nixos/kelder: Move nginx to separate container

2023-05-27 23:45:53 +01:00
parent 44c5a9ded9
commit a6db08acda
39 changed files with 607 additions and 491 deletions
--- a/secrets/kelder/acquisition/mullvad-privkey.age
+++ b/secrets/kelder/acquisition/mullvad-privkey.age
@@ -1,12 +1,13 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDdXUTlQQSBHcy9v
-emJLQ0FhYXNHL1FtR0NMQTIreVRrMzVVTCtCazdGQkxKbUVia3dBCnRzaGtkWXdN
-Wkl0N3FnckJmNzF1TFlvaENGRCtuYnRGVWs0MmJoTGJubWcKLT4gWDI1NTE5IDhp
-bklsU294czYzU3B6eFc5am9sVDlhcmhJbFgyVU1MbzBpY2FmMkRLemsKakgwY3dr
-aitod2FMMkh4S2VpOXI0UCtKZFpSYWUrcktNWEVNZ2kwb3hSWQotPiAwMC1ncmVh
-c2UgKmcKQjdiUTl6cFAwT2ZMbHc5Y3I2eXNwRC9zM2dNMjNoTGNnc1h1bjdzLzU3
-OEQ1SWk5bm1kdVcrSnFGOGN4L3ViTwp1aHVZOGd4RlJpS1pRaG1jZkEKLS0tIHkx
-ekhPMXJ3eUI4MThnOTZjZ3FLanJ6elF3WEtldUZkZ3dBdFJYWjFrN2cKfgrslDtM
-JtUoO4IS8XsxJubGXyzpB7Aw0VTrQUrM0hMKr3czua3tw6Kl2Gd6g9KN9WayeVdV
-k2/0BjTOxnbkgez54h0jLckl+gsAPf0=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 -----END AGE ENCRYPTED FILE-----
--- a/secrets/kelder/cloudflare-credentials.conf.age
+++ b/secrets/kelder/cloudflare-credentials.conf.age
@@ -1,15 +1,15 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IGV5cTNkZyBxTUZP
-aFFkdmRYM29OOEswcW5ReEJvOGhWdG41Rmc1WXEwanhTMHU5cEVVCm96dCt4L09W
-NHY1Rlk1dU81dlp2NlU1QVU2NU1mYWFhUm5OOElBSDN6b3MKLT4gWDI1NTE5IFU1
-M0RSancvaHhhQURZRXFoV0pjSUV1K1BIQWpqbElMQVFHbWNaZ20zV1UKVVg5TU8w
-WkJKcytRS05Uc3ZqVCtTZ1VWZkFGNEY4WlFKUmthcHFJaENQRQotPiB1LWdyZWFz
-ZSBvLWF+PERWQiBFbngnXypvIC0/egpVVTBNQ2RZVFdDeHJOUmhvSkgxM0xEL29q
-MkNhcTlFbAotLS0gSjRCQmorZHJPWDlLcFk1QTFuV1BNdURNSkZQU2RnZXZMWTd5
-VEc4dzFPVQoXzNPkM9y+9vb9U3ivbj/UFzfKQsgKryK3sMoADAdTIm43D/mnHlcX
-qNtNYKlkfzMr/tjqvru4sE/gek4hO2DWlVV3qFEBmm7LfAmSw/6/kxeLUgequanH
-kxN5BPi130sV07kNBnloeQl6YePe2OEsif9jZRHXoifCwm7MUr3Fau2P1MERTv2s
-RhROMyErTBlAbQI85h3Cx3gVcxSABSb+A+PDBJRt47Tzg5x8Dm/pPrOgreCaSfyq
-MiXibRs41ySIT/Um0V0Cc5GoZb99E7I7cJiDP2XYJlFNo21xO0ve6LmGZ9gA+LnJ
-848=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 -----END AGE ENCRYPTED FILE-----
--- a/secrets/kelder/ddclient-cloudflare.key.age
+++ b/secrets/kelder/ddclient-cloudflare.key.age
@@ -1,11 +1,12 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IGV5cTNkZyA5dVVW
-RzhQdzF0VFZVS09jUEtsZlp3YVY5Mm9RZXkwTVAwOWxMM2VZN0FFCjREQzhtTWR5
-UDREOXRqSDRWdHF5SHFzVzFiMU9GYVoyRys2Q2hZYmpiNlkKLT4gWDI1NTE5IGRU
-YnBWb0tPcnA0RDZnOTlsSm80T1FTK3VzaUxtaHBxdHpOMlBVWW15Z3MKOFBvcC9Y
-RU1IOEZ1TkIwYTRNMzMxTVVlNjdmZ3ArNGcyNXpXdDZpdTc2VQotPiBDJiEsQkE8
-LWdyZWFzZSBACjJzNnpBZVdjVlB3ckNJK0FTZwotLS0gWnRaV1VJTmN1eWJGYzZK
-TDdCdWpiVGo5aXpJajV3MzVTWWd0WCtCQm5rOApZgWQ/ZgVwKOKaqlUUeM2zEPa9
-cKsPeeoaGg1eIYsrwqvEWA43iwGc+vqXjru/4BszHIU0Mk5dodg8wrqsLarGd6lP
-uj6NBn0i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 -----END AGE ENCRYPTED FILE-----
--- a/secrets/kelder/estuary-wg.key.age
+++ b/secrets/kelder/estuary-wg.key.age
@@ -1,13 +1,13 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IGV5cTNkZyBmbUtI
-OXlPaUx4azFxcndBUjJZdnZsWGJPUVgwaTZzN1RTTG5TbUZJeXhrCjlkWCtXY2ZO
-dXd1cmNVWFovNzB2Vzh3ZlFpMUZBUHV4bzdFV2VoblhEQU0KLT4gWDI1NTE5IEVt
-Nzk1NHpZMW96Slh1Q3B4Wis1MHdlL3loWFpleUdmMnVMeGR4TDY5VVUKcS9SUFhp
-aUQyZFBLczB1dnNTRHh6MzRwc2xqUG5weGJ5aUtVeFhNZ3FsQQotPiBZd1opKktl
-LWdyZWFzZQpnM0Q1ZzUyTkZiNmZ5b3FsVDVJY2llbW9ENEo5amNSZ05XSlRJTHQ4
-ZXFyWFJ0TXVrb3J5eERQMjQxNTZzdFplCkRTMnBXQkpLWVpEejNhbW1sQmd1YWpM
-QkpNc09VUlNPT3JnSG5TNEQyYmMKLS0tIHdQcE1RajJ0SzRoY2Q4djgwMkJqU2Zs
-M0tCdllGUVZySmFUUk9RQVd4b2MKnlnrCbhW0y6nyToFvPTZ7n7o3eoF/5D2BEbd
-uybZWgMOO6WU9tSZRN5jzp8eMeFbk9LNn/YpxIZ9KSr4hxtqSbqxDuPe65+L97gV
-Ufg=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 -----END AGE ENCRYPTED FILE-----
--- a/secrets/kelder/htpasswd.age
+++ b/secrets/kelder/htpasswd.age
@@ -1,13 +1,14 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IGV5cTNkZyBia1Jy
-K21CVHR0Snd2bUZlRWcxUysxeS9Bb3lSZnhJUzFzR3lBUVVBaTJzCnlHNU1NdFBx
-WWNPNzdqVkxxblR4SEZsd2tiL1VBazNPUXFOczU3d3NNMDAKLT4gWDI1NTE5IDFB
-UklkUFk0ZG90UDVHRDh1b1IvV01kQjNaQWFJdlFmYjl0bUxlUnpjZ0kKbGxaRjJz
-MmZ0REtaMGFtSTlCbTZobmExWlpIYksxMHMzektLRGk5aHpIVQotPiBVM1hsRmte
-RC1ncmVhc2UgbV9lNiBfbUMkKEJLLSB3MTw8ClFZQkY5cm9RZFpMbC9zMmxUVkVp
-UEVaYmhnY3luMDVnSnUweEk1SUl4T3Z2ZUZjRUZSSlduWmVwQmdvZG1EU1kKWTJR
-N2wwUythUTFtCi0tLSBHUkpkSjRhVGdQRkZ3U0RmZ3g3ajJvdm11T1gxREtWQXUy
-MjhCZFZNejhnCgZGSBxVUK4k9N2NUeJoAc7o/LDEUXqujMBUd7qNDU2z0I9cHzps
-H2OYmaG4y3LMyQTZpKqh8BkDHW0m+huqq03SxYMsrifEkJddfKdk4eagmu0TJEO+
-9NSNOwOGY8WorxEIXqbFRZqUMF+s2ZWsRUr3ONhMGjxP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 -----END AGE ENCRYPTED FILE-----