diff options
| author | Franck Cuny <franck@fcuny.net> | 2025-08-12 19:34:11 -0700 |
|---|---|---|
| committer | Franck Cuny <franck@fcuny.net> | 2025-08-12 19:34:11 -0700 |
| commit | 9cc36dfb708f0c20985839f4d562d4554b5ddc24 (patch) | |
| tree | 9cd5bc3ad54de1f10ae1bdfe8ea016e260e14ca5 /secrets | |
| parent | more simplifications (diff) | |
| download | infra-9cc36dfb708f0c20985839f4d562d4554b5ddc24.tar.gz | |
rekey some secrets and deleted unused ones
Diffstat (limited to 'secrets')
| -rw-r--r-- | secrets/cloudflare-caddy.age | bin | 0 -> 363 bytes | |||
| -rw-r--r-- | secrets/do/host-ed25519-key.age | bin | 611 -> 611 bytes | |||
| -rw-r--r-- | secrets/do/wireguard.age | 12 | ||||
| -rw-r--r-- | secrets/nas_client.age | 13 | ||||
| -rw-r--r-- | secrets/restic_gcs_credentials.age | bin | 2661 -> 2661 bytes | |||
| -rw-r--r-- | secrets/restic_password.age | 14 | ||||
| -rw-r--r-- | secrets/secrets.nix | 13 | ||||
| -rw-r--r-- | secrets/ssh-remote-builder.age | bin | 831 -> 831 bytes | |||
| -rw-r--r-- | secrets/vm-synology/wireguard.age | 12 |
9 files changed, 30 insertions, 34 deletions
diff --git a/secrets/cloudflare-caddy.age b/secrets/cloudflare-caddy.age Binary files differnew file mode 100644 index 0000000..6800d5b --- /dev/null +++ b/secrets/cloudflare-caddy.age diff --git a/secrets/do/host-ed25519-key.age b/secrets/do/host-ed25519-key.age Binary files differindex d73ed26..69510ed 100644 --- a/secrets/do/host-ed25519-key.age +++ b/secrets/do/host-ed25519-key.age diff --git a/secrets/do/wireguard.age b/secrets/do/wireguard.age index 62c7d99..e959862 100644 --- a/secrets/do/wireguard.age +++ b/secrets/do/wireguard.age @@ -1,7 +1,7 @@ age-encryption.org/v1 --> ssh-ed25519 pFjJaA PZwR2gnJbrjUz0ym7cSy5Fp7uJ2FYtuXdwpOvNMkbC4 -2hglFicM8rIy0fZOs99Om3+Q9fD8uNgiuda3QG++kIE --> ssh-ed25519 8Nmf6A 5SNPolSGlqSH9MFjY2zlqsp8tHTm2t8Sdw2UPphJKlU -vpJ/24lPuaqnN4SQvDOK8buu9w7MQXyFZKU+VuXkj30 ---- 0R9ApzzbQu97K4PuPVW3Zmq0w/ppKAhwlKJu+mh0CvI -ٔjJU30#Ge[dũ#SSB7%#>
b8-IG`dUL ^
\ No newline at end of file +-> ssh-ed25519 pFjJaA iOwZlej6WOezWYg6Ny3rTKZ2sBeWI9i6EzUzyBvxqzY +VxAoCn7/jPLEl6CPrRlgRLKXRiPdtvUQ7uouC10O4xM +-> ssh-ed25519 8Nmf6A zCM/oBDQYgMHShRN4Ot/VY230ojHuobZDoueu+3ITnQ +MtblJtdI6uHzHjIBudIFn1hrJDRa3lyM5HjXs1BJGnU +--- zn5OUqFqPe0iT1rkmy5CxZlURLb5ao8soPpTVo5jIFI + ܑ;f1ra
NF@7B5.bxj{FKw!$jj#)I ,ㆂ .L
\ No newline at end of file diff --git a/secrets/nas_client.age b/secrets/nas_client.age index 5824c53..4118f9f 100644 --- a/secrets/nas_client.age +++ b/secrets/nas_client.age @@ -1,8 +1,7 @@ age-encryption.org/v1 --> ssh-ed25519 pFjJaA XZhA5nQ/XBzXSUbFHx/6vIzCgKmu1gBQ6ARi2EEeEzA -dnXIxNGc+QQ9zG1qmeEvEDXK170X/9AcoZgWzgQoHEc --> ssh-ed25519 qRUWSw zvv2IRkop9SvceyNT7GcDb/V4eE8p8Lc+18Ji/XxwW8 -pZW6V9l7rO1HP+8TjFkAOpDVXBZhGI9YOlmEruE9MrI ---- r6qFz8l3mklLVEAyLqdnzYoTGmAn18HfsBhsZmM2xh4 -,M̮3-aL_Mv R' ;OI&kR!0=J6Ѻ-Fl -;
H
\ No newline at end of file +-> ssh-ed25519 pFjJaA /p8VDDQouVPO2RQyOu1FDPvxF+lG54bZebFaohjKlUw +XHxjojW+E8XEnDHnWMsLxIMDH478YYSzZOoaafl9oms +-> ssh-ed25519 qRUWSw XdFd+n6lhCRzVtufcxZvXPqc2lbaZVXwdrS2M37ZkRo +HVvc6DX/ITcGhmEuGaGvYvpGcaH/S9E7gViPeYt/8jU +--- sQlcEvwLPPwumjr9HkO7ONOznKTzLT+6n6O16fhBqU0 + 6PP jo tvk#DE]~{fEp ,\'ɠ%*Elh;ykF
\ No newline at end of file diff --git a/secrets/restic_gcs_credentials.age b/secrets/restic_gcs_credentials.age Binary files differindex 88bc631..0a7b689 100644 --- a/secrets/restic_gcs_credentials.age +++ b/secrets/restic_gcs_credentials.age diff --git a/secrets/restic_password.age b/secrets/restic_password.age index b3f8f05..9062156 100644 --- a/secrets/restic_password.age +++ b/secrets/restic_password.age @@ -1,7 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 pFjJaA 6rJ2C6ghcgTKl67mr/2lp4wbA0DwpqX43iljzuWCAAU -YzZ+2sYsnrDUMFtECf9sS4yZzdB2GklC5Dz48NVIqW8 --> ssh-ed25519 qRUWSw mLUa0kPAduhnzYaW9yz/4/1d6RWQUSV0jxofDqxE7nU -JYfdDVyFpaGCD390lFotPUNe5QSL6Y1d8MmKg1+3Sco ---- uUJzCo1/YTCCHZeoBV/WS1pzKdT0s2ObtvAIEsB+ULU -ip1Mz>,uڃKKXB:?^ 麯Ș5(
\ No newline at end of file +-> ssh-ed25519 pFjJaA FE3RMgUxVGFCI1wI6YBz1QbZS1MTgTfMlDdoWzOpKlc +sAA4/6VYI+q8xwo3DMDA/70t4Xf57hZmW6Itxi6relY +-> ssh-ed25519 qRUWSw DbEKBuyCDRAdlTrytJx1UuCSbA82SStTM5V5YrvGkn8 +JX0393noMLYj6qUCDH4y686eOuPQPVIdK44sjw8ul9w +--- cVmK2XpBhsnM5qgHZjdR9PLnUpi5m0pj2a6zVbK2WZ4 +D8H=t&f}<k {T+fc7W +u$ ' +Եu F?
\ No newline at end of file diff --git a/secrets/secrets.nix b/secrets/secrets.nix index b54fd77..0c88cb7 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -9,20 +9,15 @@ let }; in { - "restic_password.age".publicKeys = [ - users.fcuny - hosts.vm-synology - ]; - "restic_gcs_credentials.age".publicKeys = [ + "cloudflare-caddy.age".publicKeys = [ users.fcuny - hosts.vm-synology + hosts.do ]; - # run cloudflared tunnel token --cred-file foo.json cragmont - "cloudflared_cragmont.age".publicKeys = [ + "restic_password.age".publicKeys = [ users.fcuny hosts.vm-synology ]; - "cloudflared_cert.age".publicKeys = [ + "restic_gcs_credentials.age".publicKeys = [ users.fcuny hosts.vm-synology ]; diff --git a/secrets/ssh-remote-builder.age b/secrets/ssh-remote-builder.age Binary files differindex e7e6214..14f343c 100644 --- a/secrets/ssh-remote-builder.age +++ b/secrets/ssh-remote-builder.age diff --git a/secrets/vm-synology/wireguard.age b/secrets/vm-synology/wireguard.age index c3fa8e5..2b750e9 100644 --- a/secrets/vm-synology/wireguard.age +++ b/secrets/vm-synology/wireguard.age @@ -1,7 +1,7 @@ age-encryption.org/v1 --> ssh-ed25519 pFjJaA W/q8awlPps3KhNgNgiaDW3ENccWRvimQc/CepeKtIGg -R6d6oYV60+KFaiMrA21Ul84wpCRN661THD9g2T1GPwY --> ssh-ed25519 qRUWSw pUeRbvRND8xFrd+pzbodt53OMfyoIgplrFx/8obgVwc -QQiuwQ8CO8/oT2mL2Ke/mn9S3N4/LKbc18hLoNbr8nM ---- rasVmM9kOAey35QaIW2EGsVwpYK4jmB3DE14iiknhYc --#"%} LJ S:%Bנ4@r 3+4QsYFYm'-7c6Irq
\ No newline at end of file +-> ssh-ed25519 pFjJaA 8sS1TpcBjcc0+Up15kXuS14b1iCmk4lxmkjWdxijTU4 +4AWYQoFymg+GUUOBQIzc2YWgX/p/VY45PA6aMFeTWqM +-> ssh-ed25519 qRUWSw kfUXP5B9JRVccoqStdMkj81qYoEZOrVcLr2YTtnV6SE +hDAY3gXyfhYxKPZvIiXIJoqJOK+2qKzxmdXjjNVy48w +--- JvXubYcS99y0WWBD9T6ByQdawMAp9RoyV0kbE6ya4zQ +Q5Ժ w"j[oϐDS(L4@)XvOS܍˕Ŋh JpVhߊ`
\ No newline at end of file |