Compare commits

...

3 commits

Author SHA1 Message Date
d90ad7fbc5 oops 2025-06-21 14:27:19 -04:00
15e28ccf87 rekey 2025-06-21 14:15:01 -04:00
7866d6ff26 add prism launcher 2025-06-21 14:07:58 -04:00
9 changed files with 40 additions and 35 deletions

View file

@ -23,4 +23,7 @@
services.tailscale.useRoutingFeatures = "both"; services.tailscale.useRoutingFeatures = "both";
services.tailscale.authKeyFile = lib.mkIf (config ? age && config.age ? secrets) services.tailscale.authKeyFile = lib.mkIf (config ? age && config.age ? secrets)
config.age.secrets."headscale-authkey".path; config.age.secrets."headscale-authkey".path;
services.tailscale.extraUpFlags = [
"--login-server=https://headscale.nekomimi.pet"
];
} }

View file

@ -95,6 +95,8 @@
./hosts/buer ./hosts/buer
agenix.nixosModules.default agenix.nixosModules.default
{ imports = builtins.attrValues nixosModules; }
]; ];
}; };
}; };

View file

@ -25,8 +25,8 @@
# Hardware-specific # Hardware-specific
../../common/nvidia.nix ../../common/nvidia.nix
# Common secrets (commented out) # Common secrets
# ../../host-secrets.nix ../../host-secrets.nix
]; ];
# ============================================================================= # =============================================================================
@ -154,6 +154,7 @@
# ============================================================================= # =============================================================================
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
inputs.agenix.packages.x86_64-linux.default inputs.agenix.packages.x86_64-linux.default
prismlauncher
]; ];
# ============================================================================= # =============================================================================

21
secrets/build-token.age Executable file → Normal file
View file

@ -1,12 +1,11 @@
age-encryption.org/v1 age-encryption.org/v1
-> ssh-ed25519 i9wBeA SNBmBYKDOcADlQKvTCzGFWJF2mUoHYmnSNl3qXsiEwQ -> ssh-ed25519 i9wBeA iGYNmiExHD0M2Efk3zqlsZsUY9xcVW4ZyK2TKVkMxTE
hzClNOQ/XdN5rIOeYt6cJEE/I0Y7pNqSTX33tOy761Q PVm7Qwd+o/fP8bfSSouikZTV5yHIc1pFrS3EE/oi2wg
-> ssh-ed25519 UbxDgg shMhY2WtElJ61NFyYVzt8SG09YaIndXbo1gqDv7GtT8 -> ssh-ed25519 UbxDgg n7YqLyF7ZqjOzaKDZ0j89gBT/pflBA72m/0NcW+lU3I
v6W0lBm8kuVM6thJsOwJvnwg3R1wq7CcRF9yZnYaltI Jj2aFFRhn8/eNRrXdfAAH6nMAvmtCZyd0/GWfBfoPg0
-> ssh-ed25519 YYzA7Q uK8U+89FYcjthWZNT0exk/pqY/syoQ5Cbq+pDVCcLwQ -> ssh-ed25519 YYzA7Q zrSEpBaQDjjWnCCeqqjYvSoZkZIXEwEk15R+8vNtYxA
iPGTlIGxCLVgqAnYX6ZbAqLLIwtxDTylcAUpV30/y18 AdEkXRqk1ekR/6wqf6gmFPPlTvxsB4WgQxQXMSpPie0
-> ssh-ed25519 UbxDgg smr+A6sEa3ksrATeqOT08RTkIu4sVSzX/hM2piqlFg4 -> ssh-ed25519 3RWqPQ iIMULw0As6DUmo+iTsXdcba4Tml65WESZlDxJfEEBBw
sUGg9jas6vJhD2DoqARAtA9nPB6Kj/0xTCt0+QalhxE WxsBR7YRZGnuZpMnLld3VRrPQq8OP2UfFACrt/lPOp8
--- eaSZzUL7BdIOC4uzDuSWRtoR7PaQfYzW0xjt85HSC3E --- D2QkZuwJA43Zezo4RhE2gW7UO8shM2upHi4tcaPSLUY
m,·?§ÕÇDT×w·>ÄtëlŠ/Ü*†Z85#fÍcyÅ»US¨Î•™è¬.ð‹~¹àa´sQý*Zà f[ã`i{ݘ:ÙÝŠ&Û°,4äå©»Õ òé@´g!´h0E”!ùi¿<<3C> ZÒõøòàgrë3` #GõàÝ[€KÿL CXükÆÜàé/—Ýà,<12>ۺijL ¡Pl@Baüåùé¨Ì‰26%gO!Sü"<22>þÕe q3#þò¥Œô‡êÖ‚ù¡nTV•½Ç)/
ä­t+ÙšÀ½xÜË0Ù<30>ŸbMØÓ<C398>—ßʵßwµÉ<

20
secrets/garage-admin-token.age Executable file → Normal file
View file

@ -1,11 +1,11 @@
age-encryption.org/v1 age-encryption.org/v1
-> ssh-ed25519 i9wBeA 3kSlwZ54PYTcvftI/3XcTpnSDxBmKRKNMy3Xf69Psm8 -> ssh-ed25519 i9wBeA 8PLBgO1NF5MRPY/2WsmqQ31meGxLEq1CTOqo5ngwTFo
QtqP2ebKP2M7hWcvFoT24aBkhj2Kvu1dlBbcGPyBo3k ymt1bCGSEN1jCb5zBc7gvaShzLKwT6Y5/J1/zO8PKWs
-> ssh-ed25519 UbxDgg o/TFehVOAh1Mcw3TJdldANFahiFhj9UvhFoFWyXVmzk -> ssh-ed25519 UbxDgg JPYD8E0EDn2eBL0IltQtrgfTfFM4fqtRCjIqmrBb8is
suQBydY0cRZ3FrrYDizfE8CrF8YjyJXWtzpPMJ5vgqI QWzV5535zfi4wde4qY1TtWKwXEoSbkCRwpLt5R6k84I
-> ssh-ed25519 YYzA7Q nbNcoC5R6CxsZKEvscezknX56mvDnw3VdG2gApHcZVY -> ssh-ed25519 YYzA7Q YEIN85tSaLGmjECEGPVWrVtX3gXGXqy7NZEtnW86fkk
AJHD+nM0OmZMX+aILK4s3x8wHI8K3O6hmb+1T7URTWc wPWnLtotf0JjJ+wPbz19DVYb8iXqXV9F61v54CAqoA4
-> ssh-ed25519 UbxDgg iK4ea0RJLy7UGCHe8B5g6qr7hpSMYvx3dSQ3DW47sS4 -> ssh-ed25519 3RWqPQ P13HdiuAj6ZOqfw41dlZdim/Qz7Pu9sQkeRbAOfKo3M
8dAWBDtDOY3YB0u+aEiIUTMqBQqYxV/HafosHk5Vklo 9eI3OCu9corRl7Wnpa7o2d3JxtBR3ttJG021o8fDUL4
--- wbbBYCiJ+zOdj8bEmKLSd+vU3RMGX5nulXAcKcK4fRI --- keY3p62HlGCBh2Wu9a9ZO6jcmLuk7bX1cJrRg+0BAQU
ÃUß$FÈq<C388>p¹¦h?üƒŸx«yd™Ì5±¡Ï¨èÎ>é„Ï*=/=­Gi(¦,êBw{Ž hÙr³Ôå-'X¯G<>9…5#/ú'Ü!ë UO±«ÝµòPRU]ŽêÒ<0E>†fpšs…ýU³á˜WÂ9qÝLÈýoØyv%¬M0˜K„ØS€Iù[<5B>§Š;(½W("¶3)º½×

BIN
secrets/garage-metrics-token.age Executable file → Normal file

Binary file not shown.

22
secrets/garage-rpc-secret.age Executable file → Normal file
View file

@ -1,12 +1,12 @@
age-encryption.org/v1 age-encryption.org/v1
-> ssh-ed25519 i9wBeA AtZIxAsM2lbP4hpZ5RjMkdVN3Ko4IVciNLsI+2ioh10 -> ssh-ed25519 i9wBeA zKsnT6qzLx1lwXUOqSvz288GQvRuTSC4h1r1/peo4kI
HA5dZPJeO0RJpQVcXSTXl9Bzah55Md+UPldiz9NkzFM i/t/qhyZRcW3werLZMF6IY8YP5t/BcvyfsffDhz+toE
-> ssh-ed25519 UbxDgg IT0sHTltNKJqDnBdJXcBa3D8LO0rWY1ff2yursA0zl4 -> ssh-ed25519 UbxDgg VZuoyPwHuaysdcvJlx6ILndEjQ0hKQN4kaJGzwutzEU
jKE3Y2zOL92q82mcmdwZ1zi9AyaGLF1i9kl1+gegb7o zhGpGQYN6WiyJ9IXH/Kldfm1iTVcZYPvaUdxTyPfFbA
-> ssh-ed25519 YYzA7Q DNlwj0lNOmQukfavVMyUxAJtNTpqKUobCu7stzrU/lg -> ssh-ed25519 YYzA7Q Qlj5Oas+FqgbCBJjjBjcD/rlndFmU3XaB7IPzeS47DM
Qxu4ITmiPfhDUnMdfBQPVEJi8AkZ3wCpKsfMlkWKoNs rLs09r8RRq/SJd9oLJsDGibAZsKXo1SJ/qvi4Z4Vhhg
-> ssh-ed25519 UbxDgg bSJTVJtj9b4hb8/MFyWry79pez8xa2+lXgufBHinwz4 -> ssh-ed25519 3RWqPQ NfcoP0kzkhHXvjbtmsWhrTu6jJ4Cby2C35JqE17qxzk
lFnBfg1BZ9Kzb6wcYqbR0km9jRvSuK/fyhV5H508s24 wbWmgoZrN2hbblKEbEJ07IMI+ZZeVsOJLcEALYQ6tOo
--- RhUMM66NH9bAUKHjMiJdQXV96SBap8hKKGayMaZ578c --- nZymvWQjoVNZRlBMvYxiQt/IvT8LuNZFR4hQF6pJR04
pïƒ<C3AF>ÎÒU}Á@¹=5«Á´¬·ƒÎ¦=îÈÈ ]¼ï~4FÉOÞªªËÕÎ`Çds<64>»O
T‰-Òï *¡÷MóÂÔìɳŸ¡5Ñ<C391>­Ì"æ`1[˜Û_rtž¬jU]ˆ&gŠŸÕ ¼PÕqšà¸C8ñÔ ×>hæé¥5»ƒ­ø?–€ÿ3œ!ü=s#<23>f R5<16>scxãï݈Jš]ä­û…ê;f$XùnGè³òµŠì³´Ð

BIN
secrets/headscale-authkey.age Executable file → Normal file

Binary file not shown.

View file

@ -4,7 +4,7 @@ let
valefar = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJlXq2lSfiWwRwIxsxhffW5FDGmjt0QKYN+BaikmRR71"; valefar = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJlXq2lSfiWwRwIxsxhffW5FDGmjt0QKYN+BaikmRR71";
buer = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMVhjwDcO8eleSoR8a37ZGGPvkHEgV+c8SYcy07SayPB"; buer = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMVhjwDcO8eleSoR8a37ZGGPvkHEgV+c8SYcy07SayPB";
focalor = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJlXq2lSfiWwRwIxsxhffW5FDGmjt0QKYN+BaikmRR71"; focalor = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA518oTmTp5VG60/dBrLu7rlV1hh8muhMattoiGfmrei";
systems = [ valefar buer focalor]; systems = [ valefar buer focalor];
in in
{ {