From efbdc2d49135be41ef17cfc7edfe18a03543b63a Mon Sep 17 00:00:00 2001 From: Franck Cuny Date: Sat, 15 Nov 2025 11:34:36 -0800 Subject: simplify the backups --- secrets/cloudflare-nginx.age | 12 ++++++------ secrets/do/host-ed25519-key.age | Bin 611 -> 611 bytes secrets/do/wireguard.age | 12 ++++++------ secrets/forgejo-fastmail.age | Bin 339 -> 339 bytes secrets/keycloak-db-password.age | 13 +++++++------ secrets/nas_client.age | Bin 364 -> 474 bytes secrets/restic-pw.age | 9 +++++++++ secrets/restic_password.age | 7 ------- secrets/rivendell/wireguard.age | Bin 367 -> 367 bytes secrets/secrets.nix | 8 +++----- secrets/ssh-remote-builder.age | 17 +++++++++-------- secrets/vm-synology/wireguard.age | 13 ++++++------- 12 files changed, 46 insertions(+), 45 deletions(-) create mode 100644 secrets/restic-pw.age delete mode 100644 secrets/restic_password.age (limited to 'secrets') diff --git a/secrets/cloudflare-nginx.age b/secrets/cloudflare-nginx.age index 3dca56c..223f5a8 100644 --- a/secrets/cloudflare-nginx.age +++ b/secrets/cloudflare-nginx.age @@ -1,7 +1,7 @@ age-encryption.org/v1 --> ssh-ed25519 pFjJaA +Maktlw6LU3Bmir2ZYgsQl3ZDyMEtPrmHUlDS46Gi28 -TWxwW0jy/h8yRkc1Xs0BH1ewxMkpoXr+ZRzrjA9GF5I --> ssh-ed25519 8Nmf6A 40zr4HRlxGAVLSAro6NLdr8LuvPK32sQ1bg+T/w8RA0 -wfBo2G8g3aInqz/Y37TmXeuX5s+FQAF4b8xaH/qSzBg ---- T/EYbeMye/m7IoqUm4n7cUGtbOClaxY/MMY7zLMtOT0 -?4BJS7YHum ssh-ed25519 pFjJaA +DQXHEd8gCVRAxfFOyviaAQb77mlavC/gXpjLKmp4UY +axtftBxKlDVAIshVpcgDfDf1GpwIb4P7KRn0pNwjrhY +-> ssh-ed25519 8Nmf6A LGX7dma79uy2cwKHid4ifHdDxf9GlYnK0kIVIzlhECw +ouZigorzxEx+BbkbElk6RFlHCECrItejNqfMzjyr8MM +--- RhSuIz18cWaUImJoXGF6MbyGFBYN4CDqyLQptcIXNcY +?v26b-9&!<\^fSzЖa9QD:x њ3%1_$֝E:|" \ No newline at end of file diff --git a/secrets/do/host-ed25519-key.age b/secrets/do/host-ed25519-key.age index ef10a90..bcc607b 100644 Binary files a/secrets/do/host-ed25519-key.age and b/secrets/do/host-ed25519-key.age differ diff --git a/secrets/do/wireguard.age b/secrets/do/wireguard.age index 19dfb0e..0ad78aa 100644 --- a/secrets/do/wireguard.age +++ b/secrets/do/wireguard.age @@ -1,7 +1,7 @@ age-encryption.org/v1 --> ssh-ed25519 pFjJaA Y0Rjr5u2uGI790/JvO7VoQSxF2KpS67e3ff0s1pXj3A -7Lk30Dwsa9TfbxtEpZFWeDSRPRN66IXu2mFCWaXZIsA --> ssh-ed25519 8Nmf6A n76CvLiAh4fjWtRx/DPRJUeazkUMxQ0Oc2qSGj0fDgk -D7ULUEBjuzmUTzIEC8bzet7SJMJC0cHYgQoil8Q3/3c ---- o9Qerf9m8XuzxQ1GzPZVumNlE4kBZzABb4PbriMXeNQ -̛%U/:"|X8(0S~zoO:4?Y?!H$ls~ \ No newline at end of file +-> ssh-ed25519 pFjJaA dKGQ5U9m7BHp+6dnAjJdMHbVbK7azzVjQsC4yto/7Xw +P8T7WR5DOk8nQ0hswiQD1HEqA0GZf8Mhofewk9rdmdk +-> ssh-ed25519 8Nmf6A 9IbBrqy8PfYiD0YOd8Ts+kAjZ1PU/uUDCd48snWGFH8 +8z3hjQeAtyRrgPf6a5RrJ3kBrLZJmy8ezf6GdriNu6o +--- VbnBjQpe8CyHx8cNIOhxYegXLcloG5ZhpvCSqxiUJ0o +ݧ7fB o~}G5&6YSIfwg +la++(-LeCғjb& \ No newline at end of file diff --git a/secrets/forgejo-fastmail.age b/secrets/forgejo-fastmail.age index ddb69f1..ab2855b 100644 Binary files a/secrets/forgejo-fastmail.age and b/secrets/forgejo-fastmail.age differ diff --git a/secrets/keycloak-db-password.age b/secrets/keycloak-db-password.age index 21a1a7e..a14cdd5 100644 --- a/secrets/keycloak-db-password.age +++ b/secrets/keycloak-db-password.age @@ -1,7 +1,8 @@ age-encryption.org/v1 --> ssh-ed25519 pFjJaA u7eibDVH1zLVbZkW2/cJcKfHwUvSjAL41nhZ8lb/TF8 -fQ1C/6A7G2sOmS3YyORQ0tJgmgxSkZFdq+LmkJuLuh4 --> ssh-ed25519 Y5h84Q ymkfeS/fq1BfAievpj2UstwWSSW+IRCqXfuPy8zX92Y -wSd280jyTsOOAxxkBhNrHQ6xfd/RjcIWH0QP9RtEJeY ---- RoXe7h0yyYK/QAdlKQp2ucIK2lsaxmb9tbxZ0DU61kw -k_Q``cQb)'IuCuNl6+^CZ2 \ No newline at end of file +-> ssh-ed25519 pFjJaA qZ/I4tvWyS6XoRUVCuSsd3fGD4VKVL7RFUwkNExbemk +FPa9m2xBQjXzSMDn5txSAhSEeiT0NFmNi5kHzgG7nhg +-> ssh-ed25519 Y5h84Q IaNvL/dJHx00hW4MiF5shPDoa/asnrgTCKN0G/f7Xi8 +7eR987Gs3gt8c3m7r19d5cKN/DghK7G8cxG9Hgfor0E +--- 6fP8Wi/hDa1zePylVJnHlPLMJVml9k/UDQpEJjjeYn8 +>AUe\`є̑cbV, +T/m` \ No newline at end of file diff --git a/secrets/nas_client.age b/secrets/nas_client.age index f24a6ed..c247020 100644 Binary files a/secrets/nas_client.age and b/secrets/nas_client.age differ diff --git a/secrets/restic-pw.age b/secrets/restic-pw.age new file mode 100644 index 0000000..9f61ede --- /dev/null +++ b/secrets/restic-pw.age @@ -0,0 +1,9 @@ +age-encryption.org/v1 +-> ssh-ed25519 pFjJaA Dl11IfO7+y/UqrH+R4JpP7wlM1HmcQ7nkYEVWUN7f3o +3m7BE09I0pA+USqkGKVbdc9ukQOssl0ujrD+JZTRe/4 +-> ssh-ed25519 qRUWSw +NRfckPgYNoEmha9sLTPxdRWD9tFQjBUxooh6q6w4CM +qcNPFLtl0BckH29QvkQVArdQRBA2KgsjIYw5arNzcHI +-> ssh-ed25519 Y5h84Q /hHI2sEG3aF1FfmZv9ZiyvviiPNMJ9PEKvATTXq+2HM +AkjRVszoUYMSQ7SRB5tqX8Ry2ITVRrCouh0ox+/+0XY +--- /k62z7Hh89vIIwETAGvBlV8C2WGQaEh8EKMS99zEKKg +mXj*"c|ȯ~>4=wO@נ_6-.LFY \ No newline at end of file diff --git a/secrets/restic_password.age b/secrets/restic_password.age deleted file mode 100644 index 8db89a5..0000000 --- a/secrets/restic_password.age +++ /dev/null @@ -1,7 +0,0 @@ -age-encryption.org/v1 --> ssh-ed25519 pFjJaA 5KWfhxNk3FAF68Iry4yvyPIxF5AfDvPZUj4paHQGBQA -j/TPillAQNbuqvaudO2SRH+wRmJlcwwrW5cGKBHk3bw --> ssh-ed25519 qRUWSw AHkeUh1rsr6ddoH9Z3g+mG6rmHPMIstn+Ln6dRr/eS8 -PsVdJkliyr0OhtLwmtnfzR1s8N+oMHpToGkq6l5UGPo ---- cf9ExBbs2M12iIrTMUengqVgLKJD00nhPaLVbCVGN4I -W!o˛&lTƁ&NğTv*s[ź bT+; \ No newline at end of file diff --git a/secrets/rivendell/wireguard.age b/secrets/rivendell/wireguard.age index e9c7308..8bfadf0 100644 Binary files a/secrets/rivendell/wireguard.age and b/secrets/rivendell/wireguard.age differ diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 658da54..5184454 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -22,17 +22,15 @@ in users.fcuny hosts.do ]; - "restic_password.age".publicKeys = [ - users.fcuny - hosts.vm-synology - ]; - "restic_gcs_credentials.age".publicKeys = [ + "restic-pw.age".publicKeys = [ users.fcuny hosts.vm-synology + hosts.rivendell ]; "nas_client.age".publicKeys = [ users.fcuny hosts.vm-synology + hosts.rivendell ]; # this is the SSH key we use to access the remote builder. "ssh-remote-builder.age".publicKeys = [ diff --git a/secrets/ssh-remote-builder.age b/secrets/ssh-remote-builder.age index d10ac6d..3e660bb 100644 --- a/secrets/ssh-remote-builder.age +++ b/secrets/ssh-remote-builder.age @@ -1,9 +1,10 @@ age-encryption.org/v1 --> ssh-ed25519 pFjJaA 84O2SPCUx+QVlQmLN7fdDmfgClYXHvYcUuKTQVIVaxY -eBnck8bhHN7xvpogTjciztNrgaiwfTrygF2R2LgmZ6Q --> ssh-ed25519 qRUWSw oh0qeksN0bzOADFq79bzRFPHvgJIysWrKIin+aJonko -Cb052NA2jRTpmp7J4ubCGEn9NWdcHXQtDmZik5gCDm0 --> ssh-ed25519 E2Yu8Q 0NCgJMvW+YFdKNWPvec05WRi63/adKvyrisyqW59JB0 -lE99gvBokfXkwKmluCtoy4hbh8Jk/k5WPDs0WHccYoM ---- 8d0KnB6sOB92oKS4jEDMsJ+q/R+kw7YSLOhLz1vKA2w -k)?OB6*C[?W꡻eր\Eɟ9&d2:w{vxZ#!n-Pq VMѣݝkr*x[dd0tz8(\/gW;6~}` i~ڥsWKތ?.㲹ʲTRBf+NJH )oX`(Bݗ 0MCx%ҕغ(ز;JLԾP-oƛ#tgAjR@{+\7߇= Id?Ԙ?4QB<٬'#[pc@ۧtb4 ssh-ed25519 pFjJaA f+QPq3MqYfaFrMgsrGtir9rNe5k8MJsRByeNT8o4hW4 +dMcvqqLG8VznxadAeF56TRmT+xrebvbBkHrgv4gTelc +-> ssh-ed25519 qRUWSw HiNIr+2ufCzCho/pvRQyzEYd2uP+TSsESPRIN/Xg9kQ +tbd5FVMy/4fSteWnGU1CAw+JQuXw3WXFHyslLS+S4pE +-> ssh-ed25519 E2Yu8Q nEaTi1Pyd8sIlp8p5x276PYvCO5RFsyrBr4uToU5FhQ +EKanWRphHfAm06DXLnjbc+h3u3csVAzBTI2XuEKEuPI +--- akqoYTMHP3s4vH8YHho2GH6JP+fAA0nrlBMn7XP5dC8 +M{t5½z'j.G Ǘ'u\TY$aswjX(v/=o ͸iN#azXhgqvSbTO1X_OW `IhA }6ܭsvG j<~%RN.7p(Fg`W`~p%祿21ID_ɖ\\koꦽ=36}kJ??NBh['k'I;_Mj5Ɯ|J[yRܔFzt2 ssh-ed25519 pFjJaA +fvsiaJMb18gU/QCaD9yHhOO+2XKznzOrYW2sX/NwE0 -iBLuUNGccw/rU294GUPW42LsK7x8tCLmD0Hlb9Jy1+E --> ssh-ed25519 qRUWSw 6DQndWls6IHZCXuTBJDoEQ/M7Z1Ahr61oJviPP02Ln8 -18nr/YXPC1II3eV2Qdj5kSYPa+WeyXL3k6zJ9g10rl8 ---- KP/xhZkn1tNxbRanbGzryFXwEgdGj9UJWGWeYF0uuOA -]2`v >ջpgo9j -"yvBh.D:GW\]`G Stnx0ūa \ No newline at end of file +-> ssh-ed25519 pFjJaA 4q+hhi7RJKC7M0TiNn+iQRLMVwyW9LP7Hjv9irTnI3A +yme4y61h8b7soGwdGRoCqVRwBPABa70gw0oTcujtPHs +-> ssh-ed25519 qRUWSw 8GMvd+DRBQsL79Q4dWnAm3YoyTHDn4u+shOitVNdlSE +cDQmmVpnY52Q51/G4BFXDmtKaHGOSZIk5sY2K0/vRSs +--- /Nt/g8t+Igt4cvDY1ZR5UkUrIPEsMv8UZyYl1lmxSK0 +e,Ϛ@iG"{dSq9zbN4.M ӻhpΖ/q2 h[wT/ \ No newline at end of file -- cgit v1.2.3