Pallas: init system

agenix/hosts/Pallas/config.nix

@@ -0,0 +1,20 @@
+{
+  age = {
+    identityPaths = [ "/Users/daniel/.ssh/agenix" ];
+
+    secrets = {
+      nix-netrc = {
+        file = ../all/nix/netrc.age;
+        path = "/etc/nix/netrc";
+        mode = "444";
+      };
+
+      git-maintenance = {
+        file = ./git/maintenance.age;
+        path = "/Users/daniel/.config/git/maintenance-config";
+        owner = "daniel";
+        group = "staff";
+      };
+    };
+  };
+}

agenix/hosts/argon/acme/credentials.age

@@ -1,7 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g NjtJmBDtdCBSzrcte5NuW3yQ7eKX1n+9Mk0LIOgrgjY
+-> ssh-ed25519 MtGp6g ybHJrXd8EYq5Gg2Omji3TeZPMPVztf+9uGVCsGrWgRE
-vwVeXfhlIWi+uWbHaOiV0hAdz612UjZ4je4MLsEIEyg
+JqbCZT+p4giCxcwtkf88jpBZSiEsrF8WSJixrQW0em0
--> ssh-ed25519 1fcLUQ /adnDLBjCgvkuzD9ZT1n0eXUgZ/Z3vFAWY6MxZOvZ3Y
+-> ssh-ed25519 VjazQw yqFtXVPpUgzkf3UT4CIbAT5f+vRitktHb9b1BWESYhk
-fuKB1k98WEMLDOqTVkakt+L0OQ0PThkpQnuP69AKeC8
+9rRAMQUprMLwZt4Xx5F8lb7C1t0SM95d4/mqrKRU2fk
---- 5pdouRi85yXSpj83M2aSKg4xYcEcsUsX0J+FTGs9GlM
+-> ssh-ed25519 1fcLUQ GV8A09rcGnV4R/WxbEBOSnaxDIPSwW/P70PUHWpvzn0
-)ïG`¼Ã¤L“	.(’–×±SsýpyãIЗ~ ûˆ¾)GyôæÙ“`èUÝÁ`«ÈVÛ쮈<C2AE>É]Û_ƒV›j“'ž#¸¼‡V?l5(<[»žýH@Ë[žÛ2Û<>x
+NeKVNl15DyOI5YD8Kz3T3b1oD+uTJagJQFtCwW3vSuw
+--- +zQGoYwr+eYiwlqpdVzZWyMHE3Mrh/CnlGLV9MI2yik
+ÌcO£¹]P _
+‚ºNŒ¼ªcæ3<*4
ˆ†°›¼Ô@­Íü8£»‘íëu&2
ï™8º?©"ùê
#éäÇ”n²–TáÈ2]ÒÄÒÕÛ¶ì'¥>:@UˆœÝ§_à
+c¤Œ\ª†

agenix/hosts/argon/cfdyndns/apiToken.age

@@ -1,7 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g VR/eDjL8NA1SXrxl9BoViA82jv50KRxRPAxmJKtJM3Y
+-> ssh-ed25519 MtGp6g 1Cvy0LuNEWq2Nt33WjmOXtWZYqNo+ZCsm2/0/0cvU3Y
-3NNm4LSzAjZTGe79IDgZRvKKTHuvv4iw1qioGaZ83AM
+i/Gy2E1wegwPnMEeL06ZdE4EYRwRagDKGZ3Gi/KTInI
--> ssh-ed25519 1fcLUQ 8A/Qh7uKXsZJW+ZPqcqzUUclK0kbdidUXZaQBiaSVlk
+-> ssh-ed25519 VjazQw mqUknJDvv8GYbWNMnDVE9DGi5mgdUILJKCzjjQLigXU
-grBP3+f3b6AKmPxLup8WGJAxaCzvwRO0qRMTBb6yQ3U
+UWhaNN7+1yLn1KkMCJCjqLg0qDG89PK6rKa8unB1UTw
---- EyJHui0OlOsEisaEkybG38OpEQ3yOvUab+t+W0SVQYM
+-> ssh-ed25519 1fcLUQ B6zBMWIIkIKwE3hvpMUifmlY8arxEh4sZG/W82FE5lE
-:ŮĄż,đRÁĄG«Ëmť7´bŰ:ĎáŁÉ„©+_ÝK¤‚ňľŚ-“‰'·<>3LfvĐ}ěľ5€n#ńFfÝó|ě´-{Ý1żł
+lP9Oo/LuY27uo8pgPnjZhu2yzSMHoVOnQ05kv5XX/gw
+--- qeavnv1U904xSeLm0jtGdTqMa6A3Y1wd/fxoyEF7GQY
+A’_ªOaÃâ4
E€dçÙ|½Ø—Z:Ã
+óBj>Álø%¾³¹[ZWâ.àîXüί|1κ<C38E>t;o’XLã
+gä­•]¡

agenix/hosts/argon/forgejo-actions/token.age

@@ -1,8 +1,10 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g kzyaCPBTCUDBpcyFhqpVvgL3lVMSGa/UAz1oxm97awY
+-> ssh-ed25519 MtGp6g 4PjjHgz+k4WRxwJPVogJjENzgz0Uoa7vWvMSDiM/dCk
-VTeF8kJyfRt5tMTJwbhTHV3vwd13bAJTf36YcHkhxho
+gqfTK1wjrqG4/aui7Iz7evonsQvlDBSDAmm9slAlnUc
--> ssh-ed25519 1fcLUQ kO1drlLeOatSuXRniq3cSDPzvExR0a7qOQp7U/LWKgQ
+-> ssh-ed25519 VjazQw 7acoZFjs6B2bdfrLIzGljLaZaHRd1KGwsQuE11nrDFQ
-e3yfN0tZGhlm5mrC/R4nNIv0/Zy7kKUY+S37MBNeD4c
+i6EJ1M4GhVkDT6yvEzV1UyaFfF+oKSgKcxIxbgvPDZY
---- v/Yg+IfPH05GCBARg/WsNlgI0oLGdPvS6EPblOgUwbc
+-> ssh-ed25519 1fcLUQ Lg92XSjlbQZTF69TgMtd1bOY86JTdVc1Y2InN/5iGFs
-±sHLü<EFBFBD>ñ³
+JNmEvRmIfeY2P9p+PHmi5J4I5J2uhXl9gjxpCIegEu4
-U½Ðù”ëOŒèÅš/u¬àC*!ï¬íL‹êF:†àÄßÌìÒÞ[ö·[Vçmwõ“h¢n"§9:¼FX˜¡eȺDz/Î
+--- x90NrkQiz5QNxE5KRLp+ylLBPUfofJhAihkqu194Zow
+¡Ÿ ÷YÖњŨ÷
+‰™¬¸ÖºQßÌ«l-¥ß!èÛ&&/’Ígu	(«£<ªc–fmm}£˜Þc41=';Š	ŸÙ_	¯$±D<C2B1>1x?,[

agenix/hosts/argon/tailscale/authkey.age

@@ -1,7 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g 4BgDBm/sv2v4V2fwXXwz1P1kRWt8uGVCpRPxK6gMzj0
+-> ssh-ed25519 MtGp6g RbAgD3or4AuS9uBQCDWVN1rLN1EmyI6wdKmteiv8qj0
-wQAVrNmN7nuyZpvj1DJtY8LVghtU36DYG1fHaPyEIeM
+IUA6pYMr6QfmG6Wf2VLG9a+OZ01/cEPpXV9qaUoOfWk
--> ssh-ed25519 1fcLUQ ziHtuk0jFW0ya2b4Hp9glQdBHkI1W+BhZKsWVTZaFkw
+-> ssh-ed25519 VjazQw YbpZFmW6oz0xyACDaHhDIlahG6FhZBf3HS8shPE3blg
-mvUXIHmu5zIU8iXtNX78YfuVbOh1yexyEfbB1jVieds
+Tp4B6vsyDrK7g0e3SLN/8dzbXXivm8vjwwhWVgL4Z48
---- QHvXYvPi0oxmT7LV93Gie/+z+EToHbmeTP0D0WYeS3o
+-> ssh-ed25519 1fcLUQ QKD+XZfeXPH+ajnt+6GIgrpshl0qHAw0ehu+elaNURs
-xř:żx˝<08>ń;ŞńĽZ,ü§ŠđĹEzâi:$ro`<60>gę9đ|?;Źţ<C5B9>÷G&'Ů\źĹ\@¸o´Ťwş¸;+J&¦ľv6ľSI«Žď°Qć´ţ	vŁ|$
+7UiSE9bgb3ywFZKE0aQz3H35s1rXfcc2QOI24SnMS8k
+--- xtF6wl8exOwFheW3HPzlVQygzrshRrWghfqN9lsohxc
+XåÛŠaYq›à£ƒÁdìeÔ²Ù‹ÇBÓ<42>±l
Åi6Xn.7
ƒdéTµ¶á¾¬kL¨<4C>[Å¿cU‰>MT<4D>U´¬Ûb‰tÉîôŠð¬œ"R0`’ëa¬ÅZê¢Æ

agenix/hosts/argon/ups/primaryPassword.age

@@ -1,7 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g ZX57M5ki05gFAm/cIZIiqlX1by+eosXddvWln3y4nEM
+-> ssh-ed25519 MtGp6g 2imRsNjhOvY1nhhBU3u8YRDqODdS+kUAwjNLGao/hko
-E/Ew7nB38f6RnMZMjg4J5/qFUmz2jJl11RiqEsi6Cd0
+MPn7kIGDYpNApbyHGVwwysHSwOqzO0q1+r+nFnX258E
--> ssh-ed25519 1fcLUQ 26z8R+YdIcdALuBorv2rboW25fDC7Xern/r8PCX8E00
+-> ssh-ed25519 VjazQw cqk2dq/A2M63HbsZ9Lyz46otvV7rdLmd8KGI+tdkcnY
-lr+KVKkgrU/zHg/nZAbZyzYIhe0euYeZy1kWzPK1MD4
+qN+FUGFcwNu3u7kaChlwjAAYd5D/ZrGyCXHng8Rqiik
---- rA/LWzan74b4214noRwwzrtpR1sx4NK844K8pGFbEDk
+-> ssh-ed25519 1fcLUQ urPGZSSec8wkqQas0YqdpFKBjP3twdr2ND+EXA4jokQ
-¶Ì­
ß]5Öyì%¢:ã)û6¡<>2{KyˆNGÆ.xð·ê¸\Y² à
·ü"*¼|Ì
+dfTCRF9+DQNrBGOe9i8MwQdg5g0OXVFTGeC5xcEIovU
+--- 8Yr71E4HkG/pQHAJ3Zvl9olis/KYaZgQTQfxiun3UNI
+lT+“ÑÈ°€®	=\è¥ì
Ã’nXÝ9¢E]o¢Ð«;¾žà˜=Ùéþ3+ñÔî&s

agenix/hosts/mediaserver/acme/credentials.age

@@ -1,7 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g iRhq+xP27zM8hxFGjYZJ9P7Xe1QyaP1kF5ihpVwNRiE
+-> ssh-ed25519 MtGp6g TslYTkRDSj25FMQOrAzSYNqM6imyyqpHKdGCWJvNLTo
-SV3plR7ZZcQCN3kU3kSEm/La+YkTHN9hXgguY42gCJw
+DE9FMxD9ny9f3GYVUbKpbZJM9cWWGOr8Yt1GlWtw27A
--> ssh-ed25519 Y94Yig LFR2CflAkKh83aP/Qfw1vvM2yVWeWcfmgIJoiYnQMlE
+-> ssh-ed25519 VjazQw LEqqIHKaDB0YBFxkUwVnUZsnJeocMvvMcsX4Sq0CtDs
-t8+kqMYE16Lr8Uanpw8nk+kNnHc8XW0gvNROYrgVLis
+zKD9pSYFMfpeCNi+HrXbo7k8Zilfiwfu9lhAw9Oxux0
---- acRXmEqNbQNKCjV5cqDCM+CI/I7Y9bz+CdY5WJaXX+k
+-> ssh-ed25519 Y94Yig pF3GC6c+/rFGX5iCq0UREebBC2hMKgwCFZ3NFWwDQks
-ؼ½JI-ÂÏÕ‚D>vÄžÛ¡‘õIWµÔ«_Ñiñ±7ˆ7¡_¹ìÐyñ#‡=½£×lO´¤OXLÆõ¾­†¥Ö=èæt™<74>ÉltoÒéE£ìä}Ä.bòõ6<1A>èÁ;#Z@
+ZTJqbynnlF6qySRuFbGgf76WClgPbYefd28FlcKgqqE
+--- ZK4643JvURMPzQyZydz48OahyF7K6pGtLuulwKTecXw
+¼>ááB„kKÑ$÷j÷ÿþ·Zìµ<>2’ÄqŠc´l9{dù‘¢,¶4š­·¿æ$N	Ê¢‚÷ñÿ
'[?ÎðЪGÿ¢AØÖ<C398>a+ŠƒÌþx­{)!Õ·VÄP/¢_‘‰}ê

agenix/hosts/mediaserver/smb/havenCredentials.age

@@ -1,7 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g o3i6obbEu+xEOiVh68hOWxdT7oQzYFJzbLe0hmOhWRE
+-> ssh-ed25519 MtGp6g hgrs/+ZPQgvTo5tkL37GrspmLqkueKvN8qQ1W/ulCRw
-Alxnr2A0aK1R24Lb3bhxh04SiKruH5kvRj/zIPFlflI
+yJ1TEuQJbvw5b28TXgmjR9IIWlYP4tXuN75xTGfL5eU
--> ssh-ed25519 Y94Yig Fg1UtJpAdfpilz3qojuoBoSIL63y7G+rr9XZm3Ey5F0
+-> ssh-ed25519 VjazQw hCLxWklQx8O+VKe4R2JzvGAkTZ9FxyMFLVjOSCJDvzY
-msl89vgYqM6N8sJOu4XFBC6HJbobCOuHPU0XvFLWmYY
+o/JJtdeGgLyQiEFVpvjk3CesjdFqLOgnpOXUy1427HM
---- UwH9DC4bEojsQYYEtlxz6+emautmXE7QMMv9o9Ers30
+-> ssh-ed25519 Y94Yig Y+dkE5B/jhbwuRZaARqTYDpIAjJYuNgAwoWmUbdiPGA
-E&oO*œÙ÷	Ó›F1¥ªÅÙà˜ú/ðµ<C3B0>—¸ä\ö£œ5W£b­X½Ü®²˜Fº„Á†–w¢qèGiaÄ‚Îx –oe°*’ÜÓGüa¼C—‰zsJ24,öÜYîµfvÓ
+gH3moOqu6UXQRziulHZK78qa9MahoRhGFFqMfqm9eZA
+--- sVt1+6gg63BSfFZD3037i/z3NyUIVpt8jBUPGdxedvg
+‹þxpAš6@*jÙq\Š•!¾y™ëK¨Åä]¼Ú‹h{2jô[t¥"8È6Þ9Ì—ëâjÃö¸E¹®1¸¥“ÜgLÃ×	)D‹8àƼI•™Sø¯jaV*<ù*â~?ïÅm’õó

agenix/hosts/mediaserver/user/danielPassword.age

@@ -1,8 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g Ouj3l6KdsLq0Ln8LA/sJ66eglu+FRG8tlgPSmnhtKBA
+-> ssh-ed25519 MtGp6g ClvxVMf68GZWUN6eg2IgLNIKieRKaaJL3nYipMR2LjY
-Dcd5EItfkRlGUVlaZsohLnrMgLww9QNUoVxiPUJxEXo
+ysamoU974LD0lEZu35p9SRjj7ecDZ0Cb7Qm1wmRP0yo
--> ssh-ed25519 Y94Yig asHYFSWrGakGCguEX8oUlFfHwQN7p86Z8HBbGkTpRmY
+-> ssh-ed25519 VjazQw tJTJfllayBh93IT9LmtexJwtWFx2LV0MT28fbyj7rwQ
-LFMPk8XbnmZYblFBp2kTdE8XH4KPOY18gk/jEiz1A/U
+47Mevbo6HSiKEX2ZtFsGDNO+o/gogz/5h1o/YJGG6q8
---- sHPudONMGZ8NM4jC62IAxSrxsfa7IGK1c5J/klVH0pU
+-> ssh-ed25519 Y94Yig /LnhpQ7LjBjDYqLOu5i9fvCT211uGMKNgM7J9FBVxCc
-PKÞià$ß
+LuqfZ3WpAXWEE+LxDXzflY1RgCc3j3Ayh5sF86VK2gw
-*?”Ø"<22>‹Šr±üŒ¹è-/ge.µÅ^}HùÄ8^í #LÚ1ß\7«.@—F-Ê
]/ü§plQñ‡FÒ˜IMÎI|V˜£ˆ`xÉ<78>P¡ÎØÐXú#Um,XåÑóf(
y “ñ!ûFÃa
*´†*›½Ô¤ØÀ®â&ƒu:
+--- XVd50NY+SbNwN2HPzblvXFfO9wnMFkXikT7W9UdBACo
+Êk,1ÜëFÀ-‹ÔÛ•<>ÞŠѯFê@¨¦>ï£ðhÛñ.]y3’LÞ_,1‘83-»iW†=‘uª2±dÅè:3µ¯³Âñf$Ú´¢ž'äå JW|¤=W4ΆV(šÈDq ñ4§ß#ÿaÀH͛垶í¢«»ºXPp<50><1¿y¶û“UÌeJ×Ü»

agenix/hosts/neon/forgejo-actions/token.age

@@ -1,7 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g 0SpDHrIEct2IP2y3uih/6zIflUcMHQWmOyxTC+zr9jE
+-> ssh-ed25519 MtGp6g mGPNbWd22uz7/G1kyalNotTS6T9XfzG1NUR1OxUq3xQ
-1uS4coo50NdJDnbO1SDjY/usId3trTatdWMwSZVORLk
+IicqRBgNwXq5b3/YE1I2IAu7fBtWhHi3xTtlZdkltnQ
--> ssh-ed25519 60lgJw VTh8yqpjdlj8Rbi7opqUUnI40J86KW3Qb11OBQU6qWY
+-> ssh-ed25519 VjazQw Vq4RuUpTaVFM+FKvmaXmI+xnD+k2hOT4AvaORqgRPmg
-8ElhS6xwa7mnQlUKbdj9rsjttY6MfyfXljefIILRQwY
+97yezk3Ot1riDnMVNMobeyv5xluShxx6oocalWV3AHo
---- DdN/KlzuWoVjYfxyl0GOISwbM4XyWFzQc/iLLh5nTpc
+-> ssh-ed25519 60lgJw Z5bETPVcwnojpzbidMR6ks7ksv42lfWt+Cd7fiouBhM
-`ÆÙ£ætOåÿ<Y£|¯µ^!«mHåÅÙ—©Cú6PâœËy5°@D~×®€åàokÛïÊøµ<C3B8>—jž/Œ›ÿ‡âCŠïº…}éÒo
+6H5k8fWcwYeSuMC0zGuFD5lSNisrJiKEz94X6S7MCrE
+--- GlQLLUPOXqeIBKwO20dQkk+auNWRGD2hizklQNW59w0
+”A2Ö­ò%ÔuÿñH~Û0HÏbf‰(jŠ<14>Pu˜XEn=Üüol$!ñþ“áUúI(=_a¼Tq0cÈE–¤
måÄUP¸ˆL>èZPq»}

agenix/hosts/neon/mosquitto/passwordHomeAssistant.age

@@ -1,7 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g A7lLy/9e4eGyQpmBTZ6Fw5t2jP1B5aJQ5iGUVlZZrQ4
+-> ssh-ed25519 MtGp6g ACkopfdDGjGfzvzNUAfdX/6q4amhssdkitOiGFzpKD0
-VfSOwKA+SYBfnCyuQDwXtN8z9owwdKlteXJxmIXjl1k
+fFEs+wQhFwy8ZxzieDHqPLI74ryLws4G3EMUEm+3K78
--> ssh-ed25519 60lgJw Dxs9EekvqHrLWB/M89aV0B1HxLBpbLYE8pxWx1Cf2X4
+-> ssh-ed25519 VjazQw 1U4wFXguYfJufvI2iKmbyjSXMu82P3vR84XezKIxRFI
-zb7Up1DfSBYIRXom4o53KWzC56bzLLKcscvKvtZGz5s
+M2g5tr7nRIPAKQmC7OIJERjM7ZMy/gjHgU8ZCa9O+Rc
---- y1G11ujCFt9yyOWtN5FjFGZf6QeKpZbzt8U/XZC+PME
+-> ssh-ed25519 60lgJw crGabcBMx1XeB5jtvUG02L92i0eP9o6BFityfZc4JGs
-3ýN^•¼{ü(Y§öjßPÏ<>ØrLgvÅÜæÀ”ÌøH}ãá|Ïc<C38F>¿žAÇÙ
+urjcov+jJgzG9fGSeEL5OR0ZIuCqYbZkcuGOEzlUGWI
+--- elgsgrhI/RoLwK9VukYfnskpbM8+xR7LF+7gyKjtxAg
+~ę…#Ň~C
®…„oz <0ťf\ĺ¨ĎÎHŹýđyČŢĎ»ćŞËÇJÓÚv˘m

agenix/hosts/neon/mosquitto/passwordWeewxProxy.age

@@ -1,7 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g P/pR7BxsYlzzbx8qdLj87JdT7t+yQs9Ws/s30tb4tUs
+-> ssh-ed25519 MtGp6g OuTKN/UmepTNVUfpoEXcbv0mEA0Hg8jptyMU36XGDQA
-sXfZ+YMoDaabn2ilTBs/1WQlZdjUcR9JmOMS+TN42MU
+IOaA2RA7uew+sVUQV5+Tg0PIcHViLbbegXsETvdEIWc
--> ssh-ed25519 60lgJw UIvsaU2hMN9m2V7F/DSWWFxVVp3291c+YHPzT4Q2QRY
+-> ssh-ed25519 VjazQw KAzo5gHDC4mef1GiRoIo24MPgdcl0y28wk2QDtTqvSc
-U7vqk6Uu/Hs/WXgSA0ocCZBRMguvab3Ih/goUTTdvjU
+ItvlnxrLJCPFdPUJ+sE96bAoAshr4EDbWoV3s5/0u5w
---- 9N8KkM6uNaUJuUUR7GkuoJ1oXH1yEMIaqUgIZ8M432c
+-> ssh-ed25519 60lgJw eguGe2xGXqEkxtK0k+eFsCifQaTOcoFEIBjtBZo+eQE
-ÕQ;Cw%¤ ¨4d<34>q60cêiÃI*èŸ@yå;\Õð<>Í7KÔ¢H$Í1ÿ5Oø+|Ô4˜çt|"‰!?и"˜Š•ÓOä·ß8ëž·–g{V
‘v,IUº!3kÇX6횧ÄAÚ’ƒ‰å±˜ê‘<C3AA>"¯?øó;rŠ	]×¢‘Èí<C388>áC
+YIbNT6noFETimg2TpZPFR3av+2tcJbiN03XP6n6xVsI
+--- aq4mtWp/GbjApxWpC7FD+UZLGJTBeqNinX5/72+jeCc
+þ~~É•Æ×ÛNàõsx[œR°-¡¨a	Ť†ÿ®\a6”ÔNøߘìYÙü{iû2“+zj²°ù<C2B0>ÁraÿWe›•xrZ&¨Æ*³f<j ¥âS
W¨ôµ)ðÈö‚ÔjÚ^ŽŒEä‹J³ð4žíµÓ®¿g{m<>áý·™R´bƒ¾…;¹1<C2B9>Üi|÷QלÖMé‚

agenix/hosts/neon/tailscale/authkey.age

@@ -1,7 +1,10 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g 4NcaIpSB/NuC7ak6Z0p00dcJCf2vk6FBoBPaA5AKJBg
+-> ssh-ed25519 MtGp6g /SRXo8Y2DC0jRUXsrrL76F5a5qIQnwXvH1Tl28rrlHg
-TgSMmrh/vu2hazlTD3O2GMD9zRxzyKuGRVGCPa8IN90
+10epwvFImLzD047wNj8Se3EESV4pOW0CNFfSJq5uHhs
--> ssh-ed25519 60lgJw 4xR/yHXjpKe75nrTD+iKlhHq6sdf/mQVZoD7MnHrsiE
+-> ssh-ed25519 VjazQw jPQBNKS5QJAQL5II6selDHnFW5GHlEK0VAj544dYAzw
-k4aPpXGr8oOvJSN2laDzQmK76zkVghp7+XOvOxdmKsc
++XrALGe00miVSjhTvXv1pJ9H4llSW2BVStXN+U9mMHU
---- cnnWcddEeI3oNQ/Bd1+U+t2j2mkw1j/EHAkgKj75xPc
+-> ssh-ed25519 60lgJw eAvHOdLmdNRE/SPnoC3FIvsXWOBjI5wf1T31AL9vkiE
-’…†,ÆæVÔxΣ0ù¼ani/K-pSÃöL«D¨6š<Zíß³—Ì£FyrÇ»©Ï³Æ'ðÂm³[ÿ!í¦‰QüÇ~^}
¬a¢™ËÆ…@P?k<>½ËÛz
+AJQn09j2f/fYbu2arpXjvKYZU3r7nwwyoZ0p77lBjJ8
+--- +WgjPSx8RdtmA7xPYYGK1GuI8O9BVx8RPuRyY2gzonY
+/ŽvI*¿2Ó,¡{˜ñ
+Uäi΋èX?å2äõú¿L#ÀYÉÁNcñ½IëàÆb`	Үݚ£°säÙãþ )
ƬòÒ_~½
€Tr*Oy˜îáì‰BL˜C

agenix/hosts/tanker/anonymous-overflow/config.age

@@ -1,7 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g Syn2npEWxZm7SIqePo4PQKwvORCs6iuIBJoqz+1i7RY
+-> ssh-ed25519 MtGp6g EXiZcNLJzFcIELggGQp8NKDme1aCVEumY8Vtu+U4sh4
-X4lSUiClQYOPu+FqKSR9Z0eelLGGeZV8HO4ClAm+doM
+kmgjir6zQYZMgZnlRtkvEaQ+Y7SB1TjGYfQdjQ5nJBo
--> ssh-ed25519 iO8/4g MceZJqxARIwO+v6Fd7LFNx0VMnceT+Fgq7p0LJe0r18
+-> ssh-ed25519 VjazQw e/wTsnH5iY9VD7b6F/hrWp7FXRhm8n/Nvlhwjtmy8kU
-bjj+mnl6aEh0jLvLfwIRSAMg2o9H/pSwDBJKXruf83o
+QmEQ+qi+LN3ohpZmJzt7lKSVu+cnPJHwgLFO3DNTUcU
---- 4AgZ3ACnTA4vd6gYP0FjJHJEKpME0BXweODTr7lHzXQ
+-> ssh-ed25519 iO8/4g tVy838WfPVs+Ldk1CIkf5chmdwvU0+u+KeLxdlesV1Y
-Ygº«Å$‡ŽDòi¾kI‹íq´‰/<2F>¸ý,°¼/ù•g6ˆ9A2¡èÁÐ<>M³†ÜIî—†­<E280A0>t>¬Æû•U\ò-?Çz·ìÄçXÛ*ªùjDÞ3N ´[Ü•Ê·eJ©|¡2µpô<70>±hc%ß…üˆI‚lµ0JÐ<4A>QÉð•¼åó¢ÐØZYW[µmÖªÑæ
+dOp1mLnR5OA0k8ccDjzlwxSP01dub7967wRgm6u/SN0
+--- DMq0AAi1gEV1x0ClL0NivLXy7a0O1fcvAylaBgyJTF0
+]Ý„¶–¨ {ùŠÊ(M¼S
+DŽÍÀƒ‚6˧€^*2~¶UÞZQ €6´0
¿J¼£…%á
µST-[Í­cB‹°
+F®›”9~ß™(U¹#;õ8c%þÎ(>VrŒ;Še"ñÐüÀ±BUryÏY$«ªEÚèwš¬cIfpW²¼Éßcpî5s÷‡hR

agenix/hosts/tanker/headscale/dbPassword.age

@@ -1,7 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g sSPrz6jGDcXTtpW0BmlZQxJ8luYHn/gFQ+0pVIQF0BQ
+-> ssh-ed25519 MtGp6g r5HwdEbcBxgCVWmh1luzvLZ6tbE8N4Ny70/tN+yl5yE
-9is8ct/dS+wVNZonIqhJPCqZrx95N02KhXolcv7VIYA
+pJN0X5Y+C+aVQ+QaS0+ItxllyFyn5KNjGUZinzFI64Y
--> ssh-ed25519 iO8/4g BV8tMkR4BEgxU6o09NOSXjSx/E9a3agZyxXVt98Za28
+-> ssh-ed25519 VjazQw 5DzzGru8c4WpgMTx5jPcY9X4lPV+Fh1Melxr7kVexh0
-yPOq/3wWbC92TykrjY04d3HVT74l7DGbUaCseeas7wk
+MTjS5Q/sN2sqIp+yCAbmHu2sx6q2viVPemgXyqyzanM
---- 6fuEWCylCk9MuvZCQK8fV63cHAvizVdOamzDCqSt1hA
+-> ssh-ed25519 iO8/4g /4mF2GQnaVxji/kjh7DAmqGTRhxmqUlGKXYfMjJQEmg
-n~<7E>‚S»4ØršøUðy´<79>:­£véˆ_èÁ®,Cö`^¡ò“w]Rxé¯b½ð€‡ZK’9
ÜM
+I7Mz14hIlPUKJW75I3gxvK9e2IkwD/E598oU8o7w0vM
+--- E6r1/Z2RfO7xHq9DZTi/E4+13Xoj1Zsp5lfSpugiy4k
+A±_KH<08>¬w£¸s9îortâX¦{¤LÐu\Tú4*…Ú‡¢¸î›H¶‚¥9s‹¤‘fˆy?á]{

agenix/hosts/tanker/mastodon/databasePassword.age

@@ -1,7 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g Tolhog6FRxvpRD9gALDfnoY6F6rjnCJzBE6fE48v/3E
+-> ssh-ed25519 MtGp6g BEn38C/sA+dpiVKBn3IW04W1bOlDZoQQst7skeLyzlc
-CXz3Zou6kiCAag9/eHZTtgNtuj5PpCjpxpfeOS48/KI
+d5Vsvo6hFCRJa43gDiGQEjeMv519SnfMtRWBaY19ic4
--> ssh-ed25519 iO8/4g +sY39ypBIOi+62G0ONUb42wnmw4jP5qqix6TDDRuyw4
+-> ssh-ed25519 VjazQw Dfs17hlaWMx6CYTPPBrSQl2O/8oq388xh3//QFbqNhk
-LzzxdXntTvZrZ2/5IR383cQtyd2siSGxupLCF2HTHHA
+6CragOAPN4ya43o3MzJgXNHtZ/gn3UUJqDd0dvO768Y
---- vtCHiQSA5lcRT+QYK0NN4y8rrB3pwstK3MmZMuy5nwM
+-> ssh-ed25519 iO8/4g 3KJv0GylkHFz8nc2eAPHq99sQlD6EUsrzXrDDQnZEQ8
- ú‡˘7_},Ă=ď4z‡ý6ÍŹŞ+^iű!4jb=Ňţ@O°7F"ŕĄçqŮľoőŞďú
+HkqtsDDKmUzVgb3IAVXslQz4f9s970MalUfAbKHSasw
+--- J4f7YUr1JRI+Ehv11S82+pn/krH4GX8lLk/mLBqJbZI
+»CE>¡Ê±±•‘á9tëDåR2¥™Y–¿°¯Åφoì‹šŽŠYŠ$Íèum‚åfrÉ

agenix/hosts/tanker/mastodon/secretKeyBase.age

@@ -1,7 +1,10 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g jaVroUU31NGKebNI3Z3vCY8M/1OVOFx42yLHZtZHhAk
+-> ssh-ed25519 MtGp6g zXmMMc9OPYpXY49VoY8WJJ3v+nks0jK/TlVhL1Y9FGk
-4kbdiBQODlCc5SK1cVpZ3D6+U653AUriptyxUiXkcnQ
+//UDjlmTHNIB8zvsM8vyQ9SoLX9p814FYxBoTwSR4QI
--> ssh-ed25519 iO8/4g rgHTCPQY/bVcKgPs2O+h5hR2qZqI8ZsMlNDczuIXBBA
+-> ssh-ed25519 VjazQw rz1vQx2uvbvNBL++INVNXdXs7wmPShlamSURbnJ8H20
-YQ2Nfi9N8Uf1fFjmp2YuC4u8Xt7Y9BuSvG9GvHrFXYM
+N2wvFuqTbwO+oFLdHsbUlb/jIbh8oJ0sGs0j/vUPq9Y
---- OHMVVHKUxtE3kT4f8obDNIV5EwXj1SYfOeUhrsEVUS4
+-> ssh-ed25519 iO8/4g AHl70XtrL++vjh1KlAplSmBoCIcP63vU3O/VrGrV2HA
-—?ÇKXâY6ŠcŸ‰MÒ<4D>¤/«ô:…gñûrä<72>­‡­²%FAñàT:ž9ŒáÜàAøÁÀÎÆ6ÄLJâªÛa eõžœ{ªÛcDd¢3Œã0á+)ÑâÉ‘kðð¹Æw¤HþÌú?0ô¦--Ø—ÚüIP¿(€¼ä5¶êÜ‹‹ó‹Í~`»íƒkeĢ(TOOSðOziïãäÙ?Ý
+52gbcvDgT3NFY+Dc6ACkVsz8C4DbsOc5DG1445eolDc
+--- IeBzTe/yzE+G7a3xmlKU8PyyCpViGiYVsGzWAFy/b+E
+,±ÂÚûDÜQ´Þ¿­ðøè%x&ˆÞ„бîNz‰lx¶<B£¤P¶	W{kiAÚµ»l»ÿ/¹CC?Û?_ýª‚i5ÌÔt+bÆüUóÜž;‡==ïÐ7䤂õ.Ù²<C399>]8¬|
ëé¨FúÊbmÃqQÔé¤ëa%Ò¥±E˜<05>pŽ<>z´{€Úk]
+<EFBFBD>­‰(Š–Ĭ`q¸yö

agenix/hosts/tanker/mastodon/smtpPassword.age

@@ -1,8 +1,10 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g BsPbHvr/DUsmpRHWdzq0XjNlIIW3d2H6zcnwYPiKZCc
+-> ssh-ed25519 MtGp6g oCAbUx12/kYx4vDknAeMc9VI7FK0gqx6VnRbnaqejW8
-jGCdAtouZ2XwH+vjBEd7X9LGca3yX3niwrONosmXJAw
+CaLalbSP3Oda1qReFDsdX5/c6oHSY6i6o9XkCmSNlhk
--> ssh-ed25519 iO8/4g 42C2Q3Jr0KmxzNIOGJ05Tw5OfdgXD2J1O/cUb9K4NQU
+-> ssh-ed25519 VjazQw YOLHiM+G5OslpdsXOSIt/DXm6K4HOgoajxT7k025d1c
-q11JZaiMIbvBWKsSPgM9Kxp7XFC7uu5r7i38zwLX1zo
+g/m4aqEv58OSHKeKjUG8TUawVtv8c++jhTwKegEOMsc
---- +otr4g+Ghtg3/uNzG7WLC8KwbjUje4xAmMuTQw2LBp4
+-> ssh-ed25519 iO8/4g evvTMFgbYr6wKtBYSzb4TikgOH1IArpKrrap79t8sBc
-÷Äó‰çi|–רoÑE}òÐÂ<C390>ÿ>UD¿‰Î¾–VI½<49>
+n00Zxy5//5ffsth0rj/q75cf802TR7TRSZoIa3ZA6gg
-ÕÉ|O~ƒ«éŒÕ#‘©º°º	Ec sŽ`ïƒî”‘’ð²}ïŸ=¶ÏÍkA½ªõ
+--- ub5/2R/qVPV7T7cxRaZzvoa47O0/3Bij/9LTd1eOB+E
+âT<C3A2>À­Žó­r'Ó;¡§c«>RާݩŽ‹ù
+ Ð=WAd-<2D>ÂÕ¯ƒlyª0R¨¡0†R?!%¨ípé}î(nIê_a½)Vrab[õÑÕ¥ÛÍ

agenix/hosts/tanker/mastodon/vapidPrivateKey.age

@@ -1,8 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g rnlYnWy9ebJH15Eq9uz1VN/YH0xjjoEdmWBRZotlDTg
+-> ssh-ed25519 MtGp6g TvX+N7HQwL12LduuKyC9tVnfy4XRxbPoiV+I58q3/H8
-qfLmixiKSZQUyODog4zHNa2Yx5CrZJSGQsk4LR/mrcw
+WH2YjqvOMpudRPYxJ+N4djFgjmNWkN6s3TU9hR3knaM
--> ssh-ed25519 iO8/4g 8ibZ80NTd5dNbWmHvv2pVH9wzq7Swphnf1jy6V8ozT8
+-> ssh-ed25519 VjazQw XLZH6cDGR2J+jrb54ycwzFp4q4eVNF1KsiBHKDrxUHE
-0rPOKcpOwHOgE0dWVjF7SGqE2t8FVJIhe2IA5pV9QUA
+1Yg9LhP9bd13zO5Jahj3uIJEcrRnd2cbiOS0CFV/JgM
---- BgmQwe/+IlY6Ve74IsQt7+GmZfR2j7Eo7pi+Yi/zsDM
+-> ssh-ed25519 iO8/4g Q4C7Vkjlg75WLbbbW4oFf7MXxawCSd/K6BJbcUO4tQU
-?æ
+bdb86lQ5IrIz87N+xvuRVaPEVZbsAI4AfqQlS+w+a2w
-™:	ξ:‰<>‘/ûUŽ,à‘ã_<C3A3>¼ù<C2BC>¥`¬Gˆv’þ÷ï»(,_*5¯§ÅÀ’K‹ð^z¢øña讫H {,×RÄÏ.!m]®¢
+--- mJ+db/Qv6TGLM1J9KJgidjgWeO+pNOO8ZHKJn8E75Aw
+2HØêÕ~YPÁ¹uy<75>n«B¶´nkÌöd^¢K<>ÒdÍùVŠÙ^ŬÔÕr¹<72>Î{	·ÛMÚÅäXé{Óž¨Œ"( ¸ÝÌš]«öR½ 

agenix/hosts/tanker/mastodon/vapidPublicKey.age

@@ -1,8 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g Bz/LY/rxsRHvqkq1OuahQEcx0mLzYBur7BS874VLqjM
+-> ssh-ed25519 MtGp6g eP6iFfn0JelbLAhgyBQNKwnGd5Uf0hbx6gGPyvV2K3U
-XOpPbBSSwqobyGjqjJbJvddS6GJil3o33ie+Gfxb6lQ
+xO3aMtge9vv3j1mBSi3c4ZFm4ZJpFFOMUygMsh92KWw
--> ssh-ed25519 iO8/4g j4N3l3S7gFirSemlb273bMeDyOCpwYpyYebXpzDbASo
+-> ssh-ed25519 VjazQw X34JhrmefofiJRedGyVZ8fIBXGff2C0Ou3lChmTymUg
-A2xGhmnnGJ0S0njqw1abJqpGF/XRXHto9eEgqkslOl4
+UqrPPJLl9iX59sbgQuEndchqoP3G0jonq48OBUM6/vQ
---- Koko+d90LE6Z7PjI2VG/wN5eMbQcwsGmm8lddI9J5Q4
+-> ssh-ed25519 iO8/4g 6jCL4A6nmDZ62BIQlaHsvMpY1ebFj66W4sql/Bh6x34
-Þ½ìÌ‘”S¥œ<EFBFBD>`’
+70WtJrGkqm7WmB37I1nAjigDmP85ilu1RN9zQLCIMW8
-lsz¯ÛÇm@ç÷%{R•©¦w~Îo .ü<>PX¾F7Ìy>ñßDŽŠ’PÇž!T6g\I¤®à›‰f–€–!ŠYÇÙª5ÎòúŠ=ƒÐ|ê
•žøÁ<C3B8>ì‚,˜z	°Ê<C2B0>%HQ²c¤­³RB7ÁGÉ
+--- JViLh01B9lDO64afmf3caA1M7Qy1CXK9KXUuAQuoohY
+<EFBFBD>BýtÛ ã9è™}­ºéòꆾÊì|ciL¸Cmã7V$Nåx4é£cŠÀv¾»
S:ŒMa“W4Ð÷<1E>)Î+ÜÞý|Ïî<C38F>¯ˆ«8…¡Ö™ÐÎÝÞíÓÞñð!
V¾ñ.
¸Ó(Àö
ùMr?ØÊÉœÙäd

agenix/hosts/tanker/mosquitto/passwordWeewxProxy.age

@@ -1,8 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g st5isrw0b9Ev3+B0Zi50vkzAX+otZOf7XS/Lw/Kzq3w
+-> ssh-ed25519 MtGp6g Lj8vuOxciX5x4Po/n5uR0xYyAvGDfATMMmDZRWPhQhM
-XhPB68qMaou3Gy6nwq5t8g/JqJoDLlw7fktLBOWTKXU
+Y+1Glnjz4i2W9O2jVJod2W+3QiLzsRDVEGeL6Y2vQ6E
--> ssh-ed25519 iO8/4g z6CD3bE7up8JpdC26javMn4ik6IhUHMSmei2CbxO3Gk
+-> ssh-ed25519 VjazQw xKbm1VhwCR2h2bn15uN2EqDZTjpOk0aC04cqFAX17l8
-c7gGLNMBQ5i9S4/ePz+SIm1C7NCmRu1Ru+2C08NsAYU
+0e49jIOvbNWZZNZImcNl7+4qZcvAwgtUVTllOH19qxY
---- TgWpTD2M5iJw0qeAhIeO9I77JNPYKzMDj8yo+lrXL9g
+-> ssh-ed25519 iO8/4g 6uxs9n2xT/2Rg4C4b8phgWS/d3ADJY92vRGxMVtPAAo
-2ÛT4Ÿäüi¬'²É«1ëD·–ÛÔ„)<29>
ZUˆRbFÈ<46>ž¿èÛx_è”j¸ÉG"gƒ9žæŠà)ï[	çB
_ŽUu<55>ËîÜjBL`PbïQI¯
Ö£9º½ãõýœÏAðÖñ Iý—3c9}§çl7×3$“d$Ì}xäÁmGÒ
+epV6Za55SeJiDT9TDEI+cCBUJcnZ5AcbfzHTC/ecavA
-c5ûW¶wœ½
+--- jmDgVc5f0S6zfiW8pnRcgHh2iXBL4CGaBrvnNSGsuuQ
+Ó<07>>Æ&T÷Ò6‘±Â[hiÅÙx—]‚•á_õîGd
â6
ˆW›­ã{áÞû9è&yÀÆ©#ÃE¡½D;YŠ­œ<C2AD>—V“Úö¿e%üŸEÜX–—…*_Õ‘Þ;—ú†ž
u	¤$~á4ñ.,sûê½<C3AA>ÉIéä ¼YÖÐE—¸iÍ€¢ÓÖ½*guoC6œ

agenix/hosts/tanker/synapse/slidingSyncConfig.age

@@ -1,7 +1,10 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g YgFgAfWmCNZOSvchBNtzWVJ12hOy4cz+cf2USX5G1nU
+-> ssh-ed25519 MtGp6g k69QJbWSQ8CIOAklmBXIMulWEg6398i1FM6lvfw3CHw
-q34B1mmikgsEvjQCABO1p8zQmPs8G8C4jntGR3R6kBk
+CrCHJc5UB5vxHTZuo6oiudul4NrHjwRPl9oQ5CI+pCM
--> ssh-ed25519 iO8/4g joeMwo/GcL2nzC2q6mHJlUF3lOOETfquZctJxgODO2c
+-> ssh-ed25519 VjazQw GqUM1+WCs8QK4ECWFcap1xc/Hb+KdTkG9kUDUlcdhUI
-2LyqGNfFiLURJeVfP94VKejXjTlamzR95cp8mPZr/Ls
+30yrzgUtnaP66CjSMv1L9McDJnWM1/fRpoNDTZDIErE
---- L6JZkciLimJgEXsv5kZWZD0q0wvCjXH4C9AIx4/bNO8
+-> ssh-ed25519 iO8/4g OMImEaxzsCk9Ow7L6xcMpKePPtCwguz921mlcUUfiB4
-AÔ1mº~K=v,v’ÎéI°G¡”c)TWùâxwÏö!•ëW/Y{³˜°ÂóhÝ<68>í/C“ãAâËês3µœ†Ûo<C39B>d<64>ÏѸ<C391>?	ôç¬ô’DŠ¦=•ìuà!uÑNŒØ<Kº•x0÷{KuÈ
+kS4J5ymd9MpGh62PxBzQ9xCdu0rRjM0RgKSaHGtqzkQ
+--- exFRiuxpJyjl8CPcAhAGJzodGbl3WF6EIHZK6CsYP3c
+Ë„Ôý›S û”ÿ°åïY"ãîÎ}Íñáñ&¤Œ³Öõ
+ºg<19>bæ+ %)kÛ!M½â-yÈñ„vŒè°ÃÔm‹~ž²V‹¡ÑžL|‚rå=Såõ<>g_` Sß
¨˜Èˆ˜ÄeŸ¸•
j

agenix/hosts/tanker/user/danielPassword.age

@@ -1,9 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g ib+7tvC/Q/xGXm2u/tJinm3X20jyd8n3kDIH3cOigV4
+-> ssh-ed25519 MtGp6g 5uObYcRKPI5vH/XJQ22p+acmNNhMXm1y5RJn0RN7bVY
-5nldpotX/SrGaycKzIpd3nkWU5TQdjH81bj3lq22TEs
+AH3tyxb1VTFMTBP9m7jq7v9t38xpxTRu4YstDzsNCm8
--> ssh-ed25519 iO8/4g /BiZHsIXBkhNnEEB3mVrs8Z1QnZtu7vHhFJZWqX0TWI
+-> ssh-ed25519 VjazQw aYV5BBzRdri3yvWNuGd/6kW1w6qM+jYTrRxN2KkwxAE
-y+CRATwv6GjQn9M3l5rC/I+N5rADI7o2ILMstomWE8c
+Y+8mCmNlfbifTaCE7tXFTeel6PqgeVGLgNHKArJgWKA
---- j8vYz1+/o5NSfpvFGSBM8OkZPbeI+rmUZewdFAjUO0w
+-> ssh-ed25519 iO8/4g YiON7nQ1SCPA+eQOxr6eYACOiD13YpXrZFBy3OOCPlk
-Â'µó‹¥á·“VÏ‘_ëS§.uº
+3ZN5jREls6LOl3aBtoB0oZAi1SraNNnihTrjZ7ZDtSY
-´<EFBFBD>Ãè]¿<>zîÒ‚	PÞ¾%L
+--- c0rjIdaRK+4RZvL/G2ezJM4aE/lugyRWa2qzM9hj18Q
-<EFBFBD>-†B¨Mÿ¶`ý±ÐÞHæÔ¿DqPà›|2&ùj¢<>èV?‰EÃËÌIâ´Ý€—~ÇtzT‹³g‚@·6ÀÄì6
t˶ÇYêQÈhÜa‘Â/ŸwÚ2IEéú<C3A9>¢¡
+x@´Óè´”>É~ƒ°“írÐ==J½|è„™6¢žÔ¥Š…ÿ¶0Ó`N8Ý<38>ñ)tgýlGŠkAÄYi©G<C2A9>€Å#õ±èÉ2ó?k0x	uúƒª
üØ%ã	kR‘{J—z´3¿ÅÀŽÉ¯S©6;tÑÐrhüu›ém÷<6D>r<EFBFBD>€—d<ƒg	5	

flake.nix

@@ -91,6 +91,11 @@
             inherit lix-module;
           };
 
+          Pallas = import ./system/flakes/Pallas.nix {
+            inherit (inputs) nixpkgs home-manager nix-darwin agenix neovim-nightly-overlay mkalias nifoc-overlay;
+            inherit lix-module;
+          };
+
           tanker = import ./system/flakes/tanker.nix {
             inherit (inputs) nixpkgs disko home-manager agenix;
             inherit inputs;
@@ -120,6 +125,7 @@
         {
           darwinConfigurations = {
             "Styx" = Styx.system;
+            "Pallas" = Pallas.system;
           };
 
           nixosConfigurations = {

hardware/hosts/tanker.nix

@@ -29,7 +29,7 @@
       '';
     };
 
-    kernelPackages = pkgs.zfs.latestCompatibleLinuxPackages;
+    kernelPackages = pkgs.linuxPackages;
     kernelModules = [ "tcp_bbr" ];
 
     kernel.sysctl = {

home/hosts/Pallas.nix

@@ -0,0 +1,111 @@
+args@{ pkgs, lib, config, ... }:
+
+let
+  secret = import ../../secret/hosts/Pallas.nix;
+in
+{
+  imports = [
+    ../config/fonts
+
+    ../programs/fish.nix
+    ../programs/nushell.nix
+    ../programs/atuin.nix
+    ../programs/direnv.nix
+    ../programs/fzf.nix
+    ../programs/starship.nix
+    ../programs/zoxide.nix
+
+    ../programs/amethyst.nix
+    ../programs/wezterm.nix
+
+    ../programs/nvim
+
+    ../programs/git.nix
+
+    ../programs/bat.nix
+
+    ../programs/btop.nix
+
+    ../programs/gallery-dl.nix
+
+    ../programs/gpg.nix
+
+    ../programs/jq.nix
+
+    (import ../programs/firefox.nix (args // { inherit secret; }))
+
+    ../programs/scripts.nix
+
+    ../programs/ssh/Pallas.nix
+    ../programs/eternal-terminal.nix
+
+    ../programs/yt-dlp.nix
+  ];
+
+  disabledModules = [ "targets/darwin/linkapps.nix" ];
+
+  home = {
+    stateVersion = "22.11";
+
+    packages = with pkgs; [
+      _1password-cli
+      arp-scan
+      curlHTTP3
+      dasel
+      dig
+      exiftool
+      fd
+      ffmpeg
+      glab
+      glow
+      hexyl
+      hyperfine
+      just
+      lnav
+      mtr
+      nix-tree
+      nix-update
+      nurl
+      parallel
+      q
+      ripgrep
+      socat
+      ssh-audit
+      tea
+      viddy
+      wget
+      xxHash
+      xz
+    ];
+
+    activation.aliasApplications = lib.mkIf pkgs.stdenv.hostPlatform.isDarwin (
+      let
+        apps = pkgs.buildEnv {
+          name = "home-manager-applications";
+          paths = config.home.packages;
+          pathsToLink = "/Applications";
+        };
+
+        lastAppsFile = "${config.xdg.stateHome}/nix/.apps";
+      in
+      lib.hm.dag.entryAfter [ "writeBoundary" ] /* bash */ ''
+        last_apps=$(cat "${lastAppsFile}" 2>/dev/null || echo "")
+        next_apps=$(readlink -f ${apps}/Applications/* | sort)
+
+        if [ "$last_apps" != "$next_apps" ]; then
+          echo "Apps have changed. Updating macOS aliases..."
+
+          apps_path="$HOME/Applications/Home Manager Apps"
+          $DRY_RUN_CMD mkdir -p "$apps_path"
+
+          $DRY_RUN_CMD ${lib.getExe pkgs.fd} \
+            -t l -d 1 . ${apps}/Applications \
+            -x $DRY_RUN_CMD "${pkgs.mkalias}/bin/mkalias" \
+            -L {} "$apps_path/{/}"
+
+          [ -z "$DRY_RUN_CMD" ] && echo "$next_apps" > "${lastAppsFile}"
+        fi
+      ''
+    );
+  };
+}

home/hosts/Styx.nix

@@ -53,7 +53,7 @@ in
     stateVersion = "22.11";
 
     packages = with pkgs; [
-      _1password
+      _1password-cli
       arp-scan
       curlHTTP3
       dasel

home/programs/ssh/Pallas.nix

@@ -0,0 +1,51 @@
+{ pkgs, config, ... }:
+
+let
+  ssh-directory = "${config.home.homeDirectory}/.ssh";
+  auth-socket = "${config.home.homeDirectory}/Library/Group Containers/2BUA8C4S2C.com.1password/t/agent.sock";
+
+  shared-private = import ./shared/private.nix;
+
+  ssh-keys = import ../../../system/shared/ssh-keys.nix;
+in
+{
+  home.packages = [ pkgs.openssh ];
+
+  programs.ssh = {
+    enable = true;
+
+    forwardAgent = false;
+    compression = false;
+    hashKnownHosts = true;
+    serverAliveInterval = 60;
+    extraConfig = ''
+      IdentityAgent "${auth-socket}"
+      VerifyHostKeyDNS yes
+    '';
+
+    matchBlocks = shared-private.matchBlocks;
+  };
+
+  home.file = {
+    "${ssh-directory}/GitHub.pub".text = ssh-keys.GitHub;
+    "${ssh-directory}/GitLab.pub".text = ssh-keys.GitLab;
+    "${ssh-directory}/Hetzner.pub".text = ssh-keys.Hetzner;
+    "${ssh-directory}/LAN.pub".text = ssh-keys.LAN;
+  };
+
+  # Make agent available to all programs
+
+  home.sessionVariables.SSH_AUTH_SOCK = "${auth-socket}";
+
+  launchd.agents.SSH_AUTH_SOCK = {
+    enable = true;
+    config = {
+      ProgramArguments = [
+        "/bin/sh"
+        "-c"
+        "/bin/ln -sf \"${auth-socket}\" $SSH_AUTH_SOCK"
+      ];
+      RunAtLoad = true;
+    };
+  };
+}

secrets.nix

@@ -1,16 +1,17 @@
 let
-  user-daniel = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA1UfCIu7jUe64iQmp2UUyAgqZ3IYdMOo/Me6hRTnKoG";
+  user-daniel-Styx = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA1UfCIu7jUe64iQmp2UUyAgqZ3IYdMOo/Me6hRTnKoG";
+  user-daniel-Pallas = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOg47WuNIBJ5h44XU2nzlW96VZuxUhm9ow1xUK5xDD9i";
 
   system-tanker = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILpnogLd3Ttmz/At0dXveaG1xF37vV7lz34ojDTIuCOi";
   system-mediaserver = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDlB0cL5CtTOyARWSE2yUsNU4JHUPmr71710mZHzsmbX";
   system-argon = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPP9ygczyi6g8abvj1I0eAj7N2Rli9UMlkC8VT6SnWLU";
   system-neon = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA5Ht4KaRUvuGFmYLznTkVSnn6isjrcVplz1kKWkrnRQ";
 
-  tanker = [ user-daniel system-tanker ];
+  tanker = [ user-daniel-Styx user-daniel-Pallas system-tanker ];
-  mediaserver = [ user-daniel system-mediaserver ];
+  mediaserver = [ user-daniel-Styx user-daniel-Pallas system-mediaserver ];
-  argon = [ user-daniel system-argon ];
+  argon = [ user-daniel-Styx user-daniel-Pallas system-argon ];
-  neon = [ user-daniel system-neon ];
+  neon = [ user-daniel-Styx user-daniel-Pallas system-neon ];
-  all-systems = [ user-daniel system-tanker system-mediaserver system-argon system-neon ];
+  all-systems = [ user-daniel-Styx user-daniel-Pallas system-tanker system-mediaserver system-argon system-neon ];
 in
 {
   # all
@@ -128,5 +129,8 @@ in
   "agenix/hosts/neon/deye-mqtt/config.age".publicKeys = neon;
 
   # Styx
-  "agenix/hosts/Styx/git/maintenance.age".publicKeys = [ user-daniel ];
+  "agenix/hosts/Styx/git/maintenance.age".publicKeys = [ user-daniel-Styx ];
+
+  # Pallas
+  "agenix/hosts/Pallas/git/maintenance.age".publicKeys = [ user-daniel-Pallas ];
 }

system/flakes/Pallas.nix

@@ -0,0 +1,52 @@
+{ nixpkgs, lix-module, home-manager, nix-darwin, agenix, neovim-nightly-overlay, mkalias, nifoc-overlay }:
+
+let
+  default-system = "aarch64-darwin";
+
+  overlay-x86 = _: _: { pkgs-x86 = import nixpkgs { system = "x86_64-darwin"; }; };
+  overlay-mkalias = _: _: { inherit (mkalias.packages.${default-system}) mkalias; };
+
+  nixpkgsConfig = {
+    overlays = [
+      overlay-x86
+      agenix.overlays.default
+      neovim-nightly-overlay.overlays.default
+      nifoc-overlay.overlay
+      overlay-mkalias
+    ];
+
+    config = {
+      allowUnfree = true;
+      allowBroken = true;
+    };
+  };
+in
+{
+  system = nix-darwin.lib.darwinSystem {
+    system = default-system;
+    modules = [
+      {
+        nixpkgs = nixpkgsConfig;
+        nix = {
+          registry.nixpkgs.to = { type = "path"; path = nixpkgs.outPath; };
+          nixPath = nixpkgs.lib.mkForce [ "nixpkgs=flake:nixpkgs" ];
+        };
+      }
+
+      lix-module.nixosModules.default
+
+      home-manager.darwinModules.home-manager
+      {
+        home-manager = {
+          useGlobalPkgs = true;
+          useUserPackages = true;
+          users.daniel = import ../../home/hosts/Pallas.nix;
+        };
+      }
+
+      agenix.darwinModules.default
+
+      ../hosts/Pallas.nix
+    ];
+  };
+}

system/hosts/Pallas.nix

@@ -0,0 +1,105 @@
+let
+  homeDir = "/Users/daniel";
+in
+{
+  imports = [
+    ../../agenix/hosts/Pallas/config.nix
+    ../shared/show-update-changelog.nix
+
+    ../darwin/defaults.nix
+    ../darwin/sudo.nix
+
+    ../darwin/fish.nix
+    ../darwin/attic.nix
+
+    ../darwin/mas.nix
+    ../darwin/fake-homebrew.nix
+  ];
+
+  system.stateVersion = 5;
+  ids.gids.nixbld = 30000;
+
+  nix = {
+    settings = {
+      experimental-features = [ "nix-command" "flakes" ];
+      extra-platforms = [ "x86_64-darwin" ];
+
+      log-lines = 25;
+      auto-optimise-store = true;
+      keep-derivations = true;
+      keep-outputs = true;
+      extra-nix-path = "nixpkgs=flake:nixpkgs";
+
+      builders-use-substitutes = true;
+
+      extra-substituters = [
+        "https://attic.cache.daniel.sx/nifoc-systems?priority=30"
+        "https://nix-community.cachix.org?priority=50"
+        "https://cache.garnix.io?priority=60"
+        "https://cache.lix.systems?priority=70"
+        "https://pre-commit-hooks.cachix.org?priority=80"
+      ];
+
+      extra-trusted-public-keys = [
+        "nifoc-systems:eDDqVP5BFR6/1KvXbF9oUL8JahDdmbrsYtxlQ57LOTU="
+        "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
+        "cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g="
+        "cache.lix.systems:aBnZUw8zA7H35Cz2RyKFVs3H4PlGTLawyY5KRbvJR8o="
+        "pre-commit-hooks.cachix.org-1:Pkk3Panw5AW24TOv6kz3PvLhlH8puAsJTBbOPmBo7Rc="
+      ];
+
+      trusted-users = [ "@admin" ];
+
+      connect-timeout = 5;
+    };
+
+    configureBuildUsers = true;
+
+    distributedBuilds = true;
+
+    buildMachines = [
+      {
+        hostName = "mediaserver.ts.kempkens.network";
+        protocol = "ssh-ng";
+        systems = [ "x86_64-linux" "aarch64-linux" ];
+        sshUser = "nix-remote-builder";
+        sshKey = "${homeDir}/.ssh/id_nix_remote_builder";
+        maxJobs = 2;
+      }
+
+      {
+        hostName = "argon.ts.kempkens.network";
+        protocol = "ssh-ng";
+        systems = [ "aarch64-linux" ];
+        sshUser = "nix-remote-builder";
+        sshKey = "${homeDir}/.ssh/id_nix_remote_builder";
+        maxJobs = 2;
+      }
+    ];
+
+    gc = {
+      automatic = true;
+      user = "daniel";
+      interval = { Weekday = 0; Hour = 3; Minute = 15; };
+    };
+  };
+
+  documentation.doc.enable = false;
+
+  users = {
+    users.daniel = {
+      home = homeDir;
+    };
+  };
+
+  environment = {
+    darwinConfig = "${homeDir}/.config/nixpkgs/system/hosts/Pallas.nix";
+  };
+
+  services = {
+    nix-daemon = {
+      enable = true;
+      logFile = "/var/log/nix-daemon.log";
+    };
+  };
+}

system/nixos/matrix/synapse.nix

@@ -92,17 +92,6 @@ in
     extraConfigFiles = [ config.age.secrets.synapse-extra-config.path ];
   };
 
-  services.matrix-sliding-sync = {
-    enable = true;
-
-    settings = {
-      SYNCV3_SERVER = "https://${fqdn}";
-      SYNCV3_BINDADDR = "127.0.0.1:8009";
-    };
-
-    environmentFile = config.age.secrets.synapse-sliding-sync-config.path;
-  };
-
   systemd.services.matrix-synapse.after = [ "postgresql.service" ];
 
   services.nginx.virtualHosts."${fqdn}" = {
@@ -115,16 +104,6 @@ in
     extraConfig = ''
       add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
 
-      location ~* ^/(client/|_matrix/client/unstable/org.matrix.msc3575/sync) {
-        proxy_pass http://127.0.0.1:8009;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-        proxy_set_header X-Forwarded-Host $host;
-        proxy_set_header X-Forwarded-Server $host;
-      }
-
       location ~* ^(\/_matrix|\/_synapse\/client) {
         proxy_pass http://127.0.0.1:8008;
         proxy_set_header Host $host;