From 954849f7632430ea56ac93ad230c4b800df3a405 Mon Sep 17 00:00:00 2001 From: Simon Bruder Date: Wed, 23 Mar 2022 15:03:08 +0100 Subject: [PATCH] renge: Init --- .sops.yaml | 7 + keys/machines/renge.asc | 22 +++ machines/default.nix | 5 + machines/fuuko/services/prometheus.nix | 1 + machines/renge/README.md | 13 ++ machines/renge/configuration.nix | 32 ++++ machines/renge/hardware-configuration.nix | 64 +++++++ machines/renge/secrets.yaml | 50 +++++ modules/ssh.nix | 8 + modules/wireguard/home.nix | 4 + secrets.yaml | 224 ++++++++++++---------- 11 files changed, 327 insertions(+), 103 deletions(-) create mode 100644 keys/machines/renge.asc create mode 100644 machines/renge/README.md create mode 100644 machines/renge/configuration.nix create mode 100644 machines/renge/hardware-configuration.nix create mode 100644 machines/renge/secrets.yaml diff --git a/.sops.yaml b/.sops.yaml index 5e35b06..98d8226 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -7,6 +7,7 @@ keys: - &mayushii 23EEDF49AAF1B41DCD1CD10F44A37FA8C15053B3 - &yuzuru F4B5F6971A1FAEA1216FCE1C6745A652A31186DB - &okarin 43B4E35299E0D3D0F85143108E1A6A3507CE6BD8 + - &renge FD4E1FB15DD0F36A77790229826C04C0BE319FA2 creation_rules: - path_regex: machines/nunotaba/secrets\.yaml$ key_groups: @@ -43,6 +44,11 @@ creation_rules: - pgp: - *simon - *okarin + - path_regex: machines/renge/secrets\.yaml$ + key_groups: + - pgp: + - *simon + - *renge - path_regex: secrets\.yaml$ key_groups: - pgp: @@ -53,3 +59,4 @@ creation_rules: - *fuuko - *mayushii - *okarin + - *renge diff --git a/keys/machines/renge.asc b/keys/machines/renge.asc new file mode 100644 index 0000000..38c79bd --- /dev/null +++ b/keys/machines/renge.asc @@ -0,0 +1,22 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +xsDNBAAAAAABDAC3Us97TCrINyQguwEoA6YIF4jWaT1dSzg3BDnkN/g5q9EO5sLm +v9EQolXWaZA6D7Jc/o7cYlv0cLX6fekMs06NgVfDEq0OMhMlPpA73jt5vkf1izgX +7tLDt2K3UFFSdzdtuIQ6yPnX/UdCuitzOaLqNrAOu3gRlfRHJKrKlQ5RcW059A3Y +UHAWlwc5++bni0GRYrdPLVra0iArwf7UEEzFNtOWMFLwYNuJWUoGPdArVZlP1Xr+ +yTg99ba+aUSE70CAtV78yXvmySGXX1qpMu3NZ6FgOzT7WwAO+VaZtSZQopyJRgSZ +2m4t6f1TjOabjxhbjaqhsBZ0I9xkCHklQ4hpnjR1cMuZSXrQXKiRmU3stwsRDh8n +X35TA5BzLg0duKfCDCOih9tEDVpAJqc6YcfQEnknX0sDGTKNoNRncAr54i6c/smj +cqAN0pgGI2poy9nKY4n2eTDv60NBH7Xu98REz8fwj6VEPRA9/IzOZVWouShXkmYZ +BYxp+foOniLc/+8AEQEAAc0pcm9vdCAoSW1wb3J0ZWQgZnJvbSBTU0gpIDxyb290 +QGxvY2FsaG9zdD7CwOIEEwEIABYFAgAAAAAJEIJsBMC+MZ+iAhsPAhkBAABu0gwA +U506lcB0MSDmtY1fpGTtTNAGYFvX4gltnRK0RWgjBlSsM2lFHIJffBWrlDjAQz3H +GITZf5OkohrAMYGQ5+i7c5Q+Z4BZA8bVSSFd+B88riBGSW+OQHgrNBacS0grmlIX +fRlT3Y5FbQRMz2umXQkafzCBTME01CZ6CGQNtT6WfaSj7iDwTLqDY762EuN5j3RB +TRs26zYfTUiJ6qkSS8wxzVTRcpgt9RNzfjDciL2zGt8hk2wBAvfGZwtbmj6m20nJ +gEVoygwabnXRhvv4NjfuNvUVMU3jJ+EZ9zffSxMCHANeECT31RlkOWmnqBU87/hV +11eKxX7oIVvl9ItAIhQ52I1SyuXFAyTp8kRo+q1zlRxM3gAj3z9XCnqJmjqXioK4 +Zm7n+lQNZ9HPTnVWMwckESwPRlySPxhrCBioC2OYKi01k8P8Y91IS36Yf5h68Xbs +LlLsG1jMhiuNPbyuL4YHM5VHf/4QGofmoq7z+kxmCJcrRXMPSQX445tw24XdbW3G +=ATyf +-----END PGP PUBLIC KEY BLOCK----- diff --git a/machines/default.nix b/machines/default.nix index 7d4e5cd..f7a6185 100644 --- a/machines/default.nix +++ b/machines/default.nix @@ -46,4 +46,9 @@ in targetHost = "okarin.sbruder.de"; }; + renge = { + system = "x86_64-linux"; + + targetHost = "renge.sbruder.de"; + }; } diff --git a/machines/fuuko/services/prometheus.nix b/machines/fuuko/services/prometheus.nix index e8c025f..c94e112 100644 --- a/machines/fuuko/services/prometheus.nix +++ b/machines/fuuko/services/prometheus.nix @@ -64,6 +64,7 @@ in "fuuko.vpn.sbruder.de:9100" "mayushii.vpn.sbruder.de:9100" "okarin.vpn.sbruder.de:9100" + "renge.vpn.sbruder.de:9100" "sayuri.vpn.sbruder.de:9100" "vueko.vpn.sbruder.de:9100" "yuzuru.vpn.sbruder.de:9100" diff --git a/machines/renge/README.md b/machines/renge/README.md new file mode 100644 index 0000000..3f7801a --- /dev/null +++ b/machines/renge/README.md @@ -0,0 +1,13 @@ +# renge + +## Hardware + +[Hetzner Cloud](https://hetzner.com/cloud) CPX21 (3 AMD EPYC vCPU, 4 GB RAM, 80 GB SSD). + +## Purpose + +It will host most services that do not require large storage and benefit from high availability. + +## Name + +Renge Miyauchi is a character from *Non Non Biyori* diff --git a/machines/renge/configuration.nix b/machines/renge/configuration.nix new file mode 100644 index 0000000..b0ddcea --- /dev/null +++ b/machines/renge/configuration.nix @@ -0,0 +1,32 @@ +{ + imports = [ + ./hardware-configuration.nix + ../../modules + ]; + + sbruder = { + nginx.hardening.enable = true; + restic.system = { + enable = true; + }; + wireguard.home.enable = true; + }; + + networking.hostName = "renge"; + + system.stateVersion = "21.11"; + + services.nginx = { + enable = true; + + recommendedGzipSettings = true; + recommendedOptimisation = true; + recommendedProxySettings = true; + recommendedTlsSettings = true; + }; + + networking.firewall.allowedTCPPorts = [ + 80 + 443 + ]; +} diff --git a/machines/renge/hardware-configuration.nix b/machines/renge/hardware-configuration.nix new file mode 100644 index 0000000..ae8be19 --- /dev/null +++ b/machines/renge/hardware-configuration.nix @@ -0,0 +1,64 @@ +{ lib, modulesPath, ... }: + +{ + imports = [ + (modulesPath + "/profiles/qemu-guest.nix") + ]; + + boot = { + kernelModules = [ ]; + extraModulePackages = [ ]; + kernelParams = [ "ip=dhcp" ]; + initrd = { + availableKernelModules = [ "aesni_intel" "ahci" "sd_mod" "sr_mod" "virtio_pci" "xhci_pci" ]; + kernelModules = [ ]; + network.enable = true; # remote unlocking + luks.devices."root".device = "/dev/disk/by-uuid/75f9aa9f-bb40-4d83-9f81-18e4f2ce8d57"; + }; + loader.grub.device = "/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_drive-scsi0-0-0-0"; + kernel = { + sysctl = { + # Swap should never be used unless the system runs ouf of memory. + "vm.swappiness" = 0; + }; + }; + }; + + fileSystems = { + "/" = { + device = "/dev/disk/by-uuid/5905aaff-e4aa-4abd-a1cc-f93acb0762ac"; + fsType = "btrfs"; + options = [ "compress=zstd" "discard" "noatime" ]; + }; + "/boot" = { + device = "/dev/disk/by-uuid/07908c38-d35a-4b25-9934-31dd8da9959b"; + fsType = "ext2"; + }; + }; + + swapDevices = [ + { + device = "/dev/disk/by-partuuid/552e77a9-40d1-48e0-9439-0a3c2b506a80"; + randomEncryption.enable = true; + } + ]; + + networking = { + useDHCP = false; + usePredictableInterfaceNames = false; + interfaces.eth0 = { + useDHCP = true; + ipv6.addresses = lib.singleton { + address = "2a01:4f8:1c1e:88cd::"; + prefixLength = 64; + }; + }; + defaultGateway6 = { + address = "fe80::1"; + interface = "eth0"; + }; + }; + + # no smart on qemu disk + services.smartd.enable = false; +} diff --git a/machines/renge/secrets.yaml b/machines/renge/secrets.yaml new file mode 100644 index 0000000..c68c807 --- /dev/null +++ b/machines/renge/secrets.yaml @@ -0,0 +1,50 @@ +wg-home-private-key: ENC[AES256_GCM,data:j+L7Egy3coCajL/LBGcaEbN3WuFzj7aenEQoktcIeKOTMmrA4643bCSDuUE=,iv:gKJQfrMMaeF2muJhtfq0h/GJ7VXGk1axGPtRFccLhHc=,tag:Bsqe3QBNdXo8vWo1p9pxfw==,type:str] +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: [] + lastmodified: "2022-03-23T14:00:28Z" + mac: ENC[AES256_GCM,data:X1Pyw3W9yv37WWKpvvyryLxLdK6RI84jUYEmztSIN5Xl+oSLI1/vtemJqWcAOM+rkXq1o/5XsWWHKhaiJtZg5eFfqIEEpP2Wr8+UratuR07hOBqb/IKoQoTlXffW6+UC/wCAYlz13jdr6ri8zVbN/VBcJvAdZxudEjcYTTrhbj8=,iv:IOsejSW/dKk/V59m/R1QPYDjjWaesv+zSkGg/C2FVm4=,tag:caxNuWJh5tBLSZ+W0jzr2A==,type:str] + pgp: + - created_at: "2022-03-23T13:59:53Z" + enc: | + -----BEGIN PGP MESSAGE----- + + hQIMAwDgSONkM+d4ARAAgkF6yXlKjDfJrfLSwk/6lc3m87NZjXtbBdtS/GRUMe2N + NKESbiEyxBJzzapjdP+SfkBolmfMIpHnZ8SbChEdWMsA2VA22Y9XMvktbfxxCt+d + Nuis/xy00C1MA3vmMF73X5H6gUESXZRelhMzWw9rX1ItUqIESI7R0I+H83IURxW1 + t+Yvffx7LbGgcHSXyerheHWmq8H2ArGQNPOPy78XTZJZaGAwOuKeDdXXSjsIH1qb + DV7vDadknn5I6ujMj2WOzfSq1ylk8dPgAJfXiHTEfRK0PnBEnymzfxa4fdY4z4NR + zlz2afGa9o6ROpda+ahc+DzfNFMm8nTe61vFFNhdjFglg7yiCCuLoFRRFZhY9XvJ + IplvKNe8Plhleiz0JhnUiJ64gwKq3Ff/FZRGd/SmMh5j7teHm5Yz1yaYdfQSOcTg + +r7fO8Y+VBvrfvcw/nRSDAbVKQspQo1Fq04t+DDZivkfiOF4ZE9MEtzzFbz9apkF + ALisslqtEYB3Xu0Cz+VU+lW47+N+Mg3fhshdWs9WYkrbA3mxjJOU96fhCQrPM7J1 + zIH+XwKPmO4R5RDPSPWUfFwz7Xhz2XCzJyBV8+OWAOPFRAx6wO70g144+7EAAdCi + R9j+S8DjTTsdLPeI90zzGZ7GjCrZTbwoelSOD+wyF97nD/3K5XoF12zlEPEiY5LS + XgFAB/5JDgeChC+FSOArnMPK1QP7JWOp1b9et9Zi37THVeIilY5uepun0HuqpZw2 + mcCIj62Y3mw8edanTR9TUPvTVhnhbm+iG9Ibb3rlmOKwNR085OvdCknl45HnFOI= + =a2WJ + -----END PGP MESSAGE----- + fp: 47E7559E037A35652DBBF8AA8D3C82F9F309F8EC + - created_at: "2022-03-23T13:59:53Z" + enc: | + -----BEGIN PGP MESSAGE----- + + hQGMA4JsBMC+MZ+iAQv/QIEisDeHHtSOe8hKubO1bB6qjOh2hz3V+JgGNustBV1H + v2EhV+dSPxS342FcGZm8+hOqMqBHiI7nyPMSDAS4QsrbSSmC5ZGXaP5PU+RclE2H + v6ZQza5+OGRBHKgWgl715AE+NpJM8A3WgX/YxwfxwkzE9pWtffH63Am3AiLXoguV + GhyHoZno2+UkUMMIb50HpHU4O3qfz6jWaOiJTkrALEUkK7+4AgJmMqRdfpki/PyL + eCCw3ykSLtIGsIJrhCfpJx8wD2RolBX/Y+IBOTgq9KrM6CzM0UUPkfO8UQajAaGE + QT7M3s2IGzktmllMw4sPly8eeiawY9dqtTkX5F4Y9N/CWEDqDgyopbYU3YTGSdQ6 + J+llVBM+0TvFy4HDkwtWgNMoUPhnivjo25BLBe3wK3uhroHjmRKk+3azir70E1vs + 14niknpClCY2k7Mq2zSiZ84M7qpv5+XA+11OhBfamOsJ3R0ONnwnPBGxJ7Cmx42J + CHaYDhalvJXOdZSzipRF0lABxQwwmYGO4XXA4Op0eU9b5+vAt5LW7u1jLZdGrImq + IBR/SNLp5e7oUWgslarkwx2Kah9UgNeXb3HT07ucljTcvap7A9gzcEjapTdMNu5C + Rw== + =TaF4 + -----END PGP MESSAGE----- + fp: FD4E1FB15DD0F36A77790229826C04C0BE319FA2 + unencrypted_suffix: _unencrypted + version: 3.7.1 diff --git a/modules/ssh.nix b/modules/ssh.nix index afe8f51..7cc2a3e 100644 --- a/modules/ssh.nix +++ b/modules/ssh.nix @@ -43,5 +43,13 @@ hostNames = [ "[okarin.sbruder.de]:2222" ]; publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJWwV9O/otffsXpikFPta0Y6SNXLAzGibsUhO3tYbeYm"; }; + renge = { + hostNames = [ "renge" "renge.sbruder.de" "renge.vpn.sbruder.de" ]; + publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIObwSrDWwZOkHBzxn9+ftigWN0uUnWrtVaQpPUsYdIB9"; + }; + renge-initrd = { + hostNames = [ "[renge.sbruder.de]:2222" ]; + publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE5HmxGDJO1jkVoUdiKEC3yXrkJ1ZWn4FurGyt2UgzYu"; + }; }; } diff --git a/modules/wireguard/home.nix b/modules/wireguard/home.nix index f56dc22..dca83ed 100644 --- a/modules/wireguard/home.nix +++ b/modules/wireguard/home.nix @@ -26,6 +26,10 @@ let address = "10.80.0.10"; publicKey = "wspALdgkj8Sw+ehNSwHziYE5ZTVyF6rRBKvDHl7moj8="; }; + renge = { + address = "10.80.0.11"; + publicKey = "RlLs/uiWb9qaBU2iDgRag7Q+FFaR7oHI3yOPLZPKgmA="; + }; }; cfg = config.sbruder.wireguard.home; diff --git a/secrets.yaml b/secrets.yaml index 46173c6..285b840 100644 --- a/secrets.yaml +++ b/secrets.yaml @@ -13,143 +13,161 @@ sops: lastmodified: "2021-10-05T18:29:56Z" mac: ENC[AES256_GCM,data:6hU8rMnWDGopyG+SkkWcevXliR80EVnxiEJ+lZyZ7yMwuJhozenBWr89VIzEoPnFhsHcfOpFIa30OkfxMD+xLhHEt7ZQfcJRa7WuzsvU1br6OKtaSdjqbkemgTBhj4zvsUPbGmIELEkkUxYSJsr6n9wAfhpBDTPdeqYNqznjcDc=,iv:NFD8F+TTkhr2b76ziYzLkYpYgBJ7ur4E7Fvmb19Xh0Q=,tag:dobYJK5UU5yF5k00J2V9Nw==,type:str] pgp: - - created_at: "2022-03-03T09:13:35Z" + - created_at: "2022-03-23T14:19:34Z" enc: | -----BEGIN PGP MESSAGE----- - hQIMAwDgSONkM+d4ARAA2zqJa7rwcoNtQpQSCQ5HmXutgTtTAHbM1p83DvxbWjby - SY5WbOvwUVFDSWR91qo76YDHGLaNfvkWyutQEiXSkH4PFJqLj8IjuDqzj93q8HfF - YSOMF2rKZFvIEWjndqZx6LlgqY0kYFf6b1YdatWyeVkblU3zRtQiCq3JaNtXwBS9 - FejXmW9DZvoaCxiCCDb7osLHKLh0RaugeDKZgxV8g6iftDd/ktC8cfqw7VZYjsVP - sbAbtke8VvQVfwf2boFDvFot2Ke5e3Salw5lX6z9Ev13PVLly+lu/wY1t903Eu3e - o974MXgOG0AWHppo8JjNcjFaOUidll1g03q162geJlIrCYT3VLwNfseudIZ62WtI - qpRWJZHn9dP3MPQEqazYqJaurzL9lFzj1TElN1mDqF+ifNHK7KGLpCNxLVvfSU0+ - JGN0pO2dcvsk7nst4MW856PtpZInGjBa91YSpHBOiEIOwpXkCX8JDf8tWbDgECWL - s1sxZ/9BwTskYPr29CzDNBtm1NvMJwpBgOI5OnDdFafxsLIsS+So5d1d3yHdKaIv - 9KMQSsVbDZqjnvJE6AEkacQGqb2822b3Fi0finQJEuRuC9VrNFNb97yPsUL8HyPv - 0rmgbTuxMrs6e+Ca+Cz6n8khqF/8jgmffgQlQ4pQ8T2qyba2MILl4SaLsR60cGDS - XgF/X6vm1SLQmZfU+o/TEJLx0h4vT8EoLyxdfmR5xs2ypMSooKd1KgCQjTwVNdUG - /1NZNq7LerXlk91dGFqlKWOfM2E4gS1MdtW4n3Ektr8iVkH7pq1zIbS7uR2zdcg= - =m06j + hQIMAwDgSONkM+d4AQ//brQETLht2ou8B/q8gTsmY+9FSJF+37jTARBppViUX7Sh + 1WFCq8XaKOw6axlwfBIvZZzaHFlaH4TK/XEZc3AFrBbMt8qzhw6fWpbtsrO+JPZB + Rjncqpw7tye7+wLAAb99mokU79Ls7YyWMYHjJDv1sO7mRBYKsJlggrWzaOX5w2KK + +G7ma975eVT2JPpEjA7YppPPzhvVJP11bzgtwzgyI0m9yF6pBwGP3dfoeInArSiY + 0GA1wBNQVT65jLpr1tG35JJKAIHcVtt44H6So+0p5s7Wrd1Q3D2/cVzPXXx00Npi + +1lWBcXths0VTQAJj5+YSjlbvh3shkrloZdQzg2cMJ9HAyUPO05uTaAEMyES2Z9/ + 1JHDCxzCBafSYJ6fBRY6YSBM0PjyHqZuvgDJB6E0JepSdVnBVeImdDwmRhaIXF1k + KmhrmQqT/9OlUJffSmaMruxREcmA6hvdR5H0bPXVxb1+Oe6AYc1Uau1+vfkYpz6o + dfR2T0HZqAvc0zBHdA7JgAiDj9SrrkY52U0VmfprYNbsXyFWjFMHSQYGHA85LgXb + c3CCVBB9bGqI3EspmWxSHPm+w7wr2cnbSSS7GEXTWFwQ0uvxzJNYKDL8MqU3Zf79 + EXvXPfZY6cCWDbbRnUHOMZUEvTZXi2VfnvOO1NxcHNlIlcRl3s7WiNxaFpJNlrrS + XgFcBLEYeOhFOuprdO+Bg8R+UnM5t47B66+bGbdEfvcR95dm8uA51sfJMJBbTCoP + vhMIyTw53S90OUsCEdkovdIMovTBawJ5egjUP6i1pp6XPv5uY2h4mPpY2qPV2sk= + =aWyQ -----END PGP MESSAGE----- fp: 47E7559E037A35652DBBF8AA8D3C82F9F309F8EC - - created_at: "2022-03-03T09:13:35Z" + - created_at: "2022-03-23T14:19:34Z" enc: | -----BEGIN PGP MESSAGE----- - hQIMA0PuGXQ/rB1cAQ/+MWlay2+NcfRBAmzlQqSqOrV4q6/rMITjY2mWaxNzzJxb - +l+Y1dqEfdqJC1VCKz8Zvz9bgMhqeWzDefETc5LIwYnbMpio33DqzuGspNPpRYMk - BtYU20pYokwehCD7H/yUrAHzsRB5BVvH1+Wqr06qjBxynW+LKsCfM6YA3nP2tPnM - GWdApPIdzsTvg7rqTLCgahblJagLlL2kP9WDWINDFJrADPG5AZBG3i3Q6Ndw5Z0x - 707Kdxvd0Byi5vO28FliNb6gvjovJqZhH5923+D4CesynSYAYLzZP2xRWidlACVx - VfV06e63yCWWNYefvwtpfyZDLLiZnUYp/cnv+IVWhWJkrZ//dt1pz0eqPh/2njjc - qYBRqh2WxyI9bxDpWf2zb7nQ0hRBGllgbBt+9ojDOl6EM3M9SiA8b9oNzgksBVYm - ypf0q2k1QlbL4Fcy/sDt2CuGpprtC4jOnh/foxTAwwQ323/zCOg2Q1fMJxxc/E0u - +Ir/HJozGQ3HngY1uENzGGGcq9ksW/5Zpa/k7Xg9R9QcLacTDD5CkQfQBkGDbeXr - sME7Nnebn2JCwGwGk5WLmNFpT8Wh17aKy6wN76TThzsThVtbBkbD7cgNFCylvQV1 - MDqUUUHzyg4g61ny0vpp1oRnkzW3P35C36Ozy7XK1tBFwyIPAzq0calBx8raJ5TS - UAGU8AXHMTeUUU+gHWi3xa+DXX1PrZUZe2FjXu+DVwEjvj5bOuvfBokVZR2UCoMb - GUMyT08jFRaIhdpgMIeXo7ZonOiMfz6TE5jTVBzJgZhb - =FesI + hQIMA0PuGXQ/rB1cAQ/+KH0eFhayON9KJEujHD0Q9tyqCEsneThd5hdJ+dnmjgz4 + V29ehdUlgt4/f2PY+EIn5BELb09sy77gYtxJsIwnl8OiSaWeXJHK5wuXg4ITBXdg + SgRZceiobtuvXjMknvD8nADA3RiMSXImhEwT4gP2TwI0GrVxE3HXxZHezub1Jbbm + oDWqy0wsxOALPF6dutwcqr/WX9cggMUuFoFogmt9kLIFEXpxdHDq82eRK9zwpZfT + ihcwyuakF4H+U5IjaFPO7vpnbr/3duRnWBqo8xAUnpiyUqkmvNpbM4uP/xK7bghW + viUqyt88s0Ia02vuZbhjrpgb3FYCSP4EZbPfOBmQ3sg2mXU3yLfI14ptHLL0UgU+ + 9vAc9F0x0EDFPrJ+DecuoKVwFzqx2SSf+3oP4r3WVS4uWA1357cj5sJMBcGytWjE + r3Bqb1SqlTlxxwMKSFDOQvNpZhf/AwIdcQ3DOMJchXgDY4xKjJc2cH1/2nRPNwfG + 55MJzVRJ/ZvGvDLuB3Yw4i5uFETz3e3V4X/2md5NTluVpDO+bfXtLmi5cdmPaQYW + 6hVj3ldf/xKyzsb7nVKVC6OgYvpJq3nHTqOMy6Fw59NuJMAW5ptkWKNSAoRXuACZ + DM+seICOVaOpeb3lgYA48U0dIEyb4nvPYwhzC1anil7teal1Hs/9yjM0ydnQWmjS + UAGrxzZMZUjpSfaSka0SoockzdfkiZfU4PWYCZiLNfN5AxJ2kXCv68qrFmpxXirY + HnT4wdbeRJkGNTGMm8X/lYHR8/VgWyCOG/v9fvmEJA3m + =giNf -----END PGP MESSAGE----- fp: 8C5091AEA213FB0642BD46F943EE19743FAC1D5C - - created_at: "2022-03-03T09:13:35Z" + - created_at: "2022-03-23T14:19:34Z" enc: | -----BEGIN PGP MESSAGE----- - hQIMA2UzePEMpuAKAQ//bk6VNOhWzJ7qcZMsVUWXOrOiMZ8Ok9kE99vAikY7NrC7 - /MDVeyqLt9B/7aEmtiWJWX610qidey72Gi/1MJcItf5JstBQYyA4kmWl4DyOa9RQ - 42y0Orzhuf0T3X7wyAk656ladH5rD8H4kAgm9qloWA45bgzDnPBWqakRQDmbWCie - VPiwyNXE+dtHk27fK9W7bfLGgxpkqCYpdzm3Zz2MzJUx+B+6l3WzqeTY8rdFJO3O - 47MeP+jWh12QxpbQxdmqSY3n1e91KQPcxRQY6sSEcNDjlbIGH518STQR03R33ZNH - GUUAgHptvFh9hI7p346t9oMpVRC0t/y3vK3E74o8giyoTqHlXRaDSVuxainNUo3t - kqxEf40I4HVEeTELFfk1ouEb0KWGbpUyFFRVFzcDORDXiHFp3slJ3mW+UHVJuQXl - jZd8tpFinDG8Q7C5rlmmWK53MnCE6LgSs1rQgBCH4K1mQIRc2jBpTO2lDO9GZ73g - q6HJeVSq6pRT/bj2dguECE7DazoRD7zBocvSWMWRPsqJbPGC43Rb0Mc4DOJfpvlV - eTzc6LqlkeaAsI/LcMrs4RdnLDd4KjKe0SM00p/pqSko5geiyV7pfm8TC0gP33iO - 2XDJCorskydmWaxoszcu44RMIF0ud4raMrTLDBjdzgvoeJm7ciz5u/vIkbCqBb3S - UAGEDRQOL4m9Onf4SfbmycgkyuDlrI0kXc08gZhYN6NWbMRtTrCvjaHpbp+oEEDK - WbB3UI2XAzG2wJFElmWEfKHOFMyUJsV73e9PCV87WQ8u - =bdzu + hQIMA2UzePEMpuAKAQ/+Mq7dseoj9Fjikc7uxMQ/4vbpsw//PGdgH0m/YohM4x7i + +jBrbz2LL5T1MxQtrMhCZr0gID7TRXT6igjE6kfuu9JilH1pwMBgEoQEA+HDGLns + hvTlZkY0757nR0ddYM49UFqWRoiz9zQ9p3A0gcx+gUe0MHTW6qNZzV5e6reYqVa2 + lOWjv7LmB9VT5mnzIx+PcLobF6Ycx2Hs7C1yq2meqcglYRNMvYPR2HXaxZahVGeU + f1+N7a9Zp1p5ATM9MAeQrh+qX5xzDA17VzGiEddX/mpKbwzxnou6Ci64CaM6Zxvf + cS7ER8dYgqocVH2m4fmXfugJ9HHPlqltNuJR6K5xyElxuuZk24WKGzvsDTBXwipH + iKG2MmW1Tl7RSGkqau1JCfReL3t2Xe8szB+ASC8hiRc/rRW1rCGoGgk3MZg6dhZI + 05DQj1bEZXtX0v6PY5dJ4zo2fMrfqbGh7aM56BqQvIqVgkwU3WuQb57NueJG5k6V + ioF6lFg7C/2jXuDujcddbPNLqlSQ7USqQ2H3iWvymOT3yz35LqDPVEmhnbWltm+X + Nw9YRkbQeqpEqlNMxrKVaEpOOBnthoGD54dqcnOpqL+geAS+kUWTchPG6LOf9IFO + cby1GLV3iF0b5VdAoG8tCMLXpP2OX/3cQOn5pPDnSLQyfVl2crl44BfMbaz0hxDS + UAE1eAqYekOb8EM9wbb8BH9g+wihmWcxA+WaWHZSToLnMWL9jAgwyzzHH57CGyuk + wmg0Nk2aRubSuwNKGP39ihPQjQ6gqpBC7s2ADWOAIufD + =9BeI -----END PGP MESSAGE----- fp: 17FEEBB45E4245330507C960653378F10CA6E00A - - created_at: "2022-03-03T09:13:35Z" + - created_at: "2022-03-23T14:19:34Z" enc: | -----BEGIN PGP MESSAGE----- - hQIMAzy5uO/X/tdJAQ//XQwEtIkSGiAxp8QeE3n5QkNNgZRzJurCx9+iOPIb1cHS - npMGK2pw2O6AG2QCspA1eAJQUudqi4EwB1V6JHnljRLnQeuagfqRPJOB/9v2v6AR - NgE23Qp8k4f/EjU6w+6T360J0VVudlqp/oX6KTVqeZWDx/H9q7Di7NlBeTmeNl3V - o0mWFMrWVUPyxYJGiOiLu8bA/LYLLJ/vdE0CSPNSLBngaWcvJDiR+dBjMrisMAOg - 0mdnSEMrI0eKaVH9qgzMJ7xdCWAwa31PUQZQDKWk3C83iNZHdDjcDtfbvVVc9UCX - 4AoGYzMSuPeysfXGqDhtxrTH4187Z/fj7v4OYKWnHwipcatzh/783lKOo17HD79l - /LrPaRTNUDt6+NHyFr8GfgHVW8dhAHW5F8abHHigEiP+69/OVK4bYgZOIK1MkMYF - LV4FVn1y2+dGVr7kAs+p8LhQBFuaxQr3QICYUomGpaNngpoo5bTsnhm+xnU/IdBC - qJJg8f+mrF4shqRjlejcbD6HnkoxoyaZr/9LBqLIuxgJQ9oqAU+xIHh/CaGWp3Md - 3Ag1y4nUMfaPQ89Obn87VWenHiFNTCaxbkh2qzM8WkDaJWszNUr3h7luKbsnuAu9 - tPQxKcjskLN5OgZVAGO8xDz6z0ZeXojfHRxsaqJClyiSXmUmXqucaxmAgTzVA/7S - UAGijTgfkoAs2F9szsAgb32JpLGYQYWnKRZhl8+PndbrCz5wEgw+HFm9gmCzYhIb - E24x7GMr9j4naEkRPrmdH+dKN1O+4K+1mpUB0pSZnDOt - =lPSV + hQIMAzy5uO/X/tdJAQ/+KIseFUjUmjfiT4fiZqvuz1gH6L8zdgiifoaFAudSmhSu + C2/xl6C4FaLIM+fiJ8bw4bqofHK/qgGlUuIaydiuoGHODn8HUdDtWGKPDX7n3hba + Pg3dlXTXHVnsHE2p7qyZrkpANBTLtKNCY3DHckpNljOSsCr/vINvZNYTKYEbyYD1 + 9S/FAy7EKzZUlp2BZFqmGek+FMqbVIO0lkcqIF1V0ksgaw9983Kchh1SkCie3/FZ + lUBcYvdaNkxWekBO9y8wKyTZ+kRKeuL5Wqe4wmmnz1q42Tyor7QMuTsTXcf6FU8v + 2JnEKnvbN03GHWZBEPJeDZZ9OFaz3uuXf/r29WnNCvfZdUoWbfTf/h/F6ot0F6uJ + 961narTddorCuhcx2jhTIIDH/YubYgsINqO730km3+0mFoX4QgM68br/2RizoQ14 + swb6t7JJThTEIaGKu744H3NQ+XHe1H48IB9u9sbd5hBKs36tCr/B8YuwCnyCviFV + aYgAEhooBb7Ah1NmPbrB94oSlIiXpCbTvgKBGJFkTFQcbGemw8XSuh9DFBiHBqXw + bLNBT7//mZx6VDpLF+VfqPe++zGA/GfFgksC9Xb4WDk3tWjPWLeeiyhjoJmrNXWK + aCukWTmjvyxhofvn+QDO/L+t42K4VzMdI+griQEya5UKEkx7U3Aq7GR74avQLPPS + UAFbjCG3+bePDITPtBPpYah4mpavESR2l+m2b/c5C0yhBJuL6cJYxjN1GlW+PkJA + lJrIXtS/NG9qsO/PQ/BMGtTW5UZ7+JG7TRw/j38hWvWs + =3Rsm -----END PGP MESSAGE----- fp: BB046D773F54739757553A053CB9B8EFD7FED749 - - created_at: "2022-03-03T09:13:35Z" + - created_at: "2022-03-23T14:19:34Z" enc: | -----BEGIN PGP MESSAGE----- - hQIMA2nIGHycQ3VOAQ/+Jt+P9G4lQxV4jS4xmmT99rFv0GaeNre6GXuoLB5y4ZnP - 9PVzAZ3W5TFzvV7ntxaF6jUS3P4XvY8kXdG6Ilwj8ttjBn1y2jsPY3xoHmsEVGMn - yu4kQ8r74nXmFlyx5HLHNdMNtvHZ9IgXiRCCNz/5Pa3s8Z+kDIWFbeLFP4D8sYeB - DKVT3Y5ii9sYrO6Y0T9vKlRRKezlPUidEdISUXqqh/bCte8gNqAA2WImYEFqPWzp - v6Q4Pb0MBjEq2M/RPhRVDJEYgSKtBxS3RtO1PNqYFIJs7abboWDVCvNPBIoAiqdx - B1NSJBZIKJVKBbBZLJE0tq1JPdU1Thhc+z7mbS1i6jy9ad6i+PGNdtYASuYusdU9 - 1Sh0Xgu8yuTHDiDyvKdWRIPZ1OuFdOvIfqPq3oiH4YlR7c2q0ItxRp4dQkOxh3nc - M2s/k/CGIPoo5Of47acVkDwDV/q9isSmHs/k96HUZNCU6xWO5bcidgcyU7OxBzwS - rHpRe4Z1yQ8LgPRjEIeAGvH6RvcVXJqz+z1YCEaHeyk6vz76oHccXqumfyWoA4Fs - jUKt+ZLUhHh45Aj9EWznquxtke52rYeEV0gk99rQrZVkkMXcefIP+7onGDyNVvQ1 - mIip3M8sILF0XFvUVIH3qcvoOtZbSfjMwAKCNVG016eYJm3VFjwdJ3Ty4F6pbQPS - UAH0bZw8spdi5q5/WE+B4xwPVJ68uvE4ciAe+rSTsWMStP49Rtn/kO4oxFbggD3S - fjpr9dpdOnIHYod+LRJw0pVM5fKGZToHzsgHUZBpsAOh - =Jk2+ + hQIMA2nIGHycQ3VOAQ/5AS5/kcG3BI2FvCU6v8ALB0KOU8PjfTHsK6dzAeAQ67y6 + vDAzh8z2JMOnIlOAdo5NhsTIxuEOO/o1nxOjlIqLdSq3LAsP0sDmsHau69clw3RO + 5iHCY08iR6oDjUgajR0cQ7Kq+GR+RYlwNgZzpAJ9iHIZRqaPgdD5/F2kCfIE9HmU + kKFkCvqQKICRfgA9V5hPm4wjIgnlbDQu/Q3CWfcw4/CMRijkx6R3C3ahY8SNl7V5 + 1WnICHS0hMoMcthJmxulU2RdPY7WbNZ1nF34BTtFT1Vx1cJ9lxycKrWP1JN/chhQ + CsxdaCGFUgCcXzDfuhLhYgw1gWqE4QevxxTMsblbKfd8TEh1NnpfDi8tWgHNHT6W + 5KDgFhgSeN1Uq4lTgLxCthpIBGIepRFwsp7pqyaQgkY2wOCYI6gQj4iasXf9jeBs + xQhvDBW3VlkBCZyrVUBA9Ykc+zgCs21wivnH+2D/a309e1ej0MdcH9gV75CZqr4a + Pw3cBOqotJfAWDWdmAwd4DYwAW8UUZnlInP4+BEbWmauomVsocNUBaiBxOuyjepT + XafUvcls21EnJFZNQyumSr065mIeQaZmmU/haVJMxHEdqmQlv48c6ACppvmORcHN + q4SZtW1IvfAiirJC8ddlZhXxvfDfxQLH81jBfqPieepl/5MpXwcRdzFEGcTYzyTS + UAGzrAtvX5Jj0YsO3bnvkglvMsXfvEh0dfIFRMdpynxn15hrSBL8qjiy0A2fmjub + zW6IBesOEnP+HvDhuH6u7WZkR1wECLVw0n9BUuyV00od + =Aip3 -----END PGP MESSAGE----- fp: 2372651C56E22972C2D9F3F569C8187C9C43754E - - created_at: "2022-03-03T09:13:35Z" + - created_at: "2022-03-23T14:19:34Z" enc: | -----BEGIN PGP MESSAGE----- - hQIMA0Sjf6jBUFOzARAAo5pKYn0Kq4nJBZaEY0is4LH0/ONmXcNenuv5+TQ5fOG+ - 4h1St8NfoKuL0o3drTCe2c3YuXIYRbLzi9udA5HvCjvKsLxf0arZ647ckHv1RlAp - V+l/DtbddLfc3TcfY26qM+rlQQS0V0gUTK+enr2X0S31XpM+acYlWe2alrwfSj4E - D+Lgxnwq/UkGlGx5acubrCY9uOrMCteZOfivEKVCBNUwPsJK1bSLJQ/eJjqGBySl - lWziJOz6mwUtRo6ue//0ISWtzc0/XULqQh7OhoM+02GTaC7RXmxdPYPKealP7OU/ - /gpWJc+P4e8oDVP/9A6r24q1YSJEyNK873TGStXCJTWeSuw6dcX+8Epg/0TDsIXs - 2m245zhA3nOOpp90ze/uYr1vr+dSG2eeH8zOWbVrAsYv3GYCil7XTFFAVU80ExDt - FvQH93GMRrmcQqYhuOQ7x+XRUaXLeSauc31QCFQGhBxCc/mkVGAzk/zXAL0mi+qi - tFsDNgJP4lzeefMkHw4E8RgVWlHewH1ifbOHBBry4DWiGhdkSLs/zfA8mCoDzEEj - qC39ps+uzxJ16WhHgLpufZeUybxHUJ6hMvvn73mQMcoweQTSqild91Wa6EweIKIK - jsehLuzj5ubUuKEe8BRAmE9Gdhan0e0hAcH+75Lfu7OFC8DVRG77Q5RdvUd1rZLS - UAGpbzI+BBAmRTMrBh5QX2gkPVxiq/SfCZMjuoQNqaxiipxJJuxjl0JMtSWbstq0 - vObj1nJeHWF2aKKSLF1XiM0ZWy8G53CvHNANTedommzt - =53SJ + hQIMA0Sjf6jBUFOzAQ//aVDwflwVL+RYQ6bbkmxdUULZk8NNG9I5oQ7Wcw5cw6uf + BO1sTeJ7WsvJThmBt6DOSLNu9Ru0jvXSrh8BMIenQ7GBN1KdN0HgLYdWK9mFKR/i + 2IKEkhNR1CDJOLyoiv9dX0NKiHDS8ic0jxCfEhRQ19KZp+6jFifeIYWQ0/iyDDzy + nfrzeeV2N9+FB39ZPrgsQJlqqG+DueLwz+L4cHkTXF4CdcaO2AWSM5zI3QCWeGos + GYTDrzoQS6Dke+R3uo8NujmFsuLCXKBZW+lNkZQuyf/mCqOj3pKT9env/WCVildT + w40M1v5XsO3raaNQQTeo8tNXLs1geAHyallJ51PZccpsipimU/GfnlbH8/gMS0Zn + hM2Bxeu0w9nTb8ldePzn7FX1f5pGiHBeXTyAghLUAYCajlBFjqEXJnXV02xwg9Ki + vu0V4VDGnEQ0HxMKqE7ywHJGN6rvzalMxkpKjCldalNPWDlivBjmlq1WFggQDCGE + v4709EzaxoBZW+OTAcoqgH13FFurM/+JNhEyU2ZORCyZyRO45mJ9huYCbguH/KHy + Nt8c6StoGcKFSgsTUAdalC49tKYLBaO3CPVmW6LLjou6R+GZ0mZ/3QUIyMX3JnRr + R9PKcp+XYe6deNR5Ic8ImSi4XP/PAqr/QCQ7MB9f1opm5TYK2OHQiCL1cy44m+TS + UAFxuCo139bBguq3NtnUitxOCcC/3Dgqa5esyxQGN8p/VNJhebL4B7KK9XVR6BWk + Tcvm1EWTA4N6chb0/bijuYqO0TIxHnPSp/ge1Rso9pxO + =NmHq -----END PGP MESSAGE----- fp: 23EEDF49AAF1B41DCD1CD10F44A37FA8C15053B3 - - created_at: "2022-03-03T09:13:35Z" + - created_at: "2022-03-23T14:19:34Z" enc: | -----BEGIN PGP MESSAGE----- - hQGMA44aajUHzmvYAQv+N6uql2g4dPHbos0TL0yitVi23EKBpJWsar3XCwkFU8lV - dV0rtiuJQkK43gnimCBRYjbM8IXPdIZ4bgM+jYeWe+pdhEqFpIlATrgE4Mv+l0wV - yDb2VbjgHLSjVaWBqff6/KwukOhFJsPzF6/aT0RrbU4wl5pb3qQTYKwJXj3gazGF - S5iXfx5YZ2h2ucHVCp5wKzX77fBmrrGqcdTL4hmIiEPcCQZAlMuwZTDhrw1kBxi3 - dCiiexnj1H37EA1MLVWMBEvFg7NtBVlqLCOQ48GJq+H5IPY2+LHa+r7ZeUCsZzog - hpHo5wl5R7sHBh3DdSYXXvOuTQEojSjhUhLE94jp5BtdxIt3soej4sNo3cu+T0xw - D0jiXzrE7MwxHxU5wV3Fb1/aWeqkcMnMWmKov+PJnrlmwvDIM66b1pXM6yrJ3E2i - rL4ugLwCpOgg94lTWQcY1t293Fjm5xuAte15XczIHITwd+gXaW2re3Ju89zPeJFo - tGNUpgrXkAHEwti1fWri0lABtOQtNiWbYKR0BDb7yaQjVWNGuG7TzFfCo1qqXri8 - QOvDmDnQTQtnMdFCYIoopIn6hN0CHeODcUDSxnZh83eZ091NZ/EuQg4uDcW3FWEp - +A== - =ys/e + hQGMA44aajUHzmvYAQv/f2PQGdv0lnzy5WJDNxzsKkGLSvXk32gpe+YawUV+5dsH + cQuxqq0fsxrKyJKzdfKWclClqhA5N+8qCRWgF6bSOOw97NzXj331OBL89rwEWSjv + zLaQ+5nIcU21cObr/FXhuRO8uyW4slp/QtXZKqDDwyAOlUugLFRtHGMFohIxrmzD + y76EAwOm5LxoNB5MrwjGXIyRPUvbh2G3zR8ZxhPyo5MmXwDFfoI28T5l720rrbAN + r+tSFro2+RDvXxzlgjFWOAIj6Ns0P+7rBOlu3ff/iP1s7A/ipbuMrNTQNbkd2P/w + 9XOC6EZJ00rH4WpwFv9N6mvbBfqlC547qrkNnbbNoFPWi3oNpazsYIif4BiORmtt + bK9tiayetuvfZS1Y1W+d69iCiG7nYf61wM+z91Fy8XxK3LM8StUu/EuoSAUEnUqZ + nCYfKyGW9RZ+CKSbDU1Gibf6e8a30yqT8q/BdGKOuJp6UnLW4GxI7MyKRK2o810y + TP7klehybuPLnGa9Ujsr0lABOnuoyKY5CKYDkFw9zDferv1zcE6S18qKtoSPn6mf + 6dMkBDJdBeBB5fo8Ul4ZrMme1i0/pylz8Xgqa1xInd+vsCLpncu1sXmWn7kqyzl5 + vg== + =5+uP -----END PGP MESSAGE----- fp: 43B4E35299E0D3D0F85143108E1A6A3507CE6BD8 + - created_at: "2022-03-23T14:19:34Z" + enc: | + -----BEGIN PGP MESSAGE----- + + hQGMA4JsBMC+MZ+iAQv9EHnNBg0GJFMu4sbq2e3H19IAREIHJvCXo3SXJmavw4VD + A5O3nT3IouUNqUlE0vqackrrSaO9/UYpRLIxOgwTIUSYWkJoiUagKJf1PdWrYIe+ + rEeV/thuBsZkXFeyq6y5AQ+NQCOnkcBWqAwG0/Mz1k9uLLeJLmfSxIf4H8wiw3BT + S6xXPZxIcun5uLs/lUUWhat+f9UsSQVvD22CJcDukBqAd6z9MKhgU4sSuSjCNQEQ + qo/USJ0fW1sSKbdI5BOeveENU8WFsHBwy+ULjkjykRpDd5lRRjUTSYvuKT7zSyYk + Fi9PBT7zveYgr7DqAPj/FPDKPKpXGk4HYW3JAJwbcj9yVCEm7tSl37NAzaqw0Dmj + CKV9pew3h+XpnAbVVGzUDx08w3jmioRRaCbN9DhjVzYfdK8XzdJZJiBrLxbPNdnz + wZbyjJA6F8WxnQh7A9qGKzqP9hGeA/pJ2ALT3V1Yj+g7AqHzG/2Q/v7IhKb/fCMo + b4qweCOUh7UbuxKBcLnX0lABef5RRC80qZdiRSK4FLfRAAQISY0wxJ3yHF6/bNo+ + 4fWUmKOfkvzCrywI3BLqXBdL8bhsv+bvBJ1THAkzpK9YO2bWPZK4Xp8E3dn4PC11 + ww== + =XJd0 + -----END PGP MESSAGE----- + fp: FD4E1FB15DD0F36A77790229826C04C0BE319FA2 unencrypted_suffix: _unencrypted version: 3.7.1