aboutsummaryrefslogtreecommitdiff
path: root/secrets
diff options
context:
space:
mode:
authorFranck Cuny <franck@fcuny.net>2025-11-15 11:34:36 -0800
committerFranck Cuny <franck@fcuny.net>2025-11-15 11:34:36 -0800
commitefbdc2d49135be41ef17cfc7edfe18a03543b63a (patch)
tree2e3d59cfe477000845179a522eb9376f6fb0bbae /secrets
parentuse cgit package (diff)
downloadinfra-efbdc2d49135be41ef17cfc7edfe18a03543b63a.tar.gz
simplify the backups
Diffstat (limited to 'secrets')
-rw-r--r--secrets/cloudflare-nginx.age12
-rw-r--r--secrets/do/host-ed25519-key.agebin611 -> 611 bytes
-rw-r--r--secrets/do/wireguard.age12
-rw-r--r--secrets/forgejo-fastmail.agebin339 -> 339 bytes
-rw-r--r--secrets/keycloak-db-password.age13
-rw-r--r--secrets/nas_client.agebin364 -> 474 bytes
-rw-r--r--secrets/restic-pw.age9
-rw-r--r--secrets/restic_password.age7
-rw-r--r--secrets/rivendell/wireguard.agebin367 -> 367 bytes
-rw-r--r--secrets/secrets.nix8
-rw-r--r--secrets/ssh-remote-builder.age17
-rw-r--r--secrets/vm-synology/wireguard.age13
12 files changed, 46 insertions, 45 deletions
diff --git a/secrets/cloudflare-nginx.age b/secrets/cloudflare-nginx.age
index 3dca56c..223f5a8 100644
--- a/secrets/cloudflare-nginx.age
+++ b/secrets/cloudflare-nginx.age
@@ -1,7 +1,7 @@
age-encryption.org/v1
--> ssh-ed25519 pFjJaA +Maktlw6LU3Bmir2ZYgsQl3ZDyMEtPrmHUlDS46Gi28
-TWxwW0jy/h8yRkc1Xs0BH1ewxMkpoXr+ZRzrjA9GF5I
--> ssh-ed25519 8Nmf6A 40zr4HRlxGAVLSAro6NLdr8LuvPK32sQ1bg+T/w8RA0
-wfBo2G8g3aInqz/Y37TmXeuX5s+FQAF4b8xaH/qSzBg
---- T/EYbeMye/m7IoqUm4n7cUGtbOClaxY/MMY7zLMtOT0
-?4BJS7YHum<w2Zo})"qwJN&Dy \ No newline at end of file
+-> ssh-ed25519 pFjJaA +DQXHEd8gCVRAxfFOyviaAQb77mlavC/gXpjLKmp4UY
+axtftBxKlDVAIshVpcgDfDf1GpwIb4P7KRn0pNwjrhY
+-> ssh-ed25519 8Nmf6A LGX7dma79uy2cwKHid4ifHdDxf9GlYnK0kIVIzlhECw
+ouZigorzxEx+BbkbElk6RFlHCECrItejNqfMzjyr8MM
+--- RhSuIz18cWaUImJoXGF6MbyGFBYN4CDqyLQptcIXNcY
+?v26b-9&!<\^fSzЖa9QD:x њ3%1_$֝E:|" \ No newline at end of file
diff --git a/secrets/do/host-ed25519-key.age b/secrets/do/host-ed25519-key.age
index ef10a90..bcc607b 100644
--- a/secrets/do/host-ed25519-key.age
+++ b/secrets/do/host-ed25519-key.age
Binary files differ
diff --git a/secrets/do/wireguard.age b/secrets/do/wireguard.age
index 19dfb0e..0ad78aa 100644
--- a/secrets/do/wireguard.age
+++ b/secrets/do/wireguard.age
@@ -1,7 +1,7 @@
age-encryption.org/v1
--> ssh-ed25519 pFjJaA Y0Rjr5u2uGI790/JvO7VoQSxF2KpS67e3ff0s1pXj3A
-7Lk30Dwsa9TfbxtEpZFWeDSRPRN66IXu2mFCWaXZIsA
--> ssh-ed25519 8Nmf6A n76CvLiAh4fjWtRx/DPRJUeazkUMxQ0Oc2qSGj0fDgk
-D7ULUEBjuzmUTzIEC8bzet7SJMJC0cHYgQoil8Q3/3c
---- o9Qerf9m8XuzxQ1GzPZVumNlE4kBZzABb4PbriMXeNQ
-̛%U/:"|X8(0S~zoO:4?Y?!H$ls~ \ No newline at end of file
+-> ssh-ed25519 pFjJaA dKGQ5U9m7BHp+6dnAjJdMHbVbK7azzVjQsC4yto/7Xw
+P8T7WR5DOk8nQ0hswiQD1HEqA0GZf8Mhofewk9rdmdk
+-> ssh-ed25519 8Nmf6A 9IbBrqy8PfYiD0YOd8Ts+kAjZ1PU/uUDCd48snWGFH8
+8z3hjQeAtyRrgPf6a5RrJ3kBrLZJmy8ezf6GdriNu6o
+--- VbnBjQpe8CyHx8cNIOhxYegXLcloG5ZhpvCSqxiUJ0o
+ݧ7fB o~}G5&6YSIfwg +la++(-LeCғjb& \ No newline at end of file
diff --git a/secrets/forgejo-fastmail.age b/secrets/forgejo-fastmail.age
index ddb69f1..ab2855b 100644
--- a/secrets/forgejo-fastmail.age
+++ b/secrets/forgejo-fastmail.age
Binary files differ
diff --git a/secrets/keycloak-db-password.age b/secrets/keycloak-db-password.age
index 21a1a7e..a14cdd5 100644
--- a/secrets/keycloak-db-password.age
+++ b/secrets/keycloak-db-password.age
@@ -1,7 +1,8 @@
age-encryption.org/v1
--> ssh-ed25519 pFjJaA u7eibDVH1zLVbZkW2/cJcKfHwUvSjAL41nhZ8lb/TF8
-fQ1C/6A7G2sOmS3YyORQ0tJgmgxSkZFdq+LmkJuLuh4
--> ssh-ed25519 Y5h84Q ymkfeS/fq1BfAievpj2UstwWSSW+IRCqXfuPy8zX92Y
-wSd280jyTsOOAxxkBhNrHQ6xfd/RjcIWH0QP9RtEJeY
---- RoXe7h0yyYK/QAdlKQp2ucIK2lsaxmb9tbxZ0DU61kw
-k_Q``cQb)'IuCuNl6+^CZ2 \ No newline at end of file
+-> ssh-ed25519 pFjJaA qZ/I4tvWyS6XoRUVCuSsd3fGD4VKVL7RFUwkNExbemk
+FPa9m2xBQjXzSMDn5txSAhSEeiT0NFmNi5kHzgG7nhg
+-> ssh-ed25519 Y5h84Q IaNvL/dJHx00hW4MiF5shPDoa/asnrgTCKN0G/f7Xi8
+7eR987Gs3gt8c3m7r19d5cKN/DghK7G8cxG9Hgfor0E
+--- 6fP8Wi/hDa1zePylVJnHlPLMJVml9k/UDQpEJjjeYn8
+>AUe\`є̑cbV,
+T/m` \ No newline at end of file
diff --git a/secrets/nas_client.age b/secrets/nas_client.age
index f24a6ed..c247020 100644
--- a/secrets/nas_client.age
+++ b/secrets/nas_client.age
Binary files differ
diff --git a/secrets/restic-pw.age b/secrets/restic-pw.age
new file mode 100644
index 0000000..9f61ede
--- /dev/null
+++ b/secrets/restic-pw.age
@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> ssh-ed25519 pFjJaA Dl11IfO7+y/UqrH+R4JpP7wlM1HmcQ7nkYEVWUN7f3o
+3m7BE09I0pA+USqkGKVbdc9ukQOssl0ujrD+JZTRe/4
+-> ssh-ed25519 qRUWSw +NRfckPgYNoEmha9sLTPxdRWD9tFQjBUxooh6q6w4CM
+qcNPFLtl0BckH29QvkQVArdQRBA2KgsjIYw5arNzcHI
+-> ssh-ed25519 Y5h84Q /hHI2sEG3aF1FfmZv9ZiyvviiPNMJ9PEKvATTXq+2HM
+AkjRVszoUYMSQ7SRB5tqX8Ry2ITVRrCouh0ox+/+0XY
+--- /k62z7Hh89vIIwETAGvBlV8C2WGQaEh8EKMS99zEKKg
+mXj*"c|ȯ~>4=wO@נ_6-.LFY \ No newline at end of file
diff --git a/secrets/restic_password.age b/secrets/restic_password.age
deleted file mode 100644
index 8db89a5..0000000
--- a/secrets/restic_password.age
+++ /dev/null
@@ -1,7 +0,0 @@
-age-encryption.org/v1
--> ssh-ed25519 pFjJaA 5KWfhxNk3FAF68Iry4yvyPIxF5AfDvPZUj4paHQGBQA
-j/TPillAQNbuqvaudO2SRH+wRmJlcwwrW5cGKBHk3bw
--> ssh-ed25519 qRUWSw AHkeUh1rsr6ddoH9Z3g+mG6rmHPMIstn+Ln6dRr/eS8
-PsVdJkliyr0OhtLwmtnfzR1s8N+oMHpToGkq6l5UGPo
---- cf9ExBbs2M12iIrTMUengqVgLKJD00nhPaLVbCVGN4I
-W!o˛&lTƁ&NğTv*s[ź bT+; \ No newline at end of file
diff --git a/secrets/rivendell/wireguard.age b/secrets/rivendell/wireguard.age
index e9c7308..8bfadf0 100644
--- a/secrets/rivendell/wireguard.age
+++ b/secrets/rivendell/wireguard.age
Binary files differ
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 658da54..5184454 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -22,17 +22,15 @@ in
users.fcuny
hosts.do
];
- "restic_password.age".publicKeys = [
- users.fcuny
- hosts.vm-synology
- ];
- "restic_gcs_credentials.age".publicKeys = [
+ "restic-pw.age".publicKeys = [
users.fcuny
hosts.vm-synology
+ hosts.rivendell
];
"nas_client.age".publicKeys = [
users.fcuny
hosts.vm-synology
+ hosts.rivendell
];
# this is the SSH key we use to access the remote builder.
"ssh-remote-builder.age".publicKeys = [
diff --git a/secrets/ssh-remote-builder.age b/secrets/ssh-remote-builder.age
index d10ac6d..3e660bb 100644
--- a/secrets/ssh-remote-builder.age
+++ b/secrets/ssh-remote-builder.age
@@ -1,9 +1,10 @@
age-encryption.org/v1
--> ssh-ed25519 pFjJaA 84O2SPCUx+QVlQmLN7fdDmfgClYXHvYcUuKTQVIVaxY
-eBnck8bhHN7xvpogTjciztNrgaiwfTrygF2R2LgmZ6Q
--> ssh-ed25519 qRUWSw oh0qeksN0bzOADFq79bzRFPHvgJIysWrKIin+aJonko
-Cb052NA2jRTpmp7J4ubCGEn9NWdcHXQtDmZik5gCDm0
--> ssh-ed25519 E2Yu8Q 0NCgJMvW+YFdKNWPvec05WRi63/adKvyrisyqW59JB0
-lE99gvBokfXkwKmluCtoy4hbh8Jk/k5WPDs0WHccYoM
---- 8d0KnB6sOB92oKS4jEDMsJ+q/R+kw7YSLOhLz1vKA2w
-k)?OB6*C[?W꡻eր\Eɟ9&d2:w{vxZ#!n-Pq VMѣݝkr*x[dd0tz8(\/gW;6~}` i~ڥsWKތ?.㲹ʲTRBf+NJH )oX`(Bݗ 0MCx%ҕغ(ز;JLԾP-oƛ#tgAjR@{+\7߇= Id?Ԙ?4QB<٬'#[pc@ۧtb4<i-m@aU`^bX៤`B`bݭOKUA0^+D'? zMPԀׯٴgcuㇷ \ No newline at end of file
+-> ssh-ed25519 pFjJaA f+QPq3MqYfaFrMgsrGtir9rNe5k8MJsRByeNT8o4hW4
+dMcvqqLG8VznxadAeF56TRmT+xrebvbBkHrgv4gTelc
+-> ssh-ed25519 qRUWSw HiNIr+2ufCzCho/pvRQyzEYd2uP+TSsESPRIN/Xg9kQ
+tbd5FVMy/4fSteWnGU1CAw+JQuXw3WXFHyslLS+S4pE
+-> ssh-ed25519 E2Yu8Q nEaTi1Pyd8sIlp8p5x276PYvCO5RFsyrBr4uToU5FhQ
+EKanWRphHfAm06DXLnjbc+h3u3csVAzBTI2XuEKEuPI
+--- akqoYTMHP3s4vH8YHho2GH6JP+fAA0nrlBMn7XP5dC8
+M{t5½z'j.G Ǘ'u\TY$aswjX(v/=o ͸iN#azXhgqvSbTO1X_OW `IhA }6ܭsvG j<~%RN.7p(Fg`W`~p%祿21ID_ɖ\\koꦽ=36}kJ??NBh['k'I;_Mj5Ɯ|J[yRܔFzt2<RϿ4bFw<ދ<~3O@mP}/='sʗKRq.GAΎ@ kޯ:ϸIȓcFw C 6GLm혮d|t
+BK3qvR_Og \ No newline at end of file
diff --git a/secrets/vm-synology/wireguard.age b/secrets/vm-synology/wireguard.age
index b1a1384..9bed555 100644
--- a/secrets/vm-synology/wireguard.age
+++ b/secrets/vm-synology/wireguard.age
@@ -1,8 +1,7 @@
age-encryption.org/v1
--> ssh-ed25519 pFjJaA +fvsiaJMb18gU/QCaD9yHhOO+2XKznzOrYW2sX/NwE0
-iBLuUNGccw/rU294GUPW42LsK7x8tCLmD0Hlb9Jy1+E
--> ssh-ed25519 qRUWSw 6DQndWls6IHZCXuTBJDoEQ/M7Z1Ahr61oJviPP02Ln8
-18nr/YXPC1II3eV2Qdj5kSYPa+WeyXL3k6zJ9g10rl8
---- KP/xhZkn1tNxbRanbGzryFXwEgdGj9UJWGWeYF0uuOA
-]2`v >ջpgo9j
-"yvBh.D:GW\]`G Stnx0ūa \ No newline at end of file
+-> ssh-ed25519 pFjJaA 4q+hhi7RJKC7M0TiNn+iQRLMVwyW9LP7Hjv9irTnI3A
+yme4y61h8b7soGwdGRoCqVRwBPABa70gw0oTcujtPHs
+-> ssh-ed25519 qRUWSw 8GMvd+DRBQsL79Q4dWnAm3YoyTHDn4u+shOitVNdlSE
+cDQmmVpnY52Q51/G4BFXDmtKaHGOSZIk5sY2K0/vRSs
+--- /Nt/g8t+Igt4cvDY1ZR5UkUrIPEsMv8UZyYl1lmxSK0
+e,Ϛ@iG"{dSq9zbN4.M ӻhpΖ/q2 h[wT/ \ No newline at end of file