From c42e836d528ff4b40759c69d2e3704458c295f6a Mon Sep 17 00:00:00 2001 From: Jack O'Sullivan Date: Sun, 20 Nov 2022 02:43:48 +0000 Subject: [PATCH] nixos/shill: Add Mastodon --- .../colony/vms/shill/containers/default.nix | 1 + .../shill/containers/middleman/default.nix | 3 + .../vms/shill/containers/middleman/vhosts.nix | 57 +++++++ .../colony/vms/shill/containers/toot.nix | 144 ++++++++++++++++++ nixos/boxes/colony/vms/shill/default.nix | 1 + nixos/modules/tmproot.nix | 20 +++ secrets/chatterbox/nul.ie.signing.key.age | Bin 443 -> 502 bytes secrets/chatterbox/synapse.yaml.age | Bin 1106 -> 1128 bytes secrets/dhparams.pem.age | Bin 1216 -> 1163 bytes secrets/estuary/netdata/powerdns.conf.age | 17 +-- .../netdata/powerdns_recursor.conf.age | 19 +-- secrets/estuary/pdns/auth.conf.age | Bin 444 -> 413 bytes secrets/estuary/pdns/recursor.conf.age | 16 +- secrets/hercules/aws-credentials.ini.age | Bin 451 -> 533 bytes secrets/hercules/binary-caches.json.age | Bin 810 -> 781 bytes secrets/hercules/cluster-join-token.key.age | Bin 643 -> 656 bytes secrets/jackflix/mullvad-privkey.age | Bin 492 -> 493 bytes .../middleman/cloudflare-credentials.conf.age | Bin 500 -> 568 bytes secrets/middleman/nginx-sso.yaml.age | Bin 872 -> 820 bytes secrets/minio.env.age | Bin 508 -> 450 bytes secrets/nix-cache-gc.ini.age | Bin 520 -> 473 bytes secrets/pdns-file-records.key.age | Bin 834 -> 829 bytes secrets/toot/otp-secret.txt.age | 10 ++ secrets/toot/postgres-password.txt.age | 10 ++ secrets/toot/s3-secret-key.txt.age | 13 ++ secrets/toot/secret-key.txt.age | Bin 0 -> 545 bytes secrets/toot/smtp-password.txt.age | 10 ++ secrets/toot/vapid-key.txt.age | Bin 0 -> 376 bytes secrets/user-passwd.txt.age | Bin 1663 -> 1781 bytes secrets/vaultwarden.env.age | Bin 452 -> 537 bytes secrets/whale2/valheim.env.age | 18 +-- 31 files changed, 304 insertions(+), 35 deletions(-) create mode 100644 nixos/boxes/colony/vms/shill/containers/toot.nix create mode 100644 secrets/toot/otp-secret.txt.age create mode 100644 secrets/toot/postgres-password.txt.age create mode 100644 secrets/toot/s3-secret-key.txt.age create mode 100644 secrets/toot/secret-key.txt.age create mode 100644 secrets/toot/smtp-password.txt.age create mode 100644 secrets/toot/vapid-key.txt.age diff --git a/nixos/boxes/colony/vms/shill/containers/default.nix b/nixos/boxes/colony/vms/shill/containers/default.nix index 7436738..76bc2eb 100644 --- a/nixos/boxes/colony/vms/shill/containers/default.nix +++ b/nixos/boxes/colony/vms/shill/containers/default.nix @@ -6,5 +6,6 @@ ./chatterbox.nix ./jackflix ./object.nix + ./toot.nix ]; } diff --git a/nixos/boxes/colony/vms/shill/containers/middleman/default.nix b/nixos/boxes/colony/vms/shill/containers/middleman/default.nix index 2bda636..4910b63 100644 --- a/nixos/boxes/colony/vms/shill/containers/middleman/default.nix +++ b/nixos/boxes/colony/vms/shill/containers/middleman/default.nix @@ -240,6 +240,9 @@ ${lib.my.nginx.proxyHeaders} + # caching + proxy_cache_path /var/cache/nginx levels=1:2 keys_zone=CACHE:10m inactive=7d max_size=4g; + vhost_traffic_status_zone; map $upstream_status $nix_cache_control { diff --git a/nixos/boxes/colony/vms/shill/containers/middleman/vhosts.nix b/nixos/boxes/colony/vms/shill/containers/middleman/vhosts.nix index 73c9d53..125c8ad 100644 --- a/nixos/boxes/colony/vms/shill/containers/middleman/vhosts.nix +++ b/nixos/boxes/colony/vms/shill/containers/middleman/vhosts.nix @@ -42,6 +42,7 @@ let autoindex on; ''; }; + "/.well-known/webfinger".return = "301 https://toot.nul.ie$request_uri"; }; in { @@ -299,6 +300,62 @@ in }; useACMEHost = lib.my.pubDomain; }; + + "toot.nul.ie" = + let + mkAssetLoc = name: { + tryFiles = "$uri =404"; + extraConfig = '' + add_header Cache-Control "public, max-age=2419200, must-revalidate"; + add_header Strict-Transport-Security "max-age=63072000; includeSubDomains"; + ''; + }; + in + { + root = "${pkgs.mastodon}/public"; + locations = mkMerge [ + (genAttrs [ + "= /sw.js" + "~ ^/assets/" + "~ ^/avatars/" + "~ ^/emoji/" + "~ ^/headers/" + "~ ^/packs/" + "~ ^/shortcuts/" + "~ ^/sounds/" + ] mkAssetLoc) + { + "/".tryFiles = "$uri @proxy"; + + "^~ /api/v1/streaming" = { + proxyPass = "http://toot-ctr.${config.networking.domain}:55000"; + proxyWebsockets = true; + extraConfig = '' + ${lib.my.nginx.proxyHeaders} + proxy_set_header Proxy ""; + + add_header Strict-Transport-Security "max-age=63072000; includeSubDomains"; + ''; + }; + "@proxy" = { + proxyPass = "http://toot-ctr.${config.networking.domain}:55001"; + proxyWebsockets = true; + extraConfig = '' + ${lib.my.nginx.proxyHeaders} + proxy_set_header Proxy ""; + proxy_pass_header Server; + + proxy_cache CACHE; + proxy_cache_valid 200 7d; + proxy_cache_valid 410 24h; + proxy_cache_use_stale error timeout updating http_500 http_502 http_503 http_504; + add_header X-Cached $upstream_cache_status; + ''; + }; + } + ]; + useACMEHost = lib.my.pubDomain; + }; }; minio = diff --git a/nixos/boxes/colony/vms/shill/containers/toot.nix b/nixos/boxes/colony/vms/shill/containers/toot.nix new file mode 100644 index 0000000..79e94e0 --- /dev/null +++ b/nixos/boxes/colony/vms/shill/containers/toot.nix @@ -0,0 +1,144 @@ +{ lib, ... }: { + nixos.systems.toot = { + system = "x86_64-linux"; + nixpkgs = "mine"; + + assignments = { + internal = { + name = "toot-ctr"; + domain = lib.my.colony.domain; + ipv4.address = "${lib.my.colony.start.ctrs.v4}8"; + ipv6 = { + iid = "::8"; + address = "${lib.my.colony.start.ctrs.v6}8"; + }; + }; + }; + + configuration = { lib, pkgs, config, assignments, allAssignments, ... }: + let + inherit (lib) mkMerge mkIf genAttrs; + inherit (lib.my) networkdAssignment; + in + { + config = mkMerge [ + { + my = { + deploy.enable = false; + server.enable = true; + + secrets = { + key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILSslLkDe54AKYzxdtKD70zcU72W0EpYsfbdJ6UFq0QK"; + files = genAttrs + (map (f: "toot/${f}") [ + "postgres-password.txt" + "secret-key.txt" + "otp-secret.txt" + "vapid-key.txt" + "smtp-password.txt" + "s3-secret-key.txt" + ]) + (_: with config.services.mastodon; { + owner = user; + inherit group; + }); + }; + + firewall = { + tcp.allowed = [ + 19999 + + config.services.mastodon.webPort + config.services.mastodon.streamingPort + ]; + }; + }; + + systemd = { + network.networks."80-container-host0" = networkdAssignment "host0" assignments.internal; + services = { + # No option to provide an S3 secret access key file :( + mastodon-init-dirs.script = '' + echo "AWS_SECRET_ACCESS_KEY=\""$(< ${config.age.secrets."toot/s3-secret-key.txt".path})"\"" >> /var/lib/mastodon/.secrets_env + ''; + + # Can't use the extraConfig because these services expect a different format for the both family bind address... + mastodon-streaming.environment.BIND = "::"; + mastodon-web.environment.BIND = "[::]"; + }; + }; + + services = { + netdata.enable = true; + mastodon = mkMerge [ + { + enable = true; + localDomain = "nul.ie"; + extraConfig.WEB_DOMAIN = "toot.nul.ie"; + + secretKeyBaseFile = config.age.secrets."toot/secret-key.txt".path; + otpSecretFile = config.age.secrets."toot/otp-secret.txt".path; + vapidPrivateKeyFile = config.age.secrets."toot/vapid-key.txt".path; + vapidPublicKeyFile = toString (pkgs.writeText + "vapid-pubkey.txt" + "BAyRyD2pnLQtMHr3J5AzjNMll_HDC6ra1ilOLAUmKyhkEdbm7_OwKZUgw1UefY4CHEcv4OOX9TnnN2DOYYuPZu8="); + + enableUnixSocket = false; + configureNginx = false; + trustedProxy = allAssignments.middleman.internal.ipv6.address; + + database = { + createLocally = false; + host = "colony-psql"; + user = "mastodon"; + passwordFile = config.age.secrets."toot/postgres-password.txt".path; + name = "mastodon"; + }; + + smtp = { + createLocally = false; + fromAddress = "Mastodon "; + host = "mail.nul.ie"; + port = 587; + authenticate = true; + user = "toot@nul.ie"; + passwordFile = config.age.secrets."toot/smtp-password.txt".path; + }; + extraConfig.SMTP_ENABLE_STARTTLS_AUTO = "true"; + + redis.createLocally = true; + + # TODO: Re-enable when nixpkgs is updated + #mediaAutoRemove = { + # enable = true; + # olderThanDays = 30; + #}; + } + { + extraConfig = { + S3_ENABLED = "true"; + S3_BUCKET = "mastodon"; + AWS_ACCESS_KEY_ID = "mastodon"; + S3_ENDPOINT = "https://s3.nul.ie/"; + S3_REGION = "eu-central-1"; + S3_PROTOCOL = "https"; + S3_HOSTNAME = "mastodon.s3.nul.ie"; + + S3_ALIAS_HOST = "mastodon.s3.nul.ie"; + }; + } + ]; + }; + } + (mkIf config.my.build.isDevVM { + virtualisation = { + forwardPorts = with config.services.mastodon; [ + { from = "host"; guest.port = webPort; } + { from = "host"; guest.port = streamingPort; } + ]; + }; + }) + ]; + }; + }; +} diff --git a/nixos/boxes/colony/vms/shill/default.nix b/nixos/boxes/colony/vms/shill/default.nix index c63b3b9..c394e13 100644 --- a/nixos/boxes/colony/vms/shill/default.nix +++ b/nixos/boxes/colony/vms/shill/default.nix @@ -155,6 +155,7 @@ "/mnt/minio".readOnly = false; }; }; + toot = {}; }; in mkMerge [ diff --git a/nixos/modules/tmproot.nix b/nixos/modules/tmproot.nix index 5c1f6d9..32528d0 100644 --- a/nixos/modules/tmproot.nix +++ b/nixos/modules/tmproot.nix @@ -189,6 +189,12 @@ in (mkIf config.services.resolved.enable { my.tmproot.unsaved.ignore = [ "/etc/resolv.conf" ]; }) + (mkIf config.services.nginx.enable { + my.tmproot.unsaved.ignore = [ "/var/cache/nginx" ]; + }) + (mkIf config.services.mastodon.enable { + my.tmproot.unsaved.ignore = [ "/var/lib/mastodon/.secrets_env" ]; + }) (mkIf config.my.build.isDevVM { my.tmproot.unsaved.ignore = [ "/nix" ]; @@ -366,6 +372,20 @@ in }; }; }) + (mkIf config.services.mastodon.enable { + my.tmproot.persistence.config.directories = with config.services.mastodon; [ + { + directory = "/var/lib/mastodon/public-system"; + inherit user group; + } + { + directory = "/var/lib/redis-mastodon"; + mode = "700"; + user = "redis-mastodon"; + group = "redis-mastodon"; + } + ]; + }) ])) ]); diff --git a/secrets/chatterbox/nul.ie.signing.key.age b/secrets/chatterbox/nul.ie.signing.key.age index 51b24b747613276b0af30da6efad4139d5605a10..b35556f0926dca30993be2c73fc64d47e351d414 100644 GIT binary patch delta 468 zcmWm7%WKnc003a27YP#)ohJ`r*I3#lZIJB^ zZZ)Wl1i@0AGc&I12U(L2JrWXo0iv%PxQ8*aPZ$GtwjwEnqZnZo(^4+ar*RU?>cBMu zsC*Gtv3ebC!01MmHoGWlB_z8lQ8;31f|_We%47jM55|>|<4P(I^uiAyL7t%Gq-fb| zWI#w3P4S{Lb~w!=jjqUwW2!NtnPpm}3+I2KY%0{!`LdH(!_tkKEvI@RZICe9RS{|8&QojlKTF1`K2J^d=C>ao H;+OvcZ=7I20-!F_BC$9Nvr1LrO z+Nx8~y4C^97HYV+8#`l}7JgEyUKa#Lv3o4{FA)Z^D-ymW%oMtRAuX#i%M# diff --git a/secrets/chatterbox/synapse.yaml.age b/secrets/chatterbox/synapse.yaml.age index d5ce6377cc74b7b7bc8beb86aaad574e7a5ef860..0101ed9222736e35eadcbd0c493caba9e3645d39 100644 GIT binary patch delta 1099 zcmV-R1ho6o2D7qR!K!fIaFFSV{1imWN2?IBZTZY^>&bUAr>WOFcVY-Uz8HD@&|GC?^`%-?4vuuWC&p;)u7<0JtMR5zZm98!>JfDvuZ>1K6K4G8$G zi=&gOCl764r$cT5e|ql}Xvi%9Y%yz4@qD#ax5289bFn%LV{AD)xf-RSv^rHxFhh%U zz>h2%ynh}OC&Z*6%xH+%yZyHDMKb>T#zlf&Az(VnKu3A?f1uOQyj>TdTMHFW&ZBb} zYy+nvx8-_8?&4te&G6Se-a{`>>T{(>Q;_YK^!kr1hYXof_}N?}dZAAI-}$gY9Gkr>uR zZc-l+F^a=VP)|oqI`q@}!Yax<`RsjGYfO`Lk+c9>JlNZnBDxi8;du|2JLkx>#u(Z1 zeoH8V*Z27arQ*dh4(r1rkXx<2d{1&8RGyp=Askp?>?6qFE6SDDzM&=k>`+y1G^yu# z4S&wXdS16mN2HktspNKssTu5*c?7?xD)&iT4Ud|WUGy1MEVG&a%-uhO0lC1kA*KQ1 zC{HO*A3Os1c!PhhW4o+)#$w5tOf=_xuK|Q1KiF^j=AF043B6;S$$G zfums5ElvyuD+M}|lm;YvGj@;5meSD6bcl1W{R;jKD!xE%p>XshJCUn>(U3)f@CKZDUZN)`ygd(Og{fPH)a@glpX RIk9MscjyPidTn`nu%#p8*1!M& delta 1077 zcmV-51j_s92+|0UEPpX^WllA5X;DIHbTc+YZ&Gk>b9H%DFgZ+6R$^;0R!wkFYI$pF zIW;S7Q3`lxVsKSuGc|5#c5XysOEzh1S#Whxad&HORWx&IFf>kZRzWd!OgJ}JSqd#a zAXqXrH8D9LVn<4GcxQ4%YeINIc{6cAWJ)n~Y*A=3P3N1b$T5Via zdM#&iWnpt=AWuzqPZ#;NuxVM->WoA{^udkmTGC8q4zo<=6{Kr2+&@ioZ_{4l9)qYM8HvI zysm}{B^>ax%F9DDOOwM4h#94PDaW&hk>Co#a@DZQ{f2Ajifdch}WwJMU>b29 zgMU|UfFL$gh(Zgx?xLkypPViNWL}wpgRXO9HlQ9VK|>o#5d)Q1!iZ^6$#`ZLxYi&; zr-)x#O!W6VUqVk5gp6;#S9{>@9l1~glI-H_?YfC@pHLMIepN$8n;3PLxWDuj!16R% zFTN?m1?4ClH%i>~`?}4Uw9O@hrQv$9g@4!18&djBR~8J-=%BX6G|lG&!EVl9&<~RQ zE?r1cxR0UGT+UpwnP9l(qOJNa>RSBqnGWG^BRLt3*xY|mD#HBQE0}14>WcBrpn?h1 z66t*(BJ4)27)yK)pm?R`>s{_|aNB0|0>}A_wS9ny6DM#`k2!Z-5wHD>zw8Vq|nLZbENKD_2fxcM2^& zAXqXrH8D9LcVt#)Mr$x*F?3W-ZFn(qD@=MrLq=M7L{&{}H-B?#b#+%)S}|`#R5L_4 z3N=V#R4-&=L3vbqZf|BxSY&BJY*8;+VQ6qfL^E+wLuPDwST}lfWNAh)3N1b$S9EJF zXL4m>b7de$J2@m}AaqGWdO<)SP<=BaH%dtgS$Il#IcGUUM@VXVP;D?WRZ?kXW=ujt zc{g=*XGm^pdVfwcF=A_4T6TC^WJxnsSqd#JEgRzX@&Yhg5NRb_N*F?2aNYcOyx zG;M8jb!~QJGgfs*Mn-pHRbg{ONebX>`YPtTMDie|MUzUoM?pfn#|gC5!l2VREJ>%$ zOhb@to!ixAl8_QY^dVT#__+fPe&od#$(~K(U{;GP;D1^f4`D#^v(+YOe}}SUIaT!O z<38!f{?4R0>Emo({{*YmS($O1w#IkF>GZ&Tc2o>M&-#Q4I`+$5i5Z2*Cu^&yVo~Z& z4)JM+*J)iBjr5(FXhoi!8OcQ&AOr%gTERLnq=zB`6kk@mGmv%QnmPmjxfcjgmn ze_$xn3&5mS)T+>Ih5k^(FIH3>yo^HNq9q}3S$`Iw>=WmNpYnAGs2Fw1th7pZmTZn z8TK2U?+R>=(Jf#l9eAR(bCY4?vE7_dm<`+^i9P-L+I*vUrQ5eEVn@7Dl9J`n@hA%9 zh|m$CpTB?i&(nfFy|FZ&8rtyF+8et(bIf$D%MYW8J4kRgG#2A5XvELht0S(4`W zQ2Hy7$RV`iOa?d1tQG$-P_#4#gq`a@u{U(_6jc*!wd;`pv@IzHu^D%3@drf|mXXVr zJ}xSJX=c|IXnhHuct8#1qth47jO~WkfQoh=Fy@5nRMlB>lcW2w(zTnqC<5Qe{AYB| zk(vJD@dAi?7lOr`uduw8w7So*z^)zWDq&@f|7w(2%^zHiFyAVD>ZLk-@q`&r)C>7= zy!&FQE^#jZ*MS1Ia*Rrbbm`%baF&UHC1m`S5s42 z3RhV{R%3ZiMR_nVaAq}0Q8iImPi94FNkL|8K`(MzHEBgpL~LesHB5O~3N1b$Axb?t zEKx0Ia%Ew2Wguw^IA>^PQ!i9+O-f`-Q*3!OQdV&|RY5s9G+{(hO?qxvFJ?GPFKjU| zV`_PFPFg`tSbt7PQA}kyPDN@kOLb*XZwfXmICVi}FGf{PQduiyFi}QUXH#u%NGotd zXmUtdFlbF-W@>jsOLK2AXJJB1ZcJfyW=je!EiE8JPGM3@H!w9vM07$~a!7SiXG~2^ zLt1TTY*JZJc}`GOGFmWhPAh0lIY|nOF^xW3_-P$Uf`1Fi>tKBwkh^3~LlU2d2oJ8E zFxU5MfQvPZ>R*AD3t(L0%lAISyLZ7+a%M{vX^KJnZ1l8Urf+n8DoW)rX{(+sF8qYE zP1`s_z7b?3@QaJ?;3JW#Ap0e6JFFl3|qR`$uxZ)cb}O-5fk zYMKM#5F~Hef*^R$9A^j`#X!%lA9E4c)QC^OJAVgpON{^2^9XO@$f^kk00PQgiq3VT z&wYRAJ0F`)neT%3g5ro+%SC)W&$26=_G)EQLI(e8ooHOcg?_V0!4t?Tg5C#jrIAJx zL@GpL7Ew#eQ+b6XuM{;>k%rLR9-ZN964wZ1S7ApH4n!h4mJTf>>cPq>FA5?=u+y_+ zTYr+qdd%b+S=?;JGpRTcbgw^ays;q`yuOIY)BQ)g+PmQ1s5`8IUxF!7`_@x_S+i`Z zuP@jfhnT>g+%Ea!xW>?XaKjOYc3>n8?d}|EaN6U6f1!trdF*Cz_W_IIuB4Vz4KGrI zbaN{9qS7GDu`wa* zPGsFHdu|UvC95k<>=&D>l~SM^NdjY!9v*zg`~Bq7xk!ut#)7%+Ajo5j;~p>O@qZ1M za@utE%c73cIcP4|+esWm)FHDggjN0*c#?4CS4{EJQ70_R#B?7?2FrGE2s(Sok09?n zox=Dc@eAJZsX8+70T>b1x4ki(Emj{Idy(pPqGE=SOTGSbozH>2Zbd2N!E=|=vU}m} zx~RHx~+(KMHN#91wQ{aMvXdS40xc$e4r-JVdYTcRiK8XNQv+1Mv>6(#KCk5QA CYy ssh-ed25519 n8CpUw iETDBtdye4piq/xqWpbInrU2FOPEEKea4k4lVzAwSjo -azZL62Gq2MZP8ix0HiySJvAD6cAHkL3Be20We8OQQM4 --> X25519 NRs9OnWiXplaM8CnZqmOUNsPThBOIEsnr9FDzMrlVDI -ZTXNz2tHYMEbkOKMMmu7IPoAq6Bivn0iyso5dGi/aew --> C%.jkH-grease 47 -ZZhoIPOgltI7bYaGSDHUQLU ---- IOE3R6sGvuDXeUyYtGuf5DDEMIzBjAEI3hD8yHnRibU -uyb\>"!$)miڋD} =*I0^Ft:7<<ޥKl>ƌd.1~a_OnwB.G5meC.$ -[{'/ 2*c递1vߴ \ No newline at end of file +-> ssh-ed25519 n8CpUw 3b8J/xL277WAajHymjDJobariLmoDAhUyQpLdB9cfXo +i3vbIUk+NawecuYN24PYPkeCcPU6tcSv2uyeThUXLxM +-> X25519 e7KpW0DuROUPbJnwH9bmuukI4CssFChIlGiQZ9eJ2m8 +95FinF9t9H14AaWEsZrboHvVjDpawT438N8x0u9aqEM +-> SQ-grease yKgA| >{Zf` %\ }#]TR;rx +ufI0F4kKHxaxb6ulmD2nwef1y9I +--- N9HQTIQ5VVZI/MQnddn+iic0NpcXDVn+y+TsdJmqfYM +gn=j>Od: OJ0N^ˤU~ (Q ^:0BdFB=v[ .MC2ʿE=Y/%K|Cڵ}&!w>}o S??^!Bв \ No newline at end of file diff --git a/secrets/estuary/netdata/powerdns_recursor.conf.age b/secrets/estuary/netdata/powerdns_recursor.conf.age index 80619f1..4fb8a64 100644 --- a/secrets/estuary/netdata/powerdns_recursor.conf.age +++ b/secrets/estuary/netdata/powerdns_recursor.conf.age @@ -1,10 +1,11 @@ age-encryption.org/v1 --> ssh-ed25519 n8CpUw 4Uz8X3DA0qi11jxT9YNhKoeEeDPzwo4NJH9k4eM08Xo -PCHTFDA4A0tzGjgrkYOmIyrtNK0uV+rHNdZW/ntRNAc --> X25519 3sNBOVg/VLvSP+Eezi+qdrKgvUfQCpCjfSRw6F+Vb1U -ixF2OOSSX6YdrJ1dBRZHMJA7cuZMU9l2kAm7Vp28W7g --> j(Bq}H-m-grease ZYUY SPd -wpnnHgPzm87eHBnd64JWPvCXyGejDcFGpQ1ny1DxIeQLJGpz/neBMrkpjMz7i4vF -/Ad3IzRvmWo1ZHbk ---- 06ibUv3aHvqyXOp6dIibVq3TWH4TGwKYDIxOcDI7p9o -)l F1B4C@,WcJpc^ C:eM¡iɖ6T<4<&TyqE̤xV7 ˂Uh]Lm3Wd /hÉ`M>"DNk=]@ \ No newline at end of file +-> ssh-ed25519 n8CpUw 6uHZyoyVt2gGwiKcnXNoYKhKRe4VoruWKEKKhDZGWE4 +Koe5ZXD5VXbxN54uhLAZgjOJDd898gxoAv8eug57n6A +-> X25519 7HmjFGzmHrcLL4OoylHByV9HQEjLoHJI3aL1KQPa40U +kmlyNDJy4wZUlQuIMYXjGGa8goX6p0kqCmctcvjhZg8 +-> Qt-grease +gFRjzic9zrBNWUd/9b8dcMhrf4I8B2dsXFnkXMJJ/QTXH3Vwo0x78VQrcsDCBeFQ +bFoadWMaFb8tiEzOTUmL4D3v8cUoQNik +--- 5K/uMQHfY+rbs+XlqWjPoIkZWiNcaqcd2PJxwbDP4GI +-?KsaeIJޖM1Z3T0"-Q;t~*oTSu %-?ƈI0`jIa(Q=BRW(mkb}v(ELMt&;IY~%ba6(W`S8PHxZdy`8N=;QUM=L{PMG7rG zAXqXrH8D9LGg>fAb$EJdFK;h7RAYHWH7id>IBsc4FH&Q7VSh_zSWGKtP^^+IaFm)K|(Z5Z#hwMLPdE&MN>3Ga(ZhtF>iNAWL8jUS8PT|MG9Q< z5F1(Nwz?{?GjQrZEwJ>)AE^${HTv;uXgdAao>l<3#^-jaiKH>Jxn YD|fHF=l#K#h*|K(GpV}p_w}Mm)MdDfiU0rr delta 410 zcmV;L0cHN31H1!}EPpFkPF5>cZEj>mOEyzaHZM&uO=ve*WKC0Xb#-G|H%dckP%(CT zZ%=S~Zwg9oPgq$|F*I;lS7l;IL2YDfLV7tdHcT-?bVW9HdQo*raWi*mF=J6wGzu*~ zAXqXrH8D9LWO7GGa8hbfGiyd|a5gbcD`{CUFnDcmLV9CZcYj)KFh)^xV>U!ta4$nJ z3Svb_Zg+7vWNT(}Mo&mbX-8LDLo`EFIZ#P%WJqseYBWz|G*vlxaAQkz3N1b$VKXEx zXL4m>b7cx@c2Y%gbVfO6F=AmjMpQvcHe@z>HbH7vOl~+URW)Q{Q8i(AN^&(;NNP!V zK}%(MP&QXFRDXDMLu*f1L0EA`3S>B0YcNeKVOnW43N0-yAWK+ET6cG6VPtt(Sawo& zPcmstGfR3oRdiTrRz`M8YA;7{XiYLSS4cTD3YpZXR~A>lx82qkHI#9dggy3(%KKt| zP5A2<{=7TT#TmS$7 diff --git a/secrets/estuary/pdns/recursor.conf.age b/secrets/estuary/pdns/recursor.conf.age index d7467c3..7db98ef 100644 --- a/secrets/estuary/pdns/recursor.conf.age +++ b/secrets/estuary/pdns/recursor.conf.age @@ -1,9 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 n8CpUw NFyy9tfPWXMqC4fUHFTISB3N3m1P6/5w5CsbHW3uGwA -BsURcFPmnc6pJC73JlC1JullIIr1cEm7LISctfR2HCY --> X25519 6pX8pYBHpt7a8I62IbS5a/JoyME7C4wSNVq9R/B4olA -mQqqFa7aGn0PJGb+3CwaE/0/VxmP0qzFkDTiV1EpDvE --> JusY"4K4-grease 0p9 +_0 -MUgjTTYvQmfSeT12H20EbDSGTWXmukYPCdGfH1WInr5bbZJI ---- siLfYgb7hAdIkqPT9M8SdZrUwLlmiiMEb2EHobEFUDA -5!;z-3|rRկVr53~%9Ixn#ӫkv$z!l;PL&>;9; \ No newline at end of file +-> ssh-ed25519 n8CpUw 1h5DOKUmcFLWvD09R9Hg+kPtKskdJuIS0/Y+TJ4XlRs +tD9fRfDHl/CPjeN17xAWQhd1KWcoqDmf6bstgb6HRsU +-> X25519 vt8XCj+Ju/TeP7JwEZrofUtatTRjxD3ROngwQbTkhzE +iKSnIjHuYy3apf45NZ6kLgIV5dVIhc4fOCflVh7D9Sg +-> @\)-6C-grease vcL@ yq^]X +08U2EyiwGEU9t+P4s8Vu+mTH7UZuaDCUpiv4w9KbTGV+dAe2Fw +--- ux9a8/Et2aI1Lmkmvn+xkemaWcW/wghIb/Jcz/h6rNE +Ŏc_Q1bMNB \DTm`.\*[҂x֙JSH# yDnz}%6' \ No newline at end of file diff --git a/secrets/hercules/aws-credentials.ini.age b/secrets/hercules/aws-credentials.ini.age index 5ec95cbf4ab0a2329d7dc3aee41c1d889b6476e7..d885eee35768f152026ab07215c2fbd7b35f659a 100644 GIT binary patch delta 499 zcmVQ8#%wazkQRF-I~)K?*HC zAXqXrH8D9LR!=iGOmb;rb9!%WVr_VHZFy)fcrP z3T<>TH%e$?GFdiidP!APZfRviT6kGxN>f)uO-4p5b4+kGc4se4O)zOy3N1b$OnECe zYAt7SWnpt=ASgpkb5}+RI8aP+OjbotSu$g1GFV7fNo!10XEZZfd3H!qbY)OVR5@>O zHhFb1V|Zk6VSj3IZZK~#ctU1mX)AhgI8Aj%Pzp;;T2^{Ea$+wlc~4PpLoq>aQ7?E+ zH*|JcRYgx%SaeD-bb4cF3N0-yAZ}QAS4(GCaB@p!#P8zi}7C1g1Y{S(6XSf5*Rj>Q;b0p_Xm5A<2) p1KUrL`|6(3Vk97NTU|IAm#{t30_0bIR=&_%Q9xpRoeC)Z_MTqxxGn$y delta 417 zcmV;S0bc%<1j7T6EPrlJF>FF_LTfcacrkNxZgyvSQ%+=0a4~96Wi~llVo6s>Gi*6( zM>8^ba|%>3NMlArVn}&)S21%%YfEurI73rRM`L<*X)`fuS!r)>HZ*HlX?A#2NeV4K zAXqXrH8D9LXK+SCD`#m)LPAqBIZ$(CW@vC|LswW+Q$;IrQh!l*F>*yvcX4NOMK4A$ z3R+P~cTrkbMRRy%c|ut?GecB4D>!yGa7#{acTrkJdT>;3b4PP)ICfby3N1b$T}E3f zEoX9NVRL05UOq7(WoEGEGxyN-KF-Q*u#nbxuJ^QB_PuSz~TAHZW05 zS88}yFbZijS9N7Ub7OEvK~8KrYiCM$Q%WmkD^*xYL_<__dNDCsNiZ^JF?4BKX9_Jo zAXqXrH8D9LbXIU{a4{=dY)WrSH)Bm}M^1N9ZZKA6YH)NnW`BBAYA`loGdDvuQ*3K< z3RFl$cv3V`GAnO1X?b)?ZBj~5Z7Xq6D^yBjIXFv6N-#%iMR9j(VM$Xo3N1b$axG_a zWnpt=3TbV4RaIklMr1X4YF9H!N;7LUNpNj7P-r)6Q8zd?ZEZn#R(e%NdO0g%b4FuD zN-t4OOju)83V$svEg(xrOmk31GjnQnI8I?pd2d=~RA@tDb}KnHSZQZUQ+i5AGDUGh zL2-IRGzv%8`Iv|i>T*G{-HWrC3cwedT%_V6+++N;{cN_~kS8Bk#<<@kx50@PLyOVt6N_ z6W_w8zPK-^0?q(SNW-OypB6be7CD1CMYqd`L1X~lss` zGF&qP73z2bO&DT+I@SHuko~RO0Cw0e*^{yEDrRto(aGn$m2Oi2`H~;Iw&B=L*GECZ zaZ;6QhM;-$ZsAY$GueNW&d;koI|@(j#%*A+6oktqlnih&MxWz*)}6MWYy6FXU66jU fCuLPZM@j!G=GgimqDW7BcrqdT6RISzOY%C7xu`p; delta 779 zcmV+m1N8ij2C4>-EPq*eQgC`hQb}%WPcJWaYC|$LZclP#L^nfvcWQ1|HbG-~SVTBR zM0#{cV+wFacX@YIP*_b%WkOjpR&Y#7ZEiPHT2o_rWoLLcSynK4bxLP0SW`7;L{dj?D`$CHYH%}5ZfaUtI5jmz3N1b$VPJSj zEoX9NVRL05Hg-ZI3QkopLrOAwbar%TS4J^RN^wp{Y(aQ2XkkH2aX~X`Hg97wD>X<} zW;jxIb#HDrcz-o$c2i7tHAi`IcV|jXGI9zxFiSNub4GeLc})r}EiE8JFDrIRNK98! zR!TWVMpR^VSu0XGP-#zVL2xxWX*V!bcSun$YD{x#N>vI1SkRa>*VldBKV{jY48`1^ z%%T0if~VOiNhMR^VJ0tN9b+U|viDN8N0rDFr^_~v%6}#y&|j6Jra{0j0vc1(#6QXf zZ@FH}PZaLKSVQJ(Mu-<~{BdX+Q+%i8QvMe^1RjqLDURO;^)@Qi&jTm747*-F#toRN zE6TOj4#Z(IRSZ>Yuf+_vn!3=iMgeB2VE*nA3WeQ{tUOVmpcK3aVT^Cb?P5Njv_yg2 z3z!m-9)H5xrF5XKISx&jCmvzy^6UCH9`YcU-Bwn?UfT+OXOsKogeS2_7Kx@n?r}A+ z@Vau6qyKcKE{XOr;7>oSFz&DaQqW8Mz`_-qf&s2~FFRDJa-O#9@pgAPhbM&Jwm$nH zwm$MEW>&$*4f42Z(}yZ{?>r?~9FaY7+qbY^p?@@aH8|qzJYQ)6)$=YTnOrCI&sUxN zwI({Ol_K$$7|eqc_;iT2{*u#?dk_BEa1P%l-{VN$lovPKhvb|Ur;_Hj=6M#i_v=Lp zWxx@KGfu+Ih2)O}VBoHX06*-U?C^HDe;_6K>Nam3Mf3ADQP48-RSYzKAZ$e1SKI{n Jj|4=JpPwb*OJ4v0 diff --git a/secrets/hercules/cluster-join-token.key.age b/secrets/hercules/cluster-join-token.key.age index 1eef06f2fd0604e62e557087081cdfde31aef308..1ac8211e61a8c7febcb6d554163f4eef7d2c24a9 100644 GIT binary patch delta 623 zcmV-#0+9WK1&{@hEPqUSOl~ntW@b)vXIe`uZ%%I5}`dS5q@cPew;`HA-1ES$}JJaCvc4R#jp}LQ!{3 z3S>=LcT{>-PIOf?GI~U7R!&Y%R9H-Pb9r-RM^tHMM@UIdPGv<}VtRRZ3N1b$dP_G? zQ!Qt5Wnpt=3P*KIXm?XjO?Yc?Pir`0b#!x2GcQ$XH&#bWW=>ghG)PH7M00v^Rdg$2 zOLS*vOLj>}Z+}H$Y-&_PD@1xkZecS2Q5LRu?tYFbWLIAt<#VL3K4cSA`EY~*ef z>y}3DHD7{tdKRY@UoHV8Ohg2`d31NgxbYn{B){N+>VK+0<9FR4?IfXOzwYTKiyk`{ zl0~)XjtU+~q4M4Yn9tRJHc8!}tqcTN{$%fg+~Y0uL8yn(Szm$*@&&AkESwnnAb{v^i&gpW66)`d_NyV3vKQxfFtnqv9-JH<*CUq7o_Boi*#-j zSrEr#YQII`J!OTY-WZc`X=oUfmk>4HHNFVp&F*ou5xkY?hs=tf$dqd=)G?pPMrg0S JN9B0)i%shh_!s~H delta 610 zcmV-o0-gPk1%m~UEPq5zQ8;TaW-Bs7R%LonZfImeWqD?KSTHLvPEs*;X-IT#O-?Ir zVs=DGNeXQ@dQ)>YSTJ-qR7p^3cM2^& zAXqXrH8D9LS};*odTeD-Gevh$c2+}aZ$xD{PXBFg8Op3N1b$aVt$+ zR&!T6EoX9NVRL05I5Qwoeor(y3Nck`G-fzNS5|myLr6MFikK=T61tKa4`x;XLkxMEiE8HaXDgaLqTOi zSXVZ5Z&7GwVs0`+IdN)bZZ$M-YgSV@Gk0S~F>X0$dUFcg)&7D8dXYjkz!2(D5c$IwEBzTSZQ%6&({OMml>KVjS?mwu#;8uP`nBknqX zn=u;z4k(~(0}#bVO?Z?m5c&iZM`sMRVg7C`VswtLE4mJn8`YV_F6d;~>Fn!nBL_%q zD~@Ztj+f{<(`y9Mr!C)sT^voN)#u2V`ue)|2|(acCGCbQ zs@W!UI9ur0T&Z^hnPG6{c@-~B+Wz}m*5=VP0qIu| z=S@7T2T>V#^x(mR`viUgQK*9r=1mZPU*Nah`MvXOf1_o3?Z|7SEhpCsc4Xpgp9k%X z$qWXvMa^XiMz`7(E3gP8Xyq^+sS~c`TvN_ShExZvymG9(SMke`$pdl%2OTeSOayy` zdR3Yx>nId7J?6=LX~J>Jgbk{BG&Lk@=`#tr+7PNe_i}qaj{1;F5T(-tcsF#0?1a_< zFPKy)^aRVM*eMqc+G{|WE!jU56bAk;AdSIz*iVLN!6;@Z-9>rWMW3SSJ)~W+Ln8pZ z=f;v{yNM=7-OenogAvF=u$E?8v$fzhQGkyo-9@~FRZ}jjqDWbiC#QIiK)|$wxZD@` zG^o$b23Wg35iRp9;Mr8KEgp{r1>glMYdnHs7^=%TTQLkF5(!h*){cg&G_M6hq7h!V z6*}X*Ip9`h;VU!b(+%}!cyR6g74Y`t&5P4Nw=RAuA8!*M9@MwrhF4F|_2Zkz=a+YE p`uoF|*DuQG{&umq|L(7yoSi&*J@`^`pLfMq`tv>GYj}3~;~!jMpY8wv delta 458 zcmWm8JB!l*003a{z#*FoH@FxMPU^*wG-;XyK`@UdF-_AnkER8cG)dEI)8=iODpxrN zH*vVZ-Ni+{!SxW7A~?9YiHMW<_ydCY_yynhbL+>}qswchj6&IGx=2G8D78psrfqgC zoE#U6gf2_5$qjgCMWYg%0o5{u^hjacvhTV3SVQg(6Fj%(X5!669-6l#t4lBuO{paS zUj=Q9AnG)z+m$C%z9x`@t~%UDypc(McOF1^C-48Rq( zNp%P&x39IE441?`!$PU%LP(W#oHZK*gz|(U0$>;ht(7Zbyo^(ZfqBVDi-w4YVDb#t zdP2bsMborfkkWQ0b_9GoK85Zcf4OnxJiDjJpFTc#^5O4^w0f`K{sovbpX&es diff --git a/secrets/middleman/cloudflare-credentials.conf.age b/secrets/middleman/cloudflare-credentials.conf.age index 100e18b6cd5bb0e8d4082379a496e1d0e525451e..20184ddaa587961766996c90c2461ca13fc65b33 100644 GIT binary patch delta 535 zcmV+y0_gqp1Gof`EPqEZF>Y*cN=GtRWO->ZXH!#8MQ}D+ZZvZ?Wb7dev3PLt*R&Q!rQcyHmQ#LCwOlmJ{Hcl~FVMuLuY(qv(L`E}3H(6{% zb!9L(QgLH(Xn%HLaAkKiL`8UQQgC)!O<4+7X*NwYPisbJPFXj0OjB}lWKeoIbT=z7 zQ%P}mI8;|{b~YZT&H8)p_d ze?*@JqdZ^2tp>MFsi74nC%@8D37uZ}A?WX46R+%cjoiEHSe`Ef@d%nKWi(0p0(4u1 ZJJxHs-Vg(Vu(+tr?F^RpO>J*7pTmT{!@~do delta 466 zcmV;@0WJQx1oQ)tEPpg{FE1-qMS4qPcvVznPIq=>cVts!M{ag8YfWM_Z7@`EIYLr7 zN>MdfRSH%{Q*>rBd1FCscX2g(cQ{W;XD@SUS4J~QPIhu~aXE2vD=}nvZ+J;sFbXX` zAXqXrH8D9LOl~h~V_8R9b#PTjWN3M3P(?6pK|^RzZ(3zSa(_rTXi95%a9U?MM0r>^ z3R7oncu+ENcvx;mO>s9XZ&x!(X+%p&G(=%SOEXMDXLm_vK}=R?PE0~o3N1b$cq?~X zb}eUeWnpt=AbBxBWl9QCXF^d>adkv`Yff}eQ%zHAH8WyKd09zIM{jmAN;gt5PB>#{ zR&h`^LUKz_HGfnwVNnV#EiE8ObxCGxXGB+VNK$ocaWYIfMnXbGYi3$yVNY^MVQn== zM0sUWa!@xncQgvJZHHVPg?ZV0exOG$^r{B0S6@J&Kv)x-@nyrz$58$AF>F|*bpVXI zw}fIEqu&KpirD7_p zHy)U@3klXte9FG|;?<3^l}3?ejXh5*(%JBgkN)w~d(C-eCmliPOgSWTFD!~|`5GRe zF$q?lltb_XDV%b2(JLo|dSs63k0Tw0TiQKv=pTIkT7NA`I|5>`GREF`?WQsXXZ7Wj zR)<7js0tb>ixZ3rflewUgxV~W;ly@&;D35s;>Q2&2IA{-rQsst516ybYUh1qc<;oR z1#&0XiV2li->+62dmeN-#sN!+T%+?Qj+qCIbIW}Qzy^B==v4R0KF7Jm^S*w(E5(En)`5zzQZ!$&dxFsX@h%&g`t`*#{BCrje|V0o z*}f5^P^|swPZFErtVAL6gkC??|I~C8Tfjz`*do7yvNFBSYomo@ Tc@8B;y1rVGt?_60eCH3;rBYlN delta 841 zcmV-P1GfCM2IvNmEPqWyZ*yf;I7ezQR5MyjO;1-aFkxzCI8Q`YRB35pbvH0*b968` zFH?C%MG8W8HbZu5FM3aKSVwqNb#QW2V^%LUHBMGDP*iPnM_Mm6Vskl6OiX!8K?*HC zAXqXrH8D9LGjKRlM`}lDb5d3|ZBM`&a)RCiEsMt@E-SY=37I5$f~LUcz# z3Su>CN=NWxQ!;gQc4l%-VpKwB3N1b$WL#k| zH+4ZRXL4m>b7cxOXnAsDdPYxWFIZw`MOZ{IaWFA)b762~QZjIFHfKa>Lrzs#W?^t+ zHfdp1Ra8e&T7PbFWLSAZFi}uLbX7-63NbNHQd4INEiEk|aY0B~SWPQbPE%1YQaDs` zZ(&1tLsUmJQY%zrYjbiod0J9*Vm3xbNjXUh3Wv2h;G^HPFOPy1d*0s8U?65*AjX&f z81GR7uhaWDa60U>kjIl-5S3&0mRnW!wFelWy{vF3G=J}j%4D=URceqGVl=9R_eE2P z?e0{{CyMe}r;P_UD+AZc_{J#{efhPxw0@&BLCO3wVZgfi1aMZ$r zUBPawHGePjFzsD*ZNFWx7EhN${=Vx3sE_0tFFr6VV=vzexrpJC#lavl1gxaV2Msso zs4FB3uqo+Sy^+WoK|esSiKmKdp%~IpGF+oQN|3dM6Ii?w02*gZ`dfM|B*CDYqxA4V zJ^lG8-ZLnxk=vKAnKGxI^My_V(DHPH z0747-#w*pRuq?GRcA8oI{oZwqe2JdG+{l?Fm2qx}4zR{hg&4}~Ye#+mH|h^#qx=C{ Tl=T$+lcEhldSV$3ELS@Qde~^4 diff --git a/secrets/minio.env.age b/secrets/minio.env.age index 5fcf23377ea0dfb6bf848fb813e440337f2f0c7e..5353d50e201fa90a651fac741f02e6c4bc74f5a2 100644 GIT binary patch delta 416 zcmV;R0bl<71HuE4EPqinLt1G`FHLuER9Zr7HaB5zLqjq}MMz^rOL;~$Hfw8fQBQC$ zT0uE8K?*c@Sz=6RT2VAYQf+f{PgiSDT2N_9ba;19MO80kbvJWvMpt)QF?CRDGzu*~ zAXqXrH8D9LWO8d_QB6)-YG_t^FKtv*Swv4#a7j00R7z$>X@5&gGEql2dN(gvaAs9S z3O6}7OLuE&Wp7qRR#|H>Yjaa{VOMi@T5u~hcu#gpW@|TAXb7cxJY&2GAQe#z8Y))-RXfQ8hcXL-bcWz=YI7vt`XHhdmO=L_tdNg8o zc~Lk+M0ihPOMg~TZg49#cVtjW3N0-yAXr0nV^2(aRWEErM{_VUG-F6|IW|Lccz8E8 zHB@G4Fl9$XcQZ;*I8{Sg3KcUbbYrx$z6K~P?OSS@VM;9enL!lk|9Lo2Q47g6E5j1k z^^N%FVCr8OLB15-bb{q}T{K8am7lYs#FA;bhqhPvvl$QTEJP@cBP3zD>c_ZAdRytP K_-6ihy7f5Ff0hUU delta 474 zcmWm7O>5I&003ZN2pTW*py%SnK`l+2v`s|BG+C20pQO$50U~LerpcQ3P12;z>ZB(x z9@L|V;z8NPoA-f=_z6>{=uuBY!HXyiWH9mh1JCoNgQeT&7HtLOMxU8h>{v>D2#p4- zaIu&*@_Y3Poy`;!s7PLJ7L_q$gwIm|SE|AWLCT&gxxA%@9=Uxn&^7 z5K!@IU5K5&CrC9jdI3X*9e$n;0+6)` zpx3c5X$vedv{T(w`l#df1l^5w8YTwksFCJJ3mU8Y!0zG_8fuYM^blg+BDlanIg6$V zEZI;^qwaZR#PwmW0Meg3#VLaZOcy$=*a4Q=oFJuAsbJX_oU!^i2JN;y=3Kca*D|Ni zgODo5I&003Z^ijrU8E~DUa#-vHJB_4z&X_97Xo45IBn#)M{#y4G(rAcU#23Ze! z80_NB!PtGC^dO4JaA!TufgnRg5dVP;J&DgBc=oSMClt~jV!&$Oa~@oG_l+$Ct$r94#$wzDiAn`VgN z4;l`|Fiox@R&}L-E^A9OvzHK4$!0d`vDpzUW39K~@)1{0Yhc?zb}S5%3Yp~f+~|r5 zuWLS4FgvL~)a6>2`J@viSq`D73A)w!UsyQGd@uJgvjAu{tm2`e84u-k+i44_g2Hv( zpF*VBO^V;_SS6pwL|*0_uq=XDZ3pChk%OL5I&003a|;}UidhIkPvy2B)^Nz*o6h99K0ZPKP`(!E)dBFr=&Z<{tv)1-Zq zPN{4j9Eb`EqM|ns;?0w&hv|7c4@D3>c=GC1)L-zx^X1sx;}2KnQ@|^$KA`+~uwG*O zBB^=9#2p!yV*p-vng}?)!ulPgC|HbmdCYjQ5O)Bvp^eIl0TtB@Dlidj3r?=-R=>p2 z5y$XY`btWp^7#ytit+-|X)+MVK^zODBuN`En#iGCZwKx?JL1{Cl$53-H?BZz+5)nv zmOQ%(W3JzI$K}wq=mJZ$kZP7AU_sfOIcAv&UB(L#3=Dte3fKang}Na*lpni*Tr2K+?=< zswcdi@12=9qN4}wz3m^rmyWC*9zKCTzXg9@zrVcrbZ>Xz<-4r~?Ah(-9~U1z{`%q$ ZVeTOR?3+*f(TDH18Ygbv=;6!Te*xF0tI+@e diff --git a/secrets/pdns-file-records.key.age b/secrets/pdns-file-records.key.age index ff7cdfcd7c36250dd090d89b075cccea1f0c5726..c7ac09e8a8e6913ae0d2bad92151ac7e3dbd51e0 100644 GIT binary patch delta 798 zcmV+(1L6F_2E7K5EPqr^GHXUNGI>r^bxTDxR(EwtH%w1cRb)p(Zb5o5Zdg=kS2kl& zW;jqVX9`nHT5KzFNmP1taCB2>Gc#;RMl^3WG-)?ARb^-~Q)z2sO)q0%T4h5-Sqd#a zAXqXrH8D9LPg*l(NNRIwX>l=ZNJT|jMs!+8QgAS8WldUbXn#mlb2w^ZP&8{oS}{~v z3NKJKPcuPfQ%!YlD@u5IXE0E1Q(9(MM0G`acsFrNbz?zsW^^x1dRKH!3N1b$Bw~AN zZBZ>}a%Ew2Wguz_ZAd{^R5EB*aAitJZfH_xSxGN>Pc>L_O;|WoGGR4(LUm|rO?gx+ zG-EMPQdwkVWq)o{QdD|%Xj4H(aB($8Rthv?V_{51F*R>@OjB4>NHJ+JPEk^43N0-y zAa`a@S!-iiRAEt1LU~$caCb#dY)NiyR83WJO)^$gVk7WyxiuF+!Wi5_5;QjSM?U< zzI+?%c7Je^EBDc$f9KmcYwuf^r>lA<__OYTWl;fbt)D#mbsm&%WqO-6E_r+(%v5{Z zt}u4k*d)sRt+-7z@Mwx*xOD8r80TP(Ff5vGm90^~?HzL@;7~r29izDm3ZM8IzzOkq zR*}2tJ&(rR@+ED`#oyXq0>1jBp$TtEC3`twAb)k$r&CL0h!iP|OXc6V|2|~RUSvc- z--X_3%Kc+q$CCO}@oKk}0*#~+4{6C0Opv1aN0AWTdJooqSD`dY+Mw%u5sEIdI)>Tem>s}v6J c85bvZl#ko~y#p&j0b*1(50T1$mwv}z8H#{V!TFJnt(N-`^EGeS*mS4>ZLFHJ;7ZZ|b~I4>_xbZm4&HB(f0 zT2OUTcM5fOX=QOkacXNuYfW@ecWG!@L}XT3O)qe2ML1P#Swv)3Ni}IXLRL0uI0`L3 zAXqXrH8D9LYf*YwS}#j#by90IVrp|$YBpk3PBKSpXJ|E4V}D9hZYxD?MPg-9c};mu z3Sw?}Rc293dR2E(cW!2CICoBIY*9!#Q({m{K{;hpPckoNZ#il;T6b4t3N1b$cr9mg zWnpt=AU#|yCtxXhAZs)&3SnwEIcHU5cSu?`XGBGMWlCv8HFae&Z(~F++X~rC~2NrdfRSGCq1vDZ@viS9B)AKn|sVX?v*1zt&?PFYs1KwjSD<{X`0Pb=S zxUm8bNoV1ZZ0z%6H553)iYV1C_Wrdku$k52w*rY&RNJi1sU&uK*pAcS<+KBQ!P@Q9 z3cgdXn}7H-dsLYXx4MkNI!(!*rt#UBBWPN_s1d8aoE3t={bF^3YTBX0$c)jK+6qk?MqXXzMqa4gX`bTFIR zo~F~E1Ib%PJdR;^x*DWM*@1p54rbP8#fDPgPk&Ow@#t|XS>VThT#l8xWVE)>BVX#y z4ZIWvW%)1+{XgMmzZl*m3;R91=|okA?2>Pp1lEBAXLl)jB#!Kyfi;$3V8g-JkDDzh-I`3#Kqf1iu?9Zkokc0a6_RrTlS@#` hNE{Ps=8h?dXTYATt!*}($tf3jNUwVSJZyjgsC-dnP*DH? diff --git a/secrets/toot/otp-secret.txt.age b/secrets/toot/otp-secret.txt.age new file mode 100644 index 0000000..4353420 --- /dev/null +++ b/secrets/toot/otp-secret.txt.age @@ -0,0 +1,10 @@ +age-encryption.org/v1 +-> ssh-ed25519 62JccA hYLNjdUSu6k/3UWmZ8KUWGgp8oCKg8mXuWbssRJKNGk +bixOLSjVKS4HCC4BpH3FVioqfrZFKu1gU3CrFR5GLxI +-> X25519 SPjyPzWZhxysp+orn9MRLbMgF0bmGJrCyEhwYuGwfA4 +ar3h3erVZheWkRgd4si/LFKrJGhsxFNvP+hpcX4UAyA +-> ;>8csh04-grease +2MVNSFMb/p8+CPGD6yJypa3hAXylVl9V805WrBXP8mGy1AYrg213xqiUKhHp93BB +VuT7rcCaurSxmusUwAoflUowUZ/bWBn/ +--- QzLGsIO6xVPKIxS0kKn9h6yl4tx4jGHgDqKHR/WtCF4 +e0 AiΉ xy2INCISPf rpN8dśF,ZP8jcHRri}N h+x.6i9h13dž?'­5!ѵ͸Иu \ No newline at end of file diff --git a/secrets/toot/postgres-password.txt.age b/secrets/toot/postgres-password.txt.age new file mode 100644 index 0000000..e56e3a4 --- /dev/null +++ b/secrets/toot/postgres-password.txt.age @@ -0,0 +1,10 @@ +age-encryption.org/v1 +-> ssh-ed25519 62JccA QhhGF5N6sMP+P3IdUpmJzNRz2Hm00ZncbuakeU8iQU4 +YF/OzLaTwVHF6TAiQ0DS62T4YB6mbzwGUBKiC57tttQ +-> X25519 Pm6IdBMnfg2dXyShGK/rab40kgaHntQl2i1+U6mdXDk +juv9BOJ30uI4i86v1FK0mD2m09FO1H6fgBS3Hd4LKc0 +-> ?U`0-grease +tBHyO/6iUm7Dce1vJeez7ojMHxyBtgBCX/GoFkvZR5MbC0L0lwDaKYV/iNtyI/mz +lX65tP5ZM0RRMb8OduMLOtd0fGz0SO2CwlwyVbMcYptJoFvH2Nk +--- 8StTTi8cIRWmha1obVORyGBiSga4pIocUrKMiNHPIEk + M\ 0me AfL>4}2^vkP#XR \ No newline at end of file diff --git a/secrets/toot/s3-secret-key.txt.age b/secrets/toot/s3-secret-key.txt.age new file mode 100644 index 0000000..cbeb244 --- /dev/null +++ b/secrets/toot/s3-secret-key.txt.age @@ -0,0 +1,13 @@ +age-encryption.org/v1 +-> ssh-ed25519 62JccA 5pH4eHN72U1/YuyqlT8f7+K2LflVAcSmdhgcYJaEbA8 +h6Psi0r7rQ3vR4QidV31ooOQDSz/jDU/JONG+v7g/nY +-> X25519 wv8cuge1iRgd/wBUDPsEIxveR2/POc64KKS7l9vGSjc +rqcKowLY3seymydklTmQoLORb3H47Oqmg15hmu3Q+UM +-> ;=-grease \K*OpV +yJ/JvmkgmjspPcq5QckIB9zgSbHVPHhGUnvAWDlp4l8DJPFZfyj+u43eAr5z2q08 +I1NF/kRRj4rdinLFRlAI8fKCQj6ifcZ7vg1fe0CB/QRTx/4t6ekJp05z/wRP7ZLz +vw +--- sUj+V1ze8uxcObXJOPYsk/F8bz72vUWrj7VM9BLC478 +h(ڤK^-㚂QQͯD@`l! +ۀ +* \ No newline at end of file diff --git a/secrets/toot/secret-key.txt.age b/secrets/toot/secret-key.txt.age new file mode 100644 index 0000000000000000000000000000000000000000..4a43a23228e97fe70e1575d3af293bf967eb863b GIT binary patch literal 545 zcmV++0^a>$XJsvAZewzJaCB*JZZ2EJhR!T=hc3D+Hb68bl3N1b$F(F`fPAN<+XL4m>b7de|c_tt= zWl~;!J0M(SAX$7xDQyZiNJ3{hb!TRDVPa4-S3zq|Hdj=7PDV~oG;nZrIbu|Lcrj)% zNoGw_Hcm=%X)tVJLpe%Sa7|DvMngGlR7pY#F=q-bEiE85XKGF~R52@MNkL&&NkuPJ zY;bROQfWwKRbpl3ZdWmO6`>caBT3!HKG+2S5Nns- z*%qFQ3tQGiIHbc8A4!Sz>YV+uR7;5bhux>2oRNnvqFLj02wcKo`3n3&Np_@xTu`HK z$uu%EsTTSeo6(Ya*BCKJVkyzsgG}JCp=-9MKzuwz5Evt7@f<&g6Z`Ewp4Zh)9Uhnt j9Rse6jgIV^h5N~Wr0MaCkn+(%u8ei(HS6Z~DWmg3G1 literal 0 HcmV?d00001 diff --git a/secrets/toot/smtp-password.txt.age b/secrets/toot/smtp-password.txt.age new file mode 100644 index 0000000..121a7ae --- /dev/null +++ b/secrets/toot/smtp-password.txt.age @@ -0,0 +1,10 @@ +age-encryption.org/v1 +-> ssh-ed25519 62JccA CMVPtLHq9uZiwxGStO2uG2EjdIsDtT8EBpg+FqcpwRk +BdpqFObr1lIpFSI8JGbw2ZY7ytCzHJbnlcG1inENwC8 +-> X25519 p0bB1J+ilWsouqw0WfzUShDHdHYE4rDYypT8WIhx12k +FnQGRuclUZQyv6EgXGS5whj0oQ7cXuWBVPb8SNYRFrE +-> yIy>EDE-grease eYO +;!yF] cv#J vMrf +XglB4bN9hrclLT6HDgyggakuIg +--- hZbvazlSkllx3S//GGiCiKiFzIqpczGoyYutfa+ACBo +(Eg.=i +(u` "Qd@׽+[eZ# \ No newline at end of file diff --git a/secrets/toot/vapid-key.txt.age b/secrets/toot/vapid-key.txt.age new file mode 100644 index 0000000000000000000000000000000000000000..c4c74fcbfd0440df4c582e6846c5bb4b0f69d37c GIT binary patch literal 376 zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCSPGxADKc2saKj4<#@ zPqFYduLukF%ymsO);9_$P4n=HNGeUVaLji0F%2p)GBYoA&*uvE52>ii@G}nyPWG=# zcP-EN4=AYe$;>aw@$*++4Rtg2jRe^i0kKHmG&|ocGpy7n-`7LCAl0lW zG%O;ou*z89v)H68%hcQ}q|(nX%stp6JfADVu_`z@CCIhJE2+$^#4*R)E3(8XIWIf2 zqBP4m#4+7HH`GnrBGOOWG#zAvua<6lQEFmwDpzt*VRmw5HkYohu0lj`kiMm1MYxMm zg-c#mzPF`$c4k;{wrRR=PGyBjhJRSGX>xf^L7r27HrMh^{m;_{IS#}uIB@E*yF+hW zmCoYb#z3w#-`~MoU4qu5p8F@uVo}9o~)IWPB~tj z`EbC z>t@?!oRGat^JajK8NFUyZL<-ASYgepm&wD1@s%v-?rSB@)y}x0Qf5*^RbUQqqxRRa z;80w2Xm=~|5ro+8Tq#EEX^_u#fUZJ?Fi6!}>zaX^rG03^*W0qa-lSd6xijhd9+yoM zJ~{WbMECG=TpjTn(V*~7qSeLQMgDPd$1Ui%q8=8khWR*#vhHQSAB7wk)TQ<`qwkL~ z=m#l^BU?E?h{jxM*ky(e>0mF;rsfFcv1|u17>RgQmR8;s#A-SXYLbpc51l{00xZh0AwRO^#nbapa69w_0hPfOMcR>?VgxRQ#45@o#V%{<^FAm zR~kh1B3p7$-%w=2UAO_Z7@Qh>km>OyYOywGkYYG!b_cXmj@iCS_v~!ixzjLI5H*E9 z%BB^N$KX_f4p;B46FZ#mYpiD#yLd&QCZCc*HtK`oxUP31DHJ}|%Lc?xwSGErqRZe} z>@=bS%t$;_oFYiKU0WPjcWQ*PR#G8u3`J#IeZAo^(H91u74B;!ss;hG>J7CN@p^M^ z7mn3x97V8=d0OX`-)rRp9aU}aPS9bnN&%P;iERbN$obloOD2zlgK!;fRVZ&&U$2t_ zx~|nRcgPaHuR+NKh0Lnv>`gmWsdZd4gA|fyUyaeMz^yWYu0oP-T%0yRMfG7Fn4C-J z^urZQ{j}H>;)NVtqD+D|70w0H6_U-bdD`!L^|9V$6;df?mB&MLWTP6RQw|bMb+)*0 zFf3g*8FQn+Cg_>Al%;W>(g1fbsBlC+w->8!!sn6bh!X$?e&gg=_v; zHbFf-T8Y#J**dE0MjJ15UWX@D9xn)o_3A~2MCOvH;D$~R2)R~(2iH{K5}_hPh{xjW zd6yp}WZ#%peo<{I^JFU7i(we(|GT%-|6k;8Yj6~kS}Zr1U3hHQ_;fz%pgRkAmmT>_ z7;yXaO4=Hy16kIv>>SD9fvIIR9F2}%41%QXoy#eePfbT!}6!z_Zz47mF ze*A3zy-$AOA^*eG(+@xW%U^tp`uw{OSMUDwSFgS`{OL=t+&#&se^y`mvi~FerRDDF zzy9X$(W~Em?Q`UNZ@&Lw2Je3_zP^9^ou3RJK4JXycmMdy*T42zO?|(4@~cn$`0W>d z_742k>wo*m`3&)cm#L>7y!i7s-+1P=ulzyy^>078eCHdV*naW3KSI!h>+|@306Z{K AqW}N^ literal 1663 zcmZXU%j@if0fl`arGXX{7s8b?+Kn*$OfpF(6A-z1&Lope9+T&6G_T3~ok=p|LS2?_ zDk3gaq@`CVu4|zS-RMHQP(kXV3pWmS;ZR+L4wRD9<Ny^1kCLQlMRF(l_YEnVWAtymmZ3 zSyns}ge5Ks%X}``eiPbfHPtbV zpO1+Wt4vyU(sh~-={r}Q?Ngi3VJh*kDltkd8&ga#aMW{YIJS~_ed=hoNSB#Tvw&C` z2oo+)QJ;!6e^@B=>Y_@9V2Qr9JNF_7vwOS1)HLR=)5;ZH8{>>vQSiXo*tFT~@(QaV zj_}|V8z2}oOIh(7<|MZZ1VjxL=!+o&0$P7hN^9cePY4Re_<>i)x zqJrHAV6`MTgN303gfx7>YMgY6=F_3CuG37;AF*hLF=H$DT$*aO#tO+@Iv8P_IzH;`4I#66F}L-o#u!FVY|8)`C1$IGtY{%=uXTOnRt&{* z(9Ve=+~D+uTtxHb@{ony9ZgcMnrqRF$`LB*=BAgp?$KC9#Tw~})~_)=nPbRmHPRxU zwe5MZcwn6!*Dg~B+sv?75ufaKl(q9N>FlNxWud?!5wSG(aFWsM*}!-L19E1Nw&(lw z&<|%QSo->q*v^0rzF<=}9o^pMREtEEs6=W2qy|MUmaI^AUy*Se?G1Q&iqGmI0o5+1 z<%TO<{eqrd?v5rm0x00*Y-8?fpnGt2I*3VSDF?_5Qdlf z1NDP9`~RnPSvA=(hKiD$+Ey{LKm|2(v2Mj|GoUAPuSR0PiF^tz44~1EM3qIysF+0M zGGC)jTX~?TN$GY4QX8x-Q<`KjsLFo$kK!t7L$?cOYB>A(lTQplElUcG(;np+jk>!W zqNWAcAa_hKJEAEiY7?v4dcmTw4Uu9mQ@(M#4xx@A>nya^6@Uw?W<1f(^|+ za;%YE9p>hFxDa}Vo=R{WsM1y_kCDOC7G-H(+7nu=09RL6GomM?OO*suE_WlB7v`nY z5)+C=)1?U6&`M;N`2)1dd=+@}0sQMfe7gPTpYOf(_J1DXjC=q6V-NlAztETT-FH1z zfA?)1zxa=5KKZD5ntT1H&wcj$FTeF${m}Wnpt=AU<46Dn=zBcP%R{Q(-9}OA2R0NHAzmS7CKnQ$$c@WM)Z6W;ahlRzqWT zQ&2f%R%U83Pk(P|Rc3B=Z&x*TOEzUzD^GG|F;qo%c5PZoZ&z~)FHm(xRc~;1L{VZn zHAhoaGEOlx3N0-yAVyM0Gh$*zaAGiSFfTA`YeaN&Q*KRJcT+HPNpMkiG-Nqvc62pR za8NWb3PfwAp99_1$#sEH9Ie@#@nc$ZvaN)yLMh|Gg>arrrs|S9l=J|ETtjx84O;6; zs>0RYuBM|ruLw5U(VAwwuZw@5!B^kxR{bjXL(&}5ip~%ql64X0?Om_pvV^K1DLwhI tV>f3C84UgwP%QEA%v|3BeL$pF)K!rAuaZ0LotgP026o?(!d^7vR{C&GzH0yg delta 418 zcmV;T0bTx?1jGZ7EPqaMS6XOeG&gQCX=H10PDU_gL_~N}Zc})1R#il5Vq;G+Z!mc^ zLQpY!a|&2^R(3frIWl)*W^Gn#OlxCdP+>A*GjvBYQ*~`ILQP?4H#SskcWYNfZwf6w zAXqXrH8D9LP*GubRc~5SFHksdWNu+=bwN&PL^Lrnd1z@lOMg{zO;t`xaY12fNOMX?3N1b$buDLd zWnpt=Aah*`YEg7*cr|f)XH#uidO~3_WoHU4EiE8PF?TdHGGT9ed1_=>Z(=faT2w|z zb5Lw-N?LYQRew)bQ&~}LL1r~FO>{U4X4H(Pqqy15laFdjF;($k7ys1_)->rk14K8K?uNirDiu}Bi?cwO!wb35v7~$M$Ra9e3>B~B|U>}8hNr;L_1-`k{7spf*Zb`KyNi)n}buwt@jo&5-rA8 M8Vt+YS_ETx?a0HSo&W#< diff --git a/secrets/whale2/valheim.env.age b/secrets/whale2/valheim.env.age index 56eeb2a..c11c710 100644 --- a/secrets/whale2/valheim.env.age +++ b/secrets/whale2/valheim.env.age @@ -1,10 +1,10 @@ age-encryption.org/v1 --> ssh-ed25519 /EJXvg zqgNJtsJoogjGP75yueFFWd3oe0H64W5CQcujNCWZ0M -cVeKmN0jo/y7n5QS2Dp4U0uxK+jGwlQnwXNxR87z020 --> X25519 J2MeXbL+kGLV3MePB1RMphd7XUfAiL7BTfRWut5lkTE -PlaRjS9QfL0R1wTx5XJNhjOn2PCG/6QIT3x8I5QG9wo --> |#-grease t|Z9XXy p:XF -LPPVfms2cH4f51GHS7rSwzBOBQulDAANNYGwl22AkZfSNHotvpHdguuJ0S1D+aEj -d7jlo/xce10TcNJwKYNeTn775g ---- l2P0/sNogMDU0AmwSuK8BPJnXTj3a7jwwQ0P7ho8Etw -52F4bC涹&iK/AYx&ԭ/gQ&zIg$dmd \ No newline at end of file +-> ssh-ed25519 /EJXvg BJZrrIl9HdCRVcGbolryOYl07K/Af4lwdo0kcdfi1nE +Z/zOV6v9llrTCguPg2pFSmJFFlY2Bv7rLYF8ynHT+gA +-> X25519 Mxyf7SL+faoCveud/lCQFcjyKMNxTnKsqwKTbznaPic +oDSnX4u5ked4Rfnt0giv1MQKPNChuvyd9hqnPX1JPTQ +-> 1*T*F|}-grease '`: I"ixoC k~b=\i%m mPT2XC +E3KZgVKf5pW4H6o1lQcxWTFNL7M1BBIYjrGO5g2BAEXJRi4klfzRL9DwRXrs2/Rm +pJHAEuTpdD0j1JegZpB9ObocIy6UuL+/Ng5yDQk +--- ODMxWjzAalxE3jjTHTest+r6B0tnS5xKScTzzAbEJgg +G5s=^ؖsr)qך"4p3KvQĄ6@0} \ No newline at end of file