diff options
| author | Franck Cuny <franck@fcuny.net> | 2026-01-16 18:45:15 -0800 |
|---|---|---|
| committer | Franck Cuny <franck@fcuny.net> | 2026-01-16 18:45:15 -0800 |
| commit | 28496512361b2241972a925aa22f7c1c35c5cd68 (patch) | |
| tree | 4c3e6ce0651165f268df35e1779fa64d9d4b3d7f /secrets | |
| parent | fix uid on mbp and ensure it can read anthropic's key (diff) | |
| download | infra-28496512361b2241972a925aa22f7c1c35c5cd68.tar.gz | |
rekey all secrets with my age keys on the yubikeys
Diffstat (limited to '')
| -rw-r--r-- | secrets/acme-cloudflare-env.age | 19 | ||||
| -rw-r--r-- | secrets/anthropic-api-key.age | bin | 541 -> 865 bytes | |||
| -rw-r--r-- | secrets/argonath/wireguard.age | 18 | ||||
| -rw-r--r-- | secrets/authelia-jwks.age | bin | 2026 -> 2350 bytes | |||
| -rw-r--r-- | secrets/authelia-jwt-key.age | 20 | ||||
| -rw-r--r-- | secrets/authelia-storage-key.age | bin | 409 -> 733 bytes | |||
| -rw-r--r-- | secrets/authelia-users.yaml.age | bin | 581 -> 905 bytes | |||
| -rw-r--r-- | secrets/bree/disk-passphrase.age | 18 | ||||
| -rw-r--r-- | secrets/bree/disk-unlock-key.age | bin | 721 -> 1045 bytes | |||
| -rw-r--r-- | secrets/bree/wireguard.age | bin | 367 -> 691 bytes | |||
| -rw-r--r-- | secrets/grafana-oidc.age | 18 | ||||
| -rw-r--r-- | secrets/miniflux-oidc.age | bin | 395 -> 719 bytes | |||
| -rw-r--r-- | secrets/restic-nas-smb-config.age | bin | 431 -> 755 bytes | |||
| -rw-r--r-- | secrets/restic-pw.age | 18 | ||||
| -rw-r--r-- | secrets/rivendell/wireguard.age | 18 | ||||
| -rw-r--r-- | secrets/rsync-ssh-nas.age | bin | 721 -> 1045 bytes | |||
| -rw-r--r-- | secrets/secrets.nix | 57 | ||||
| -rw-r--r-- | secrets/ssh-remote-builder.age | bin | 721 -> 1045 bytes |
18 files changed, 124 insertions, 62 deletions
diff --git a/secrets/acme-cloudflare-env.age b/secrets/acme-cloudflare-env.age index 2e5dcfa..f204f55 100644 --- a/secrets/acme-cloudflare-env.age +++ b/secrets/acme-cloudflare-env.age @@ -1,8 +1,13 @@ age-encryption.org/v1 --> ssh-ed25519 pFjJaA V+QLCrXmUdN2FJkc35HdPoBtccaTPt/BF0IiJqWa6BE -eSZBZGbXiOq4LM47WAkqFe/e2MEdiu8qLXk2X1iiUYc --> ssh-ed25519 nr90TQ dPLOsGUqPYCbu9G72SLwi4PPVLJYoHzsMT+kQ4Me31c -eF/OQeq5Ylm0OVKTJ3Y1usIxpBrvI1dDABe10iWd5HY ---- izqN/k8WURYXRBrnEspOZMYKxhKlWTldLVi/Q26ouzA -vT_3UVee:<e4j&c -ђoPk%,AŔBx₪mf9-Wj?
\ No newline at end of file +-> ssh-ed25519 pFjJaA 39PvQHg+FfhTwQ3UMWrZ5BakNbmMfxZ0igLryBDSBGY +BEvRpX/YmgUTRmaKJ2pLquuxsynQb3npZ7Z6vb5usME +-> ssh-ed25519 nr90TQ Ir9/robRz4A6tcOmXYOnbokAuZ/En52ZwLkOuPUVWDs +4tFm0EbmFyyMVsP9UN3/gsJXeJgW4d/YBswapzIbGPg +-> piv-p256 p72k4g AjSfkkuuoxGEhtIaEZkMWdbtOKUCCjlvlBDbm5iCcsCA +mAHQ4N8b9k0nlGuLvg5mMG9r6LOVnDL3G1w0m2GlZYs +-> piv-p256 3VHSDQ AxF/QHzvRq9VdKDxiHmfqrINGjhTXXmor/cIfcfUEcse +Q4Jb9oFxjan/Pn1JVKKscFDXXgbfqXGxGZ0P8yK8D7E +-> piv-p256 EwG8WQ As0a++VEr4C9KogBxwQvFr061oyvNlkob/yTUFUHWRJm +miosl7sMW+TX3EE/xh5KB7/80DH0gNTO2dzVQabQu4Q +--- lHGFrUElSmGJfNy3+llYPrA2OydXnBcIOkQnyvrnYm0 +TpD/ִ n2DsCw qOKxErlifQO[uSqVÏ?
\ No newline at end of file diff --git a/secrets/anthropic-api-key.age b/secrets/anthropic-api-key.age Binary files differindex 39a0fe5..3cf3e31 100644 --- a/secrets/anthropic-api-key.age +++ b/secrets/anthropic-api-key.age diff --git a/secrets/argonath/wireguard.age b/secrets/argonath/wireguard.age index 79af726..7f25906 100644 --- a/secrets/argonath/wireguard.age +++ b/secrets/argonath/wireguard.age @@ -1,7 +1,13 @@ age-encryption.org/v1 --> ssh-ed25519 pFjJaA tNJKjiFOD98N7uh93bInyrvb7RfIWnEdmecxCPU5IzU -9GJdZAfxEp1mOZVPkbwJf5TABT8y/A9ZCWGguqPAUas --> ssh-ed25519 nr90TQ xUZJdmWUZzYIHnQYT0tzzX2SPwetlEhChQxUnCEFhlY -l3QWfF3yOqg+rZse3Y+r7XcISIrAHXdKglJs697AxOA ---- AB1v62emxDLanalfZQIjCmkMaEhpaYdme3Wp0tR2R48 -^+VbDUjMlb:]1iA|.|Dlp[|]L&5IwKWntW
\ No newline at end of file +-> ssh-ed25519 pFjJaA iUuO6o+VDVnHKGaDmLCD4FDbpNtlsKrNAR+Wdw6y7EE +MabwMFFmDOjb2Y5NqSc+NNOrVjJq4vhIk/teVJNJU1Q +-> ssh-ed25519 nr90TQ UNTnxu1WoEAeLr7h8V7rj5S9NLrXnNXDwj5jxeseGkY +NDFQEDlQ4JVWonp1ct3QvE1zmz+8UK9+jAXMgnhLczs +-> piv-p256 p72k4g Ar2blLeCVDkKvHRVm4XQtZ6u6eLLTnnTbeuZVZ25Sgob +F+sIzZRJxKVJkqeeLcnacXM0Wmvq12TRj5Pf46YtDTs +-> piv-p256 3VHSDQ Aw1EKvuk3yP5LeZrJW1X52GpU6DhW3x88PyffxKvqmD5 +MVr4JbsE9saQM7yBSqMIbvSgFAYaJzshgB6g5bfQyaQ +-> piv-p256 EwG8WQ AyjBcIH2uams4JzE1tnRs3FcmwBUQcgOhgDHpGLSGS51 +KSyRIvRbUEGwbB8vP8SdCVifm8JwFFHGfe6IZEPuyC4 +--- 1CPXCEPA8++uCv26b0n7FHQQxoDpPNePRHJDnzJ+eSU +9'`빟l gUQy8lxn\PJ=oN" )D/3adeƥ
\ No newline at end of file diff --git a/secrets/authelia-jwks.age b/secrets/authelia-jwks.age Binary files differindex ed3d63f..57e62ca 100644 --- a/secrets/authelia-jwks.age +++ b/secrets/authelia-jwks.age diff --git a/secrets/authelia-jwt-key.age b/secrets/authelia-jwt-key.age index c01728e..44c511b 100644 --- a/secrets/authelia-jwt-key.age +++ b/secrets/authelia-jwt-key.age @@ -1,9 +1,13 @@ age-encryption.org/v1 --> ssh-ed25519 pFjJaA G2MYXNq+wdO8LNNu1QMLGUqyb+MD0TrTKOI7c2e+0S4 -/LyInAqoHzTozueKKpJP8Z7KN2nZNeGNrcdz4Ldihn8 --> ssh-ed25519 Y5h84Q C7iLA8zFkPr9/unExfdM+SoX3MZjs6t/uZUQNqpWpmU -RvAe5Y8zaTWAL52OGVyF+EE+NApOnYGXUE7k4mM+qn4 ---- LX7GqT/PpFeV+yInKtdlg+ISa2SPFnsj/QSSR+evMl0 -M4>NCMprqO>&ht?ِf -"Gd떟~_nY8s4j(X4W" -
sOp
\ No newline at end of file +-> ssh-ed25519 pFjJaA ab95Xy3qdnkT+1QNbE7nM0KTxEsvZbJSaGlQHkMeuVY +Aos+Y6URghnBymVQXMW4KMB4MupcMFVubUILUgfObcM +-> ssh-ed25519 Y5h84Q EXMHz89OpNU9k6ehLg8UiR9QVS5IRAiZ/QM5U5gb3BU +h5nndbtxIXsMw5VKQTXPWIzzI1wZxa1LpoA2sXnUnco +-> piv-p256 p72k4g AyneNJUchntzS/JK92mNx7sExe+Qw319/8wys4rXcCJ7 +LaAxI45aCP3qlK+dxNiBYWMTdWk8IgxDaBtwiEAOzSY +-> piv-p256 3VHSDQ AoL8W+RHWh3VCPyIqSnRKdqL2mOtsSNadlApadjmvLYD +aDy2pnH4fqfornVC5VWCVnVXOppA2fU4ZYBXQduq2wU +-> piv-p256 EwG8WQ ApU0xcZy2cLt+ZlTMJCpB2/qZ2+FsTBAtiMXGMUHW3Dr +fcY3frM+Rh8y6QzGZViTYfsSAg7mNtu3o5rpick0yb0 +--- 0Hkdlz6iYjC4NXrIut1N4XnSFHKAnrtQVPvE3Ua4rA8 +aq\FWɮaD~+lu~d0q$?RIy2=Xr"0Q"Pv['Ie,>|*Fk~?N\6ą0?
\ No newline at end of file diff --git a/secrets/authelia-storage-key.age b/secrets/authelia-storage-key.age Binary files differindex 0e10a44..5aa6d4e 100644 --- a/secrets/authelia-storage-key.age +++ b/secrets/authelia-storage-key.age diff --git a/secrets/authelia-users.yaml.age b/secrets/authelia-users.yaml.age Binary files differindex 44c4068..15082f3 100644 --- a/secrets/authelia-users.yaml.age +++ b/secrets/authelia-users.yaml.age diff --git a/secrets/bree/disk-passphrase.age b/secrets/bree/disk-passphrase.age index 73e2a83..e755597 100644 --- a/secrets/bree/disk-passphrase.age +++ b/secrets/bree/disk-passphrase.age @@ -1,7 +1,13 @@ age-encryption.org/v1 --> ssh-ed25519 pFjJaA s1itPwCGv6ebSeHbeyFFaTNwt4jEaihydXbGVuKyVBM -8HtR/jdB1SnFw5LFCehe4Kx3l5iWm7NLu2xNNWrFDFM --> ssh-ed25519 OxmK1A JzN5jYlebpS1J5UnaJZ18/8sXr4HR29e6tE9SoSDSHg -pbohY7JOqHlJjAH+2feqinWRXBdNx3ZGPWPwqudqoOc ---- 5qWAgW462AERMOQJ1f7dHs1ELJ8yDO1T9RWgcQAl0i8 -5/o`M)fD+|xpaMsUNoy<Cbv\
\ No newline at end of file +-> ssh-ed25519 pFjJaA 4JuogKBPPednnGt7gnRFxLG5RIbbXADRINyRv7HUmkc +IZ64pbnGzWn7Axw1W3uQn1oyWM/pv7Bfx7tSaSt61jk +-> ssh-ed25519 OxmK1A sRflKklkzYKLfl4yx0PKGVStjlN7Zqvl1RzoohD14Qk +eAbafks9BTHOM/U+u+Z9y1zdjNFUY70R+OEZCFmpHOI +-> piv-p256 p72k4g AlCjnZ5gaY7kJGhFmwlxBtMhD896jv1HH3/EtgGms04j +U6ryNq98aSQT+v8UbsT11imcvYta7qjn4ZiyGdiKRcE +-> piv-p256 3VHSDQ AlTMNa0xHViLg8l7VauP6JQrAY4OiIiaMYxsjruZ5XpQ +Mg2ceUkFZTf6C+jQ1xBVBkqPvLSgVvnKguKZYSpyLjw +-> piv-p256 EwG8WQ A++pbiozQp8MS68FVndmtqVxEXH6uNkoUzjzkSpy+Q0N +bumi7Ff+5aY6bUh0XkkF2gpF2FTn5rhXgITRUvG5SD4 +--- vdA3nPk6ncNgU1JRegj9HVJV/ghugoPAihZgkaug4x0 +L5HVۂe_L6Ŷw7yr~jZaB
\ No newline at end of file diff --git a/secrets/bree/disk-unlock-key.age b/secrets/bree/disk-unlock-key.age Binary files differindex ea770cc..5845c22 100644 --- a/secrets/bree/disk-unlock-key.age +++ b/secrets/bree/disk-unlock-key.age diff --git a/secrets/bree/wireguard.age b/secrets/bree/wireguard.age Binary files differindex 9df040f..cb548f9 100644 --- a/secrets/bree/wireguard.age +++ b/secrets/bree/wireguard.age diff --git a/secrets/grafana-oidc.age b/secrets/grafana-oidc.age index f772e3e..9c1ac05 100644 --- a/secrets/grafana-oidc.age +++ b/secrets/grafana-oidc.age @@ -1,7 +1,13 @@ age-encryption.org/v1 --> ssh-ed25519 pFjJaA GcXonO1ixLZ3Gf8BlmiBSVf3DuRgkV/PO64PXai4txo -kbb6Gw6iWmH2+5XWCN7eD/2QqAoY/MO1m01eBagcEvY --> ssh-ed25519 Y5h84Q nDuHOmXxknUScmz+uFrLrGMAM2hd8mYMo5w54f3Ktxc -xUE3VqqeEU0w8ddiVyZmUim4qoXV3guHHXckAC8vYHI ---- I1grEVApq5Ej/7KEsPBxjdrPr4o93byLPZ3Pm50BSLc -%Kkb{PN'-(Ġ;F Ոe!zOp$3խ\,璪lgbx97ѧ Kk@Y~EO
\ No newline at end of file +-> ssh-ed25519 pFjJaA kJ/tIhFivUGhT9Gx8cNeAcxdghf0taPWzqUhR8qo4Qc +AIvNKY3xm6z7SUJ5On8RE6Ucjsv6TlaeYaOYTgyvQq4 +-> ssh-ed25519 Y5h84Q XNWAeUxr9DjIzWM4qhIOhEJ6Ecp5ypCX0Yvcz9Xesj4 +oZ2FkjFw0qTwgiYcVMWtzPoqGWZY1l+U73J+TgZ3X1w +-> piv-p256 p72k4g A0Mdy32eOyBtKGo5dGoEC7FMpm9ZN5+Raa60lQBn1TmE +6li+w4ekWyfjvOs9HuhEOLsashLP+juLk2hx2pLgjwA +-> piv-p256 3VHSDQ AjByue1R3VFjCow5Z6Mqe52Vz3o3o6IfbqRHlzcT4l7y +KRhQPUqHlQopY2oMLJKzgznBWMH9BkxLs93VK84fDFs +-> piv-p256 EwG8WQ A87+jQw1s4BFTg6mUG62NCrgpCr/7EQoOEsqcSYQkDRd +HSX9YmHQHzzVxfoEB7x+W0S2nqO44CVHdLQ/FbTGO60 +--- XKDOSYe7vUkzn6sSLb3KHLBm9v/H9paHMKmkUnTB/Jg +ǣ3o^G4dyJ =T@J)+A-ZUXVeBQ}V,OdL<oY*1Ae頠`;
\ No newline at end of file diff --git a/secrets/miniflux-oidc.age b/secrets/miniflux-oidc.age Binary files differindex ca6536b..0276a3e 100644 --- a/secrets/miniflux-oidc.age +++ b/secrets/miniflux-oidc.age diff --git a/secrets/restic-nas-smb-config.age b/secrets/restic-nas-smb-config.age Binary files differindex 68e7f1f..85bf7a3 100644 --- a/secrets/restic-nas-smb-config.age +++ b/secrets/restic-nas-smb-config.age diff --git a/secrets/restic-pw.age b/secrets/restic-pw.age index 9df927c..7d16a16 100644 --- a/secrets/restic-pw.age +++ b/secrets/restic-pw.age @@ -1,7 +1,13 @@ age-encryption.org/v1 --> ssh-ed25519 pFjJaA H5rmASwPmkhh63zNJNyOu7Vj1FaJ7ECcB4dczQZ02Xo -Sc/riyDuwHgDQpkDqQCTzkzJMBIJ7iI1Tz3/ncD5vME --> ssh-ed25519 Y5h84Q 5a4rEeWsAIO7g0WVv4Ah2zw3P7rCVhevLQgem4qHh0A -WcW/hiLYqCLo2mCupzaTGgWnhercxOUxd9LTjJZ85Y0 ---- 65l7IAQWOAcUrnuIATlP5QgklZQCg/7XkMdhv6PuF+A -óGqPmDSB>x?%r% ]̄XalL#"x5h+)6.
\ No newline at end of file +-> ssh-ed25519 pFjJaA syGYV6BJA1h3LhjxbemVAmYitI5aegvlNrrjAdCsH3k +Lxo6Y5Dv/G8D4GXBNcN+OPscp3QfFN+N4vs4DKxE0lU +-> ssh-ed25519 Y5h84Q SGVhQY9w4IqevD+IJy4BvmcFm9YIhvbWXUVLwwmbnwM +75wLxUwTGAmYBmTtN1CxV/oZZukFLk7xovtGBmvz6uo +-> piv-p256 p72k4g A/f4dbKBG2cI37D3D4J3WPE6Yx6vzNdP+5ntufwM/Gha +lEPCCOwtjpq8HJg9SmjIcQMh9gJFWbhYQFjxu4dSXGc +-> piv-p256 3VHSDQ Apy0ALbHVi49Bj8w2ek/i/eV3/05/A9dDPBMQPn9FkPx +GBtBwEsIQLOyyAM3FYikVVz7okArqQ9jkXwSF29F3Xk +-> piv-p256 EwG8WQ AwWFId0nB8e6gxB+NnwRFMCPqIIEccDR6nl//AouYjDN +3sggJZLjKxwOhy1s9knJRAWBX8XZxQxJyu00ATHNksU +--- WxnsY5qOy2Mp2lmdGCp2nwsiTj7YAg2hYGbDiFx3Q3I +B~?>hMK([UC[oP҅()x_.T~y"ҝķvB
\ No newline at end of file diff --git a/secrets/rivendell/wireguard.age b/secrets/rivendell/wireguard.age index 2fc550a..2be928e 100644 --- a/secrets/rivendell/wireguard.age +++ b/secrets/rivendell/wireguard.age @@ -1,7 +1,13 @@ age-encryption.org/v1 --> ssh-ed25519 pFjJaA iKdSt74GUNc0weGnnDMcjU0jW2oaAA3h7Hpf0MOviTs -0l134FDqVAV6Vdhy1Nc4R3f2+u1pYbBG1OA5lPJHIcQ --> ssh-ed25519 Y5h84Q N7eMqexQyKmX3RdxF65SDXTaPpy0Zc0wy6NDJWlgO2A -nSeFT4iUBS5//VRdfkBlyfrFPXE8rMU+PR7z4hOmNWY ---- CseWROVVfjER2KIG82JveZRhGRGNfA1bsO6wGiqi4Ck -)tӼnY[UO&6h#4ý9+Hē:3>+9s7͛͊_hKu"
\ No newline at end of file +-> ssh-ed25519 pFjJaA 2qv6LHBYtAiaDhZ8sAyaw+bSqQiyFkQG9ZB1y1aolxE +9uOB2Nrm0QZvo3wIB8/mNqmTOorYZdK8OK3wotbtUyA +-> ssh-ed25519 Y5h84Q b9FraCr9H3n/fFfmVhWWiJre56xr7QVj2rG1A93FkGU +iYoBQE9x+pMVZFVTtTaU2br/BbU/+B8rZWQLrOzQgpw +-> piv-p256 p72k4g A7ErQNxB/ZHqci4wbRIlLcGzVKJPL66YSvOGperLqoa2 +q8ok0ZH+qhWg4wodnhrGdO+o6YgstfkP0jiqJCNfjh0 +-> piv-p256 3VHSDQ A3CZRYI7mdEdYfjoiBupjgt4IuxspjEAiF/U0L7BUPgM +dfefVCTufhqSpmC7VRPlHU1uesBxswQtT2sG0ZhN5kU +-> piv-p256 EwG8WQ AwOVx3tXdx2hKs5mXbalBIcNgdmDFx1B5ZSptImOmc6G +/fAXlZ6TFT3uPi/8nsTygmMWQ9skuFHBACEgoPBv4qw +--- 8O55twCZmB3scabd9rETAM2O1a+qHw2q5rwLHuU8K1E +VsX6BE[鞇T4hn]˟wq3MShD`exl))˫z 揙Eg
\ No newline at end of file diff --git a/secrets/rsync-ssh-nas.age b/secrets/rsync-ssh-nas.age Binary files differindex beed671..4c84a2e 100644 --- a/secrets/rsync-ssh-nas.age +++ b/secrets/rsync-ssh-nas.age diff --git a/secrets/secrets.nix b/secrets/secrets.nix index a677a03..3e0c38a 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -9,99 +9,122 @@ let users = { fcuny = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKdyJepi/NyO6d9eP8m48Ga/gdjB5ENHRXYM1ZqFZR8t"; }; + age = [ + "age1yubikey1qv92lk8ckjm2qs900h89pz9myl3nfjnz7fc0eluppexyfgc0pfnjusaje3w" + "age1yubikey1qd30fnnxd2uh9lgw0dr7nwvmn003rmzkrg87xfw67gdsf7u0lhm3kd4w8ul" + "age1yubikey1qwrxced5j32ks5cc5aqffwz68yva9ukkz6tx5xm2sjn8swl2evtlsjlmsy9" + + ]; in { "acme-cloudflare-env.age".publicKeys = [ users.fcuny hosts.argonath - ]; + ] + ++ age; "restic-pw.age".publicKeys = [ users.fcuny hosts.rivendell - ]; + ] + ++ age; "restic-nas-smb-config.age".publicKeys = [ users.fcuny hosts.rivendell - ]; + ] + ++ age; # ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINE3mdcVS7+DPr7MZzIh3JsuI5t4z83j7ZAdAYxFLW4S rsync-nas "rsync-ssh-nas.age".publicKeys = [ users.fcuny hosts.rivendell - ]; + ] + ++ age; # this is the SSH key we use to access the remote builder. "ssh-remote-builder.age".publicKeys = [ users.fcuny hosts.mba - ]; + ] + ++ age; "miniflux-oidc.age".publicKeys = [ users.fcuny hosts.rivendell - ]; + ] + ++ age; "grafana-oidc.age".publicKeys = [ users.fcuny hosts.rivendell - ]; + ] + ++ age; # generated with: # openssl rand 64 | openssl base64 -A | tr '+/' '-_' | tr -d '=' "authelia-storage-key.age".publicKeys = [ users.fcuny hosts.rivendell - ]; + ] + ++ age; # generated with: # openssl rand 64 | openssl base64 -A | tr '+/' '-_' | tr -d '=' "authelia-jwt-key.age".publicKeys = [ users.fcuny hosts.rivendell - ]; + ] + ++ age; # generated with: # authelia crypto pair rsa generate "authelia-jwks.age".publicKeys = [ users.fcuny hosts.rivendell - ]; + ] + ++ age; "authelia-users.yaml.age".publicKeys = [ users.fcuny hosts.rivendell - ]; + ] + ++ age; "bree/wireguard.age".publicKeys = [ users.fcuny hosts.bree - ]; + ] + ++ age; "bree/disk-passphrase.age".publicKeys = [ users.fcuny hosts.bree - ]; + ] + ++ age; "bree/disk-unlock-key.age".publicKeys = [ users.fcuny hosts.bree - ]; + ] + ++ age; "rivendell/wireguard.age".publicKeys = [ users.fcuny hosts.rivendell - ]; + ] + ++ age; "argonath/wireguard.age".publicKeys = [ users.fcuny hosts.argonath - ]; + ] + ++ age; "anthropic-api-key.age".publicKeys = [ users.fcuny hosts.mba hosts.mbp - ]; + ] + ++ age; } diff --git a/secrets/ssh-remote-builder.age b/secrets/ssh-remote-builder.age Binary files differindex f0d2c0e..b4c94a4 100644 --- a/secrets/ssh-remote-builder.age +++ b/secrets/ssh-remote-builder.age |
