@jaspermayone.com's dotfiles
Add alastor host key for agenix secrets
+25
-23
secrets/bore-token.age
secrets/bore-token.age
This is a binary file and will not be displayed.
+6
-6
secrets/cloudflare-credentials.age
+6
-6
secrets/cloudflare-credentials.age
···
1
1
age-encryption.org/v1
2
-
-> ssh-ed25519 1uIO/w wYO2WXQotsJxQoIU/m3ehHoPrzRlAjzgzFhJztxZkxY
3
-
g4EXvMpf+ty3ZY3kY9ao4RJZ2AFdLClQah8dh45HevY
4
-
--- cqsVo5ZEz6TRyA6bsCxg2DmxdT/9grdZA5OEiPV9KT4
5
-
���}��p��Y
6
-
F
7
-
�3[���S}�o�����qb�����
���^>UN
��s4(m�>A���Ld���������c:G��d���_��]�
2
+
-> ssh-ed25519 1uIO/w LAd+clCwXDS8lo1SYlzstFE12zgKaZuuqd2GzYMLWho
3
+
dvXSECdcgzNwt4uXGxu5zBkFgK+C4vQwz31rhvEhRkg
4
+
-> X25519 u4qCTB5JAOWIed2hJ76ok/aPi+6mEZd7J9RCwuYwRUQ
5
+
mzQBP3msrUIm+XvtLkZoIOgZel6YwzXIh1xFTB5G2tQ
6
+
--- lVXlK1mrrfDjKG5XhF5JiM7MTIHXgk+qYH1DhALR4Ac
7
+
��JDA��arR���� <�$�d-�R�u�9)�1K�Z-���un����:���bߍ�yGN� ���Ge�Ѳ���}a¯���d$� �N��DK�
secrets/frps-token.age
secrets/frps-token.age
This is a binary file and will not be displayed.
+8
-5
secrets/github-token.age
+8
-5
secrets/github-token.age
···
1
1
age-encryption.org/v1
2
-
-> ssh-ed25519 1uIO/w 6LYIliLMisjIdNQ8ERrgu+BSNrDC8jdiEhxB9j5BtQ4
3
-
8BI5lL2z/Z7+x2OnrzMSO1aK7V8SkRMrwGvA62MGChc
4
-
--- l1QoB+v+xS3l8iVVnIvenj+VBQ644FIG4eKcaVQA83w
5
-
��EK���
�<��I�:���
�u�?�?���U8�pI����h��
6
-
�Xz�8�[��&�+��6�"�1ZU���2.^��B�L�'�!�V��|��b��7;�{�BN����E����.�s�����3���A��nVÛ
2
+
-> ssh-ed25519 1uIO/w 2ynd9lYnvghWnQAw37kqwNNR8E7g74hMAUSUZDkctH4
3
+
lrC4W0HHHj4VwDjsrWtjt6iiATnfpJcOcLILc4ZZVc0
4
+
-> X25519 qcQm7Akuo+srBq7BclXGfCToVS1XitOwOTln2tVBxzc
5
+
9dw4SifdmAcLMv0MzY7wLnuKeMEqsVXwuo82J2aeL+M
6
+
--- X36wC4snPbMQ5Ijtf+6LztQ+pe6qzwxzRAL2rbB0+48
7
+
��Fe�K4��N�j�%�*�AJ���p���VD��n"�RN��
8
+
@�
9
+
�[�2���\�h����AL&�j�
����/ 6���NYj!0��.����e�? ���N 嵋�F�vb�77 %s�
�ȏCx�E{��j�|���
secrets/knot-secret.age
secrets/knot-secret.age
This is a binary file and will not be displayed.
+4
-8
secrets/secrets.nix
+4
-8
secrets/secrets.nix
···
7
7
# User SSH public keys (from ~/.ssh/id_ed25519.pub or similar)
8
8
jsp = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHm7lo7umraewipgQu1Pifmoo/V8jYGDHjBTmt+7SOCe jsp@remus";
9
9
10
-
# Host SSH public keys (from /etc/ssh/ssh_host_ed25519_key.pub)
11
-
# These are generated when you first boot NixOS
12
-
# TODO: Replace with actual host keys after provisioning
13
-
# alastor = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAA... root@alastor";
10
+
# Host SSH public keys (converted to age format with ssh-to-age)
11
+
alastor = "age1ltqszzylcmcvdatezqagnpzyps8layutdq7fae8a672ys6feyadqdufecy";
14
12
15
13
# Groups for convenience
16
14
allUsers = [ jsp ];
17
-
allHosts = [ ];
18
-
# allHosts = [ alastor ];
15
+
allHosts = [ alastor ];
19
16
all = allUsers ++ allHosts;
20
17
in
21
18
{
···
25
22
26
23
# Cloudflare API credentials for ACME DNS challenge
27
24
# Format: CF_DNS_API_TOKEN=xxxxx
28
-
"cloudflare-credentials.age".publicKeys = [ jsp ];
29
-
# "cloudflare-credentials.age".publicKeys = [ jsp alastor ];
25
+
"cloudflare-credentials.age".publicKeys = [ jsp alastor ];
30
26
31
27
# Bore client token (same as frps-token, but separate file for clarity)
32
28
# Used on client machines (remus, etc)
+7
-4
secrets/wifi-passwords.age
+7
-4
secrets/wifi-passwords.age
···
1
1
age-encryption.org/v1
2
-
-> ssh-ed25519 1uIO/w iNRheD7WP6grtbcBW1/3/Eq/j75DgLllVNnEmDKkLBo
3
-
l0A8n93RdcG5siaKY5pfihPV1/TGagPHESl1x1Huupg
4
-
--- pJj9mo96JTyMOxBGwnafImnm8Ae082UUBVU1Pat042U
5
-
�2��*u�p;�*
��k��-��������kr�t�< [q��-OB�Ӭ�#y��=�v`�����A�@a�I�
Q����k;!c��
2
+
-> ssh-ed25519 1uIO/w Jl8j+7DpevVpjn5GH6+CeMxgDpML2/vC3ds5+O9t6gM
3
+
u5BibaBSbOyuYlKvvnsq0fyKREXBcrgPTOVrzVcbFHQ
4
+
-> X25519 V0XU32SEA/I3u59SjkXn5fBWStrpY3NPFN5coUWwBVo
5
+
m1T1uzw6l+8YoasPcPABIjmTbzyHfuiCswutrtZOesk
6
+
--- 6t3gbW5zDp1GjCbOTtJvhri9qj11Be7tvJNfNmJPXSM
7
+
����ǘ���Nv8�;�Il�q�� ���N�m;�V�-(�k�g��[�l�
8
+
iJ?pMU6##��1��^Z �Q�1 �hfq� �