diff --git a/data.nix b/data.nix index 5afc873..c39b39f 100644 --- a/data.nix +++ b/data.nix @@ -10,6 +10,11 @@ root-password.file = ./secrets/machines/bicboye/root-password.age; }; }; + monitoring = { + grafana = { + password.file = ./secrets/monitoring/grafana/password.age; + }; + }; services = { gitea = { password.file = ./secrets/services/gitea/password.age; @@ -20,6 +25,9 @@ paperless = { password.file = ./secrets/services/paperless/password.age; }; + unifi-unpoller = { + password.file = ./secrets/services/unifi-unpoller/password.age; + }; vaultwarden = { password.file = ./secrets/services/vaultwarden/password.age; }; diff --git a/secrets/machines/bicboye/password.age b/secrets/machines/bicboye/password.age index c7ab03f..b7529b0 100644 --- a/secrets/machines/bicboye/password.age +++ b/secrets/machines/bicboye/password.age @@ -1,7 +1,10 @@ age-encryption.org/v1 --> ssh-ed25519 XInHQA KqFc6Ej8L8yNVX3EoEqlJZlpdmsBTAn3GDPlH0CsmWc -6cEtER5dcQNzWfPUGeN0tMyPEwOUMkSTiqnCQrsNhp8 --> ssh-ed25519 9JjquQ sFTTVGk5VDcfw/K4yKbwGX73O2LFXp5eHWkzHhAeDVY -usZ/giJLoWxXJ0pA8HZZSHMybxuxf8HxjDkeD5Kpuz4 ---- CjABvoWY5QYTJ2OmUnqxOxyehm3r/YQmYyx00auShxY -t0]ifE!i+ԬA(ңTڔR,M9׺?s~=Ox}7!{"'FC$@ƞo%JݮbxEW:x<3(U \ No newline at end of file +-> ssh-ed25519 XInHQA /NRM0XjHa8w8lmRHi+aTpCuViwJGcUxAVAez0PSGdwQ +UiW+Vnk2Z1/8apx8JTTXNw0+Mw+txBvwzh3xgQyslig +-> ssh-ed25519 9JjquQ Cd54qelvmj8O4x4eIi0UtWxGhqvlfCIHBqBxtd99h2E +IdYDmPrOPzAimL/M2foYOFsEMcLXTMUolPOy+0gZxNg +-> ssh-ed25519 8S096g x1o/dQKQIywGlX/vJ2eQqCuWPb2BQNZsEIO4RkkNRxA +oijplPOdsYYreti3I7bX1KwdHQrWft63bAJBlUGcSzg +--- H78isjmjr1DgBAaq0cuzpxQHEwrdVf7rgbgGSX/K/pQ +Ȯ8D>X< X9 ?Ǥ{>L̫k}݉_%S\|-"䩘#;J2i(R3(=Fz.^ +IMLuΠ ' \ No newline at end of file diff --git a/secrets/machines/bicboye/root-password.age b/secrets/machines/bicboye/root-password.age index 6f7e710..a3846b7 100644 Binary files a/secrets/machines/bicboye/root-password.age and b/secrets/machines/bicboye/root-password.age differ diff --git a/secrets/machines/thonkpad/password.age b/secrets/machines/thonkpad/password.age index f84b040..00f234c 100644 Binary files a/secrets/machines/thonkpad/password.age and b/secrets/machines/thonkpad/password.age differ diff --git a/secrets/machines/thonkpad/root-password.age b/secrets/machines/thonkpad/root-password.age index 4fb1e5f..46fde39 100644 Binary files a/secrets/machines/thonkpad/root-password.age and b/secrets/machines/thonkpad/root-password.age differ diff --git a/secrets/monitoring/grafana/password.age b/secrets/monitoring/grafana/password.age new file mode 100644 index 0000000..7d43ad5 --- /dev/null +++ b/secrets/monitoring/grafana/password.age @@ -0,0 +1,7 @@ +age-encryption.org/v1 +-> ssh-ed25519 XInHQA k39Tpe44MbIY/fa8Sf3f9JXjTlQN849nKWI3G+c4plA +Y05ZLbNPJePRU1mLV87KuhQceWZC3LcpM/qX5mOMHg8 +-> ssh-ed25519 9JjquQ Si+4zoaU6TMP0cymWGQdc54fDhLisYGIi1EXZ9+vbmY +cMRoa1Owu1zwhnT6HPwGKk6y3vtHBi8rCnyJfbrAPZY +--- Y27ZK2+ekW1WKGZqTV6Q3mrNNzVWXA7v8JPOylZWYdE +> Q0lZyjI|TV KP[FI*~LܯK|b !|,eG \ No newline at end of file diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 3e3a78a..4a4d7c4 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -13,7 +13,9 @@ let ]; smolboye = ["ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICQFm91hLes24sYbq96zD52mDrrr1l2F2xstcfAEg+qI"]; - bicboye = ["ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBsciEMPwLAYtbHNkdedjhSrb66fFQ46lgnVGssCuiLH"]; + bicboye = [ + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBsciEMPwLAYtbHNkdedjhSrb66fFQ46lgnVGssCuiLH" + ]; servers = bicboye ++ smolboye; users = thunderbottom ++ codingcoffee; @@ -22,6 +24,7 @@ in { "machines/thonkpad/root-password.age".publicKeys = thunderbottom ++ thonkpad; "machines/bicboye/password.age".publicKeys = thunderbottom ++ bicboye; "machines/bicboye/root-password.age".publicKeys = thunderbottom ++ bicboye; + "monitoring/grafana/password.age".publicKeys = thunderbottom ++ bicboye; "services/backup/environment.age".publicKeys = thunderbottom ++ bicboye; "services/backup/password.age".publicKeys = thunderbottom ++ bicboye; "services/gitea/password.age".publicKeys = thunderbottom ++ bicboye; @@ -29,5 +32,6 @@ in { "services/maddy/user-watashi.age".publicKeys = thunderbottom ++ servers; "services/miniflux/password.age".publicKeys = thunderbottom ++ bicboye; "services/paperless/password.age".publicKeys = users ++ bicboye; + "services/unifi-unpoller/password.age".publicKeys = users ++ bicboye; "services/vaultwarden/password.age".publicKeys = users ++ bicboye; } diff --git a/secrets/services/backup/environment.age b/secrets/services/backup/environment.age index 53354cf..4393e54 100644 Binary files a/secrets/services/backup/environment.age and b/secrets/services/backup/environment.age differ diff --git a/secrets/services/backup/password.age b/secrets/services/backup/password.age index 0b22c40..8afb649 100644 --- a/secrets/services/backup/password.age +++ b/secrets/services/backup/password.age @@ -1,7 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 XInHQA cu04OlowGfn91ape/TGXYToi4kFU9JIS4iY09qlMPmo -Yv2vSFELyNl93DaNQc+E3b9MuwGr0k79TISXF2fUxTY --> ssh-ed25519 9JjquQ FJ0QtlUi+VKZ7S6BtqCj21x5Q2QG/8s2bay4j+JFFlQ -K1ijqw6pz7F0CZedLxNdXWuPrKMm/y4cnVaVlMuQ4CM ---- WJz/j8eixXYAzN4VxyHrdMaXCSFsVzlVAhXU8cgq6cU -[ Uu fL8̶ǭQRrV4'_&Żzϐ,Q6g䃡Nقq \ No newline at end of file +-> ssh-ed25519 XInHQA aJsT3kOeJa2ZPVkY8qcu74Ch+KHOxdN/8FLRu5hcrw0 +PehT0Fp2CVTIO77v8jhGcIcUYS33d5NvmVQeNt3TtjY +-> ssh-ed25519 9JjquQ Kuvah0sJwGwGGDFAUTjqmkapUGUW9QPCvZ206cFgukU +yan/IUu6MrhctKCgrAtbMwdsp+hX9FjHIAeG/gkokHw +-> ssh-ed25519 8S096g CLror+G56H5TOuOqjBOLL1GvOyPU8jzYXTlXEjoM6xY +LmqGHmsW5M2TTa4+BuWJk7qNP4YtT6/bHZBXwKKx6VU +--- q3W/w3KhMsEENOa+L0F7Do3H1gQtrlD8F53RrAYtsWQ +m`%˼ezW` ZA.ʴ|M'%3&lV \ No newline at end of file diff --git a/secrets/services/gitea/password.age b/secrets/services/gitea/password.age index ea57572..54d9847 100644 --- a/secrets/services/gitea/password.age +++ b/secrets/services/gitea/password.age @@ -1,7 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 XInHQA PIaYFOuYTsAufLY3jySjdLfKzfcQ6hAetR8sG9k4KTM -Wg1kb+WgD8MW81bJfwejeTiiEVJCH9WWQ7O7J5zeYj8 --> ssh-ed25519 9JjquQ nN0gqdhhk+tcsXgb2YdlNr9TCM8ZzJ8jgwFQK+o3Cw0 -uklN8haFY8XCUMIlAPqIheganGtCyLSg2w/4LM9dcdM ---- uNsDhT+Z43s4wRMaKiuVS0CIib7Geh+zBtSHIPLdHmY -7V%)},1ýr㊔_ ;ݷͭNbl \ No newline at end of file +-> ssh-ed25519 XInHQA CHnxIyP3ch6zmozgHHGKyrNwCukFOzpQqzqmhBBK3HU +cShHERfT2fay87wUcFMzLo2CqQjo2GlPckbN9ajIzoE +-> ssh-ed25519 9JjquQ JUjEXgduMtZG7k3p8vs4kAp7npo5yenMlaqYeRDvs3I +FTzPyilqsUhBE1tVzePrWEG9AMaBTvYfJpPp9dMahfs +-> ssh-ed25519 8S096g +kQ00HeKJSTEZhH+kDYVAS8JmphGAIX3O4gAcg+uATs +Lswx4AtFXJBrJThwIzeKeUFdOYkNXmAEEuJ8OuNmCVo +--- LmvUVzAHHAEgun76eCLHe+nxgv2Xj5qhPbUgVWirjxU +iءv(<-d'ЫGEzV;ߺ咵Kc3 IX \ No newline at end of file diff --git a/secrets/services/maddy/password.age b/secrets/services/maddy/password.age index 67bd1ba..fa0d0e1 100644 Binary files a/secrets/services/maddy/password.age and b/secrets/services/maddy/password.age differ diff --git a/secrets/services/maddy/user-watashi.age b/secrets/services/maddy/user-watashi.age index b76954a..3000aed 100644 --- a/secrets/services/maddy/user-watashi.age +++ b/secrets/services/maddy/user-watashi.age @@ -1,9 +1,11 @@ age-encryption.org/v1 --> ssh-ed25519 XInHQA OsckddKmgFuwo64IFPysoEWhUWdaNz0fQOpgup0dKQY -o1/BcRP/NND8YHZYuQnclfa1GxlczSdc57nOw9Zm2io --> ssh-ed25519 9JjquQ pLjLs2p363cKXPmz8iYAOJUYSlmK4N9GCXlizaE5fj4 -kIdPVG/i3WdRGYxLefEnCA8cTytHCZEcpqbp5Y8aG2o --> ssh-ed25519 H9OGOA BowCiYKCWxWbiapKpdshcRzdZR1UEscscAAOe/kEig8 -Lexjp0LuPZs5bV8CQ63Scb+xh8lPDM7x17KD9r0/1qU ---- e+NBlts82HBx3gbjznmUKufAYF1w2fzEO+LNx9yvq18 -# ssh-ed25519 XInHQA RfnooKxGudC9db3TeLiHCeBAQmoBMKQYwne1kPwBB3Y +Cy7nE5t4HksIkTGiE5A5eWugtPpLLgKg675a9QAJ1OQ +-> ssh-ed25519 9JjquQ IXrC89snSDyCk0/cHfZxK3I7VBDOkMB7RqLikSzFfhc +gJUgWJT00puABYjKgSlQIScxwIzLzw9G04MeYq5skMw +-> ssh-ed25519 8S096g euxCvoiDEsR3+X5YsbTeDluRA8f5iLFV7KOC1aLwH3U +TDIIZoqkh2DPUVno76U16Y/9HaU5dCL/AqgbqBNF/BU +-> ssh-ed25519 H9OGOA VmODcaMxRDUeD0sbrtFNTAiuI/gI7+zVEQwfhC7gT1s +p95/aXRwH3PdgsiMMxR/pEFlithxc68STelHRxAZoKM +--- WVxsIeOZysNFXyQiihNL527CpfNy6WuSVw7UnrMEmAU + =K+tzf8 coQZ./xSY?<=^Ny`'Z7 \ No newline at end of file diff --git a/secrets/services/miniflux/password.age b/secrets/services/miniflux/password.age index ba52d03..a8484a2 100644 Binary files a/secrets/services/miniflux/password.age and b/secrets/services/miniflux/password.age differ diff --git a/secrets/services/paperless/password.age b/secrets/services/paperless/password.age index 0cad219..10dd880 100644 --- a/secrets/services/paperless/password.age +++ b/secrets/services/paperless/password.age @@ -1,12 +1,13 @@ age-encryption.org/v1 --> ssh-ed25519 XInHQA uCUIywKJrUQhqYI8uhhxNIsXoTcRBbZSRVfUJPCp2wM -2p1OvwRBUMJTXvhp2PdGBCwxKU/rFPBHKZaKJ38HvAo --> ssh-ed25519 K8TEKA d4DDO/774I+lhafaKbrERWsl6NqeqpdkbmZy0FA6Dws -ObQGhn0BmzqE5pSg+vPSVdx3rLng9h3wPfoFx2umVAI --> ssh-ed25519 7+Zv5Q M1P+teBvn1p4zbFNIVvGremZC5hViNswi9q24mCxCEg -zR1sV/5t8nI3jky5Ou9Ud7IYC8E8nkQnvRIW9lG7nbA --> ssh-ed25519 9JjquQ P5F2UqVRXkySbbI4OHM6rChELU0wpx6Stpvz78Ie1yY -uWOhkO0vx0anNHA5EWuLmDmTQvoY/c1iSzlVl2xldC4 ---- BARoI30iwdy5g5hWJoHpVlA6Hlhu4SBpGhxrTPvG8ok -;&_xIXRϣĴ螞ܾ]9'La1Q )@ -WMe%3K \ No newline at end of file +-> ssh-ed25519 XInHQA UWrsDGlrkZ6xmFFSOCrAZbybIvIYQc1QKhgXhdDSoxY +5Je6sUO8h71WJkFpof3XcxnIUEexutrEz5TXT1Bwobg +-> ssh-ed25519 K8TEKA Kxxgpb4qEFVQ+KJpb2wBwKjQc22PwjEEB3Y3ERmm924 +2O4zzOOyH8SeRScBhGFKopMD5eZKtOF63fWs3YjqC5Q +-> ssh-ed25519 7+Zv5Q 3A3v+goiSRXpBhb3hAVJXbHuHdT+L4Xr178ML/pfG2s +Ds1qBZlDl2mnlZvRcI0fEvDQ79KmUFAYICoVrcoA+Oc +-> ssh-ed25519 9JjquQ 0p+mZLwhphoGDdmpOxgQrzIX+Y2w0RvIdNMlSarL90s +8P+l4oPQ3qEtR4KWk7W7wkxGEjroqMA5f70+1eUjdY8 +-> ssh-ed25519 8S096g 5cTN3f5x+9Qizop1nRdjkqe0pa1S3LjR0pbMTccsPWM +gGn24WckcR1iCNJH2oB8gekTTty/a4asssRmDlgEpwU +--- LCrdBMibVYcT7SAS+jw+IBSb8nHdqvCpP0oe4fVc9OQ + QҁxQ,SW$2ȭ3EA-fcdwVi2vϟ >Z \ No newline at end of file diff --git a/secrets/services/unifi-unpoller/password.age b/secrets/services/unifi-unpoller/password.age new file mode 100644 index 0000000..6088aa8 --- /dev/null +++ b/secrets/services/unifi-unpoller/password.age @@ -0,0 +1,12 @@ +age-encryption.org/v1 +-> ssh-ed25519 XInHQA bMzwX3D3LAeB2oFjeCgQy6NtXfde87lGBBhJN7Nrox4 +h6hwikEijHYMUTWhBuSgz+nxnnj00VlSibTZc2JmnBY +-> ssh-ed25519 K8TEKA s2cQpiLdC+1XBH5cIE5Z/IUEpsk564jYrsafVZSMgVQ +d5qPoJhyUToxN639uoR0J9kcfvubItuzXGoVk6Sewao +-> ssh-ed25519 7+Zv5Q pdOyuEw0qr/owYTSBq1Ewmge/0iGrf5PVQe8nSRKRhk +WWnMY5blWR6JOEz8dcOXdFoz9Vfj7J3EmVfVfb0qAmQ +-> ssh-ed25519 9JjquQ V82cwaqtAmVTMeyWvd23c0xOUk38tnmwFMKPeNZbbik +iWuQQSWFGf5ZqTyv78YRk7D96W8UXTnbaMLZ6F0ctj8 +--- PtBBUhavizHrdmvxBF9qcB4rYEcB0A4AWqRl1Wp1Hic +`Xj*3U :7sZ1eA +R# \ No newline at end of file diff --git a/secrets/services/vaultwarden/password.age b/secrets/services/vaultwarden/password.age index 8c3f6f4..62f76e5 100644 Binary files a/secrets/services/vaultwarden/password.age and b/secrets/services/vaultwarden/password.age differ