chore: add hercules keys (#79) · tghanken.tngl.sh/nixos-config@a618eb8

+4

justfile

··· 1 + [working-directory: 'nix/modules/secrets/secret_files'] 2 + rekey: 3 + @echo "Rekeying secrets..." 4 + @agenix -r

+23 -3

nix/modules/secrets/keys.nix

··· 2 2 # Add user keys from ~/.ssh for desktop machines 3 3 inwin-tower-tghanken = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICh921bOnrGEySjw/eRrUAj1UbV2sf1YIcm5X74r6gTh"; 4 4 nixos-thinkpad-tghanken = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOHrxGPx3dgap4sUwWyHbQsMJiv9tSNG05BEMNkNLDZF"; 5 + hercules-tghanken = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJreyi2q5YRIEGh9egQGZwRri4lWJ8VGo4rk0zdEM9iS"; 5 6 pegasus-tghanken = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEfBG0uOaa7KtZIGl20khDyj1VrUuAzoJUEN7nfkscBa"; 6 - tghanken = [inwin-tower-tghanken nixos-thinkpad-tghanken pegasus-tghanken]; 7 + 8 + tghanken = [ 9 + inwin-tower-tghanken 10 + nixos-thinkpad-tghanken 11 + hercules-tghanken 12 + pegasus-tghanken 13 + ]; 7 14 15 + # Array of all users 8 16 users = tghanken; 9 17 10 18 # Add machine keys from /etc/ssh 19 + # Clients 11 20 inwin-tower = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII/iE8w8saXDau1F/BQ5IktJPQO3MhRT1+1e5UsQt/n0"; 12 21 nixos-thinkpad = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEiccufbIo8bYbn5n7PpR1IAFmup53P6nn8IyYfkJfd0"; 22 + hercules = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDBYUEGFFy31pryUktRRi6/VGzzDdPpyMicYH7UOkkTA"; 13 23 pegasus = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINfLX3asu3yZIEMlHtEb9byRapy65kGItWsipfyRHToO"; 14 - brontes = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIALYW2t7dYik9EY2nAyA6Imj0r0RX25Cmah8rNbdMdKQ"; 15 24 16 - machines = [ 25 + clients = [ 17 26 inwin-tower 18 27 nixos-thinkpad 28 + hercules 19 29 pegasus 30 + ]; 31 + 32 + # Servers 33 + brontes = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIALYW2t7dYik9EY2nAyA6Imj0r0RX25Cmah8rNbdMdKQ"; 34 + 35 + servers = [ 20 36 brontes 21 37 ]; 22 38 39 + # Array of all machines 40 + machines = clients ++ servers; 41 + 42 + # Array of all keys 23 43 all = users ++ machines; 24 44 }

+20 -16

nix/modules/secrets/secret_files/encrypted/github_pat.age

··· 1 1 age-encryption.org/v1 2 - -> ssh-ed25519 zFIqbQ 2dmkokrHjCFrkwMLZMTRy0iPvZpBhr5sJeDVV+2RA3Y 3 - QxTN8JqR4CRtcW0iJVavf25Eyd8jeKZ/zTvaqJple9o 4 - -> ssh-ed25519 D+NVRg QIjP1KtKYIxjx/Mt5i8hhngCAfRF9y8Y1B5ywg5/Hls 5 - kv1YxSgkMcs/2h7M6QEprDcTYrIvqtAOGPOYxgG+1eo 6 - -> ssh-ed25519 YDKZOA T9dnVbOJZh420HG1mCs2Yyki4zITw3Scnkn/0xg9RD0 7 - bwMjR3Cj57jTxWh68OtveUTVrv3qW5+OB0NpJiusVoY 8 - -> ssh-ed25519 XDzCSw aaA5kobp7uH8/MwHkxmGoks6s3ImpAiAAXMdedpNw0o 9 - wbGdH0JhFmZCpdkFmEDo6Zw4haml4z93hCwf5PeTU3o 10 - -> ssh-ed25519 MfoPEA MVfxkJxPyVesuCjAqIbza5fK+F1hS9Icgnq/1aTag1E 11 - ojpgQ18RdM5l4NeQjtGfbvNXz7++mj/cqeZgqwms/EE 12 - -> ssh-ed25519 8UaNUg VZFFL3xorsc1evkDVECIEQ3AfY9TlKXPGdpN8TFHhmc 13 - jqCU9HVh8Z4ITm9zJHepmv8zZfF+tBv3Iv2OjQVXlXo 14 - -> ssh-ed25519 purA5g SUMJvKC8YSRWTygVG0n6XGq0jUmtON31mJoVaf2xF2w 15 - IkT39Sg9QgfZIFmJSSs30OV2L04jRxLIG1hN46v97KE 16 - --- YRRv/IBExGX2kKm3vXsk7whOxtNnXQfqdDzJdCcMhyk 17 - �|i% P�)�~��Ŝ�(��_m��f6�X��*��a�&��^��_hi7�gj�lE��G��1�NOWV��0��!19�K�)��a0`I�k� ��i��B�0�O�=,V��E�� 2 + -> ssh-ed25519 zFIqbQ s9Mgu/WYYOcNNqeyAmMfuxXIV2Ws9Is0mGF7gwGsn28 3 + v2Rnr9NxVzbCsU67aLSkaLUmSXxXW8SS1eYo83Ijg+Q 4 + -> ssh-ed25519 D+NVRg hI21tFI5fRgej+MpwZ6f0UIrQ94e87EkcR2blLuFnWk 5 + snV/q8xh5rwRFlS1QbxEfDq+UCXElc0qlViQI52MZLo 6 + -> ssh-ed25519 BEMHQg ij+/Nr8U5aIQQHNx17DpJLKaiUVIf4X+EXk1W8XcrWA 7 + WEojVSWlBHxMchqp11AKwiUVr6ksHAJSs1xLE3wsKq8 8 + -> ssh-ed25519 YDKZOA YL8NWC0Gr5ogpsaou5hfPWxJkDk/xkL0wB8bqDTZsGY 9 + z05P07munYH+eguHHIn8KOYxNWLzDMAqVvdY9U2+gBU 10 + -> ssh-ed25519 XDzCSw RfhhXhhq+9hXW0iZziYyVhsQfm1U+ySQQFTpby+sMH8 11 + C0AQkxB1gYcbuT0Bbuet03Ciabhnbx3Z7TxHMXIbQI4 12 + -> ssh-ed25519 MfoPEA 7zRtQHGqsVUkd24RLgKZStK6feOh4HMkd5Aoob4IsH4 13 + NkhZ+k4tO/UbtqkrHRxu0gnm6HdFGCmXzDdteIOlTzs 14 + -> ssh-ed25519 hbhB2A hH0szOavcLETp9vy1CWxN9xmpYjtCZxChrVbVfEz/R4 15 + srkpVvlV17oOBwiWg9KuQxeI2nOdphR9eC3dPb4gT28 16 + -> ssh-ed25519 8UaNUg 96gaziu+M8PFHbo7OrTmw7LQpY674BUb1wGqFT/3fho 17 + 2NUwo4kp4elauz67zpJQ7yxPtn/Q4IS1G+89b491cJs 18 + -> ssh-ed25519 purA5g zdtWXli67pqK1doDkqd/8ngi1DAk9wBGaK0PyYfL0mc 19 + 4nXNZZifFEzb8bXRwlv5LjZvVjcCzQqa94NKoWvP+uw 20 + --- yt16BVFkNA3ltBPaQ5H5wDkNUlenyk24SPul+d8CDsc 21 + p^�O��L��:v��D��Ƙ)e�d�X��oG\�}�-v��Zn��ٰ��ܵ��v��Q�)F�ѓ2�B$~�%��m�m�9��.RM�tv]�H��X׋C4iF`�?�!��

+20 -16

nix/modules/secrets/secret_files/encrypted/nix_store_signing_key.age

··· 1 1 age-encryption.org/v1 2 - -> ssh-ed25519 zFIqbQ 3G/7Y/MdtTxS1Hg3Iswri3JPetJmFR6SyMBu5J9jDFM 3 - Q6/bleJrQzaPNEnDWdli95WXFqBzk5JniHGWdlbNeK4 4 - -> ssh-ed25519 D+NVRg Tj7zLyTqkm4VOmiUlhegrtzUpoU7uzqudzRLNmLRN3o 5 - Lt7LRM9LRBl9D2mFH7Y2ZCdYfYLASRyHxqB5InuNTeI 6 - -> ssh-ed25519 YDKZOA qdc17q423csYE/keg8LrcaQ8pj9MSxTvJGzik8p7RXE 7 - QS889xt1gaur0vqqm1oYDvtn4vWm1TLezjB2Wx+kL2k 8 - -> ssh-ed25519 XDzCSw 5VZesGcEnYyhi+t9RtwQNJhzq6X5oWSEpvpCHjhJoi0 9 - t+oaQEusv16qT+fiSCfZGRe8tva47k0hC9M3VEvJNk8 10 - -> ssh-ed25519 MfoPEA 8Ch8GHn73pRbUch5ynUrHVZ4AD/Po0ky3g4OrTMzFCI 11 - PTb9MnxhZhoQR3pqzILqntSDrodSf2awbgk8yiR8UUM 12 - -> ssh-ed25519 8UaNUg 87AFT1vXVXafPK8As4mIB/X6Unz5CN5tD7X+PMYYAEs 13 - bu4BKbFVgGo6MD3TYu2oibMQlZmR8j6gSs1YLvKtk1A 14 - -> ssh-ed25519 purA5g O0xb21mf2REFOxFpLdxwIL1Lxq9O/JyWFYvj8RKOw3Y 15 - OiL+w/bmvkf/KCZDwoh8+1yCTKlIG/de5cPkcROigUw 16 - --- 0W1GXD2f6bkegL+C6l0R6eLzVqSlabIn/gUgZS7fn8U 17 - �goSΎń��W��DP��0��?�{��d3��{EI��F:: o�hYc�r>0��d-�S�zsU�-v��Y�5_0d��hY�g��K�o��YG�k(�ݥ��mku��Y;�[]W�H 2 + -> ssh-ed25519 zFIqbQ f9tPTD1awvuy8iaCwwz+qiJUGlhL4yr79lb5gOHurRU 3 + 8nNXS8ib1cOY/RsZM4qmqPXOzv2SPJJ1e6klssIFLjw 4 + -> ssh-ed25519 D+NVRg /J7c9sT3iPRIrrUwBjybuICURl/z/42+/IDze+Xb/Aw 5 + slG209DmDO1whb7n6swn4nqvonTYj/wh3ovLyfVnqKo 6 + -> ssh-ed25519 BEMHQg KnEqt7pqXPHAxz6mRby670E5E4NltNmVtdxj2b3K4iE 7 + E9nixRQoo4CpowRicDBKGZKK2oYrBS0hRg/IBGWLLD8 8 + -> ssh-ed25519 YDKZOA 4Ek70+9Mij3UY/UFfK99m7HDzE+R9xnzCqZAFG0pBns 9 + av/zSMkkCT5r8evZJVoYq4VEXEcaFPPOtRN83jF0OTU 10 + -> ssh-ed25519 XDzCSw x7JB47NKPv4QnaACCtg/iV8IRu0m7p+1hFg+QULbHGI 11 + KpImALTccl/zZAc/nKJrvAKKnuno8bDxK+VM00uNSFM 12 + -> ssh-ed25519 MfoPEA YDzvvmyet0bbOaXIjRSnZ20tPZgcYIeCh4jd0/Wr+z8 13 + ZQgkI3bL7Mjx69OTUK//2FcfmH2e7wpF1YTKe+f1p7g 14 + -> ssh-ed25519 hbhB2A ccwk/HFYXs/g7vu8n2Zxyw1fiFKs0b6qzaSCuzt2xkY 15 + jAEjbbUpUs+gYVx5/LvlDAANgB7bTIRnP+OrnYyWi3s 16 + -> ssh-ed25519 8UaNUg m0UwRx2wmdL+WkzXalihxJa8cU+s0uBC5skO3PtYAFs 17 + yjnHCCwHfbCcCfwWqxR5ozObrB75NVplbGpHfybCjAw 18 + -> ssh-ed25519 purA5g rssNzhKw/67TmK/4GkR4IJ27IRM0vrZSGo9qFNODiTE 19 + AgEIGcKXLzv+5CgvlCVVRG0QgC48LBWXDowXFJ3sp6g 20 + --- vbocXO3xMuWjk/2YyswTWHHhsiLU5zzWtrDfRI5qrkY 21 + i�qq�{x f]��c%$�ϧ��4d�؏nev;W{mv�h~�`�ؐ��D d�| t@��X�ɳ�>P��N�h7LD&��S=B}��9��Z;�|�{*]<l#C?� K�� v��6�|

nix/modules/secrets/secret_files/encrypted/tailscale_key.age

This is a binary file and will not be displayed.

Configure Feed

Configure Feed