From 9cc36dfb708f0c20985839f4d562d4554b5ddc24 Mon Sep 17 00:00:00 2001
From: Franck Cuny <franck@fcuny.net>
Date: Tue, 12 Aug 2025 19:34:11 -0700
Subject: rekey some secrets and deleted unused ones

---
 secrets/cloudflare-caddy.age       | Bin 0 -> 363 bytes
 secrets/do/host-ed25519-key.age    | Bin 611 -> 611 bytes
 secrets/do/wireguard.age           |  12 ++++++------
 secrets/nas_client.age             |  13 ++++++-------
 secrets/restic_gcs_credentials.age | Bin 2661 -> 2661 bytes
 secrets/restic_password.age        |  14 ++++++++------
 secrets/secrets.nix                |  13 ++++---------
 secrets/ssh-remote-builder.age     | Bin 831 -> 831 bytes
 secrets/vm-synology/wireguard.age  |  12 ++++++------
 9 files changed, 30 insertions(+), 34 deletions(-)
 create mode 100644 secrets/cloudflare-caddy.age

(limited to 'secrets')

diff --git a/secrets/cloudflare-caddy.age b/secrets/cloudflare-caddy.age
new file mode 100644
index 0000000..6800d5b
Binary files /dev/null and b/secrets/cloudflare-caddy.age differ
diff --git a/secrets/do/host-ed25519-key.age b/secrets/do/host-ed25519-key.age
index d73ed26..69510ed 100644
Binary files a/secrets/do/host-ed25519-key.age and b/secrets/do/host-ed25519-key.age differ
diff --git a/secrets/do/wireguard.age b/secrets/do/wireguard.age
index 62c7d99..e959862 100644
--- a/secrets/do/wireguard.age
+++ b/secrets/do/wireguard.age
@@ -1,7 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 pFjJaA PZwR2gnJbrjUz0ym7cSy5Fp7uJ2FYtuXdwpOvNMkbC4
-2hglFicM8rIy0fZOs99Om3+Q9fD8uNgiuda3QG++kIE
--> ssh-ed25519 8Nmf6A 5SNPolSGlqSH9MFjY2zlqsp8tHTm2t8Sdw2UPphJKlU
-vpJ/24lPuaqnN4SQvDOK8buu9w7MQXyFZKU+VuXkj30
---- 0R9ApzzbQu97K4PuPVW3Zmq0w/ppKAhwlKJu+mh0CvI
-�ٔj��JU30�#�G��e�[���d�ũ#SSB7%�#�>��	��
�b8-I��������G`dU��
L�^�
\ No newline at end of file
+-> ssh-ed25519 pFjJaA iOwZlej6WOezWYg6Ny3rTKZ2sBeWI9i6EzUzyBvxqzY
+VxAoCn7/jPLEl6CPrRlgRLKXRiPdtvUQ7uouC10O4xM
+-> ssh-ed25519 8Nmf6A zCM/oBDQYgMHShRN4Ot/VY230ojHuobZDoueu+3ITnQ
+MtblJtdI6uHzHjIBudIFn1hrJDRa3lyM5HjXs1BJGnU
+--- zn5OUqFqPe0iT1rkmy5CxZlURLb5ao8soPpTVo5jIFI
+�ܑ;f1ra
N���F@7���B�����������5.b�xj{F��K�w!$��jj#�)I�,ㆂ�.L
��
\ No newline at end of file
diff --git a/secrets/nas_client.age b/secrets/nas_client.age
index 5824c53..4118f9f 100644
--- a/secrets/nas_client.age
+++ b/secrets/nas_client.age
@@ -1,8 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 pFjJaA XZhA5nQ/XBzXSUbFHx/6vIzCgKmu1gBQ6ARi2EEeEzA
-dnXIxNGc+QQ9zG1qmeEvEDXK170X/9AcoZgWzgQoHEc
--> ssh-ed25519 qRUWSw zvv2IRkop9SvceyNT7GcDb/V4eE8p8Lc+18Ji/XxwW8
-pZW6V9l7rO1HP+8TjFkAOpDVXBZhGI9YOlmEruE9MrI
---- r6qFz8l3mklLVEAyLqdnzYoTGmAn18HfsBhsZmM2xh4
-�,��M�̮�3-�a�L_��M�v ���R�'�;�OI&kR!0=���J6Ѻ-�����F�l���
-;
H�
\ No newline at end of file
+-> ssh-ed25519 pFjJaA /p8VDDQouVPO2RQyOu1FDPvxF+lG54bZebFaohjKlUw
+XHxjojW+E8XEnDHnWMsLxIMDH478YYSzZOoaafl9oms
+-> ssh-ed25519 qRUWSw XdFd+n6lhCRzVtufcxZvXPqc2lbaZVXwdrS2M37ZkRo
+HVvc6DX/ITcGhmEuGaGvYvpGcaH/S9E7gViPeYt/8jU
+--- sQlcEvwLPPwumjr9HkO7ONOznKTzLT+6n6O16fhBqU0
+��6�P�������Pjot��vk�#D�E]~�{f��Ep,�\'�ɠ���%*E�l��h;y�k���F�
\ No newline at end of file
diff --git a/secrets/restic_gcs_credentials.age b/secrets/restic_gcs_credentials.age
index 88bc631..0a7b689 100644
Binary files a/secrets/restic_gcs_credentials.age and b/secrets/restic_gcs_credentials.age differ
diff --git a/secrets/restic_password.age b/secrets/restic_password.age
index b3f8f05..9062156 100644
--- a/secrets/restic_password.age
+++ b/secrets/restic_password.age
@@ -1,7 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 pFjJaA 6rJ2C6ghcgTKl67mr/2lp4wbA0DwpqX43iljzuWCAAU
-YzZ+2sYsnrDUMFtECf9sS4yZzdB2GklC5Dz48NVIqW8
--> ssh-ed25519 qRUWSw mLUa0kPAduhnzYaW9yz/4/1d6RWQUSV0jxofDqxE7nU
-JYfdDVyFpaGCD390lFotPUNe5QSL6Y1d8MmKg1+3Sco
---- uUJzCo1/YTCCHZeoBV/WS1pzKdT0s2ObtvAIEsB+ULU
-ip�1���M����z>,uڃ�KK��X����B:?�^����麯Ș��5(����
\ No newline at end of file
+-> ssh-ed25519 pFjJaA FE3RMgUxVGFCI1wI6YBz1QbZS1MTgTfMlDdoWzOpKlc
+sAA4/6VYI+q8xwo3DMDA/70t4Xf57hZmW6Itxi6relY
+-> ssh-ed25519 qRUWSw DbEKBuyCDRAdlTrytJx1UuCSbA82SStTM5V5YrvGkn8
+JX0393noMLYj6qUCDH4y686eOuPQPVIdK44sjw8ul9w
+--- cVmK2XpBhsnM5qgHZjdR9PLnUpi5m0pj2a6zVbK2WZ4
+D8�H��=t��&�f}<k	{T+��f�c�7��W
+�u
�$��'
+�Եu�F?
\ No newline at end of file
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index b54fd77..0c88cb7 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -9,20 +9,15 @@ let
   };
 in
 {
-  "restic_password.age".publicKeys = [
-    users.fcuny
-    hosts.vm-synology
-  ];
-  "restic_gcs_credentials.age".publicKeys = [
+  "cloudflare-caddy.age".publicKeys = [
     users.fcuny
-    hosts.vm-synology
+    hosts.do
   ];
-  # run cloudflared tunnel token --cred-file foo.json cragmont
-  "cloudflared_cragmont.age".publicKeys = [
+  "restic_password.age".publicKeys = [
     users.fcuny
     hosts.vm-synology
   ];
-  "cloudflared_cert.age".publicKeys = [
+  "restic_gcs_credentials.age".publicKeys = [
     users.fcuny
     hosts.vm-synology
   ];
diff --git a/secrets/ssh-remote-builder.age b/secrets/ssh-remote-builder.age
index e7e6214..14f343c 100644
Binary files a/secrets/ssh-remote-builder.age and b/secrets/ssh-remote-builder.age differ
diff --git a/secrets/vm-synology/wireguard.age b/secrets/vm-synology/wireguard.age
index c3fa8e5..2b750e9 100644
--- a/secrets/vm-synology/wireguard.age
+++ b/secrets/vm-synology/wireguard.age
@@ -1,7 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 pFjJaA W/q8awlPps3KhNgNgiaDW3ENccWRvimQc/CepeKtIGg
-R6d6oYV60+KFaiMrA21Ul84wpCRN661THD9g2T1GPwY
--> ssh-ed25519 qRUWSw pUeRbvRND8xFrd+pzbodt53OMfyoIgplrFx/8obgVwc
-QQiuwQ8CO8/oT2mL2Ke/mn9S3N4/LKbc18hLoNbr8nM
---- rasVmM9kOAey35QaIW2EGsVwpYK4jmB3DE14iiknhYc
-���-�#"�%�}���LJ��� �S:�%Bנ�4�@�r�3+�4��QsY�F����Y�����m'�-7c�6Irq
\ No newline at end of file
+-> ssh-ed25519 pFjJaA 8sS1TpcBjcc0+Up15kXuS14b1iCmk4lxmkjWdxijTU4
+4AWYQoFymg+GUUOBQIzc2YWgX/p/VY45PA6aMFeTWqM
+-> ssh-ed25519 qRUWSw kfUXP5B9JRVccoqStdMkj81qYoEZOrVcLr2YTtnV6SE
+hDAY3gXyfhYxKPZvIiXIJoqJOK+2qKzxmdXjjNVy48w
+--- JvXubYcS99y0WWBD9T6ByQdawMAp9RoyV0kbE6ya4zQ
+�
��Q5�Ժ�w�"j�[oϐ���D��S(�L�4���@)����Xv�O�S�܍˕�ŊhJpV�h�ߊ`
\ No newline at end of file
-- 
cgit v1.2.3