From d23d7bf78b38fd7976d2dbbc063f406fa04f13d5 Mon Sep 17 00:00:00 2001 From: Franck Cuny Date: Sat, 9 Aug 2025 11:02:18 -0700 Subject: add the SSH key for the remote builder All the secrets were rekeyed. --- secrets/cloudflared_cert.age | Bin 868 -> 868 bytes secrets/cloudflared_cragmont.age | Bin 502 -> 502 bytes secrets/restic_gcs_credentials.age | Bin 2661 -> 2661 bytes secrets/restic_password.age | 12 ++++++------ secrets/secrets.nix | 7 +++++++ secrets/ssh-remote-builder.age | Bin 0 -> 831 bytes secrets/users/fcuny/anthropic-api-key.age | 10 ++++------ secrets/users/fcuny/llm.age | Bin 523 -> 413 bytes 8 files changed, 17 insertions(+), 12 deletions(-) create mode 100644 secrets/ssh-remote-builder.age (limited to 'secrets') diff --git a/secrets/cloudflared_cert.age b/secrets/cloudflared_cert.age index 3eee66a..cd411fe 100644 Binary files a/secrets/cloudflared_cert.age and b/secrets/cloudflared_cert.age differ diff --git a/secrets/cloudflared_cragmont.age b/secrets/cloudflared_cragmont.age index 986d699..94b82ab 100644 Binary files a/secrets/cloudflared_cragmont.age and b/secrets/cloudflared_cragmont.age differ diff --git a/secrets/restic_gcs_credentials.age b/secrets/restic_gcs_credentials.age index 8ee6981..88bc631 100644 Binary files a/secrets/restic_gcs_credentials.age and b/secrets/restic_gcs_credentials.age differ diff --git a/secrets/restic_password.age b/secrets/restic_password.age index b5c94e2..b3f8f05 100644 --- a/secrets/restic_password.age +++ b/secrets/restic_password.age @@ -1,7 +1,7 @@ age-encryption.org/v1 --> ssh-ed25519 pFjJaA iHTs45YXsTQXK+OINYkkQa69zzWQ3vbvRq4BEUTcQCw -EBhd2JKma+aZInyLyzLJXG0ceBlSxF3iXa23NtUPQ30 --> ssh-ed25519 qRUWSw eROWQVI+Wb4tDmRMeX0ietX+cpWy248UO1sbghnXz2E -H1+zbwjLrytYe3XAcmS34q1A+unmctOf6koVTUyc6bM ---- lLozC4In1nPiUoXtXWH2hqfotyFnUxX+sW1k4mCkYyE -$η2(!{mg9+L4]t4it9j9 PaZqou \ No newline at end of file +-> ssh-ed25519 pFjJaA 6rJ2C6ghcgTKl67mr/2lp4wbA0DwpqX43iljzuWCAAU +YzZ+2sYsnrDUMFtECf9sS4yZzdB2GklC5Dz48NVIqW8 +-> ssh-ed25519 qRUWSw mLUa0kPAduhnzYaW9yz/4/1d6RWQUSV0jxofDqxE7nU +JYfdDVyFpaGCD390lFotPUNe5QSL6Y1d8MmKg1+3Sco +--- uUJzCo1/YTCCHZeoBV/WS1pzKdT0s2ObtvAIEsB+ULU +ip1Mz>,uڃKKXB:?^麯Ș5( \ No newline at end of file diff --git a/secrets/secrets.nix b/secrets/secrets.nix index b437995..52f2311 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -1,6 +1,7 @@ let hosts = { vm-synology = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHKZAKlqOU6bSuMaaZAsYJdZnmNASWuIbbrrOjB6yGb8 root@vm-synology"; + mba = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDLQTIPZraE+jpMqGkh8yUhNFzRJbMarX5Mky3nETw6c root@mba-m2"; }; users = { fcuny = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKdyJepi/NyO6d9eP8m48Ga/gdjB5ENHRXYM1ZqFZR8t"; @@ -34,4 +35,10 @@ in users.fcuny hosts.vm-synology ]; + # this is the SSH key we use to access the remote builder. + "ssh-remote-builder.age".publicKeys = [ + users.fcuny + hosts.vm-synology + hosts.mba + ]; } diff --git a/secrets/ssh-remote-builder.age b/secrets/ssh-remote-builder.age new file mode 100644 index 0000000..e7e6214 Binary files /dev/null and b/secrets/ssh-remote-builder.age differ diff --git a/secrets/users/fcuny/anthropic-api-key.age b/secrets/users/fcuny/anthropic-api-key.age index e655eaf..010b242 100644 --- a/secrets/users/fcuny/anthropic-api-key.age +++ b/secrets/users/fcuny/anthropic-api-key.age @@ -1,7 +1,5 @@ age-encryption.org/v1 --> ssh-ed25519 9Ia8+w Uuyac8BHIeels3jbOew49uzdZHAKiy4OfzZNVvqHigI -SVrFSS1UIAhds24sVNtcUmSj4pF4ann2sS1Z7uLwlRA --> ssh-ed25519 pFjJaA Z9ToZUj5+pEF81kDEodCgxeM6Uc2euzMELgfLheX6WY -S0Qa3gowL0TlQwLIUjhJDuSQwUQhVGKgKgYzer4ekxI ---- rBr7v8PZV8+s1BXxgpn84FjnNiKU50GeF/uwJuNwsKc -Vw 6K5kU`KVpC?MZDHKfGr YiVpfÐYIHZ=ݥ"yb}XK]sw `24[ 'wXgM=X\&3f&Щ'5~ \ No newline at end of file +-> ssh-ed25519 pFjJaA qXtTUntXWMEP45HrvU+T1qE7FD53q2ijxd28Y+eLtRw +gV1pMHr/tYWnU6tE1OXbKyu71mxNI4d4z7so8QiR02I +--- wTJ4/PEMTlcHRy+gl5FNsVy19x7IkCPRB83JYAzYcZo +/zqR/w.;;kN)!d!lΆ00iA} WIMHuԺp *nn_ӊep3wCJZYunhb1[wޒ濐6 \ No newline at end of file diff --git a/secrets/users/fcuny/llm.age b/secrets/users/fcuny/llm.age index 79223f8..4d623d8 100644 Binary files a/secrets/users/fcuny/llm.age and b/secrets/users/fcuny/llm.age differ -- cgit v1.2.3