simon/nixos-config
simon/nixos-config
1
1
Fork 0
Code Issues 8 Pull requests Actions Projects Activity
nixos-config/machines/fuuko/secrets.yaml

84 lines
5.3 KiB
YAML
Raw Permalink Normal View History

Use sops for secrets Since I currently do not have access to sayuri, sayuri’s migration is not done yet. The host keys and wg-home-private-key secret still have to be added.
2021-03-01 15:27:18 +01:00
wg-home-private-key: ENC[AES256_GCM,data:6l3CgB4qCsPuyYOWuwU2vNiEeC0D1wl6yZvXGGYVsZfYvdPjRz8j5yV7ekQ=,iv:slB/qr+cxi8r7cnTuZAd8CuzWVnvp24Li6A/AnZaFzo=,tag:ynh1Z2+IELAJcgBbHwFC0A==,type:str]
fuuko: Add router service This now mostly replaces ayu, which has been sitting between upstream and the switch the last 6 months. It now also configures routing over Mullvad, which also finally enables IPv6 (I don’t understand how people get away with not providing it natively in 2023). Once I get a WLAN card, it will also host its own access point, which currently still relies on ayu as “dumb AP” (as OpenWRT calls it).
2023-04-02 01:14:01 +02:00
wg-mullvad-private-key: ENC[AES256_GCM,data:4smAYjzrMz6bapthHwTdeDJSvnEqnGmDFRZjJwnXWXLSYnEhzhvRttVrmFw=,iv:94o7E8IlZ6V+wez5+Zr9xv92rr06MlUfBCvtMW8VnEA=,tag:SJjrbBseVyWwhf9IHRi7rQ==,type:str]
fuuko/qbittorrent: Switch endpoint
2023-07-03 11:46:28 +02:00
wg-qbittorrent-private-key: ENC[AES256_GCM,data:xahW0lKU7yhinWJylyetdHWcdPdeKg3SMAm5WQhJEIIAFe+i2zeiSb2erq4=,iv:wTIsR7SXp4janh6QLA7RhzGdR7mDAMtAqROxFxKfneo=,tag:K/nDVrBv0ctoynxAEStr6w==,type:str]
fuuko: Add SSD for hot storage Adding a new PCIe device changes the names of the network interfaces, so they need to be adapted.
2023-06-28 23:13:57 +02:00
hostapd-config: ENC[AES256_GCM,data:d4ZOax0k3lM0BEsb9XiyFL1yC5q52RWqwBpyuY9ZGcDk7xLUeeRJdN8S7jeFUzzpQhXsn2FpP/fff/9uqOsPX+01eBM2HMfoR/2VjHTUWUqx6GqSccjj/YaPGM0Z1fMhLZkHyP/LRUBgMnOuUf3NMI97PSYePLD40b0H5rrB/T+m6TtZoRm/hOkOWJRf8oWV5UU/Wqjy4oAFg3VJX0LUi1udei2RK+FgpeFUL3QiUmd4/CyatI6VAtXjVT479hsLu5JZ6ZXTBUVbxnfpTXRDH86OoIGW2HgKhGiTYUjtRc1sPsFIBOJXsu2pK/Z13qPkOXbx1zqlmuD6I39KeckbAfod0TdyUtu30kKhby165ODs7UIgF+BWCSHBm3J/efsplrYnX/izJ54pfeIti0fE3SdepAj4Q/Z15B2wcrQV+fpyVI8YuQmUTYYHH3ZIe+Btavq7I24Qjf6bex36Xp0CNXdPTLUidU2/Iy3lskzVpKFx,iv:eu+wYsRt05WgMUYcII3iHtxXD5cj96Vg6wtPWQCUOmA=,tag:jDSP45H5Ix5oTMpsr4IsCw==,type:str]
Use sops for secrets Since I currently do not have access to sayuri, sayuri’s migration is not done yet. The host keys and wg-home-private-key secret still have to be added.
2021-03-01 15:27:18 +01:00
sops:
kms: []
gcp_kms: []
azure_kv: []
hc_vault: []
fuuko: Add hcloud_exporter
2021-08-28 13:53:38 +02:00
age: []
restic/system: Prune on renge Because of fuuko’s very slow link, the prune had not been successful for a whole quarter. Now that renge has more RAM, it can finally run the prune without having to worry about OOM.
2024-01-10 21:27:42 +01:00
lastmodified: "2024-01-10T18:29:18Z"
mac: ENC[AES256_GCM,data:askmYGMX50W3U/86DBj9CXhLOZdBrTjbMqRtvegDjfFkOtHLInGuh5urfXGnEBDLtLTjGwdWHCU5DZz9AvBNcl0X6wOM3BGxkMF7+CrZ2FL7ZYw+hJ7JOywNryO/vJLdUZ1MUc0uH1YZdYYHjD7nkyVeDj6aDDkO0UOiLsDNEDw=,iv:gpY4O08YheKFAanPkccp6I7z80ygqMj2IdQnYK9clwI=,tag:OAre51qIvnhfj/vwqSy3wQ==,type:str]
Use sops for secrets Since I currently do not have access to sayuri, sayuri’s migration is not done yet. The host keys and wg-home-private-key secret still have to be added.
2021-03-01 15:27:18 +01:00
pgp:
sops: Switch to new PGP key
2024-01-22 01:30:48 +01:00
- created_at: "2024-01-22T00:20:01Z"
enc: |-
Use sops for secrets Since I currently do not have access to sayuri, sayuri’s migration is not done yet. The host keys and wg-home-private-key secret still have to be added.
2021-03-01 15:27:18 +01:00
-----BEGIN PGP MESSAGE-----
sops: Switch to new PGP key
2024-01-22 01:30:48 +01:00
hF4DLHeEFiC484ASAQdApd5fpI1rAWa2hEaoASuyhgmYixdVXWmzjQJhwpGaaxIw
C2H4YeQ+KznZCxF3mDjP40s0u7fTIiO6o4FcbX+dxOcGxdGZQUcVevaHmjflvOH4
hF4Dub78fMESoMASAQdA+1akzujPUkSYGKB1DLidjjoIqIoNnj5H6BKgON3D52kw
v7UYLYbBGxVK1bWyW5MPkQcz/U0pvHknDOusmpxncqVxycULOGTTEhDjRpp+YPxc
hF4DM6AcvgVUx2MSAQdAdvJ9f2HwLQyhk74QTek8Ws0hOKkR9X/sTcq1jh5lcnsw
pZ8iJJ42qK5QyxjsvFsWSy5XVr4ox692aiwssztfFHIFG8y77NmybXL+Y7BJOSGi
1GgBCQIQYTWrLZCbusHNwhoM4gC/YqeR3JnlnAuz8gVggCa6bWaALdGXcaflgRMX
XIq3G5jsz/bR2rv90A3RrEvrTmMOMpij2lsmGYVkluPJsisDDCMeYmQa0Imc6x7v
oqDzRp0oRSDVmA==
=qGmR
Use sops for secrets Since I currently do not have access to sayuri, sayuri’s migration is not done yet. The host keys and wg-home-private-key secret still have to be added.
2021-03-01 15:27:18 +01:00
-----END PGP MESSAGE-----
sops: Switch to new PGP key
2024-01-22 01:30:48 +01:00
fp: 6CD375BD0741F67E5A289BC333A01CBE0554C763
- created_at: "2024-01-22T00:20:01Z"
enc: |-
Use sops for secrets Since I currently do not have access to sayuri, sayuri’s migration is not done yet. The host keys and wg-home-private-key secret still have to be added.
2021-03-01 15:27:18 +01:00
-----BEGIN PGP MESSAGE-----
sops: Switch to new PGP key
2024-01-22 01:30:48 +01:00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=aEWp
-----END PGP MESSAGE-----
fp: 0C8AF4B4320A511384DF6B5BB9BEFC7CC112A0C0
- created_at: "2024-01-22T00:20:01Z"
enc: |-
-----BEGIN PGP MESSAGE-----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=WU7j
-----END PGP MESSAGE-----
fp: 403215E0F99D2582C7055C512C77841620B8F380
- created_at: "2024-01-22T00:20:01Z"
enc: |-
-----BEGIN PGP MESSAGE-----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=p2GO
Use sops for secrets Since I currently do not have access to sayuri, sayuri’s migration is not done yet. The host keys and wg-home-private-key secret still have to be added.
2021-03-01 15:27:18 +01:00
-----END PGP MESSAGE-----
fuuko: Add hcloud_exporter
2021-08-28 13:53:38 +02:00
fp: 2372651C56E22972C2D9F3F569C8187C9C43754E
Use sops for secrets Since I currently do not have access to sayuri, sayuri’s migration is not done yet. The host keys and wg-home-private-key secret still have to be added.
2021-03-01 15:27:18 +01:00
unencrypted_suffix: _unencrypted
restic/system: Prune on renge Because of fuuko’s very slow link, the prune had not been successful for a whole quarter. Now that renge has more RAM, it can finally run the prune without having to worry about OOM.
2024-01-10 21:27:42 +01:00
version: 3.8.1
Reference in a new issue Copy permalink