daniel/dotfiles
1
0
Fork 0
Code Activity Actions
dotfiles/secrets.nix

137 lines
5.4 KiB
Nix
Raw Normal View History

WIP: Play with agenix
2023-02-05 16:51:04 +00:00
let
Pallas: init system
2024-11-08 15:16:13 +00:00
user-daniel-Styx = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA1UfCIu7jUe64iQmp2UUyAgqZ3IYdMOo/Me6hRTnKoG";
user-daniel-Pallas = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOg47WuNIBJ5h44XU2nzlW96VZuxUhm9ow1xUK5xDD9i";
WIP: Play with agenix
2023-02-05 16:51:04 +00:00
tanker: init system and consolidate attic and sail
2023-06-21 12:21:40 +00:00
system-tanker = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILpnogLd3Ttmz/At0dXveaG1xF37vV7lz34ojDTIuCOi";
mediaserver: init
2023-04-13 14:45:01 +00:00
system-mediaserver = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDlB0cL5CtTOyARWSE2yUsNU4JHUPmr71710mZHzsmbX";
argon: init system
2023-06-07 18:40:27 +00:00
system-argon = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPP9ygczyi6g8abvj1I0eAj7N2Rli9UMlkC8VT6SnWLU";
neon: add new system that replaces weather-sdr
2024-03-20 23:23:44 +00:00
system-neon = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA5Ht4KaRUvuGFmYLznTkVSnn6isjrcVplz1kKWkrnRQ";
WIP: Play with agenix
2023-02-05 16:51:04 +00:00
Pallas: init system
2024-11-08 15:16:13 +00:00
tanker = [ user-daniel-Styx user-daniel-Pallas system-tanker ];
mediaserver = [ user-daniel-Styx user-daniel-Pallas system-mediaserver ];
argon = [ user-daniel-Styx user-daniel-Pallas system-argon ];
neon = [ user-daniel-Styx user-daniel-Pallas system-neon ];
all-systems = [ user-daniel-Styx user-daniel-Pallas system-tanker system-mediaserver system-argon system-neon ];
WIP: Play with agenix
2023-02-05 16:51:04 +00:00
in
{
Styx: Use agenix
2023-09-24 16:10:08 +00:00
# all
"agenix/hosts/all/nix/netrc.age".publicKeys = all-systems;
tanker: init system and consolidate attic and sail
2023-06-21 12:21:40 +00:00
# tanker
"agenix/hosts/tanker/user/danielPassword.age".publicKeys = tanker;
sail: wip acme
2023-03-05 22:02:49 +00:00
tanker: init system and consolidate attic and sail
2023-06-21 12:21:40 +00:00
"agenix/hosts/tanker/acme/credentials.age".publicKeys = tanker;
tailscale: use agenix
2023-04-04 13:05:39 +00:00
tanker: init system and consolidate attic and sail
2023-06-21 12:21:40 +00:00
"agenix/hosts/tanker/tailscale/authkey.age".publicKeys = tanker;
mastodon: use agenix
2023-02-05 19:32:19 +00:00
Update deps
2023-06-23 18:08:22 +00:00
"agenix/hosts/tanker/msmtp/password.age".publicKeys = tanker;
tanker: init system and consolidate attic and sail
2023-06-21 12:21:40 +00:00
"agenix/hosts/tanker/atticd/environment.age".publicKeys = tanker;
matrix: Switch to oci-containers config
2023-03-18 23:54:53 +00:00
tanker: init system and consolidate attic and sail
2023-06-21 12:21:40 +00:00
"agenix/hosts/tanker/fedifetcher/config.age".publicKeys = tanker;
weewx: Move configuration to agenix
2023-03-25 13:08:09 +00:00
forgejo: setup actions runner
2023-09-12 22:00:21 +00:00
"agenix/hosts/tanker/forgejo-actions/token.age".publicKeys = tanker;
all: switch from tailscale to headscale
2023-09-21 19:38:44 +00:00
"agenix/hosts/tanker/headscale/dbPassword.age".publicKeys = tanker;
"agenix/hosts/tanker/headscale/acls.age".publicKeys = tanker;
forgejo: setup actions runner
2023-09-12 22:00:21 +00:00
tanker: init system and consolidate attic and sail
2023-06-21 12:21:40 +00:00
"agenix/hosts/tanker/mastodon/databasePassword.age".publicKeys = tanker;
"agenix/hosts/tanker/mastodon/smtpPassword.age".publicKeys = tanker;
"agenix/hosts/tanker/mastodon/otpSecret.age".publicKeys = tanker;
"agenix/hosts/tanker/mastodon/secretKeyBase.age".publicKeys = tanker;
"agenix/hosts/tanker/mastodon/vapidPrivateKey.age".publicKeys = tanker;
"agenix/hosts/tanker/mastodon/vapidPublicKey.age".publicKeys = tanker;
"agenix/hosts/tanker/mastodon/extraConfig.age".publicKeys = tanker;
webserver: rename to weewx
2023-03-17 20:58:31 +00:00
tanker: init system and consolidate attic and sail
2023-06-21 12:21:40 +00:00
"agenix/hosts/tanker/miniflux/credentials.age".publicKeys = tanker;
atuin: init
2023-02-27 16:51:39 +00:00
tanker: init system and consolidate attic and sail
2023-06-21 12:21:40 +00:00
"agenix/hosts/tanker/mosquitto/passwordWeewxProxy.age".publicKeys = tanker;
"agenix/hosts/tanker/mosquitto/passwordWeewx.age".publicKeys = tanker;
nitter: Extract from webserver config
2023-02-13 18:44:04 +00:00
tanker: init system and consolidate attic and sail
2023-06-21 12:21:40 +00:00
"agenix/hosts/tanker/anonymous-overflow/config.age".publicKeys = tanker;
Add rimgo
2023-03-05 18:22:15 +00:00
tanker: init system and consolidate attic and sail
2023-06-21 12:21:40 +00:00
"agenix/hosts/tanker/invidious/databasePassword.age".publicKeys = tanker;
"agenix/hosts/tanker/invidious/extraSettings.age".publicKeys = tanker;
proxitok: init
2023-02-28 13:55:57 +00:00
Update deps
2023-06-25 10:05:52 +00:00
"agenix/hosts/tanker/linkding/environment.age".publicKeys = tanker;
tanker: init system and consolidate attic and sail
2023-06-21 12:21:40 +00:00
"agenix/hosts/tanker/proxitok/environment.age".publicKeys = tanker;
system: init attic
2023-04-04 12:35:49 +00:00
tanker: init system and consolidate attic and sail
2023-06-21 12:21:40 +00:00
"agenix/hosts/tanker/synapse/extraConfig.age".publicKeys = tanker;
synapse: support sliding-sync
2023-07-24 10:27:16 +00:00
"agenix/hosts/tanker/synapse/slidingSyncConfig.age".publicKeys = tanker;
tailscale: use agenix
2023-04-04 13:05:39 +00:00
tanker: init system and consolidate attic and sail
2023-06-21 12:21:40 +00:00
"agenix/hosts/tanker/mautrix-signal/config.age".publicKeys = tanker;
attic: add acme
2023-04-04 20:05:11 +00:00
tanker: init system and consolidate attic and sail
2023-06-21 12:21:40 +00:00
"agenix/hosts/tanker/mautrix-whatsapp/config.age".publicKeys = tanker;
"agenix/hosts/tanker/weewx/config.age".publicKeys = tanker;
"agenix/hosts/tanker/weewx/skin.age".publicKeys = tanker;
mediaserver: init
2023-04-13 14:45:01 +00:00
# mediaserver
"agenix/hosts/mediaserver/user/danielPassword.age".publicKeys = mediaserver;
mediaserver: add tailscale
2023-04-13 16:16:44 +00:00
mediaserver: try mounting certain folders via SMB
2023-09-12 12:43:48 +00:00
"agenix/hosts/mediaserver/smb/havenCredentials.age".publicKeys = mediaserver;
mediaserver: add nginx
2023-04-14 13:20:51 +00:00
"agenix/hosts/mediaserver/acme/credentials.age".publicKeys = mediaserver;
mediaserver: add tailscale
2023-04-13 16:16:44 +00:00
"agenix/hosts/mediaserver/tailscale/authkey.age".publicKeys = mediaserver;
mediaserver: add openvpn
2023-04-13 18:56:25 +00:00
mediaserver: wireguard wip
2023-04-13 20:46:32 +00:00
"agenix/hosts/mediaserver/wireguard/config.age".publicKeys = mediaserver;
mediaserver: wip tubearchivist
2023-04-20 13:02:34 +00:00
controld: replace agh everywhere
2024-07-27 21:49:54 +00:00
"agenix/hosts/mediaserver/controld/config.age".publicKeys = mediaserver;
mediaserver: wip tubearchivist
2023-04-20 13:02:34 +00:00
"agenix/hosts/mediaserver/tubearchivist/environmentTA.age".publicKeys = mediaserver;
"agenix/hosts/mediaserver/tubearchivist/environmentES.age".publicKeys = mediaserver;
mediaserver: Add aria2
2023-04-26 11:53:36 +00:00
"agenix/hosts/mediaserver/aria2/config.age".publicKeys = mediaserver;
unpackerr: init
2023-05-21 21:14:53 +00:00
mediaserver: add recyclarr
2023-10-08 10:49:01 +00:00
"agenix/hosts/mediaserver/recyclarr/config.age".publicKeys = mediaserver;
unpackerr: init
2023-05-21 21:14:53 +00:00
"agenix/hosts/mediaserver/unpackerr/config.age".publicKeys = mediaserver;
argon: init system
2023-06-07 18:40:27 +00:00
# argon
"agenix/hosts/argon/user/danielPassword.age".publicKeys = argon;
"agenix/hosts/argon/acme/credentials.age".publicKeys = argon;
cfdyndns: init
2024-06-12 07:59:24 +00:00
"agenix/hosts/argon/cfdyndns/apiToken.age".publicKeys = argon;
controld: replace agh everywhere
2024-07-27 21:49:54 +00:00
"agenix/hosts/argon/controld/config.age".publicKeys = argon;
forgejo: move runner stuff to dedicated module
2023-09-14 17:39:10 +00:00
"agenix/hosts/argon/forgejo-actions/token.age".publicKeys = argon;
mqtt: move all to argon
2024-08-09 18:24:24 +00:00
"agenix/hosts/argon/mosquitto/passwordWeewxProxy.age".publicKeys = argon;
"agenix/hosts/argon/mosquitto/passwordHomeAssistant.age".publicKeys = argon;
argon: init system
2023-06-07 18:40:27 +00:00
"agenix/hosts/argon/tailscale/authkey.age".publicKeys = argon;
Updates
2023-06-10 18:48:07 +00:00
"agenix/hosts/argon/adguardhome-sync/environment.age".publicKeys = argon;
ups: init on argon
2024-09-06 08:54:21 +00:00
"agenix/hosts/argon/ups/primaryPassword.age".publicKeys = argon;
argon: init system
2023-06-07 18:40:27 +00:00
"agenix/hosts/argon/weewx-proxy/environment.age".publicKeys = argon;
weather-sdr: add system
2023-06-14 19:55:35 +00:00
neon: add new system that replaces weather-sdr
2024-03-20 23:23:44 +00:00
# neon
"agenix/hosts/neon/user/danielPassword.age".publicKeys = neon;
weather-sdr: add system
2023-06-14 19:55:35 +00:00
neon: cleanup + tailscale
2024-03-21 20:23:04 +00:00
"agenix/hosts/neon/tailscale/authkey.age".publicKeys = neon;
ctrld: wip
2024-07-27 10:53:55 +00:00
"agenix/hosts/neon/controld/config.age".publicKeys = neon;
neon: add new system that replaces weather-sdr
2024-03-20 23:23:44 +00:00
"agenix/hosts/neon/forgejo-actions/token.age".publicKeys = neon;
"agenix/hosts/neon/mosquitto/passwordWeewxProxy.age".publicKeys = neon;
git: move repo maintenance config to encrypted file
2024-04-14 11:22:59 +00:00
mqtt: move all to argon
2024-08-09 18:24:24 +00:00
"agenix/hosts/neon/mosquitto/passwordHomeAssistant.age".publicKeys = neon;
various: updates
2024-07-14 14:02:19 +00:00
"agenix/hosts/neon/deye-mqtt/config.age".publicKeys = neon;
git: move repo maintenance config to encrypted file
2024-04-14 11:22:59 +00:00
# Styx
Pallas: init system
2024-11-08 15:16:13 +00:00
"agenix/hosts/Styx/git/maintenance.age".publicKeys = [ user-daniel-Styx ];
# Pallas
"agenix/hosts/Pallas/git/maintenance.age".publicKeys = [ user-daniel-Pallas ];
WIP: Play with agenix
2023-02-05 16:51:04 +00:00
}
Copy permalink