chore: add colmena tags

agenix/hosts/argon/forgejo-actions/token.age

@@ -1,11 +1,8 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g 2aeA7xLMj0hZymmHrraODD6cXrtOQr7u3vwmaPOZBjo
+-> ssh-ed25519 MtGp6g JJ1gPB6MsDhl88Uqmy7yOTUq3IMAaj8D6qBmH5nw+Qw
-1oNDL71COWKq8U/hFdcX4XaTZgy5yWhUvTCf3RfyXk8
+OTQMHWgQkQHfB0esVFSiUkr10PFbwz2/U8VDcGJNU2Y
--> ssh-ed25519 1fcLUQ OJFyVInANrMogQf94iCVuAlJisKtv2ptY63mHLFo410
+-> ssh-ed25519 1fcLUQ ID/0P9r9EU4e6Y52mrgannG1/3/RUdZKCtc39399mEA
-ooL//wWRrcgooWd3b7KhGqHKH/ACCJGg8R1YwYf+JQM
+9IVPiXeieAPvEwIZq7Z/MZxF9tYV1t+zWz+I1QZwFWg
--> bYz-grease H9Cwq{lN
+--- K3rjoML1rRCddmclzm5ZXta/UPZX64lRDb/vz9T73rU
-UHsU9N680zD9h1akqUQ+028gPGOrpF2LoCMiP0cotBY8DWAPLToB7stuJ/ywv1Ck
+˜¸<EFBFBD>)A‡<41>^GÕd¹“
-dl/lVxS6m5h73nVU+al50MqvDKzdGn5PlDEYN0IhBY4gvfCAafiPrVoHqLFYYzYF
+Rmj
Pù.µÁA,1…\çÄé;§c°{ŽÍÆxÇËþ¼XgÀØ´-‚ܨÓÚHáÙ.bÔÝ¡V‡E<,ÇH
-/F2h
---- yVoc4medj0Qix80bZ2umqJseBk4knt+1Fs90TKS9Y2E
-Ê+¹ªüœ¦~Ÿ ažJE© u­”Œ<E2809D>^J©Á×£(³Íoµï<C2B5>Ubâ­¥±YŒšÞÿù#nÖ
ŒewH¡÷Æóç£!6—ÚÓþÙÄ¥&ÇÏ

agenix/hosts/mediaserver/smb/havenCredentials.age

@@ -1,10 +1,8 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g JyVPhKnCixU8R0aldhBP8eVHzyxcG6Vjv9MOv2xdAGs
+-> ssh-ed25519 MtGp6g h5GOBBF2beIOvnl8w/CwgECH5oNuvNWWAkDKabRuWQI
-PRc+76W57uYZSUguYrOjvjZrsFy56nbgEyoQ1ahihK0
+usrDmkInaI9gzrOB9ijYSlQCrECnIjXzpk1DCHzLjmc
--> ssh-ed25519 Y94Yig v/9Ai3U8dxd2XP92gTMDHCeMoVTFhd9mrg95hpBjcR4
+-> ssh-ed25519 Y94Yig 5kOW8xzErlI4pj+gwhcCtzlFazqHCRvh0Lm+pl70sBY
-8qu58IJSjpDeCoueo5REflCv3jYscmTFg0gJ9w2awJo
+tDEU5tO681A2duNLRwnTRLHl2lM5zXbn/Z27rYIe5Ls
--> _@pH\C-grease 2 VY p{rJ^5
+--- 6t/tMFOXfA/QsVgZ7LRIgArtFU95kaeaQQG2rgdTRco
-liHUI8M6Us9bJ5yF/hs57TZLArJIsKHZG+4azj4qiC47tCAH5RrbXzANrDk
+™\¬Q—zuVøe×·E¤p––
---- WgjYpyvLq2DF1fG+1MwTV+tGijYBiIiO8XeB1wsumh0
+mxGd.	½Á2xbØÔtuV%vEÏÛÆÕ ]–“¿hYûv»<76>ÜûCãI9Z±‰>ùÉr#xÃb+’†.Ú0î<Îô¿íe?‚Ôí¡
-néÞ/„PUÁ
-,ü2SË(¿u‡<75>Û!ô“$Ð
 ÓDþXºÉÍHù[„!'H{|–+]5Æ¡º:æ4Ðz¨¯ÚÄ:÷,Ó1]E­®!-uNVæ³=Åú?@`W3u1ß\A

agenix/hosts/neon/config.nix

@@ -4,6 +4,10 @@
       file = ./user/danielPassword.age;
     };
 
+    forgejo-actions-token = {
+      file = ./forgejo-actions/token.age;
+    };
+
     mosquitto-password-weewx-proxy = {
       file = ./mosquitto/passwordWeewxProxy.age;
       owner = "mosquitto";

agenix/hosts/neon/forgejo-actions/token.age

@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 MtGp6g iPBhMI0tOa0yahpWa+AwEK9d56uBUPER7YCyLQEsSwE
+HktRuvzshZ75SeklGMSMKhWrPisZJj2l5qR/fiVPf1A
+-> ssh-ed25519 60lgJw ThmXYdTkvVL7vtVBYuW35Cr9o84yDHUJXTPA2pmzkWE
+dteB7YkYXnPAX0uO8IakGuyNRCiYmxE84DS1KxVMEjQ
+--- vrqL+o3G/o9XltkolyxW2/bmdYbG/1IolxDkhFo2Tek
+³¼Ó°Î€¼øœ)A%9%]H
+È!ᬃžCóö ¼èóTS£ëAf~K|–!ë'À½¾YÆb
‹»¬Ñ²Oðï&
øX½«[¼

agenix/hosts/neon/mosquitto/passwordWeewxProxy.age

@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 MtGp6g lmMpdnyCRpMHEHdtsbobHDwdmLloqzmnVtWa8MXpDgI
+W5X+T4FSifdhUtqZJfCLZPl9OyEVFavT2Gu/wc8zB+Q
+-> ssh-ed25519 60lgJw 5KdxUIiU1FuabCOlYS3vgKs01KG8V+CTw0++syUjojc
+16RHU6meNsOInbTJqRKBPQc6vsYpXjlMFmG4NvnXHyI
+--- MMWUvlkrz3GozuUZcPyMInV/3DVZdlH/PfFmWW7t+D4
+*–ïð7Vª¼ëÿCzç:}÷M™ˆ^W[n?r ÛiÁ:VH‡Ž‹÷þ^v®bŠ_V´•,%[AÍnŽ´[£ªk“à>rÍÙijô¢ÚŽï•)ʺù÷ ¿å_‹_•Âò’ìdZIÌSÆüàB²ñÑÏ<C391>í±%°”ìûò<ÏPRè8D?º=|“hœ†èL«D

agenix/hosts/neon/user/danielPassword.age

@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 MtGp6g OES0bc+9FiKC+0Zr3gqRJbYPOa7xyUQxSvP6lxqCqSA
+sJYxWzPKdPdIHx8zdhcSbexhEHg2EQcfQmpD8iW+9i0
+-> ssh-ed25519 60lgJw tNnXwS3vtSqssnJTe8s7NSFR97i6We5uXV5gUlRkfEg
+3Vku9TyhFAIcTagF/uyRgfeZ38Gyzr+3PJc/+A6JqS0
+--- FalIpSsYo7ckQpWV43EYY8A57Kkpz5zsmLJ+s3SG85U
+<EFBFBD>ú×'3ô&u¨Ã>ÙòeÓ&åÝùüªzi¬m»Zƒ<œÛ	²f¬`ˆm\¯¯ØPÖ2:êìÔZ0§=V¶×,¦zLyjøÊ¡¹”ÐÜÇ\ýPP„!ZÒÐô.f¥<66>WqªÄ@2kÞü @“–sS£7{b¬pÁ	@sê‰Z~²ý̹eùò”Õ‰

agenix/hosts/tanker/forgejo-actions/token.age

@@ -1,12 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g I3WQex/smit8a4Isd02PK5wjcjy2hUed3UJpd0y33So
+-> ssh-ed25519 MtGp6g 5SaJ0PZtLRTpf+2MuSOed6rL4ZaMKqreDtrv6gtElzs
-SyMzqODrDT5V8VEjp8ERWWa8f/LkJXOfB0I2v0/5xMk
+asYwkUnhGekO9EqX+bX0LFCTTFzpREv00brpJ+LsS9s
--> ssh-ed25519 iO8/4g 7HVKn8hYsADqVUoaJZQq+VsnLa3fwRsDNEuAe4HYBmM
+-> ssh-ed25519 iO8/4g MoJbSVMo2l8miiVeosQE17hCkgfsO3uC8hy5R4uPBUk
-ZZrHbVUtM0gKgIhSVARW7VhB3VVMd3kqu4aClviJYjE
+vUDuPV8O9JDFWijF+82yV5fDvIYwC24x72ZZrSqAuI0
--> XGZy\BA-grease (7F_&
+--- 0Pxxxw+6MJgiTnyUayU//4maIdQdgRdikFW857g9Dbc
-ogqkD7AyPLaMX7ZRC+MXIHSUR0pRYFGGpQzLse/J+Xfn+d8Fca+ORmdZ7hszVCYV
+F{7"ÈKk6”eòÆK®w›#LÛI2idP%ÓÁÄ.x
š¬Éÿ®×W¼_B(T$	œ‘Á¸‚BhˆoŽº›ù0’¨ƒ)º·±	ñ¹¾ Î’
-2+vZ3YeW5undYzkMjJuVyZf5qS/S5Mbp
---- rVstDRi//LFd7AO4GKNShRHipPHwPdl1B3pKqYoNZms
-Ä4AªhÜ!q¢aøtVµ!±Æòr![P
+ÔDv·Ò'%F
¹Ê<C2B9>Ú$ü<>LŸPa
-cÔÀiôkZÁÄ%@`èã<C3A8>“Åè&¡
-å`[;

agenix/hosts/tanker/headscale/dbPassword.age

@@ -1,11 +1,8 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g Ksx8IgaAlR47n4KH6gqrFa0/LTbJdng+Y4LyaIyUoHM
+-> ssh-ed25519 MtGp6g jjyJUuIeF4kTlnpxV1UD7/Vf47Rklt8/wDGaXBob1ho
-Us/MXus/dEo5z3q9Un44jGgAPOQmQABhSvEEFbSNZaY
+hmB9I+//919kNrIARykN+fagwpRxHM8sh4lbWlYxy38
--> ssh-ed25519 iO8/4g bb5CMC4W+/8LqXV4wo5lL/pEPiDv8aTB2JTP4WAU8RI
+-> ssh-ed25519 iO8/4g j87vWpjBLfBaClT/VEsO4BZhqcuh/yCeDw7UNC97bnM
-zUDaW+pIBLWzNpeoRnSVTrs0FzCzGp88xOJQCJ23Abg
+ZPVNFLEsNC0m3h/gYP1FxpSANbSp7C/Z/q4TJbUl4O0
--> 9Avzmsce-grease *| wURxw
+--- uyI52UkrdqR6ZjPdVTxL3pjI8IWUTu3zXqNKE7l+bFI
-N/PIH4VmQp68zcOwFozdd/46yiXa7YT3kughflU+PnxACswnu0r56YYEoU40lPqV
+ŻN
-kIdUiACfIFkXByDvS4Xt/WlT4X9Ncu0LCEzMZhnT4HQtL8lVMMAWqm6BdDDn4yBs
+h6®aæf–z—âÄ7RHà?`;¾Á’uûâåW)ûÁ»¼<C2BB>É/‹¢¿Ýí#Œø´¥}nÃ<6E>h%K
-VuA
---- EN7FwLG8kh/pxDa8gJyFwccM3ew8LqhmJDN7TTVMiSE
-”+lûáÿ1÷c­cœõ’:cnGÄÎüá=+Þ´Ä	`'‚Ãô>AÄ0q	z*çÕe0D¶D

agenix/hosts/tanker/invidious/databasePassword.age

@@ -1,11 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g DZHI9LtTvwlKXyZw+fe33PwcgdWCze39MvWKKzkC8jc
+-> ssh-ed25519 MtGp6g s37ynyy/kvHuTAIjA+XYXD65W01y5/j60NYVKiqr324
-R7GgrTzyF96GSzCbKmgzlB1k+JDeW3NGbFMVaPIeOBs
+QMj5Mu3Ah9EzlR6U3dry4Hy/xdt9NjvJ5H0LATwp3Fc
--> ssh-ed25519 iO8/4g cN6H4tPW2+D4WWTTontl6zg3IPCcOTqzFqDYQMJVajY
+-> ssh-ed25519 iO8/4g deh9nEc5YeKRXnyXL1Tdr0PXhr4K878wRhVz6nR8Y0g
-Ewzk3VgyGJ18JyhC7WKA7PrZfmnZXfTHdsMPep9smKI
+TGheY5FXDgHtqUX3hDVCFmL7giuwhdc/P3ZN/xwZCKw
--> ZOBXX:-grease +5eB!v) r#hU
+--- X0px8ZMkbUQWmRp8M+1WQC2doKDsQmQScgyo/kqFdE8
-U8ClN+91QW5mEodsaPx77H/9+W58LeV7AQ/Mm4v1Z5tlLy8uHQKR1lVDgApow6mI
+ '^ø7=-K±ê£“²©^âÞìã<C3AC>Càþ ŸÔH<C394>SÿITò$í/iîÁ‡m'ôNæè<C3A6>µ7õÅÅbEÝ–¸ê*tpG†
-EmbOatS3d62wpzz5Byd1n7acuORvgHkgFHhDWoOl6xLR
---- BxssSHOarZtYmAL9w+3NqJv3j5VO8Iu/+npamK1ujPI
-1oUb$u}･% y<>ｦA><3E><>&s3認5_ｶ沌-Tﾕ<54>=g[jﾈ:Q+]q竊<71>典<1E>oﾋQsﾃ棒ﾏy
-ｳLb<4C>

agenix/hosts/tanker/mastodon/databasePassword.age

@@ -1,10 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g wAwIsd2n0Fqui061boqUxqp+uMgqde27zPJeQohN5ik
+-> ssh-ed25519 MtGp6g 3aSggyvFMN8aqkqekdzmKDjLZZZCXGlAyDY7QgdZ10c
-TvGOeXoL98QUyGJ0UrLB2nvqCe+nkmGtEHfvZ8DTJc4
+CvpC6ddlq1cFixaT2YIUWGRs7FwjUTc/FHpVD1U+xoM
--> ssh-ed25519 iO8/4g mbpwuiAKbj5ZbMxq2cYTpN0pRt5qfFcwxZNjRvKXqkU
+-> ssh-ed25519 iO8/4g xvYTjf6wC9GkzcAwIpzrt76TlyC5FjzuOL7bQ0pBZ3E
-bikCM08DQoCbocBWTOV4s5amEAO+gHlAJavfUWDMTTs
+krlcA7fsAfTf7IvLmZnWe9OOtevtqBMLQ3BhapusLu0
--> pS6>-grease j$PHEqF mA0,x h~ov7sK
+--- lUsLtpAmkNnCBYN4DW7Ovv5WatY77bxU8WzFxrDUT0k
-ygTukhyfp8i8TJYCZpCSn3lIU9QS+6SN1BUapf0kYQiBU0mggnp6ywwYVf9jDOjU
+†ýÄ<C3BD>ôÌÞ­Ö%ÕFªFó‹˜ÄÜìúÜ‘9ǹ¾Và<56>ƒ4ÐX£&Àðk´C	žÈ
-BA
---- xdDdjEkcETSSFi4MPxBC0Ffr+ToRplrry4moUEQMQpk
->^m/ﾀ･ｩﾐ<04>0賭､7\ｼ曙ﾛｼﾝ"5ｶ｢B系‡r)	｡I烋IF

agenix/hosts/tanker/mastodon/secretKeyBase.age

@@ -1,10 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g JkpzXmNNBQMnFsTHq6LTGdqcnOuaoyuoHLEhZ1B1IE0
+-> ssh-ed25519 MtGp6g 93q5ZFFGPdXx7WNOKTb4hkowNMgkSPKQHBgLJlhWzmI
-48v3LSzdX0n6MKAyDFhKdTeZjzhmgW4lXOHX30oHNcQ
+JftX5B3KbeY9s+i9knW2342VrOdxV2R0Mdjsb+p0bUk
--> ssh-ed25519 iO8/4g F9+dikSYBCq/mUOUrvoowMKRHvcI/K6XtSxlxtAMaU0
+-> ssh-ed25519 iO8/4g WsODmvvePjjeGYtH7+jxhVs4LXOh2LhcITfHFjfJvh8
-b6Dx/C5vYNXdkzujLlnZQ3aEryKOrTRnUkn/0OIBsz0
+J+K3VlaU2EesG1qwyugB+iX3DTfOQm628pnL6rEBWSI
--> )sx-grease S SY71l?&=
+--- kTfUi7TPuMQ19ScUGDf4kC0+MxJ/uRoHNBaqLgTbUS4
-BccDaWVHeqAeMNWT3S+3X1sZiEodhot5jJPsGSdcBtOSy7+4xufrdX/B+z+QfuMo
+‘Ú2D½™Å‰ry€Sኹ³`+ç<>C×io<ðœÅ‚v¬ÊÞŽ’ÄfÙ;apð2>UWclàÁÖ|xÀõ&uýæÅĘ/Hà_W˜Ó¦9ðëv¼ÀªXQÛ«3,<2C>tfO^Ö­è]€×àoÏ\•SÅj¹¸C÷S1C8Ÿ$ÅŠ¹äÌnJãB\“zqê×Ù­”ŽÙu¨?Ô›#OÞzî©ê	”
-rIXGmQ
---- 4sbs6kDby/Pt9s4GPe704cxmxYrYI2Naa1YjgMO6y70
-®ÜéÇ~&•<>*<2A>Ź’oí0pBÚgk>LíˇŚĂĽ%ŕÜÉÇáô›Ę¸ţ–D‚ĄžŚţAúĎ/}ŰÚ¶˝‰t}±ç_|ý} «ď—Áť±ůŚ®™ň“ĆvÎĺ
0yłăô$Ż©ÜjL8
ĺ×´SMŻďs<C48F>Aý™•öú˝é‚‹	BcŠ€ĐxMÝŮŠ6Ănq<`ęj×;†OÖk*XÇťë¤@·‚XŹV

agenix/hosts/tanker/mastodon/smtpPassword.age

@@ -1,9 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g UYcHcYsaMBFH6RS+TBDpT45/3+eVVlRx/JVpXDvJdUQ
+-> ssh-ed25519 MtGp6g S59+7nBcwUqmONsoZVdj38AMFzUSBPIKlU/6BQCFbW0
-QkdeRft5FX4kKRcGNZ+hH8sLuFcb2dQVFxiIAnDDJX4
+EpOmNgPcTvCBcCPM2ZdWKFASdyhPXrqc0xKxLzq1Lkg
--> ssh-ed25519 iO8/4g I3VCKLLgT+V8ehWhvYTcEDyj5fSAf+rhcFOpDDk5RnA
+-> ssh-ed25519 iO8/4g KHUD8PEe1p1AvLnCPivlZXo31kxEd0kKKI0mH2s7aRk
-YnA8+ovbUDt7zsyhLiNYp6mBBRqmfdN3E/VAh/szdKI
+UYzLkfqxjfaAabMjvkqsQWTkpcxtW3X8cdPN7gg99oE
--> {xVn9&^-grease
+--- q/zcloAH4/+9eUCVyn4v0+nH+lBiWRJE6A5IVB+vdNY
-KVC2owNNTYRwUKb9qQ9rG9RFMn9Jve8DYbkt0ek
+qp¾¢°#há;ðÃ"íþ|õôšÎw Î5Ù-&<26>°J÷!¢RØSª¦—¢
Ýf:ÖTðÁŽZ·bˆ0­DK>9÷«Ët9ýr©Fu¸r#'\¾
---- ECbJ8V2BT+01+k0dMfYkxkyp0GMzrn/R1ZCN4Kd8DQo
-›Ñ<EFBFBD><EFBFBD>îR<>%˜Q¾óŒ¬ÇÊwæòÏ&V*½VÖ4~Âhä<68>uì\X±¦YÙ”iKkòsMýNíØúÓ°nð0(»êu<C3AA>'é{T7õ9PC

agenix/hosts/tanker/mastodon/vapidPrivateKey.age

@@ -1,9 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g lQFP6XGVNeVhNW2GNvbhwB6Ioo1aGbSv1pTlH3oO3Hw
+-> ssh-ed25519 MtGp6g 6l7ucBDt2QaSxP7T1W0Jn+SOzA9vxXqWhn7ZohjRyWQ
-J7YCjWhzbL2bvy6BYx5catINr2WCi/lg6XsfhPuMm6c
+4msxRKtsZocw++f6aZ2Cm2UrpMqMYg5cvr30ftATWYM
--> ssh-ed25519 iO8/4g 5r2bAlPLqTbtNZsXz5Gn7ncrRtXGpunp2t/GwSmhulg
+-> ssh-ed25519 iO8/4g 608PBe4+GKnCYRRBpQsPJ76d7RYm9bTutdBnHpMMFFk
-4ydNTfRT0JDYc+iwYVDEdTJFoEiEifz6HxYJtVC3sn0
+Jo8oJnL1HOKCKJT+HJ2XEwMzFXuhmqe3AoBdV602emM
--> gC-N|-grease
+--- 3GgleiDXwamkb9QrotzMuLzr3MZeJ0BEvCY2LenNQOg
-xVkdxNoYdrK21FwLl6SQj4vuK2dte5l4
++xC‘Ï•û䌇ñì!÷¼6Ù®X^¸LO‹<1F>ð<EFBFBD>"´‡añÍ·Ò“o5˜´œ6«W»u¿ôpãµÉÎqÄ[qN¹ò;œå¢§ð
---- 1cc/CKuc3QQVSA/7/Boof2VuaMMnrOH8TLZPIrzfa9s
-<%¡A»BMæÚMLx$€GÖþ4‡;Ù•Ÿù½öª#&{½ÞNcâîѦf@'p.Ó½
Á7õÎÍ;¥<>œš%ˆ˜Q	]EèT¬âÁ

agenix/hosts/tanker/miniflux/credentials.age

@@ -1,10 +1,8 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g qZGcazmYr0cVRxTug4vtakkBqgWm9QC5wQPVnLU5iwM
+-> ssh-ed25519 MtGp6g oZsl3PPvlAorrBUF/NTOMyh2KHVwKiECN0v/JkKjtC4
-+tKPQhktikJSIjzW/kcg+izEwJEY3z6gckQb3DdW5Qs
+d0dUtH3ccmUGKGasnJmgNPGgRX+m7ay2SZyTQmQnS9Q
--> ssh-ed25519 iO8/4g pSIzsTaHkoV9WAjCSJIAr9uRNuVTiPTnyacfylF1y0o
+-> ssh-ed25519 iO8/4g tLneEy5uxLTSQN7QfJg9qv4xlXnpvMlMOSJ5kVUDYx8
-oGXKk9SAnuUzGpdO5iOiaZvqtXmco+FAYIgyH89K+SA
+AbC1zlEyHU6Ksv7UyBo0B/QDqtZndiQ9hoJqk8CHOmI
--> \@3Ti?[K-grease n[ qu\ 9?W
+--- CC1Q4O2318hUxt3uyHomz7gtzob5VE3APnNP/or274Y
-7NfUxbNE7d9Om27ckTLpoqygnue5pR5Epu7QWoMaR4CZDQx0KfkeGf6EuCeybfcz
+g±X†fŽÉN"“ð$‚/`®³·Ñ
-6XSsjsAYkZDMsQXn7hMWiQ
+eP$<03>j ‘M!‚$+üEPŸÙ‚ nÐÄà"¸Çõ!Å-âµD0‡™ì	>ÿ"$¯i>ø2Ê;‚ô<1B>®Ÿ&¶væjàì™gé6<C3A9>¹$Eš–»
---- S6oZE6vH8A8dVnWOpfU/5vIGb0pkCueIB7soIj2SqwU
-–Ô´çU]Å×kûÐÐþ±š
ÉñŒëvXÇ™D|94|©†x{¤_öÉB˜ü<CB9C>¾r°ówëÒOë"”
=eK°AâP<{©LÚÊZõN”%Mù	¢µ°t½Òôžè[ýÐDjEúrúgè¾

agenix/hosts/tanker/mosquitto/passwordWeewxProxy.age

@@ -1,10 +1,8 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g DDKoUegvH8ay9AZet7JR5Fm5rlLbG+J8M3S95FYvtlQ
+-> ssh-ed25519 MtGp6g qq19PBr7tgpasCQQi8nSyV+3VShgoOkAwVRobYFkeDE
-/Y+EVrGiGvLNXNx9auwYU3+X8sk7iwreBCq0FxznYCM
+euICZSoSET5kikwN2JMkD6l5w26CPBoxTv+R7Uqkm7Y
--> ssh-ed25519 iO8/4g +OGDl9FY/C7bWx/BvsLurIlFfbcZ4gMTxwcn2PCuLRk
+-> ssh-ed25519 iO8/4g Qs98juX0VMLd4qeUZDlgx3KT8hkE/ksNNWQnEFBiJF0
-jNPfr5GtIpjpPRVu7CTqKFr+d0iktmbsYR4mYls3lnQ
+NaxDEXUo5F3Es59BCVUn5Qx7pxPDyQYTiggVGbTggI4
--> VTq6sn-grease
+--- LBAROexrrljIl9DHzIWLhB373SqiQVqr46/otLElagU
-Hz3Jv4/CTn0KY0K+fczMLo1TA53IvBrbPuIpNLHUGu7lVE8jIaDMOTKIArWdbcrR
+ÈS}£ÓŸßõ¨}5”Þ
-iPdv
+Lç<EFBFBD>R”X1x¼T® ÔäÝ”G„›k(E¦ÖÑãu±áî¯t÷´ÚÿW¼<57>»cj2õGˆ³üàÏöA<C3B6>%zò™Ž¡gðÜ(¶ ’ƒÔTM´æÑ÷á_ë3åÛžŒ)Q¹ë½µ™3û
ã0¾4#8é¹ç°Fr›|¤e	èºÁìñPÅ
---- pCIBj99TU5X4ZaJLTBeTf58TIXAHj3GP7P+AszQ3mfc
-Rš1Ì8M:ê^ºÐóˆ1zYq.~$ŽÊ¬ö‚kŸð
„ðg¡å—ŸQЉibYwïIí¨jB¤êÀ<C3AA>’uyWf$R´¦7™Ès'˜þÓSÊ2Ë´]ºò&rÇ $NÈÎrˆì•àçK«æ“ÕÛP›´^ÖûËoð	¾Ð½øɉš³3÷VCÓ»€§÷<C2A7>ƒ`3¦¬

agenix/hosts/tanker/msmtp/password.age

@@ -1,9 +1,8 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g 5c/NSUkybDx2UKB5fJ9MJQo/C9jl6jF3QGZqZ5aOxAA
+-> ssh-ed25519 MtGp6g 9Pz3m08c3BUg8h+avLzN/A6T21ZjW5WJBjL7GFDBSX8
-O6i3E3GW9D7XLkyH5YR/wLrbxdvuxHtT5HtJDW9bn18
+SjuwIJLJoW11NpbHbZ9Le8KasiHXJx+VrylsxEys5AE
--> ssh-ed25519 iO8/4g L/le4ctTqR6cy6WSJXW6xVZe4/UKW6ta2LEN9ePkUxk
+-> ssh-ed25519 iO8/4g fpMU+i751dqWlOWIuXM59bXWlK+inW+oiAChdZ3S0kg
-J9ShrIEux+7c916xYKvnAHLjuTN0Kr0fP31bW6gdxdI
+PdaffaIeozO5gkwkZ10+TP8QO8+a4OgVQe3dDY7H/Ng
--> &qro-grease
+--- 69RuAcJ8zaLpDx0zNXQ/U7xxlVcc9GzgTvASVBMgg98
-E1A9qzYNBDP3tUE8vw/ZDIwjaiibl4yH/qQe1UpF
+ŸzÓ;@f·óß<C3B3>»0—Ÿ`>#j¬ïš|CÉY–!ºw„?­“Fñ
½Å[%Ÿd>¹]â
---- 2uYCd8++YtmpoHjVat1DB67GC2bELX8Drbk0Y6KdJ+Y
+*)•s£ t`ß]ωx±}žmG‹‰5è‘M´
-.¿$c%ÜWŽ<57>ÒÀS©ìµË<C2B5>GXñbŒÍR>'Jh<4A>™´ìêU“‰jqö¸¥þºITRwÿÿäîxóˆßË⟼Ýq9°FSPf7ø³0†“

agenix/hosts/tanker/synapse/slidingSyncConfig.age

@@ -1,9 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 MtGp6g zhyMIQB98GvWL6S2Z6+rjOkwsfv5Fw1NbICtvbOz8HM
+-> ssh-ed25519 MtGp6g IvxSpUKtTuZH2IaJu7lyzYj5CKbGdrpbJys/ycL4+Q0
-vZAh7I5xP8RobeVS8NIZ58I9tm+cpiOZ7m+gLFKenjo
+rI//+Mq9R/wu/kel9QIXqTzqf/OHYP/GoSVfbA1aaMA
--> ssh-ed25519 iO8/4g QycwplaVdS9CfKWpc2YXe6CAKlCNekT3+4b/+I+Fv0Q
+-> ssh-ed25519 iO8/4g nzawzM0ENbMVQt+WU+gCGWAHJ0PxeUSOtOckZ6LwnAw
-BHoeoRZr3MUbbrF5dSGWUtHOp5RGu6lImAFdcH+z4hE
+JxeYgKyFuIfDGiAEpzRpnZtLcdRfFkcoCSR5UYBkopQ
--> M-grease <tBIm-. 73d5m ?rf< |ZV<=edr
+--- vMzq4rKzuNP7RPYDzUwMW0ndPi2kfuU/7HS1XDZFA4M
-8KF7r7ZTJWphTxl/u8SW8g38o7XZDe2CiQ
+^˛? _ž4ACđRüÉ„ô=Xcż‡G#üŘŔ%çč"6űöhQ±˝Ůs!i˙äµ6ýô̱ĐäŔpö4ŤéAśÄTNłu?—¸‡<C2B8>8zĚĆ6>ö‚ýÝ<C3BD>j%Đ‹ÍěęZŰŽß9‚Ų”P!°Ź–µQ
---- MGWu4qXtsRCcLxRkpSEajwhu7yrhUVS/ub2oPJNGBXw
-0þœå¨oçÿúE¾:×gº‰]íñÐ<C3B1>G½Q~Š®¬vΡZRž­E^”Ô`œs\ܬ@‡F']
Lm‡¦LÜœº\Ç|ö\Ú¾òA;ȺKˆ¤6iÙ^ÞHú”«K°’ÑoGÀ#µ¡'	åØÓ‰¾°P»¿J

flake.nix

@@ -99,10 +99,10 @@
             inherit inputs;
           };
 
-          weather-sdr = import ./system/flakes/weather-sdr.nix {
+          neon = import ./system/flakes/neon.nix {
             nixpkgs = inputs.nixos-unstable;
 
-            inherit (inputs) home-manager agenix;
+            inherit (inputs) nixos-hardware home-manager agenix;
             inherit inputs;
           };
 
@@ -122,7 +122,7 @@
             tanker = tanker.system;
             mediaserver = mediaserver.system;
             argon = argon.system;
-            weather-sdr = weather-sdr.system;
+            neon = neon.system;
             adsb-antenna = adsb-antenna.system;
           };
 
@@ -144,7 +144,7 @@
               tanker = tanker.colmena;
               mediaserver = mediaserver.colmena;
               argon = argon.colmena;
-              weather-sdr = weather-sdr.colmena;
+              neon = neon.colmena;
               adsb-antenna = adsb-antenna.colmena;
             };
         };

hardware/hosts/neon.nix

@@ -4,23 +4,19 @@
   imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
 
   boot = {
-    initrd = {
-      availableKernelModules = [ "usbhid" ];
-      kernelModules = [ ];
-    };
-
-    #kernelPackages = pkgs.linuxKernel.packages.linux_rpi3;
     kernelModules = [ "tcp_bbr" ];
 
-    extraModulePackages = [ ];
     blacklistedKernelModules = [ "rtl2832" "dvb_usb_rtl28xxu" "rtl2832_sdr" ];
 
     kernel.sysctl = {
       "net.core.default_qdisc" = "fq";
       "net.ipv4.tcp_congestion_control" = "bbr";
-      "net.ipv4.tcp_syncookies" = 0;
+      "net.ipv4.tcp_syncookies" = 1;
       "net.ipv4.tcp_timestamps" = 1;
       "net.ipv4.tcp_window_scaling" = 1;
+      "net.ipv4.tcp_fastopen" = 3;
+      "net.core.rmem_max" = 2500000;
+      "net.core.wmem_max" = 2500000;
     };
   };
 

home/hosts/neon.nix

@@ -15,7 +15,7 @@
   ];
 
   home = {
-    stateVersion = "22.11";
+    stateVersion = "23.11";
 
     packages = with pkgs; [
       ripgrep

home/programs/scripts/mp4concat

@@ -12,9 +12,12 @@ done
 
 concat_files=$(printf "|%s" "${TMP_FILES[@]}")
 concat_files=${concat_files:1}
+out_file="mp4concat_${RANDOM}.mp4"
 
-ffmpeg -i "concat:$concat_files" -c copy -bsf:a aac_adtstoasc "mp4concat_${RANDOM}.mp4"
+ffmpeg -i "concat:$concat_files" -c copy -bsf:a aac_adtstoasc "$out_file"
 
 for f in "${TMP_FILES[@]}"; do
   rm "$f"
 done
+
+strip-metadata "$out_file"

home/programs/ssh/shared/private.nix

@@ -50,15 +50,6 @@
       identitiesOnly = true;
     };
 
-    "weather-sdr" = {
-      hostname = "weather-sdr.laniot";
-      port = 22;
-      user = "daniel";
-      forwardAgent = true;
-      identityFile = "~/.ssh/LAN.pub";
-      identitiesOnly = true;
-    };
-
     "tanker" = {
       hostname = "tanker.ts.kempkens.network";
       port = 22;
@@ -85,5 +76,14 @@
       identityFile = "~/.ssh/LAN.pub";
       identitiesOnly = true;
     };
+
+    "neon" = {
+      hostname = "10.0.0.7";
+      port = 22;
+      user = "daniel";
+      forwardAgent = true;
+      identityFile = "~/.ssh/LAN.pub";
+      identitiesOnly = true;
+    };
   };
 }

secrets.nix

@@ -4,13 +4,13 @@ let
   system-tanker = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILpnogLd3Ttmz/At0dXveaG1xF37vV7lz34ojDTIuCOi";
   system-mediaserver = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDlB0cL5CtTOyARWSE2yUsNU4JHUPmr71710mZHzsmbX";
   system-argon = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPP9ygczyi6g8abvj1I0eAj7N2Rli9UMlkC8VT6SnWLU";
-  system-weather-sdr = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBHuAdx5u9R2DyK065DUxdwhEOi0at1WNkY5f4JtrOzk";
+  system-neon = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA5Ht4KaRUvuGFmYLznTkVSnn6isjrcVplz1kKWkrnRQ";
 
   tanker = [ user-daniel system-tanker ];
   mediaserver = [ user-daniel system-mediaserver ];
   argon = [ user-daniel system-argon ];
-  weather-sdr = [ user-daniel system-weather-sdr ];
+  neon = [ user-daniel system-neon ];
-  all-systems = [ user-daniel system-tanker system-mediaserver system-argon system-weather-sdr ];
+  all-systems = [ user-daniel system-tanker system-mediaserver system-argon system-neon ];
 in
 {
   # all
@@ -100,8 +100,10 @@ in
 
   "agenix/hosts/argon/weewx-proxy/environment.age".publicKeys = argon;
 
-  # weather-sdr
+  # neon 
-  "agenix/hosts/weather-sdr/user/danielPassword.age".publicKeys = weather-sdr;
+  "agenix/hosts/neon/user/danielPassword.age".publicKeys = neon;
 
-  "agenix/hosts/weather-sdr/mosquitto/passwordWeewxProxy.age".publicKeys = weather-sdr;
+  "agenix/hosts/neon/forgejo-actions/token.age".publicKeys = neon;
+
+  "agenix/hosts/neon/mosquitto/passwordWeewxProxy.age".publicKeys = neon;
 }

system/flakes/adsb-antenna.nix

@@ -51,6 +51,8 @@ rec {
       targetHost = "adsb-antenna";
       targetPort = 22;
       targetUser = "root";
+
+      tags = [ "home" "rpi4" ];
     };
 
     nixpkgs.system = default-system;

system/flakes/argon.nix

@@ -54,6 +54,8 @@ rec {
       targetPort = 22;
       targetUser = "root";
       buildOnTarget = true;
+
+      tags = [ "home" "rpi4" ];
     };
 
     nixpkgs.system = default-system;

system/flakes/mediaserver.nix

@@ -52,6 +52,8 @@ rec {
       targetPort = 22;
       targetUser = "root";
       buildOnTarget = true;
+
+      tags = [ "home" ];
     };
 
     nixpkgs.system = default-system;

system/flakes/neon.nix

@@ -1,4 +1,4 @@
-{ nixpkgs, home-manager, agenix, inputs, ... }:
+{ nixpkgs, nixos-hardware, home-manager, agenix, inputs, ... }:
 
 let
   default-system = "aarch64-linux";
@@ -26,7 +26,9 @@ rec {
   system = nixpkgs.lib.nixosSystem {
     system = default-system;
     modules = [
-      ../hosts/weather-sdr.nix
+      ../hosts/neon.nix
+
+      nixos-hardware.nixosModules.raspberry-pi-4
 
       home-manager.nixosModules.home-manager
 
@@ -40,7 +42,7 @@ rec {
         home-manager = {
           useGlobalPkgs = true;
           useUserPackages = true;
-          users.daniel = import ../../home/hosts/weather-sdr.nix;
+          users.daniel = import ../../home/hosts/neon.nix;
         };
       }
     ];
@@ -48,9 +50,12 @@ rec {
 
   colmena = {
     deployment = {
-      targetHost = "weather-sdr";
+      targetHost = "neon";
       targetPort = 22;
       targetUser = "root";
+      buildOnTarget = true;
+
+      tags = [ "home" "rpi4" ];
     };
 
     nixpkgs.system = default-system;

system/flakes/tanker.nix

@@ -58,6 +58,8 @@ rec {
       targetPort = 22;
       targetUser = "root";
       buildOnTarget = true;
+
+      tags = [ "remote" ];
     };
 
     nixpkgs.system = default-system;

system/hosts/neon.nix

@@ -1,26 +1,34 @@
-{ pkgs, config, ... }:
+args@{ pkgs, config, ... }:
 
 let
+  secret = import ../../secret/hosts/neon.nix;
   ssh-keys = import ../shared/ssh-keys.nix;
 in
 {
   imports = [
-    ../../hardware/hosts/weather-sdr.nix
+    ../../hardware/hosts/neon.nix
-    ../../agenix/hosts/weather-sdr/config.nix
+    ../../agenix/hosts/neon/config.nix
     ../shared/show-update-changelog.nix
     ../nixos/raspberry.nix
     ../nixos/ssh.nix
+    ../nixos/eternal-terminal.nix
 
     ../nixos/git.nix
 
     ../nixos/attic.nix
 
+    ../nixos/chrony.nix
+
+    (import ../nixos/forgejo-runner.nix (args // { inherit secret; name = "neon"; tag = "ubuntu-latest-arm64"; nixTag = "arm64"; }))
+
     ../nixos/mosquitto.nix
 
     ../nixos/rtl_433.nix
+
+    ../nixos/container.nix
   ];
 
-  system.stateVersion = "22.11";
+  system.stateVersion = "23.11";
 
   nix = {
     package = pkgs.nixVersions.stable;
@@ -44,7 +52,7 @@ in
     gc = {
       automatic = true;
       dates = "weekly";
-      options = "--delete-older-than 7d";
+      options = "--delete-older-than 14d";
     };
 
     extraOptions = ''
@@ -66,7 +74,7 @@ in
   };
 
   networking = {
-    hostName = "weather-sdr";
+    hostName = "neon";
     useNetworkd = true;
   };
 
@@ -74,11 +82,13 @@ in
     enable = true;
 
     networks = {
-      "10-iot" = {
+      "10-lan" = {
-        matchConfig.Name = "enu1u1u1";
+        matchConfig.Name = "end0";
+        vlan = [ "vlan51" ];
         networkConfig = {
           DHCP = "yes";
-          IPv6AcceptRA = false;
+          IPv6AcceptRA = true;
+          IPv6PrivacyExtensions = true;
         };
         linkConfig.RequiredForOnline = "routable";
 
@@ -88,16 +98,26 @@ in
           "ptbtime3.ptb.de"
         ];
       };
+
+      "20-iot" = {
+        matchConfig.Name = "vlan51";
+        networkConfig = {
+          DHCP = "no";
+          IPv6AcceptRA = false;
+        };
+        address = [ "10.0.51.7/24" ];
+        linkConfig.RequiredForOnline = "routable";
+      };
     };
 
     wait-online.extraArgs = [
-      "--interface=enu1u1u1"
+      "--interface=end0"
     ];
   };
 
   services.journald.extraConfig = ''
     SystemMaxUse=512M
-    MaxRetentionSec=7day
+    MaxRetentionSec=30day
   '';
 
   security.sudo.enable = true;
@@ -108,7 +128,12 @@ in
   };
 
   services.hardware.argonone.enable = true;
-  programs.fish.enable = true;
+
+  programs = {
+    fish.enable = true;
+    zsh.enable = true;
+    htop.enable = true;
+  };
 
   users.users = {
     root = {

system/nixos/rtl_433.nix

@@ -40,7 +40,7 @@
       mosquittoPorts = [ 1883 ];
     in
     {
-      "enu1u1u1".allowedTCPPorts = mosquittoPorts;
+      "end0".allowedTCPPorts = mosquittoPorts;
     };
 
   services.udev.extraRules = ''