption.org/v1 --> ssh-ed25519 pFjJaA dKGQ5U9m7BHp+6dnAjJdMHbVbK7azzVjQsC4yto/7Xw -P8T7WR5DOk8nQ0hswiQD1HEqA0GZf8Mhofewk9rdmdk --> ssh-ed25519 8Nmf6A 9IbBrqy8PfYiD0YOd8Ts+kAjZ1PU/uUDCd48snWGFH8 -8z3hjQeAtyRrgPf6a5RrJ3kBrLZJmy8ezf6GdriNu6o ---- VbnBjQpe8CyHx8cNIOhxYegXLcloG5ZhpvCSqxiUJ0o -ݧ7fB o~}G5&6YSIfwg +l a++(-LeCғjb&
\ No newline at end of file +-> ssh-ed25519 pFjJaA GaSPzMUerupK/arFPAugpDlBU2gv9djkLDAu5lEkoxA +D2HOa5Q1vu5Z9obFFtXrgRQOvEXSCQpHQV4DaXdaUpI +-> ssh-ed25519 8Nmf6A xBCb05YK4cN29qputVgC2DnLjNoXcvcUMrMS3gtiBxg +Ouk0qZysqH1nEd7nsyi4FPoT1xmVbr3mowE+vu6iZCM +--- AWCdGu0USOi6txXQiUA+jLgBfgCdrfFWXeEObTALgmw +\ٰ[qVTq`dt`g9O<^Q0=2֗%CHY2}Tp7
q+9CMG2
\ No newline at end of file diff --git a/secrets/nas_client.age b/secrets/nas_client.age Binary files differindex c247020..adebe58 100644 --- a/secrets/nas_client.age +++ b/secrets/nas_client.age diff --git a/secrets/restic-pw.age b/secrets/restic-pw.age index 9f61ede..1113b31 100644 --- a/secrets/restic-pw.age +++ b/secrets/restic-pw.age @@ -1,9 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 pFjJaA Dl11IfO7+y/UqrH+R4JpP7wlM1HmcQ7nkYEVWUN7f3o -3m7BE09I0pA+USqkGKVbdc9ukQOssl0ujrD+JZTRe/4 --> ssh-ed25519 qRUWSw +NRfckPgYNoEmha9sLTPxdRWD9tFQjBUxooh6q6w4CM -qcNPFLtl0BckH29QvkQVArdQRBA2KgsjIYw5arNzcHI --> ssh-ed25519 Y5h84Q /hHI2sEG3aF1FfmZv9ZiyvviiPNMJ9PEKvATTXq+2HM -AkjRVszoUYMSQ7SRB5tqX8Ry2ITVRrCouh0ox+/+0XY ---- /k62z7Hh89vIIwETAGvBlV8C2WGQaEh8EKMS99zEKKg -mXj *"c|ȯ~>4=wO@נ_6-.LFY
\ No newline at end of file +-> ssh-ed25519 pFjJaA iZ9f5aNuJBZwh0RYP8LrUa6PiFAt38nDw+A1N/7KHgI +Hop8PcNgYPHlaeU0DdlGtnA9aUiZ2fl1Fjx067oqhKs +-> ssh-ed25519 qRUWSw 3mNR7e7VqlTO0mlBhhXFJxggIc9RjR2XNbIIsxVd2BQ +HBrhDfqfnn5daUtKjhS0dNUOtOP76DfStQiG6+sLXbI +-> ssh-ed25519 Y5h84Q DGIqa5mLN5FBqwMP/aqczU5ZSFZQBBsX0ucf53Ig7EQ +f8eXOuOttfSwKKBzHxttTcLm9eLdXvbts4TFxE1SNTs +--- +3QPb7V8EdIh+JmgGEzc5A2uhA380cd4IFLfuf9gA9c +9?xGgpC124ײOHv8Y7iṲ wMho)
\ No newline at end of file diff --git a/secrets/rivendell/wireguard.age b/secrets/rivendell/wireguard.age Binary files differindex 8bfadf0..c4d59be 100644 --- a/secrets/rivendell/wireguard.age +++ b/secrets/rivendell/wireguard.age diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 0204f4f..e79be04 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -4,6 +4,7 @@ let mba = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDLQTIPZraE+jpMqGkh8yUhNFzRJbMarX5Mky3nETw6c root@mba-m2"; do = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID6qsTQwvo6lUACTZKb4T+Je89bW3/BY4DB4aCTqfApz"; rivendell = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID76U5kt8DfBbuP16rMzfBTVTpjjPFKWnnheMALaCQEd"; + argonath = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHi9jHqRjpMzXlznTXi4nEtlRlFfyIzB6Ur9A+HDfFoq"; }; users = { fcuny = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKdyJepi/NyO6d9eP8m48Ga/gdjB5ENHRXYM1ZqFZR8t"; @@ -14,6 +15,7 @@ in users.fcuny hosts.rivendell hosts.do + hosts.argonath ]; "restic-pw.age".publicKeys = [ users.fcuny @@ -50,4 +52,9 @@ in users.fcuny hosts.rivendell ]; + + "argonath/wireguard.age".publicKeys = [ + users.fcuny + hosts.argonath + ]; } diff --git a/secrets/ssh-remote-builder.age b/secrets/ssh-remote-builder.age Binary files differindex 3e660bb..9b51059 100644 --- a/secrets/ssh-remote-builder.age +++ b/secrets/ssh-remote-builder.age diff --git a/secrets/vm-synology/wireguard.age b/secrets/vm-synology/wireguard.age index 9bed555..1a7f680 100644 --- a/secrets/vm-synology/wireguard.age +++ b/secrets/vm-synology/wireguard.age @@ -1,7 +1,7 @@ age-encryption.org/v1 --> ssh-ed25519 pFjJaA 4q+hhi7RJKC7M0TiNn+iQRLMVwyW9LP7Hjv9irTnI3A -yme4y61h8b7soGwdGRoCqVRwBPABa70gw0oTcujtPHs --> ssh-ed25519 qRUWSw 8GMvd+DRBQsL79Q4dWnAm3YoyTHDn4u+shOitVNdlSE -cDQmmVpnY52Q51/G4BFXDmtKaHGOSZIk5sY2K0/vRSs ---- /Nt/g8t+Igt4cvDY1ZR5UkUrIPEsMv8UZyYl1lmxSK0 -e,Ϛ@iG"{dSq9zbN4.M ӻh pΖ/q2 h[wT/
\ No newline at end of file +-> ssh-ed25519 pFjJaA ljrCAO401wZ8bYZien6MWqztXrQNUT10d4dUAN2GyHE ++R8Yw6l2QV0fYgDUolDmxgyFrKmRRv9CPn0KMWbiUYU +-> ssh-ed25519 qRUWSw zh4xQ9TIwDCZee8q18Jxxuav4abJnt1wgK5HLdzO8Xs +crSr+JuaUsqvaLSsZo6C2PhLxZgaBctZeMe19hUWJmk +--- yck0Rm4YmN8iYAsx1FkfNiLtHGgmjdY3L69XH3A5cvA +8^hx
&5!G;}w4PaX 8E^ƾN%R/u$bg]
\ No newline at end of file |