From 938db48a818a5c0629ee8111934b7d928f3a6900 Mon Sep 17 00:00:00 2001 From: Franck Cuny Date: Thu, 20 Nov 2025 10:35:18 -0800 Subject: move acme configurations to a profile Clean up API keys for Cloudflare. --- secrets/cloudflare-env.age | Bin 0 -> 526 bytes secrets/cloudflare-nginx.age | 7 ------- secrets/cloudflared_cert.age | Bin 868 -> 0 bytes secrets/cloudflared_cragmont.age | Bin 502 -> 0 bytes secrets/secrets.nix | 3 ++- 5 files changed, 2 insertions(+), 8 deletions(-) create mode 100644 secrets/cloudflare-env.age delete mode 100644 secrets/cloudflare-nginx.age delete mode 100644 secrets/cloudflared_cert.age delete mode 100644 secrets/cloudflared_cragmont.age (limited to 'secrets') diff --git a/secrets/cloudflare-env.age b/secrets/cloudflare-env.age new file mode 100644 index 0000000..be85fa3 Binary files /dev/null and b/secrets/cloudflare-env.age differ diff --git a/secrets/cloudflare-nginx.age b/secrets/cloudflare-nginx.age deleted file mode 100644 index 223f5a8..0000000 --- a/secrets/cloudflare-nginx.age +++ /dev/null @@ -1,7 +0,0 @@ -age-encryption.org/v1 --> ssh-ed25519 pFjJaA +DQXHEd8gCVRAxfFOyviaAQb77mlavC/gXpjLKmp4UY -axtftBxKlDVAIshVpcgDfDf1GpwIb4P7KRn0pNwjrhY --> ssh-ed25519 8Nmf6A LGX7dma79uy2cwKHid4ifHdDxf9GlYnK0kIVIzlhECw -ouZigorzxEx+BbkbElk6RFlHCECrItejNqfMzjyr8MM ---- RhSuIz18cWaUImJoXGF6MbyGFBYN4CDqyLQptcIXNcY -?v26b-9&!<\^fSzЖa9QD:x њ3%1_$֝E:|" \ No newline at end of file diff --git a/secrets/cloudflared_cert.age b/secrets/cloudflared_cert.age deleted file mode 100644 index cd411fe..0000000 Binary files a/secrets/cloudflared_cert.age and /dev/null differ diff --git a/secrets/cloudflared_cragmont.age b/secrets/cloudflared_cragmont.age deleted file mode 100644 index 94b82ab..0000000 Binary files a/secrets/cloudflared_cragmont.age and /dev/null differ diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 2b6022b..0204f4f 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -10,8 +10,9 @@ let }; in { - "cloudflare-nginx.age".publicKeys = [ + "cloudflare-env.age".publicKeys = [ users.fcuny + hosts.rivendell hosts.do ]; "restic-pw.age".publicKeys = [ -- cgit v1.2.3