nixos/kelder: Move nginx to separate container

2023-05-27 23:45:53 +01:00
parent 44c5a9ded9
commit a6db08acda
39 changed files with 607 additions and 491 deletions
--- a/secrets/estuary/kelder-wg.key.age
+++ b/secrets/estuary/kelder-wg.key.age
@@ -1,13 +1,12 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IG44Q3BVdyBwZlJu
-VmRCbjFacGJpT2ZQa2o2QVpERzZyei9kaitrZzdQVVZBNzMyNWhjCjZOSVBTdE5Q
-SU5HcXJOSld4ajVqYU9tbzk0NEZObFpwV1UyaE9yVmxBd1UKLT4gWDI1NTE5IGxw
-WithdTl6Syt2L2dnL0VGMkZGcWtnL1ZxTjFSakEzT0ZhSVVmY3JqRU0KQ1VhUG5L
-UGk4TUltdUxHcVZrcFhESXZpcmNDdXZ6ajNHZkhLZ0E4SGpvYwotPiBORl8tZ3Jl
-YXNlIERGJyI0M10gJSBVIHNyJAp2L2hRckp4L1BDME1ndGNUQVJKaW85RlU0NVRE
-akY3R2FqczJVOGkvRWpUREUveWU3S3gwRjFaSWhzZzBZOE0xClo1VktyQ2U5ZXNN
-UjU4TGVuN0F0OGE5M3l6VEZlbW1FRE52QjdvQ29rWHpNMi8xelNsejBIQQotLS0g
-Y1dWOTBLMGRiSXN6bVhFUDF1TTZlMU1aNkdXWUtOUERLckthQzNXS2I2RQrsOo53
-dYrlIBj9ZuKx+YcO+RiGGFCOhTR4F7kn0G0tVEaZiFhw8HHzqkecXrvnnY6fs05V
-olOXbMcBljcBGfkGt4iXBoMzDZP4p9MdxQ==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 -----END AGE ENCRYPTED FILE-----
--- a/secrets/estuary/netdata/powerdns.conf.age
+++ b/secrets/estuary/netdata/powerdns.conf.age
@@ -1,14 +1,13 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IG44Q3BVdyBLamJv
-ZmFCaGFqV1RWNG1vNEFMYmFjSlhzSDlaTUEzS2V1SWlHSWFXS0hnCllDVEI5MmhY
-KytwOGt5YkZsZzBtblkreHhva3UrakJkak1ZYkwyUmowcjgKLT4gWDI1NTE5IHlD
-QmNZNHVYYlVBN3ZPSnlGS2YwbytmYVM3WHJsellTMGY4cmhvWk9CVHcKRXhTcVpD
-T1JRWTJwWjVYTFlGSHA4T0YvVGM3YVRJYzFYazEvdXpueEw5VQotPiBzIXdTYXlv
-My1ncmVhc2UgaApib1M0akhKc3ZHTE1YZ3NXWDdJNldzZnBjaU96dGF3VWo4TzdG
-QVhaVDJmbklWYnFtMmV2S3VvdlBxRXZoU1BQCkIyNEt4SDZFcnZiVlRlbyswSGk1
-QVRhYWY3aFJxRGVjLzN2b24yc1BpNGpURHgzUFh0ZjAKLS0tIHZqVmVyU2JmamtX
-MXVZdlhSMUJxQTBsMS9BK0YzcUVhYldodE5mQndXa2sKAV7NioEHpHqQKRYYrUkP
-aC3wV5rgp/UeYMOmoILlclYdpII4oqUBZr2YyvcjLB9hOGJy8aU4TZqz96zz/uER
-Q347jmCxjldtkDyzNagvuwTVitdbqPtx6cjaEqLLkUxXORMAtERd+NTeHdTC829+
-zVba4c8re0GvTq/Q79QDLohrumJiFzBWJgH8SwLwKjOCJJ8P6A==
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IG44Q3BVdyBYc04x
+SC9kR1Y3anNQUGZSclBSMVIrMDFqZDFlZVhNWWVSb0JZc1FqYjM0Cm5nUWJzWllO
+NE16amkvWFZ6Wms3ZzdLTjdpRUZOdndyeXNqMWZOSlJtZkkKLT4gWDI1NTE5IFV0
+bVN0U3kxZENOU1RuaHVseUI0cGhtRXQyWHgrM0ZYNmpvLytucUUva1EKNS9QbU1l
+NFovRXFnTnF1RnRkK3V6KzhBeDZMQ3ZPdGpva29zM0ZzcXdVNAotPiBZXzBzSF8t
+Z3JlYXNlIGRKKTpgWyZXCitVTUg1VnRKU0dhUmZBY0F4VnNqNlprRE1YNWRveWw0
+NTRDZUNNbm9MdGhlclMwcTZaS1BOMDgzRlp1N1k4eFgKVkcwRAotLS0gMS9tcDJL
+c0JKSjdIQ1Jpelk0U1lCOHhBTjg1bGxuc3lsV3FzRkl2NnRnWQqapBTPnK0EVrvY
+ycL8K7wHa/Wx6icU46t/F9rlwAdSTc+hrptogpPbEb0HxC9jjVacJOiMQI8cW7Qd
+NpBXk3wdNtroDHbl3ZD4APcXohOf6fKVnuA4l5C3o2q9tA1grmcQAMwu+GjX+QAN
+S3jIH3AUjjzIQLccetH+SZDIy0p9F1m/5mxTF2hEUBBH1MxHWMZWJ9kg
 -----END AGE ENCRYPTED FILE-----
--- a/secrets/estuary/netdata/powerdns_recursor.conf.age
+++ b/secrets/estuary/netdata/powerdns_recursor.conf.age
@@ -1,13 +1,13 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IG44Q3BVdyBhVnp1
-RXJPVFhYWkQ0KzhvM0VNWTh5VVVPci9nUlNVNFNoaTdRRTg4enhZCkpuK29pSG9D
-ekNEQVFwSFZKSDdGUXBKbjNPUlRjaXNTQjZDZlJPYlQyY1EKLT4gWDI1NTE5IDRL
-cTkxTERvanZKcGpPOEt4UlN0Nml6VEtSd0RjWXRlM09vcXAvU213eFkKSktTQzJj
-ZFM4ZzQ2ZFEwUVg2N29NVjQ5OFR0UWZtZWdWZG9oNkx5SnQ4YwotPiBoLWdyZWFz
-ZSAhSG0zNWMzIFxIM2ogKGYKSStlMzVBdlQrNVlwMkhoczRTVCtOdHF0UTdna1Nr
-dTNTQU1JaGcKLS0tIGprUi9ERGpSd3YrMXdQRFlDWUN3aU0vVUNMNU1FMGR6MkhF
-U0ZKMjVFencK5zCCCc0jtU93fpbuqHUye9/XQyVi45o8cGjtiuXfuZKYRoT6pCb4
-ut9aw/v7TTqju4N+WHl9ynabxbGywNDZNMWt/i6RCrsP3XJFPot+R6kAY5wl55/X
-J3Zub+QRKR5ZHffMmiFN6JH/Xn6B7FDfi63NTzKzdbFfdYPMILba/fgtBGHMQoKv
-FzActh9zUrtcwdfsJA==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 -----END AGE ENCRYPTED FILE-----
--- a/secrets/estuary/pdns/auth.conf.age
+++ b/secrets/estuary/pdns/auth.conf.age
@@ -1,11 +1,12 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IG44Q3BVdyB4UUlv
-K2dxbXM5MXI0RlhvbEZTOW1QeGVQMzlacTQ3VEh6V2JKQ2tzNUNZCkw4MmY3eW5U
-K3kyL2grRDdyenAyNGZyYzQ5M254bklvWXlkcDYzZHZIMVUKLT4gWDI1NTE5IFN0
-b3RsY2J2Y1Uvd1Q1MjYydk1LQ2c4VEZVeGsxdFpYTzZ5TTFtUndpak0KSGg0cnk0
-YWwvSnY1eUM1YnV5cjNJNFh6Z2FuK1UzWHdBajFYQ20yOU1CWQotPiBOWEotZ3Jl
-YXNlCnVwZEtCYjNZRlBiRVJMUTB5Y1ROMUt3YzQrVFdGaDZHNFVkamo5SEN4cHcK
-LS0tIGdWZDh1U0pYd2ZPMFJQdHRxdCtmSzlOaUxzb0lwTkxyQTZ5VzVxL1BhWE0K
-Tg8J8hWi+2uJxCoNvyP4Oy1fLwQONQfPIzMtmrg0e4JvJaJ4dNT3wOXo5qOjhvR4
-uzKYV8OgqnVR/gWLfJ3Ho1jg2VmvM0Ddi3v/
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IG44Q3BVdyBnaWFz
+ZVlRd3pPTVpCM3dkakJXbnJid3NWYlFRZmJFREpJb1hHMGJucFFVCk0rRHh1bFBG
+UnYrdm9xUUFLNVpyd2xRTnRFQ01mUGpOb2lieUh5ZDJTMTgKLT4gWDI1NTE5IEky
+R0kzYTZQZnh0TGFXSzhaUUp4enNlZTZXQTUrZEYrbWE3ZkRPcitkbGMKa1dVbUVj
+WUZGMUZpUXVCOXBnMnlXRVgxVzUvZjlyNFdFMjlzVWIvS3FUMAotPiAxcFJRdC1n
+cmVhc2UgWHZ2Yk97W1wgK0RPClJWSmczZy8vK25iYVVIWVdmSjZMZ09zb0s5SStz
+OCtrcGxVbTh4ZFhNU0lya2VML3VOWVgxWDAKLS0tIGR5MjhyOU1naGJyenVBYWZ6
+ZUxRNmgwMVVON2pMWlZybHN0dXI4SS9HMXcKZTI6JjBiTsBbdv8Mr8REAxlVIG0q
+Cl4PrX/rgiOAJbtrUsvBuIABgeWxPordi1yMXL8XQDZDs++O40nXAtW95zjd7pAH
+nwlFdNyq
 -----END AGE ENCRYPTED FILE-----
--- a/secrets/estuary/pdns/recursor.conf.age
+++ b/secrets/estuary/pdns/recursor.conf.age
@@ -1,11 +1,11 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IG44Q3BVdyBXRjV2
-S0YxR05kNXNmUUFaY2YrcUozTS9haURRZTBBU3B5eit1WlR2OWswClg1Wi9uU2Mz
-NjBhTTM5ZVdOZlRML2p4bFZwc3cra3FaQnFrZ25vZUVZN3MKLT4gWDI1NTE5IHlI
-TFJGVE5zNmMwMmt4RjY5YnFUb25KYU1EQ1NQdFE0TndCMjNZY0htem8KOW9ERE1p
-aWRUN3g2YWk1Q1FEc01od1BVWkoreDJvejk5M0JURWpJQTZRQQotPiAkM3NoZy1n
-cmVhc2UKS014ZXZPVGIvbW05d3hmM0FNa1pyS1BhUTZPb1p5SGEzRDlFZjllckZi
-bnhhczM0RUJVVWNPMXI4UQotLS0gZDBMTHVyNmgwaS8wZVpMYTg2R09qTkpOdyt3
-bk1xTlA1Z25aYjVtS045bwqUSpyeovAP8AsDSI9g7hO1u7R5ClTGRwoHyTj9FgT4
-29h+IakLSkmfy38OV2sWlHnqo24V8Out+9QOxfcJ30KocNuksnqORdXGN14=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 -----END AGE ENCRYPTED FILE-----