feat(secrets): add 'bluetop' SSH key and re-encrypt all secrets

trueNAHO · Feb 8, 2024 · c0362ea · c0362ea
1 parent 8f94440
commit c0362ea
Show file tree

Hide file tree

Showing 5 changed files with 22 additions and 20 deletions.
diff --git a/modules/nixos/networking/eduroamAuthCaCert.age b/modules/nixos/networking/eduroamAuthCaCert.age
diff --git a/modules/nixos/networking/environmentFile.age b/modules/nixos/networking/environmentFile.age
diff --git a/modules/nixos/services/borgbackup/home.age b/modules/nixos/services/borgbackup/home.age
@@ -1,10 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 yq+9Kg exOZKlvsrVcVCGrVG4XLvsdkP5p7tP8tC20EvGo9bHM
-uLV3U9F1ETOkXWXeJRRs/fOWa53j6nPA8BpbhWJJZeo
--> ssh-ed25519 uMTWyw TTWkV+8kJkPCYfsoBpiN5OxmoJVYr+anvRdDwCBcoRY
-8t/eyRt8MeiGKopVoRetIMADJLHV7TGfZS39G8+yRRg
--> #-grease
-P3EVUUGGnA3nXz0axtEk2HsYG0Lq+/nN8+KGAFTbqal0LTCuH91fy/ouv2E1inXf
-1RYZ+Y6L
---- qkHof9DTPAQIG8/RwCJxcLR19Jv1v7V0HRObSO6D5/4
-[+@?�����"���Z-���Ɩ�I?�$���5��"�a��$ȏB<���Ҹ��S�R������U�
+-> ssh-ed25519 0fG4Sg +DGN/KPqAO0gCLJ+wZ3PjV1tRIfUYS1VMDyi2yh00xg
+b6dJix+rTk/SAU4iTcl8YwtIXHVOXKgLDFKZQ6YAjO0
+-> ssh-ed25519 yq+9Kg apkStsAaZRYYO3potZHTTpclgHM3QEpwpqZ7/IAM03I
+TyAuwQRWVqDalAuwzbdNWEsX9CqTyaFcJjLIqnBXFJM
+-> ssh-ed25519 uMTWyw 49olqd/tJjLFwPdo/JbxIbEDPSYUMTrgJqg8MjJvmQY
+udkKNDWBhJiwK6ciWVfv2hje60wS8kZPNXxsuUMbPQc
+--- +fjql++oQyYf8xbsCKF/70vszZjnKqNYy24YtuCOvDg
+Q�t#��P��!�G�g���oF�Wn9ϗ`���Qa��,�S�l9]�@A/�sNE4�j�e�wd��
diff --git a/modules/nixos/users/users/naho/passwordFile.age b/modules/nixos/users/users/naho/passwordFile.age
@@ -1,10 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 yq+9Kg Os1fV19M2YXzzk7LnZvpckG24S1RLGQqeGN6TQb8s3M
-5E3tMOyt+MJJUGS4v6BClk8vmN0otSCeqOye9wgZh+g
--> ssh-ed25519 uMTWyw azpJEszTEO0aSKVFbfFrIm7XMCDk3aYPeqy4N1LfEm8
-ty5Zqs8eYoPse3L/KWkWtj3/+yhn4tna6jFzTw/C0iQ
--> "*iZ-grease pEr7l,0X
-iJNlsiz2lEsGHPVKl0058auJ6Y3jANG+fwdbSezFBLdF
---- 9eiM2XR+GqAvhvobY5GI50PXViS0TWHbTYNETBqBIi4
-������H��1n�mf����$Y~�Y��z�X0���p<96���=������K&
-�Cy�B$�F�9!D��w����B�\��ϵ�]�gǗ�1��!j�i
+-> ssh-ed25519 0fG4Sg nw2o/uh01yNid/8IWJgIHBFhotlw7wFFLuUPapx2Hwo
+O/PJ6ilxoHdcbKt7++yjS07twojbKV6xGBF0Gs/EAks
+-> ssh-ed25519 yq+9Kg iZl/5LdeK3IfFMubgZIwXuyRzGi6nydr8H5bXVnAt0w
+9eXAHBn83mH2e5XgVVcbmD9UuCws1t+jPg5eb90k30k
+-> ssh-ed25519 uMTWyw E+DQC0m+rAQnPvxiONGD/QJUdgJM9FYraNKWmA5cUm8
+8VKvzeC8iUfUEepVs0Yn1BYpo2ToBwvT+FE42C2ojkE
+--- lqldwFgMYVh2oQASbjItNA3aYMWjlI9DYpHHSTYCaOE
+�-e����1�����H�Ƚb23I	#���O�4&�m>��+:��8�s��+�N�/�JX�b-�ğx5|�� �0l$��5%�i~���?ݷ��sh�
diff --git a/secrets.nix b/secrets.nix
@@ -1,6 +1,10 @@
 let
-  hosts.masterplan = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP6b528AWQ7b999cQIieawVqmd+6C/uEGVz4DuwAfqJo";
-  publicKeys = [hosts.masterplan users.naho];
+  hosts = {
+    bluetop = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOO454e+PXMxAKd44kW5AMg0jt7u5bDepHZ+oiRLSM8V";
+    masterplan = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP6b528AWQ7b999cQIieawVqmd+6C/uEGVz4DuwAfqJo";
+  };
+
+  publicKeys = [hosts.bluetop hosts.masterplan users.naho];
   users.naho = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICrrgYSUQdMPznQBTYSr4jf1p9feRpVWjFuW1MdmtQM4";
 in {
   "modules/nixos/networking/eduroamAuthCaCert.age".publicKeys = publicKeys;