From 4a949821849b29f046784bb470d1f80fb7ee73cb Mon Sep 17 00:00:00 2001 From: Tao Tien <29749622+taotien@users.noreply.github.com> Date: Thu, 22 May 2025 17:40:48 -0700 Subject: [PATCH] agenix --- flake.nix | 1 + secrets/password-tao.age | 18 ++++++++++-------- secrets/secrets.nix | 21 +++++++++++---------- secrets/syncthing-NOcomputer.age | Bin 496 -> 606 bytes secrets/syncthing-NOlaptop.age | Bin 496 -> 606 bytes secrets/syncthing-uwuraid.age | 19 +++++++++++-------- secrets/uwuraid.age | Bin 474 -> 584 bytes 7 files changed, 33 insertions(+), 26 deletions(-) diff --git a/flake.nix b/flake.nix index 3035701..eed84ff 100644 --- a/flake.nix +++ b/flake.nix @@ -134,6 +134,7 @@ ./systems/NObangers.nix nixos-cosmic.nixosModules.default ./extras/cosmic.nix + agenix.nixosModules.default ./extras/uwuraid.nix ]; }; diff --git a/secrets/password-tao.age b/secrets/password-tao.age index c1a57b9..b8f9163 100644 --- a/secrets/password-tao.age +++ b/secrets/password-tao.age @@ -1,9 +1,11 @@ age-encryption.org/v1 --> ssh-ed25519 V3f6QA QDUWA5zzVhBw+QqxzZSEaLYNKLtP8DOAh/z10OTM+0M -zA0mROP7S/Y+Y3NC2ZO1kKdgb50jJDAaEsvwcssVEMM --> ssh-ed25519 aRvoFQ doc+fEMbgE/JYKa0TKRdobp1qENAQSDqnKzPHzLqRzg -qv0OJ/4PCKCSv04pP4hyfkhekX9V0yMkzYAUvFldgcQ --> ssh-ed25519 J90tbg RCekA9T/crPEYbPCr47+EaSVsrENHevd7XIfkycorEk -ZBBCNvOTRz3gWeOfUKeTy6+QXMknTHB5CNHfjU5iOEc ---- KAex15ZocZqDmam5N9HSSCYAbcpdhKt4whnbFA3XWxs -MJ0rՃt(Btan$0l@^֗iR)э;:tDQ]Cma yC>B5¡Vk}#!gv%n} ݨG \ No newline at end of file +-> ssh-ed25519 V3f6QA Jqr1VBsmVKIDYp+gatD7GuqBPqJCM+q60yF5CYWqnG8 +p4HhQIo+Ar8cIdOyASPq2+j2TcK5bk1PrUW7Yv+5VOk +-> ssh-ed25519 aRvoFQ QYqX5AvBeR1QYM8ml7sYtyxf40X8kOXeSyDEWDwhhQ8 +V1cznVWmgHr4W+3zYoIRraPEzGO2/tx5j3Uk7FVwIQ8 +-> ssh-ed25519 J90tbg /x5uxUS8l/b3OBPh3VVl1zOmpoRrpAuqwRienAxGXw4 +/pmp+iurY/6EbuTRaR8fokUdYS3xA9RqSyJ4qPQlFro +-> ssh-ed25519 pMLEJw QEoPXcEostoswMpoTnmv07DXNzOYctKoNR23LrGm2mY +GM4aqs1iC3lpmAOLks0H+rlE9oVXAD0Y0GMk8csFVA0 +--- 2L/fJnqxn2rexl4kAw79w+8xRZ4bSwi2bcgs29zLNnc +qҏ3Da/Zx&+Mv񩢛0NXse'/29`x*"N'ltDL" 56,'3'k]4 \ No newline at end of file diff --git a/secrets/secrets.nix b/secrets/secrets.nix index cb4a12e..8f053cb 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -1,13 +1,14 @@ let - # get these from /etc/ssh - NOcomputer = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPv53GM1uDDOdRxIlHmpf6x2y13yT5bFDNyrgDGLAR1l"; - NOlaptop = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILtdTREsBxzg/8s0lVCwL+r18qMP8glxAKaKEg+71I6m"; - NOmom = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGdPvIo0P00I27i9XQFngsklw/dSyoFs7EgRt7RvkbSq"; - systems = [NOcomputer NOlaptop NOmom]; + # get these from /etc/ssh + NOcomputer = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPv53GM1uDDOdRxIlHmpf6x2y13yT5bFDNyrgDGLAR1l"; + NOlaptop = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILtdTREsBxzg/8s0lVCwL+r18qMP8glxAKaKEg+71I6m"; + NOmom = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGdPvIo0P00I27i9XQFngsklw/dSyoFs7EgRt7RvkbSq"; + NObangers = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGFLjWigGCzbpumo0WA8xXR0PAxSifyocOMNTFqfFLOq"; + systems = [NOcomputer NOlaptop NOmom NObangers]; in { - "uwuraid.age".publicKeys = systems; - "syncthing-NOcomputer.age".publicKeys = systems; - "syncthing-NOlaptop.age".publicKeys = systems; - "syncthing-uwuraid.age".publicKeys = systems; - "password-tao.age".publicKeys = systems; + "uwuraid.age".publicKeys = systems; + "syncthing-NOcomputer.age".publicKeys = systems; + "syncthing-NOlaptop.age".publicKeys = systems; + "syncthing-uwuraid.age".publicKeys = systems; + "password-tao.age".publicKeys = systems; } diff --git a/secrets/syncthing-NOcomputer.age b/secrets/syncthing-NOcomputer.age index 921983efe0511a5f661d5d5b712bed2e5ea61daa..c4590b739e4a60c8f79e6c7a4457309234f65c80 100644 GIT binary patch literal 606 zcmZ9_J&V&|003ZcP#Qtx1|1a1a#N_un>1~+93*Ypq`jnR(xy$|kT!YKv}yAuP5P0b z;3WP6(fKyHNjQ)L(M81J4n#r0NkJC}CkMU7{hmMYj3%%MLuZ*q=@f-`(Q-nr0ao0@ zlf*AVmu6YO;U?piyF6ZF`R1VO&sRg}MuHNfbd`-2HKzs7=F_P(BN}6nlk~zs80p3N zJeg3Q08t|(<9*xHB;@d*6@_y*YEw+f(z22eRDz4!NMEBy7q?i8*`l6k)KNgHfbh+B ziU^{om8XcMNUGJzG)478w$5YKHcaBM97}S^Xy_Z@8idQ(s4DPz&as?5AT2nnsPxP( zUEEq6m5wL46A@O-Xhuhc)x}m%n0A&&%#c$unYO8Axla%Kw%Cw@ehKru8W>rfwKdJP zRDt1Aq*6y;>y9xOYale73Te^YqApeCi(91Zi>(cgIFk_ciUcNl4jNI{2g@N$)Ew0H zrn2BDh0;?GxRv%m!4fkfWFhaDCPFgLI+Ud*n;@;pVBVCsgh_LzVld7|&a5g{EEaJh zKw~B%fTTuJG}g;*M)#I0)bU^p2h<1-x;<-cUVr-N@>$_+$9z?|b8usO zH4|@H0kh+Nd!n7){`CFh;qRlbd%Hg`o!tBPT0Z^@j!*ym(smxaE4;jNtuD?!yt(gj cm7|mE;TP}O`Dg3=N9*DHnipEPr@;Wm88!uW?C~%d01j^F*kTIRBu69Ic8!oLu^)hL3LD7PGd!LXm4{?K?*HC zAaiqQEoEdfH8n9gAYoE=Z$?odZDes(cyB{OHb+Y|MKNJENJcnoQB8SlSW-DwLt1li zW_3nrMr37HH)t?b3Rg!>bazl}X;^PBO)_|TNls`mN@;j9ayNNQYjsI+dUY{#azs*4 zMKCmHk?|LQc0o>PZ%0UMctbZhGE!+%Q*K5=Qekv=Oh`0!b4E{Ca58W*Npwq3Wkf*= zQ%rPPSX5Fkcr`{(GDK`>QEP8;S7k{rOIR;2VRJTSQAuNMbXHDUQ$b@2EiEk|T3KXa zc2{joV@OgpbaQ!jV{U7Ab~7?fHZy2sNn&F;dQoy|LPT_JFLYX23gc>c`r25+c75#L zk?WC0t&70Odo=kF`gaTbtE>C-NewrUypVF|tjGw!hpj!gtulQmsAAU>JnRyzUBdE6 k#Y5F!lvE^$gp!=65~R-&08rGo@1$rU(<9!d^g*ZtC_IRF3v diff --git a/secrets/syncthing-NOlaptop.age b/secrets/syncthing-NOlaptop.age index 7ede6d7c6a427455a7d0c5017cdc3c25690866bb..a9f96007f9b1446fc5f321a067ff554e472da821 100644 GIT binary patch delta 553 zcmZ9{yNlCs003a2$8khZ?gqQul`7|AEJ>TBO%TLBlC()LZIWM`q)yGF&7*1BrjIlZ z)kPc>S`Y`pRX9Nf5od7|U2bv^4!qex5gY`;-S0p6ek4w}*4I~IvoRu>MLX6=TC8I_ zDi`I5DoVmYS(*dbZpxIWP~%4cnp?P!SJ4V)#5_`4;0wMUv!ck) zZN@BVQ08Vj4DF0%<_IE7rMuERV8pbiBYh#}c+CuER?fz4#wjBxC@>ml=vp6i(5^@l z2xiiLA6jZQ0C@rLgcNCwv}k6*W>+bpi-4A^ya{UVP_5MJD(-2UpUKsrt_!V+jr0Ru zMq(58q=6GDD9fQ)8dURs)oDoMsR6652L(1l%;-tEmYro|Nfe444D;Mnb$zKKJ4FIk zY?wgUAr-d%pNx*`G`C2jf;3jk9h)i0oUUuqXeAR<&dN4KI(D#}0LH;I)~B@DZW$2n zdqtL36txR`aL&*Mf!nM&f$y4Q(v{_!)Fwllmt7{TL77Y@4V<1hqhxjLG3=1lqG%Es z9>9SKW=4L%!Y(<*3z+Y?cmVBQEu1VTg}J)F{&nyCD||Z_r0^7f9ajP$p8QV delta 442 zcmV;r0Y(1a1n>ipEPq-^Y+6EON>x>DFGVYCRzxsjYGy$}GJ0rKFjiwTXjEiqQ+8)$ zL`pC*YYJ^9C3P&?&Hgb6@Y+^5CF;P`-Voys!MoczSZfa{zQdw+cXLf30c5!iP zY0w zGiWtzX*FXoR8vuHcv^OPWkX?hV^mEuGHo?fbTxEoYes5lMtNdU3Yk}n2z6`+(jV9Y zcv(wP%K^L}?;gS-^W=|B(=Frz{V6LkptLK-H}5>#`Ka0~8G}$rF(qkoyHxKZPVRz3 k^)07I>QwH+n*R_{;eR$W)~=KtX|xo3 ssh-ed25519 V3f6QA tldpGANWIMXkdGc3wAgiO7gHzjQ/WqezW2t2RtCMcEc -IK6u8X9l7wR8IbskW2SehAuCuXQO/b4wkQlZrd3SKV0 --> ssh-ed25519 aRvoFQ CDSvzM9oYI7vtWJZlRNlGuYJ2Ri481xtyTnqnjfrl2o -IJHi3RD/1ilTAilaHsvDktB1HQlJpXsfpyywWjKnTpE --> ssh-ed25519 J90tbg l2/Lx+sPgGnslF5Hfjnh/gyt9OmVIoB84XttpuTDyyk -r8Hpr6WpPhb+RjjBamnVtrmxms73XZKV++ncUK1uk38 ---- vPpwu4/5Hr0BV9hO6YEZHeAEiIMezn9vAO5a7FcIIs0 -l@`"2_>lF soЌPlڊpn02/ &)M%*Vݐ;-KۅlcϯIX-M=&x \ No newline at end of file +-> ssh-ed25519 V3f6QA G78ug4xIYOawhwWrsbqfklnovZgd+uxLMP9+IO5jVQo +PYmm6tSpNzwAAr9s550BnuiScvd17yFfdiYmKcR8EoY +-> ssh-ed25519 aRvoFQ Zz8TY6G6jKzt6DO3FwlL5OMtaIsuRrEalyzUaSkhinQ +OegvROP36xLJ+hQJxn1c5LRjNk6bIu81iVA1H67b7ak +-> ssh-ed25519 J90tbg GG9y1IsGL1xSq8wkBG2xwLGTDLzhGuYF61oCpsPpLg4 +SdokS1Gl7QuEVO0g1JI3xI3P3knA8CLn+E+Yq3nnd6I +-> ssh-ed25519 pMLEJw glaKnXbF/sW4g2FqGk4tiaaE4lam7PnU3A+7aIaOtm8 +iHv144nmeDMBdpZOQ4qgfG3mHRaFPIaXEV26sdSeE30 +--- o0K7IlVBhr62ubMOZJZpZW8oBEzkp3N1lPoZCW/kOgA +rQZy<?iVPɇӪ.j$ =mg~AbBjU1Pu&>FmQ+sLSJ\v9 +w \ No newline at end of file diff --git a/secrets/uwuraid.age b/secrets/uwuraid.age index 6d11948f5f4d0743e7868a5cace412cb6675ca57..032f514bd5fb00d5aea905d8e4a1f23506a75e6d 100644 GIT binary patch literal 584 zcmZ9_J&%)M007`k6LfLAkwFt9R$BVDz@RxkTPT!|9<VMj8dk3{Kn7i!`h) zVKIRTSw|g6mPmqF32SwsYlECk+HMPaI%yUYqCF%4LsVj)>d$yt6nonOfU}#*Hc=4c zxdjEnV1t7V@0hk~FhUnXz&O5~wyO{{^$y)MYooMk2BXO&sYx`eJ3Ls0>^uk*XYN;2 zYv>K*c`Caevdc`EdWW;KTdr%8y2fo%r^Km7iK~Lir+lA+>^d85i(KOnnVQioQwp!C zc&k{!NSEpI&ZOOygaWZfig=K(ZPwy7GfY|z%PHK@uDOw@NLZuMz!S;m(NLcD<{Nd( zv4+uGbAl-PG_^RY!X%K=4bbRP@&yHZYyUjgd}dyK_x1IK-Ob(8H<$kWc=+Wc$iKhX z|9s`!ugib$pC?YAKjEAmbMMom2iH#JS9>o5I&003aoU5t#03Ojh|NrV`dq;Hxx2(qSYnkLP=CRx6whoxDX&nBknk}irp z3ZC>P{sqBLfQ2nNySj+`YDD z)A;ecbgZN??EvwO4zLAe3&2{+9Olpip*4##8Hj=C4|UX~0h{Neo?;pf3js#lX_aM2 z_=hyZP+ZH^s$5W8mPz9qmIbKwh=!Y3OkIc9cOWLJt10x8c zc~JNm8uaH!AHVmEcof90XvQ&9d+D+&JTDVaBUCUzI5|)@#|~<#_g-87f;TA zdNb30qZjf&``gcr?e!D<U*Ft2d$P{0 LzP#-pkbnLIaD9>!