jahanson/nix-config-tn
Archived
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

feat: mosquitto

Browse source
This commit is contained in:
Truxnell 2024-04-25 14:52:28 +10:00
parent 0dc05deed4
commit f923a0e25a
48 changed files with 935 additions and 846 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
.sops.yaml
View file

@ -15,6 +15,7 @@ keys:
- &rickenbacker age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc - &rickenbacker age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
- &shodan age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r - &shodan age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r
- &daedalus age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl - &daedalus age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
- &durandal age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
creation_rules: creation_rules:
- path_regex: .*\.sops\.yaml$ - path_regex: .*\.sops\.yaml$
@ -26,3 +27,4 @@ creation_rules:
- *rickenbacker - *rickenbacker
- *shodan - *shodan
- *daedalus - *daedalus
- *durandal

1
nixos/hosts/durandal/default.nix
View file

@ -14,6 +14,7 @@
}; };
mySystem.system.systemd.pushover-alerts.enable = false; mySystem.system.systemd.pushover-alerts.enable = false;

6
nixos/hosts/shodan/default.nix
View file

@ -18,12 +18,14 @@
plex.enable = true; plex.enable = true;
tautulli.enable = true; tautulli.enable = true;
searxng.enable = true;
factorio.freight-forwarding.enable = true; # the factory must grow factorio.freight-forwarding.enable = true; # the factory must grow
whoogle.enable = true;
searxng.enable = true;
whoogle.enable = true;
redlib.enable = true; redlib.enable = true;
mosquitto.enable = true;
}; };

4
nixos/lib/default.nix
View file

@ -65,11 +65,11 @@ rec {
extraOptions = containerExtraOptions; extraOptions = containerExtraOptions;
}; };
mySystem.services.homepage.media-services = mkIf options.addToHomepage [ mySystem.services.homepage.${options.homepage.category} = mkIf options.addToHomepage [
{ {
${options.app} = { ${options.app} = {
icon = homepageIcon; icon = homepageIcon;
href = host; href = "https://${host}";
host = host; host = host;
description = options.description; description = options.description;
}; };

2
nixos/modules/nixos/containers/arr/lidarr/default.nix
View file

@ -62,7 +62,7 @@ in
}; };
mySystem.services.homepage.media-services = mkIf cfg.addToHomepage [ mySystem.services.homepage.media = mkIf cfg.addToHomepage [
{ {
Lidarr = { Lidarr = {
icon = "${app}.svg"; icon = "${app}.svg";

75
nixos/modules/nixos/containers/arr/lidarr/secrets.sops.yaml
View file

@ -1,6 +1,6 @@
services: services:
lidarr: lidarr:
env: ENC[AES256_GCM,data:862FLk7/LgPg746+ASqOSQPgyJnYDwU6YslK9wP4iEBMqAloBeBd5u64Wye27Jn2UBNIHDTORTPgUwNvQPHjEkukXujfdlhf+e+s2Eb9PMgcSwXyYVeZlq5F1NTkA5mr0A8oPiRCQn36osNAVnM=,iv:wZ60YDaDAMBMOr+8l0LjSAw8krdejBnxEMdUq4zfb7A=,tag:Um9xhTFshb6lmY9uD/V2Kg==,type:str] env: ENC[AES256_GCM,data:0iGBqfKxy0fFAqQH9310xjm1qqHt8vvejHxqAd1dhhDw4xODpHPBDXgTeF2VRCTHp5pxgaBQk6u0dNzGbVL8n04mmhIpl/K3UI/p/DVVD//kclhEKrlkq4lSwht4GE+wTuSjIKEG0Dt4MaFEhCQ=,iv:Oa940o0CL1Xz/kw6r8aUioxeGULqBZ0yAmHrgFGLhfo=,tag:FSBS5qa2WI8GOXka5tpnjw==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -10,59 +10,68 @@ sops:
- recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u - recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmZ0FMeHBTMUhOckswenRj YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnSTRnODZtd2o2UVd1UnI4
S0tyMzM2TzJaL0tnSzl4R2NlbFJ5QWFhWEdRCmZ0ZXE1K1NzTVhMakpXbUFWVnFx TXEyS3JIR0E3K1hnNWRIQXAxSkx2QlZwOWxVCnVJSklqRk14VUl0ZXpYa0hraFZu
V0hlVTJEcG9OS0s3YkpnU3plcUlrL3cKLS0tIHRWeG9GdExIU3lvOTJpV0l5VEZY dEF1RnBKU0ZaYXNUK1kyVmdVdUdHR2sKLS0tIC9VSFlNdzcyUnlzTERIV05tUzFt
MDltOXJUQWVBcDZGbUZVcWQ0aFVNWFEKZ3DaQJ2GBFh/ynSIraKFyo5pxuYf0E+j dUpKOHcxNXI5UFFob3MvWThLdSs1ZjQKE8WhRdtdLGRCy0v+HZzFggiODQwkjxWj
ZfVGUueEbEF/MhlmuinsdVkBAABqjeoOuALOQq9EpPMgONQVpW1MEA== pdipereDZzwuy8LDciy6LnWqUidYjK8bY5y7TvAE7lxk1ok0duPQcg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c - recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5UVJVRTlFY0ovV01GVWJE YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUT2VxUUNFSDZneVlMZzI4
aUhJSEdxenExai81S3JwRFVWa3ovWU1OT0FrCnhQanh3azNyb3NmRTB3Z0JzV3I0 czk5dUI3RnNWd0ZTTXhIcElqaWZGWXIrN3l3CklDV2huSDVDK3ZtZkNnN1BXc0Vh
bU9wd2Rhd0hnRTRZeml0VUZKZUJKODgKLS0tIHVrOTNLcEpyallJaTdFVDB6RnBX RTBLeis1aGhwcEhtMVUwRGxpOURxSzgKLS0tIHhCeU5RRkJnNDhXMnpFSW81SlZX
bFdCYTBzb0h1ZDZ0WlVHUzJ1bnNMRGMKMiqkqsclZHZ5oVJ8GiPwR5pu6sonmmok MkFMQy9STXpMOFhjeEF3SWIxZTJweWsKHJ1Zimp3X7rJA3vesl2ixeyrOfsU4s6A
JH6sXvSlCCujEUOaeauOG/RpmcvKlLUG1U+mVSVBbbVFE5cpsrFBwA== wwB53c1ILtGvjuUL4HGCzmcMbfTvqod6Sd2FvWDCg0mThm+dArJrUw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk - recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrMHRVV1dPTEc1OFZhdHpE YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyMDVwUGhjVGo3QmNVbTRT
b3NNSk5yaGN2N05FYk9sQ1dpenJsRmdnaHlJClF6WFE3aUJ1a3A4TDFzanVicXZ6 SWtjTVd1SEt6V2cwZ2IweU8rMGxvNk1qd0JVCnZEeGJldndJZldhbnl4bXdNZGt0
SWo5dXZoNERjYkgvZ1crK2VER3NCMEUKLS0tIGVjdldHSkZGeTZjZDhHY0kyazdH NHVWMmMwQVR3ZXFCUGVOOUUxTHByVTAKLS0tIDdFWnFRcFZOcUdzeGpxYmFhZ1Bt
YmJ4dHhCeWFMbjd1WnB4c1NGdVNIbWsKn/h8I78lSYWhB8W83o9dWvIuIw2AG4Dq MldVNCtDeWxqK29uVnJZdjlDWkRiOG8KA8158ql7s1z3rp0YbpNNfmzTC/ks2kAG
i2ssyUMaImION78X0q6BJcw2CCAk+oJQoI5pVCICHDOARBkg1fSPVA== HHn0O+Wt2+ZcjHqj8k+dhQZQD/ZNsLohcCwMwRgF6yUcxPM4A4ik9w==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc - recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBMlF5Sk1EU0tyZWxJQ0JD YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1ZUZxTlRHYVN4dFRVbU45
UkFJY3gxT21Jd2JjWWNkc3ZQeGEzdmRmbDNJClYwQlRjZGFGTHRCaXBod1lZUHhQ Q2tieGlpUHFURUpFTHVRUVU1RWQvWnQrb0FJCkIxeTU1WERQS1hYNUdQaVZJQzdM
bEpmaDVsRHVKTVJnSndVWVVHbWEyNHcKLS0tIG5RQkpJZ096QkR4NVVMVmpQYjZ6 QXFJU0RsNDRKZEpmdjJKVGVRVmxlZXcKLS0tIDI2VENHZjZxYXlrQU1BMStOSHdN
WUR1S1JkdjhDVWEzeE5uM2xVRmZ2ZTgKGFWrGr+SJhqslErsAbx7U1d+1/KUA4+0 bnNHcEszcWduZElKUUREek9kekpMbFkKSwLYPCbX+lCg+X3lFifvZKz76egV3xX3
6dl2jBmdC6m9H4o/koWwflxNCVIYRA7f6bnuAZSTQWyINIkBVjFFcA== A3u+86QgD0h4iYXg29cm0nurb/EUa2JVNNsklJ3zG3gTblR/MC+2Dw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r - recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmNDlnTDNsYThNdUFCSXAv YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtaDgrK2RWdlNmaTUzaDRn
cS8rQnZhdGlsb1Y5SUZmQ243dFpwTnNVSkdVCmhzamZQRVZXVkF1N3B1VUtBQ1g3 M1RRYzV3YlR2L1VuS05HdlpOaTBrREFEOVNZCmpsalo3a3VudGp6S2l1OTdNVVN0
elNscWc4NWNUZ3c5aCthdjZ4Sm9DazAKLS0tIGhhOG5nTzI3MjVsWVRrZFpEQ0Fz YS9IOEdGSFY4WG5qTGhTdGg3bjNIblUKLS0tIE1Za1JoNUxTZEZrdTRDZXprN1VN
a1d0bUNXeTN2Q25kZVFYMUluM3o4U0EKy7hR3zPNA5V7nVtAVxCk2av/jtmWtK8M MUcvelJXMnhucjlvSWtWdHl6ZVkza3cKwt5HQxrn11mbxNqIjMzZ3RYF+3YeZUd8
NoIEDWTHdxVj1ny2lkdxr9/2rTLt0HxSevAeNCZ5AATg8VatMl6ugw== zZiAGlsv8JGvqMR+sgNOQL3CmtHpl+lyjnhLYEZhgUsJfDt1Vyoyzw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl - recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTL0FrUS9BNHFGaGEvTVBC YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpRTZkMHdNYmQ3ZUp3ZFFW
czkzV1NhZThWVGk3UEpIUUFKaGcrS0Z5a1NnCkVraXJYdlFYUTRQbk9TK3M4Zmhx Vnhvd01pdkpkZTRIZWxraEFOZ3A2UGo3L0d3CkVTU3ZHemloZlEyYjRsdkhVNjlQ
Q3l4UXBxQUZPck55QllqQ0kwaXN4TTQKLS0tIFBNeStsaEtuem1RQi9HQ0JERDN1 NW1BOTFrTk4zMU5SQ1ZYRGFqZ2Y4cmMKLS0tIEVtRjQreXRvcjRIRnBnNGFEQ2xx
RzlNUG52V0VDZ1hoTjYvV1dkM3IvN0EKmIz00NHtCxHq2GxGHm/DShz2f6MQSbcT dUhDYzl6bXRZYnZ3aXVhSkovQUVYakEKuTqmPtyi4j+ZpUx73lIXwqEvOAgWJA4U
v6RU9Fj2SubKznDZQaI+PnZ4jB1HSv/zn/ukaWH1bIktyNWD6g/SfA== 5XlrUBnkXfvoPG1iVEbzpskUxuJPFt6yuYXxfDP6/piqX14eokO51g==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-24T12:27:55Z" - recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
mac: ENC[AES256_GCM,data:Bthgr6Cb5062acA34Zt4fGlS7tpTY7nKT9NAyPHxic5H6DYA2hc8RzfKiW5iG1gRvG6QjvrymYGww+lveAMXavomZVIsg3htadL9/7i3M9PHKnOcKbGtM8Y9kCygIxPLtLBHWfAfK4cgoKwPPUK3r1BO/Xg/clhPyMpwFrUGy2I=,iv:hcPW/6iAMZtI39telDtGZm9f4XmDtTQaioSOrQWsOc0=,tag:RZ8qtFVow2HKlf45dPUjDg==,type:str] enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkUk5lNXFPajU4Z3NRbkhM
WmlKanVjSVVHOGtRbE8zSGV1K0xnMGV2WXpFCmJNSUNGREVjb205UFNvUUt4MThW
S3B5cEdCdTlscHArQkNtTmlNY0x2MHMKLS0tIG0rbUJHTGdaUzFhaHRkOThpRGw3
aDNDeVhSbTNMdmRyQzhpT1NvNHptMVUKF/9ArSsASsjfEyaq+vb3d+Nn+c3T4iTP
POAaIkQ2IjoeqhH0bvjHzGF04wDjLudbEi2BW/wNBnGFP+P/Sq03Ow==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-25T02:28:14Z"
mac: ENC[AES256_GCM,data:OF531a5SUqObj6B4OwVIleY7jmBrj08Qt7rag+YbzR+6HgeHjFVcZqy7kUDrNohMQd65S1H4ahMquze5V3q/SBPjIuJCCOYyR0dfxXMLBHrgpqMOZDBGMqZLZEM3krLCpv10s//wBOWJ4Y9zem3Y4aLLqkd8iTE/NppmffVTwaY=,iv:/Q9zyYU0NBv2K2EBQFsu0E2mgolLDEdsi3URucWhKvs=,tag:qfJn60zbjoXR1yWAUml4ow==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.8.1 version: 3.8.1

2
nixos/modules/nixos/containers/arr/prowlarr/default.nix
View file

@ -59,7 +59,7 @@ in
}; };
}; };
mySystem.services.homepage.media-services = mkIf cfg.addToHomepage [ mySystem.services.homepage.media = mkIf cfg.addToHomepage [
{ {
Prowlarr = { Prowlarr = {
icon = "${app}.svg"; icon = "${app}.svg";

75
nixos/modules/nixos/containers/arr/prowlarr/secrets.sops.yaml
View file

@ -1,6 +1,6 @@
services: services:
prowlarr: prowlarr:
env: ENC[AES256_GCM,data:nG6OqUhyYpNkNYG4Jftgk6GQyivb2uz+73JbzXv1S4BxAh6xYkjH8J7gRpiX54IjvkwhIzovakjkRKpiRu/rQVvSNspNmD8d/XQuCwwVjWXGEi0u4sy8eiyj4+HBlN4o87X839gR3P7FsE6Jx/fWWYoU,iv:jodNStDhD8WrYCkM2IY2eo345WxlilQcnhSvkdbI1sY=,tag:P8Xw6oylmkF5M9ps/U44rg==,type:str] env: ENC[AES256_GCM,data:Dz9Jv4W8WmtxRKZbPKicqn/oVYcD1im5hStZn3J8sITeIid9klDYeF36YsqqroJrI9+DJS2ooFARSUfYSLOQCsWkID/qD6Gd9F83VJSY6hbtee960X3EIhVOyHMhpK15rXGwpusedEXvW5Ksi9l3P/Qb,iv:2YSRwdlhQk5CRy+3F3aUeY5S+rXOcJORBrv0GHsqywA=,tag:SRdAYwvHzSQ885bCJSHiIg==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -10,59 +10,68 @@ sops:
- recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u - recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjTHVwYjZtUUhnUm5haXpa YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4NzNYR1dPVFJTdGZ0TDRm
MG56N1ZyZzFaS2xucnlLK2ZLRzVyS2hVc3dBCk5ZaFdTM25IMUxyVml3VnBmZkpD aEtYb1dpSk5qbGJsSkRDMlVodDNkaWFjWEdFCmROOVZGb3RRekVFM00vdXNBY0I4
R0FTZ0pvMUhNS04zcmJiVjVrc01Ob2MKLS0tIHB4dWx4WlZ1RUNQMWM1cjZkcmhv U2dkTXluZXZXWVlreVlhNnJiZlVTYVEKLS0tIFp5TjFkem5ZYWtCSjhidEsrMWVp
R3l2ZVF5Q20rbTBmOVVSWUduUWxXM1UKAulIE5n5T+3EYRVkjMNZU35RCG2CxGMH RnczMkxvM3l2NXlvWHREWkxhK2YydDAKvH1F6Cu+hu1IRJbuRZzRCw+A9TL45XDT
Ym4aCNZ66mU+VeNf/nsp1Ioj6sefm1iMj0MFJNU4LsmR1NZk2S0O2Q== Xb6qzZLfCzT9OYbfn4Pf7y5AhGCQOzxk84Jx5FJ+4NyeRLJmd/YU9w==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c - recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzN0Y5TWtRM0ZmbVhXNUM0 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkZUh4MzFpRUg0RjFCUi9L
ZnNXQUkycnNrQkRHVnVuQnltbjhvZ0tTWTIwCjNLMzdSaVEvWVBFNjVoUitIUUtu V20zTGF3djc5S3pYWjBxY0RSclJja3F0VkQwCjFmWWVzZjJLZ0l4SjhTWk1Gajh1
Nk1tVzYyZHZ0MEc1Q2dHTXpVQUhrcGsKLS0tIDl1aDY5OER2L2FnbEJ5elRsZnRl b2EvTmRBakNMUmMyc1hTZG14dUNnME0KLS0tIHJYT3JkVHd6c3MxWWFDZ1FWMXhN
MHdoMTRubjc0KzFKU1FkQ2NyNDJaaWcKI9+9hpTAEMY0ArCGy0PorAkRs2K4LPlb S21hZlZ5cmJTNEpOdTNYdHBOMGdrek0Kyl7RSgI0oXsVUedTOa7RAw/sB6OPdlNe
holG3mkYCQhNnF0Wio7m7JIiTO37pIKtYv05KfcvkfNpMRwB2aPRKw== g8VMYn61JhwI3IbhrBH7QNCN9sNAMpeduiYcMRmZd3bz2VP8yh/B+w==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk - recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArallFRkVBa0Z2VnA3QlNm YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBMVdtcXA1YVV4b2ttdlhu
TUxWODRQNnJiUWQ1Q2JLTkJpS1RmS1IzSXlVCnd0OEY3OWsxY3JoOWJOOG51VktI OE1UbVBzNndKemJEdGlwYVNuRGlwdXRjaVIwCiswT0hrRkQ3UFd1Q3ovS2NWMFI2
MGdhcjZZMitGTFVDYWdVbE9tM054dWsKLS0tIFByUUtyalhuQUZpcXUzTUZ2cGVB QktGOW80QTlBQk1GNnBJMzlPNWhvS1EKLS0tIHliTVJVaVdiOHp5UGRVN0tVNXhL
Y0ZIdDUzSmJ3RVlTMDhLc1BhRHNUbUEKN8Q8MwhHz28Chmg969L/wxgLiQqK7ak4 UnRLakVLb0xTWjBoMWxjWHVBMnVoT2MK469xRJHZOiFMEVn4MjxQpBb+jjjWeWoa
1bP14iSLU1d6ee/cxOLreyZhGMhuuDWtiih8MY6iX9czqXWyXiFM4g== MS6o3rLPkRXWlZ2utVZr7iWQSPjLQs8TnwcQMpDmtjZdgoSTv7oIRA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc - recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXQXAreUJhRkpBZFZsMFl0 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYMUl6SE01dExBeDRvQ2Qw
Z2E1TUMwZUx5Z2VrWFJ0VGVmejRER2pIK2pnCnpkaXFJUUxPVEFnQ0svL1FibmZK Q05HZHQ0M2poVERRTDJtQWtGdkdWOThvempBClc3YWlITzFneFVDQWZEbTZJTmxy
Y1VLaDFCeWR2RDZ5VXJ2aEpzVFhlenMKLS0tIE5yeFBDOXJIZDVDSlJCN2ZjSTk0 dmhaanBieE81TDZUQ1RMd1c0N0svQ2sKLS0tIHpIWmdlOHpxTlQ5RGxxSlNrc0JX
dkNwMnY3SHNtT0ZrVE5RU3JselJOR1kK9phrAV1CCUukyWhF9daeS0JEgfGGnXSr QjNsVWVwSTVMaGlYV3loUXNjTGhRV2MK3JJ82yDptEzMhZT3cK++gklEHBfMWmvB
7W+rerFZHETamTN2s8h6mDP10l214p7qTtUi/WvgwpZOWB/VjmUrsg== 5a+GgObJ6cWEjQnrTbSTZzUCz+oXTT6GJZY2qacdiV4lni99o+S7kg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r - recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOOGdzMUoyTnpwdFRmTWY0 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLckVSdHloUnM5eENmU1dV
bnorNEd1OWFXNnBEa29mQWZXSUVCcHc2UGtBClZJZzNWclBOcE5xYXBEWDhCcUZP NUp2VXJIQWwzUFpHTlU3dFRhVWZTcmI2K21jCjMxcnNla29nNXdXek1zT2pZT2th
L2tHbHpmZzBUU2p3UHBUODVmUWI0aXcKLS0tIDFOSFAwcW84NTBYdnhGdlVDREg4 anNMRHhGY2ZOTHJaUm9XblZMNWV2TmMKLS0tIHlmSk1uQzVWNEkwRDIxeThaZzFw
ZXFJNi9udkgzSW5oU2V1MVA1TDNqcGcKnQgJz43rK4PNuquRMEst7T8IhOG4J6gS Z0xZRVV0R0hVci8zZzRHL0c0QmowSHMKOiAfSk0IqJ+fUXMzr3RDJQ9J4o0FNii1
HrnYyhvUfCF4oxmcGHSjpZkxQZ0SwGkbzsy57FVWJd7STW5ZWBu9qQ== uOqeZcmlzR5kYbktEIi9//B11Dsd7myJpgDENALCcfov9MsSzwXvWg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl - recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwNlNnWnBEY2Q0U093bWVs YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVZnlybWx5cU9hRW1DalN1
YSt4UzZiTFpMZWJuOW1PM2F3TXVxRVd6aG5FCnZpRDNJTGF4RVpaU3BSTjdIdjlD RG1uUVpzQm41L1JaZTVNM01SRy9MenA3YlVVCmtNYzI5VUMvOHIydTJOUmIvRHR3
VENlaDlpMWNCZkY0TE5GeVpYMDZSdXcKLS0tIHdWZVRVa1IvUmd0bnVPTUhHc2I5 S3NXSEZzRWg1eFp1SEZYK2ZacW5UMkkKLS0tIEtpc0ZIVkJTci85VWpLc0xXdElE
N2cybmRLRFJlU01ab1VjZmU4SjcwOFkKe6sXcrTHZdrxcNoVyXJVYy9pq6S/NIKV ZG8rZ0ZzZm4wbVRPZTJrejNOTmdqc0UKEnnqMTwb14NFZVC5hsipL37uzlz1FKcb
lbPTBnVmZe/r1pd+617gLzguEqUhh9CtKMhDfxK5A2dDOOjziYlH7w== eyuFOMy2Uz6/tOnHwwQog/gIz+kXoS8LB+IjZonpYz1QPhleN4xo3g==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-24T12:27:55Z" - recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
mac: ENC[AES256_GCM,data:dU584orPwVh3DXHX9BD0DNqH6thx5sMEqWhU558p5gzH8EFe73JOZf2WMqb7E56cN3Eqwtu53pVPLXUtcQaawvhwplyrNvEGb13A8vEe0Eu5chil3wFg1/G8JxTELIKxAvyYEm8A1kQPPhA8bpifqa+8iXl/Ju4tK9YaHgrzEbo=,iv:RKBq2yzEaJxSahf359wXOad4fs1iwUjXTgCWovCS8iQ=,tag:fwEr21eap+IdKo5gP9vMeA==,type:str] enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5ZTk2N3QvdGlOWXRWUWJr
K3F4Z3ljRjloQmNZWXVMV0pUdUlJeXlzRURJCnhhckZJMTJZbjN2Z0s0bEJpeWhq
NXlvQ2VyU2R4ek85dW1Genc5RVRQVXMKLS0tIE5PRGNlWkJDUGdOY1JkVnVpSytG
UXNPSG1qM2dHaWJLLzFNZGxqWi9UN1kKTuhG1jvqrSa3MUjVNFdljX8fJFqoVSMY
0DisdZbhUGkK0KtE+5wTIRuwo/UgnO9HTOew8pSdJ8EHslyT1zxqZA==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-25T02:28:14Z"
mac: ENC[AES256_GCM,data:ZLTxO+Nv91qiTNQSdj4qpJtBUN9cQHIvo74IW4OAuB20RIeC6Jx4VSPKmxMNnCi+Nb1VriMRkw+o/e3tUEcBdhPnxkASkCcX03hZaSkGqBsf+RelPc40nNIzU7kUMdZTfFdt4gb5uKxPI2Rle4LKvgChcY+X+/wtO7laLFRQdiA=,iv:r0PaSxKdRzmYNh0Z4Zco3eNUWnlzV7QyKkSslokSAyg=,tag:zL84//Fu1QC78EVlMe1pLw==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.8.1 version: 3.8.1

2
nixos/modules/nixos/containers/arr/radarr/default.nix
View file

@ -61,7 +61,7 @@ in
}; };
}; };
mySystem.services.homepage.media-services = mkIf cfg.addToHomepage [ mySystem.services.homepage.media = mkIf cfg.addToHomepage [
{ {
Radarr = { Radarr = {
icon = "${app}.svg"; icon = "${app}.svg";

75
nixos/modules/nixos/containers/arr/radarr/secrets.sops.yaml
View file

@ -1,6 +1,6 @@
services: services:
radarr: radarr:
env: ENC[AES256_GCM,data:KYgwdT6ZVBzFlEvM1t8rauVbChgnlvlS+Y+gtoBDBiR2v4zf+fjNI5nE8Qh7ItG5Cw8f6xJhQvfaFht2BRUxRoMRRde1BCqWTAAxvVvrASVx7mPnLBmrNXrv2qCQF9E4bKmkEkU+zZsIaGfrHbURryEv3SVB/mtfQKp/Fg0tbI61TAtCWbBAU0uqKrI4iZR5V8WUXtv9MthqDR3KkmfbxhFEY17+VF6G9WhFMwRspqiS4HLBhV+jV3BUfsJ6ReUnXtmQC337zj0iAi9ppFeo,iv:aT85G7TSbeAOJeQUt6aMM9G4kMgRFPXgKW53iMOt6mE=,tag:ssW3kJqKC5WhTWWJqjwzQA==,type:str] env: ENC[AES256_GCM,data:3TcETcwAbpGs66fXqcZQTNP6YO9M+ctqhWN/tdsdOcpL495qPvCe831xX95fSpsNI9LP9rdHAAGnjLHjtZqTP3/47IXwtgHqG2LrHgVziXhtD4O81dnEH3iUROh7FlsmnFPL2bY39F+nTM8p58USZLKMXymAtJW9vz2XhnBf1SR265tj+Q6V9EngBL1WyA/ft50NBTeAkil2aCI8E2QuhYLy+hNU3ttuE9lpzP8vGW4OBzz6tWpiNXXz2Soc7SYv/qoWrGkMnRCdOWgYwiDf,iv:53dHorqssuXPLONWhrjEagyxBM/cliBbmmx0QD47fpU=,tag:t0vGc16KVOZWcNKNTZr39Q==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -10,59 +10,68 @@ sops:
- recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u - recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3U2hieUNVNGdRVlBKK090 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxaURTYStGd0pHdmJGaWxo
RVBTQVBuM2J5SkdzZGJoTzhmVFliQUVzckEwCk1NMGdKZkxEVW1MMDl3WndiK3du YXpKMzlyZE9DblNvemZTNkZqQWtxY1VBYUdRClFPZVNpZnpKNHYvQTVhaUxHT3Rl
Uit2ZFUzbzl4MEJ3dFFWbGo2MXM5WGcKLS0tIHdrQlZsQWxxLytTODFaZ3k0b0hp YjN6Zy8wUzJvZnZyTXl0aGUvZFhFVUEKLS0tIFZ2eFN5eW9Hb0RUakxsVTc1MlI4
VnFRMnR3S0NBdFlsREgvMlY0VE9YTzQKGGZtEb32jLZeI8NKrb4ZmFwco0aECpnM dzdBTVVVVW5GeDhBNkxpMnlNM1RTcG8KTrKN32HECGfJIvHliB9fnc3ODyki6cSJ
gsUBZbrQ80hCPA1ld4ofA3ut2uLSTdx0GwpvaJu5v+7+lUFnGF2ONQ== hxFPAlyDFW+dBxlpN3XXrFfVxOQWUEZU/+15RogoUcIvVuWQ3Eoc3A==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c - recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvSitzTWpyT3Z0c0NwSll3 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPeFlXN2NWM0dZek56a3dM
RzNTT3pyYlAzZVN5VTFNVml6Um1TTGJ5d1EwCjVlREdpejZBOWR6WjRhZ3pDQWhW bVhlSVJPbmttaGZxZHJDMjR0ZnFQdWthYlJZCjVmYm5YN05pZ0lRRjdpVDVvY3Fk
VzdaV3VuQzU3ZlFqTU9NUDU5STBXUVEKLS0tIFVLS2l0V2ZqQ0o1M05NNDhZSENE ekhNdVMyMitHNnRPLzYzNTVjTklpZE0KLS0tIDRGaU5zdWRCQlRYa1lJWnhZRGw1
MnVrK0IwSU5PSUx1aGJDaHVIdS8zc2cKvnOm3dTY52PNwyx70zK9xVjAe1iIbMN8 N1lpZURXZm1jR25QQ2gxdlQ4NXJGT2sKn6k1OdJjuFhKVPZW82dtxIkBk8ZArMrz
E7jAi2aGjVIgECo8Z9ubCgq/zUcNyNKIfONihKpt5TDc/xh4z9vp2Q== mHmqY/h3xgKzOkXKLOPptPlDPbs7O5MHHOtaHkIf5CsDU2iQ35uahQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk - recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwT3gvWE5XNWVFdnJ5cFRr YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1Qy9yT25pNHIrb1UxeDZx
V2ZFNE51d0NMcEJVOW9sWFlZbmhZOG9DYWtJCjdUMDlJZGlMYm5xWVNZbFhSamZ5 cm1JL011dXNleXQwamdLYzg0bDRoeHlvLzBZCmJ3SzJnQmlJTGlTVzZiWG1DY1hv
eG8rRmFOSWwwVDZnN2taSkRhZkJKU0EKLS0tIDRlbXgrendqQXFzdC9pLzRxSVgv dkttV0poaFk5U3U5STVGVzNWOUFhdGMKLS0tIDVhcjl3WFo0eThOalpsM0t4ZHJ1
MXNMR3haNzlOOGx3Y2hkQ3J6ODhkR00K3HdfGIliT806bKnU8ThKwql4lnAo7hg4 TGVadytONWlvdWc1MmJ5NW9KWkJjMk0KEOAsacWwG/MeC9I9vByN4tqf0D8kQiZJ
UtW3Qvv41UAaAU9eF7IwmVBAOBG/GdI6CSLkVtVvCA/L51ig5ut/Rw== YAzMGth4tQ5v4hH1rF3ont6Wn0SigV7tXspHeTU3FhdFew1c+m33yw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc - recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvbGxTSjU2c1l3VHlVd2pR YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCenRLblFZdVg2ZE11SXcv
c2xMM08veFpKREVJN3JvTG5ubVpVQmdLdTM0CjNuVEEweHFjblNJYzhjd3dGZ0Qz aUJsL2JadDNiTTV0aE5jRzBEZDlrZ0Y5SnhVCmhjSVcyME9GakJDMjNUcWNjQTha
bmVvQk50S2FGTGVpRFVYcHRnWDJQZEEKLS0tIFVjbGtsWHQyWFNzVmtBVkQ0aVdP ZVJpMVVwa1Z2M0JTbEF6bXFmRlJUbHMKLS0tIFkyRGZ3dUlPVzhsNy8xeW1VekdS
OFJsYVZPeFVFR1VtWVZzQkVLdHhSTEUKX7e67zSL3tTASuymcLPiMwTD52aWCx1h MENNbER4bm5sMlZKcU5xaGNpTUIxLzAK00lUlwueZLWuzcFm6xYia28EhcFvqNCW
oRlppiEvnPQx8qAaf1E6JWHl8wmCQXF61S+i1tu79lpFwNum2XFyMQ== 8IGo+bhv39vF48XUQnLkQqimdDQXHKHbCSD3SZRQh+NuEB9QT9Fw4g==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r - recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3dzJwcUFMZEl0OGZyUllq YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRMkU2aTNCWkI2ZXRUVWJT
aGhxZ1N6UFhTZ1ZEeXMva2I1dldySzFzV1hnCkFWVk95VmdoY2l1KzBvWHNocTgz QTlXdWZlMTZ5WkpPUDJidEwvY2krYzBmUG1NCkNTTWx4ODdkejFyWURGc2xoWHIw
R2NLdGJNQW4veUJLLzhZUnBSVW03QkEKLS0tIFN3VkhKK0d3SVI1Y2ZCeWRrbUpa WjNxcHoyN3I2SDdqMVNvNldXbkFGbnMKLS0tIG85WXRBWExROHZhdVlSQmlsU2xr
d2ZEaHBmWld0cDlzQXVQc3BzYUxYSzgK4rMsuCB3pUrGSwAPEysZDFfYsL6J9l9E Rk94eklzQkh0TEtqMVBwTHpBbkpTNFkK14Hg1tiUbaR5qppsnTY8APT6cEJ8U1rL
o7EupCIE8IFOCdaIWN/DyuTe631E9N8lzal59sRDWLGvVMwEcQ2umw== Pa1CFZlb/aELcQVSpRTaVVYiykRlgM5BsWnkLTETTKjG+QWqAxiXTA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl - recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHUjIrM29KTGlnUFgxUi9L YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSUFc0MGV5d04xaUdaemMx
S2t1bDJDV0JkR3RZdGdyTDN3YWIxM09vNEVZCmFVN2ZQYzdzTTh3M3d3YW53TmI0 cXRVU1pJWktmZHdjYThyRWtheHgwTmNSdmtRCnJqenFvWmtML2VGOVFqQ3ZMeVZD
MWczR1U5MGJ6UU1OM3dqNmR1MkN4L0EKLS0tIHEwZG9TYVBFdzVvUUdHVFFqQmR5 bUhlMHhzbzdHYW9RWXVWdVZkN0RnS2cKLS0tIDFaaWR2eG1zUElidWRJQmxPV1ZN
UEQxSUVWM3Z5UlFXR0Fyd0dCSzVuZTgKCX5wVewFqL6skB9RFOfvhHy6s4IxHmVx MEpaVVJSbVNudkVCWmRtTFhKdWQxVjAKOl5ejQwM6+vVfp0FQzyUCRMmdJvdH0OG
wmfx8nPWr+qPLBTPKthP6+FVQ5JVeiKjnBCHIM4rAqYwdJfv/am3bw== mf+80ADX6UsDB+lK8sVqPdi52nJ0Nz1bhpq8cI2IQLRkWBg8nyhqWg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-24T12:27:56Z" - recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
mac: ENC[AES256_GCM,data:E7tnlNO2igLY7fxUNj6YpBN+moS408x5/QxSoxKTzss/lQN6pEMxAQoKJl34rXgoyffd1FbDUWxOqhjG/OZnOAuSRWYNG+81SRn2g5jaeZx0M2STRjxqaWE4pkHrCkQ3mkyd7AjWtFdPONrJebLxFHE3RarZNAAnt2O3nG1a1s8=,iv:kAdTcFkUAp0uR6AdA304vBtaF7pPdj+D82D+1pOahcs=,tag:6fP30fnR0bI2kmP895qZbA==,type:str] enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsYUI1dEN6OUFTbHlhYWVp
NnoxSU8ycWo3Yll6Vlk2S0ZRWm1ST1NCR1FvCk1XcHJjbmw2WXR5TUVXRkNPZmsv
VVJJZzZzRENORE5nSzlOZ01hSmlMRVkKLS0tIC91RjVEOG9pSlBhcXdTWkwwbnhH
aXBPMlFxejJTTC9IUWFGcWhqTVJONmcKt+0hE9RZfq481iYTLc6m9IQha2Mzbd7x
h5auf4L3BGdEGMQRjGFiMR9dnhMH/06rLF6LWyakLyWx4E1T5cSksg==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-25T02:28:14Z"
mac: ENC[AES256_GCM,data:V9koPJpVa93BuCjN0ncA/xt7cRC0r4MoY3B6g35PdKqp89QWNIRBCTRJf6Yczqa0JoM/xRW+COvgR/01y6hpwjsmyPtHskJAd8qlW3cAyF0sCCO+C0L7WBkRvfDxTLXw1cmrb9XtXG78q+6E3D75YYtYn4rfCxv5yM/gH6Q3Fbs=,iv:5u7mNFX/Kc5lNNHMOHoUcV9z0WPO8kYwAzINwpqUCIo=,tag:4XJ8/elFm0V7sJRcZz4yIw==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.8.1 version: 3.8.1

2
nixos/modules/nixos/containers/arr/readarr/default.nix
View file

@ -60,7 +60,7 @@ in
}; };
}; };
mySystem.services.homepage.media-services = mkIf cfg.addToHomepage [ mySystem.services.homepage.media = mkIf cfg.addToHomepage [
{ {
Readar = { Readar = {
icon = "${app}.svg"; icon = "${app}.svg";

75
nixos/modules/nixos/containers/arr/readarr/secrets.sops.yaml
View file

@ -1,6 +1,6 @@
services: services:
readarr: readarr:
env: ENC[AES256_GCM,data:YawzrLwSByBF3g/6nEHjLO5YJ4PFFQQC3JyldRR2D8htRuTzIpP2qup54XFrH/EcJtgwX7HdoFvsnJvy3xseU0jtK0m6KI5RRgikOggMZu55ZboNgx8HdKXJZ+qrT7+DNPqPn6rdhpf/S2hISOBqdg==,iv:4pmZimKO3Umb8qVjhXQrkMI8XNUmUWlx0chWYyh/tIc=,tag:kkzFm7Evu0m7Z27VDYtwGg==,type:str] env: ENC[AES256_GCM,data:byg++S4Yd9z0vYQ9U9Fy6CN6BSCXsz8Shz7hOnG93ssFR5wUAKfMV8KGXjrUTcbTSsVh/QwlX298e1RpDe3/tFzSQFe4UaXGOi2m5bQcq7jgB4WzoPAH1b1QyHu+k8Ryld2yIDMLPE1gzK4qYZquUg==,iv:fQ54fRmI/96WnNMELb/BLXhTOYbYgPIMFPbW9N5C4ok=,tag:OVYd14h8ZFXmrT5hiT2XsQ==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -10,59 +10,68 @@ sops:
- recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u - recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByMzJ6d3BuNkpEYkRBRk15 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYTWdzRWE5cTRMNG4xSjNO
VUNLd2w1TFdUTjYwSG5RVTIxRGc0VkgyS1JJCnJXSWNXT3VhTFZuNVZmeHBUU2Jt VHJxdWhpd2xGaDllaWdiL1NNMUNmaFRmMUJBCkFla0xoQkk0ck1LbnFSbDZWUkV3
ZGJ6MWtkbldRK3ovejFwYTFLeElqa2MKLS0tIHFlU1p2RitFd2U5eTZXR3FGNG40 UVRLRWpDNjVFZmpDUnlBNFFJY0gvQTgKLS0tIDZ4bVJ6aDhWN25QMmxLMHVaeGNh
VlNSVnRyNGl3eEZqcG5RYW1qakJ4ZzAKHQvxK/C/6Zw2YRdRTnAZKc2XEme5NzsH ckZBNENQZEI2RG4wR3RLR0ZESXFiZHcKQQsq3ysOO4ULXsidEjkTbpIDDJd0aRnP
yhf+4V1CIxXKH+UhkA/eLucCm80aAUuzy1/lb42kal/f/eMiVkKnVg== wQHgEgr1QrsD28SLhSclwxGgfSCRo9xWr5IVQSElq+vKX0RqGC27PA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c - recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRbHorbTErTGhSSmE2V0ZV YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlNzV4dHNMQ2JGdnNBZXhY
bkx2Ryt1ekw4K1V1Sm5PekhqbUQ3WXRkMFNzCmhTTS94aVpnT0NITWQydEJKYUwr L1lBZVFKS2dsMW1CejRZNVR3MGY3TTdTL0NnClJmNkp3QjdHdE5RcFkydnZnVTdV
Q3l5dWJ5emFUbG9ONm9Wa3FVK1plQzQKLS0tIFpDbnZLbWJSNDA0a3pFV1lXbEl0 RXB2elp1WjFnaEpYSWxFc09wY0dCQzgKLS0tIFFxSmRXM09XdzZTT25YcWNMcVZn
aE9mQnYrY2hRcjBEZFp3ZysrUzdtNTQKJiLqvRkAyyFcWtzHtDuhQ2KtiZ9jfJow QWp0cUs4b1NIL3k4d2JmTTlVVFY1Wk0K2tNl1gwG5VCaxNIJAQeWo8vUUSaoucwI
DMEAeOaZuL+AURt9mZVtqMa0dV6/SkDYJKbUueJ5MQHwNTV+HLbNTw== 2pvublyp0Pflt3P54BduhK5+T5Nu7pPesGwNVcyB9riXPBZGNVpj9Q==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk - recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2SXFabUlZSDFVR2kwZThR YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCYmJ4emJjMW5ncXplbDN3
cXlPWG5acUxiVEJINU9tTDI0cHVMQXliTFZ3Cms0VitvUWF5ckM2ZzFxMk0xc2Fy QkxNOXhLZGZaejZaWkpaUVNVMWtCSUZoeXdFCkdmdHZ3cnNXVWJuS3YrSDRPcVVy
ZTZRR0lIbVZRRTEvNTBlRGh2MnBYVEEKLS0tIGxuRmNtWktiS0hodER3RDhwc1BV UDVtaHJyc1l2eDFiUXc1YlI3VTlpMkEKLS0tIGlubGtkWmJWZWM3emQxdVFhdExw
amRpVFpId0pmbHdrRjZsYjgwcHMwT1UKGeXpFu5NKaOInzBBNV3Ym3zepbRNyBll bTFJNUJlMDEzNTlLejhDZWl2c0c0SmMKJZAq4MRPjzJEtaCrfecPjWspLmOxtSDW
532O+48xMDArlvzgfVnYsVumBP5H14lzZNLofNYI7yVv3kAbNQHsPg== A3wzUZCKinJfRagyThhOhEhgzv0tQAgKSHrC0I52bARV5WIv1Lhmpw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc - recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwV01YWnF2Kzc2RmQ5bk5t YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0dmRUNXp6R1ViQnZFSExV
VEJSS25mU1cvYlRIbTJXRnUrVzY2TnIyMUhzCmVCZG8zeWlmVnU1ZVA5aXVvbG45 SWxDK3hySW5PZ1ZwbTFGdi9vaGlBT1pwdkY4Cld4R2VuTTl0U0NiejBITVpCNTA2
Y3plN3BHZm1QRzEvbUViVU5uSFVMVGsKLS0tIE02bEJRVmt1KzRwK05JbERXSDFs RXV3dWN0SlVyYUxmSXJtTW9sMnlxdTAKLS0tIEd2alBBbkhtWncrUEg3SFArOU9Q
Z3VJY3RqZWpQUllzbmFpRXBIcFF2MTAKI4yVKMskXEDEJJpj/W90oxmuk12u54yO eUVhZUlaaTdwYUFHS0RUSEFIVWkyRU0KIm9KEqcp8rDhz9WqM4k9nOJcwkKnmMVG
agd6jU0lRS/E9DNZUtswHfa87umoAFaKbOnHn53AgCyuwpLx/btZ4A== DZQOlTDBvGbHNeIaiq4NUrYyUgpFXwai8xlIZoZIfZ1Na9Mrm03yzA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r - recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEdlFXUE9ENHFsWFA1ZG5j YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3cUwraGkwRTN4ZEVSdVUv
eWJ6b0E5SHpUWCtlTnJhd1RkNzRGYytONXpjCjI0OUY1WjZpMi9HUGt4bFlhMzBl SnNHM0FWQ0RsWU1nOHFCaVkyQVhnU1Z2Y0ZnCmt6dFNFeXQ0WkorYlhIQkxPaDl6
QlBiQldrSnN2cjh0UjhWYTNwNS9qbGMKLS0tIEtxbzc2ZmNJcnlSUWh0Q1B3ZEEv enFORHgrMTQycmI0MldCK3U4cmRzbDgKLS0tIFNCZ1REYTRmdWlsTFZQVUU4bW5P
QzNtL1RDdUtIOURpN1g3bTZ4TXdxNlEKRknwCVLyY+fG9Uxz5P+5qea2UQcc3QWa T3BNbytVLy9zblF2VzJmdXl4a0Vtd3MKVJNB7Akbb54BCIqyA3dl6LBrG5GgWbbF
vsh0vsxv//Y4WnrxkP4TzptMq3hlTnLxSYoGnsrBLWRK4p6kl43sfw== 1RLsI6eumdj7aWBAupcypAcjvdlYwcAdkFQsPiV7sLKc4mRyHaBGBw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl - recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkbmI4TTFObHZJSjU5d2kv YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4ekh4WENXV2lTcEVISWZU
THpvaklhNEdDZmI4UFhrR0dqTHBNOGpmQ3k4CmY2S21rWjFheElUdTV3aHptdWJI cEtBbzBwTkd2M2xmY2VnK1RuOWpkQzBnUkJZCmFNaWdKYkdXaTU4MWJid2YzRkJv
TXBFc1JQY0NOSk94ek5kYXlUR25LWmsKLS0tIEwraUVha3JVTjFGYi9EL2tvaFhr TEtncGVjTXJKY0tpZC9DQTRUN3pzZFkKLS0tIGMyUzIzWGdyT285ckhSNGJOZG1x
V2tieEJrRUhyWDhxMlNKNTFmTkxONGsKKFOWGW9nNgK5n2CiTyopmO2u2IRR8SaV NklqL3RydnV6a1d0NWJEbnd4Qlh3dDgK8X58SzQyWyU7s6c9njArn9rOGcKq3TUd
wEd+I2CjGyjIYn3b5qJ81n7hEtpY7oziqtX7IsZzDU5KzTxEQVYaeA== 4CpcxHKyNfn1XvhOdpmMirGYJ6xf+UHLe16fieMPo50Dehf6cFIphg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-24T12:27:56Z" - recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
mac: ENC[AES256_GCM,data:5vCOLHtkie9FsOKCV39noVOY7g1rEADu1IEuJotrFImp7WopTRLKh1YKY0qI+APk7HppTlfqbRt9+rSpebjlwp6fKrT3AX6umPHSNehOd5pk61DcSweA7cEnrRWLecLDzqzHT7hT6gq2VVh1qOTRQCokWJa7a7Mw5qPC0p42dCs=,iv:9Ech2/OrgnOk9jG1d4N7/9CneoU+GasPfgF1jYuMYTs=,tag:G0UvsdIBwSHOtX3D50o8QA==,type:str] enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMYlhNazc0K0NaR1M4dWRs
UU13VDcvMXZnUEVBNEtHeDRuVlBlclVrd1FjCndIOUlhTHJpK2RWcFRBeXptSkV6
dEF3cVgvc0Z2QnRVaTVtdEp0ZFAvcDgKLS0tIHNPMlJDK0R4YU84VnhGcmQzUG4y
UG9RVGdyMmVaMkQxeUM0RFd1S1B3ZXcKXM4dwy1mXGmI08A/EfMguTmdC1D73ood
8NSN8n/L2GqHEqRZwaWJhy4b1HRYvACpnUjivJzVBptCyghjLy1bAQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-25T02:28:14Z"
mac: ENC[AES256_GCM,data:uPeGJM7TpizEwV1ovBE20C5AhfmJb8kekkxoCiiBlY92LlFjlsMJf9FkWwNevGxRtJuOXdItd9Kpxq8ywebEUKNN1qXkd9nGOon3AyOtAU1mhAGbeJE03Jr2BliwPLK4OWvnzjerH7GaBYaYgf971Rm6Q7JT0fS/3C5QIDFFLaU=,iv:PQ/F6FZSZvDVJU2OdnsLNS8an33HHEkFzIksGLNqoPk=,tag:b99MhEnUZu0xY9s1Rd/1lw==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.8.1 version: 3.8.1

2
nixos/modules/nixos/containers/arr/sonarr/default.nix
View file

@ -63,7 +63,7 @@ in
}; };
}; };
mySystem.services.homepage.media-services = mkIf cfg.addToHomepage [ mySystem.services.homepage.media = mkIf cfg.addToHomepage [
{ {
Sonarr = { Sonarr = {
icon = "${app}.svg"; icon = "${app}.svg";

75
nixos/modules/nixos/containers/arr/sonarr/secrets.sops.yaml
View file

@ -1,6 +1,6 @@
services: services:
sonarr: sonarr:
env: ENC[AES256_GCM,data:Mra8ebEFNtpG4QdftenCp1EAuVGsvj+cywwPKHkxt38uOXDoqFlllooLvwmHL3XT1af+dXd2orzBuUiInTHN2lS4gJRKYvemeglpwdsOTwWVvCIg51aeNusMev4fcb4cycR+s1iUBsOMVhbFaNHW9QJR/rH6sYic+kqLxnMNdo3BwI6+lccFDQ61ArkWTWueQ75iWBUYSwoQTIghvw4FWJeMI8TIYZM5m/mKBAygBPyIpYeNkt8pP7bDIoeB+706WAAUFSbDwAntqlJ0pjYO,iv:ZqHOJ406Ae64ri7vqeC7QLm1uiFnJwuWhZWIuL4LwzU=,tag:RwERHxeiSIYavfD7RqHThQ==,type:str] env: ENC[AES256_GCM,data:kPZmmSKfV0qQL57PAaA8lfS413sVupqK07dqJAE+n/VhoclbWnNTVtGJs0pgY9OSu5ugtzP42kJotHZ/YBtON110+wcuoZEkAf4ykzZB5yWvbO/eJOYGNKmNWivLqVlNuCBfubOU5qc0k8NjAFNO6+hBhczJBWOe2uUVVgvqYpeRI3L8BBfEg0n5EaRSRduwPPzp7PQAUubJ/uhIJKLgfRDab8SA7RLIgK1u+04e84o9yA8XOfZQgpDHPIR75PiMZ/USWe1lToe2x+frCJQk,iv:SlpxFNMZwm38CUqYodqqyopdBAvVPeYCdixZelIlb9A=,tag:GWjzUn9+cBNVAFuzKTGyJA==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -10,59 +10,68 @@ sops:
- recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u - recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFY3FxU2hJaENYekoycFJM YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZMVZ4bWkwa1h6VXhBRzNM
cWh3MXVtanBqT21KVytzcFQ0ZU5PeENnQXlBCjBxQVhvb05LQzh6NEl4Rms0NDJs RGVCeFE5OWNTRjVSMDRVNUxWUDhiRnpzUGlZCjQyd2ZQME9YTVVyQUVYRWVFWEhu
aVFEckJlemlranFHKzBKQklFbzNPTm8KLS0tIGVyTlI1b2NIMUU3ZTdiWUUyN0Mw YkszdFFpWERqMWRQbCswQkdUSWpzTDAKLS0tIEkxcnd6amRlTmRndDBIR0FLQU5Q
R3RGOXVibXJmSHNPb1pQTklocFRQODQKa80ShEKjb+SrhtKhVCg9lilG2N4AiahR SEhaSGcwSkU5ODlSeVJSelhEcWlnbEEK1N6o1jS9NIc5I1f8wJmLarlynLAWwkJq
idNcMezREYgPqYTPe7c5XgDtirg6+LWKWNoQpWcCJhbgFzyUmeXU6w== 61CBeN9P9PNVciKH9PADbK027lbUQpmBlyEg+eb0ASqih6AjkuVTYA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c - recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkR3Y1NjdYNXVlelZKUERk YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVY3JqbzlQd2pBK1FtTHZ1
SWcrY0JxN09oRDY5RExLQ3NvZmh1MEhKMlJjCm5KdnpkZjRDWUlZQ00wQUhTR3Qx SlZpR21NTEM0M1p3Um9CTEdTWktuUHAxYVJjClBMTFhWQkREVjlVVVY2S0lrYWts
aTQzTS9TMU1TNXd4YnhsRGFudXdEMVUKLS0tIElOYTF6enl2T2V6MWh4QTNhUmcr UzdCNjU2TFVvU0EzYVlSd0UyME9GWk0KLS0tIE1SVEFXcXlIYWFvcTBlbWU1TFFx
elQ2Szg0RGorYWxDYmpXakVDQ0NNMDgKWcP/macF+0esyltRuplqLCxYceZClK8c REhxWmlhcytUY3hnQThhTUVQczBqdTQKRzkpoJ1Aoz9DzWud+j0Qlsq4K2h2QTPq
tbTyuFc7g/GqsUpjSQPglxYf3v3EZDZuYaGGnsEqnDIbhGQnY3JRLg== fR7j81Pcjc3RwWEtgNTbQUozGyolLjs/C9bFqEFvjvH2NLtXxbKMcg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk - recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFTGhVNmZ0aTA4cmFsd0lX YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtazJYeU84Q2Q0L3loaHI1
TWhOQUdtMkQrbHBLUmJCYnFjTHpJMnBjUkY0CnlSNDFXZk9JSHoxN3Zob1FVNHEr aXlzRVI4N2l0bVQvdnhiMDdaTmY5Nmt1YkV3CmJ6N25YbG4zUEpIci9sb1YvY1lC
dWJzc2p5aUZ3K0xHMGtoSGRXZGFES0EKLS0tIEVSdDVzc0RMK1Q0dEtxMXFSUFh5 SlRqeW9MNlFVOUsrbjVXMnF6eUpBNTQKLS0tIFVmZ2FkdUpLRXQ2QXljaG11M0NO
ZzZDOVdMQ0RyMmhHOHdKYmJSN3hrczQK1z5urKLZ3x9ZfFH/kVOAZk4I222j4usP ZEt5dE13R3dPeHJ4M0xZK01Rby9xNFUKOyscz/o0LltylWFI9s0fPrzDfo8bA+FX
x+88v4goZQvY1Xs74szp8SmsvxCQWMzpjC4Ad9FLAnpNpiBfEfH3AA== OlJWZqGOlQrAHN3Ih3KdgeFo/AQO7yFBTRBKxacaQ6ZM+T9XGVGDRQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc - recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2MW1qSDdOcm5uNnJ1T1Fs YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlRTNjNytkVUR5a2hPb0Ix
Rk5oRGQzK0VMVlhObkFjVmZlc3BMMWNWZDBvCkFnQjRySTBDYzBsVmFIWEFXNkVj eTRQVHR0QkR1WDFIMjA1WnpOeU5semRlWjA4Ckp2eTFFekNXUkZjdGVxSFY4NnRv
eWplelZPdWhEQTNpeVVRRVVpdFNob0UKLS0tIFFHUVg2V1pWNUUyY0NrOTV3TVVp Q2NzTHdTeVJwMHFYNEpSNzJqQ0ZBS1UKLS0tIE1zUTJmWWthQnlDMUVoeFpOK2pC
ZDJwOElndjMyNm5pNmlHYWl3OFRkVFkKtmmEMahMqu02iUlXL6v7oGWfxrtg7fyu c1YwbWxicnRHYW4yQlJrWFJuMFRZVjQK0mRzFVJqCvFwgGTKUSE1Bvc7b5jfaGhq
SNFNmj9mlBEnGIP8GwiNQVw1H9TtBKlxR629+SXfP+xx5kgycJ+a2Q== dcOfySV0leb3LCM4J9x5QYwJeAqPRYY38TdV+oiIxrsQVzhlzHzzxw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r - recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkODVQYkxoUWFSQXZkZXhT YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLRU9QWXVObTczRi9NbE5L
NjJPM3EvSS8yeE80a2x5NnhFR0pFdDVUcUR3CkxHcmhNMStUUFZZSEdldm5VLzJr VFFmU0JRaEhUUWdISTZMZGY0TXEvK1V6Nnd3CktGemhORmFjSi9vaWUzOVVNN3Av
UFE2VVhGRlowbVlrcmVWemd4MUhpKzQKLS0tIGFqeXNrOWduclFraDhsclhUL25t bnJlMkdUYmlmMk5UWGpPZjNaTFBmRXMKLS0tIDRkZkx4d2lUV2l5eTZMc1RPckJz
RHNCYnNPMWRsbnBwcHd6cE1YUUhid3cKJNAYbND1J/p8DScWhZEaVGwnQPP5IF9/ TkdRUEhnS1NDakttdnNRWUJuVXNib2MKJHytS5fPo8sVjDB7b3sa1ufzXMn0Sc/8
88dfQ7UACoRyMbAbYKsnJCFCyp5sCdiL9bw3KU2YI6/HC4IBYhoH6w== +gvbd5zKNZyXAmcmv9OdHJaZh8JhtCDFEbXYWkhY01BLE8hiC+hrQw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl - recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkM1BtT29qKzBNbjI4WVBv YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0Zk9IN0hhNm9jSTV4NHhT
QksxbWpsWGFmVDRSYlVta1dmQWk4ZEZDU3prCk0wbnZlNGl2d1pibFFRL1R6KzUr UElMcEo5QkZ5VlpHdFNmNm1wakdRM3duOEc4CnhHNEVDUlBYaDlKR2JYQWdrcjAv
YWU0OStNTDNDTU1WYkxHREFJNWptYzgKLS0tIDdObVNnL2UvUVAveG9DdHpNYnJF OG9GOUhsVitMdkt4N0IzdUxCMW84T28KLS0tICszaXVyUHpqUEdVT0RvTlQweWVm
M0NBREg3aFVwWWs3WTA3bEFQNFlSRFUKGB+aWTOj6hfbV9/Rz8n/g/BLXYgsIeaF Wk5NVW9oNXJ4Ri90bjZlM01DaDU2QmsKQLIwEAhYc6q1F54zP97LyWvCRg62DhHj
R3smxtXN4k87a+MmXPREedAMhI5wKoWP2kMeV5DwQMgpzckRqdh/3A== NFL17RtIE8KIGVYebfAdpfktpnzQDp9wIXE9/29GW167b+JpUy2yPA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-24T12:27:55Z" - recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
mac: ENC[AES256_GCM,data:7sUwWm25EQX7ntobS7Xrix90VZipAe0xpv2hqgVWVMtNOcaPscIEWhS4L36WETFTj14qreZMWv5aG24Ayw4BHjOG9etdjO91sXKMjd9k0+F1By22rGsuPD9Pepv9RgHLs7oO2H9tMuchcHioA9sdXt3sOtXbhFhOkeSatbaGqUs=,iv:dV+5UAdHfqGcRDvYUBdo+KGyOCaSedp3vCiATtGi0AQ=,tag:EOZBvtz7TSLG7V3yLb19Tw==,type:str] enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4YTdpalJtN3IrV1VTeElD
ZDZGT2NwbnVUSC8waE10ZDN5Y2N1RkFPWTBRCkQ0aWJHQ0dicHR0TmloT0R2ZWZO
Tko5R2NVdnJZN2NqalBVK1N0YmNmSEkKLS0tIHJuWGNUaW5mMjltOWdwTUlrcExR
aHZVZ3VYNGIxbXRhaXB4dWR6TXVMQXMKNOPxaJo7Iuy+2PTwvyTNPKe/b1exEuT6
Tkwmig+Nuqe4t4mfvL7k/in2dKfMmBGNwozNv33qZMImlvwmpYgOIQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-25T02:28:14Z"
mac: ENC[AES256_GCM,data:dD+0N/H7Es/08Z7OuMXoFwBnB8LaQ+iln9kuy4mbY0LJB7gFwtEqPQrCUOHqxVFULkEA/BEp2MyESeXfZ6WHEpbH8Gvox4BdaBeot78k4/czYEPJmry0Qc36Qx5K5Nr5xKteealriUIB767xPGu42WMiziEymeqvQxN1QKyQ9M0=,iv:pNM5K6yk+8KDzk4mIPmT9ohoetaeORqxlloO8uCP7GQ=,tag:LtLw2Saitow/tcbk31HYvQ==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.8.1 version: 3.8.1

2
nixos/modules/nixos/containers/backrest/default.nix
View file

@ -53,7 +53,7 @@ in
}; };
}; };
mySystem.services.homepage.infrastructure-services = mkIf cfg.addToHomepage [ mySystem.services.homepage.infrastructure = mkIf cfg.addToHomepage [
{ {
Backrest = { Backrest = {
icon = "${app}.svg"; icon = "${app}.svg";

20
nixos/modules/nixos/containers/factorio/default.nix
View file

@ -32,12 +32,26 @@ in
systemd.tmpfiles.rules = [ systemd.tmpfiles.rules = [
"d ${persistentFolder} 0755 ${user} ${group} -" #The - disables automatic cleanup, so the file wont be removed after a period "d ${persistentFolder} 0755 ${user} ${group} -" #The - disables automatic cleanup, so the file wont be removed after a period
]; ];
# make user for container
users = {
users.${app} = {
name = app;
uid = lib.strings.toInt user;
group = app;
isSystemUser = true;
};
groups.${app} = {
gid = lib.strings.toInt group;
};
};
# add user to group to view files/storage
users.users.truxnell.extraGroups = [ "${app}" ];
sops.secrets."services/${app}/env" = { sops.secrets."services/${app}/env" = {
sopsFile = ./secrets.sops.yaml; sopsFile = ./secrets.sops.yaml;
owner = user; owner = app;
group = group; group = app;
restartUnits = [ "podman-${app}.service" ]; restartUnits = [ "podman-${app}-${instance}.service" ];
}; };

68
nixos/modules/nixos/containers/factorio/secret.sops.yaml
View file

@ -1,68 +0,0 @@
services:
factorio:
env: ENC[AES256_GCM,data:mk/GJ725TxKJkNBa0T8YGOpxjthJwZLln5UQW/paElh/8FPt+WrfA3+V7Withu877Fi8jiyn+Pyq+k2mgkaQKtmcog==,iv:kxoD+Xi89Df+pBeIHlwkszbtdxUz5etHYD6rn9uLNxg=,tag:YK0EZ1bKM8AamskktTIDBQ==,type:str]
sops:
kms: []
gcp_kms: []
azure_kv: []
hc_vault: []
age:
- recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvZUxEZnBzdlBoZ245WDZD
ZXlrd2RCblR4MEo3NWE2Zk82dHBvemVYNUU4CjBCeWVsZnd6T1g0M2hqaDVWYnJX
NFNZNnRmRG9FSm56M0pXN2ljNUlHRWcKLS0tIEFmc2tlY09Qa3A3cXJxaURRNytD
UFBKWTlxYkgvUFZVckpoZHdPYUx2RTAKxz904To3LFDsiKdSM5kZylwx/lXooECm
WX5439E01p/UPqDnvOjc+5wa4Ynu5XCW5DleTdUFw2fjUrb9yg6Z6Q==
-----END AGE ENCRYPTED FILE-----
- recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByenI1WktwWWhhdkdxWDFp
Nm1HTGE5U3VRUEYxSFdEOE5XSm1oMThVK0hzCitDSkptSTd4Y3dRTXlxMnJ1eWdH
d1pLNUI2T3FLWWlVSEJmb3BzRTFDTXMKLS0tIGcyWG5OSmhKZmJ6VFlJUlE4Nit2
MDlkQy9NZEg5WWtseTJFdHU1UWpvZkkKsc+vbn/lkzWtSKEvg4xSgDHM7vblgNAa
cbF4+JaMgVsyNox9kuoslzhQoE7eftcBolgRq9m1qhCUfqUhmgsS8A==
-----END AGE ENCRYPTED FILE-----
- recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3Vm5UejU3bjU2MmR0bDIw
dkw3UG1jdzFwTHVGTVYrRjFNUU5GSmdkcEgwCnk0aTh3QjVWUTMzdFI1UC9XaElk
SWtIRktBc2lGOW9jdDBBcmJOSm5qRDgKLS0tIEJSUlY5dFYvcVVEdjl6bHNvazkx
QlFkUlpWRHQyanZEQmJtczRra01ibTAKR80FHc37Dnjo6zrnJHkSpYvGv9W/k4nx
vPXsNki4q6WJKec+4jebJgdoXeT1ztk1HcZquIUiNkpkx8rMrtnrMQ==
-----END AGE ENCRYPTED FILE-----
- recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZTlU3OVcxUnFEMmRyeHlX
UUtxK1RRM3ZubThkejdMVjRqQVp5K1o4N2ljCk9ZVk1RZmEwNXBMTitZa2NmZ1Y0
U2ZqdE81WEhzSHByN2FQMTN2M240bDAKLS0tIDVFOEhwL1I3NnRRTTBqZ1UxbEg3
M0paRmNFa3pYakFRRkxtdVAvWk5PT0UKP4nQCuFT2EiLkZUzu/XWj6+v7bdWFj4o
4oQ4bmv+hTklYb9KOl3XM089z4ixtgJeGWzUiV3Omqt3sorbG8wOBw==
-----END AGE ENCRYPTED FILE-----
- recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMOG5yMVBnSTRLckxXcFVp
cHMwcGtleGhPalROVzlIeXN0QUFqcG9YZDNZCnhSRjI2SUdqWk5KaVg5eXJZQjh2
ME5iUGNLeUxhbkc3YjczN1lmKzFGa28KLS0tIDBIYXkwSGVhVU12eDJ4Mk1ZUFk0
ZVNoUnlwRDhTM1NvZUVYUW5OWm9HdGMKZHO7ouk5xDWfSBeBLAVIYTQc4Zzp2CC8
Mxz8Sc7cIxBPb1qtYQud9pg6fxYNhvbZdwL60p6vRT/KegEmPyEgog==
-----END AGE ENCRYPTED FILE-----
- recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPaXZjb283SjFaZDBOQ1Vs
S1dEWm13dUFyWm1yUnRmaHdRUndDK3paaFI0CmxpcjJIdDZVR203WUg3dWpjbERu
OFZmVGw5Z3BYQVBBQ2VKK2M4RGgwNjAKLS0tIFFGa3V3cUU1N0RyRStJSlNkdzdV
QUx5MEkxM2h2S1FucjBhNkFVWDZnQW8Kj/iJslXSS/I019/JjdXYZsCjMHCc6drH
0kXZL4itv8pjlVGDcGZXAHiDG4+LP4pI6hx8AElTZTk+9umMtaADzg==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-24T23:21:20Z"
mac: ENC[AES256_GCM,data:lhS6GQLcCUwfmoSa81vN4EkouILMAAJ1sEc/laaUAQVb3Od2olVcJnXa8wJNaqRAhK9+3B2sJ44sjg6QojU1ROqHvfr5x+rnokws2ax3ikTMZThtBeR2srj+OnvbS/Enai3MHH16bQBKmbyHCk4oHnkr7mgMkGjks1uT8pFJwuk=,iv:aZ70kTNPV/JuD4PjlB/wecCv1ynoQQ6VQ9Ob4eu2jlg=,tag:xBZHz2hm+BRfpUK5+25GQA==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.8.1

77
nixos/modules/nixos/containers/factorio/secrets.sops.yaml Normal file
View file

@ -0,0 +1,77 @@
services:
factorio:
env: ENC[AES256_GCM,data:9NjI3knapGo4ZuU8inXtyDle97/oCdTzvDaFNNDQdVG+yfj4gb5NYXLJzu0DRzPsZZKsDOlGWUL/5fQB83Ccgkw16Q==,iv:KLP6U3mCleZyb5hqdb9MjGsX6pDVnbJdA3hfpum2mDA=,tag:Me1RE8/B0a1hlF84uOYREw==,type:str]
sops:
kms: []
gcp_kms: []
azure_kv: []
hc_vault: []
age:
- recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5SkZZUG1WZXZkMEhWSGpn
cEQ0L3JKYVZCSjhjck4rbG4ySmVaYm00T0ZvClMvMlN6Q3VndjFiTkNnMVZKN1VX
WGlwREUxVVp4clQwWkNwWko4UjB2VzgKLS0tIEs2WDZUOXJaMVl6ZStUakNQWGYx
eDY2V05uMElsVkJTUDUzMHFENkUrS0EKt/urhJDivNDATYPUBDOTiuwZ/Ac6phWF
leXWiR2VJj7bQp0fXMVDoZ+bq974/uTc6cfTUnWA03cqttOFTdB50w==
-----END AGE ENCRYPTED FILE-----
- recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVcTBIZVBPZ0JSMmcxck5m
YVBoWG12bmkxR2FOK2I1UzhYaTNQWitxQmhjCmJUMXdsWjVQNGxUMzl5elh2OTZz
SEltWkZQYWxkTjZGd2x0T2dnSmNORFUKLS0tIFBjQUNXUEc3OC9KRmNjcWEwZURS
VVBCVldQN0JDeDV5N3E1bjhCTHRyYVEKfcRUmvHoacyj66IRrjoHGuDOmxWb5Kk/
nAB0mrIsuvL+vFiz+6sOqoZbZpBNLWCF7g8nddoDqjBa879Mrfl2Jw==
-----END AGE ENCRYPTED FILE-----
- recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1RmZwQ1hMQ1R1ZTdKZm5X
VWVUWnBlRGNiM1c0eUdPVE5GbHZYSk1hZ0VJClhXUUlia2t2VW55VGQ3Qk9ERVI1
ZEoyZnoxa2VEYnBNeDdmb2JJYkl6QnMKLS0tIHhGRWlKcC9PZDlBMXBNRWs1V09D
MkNrMlN2NFNpbnI2Q0pCeWEyRnpKRVUKdn2OTvy0Ly/qfWx9tLyhT6AYb1+JYie8
V9pgXhHhikkDTyHrDMPKT2Sd/5T5wNBtSGW3mS4UDML9emCXTiHHIg==
-----END AGE ENCRYPTED FILE-----
- recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnb2srdVpROGM2eHR0YjZi
SUcyQUJZTjcvNkI4ZVdOZ1poYmxCQjI2S0V3CmFCaFlic1ljNHJydmRrSTU2RjQw
NWR2SEdUb1l4ZlhEYjNwMGY4VGg0Q0UKLS0tIHQ2dXlGTUxkWG1zU2dDckJ2d09J
U1BBUkcydHcvS0RkK25oOWxvNmpoQUEKqlDYOnwnx76Sh7wewDj4NKdS8xKLMaFa
QxucM2TnmMmIqIVy+UBoh4FfPWlcBeqJu8MPu1IF+2nJ3S3Xawzp1g==
-----END AGE ENCRYPTED FILE-----
- recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2cS9zMVpwamxwSVJ4QzYz
c1padm1KVldndy9BaWlqWURiZm9aTXpZM1dJCmx2U3c5QkZ4dVZidVJaaGxSRE5S
KzIvVHlUd25mbTRabUgxVmFBWGMzem8KLS0tIExScHI3aGNSUmtjWEJEbnZHL1lW
UGhOUGt6RmdnbFlON3JsMmFHV2FyQXMKwg09wc7wLSPSNMAmS+JZmgCkQHW9P07c
X0Me5Nw8yHEs8YqDuogjJBeVsuMvtxUWIGwET4x7tNZmGNCYDmohpQ==
-----END AGE ENCRYPTED FILE-----
- recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwaWFEUWlQdHdjV05tR0k3
MkphUHFrZlk2LzA2eWorT05Yd201c1I2L2dzCnR4MHRoRG5iZ0wrblpVOERZcFhE
QlNTYkZKaHp5eHJ3R0JaMjdyYUhCY28KLS0tIHNSWlpyeXFVR2pxMGlSN1BSa1My
L2t4OGQ1YmtvUXIxZjJyRjg2OEpUM3cKRbIf8lIB4enQyxoYrftIcTA1/wwIygW2
4kvz7HlsxVXdlyIZ9WqXiOWenr8OjhN2+7Gfhbff/4vRkvNob3Ay+w==
-----END AGE ENCRYPTED FILE-----
- recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2OHNtYWJscHBYaXByS0V3
RC8xQUtHbS8zNFZLR3VSWUg0c1BrZW1zUWxvClNhWjF3eHBCeHg4ZGNJVWtBRjJX
TzZoY042aHJST1FKaDFyajNMLzZqT0EKLS0tIDdPVUExLytVNDhJdmNNSVNES1lt
d0dHMmxhMU5LRGtjNzd1Z281cGhZQUEKbJvXySJ2XJLoWTS1UluEc/fLaMOWMCNH
54J582wZE1uduhdvVydHTOIBG9+u1uiwG33LfW2455E75BRgNp5sMQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-25T02:28:14Z"
mac: ENC[AES256_GCM,data:oP5x4QaziIgnVUEakjFJ4SP5WP7kT/gsHiP6X2LXNXqgVw5X5vEcOzhf4R5nCmnHMazIWgPit+/jLP2UvvL+6RVvOB85Tlbq/ylsmXep9Rwy5q0TZiVhme61H61omsPxnFH6gSlqXVHL04JBsItlzAXYgj+rj+Gzis5q2XJxH5I=,iv:kbx3kETJA0VhrMaYFMeUx6/nMsCWY7OOOi5vP07sEEA=,tag:ioneNDmxQQT0OzRYGZzb/w==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.8.1

28
nixos/modules/nixos/containers/gatus/default.nix
View file

@ -41,32 +41,6 @@ let
alerts = [{ type = "pushover"; }]; alerts = [{ type = "pushover"; }];
conditions = [ "[CONNECTED] == true" ]; conditions = [ "[CONNECTED] == true" ];
} }
{
name = "icarus";
group = "k8s";
url = "icmp://icarus.${config.mySystem.internalDomain}";
interval = "1m";
alerts = [{ type = "pushover"; }];
conditions = [ "[CONNECTED] == true" ];
}
{
name = "xerxes";
group = "k8s";
url = "icmp://xerxes.${config.mySystem.internalDomain}";
interval = "1m";
alerts = [{ type = "pushover"; }];
conditions = [ "[CONNECTED] == true" ];
}
{
name = "shodan";
group = "k8s";
url = "icmp://shodan.${config.mySystem.internalDomain}";
interval = "1m";
alerts = [{ type = "pushover"; }];
conditions = [ "[CONNECTED] == true" ];
}
] ++ builtins.concatMap (cfg: cfg.config.mySystem.services.gatus.monitors) ] ++ builtins.concatMap (cfg: cfg.config.mySystem.services.gatus.monitors)
(builtins.attrValues self.nixosConfigurations); (builtins.attrValues self.nixosConfigurations);
@ -139,7 +113,7 @@ in
extraOptions = [ "--cap-add=NET_RAW" ]; # Required for ping/etc to do monitoring extraOptions = [ "--cap-add=NET_RAW" ]; # Required for ping/etc to do monitoring
}; };
mySystem.services.homepage.infrastructure-services = mkIf cfg.addToHomepage [ mySystem.services.homepage.infrastructure = mkIf cfg.addToHomepage [
{ {
"Gatus Internal" = { "Gatus Internal" = {
icon = "${app}.svg"; icon = "${app}.svg";

75
nixos/modules/nixos/containers/gatus/secrets.sops.yaml
View file

@ -1,6 +1,6 @@
services: services:
gatus: gatus:
env: ENC[AES256_GCM,data:f7qJTkDpuMAxE7f5lY2C72WjFn3gZe6paxgdSbQUjqjjTChQcscpUTw486cgHraV08vX/FIiOltLOYGffgX1TW/e1kzwg4JOtKhQkI/zB9nXfyttxR/A2MloH4vL24emQ5px,iv:vVA4Void1qRFY52J5Wc4K3BtOpXI5VY/WRivEwvVrw8=,tag:6/uaR6Pl0srwLNNR6EfSFg==,type:str] env: ENC[AES256_GCM,data:HTGcjqZ5uxNQECIfHK8/LZyV9H14pM+vrYrr2OnKNDmYjzFMSk5p2vovwDjgPVPVkSFtyczn9fPwPAlzyQvysLfMAQvFowfcecoGdA9UqbRYcNoKboZGOTeFenkW7Ip+Op+8,iv:95Q+Zh4gG3ZDEfQh4vCyu4ywaRFab82DEaIMfD2Oaw0=,tag:/VruU3ER4oTdUmLuJgV01g==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -10,59 +10,68 @@ sops:
- recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u - recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvTFB3R01Iay9mYklUTjBU YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYSkxudEVXM09KWHFDMjZC
ZkJwV3ozakorTHJLdDVzNW1xUmNJV3RFR0ZzClNvcitCWDlZekU2Q0xlN0VsNW9C QnUwdExVR3Q4UEprb3lLdG9JQTZoVG9tZUFVCnEwZkhmZlRWSzZXTXhCK1Zkeitk
RWFRd0VscDNaeml5YTZTdE9JbkZ1UWMKLS0tIHZqUm9LbUhQb2hkQzZrWE9KczM0 dFl1b091TzZGRTlmZ2prT1hBWVBEU2cKLS0tIHU3cDZCRldoTlJZUXdxK1BOLzMx
bE54a0lHVHVKVDExMjVVbE5mVmRtQVUKn+EyMekpg7Ht0yZIjO5RaRvQKIZErprQ SnIzZm5lQ1dqcWhZQi92QUVuWVUrWXcK7ciYMjtm/hcPPNkf+CguL4ADwx0vrCwZ
Z1CJ3/jjzjbfCJMGePNgZSW8YPEpLuwEjME9YPO3OWuKbj0pNJeA6g== 1EQ4syPzsuEFiUpYPFARcTkEy2m8iXojWgF4qh96qiuquo8NTvP/FA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c - recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHNFRoM2tyTVFqV2dxcGUr YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKSEZRR3NZdE9XeHRHeURq
RzJkeGtsNEpTaW9hb3ozY1ZpS0IvT0hBTVNnClJoaERyYkJMWVh5bUVCSit6MGg3 VjltbDB6T3F5K3F1MkdnRVFyK21SaEJ6Sm1NClByclg1THIxRnNlVmQ4R3YyUWEr
TEpQNU42Z3FmSWlZNGxLa0JXN01YU0EKLS0tIHFHN0svaEh2UlFBcXAzTGxkbldW UVRxbjZ4dktLRTJpY29hVGErZTBpL3MKLS0tIG9JTjN0VHRtR1JQeVNPU1BBTnZT
MnNzUlRzeEt1bUl6K2JnNUh2eE9mb3MKxzYaGlnoKA+64uDlYCjupPRvGijMvM7+ S0lSQWVVT0g5OU1OZU4vL1lhbjJ5R2cKfzniuoaqJ8eGUmJxQurvzyotkCZBynlK
kYFSm39+oc1IQZZjIToOkED6UrngqXdpvlsZNSEO+75dKBH9GE8cQw== jsWfeoG5H74bltIrHXw8W8O0GuiB0o447kFuwPsHoMKXTCZapT8/1A==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk - recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVYUVLZ2ZueU1wSFgwcHov YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnMDQ2dktkWmFmdzZoYktQ
ZlhwSXVxQ0EzcXdQQ2xWbjlZTWMvMzlib2pBCjZ2YlVlc0RkMUs3cGVmVGxZaXZq aTZsSHlnclNYVUJ3alM0VTM4ZTdzN3JGUEVVCmZraXgwUE5MOUQ2M0dtTk5CMzhs
eWdyd3kvTS8ydU5FT05zS1NISWN1d2MKLS0tIGkzNlJLcXZpRWFsK0RVeWVTSXFm UlU3TVhicjVTallUMzZ5b0dGOVR4SG8KLS0tIENKamc4S3Bpb2w4MHptUksxSUpt
MTdsOU9acGNNTjZhREVTb0dyNHc1czAKq8OLALPTZcZxZvPSCp2VORp8Vb5DG1lp YTBSRFdST2xycnNuRVdMS1BFZ2cxLzgK4oC82I+BQPJDqkDoBnExSXuUmH+z6RaO
4Of23Rch1m5CLDHheaGt7unnaz/B7ZiRlGXTuh/9xmyP6aSgDEOLQg== IhBR6ZhnEJO8Is4yr09oBiE1YNsPa6lAJeNPxYvchipVEjBpal9bYQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc - recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnejJKa1IvUE9qcDNtcU1o YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4Tm1OVFhIcWRXRW5QNWpM
R2NEQzNFZ0hwQkdJTGwvRUVpM3dlRFEzN0g4ClpDMDY1dEcyTFVYREpiY3d0SzVT Wk5tOHVGZlNBbVJheWF2V050djhsbHovd1FBCkVGQ0JrS2phTC9oYno5dGlOdytl
Z0NMM2VQdTkzcm5YOHdIbWpCYWttUVUKLS0tIEdPd3lYelZHQzBuaVRMY2UyMUNZ L1hkWmhiME5aVkVZS3o0aW1ac3VoVzQKLS0tIDVBTnJrKzBnc1pSbzZCcHJObGRY
dFlueDB5bTJ5ZThxTm10eXo5QlQxL2cKNLBM1uKR/RHj/JpV6jSYWRdC3Y9Yqh+6 NnlYbDVkZ1IzNU5UUmtaV3dLQkowbzgK+Z/bUcxm5kS3Yz0ckKCVbGS3b+G0m3rC
MiA3r9zA3W4Pb9IqCr164GnGaE02qSgPCBlvsYOXy2HLgQB9n4B7tg== NakIxAVXL/PsFTKv2cFwx0Lqc95Ntfoshmi+15q811Jz7XlakaECfw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r - recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWbFF2U3dzczVaVTVOVzVV YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkbzVlek1RMUNmbDJFbXZ5
alJIK08yV2NvSGV5MXdFY1FGR1BnbllIUmxJCmh5cGpkL3hwaE15L1MwZ0s2N0Vz WDduUlFJbHpobjVRUFM2bEFRQStrZzZ5R2pFCmZTb3p4VkthYlB5aUFHdnRONGdi
V1luMXJ5UXJJZ3hvaFNhZVROQlNqTkkKLS0tIGNZaFcvdEpyb042cEtWbTVRK0h2 ZkxxWFBUeitUdmpQV2c1dWJwS04zV1EKLS0tIExtODZxNWJvQUJwblVNZE8xTFNU
aUpGNnZ5ZFgrVGd3V24rWVFveDBub2MKZDK8Qlx/WIbd3nQnQImXQzCpktm3PuTT eFQrK01NbjVtL1RBUUtCRDh0UzNWNWMKB1SVK3dMmQDeH6SVUBq+yC8cUn/NpMOF
ZGqBKcOVEwWoEbPjbBqU7yTBi7YPOWY/ce0c330NM5o/TRszqAtf0g== jc4hxA4x+vbFwQsdFHgIAcI+Fw2QNC9898xl29duw8I1BQXn5NkjHA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl - recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVUTRlR055T2VZaGphUlF5 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5ZFBBdjBIU3pnd1Qxb09G
Nk14RVhIOS9zZTlnaWNrUGUxRWFJNnAvT0ZNCk90NzlXWi9YM0pLd0xaOW1lOUFm RiszSDhPc2ZtekFoOEo3REVNMnpJa2Q2bUY0CkhON1BmeHFTK3RnWGsyais1T0lC
TXgveDlHbkhHK3o2d0JsOHJzWlp0L0EKLS0tIFpMY3JCNlFiV3JWOU1QSDdqSmdB VG4xWGxwY3dIR2djMThWR2g4bmNTM00KLS0tIDI4NG01clF0VEN6dXdNbzZZSFFn
aXJuTTY2OVE5cHNNSWttaHJTM3JwUnMKr9E68xqF0GzttHwB04QQOeRKXHZmBv7o VmpSUXpVWmlTb1VaS094YWFtVzhRYTgKNx5hpQfxkMKExYVgISJsh8R/X6w2HZVA
F7jsALre9bkuQ/SgIUxWf2t2l2lvRO64K2tczMIGFtb9RM5VyvqvEA== NKSLWhU0xCRTAYpJEUDEVe14GTIdsDmyKK9udZYsSDWVlfEB+kIhIA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-24T12:27:56Z" - recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
mac: ENC[AES256_GCM,data:MciPu1Pcmsw3BJjOD83i1nvIuUdRqDc7j5MDfTVoDC77BuMsinAEkwfmelWteeCb4OEHebP8TWgMJGMpQS9i/Srrb8irgj8ClN9xBcQtnacWK4OOKwKvlog8lsjuEvizPPrV9nTNDGXfMcfEvx8d+UWXBLBwSuvIl4EmjAs7r5Y=,iv:jiFml5zzf0Vp68ljv2vakVVL1C00NPUH1lW+e48QR+o=,tag:fkI8YxH3kY7gcIumqLZhZw==,type:str] enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXejZidUVZRWJyYk9GcFc4
NVozcXU2Z0pBVFVLTUkzSkM2Qm5jNTd5V1NjCmFCN1FvZW01dTExekkzNTZ0Zys1
cnlaUWhHVzF0QzVUUVYwdS9kK1hSR2cKLS0tIE1zSmhGaTNGc3pkTkRjb0xwMTNV
WndYYWNFbG1wVE0yTTdkTXhhb3BEaFUK9sRVfzi1wChSkajcy8SfQfgJAYkb7r+5
8JTc0Tegh3CUKQEj+4cw1QYWDBxB0y7VQ9GoHY0pY6rGeiXczQq56Q==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-25T02:28:14Z"
mac: ENC[AES256_GCM,data:EdPf/LiKzUFLiPm5lkhSjxRSkcqH87c3BNb78Fgysxw1DqY0431QGqm80NP3rAbVJG40+5vJ6wBV5UQuQAuEHG7slDLbf6cCjBMlpLfISKQx2rv1tWSrHiQ2n31zNIrqA8fWmW8ee9Ng0KGgp/Uo/AEnzW818XcTeJt1Gl40QEQ=,iv:P58vvgxlw+cl0OyOxXe6a8GiGvQP420/E3Tk43bLgI8=,tag:8iAMcjKyukxnVv1cLcauKA==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.8.1 version: 3.8.1

12
nixos/modules/nixos/containers/homepage/default.nix
View file

@ -159,15 +159,15 @@ let
services = [ services = [
{ {
Infrastructure = builtins.concatMap (cfg: cfg.config.mySystem.services.homepage.infrastructure-services) Infrastructure = builtins.concatMap (cfg: cfg.config.mySystem.services.homepage.infrastructure)
(builtins.attrValues self.nixosConfigurations) ++ extraInfrastructure; (builtins.attrValues self.nixosConfigurations) ++ extraInfrastructure;
} }
{ {
Home = builtins.concatMap (cfg: cfg.config.mySystem.services.homepage.home-services) Home = builtins.concatMap (cfg: cfg.config.mySystem.services.homepage.home)
(builtins.attrValues self.nixosConfigurations) ++ extraHome; (builtins.attrValues self.nixosConfigurations) ++ extraHome;
} }
{ {
Media = builtins.concatMap (cfg: cfg.config.mySystem.services.homepage.media-services) Media = builtins.concatMap (cfg: cfg.config.mySystem.services.homepage.media)
(builtins.attrValues self.nixosConfigurations); (builtins.attrValues self.nixosConfigurations);
} }
]; ];
@ -178,17 +178,17 @@ in
{ {
options.mySystem.services.homepage = { options.mySystem.services.homepage = {
enable = mkEnableOption "Homepage dashboard"; enable = mkEnableOption "Homepage dashboard";
infrastructure-services = lib.mkOption { infrastructure = lib.mkOption {
type = lib.types.listOf lib.types.attrs; type = lib.types.listOf lib.types.attrs;
description = "Services to add to the infrastructure column"; description = "Services to add to the infrastructure column";
default = [ ]; default = [ ];
}; };
home-services = lib.mkOption { home = lib.mkOption {
type = lib.types.listOf lib.types.attrs; type = lib.types.listOf lib.types.attrs;
description = "Services to add to the infrastructure column"; description = "Services to add to the infrastructure column";
default = [ ]; default = [ ];
}; };
media-services = lib.mkOption { media = lib.mkOption {
type = lib.types.listOf lib.types.attrs; type = lib.types.listOf lib.types.attrs;
description = "Services to add to the infrastructure column"; description = "Services to add to the infrastructure column";
default = [ ]; default = [ ];

75
nixos/modules/nixos/containers/homepage/secrets.sops.yaml
View file

@ -1,6 +1,6 @@
services: services:
homepage: homepage:
env: ENC[AES256_GCM,data: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,iv:3YJFDPuv2fL9FY/fNSOkNiX9+MoqqseL7m2WiPZSRRA=,tag:PVN2SB+EaHzpoaFgBNiI0Q==,type:str] env: ENC[AES256_GCM,data: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,iv:GE8wXpjMK29RAxfvoA2g4gs1sTYmhIzlfhSOsV8hMCo=,tag:D/lCMaJ1421dN4xmO7Qv/g==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -10,59 +10,68 @@ sops:
- recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u - recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFOFBveHkzWWlEYm5yYStK YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTb3hOcURPd3M4V1pxc0V5
UHg0OEVEVkJ1bTlLVVNmM1p6UlBKNUxmQjBrClhwUGNHRXlOVXZCakIyUVkzK053 aisrbk5ra0ZHR2tUaUhIYjZ0TGx5d2lwbUR3Cm5jZXpqV2JyQ0tROVR5dEw5Y2R4
eUlXMzVwUExhNlE5ZUJhSlN1ZVQ5dUUKLS0tIGltU3JUYkRmdGEwblh1eGxwSXNx bUoxU3VOdXBnWkdSdjhId3JzNEdjZUUKLS0tIGVNSUV4Uno5SGs0L3NvbVFIaEZU
ODdmWE1KYTUxaWhXNlNEdndpUVNKT1UK1EmDxmTCtTirKDbmrNgHBLJZQzwk1Bc3 UlBXY0ZsZ2RaL0EydG5ha01UVTBzWEEKWuVeplmXYOdjhHuef+jeqOwcnexP64h7
Gz9yQUGXSV/ROuZ8HWCbnbDM8DkZaxZgd+Avg6a8WWA/52nPAW2OPQ== zNcER0a1QEKN8TELMoZY+zQgrb0ubHWlZ4LRVbsmevu7VXOElkQ2HA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c - recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4bGloemlGcjhkOUpzdlAv YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvT1Uzd0JJcDFMZnZRRWF3
cVBoVU92OGFyWXo4bkxmTTVIYXJpTHlaRFhNCmdTemlEVmVTcDFtSi9CV29BVTBi K213d3FWc3NqT3doZWpCSEhUa1F2WlkzaVc4CmFqVFlXMlR6TXpDTDRrZnJVWXRN
ZmNYWjQ5b1lPWkRjVHllb29QZldraE0KLS0tIGswN1pUbUE1WnpSSDlwS3NUdjlF KzBJRGhHcUgzWTBIREFITGhnYlpyK0kKLS0tICs0Mnd6SXpZK0VRQWNKSEUyVXp0
TCsrYlVwSDBiRTBBNVdkZGFJdWFyOFUKOk9NKGP/2IH0C4aZJEvrDOVVEFxSIC73 UE1BZXR3OVB4aGlaei9NQ2dFOElPdU0Ktzba3Wa2pKdPQSyhD5z9/Sb9I4g73x11
PC/ZhdCJgGHKQwi1/GUTGyhiVu/uAoKGHyiIrDRfaxBG7PCA71v6Nw== vwZv/Iz0gya8tobtYl3cMs01eeVp21wwKkWTChWmsRThtfTf9X+wqg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk - recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzNVpSVVUybEpialZ2cFky YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHRHhQY2MrZk9sUHZVN1hB
cTltcFAyY3ZTbnZhOEUyMHdYTmJXRTgwYkNFCnp0b0tiTjlaVjMxclhFNVVkNnRV SDlVTWt1VCtLbjdoeVNmalhIOGdHNTJZV1ZVCnVJajJ5NlIwem81bm9Gb2Q2RktO
a0trVUZydEJQbVJvMjN1Z1NXTFdOeTAKLS0tIHJOKzM3V1N5Y0dnUnU3VnBrdEl5 RGJLWXBQanUwOWt0VmN5VkEzbXZGeFkKLS0tIFdOaXFjeWNWNXNYYS9vOUg0MnFM
aGwxbW94L21xNE5nWXluTTZnTnRESDgK0BOElYW/HHxJmblpww3SgXgrHOkSy/7W bXVwUVNkVExPMDZpU3ZveEhJWHozNDAKtpCPpxkcR8VIXaLy0JcQV0/tDP4eMyqx
d85pQMKh185TdcHi+6ras8rXrULTnantsc3LYabQFJBtf8ZqrFUKGA== C6UTvIte4Nh0iJuRA1llbyeLZSLV0n1QrIKQSJGLvF9G0/Vnd8XYXw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc - recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwdURiMllyY3pMMVFnU3d5 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5dG9GbUxIaFlualFSdFV3
cHJ0N0hkUzQ3TXlZbFM2cENjOVh5MFBMRm1NCkZIM2t3VjZ3ZFBlVFRNMXBBUWV4 WjdNeEM5T2RPKzB5R1I4emMxeHB0UVlJdlZ3CkRpUGRrZ0pIZTZYcy9UMG9jYUUr
UVZjam9FdmpNWWFqUnhMczBkVjhXclUKLS0tIENFSFRpUzB0Y0RyVmJYenBLcWtI d1MrYTdLeUZDRXRLNWphNVZHSWZja0UKLS0tIHBaQitOZFJGdlhxM1RqVWNHWWhw
ZG01VXMxRkV5RGdPQ2NVWGpNeFc0aVUKsoroYbhOeherSY+9mOcPRWujLXMMu+CT Z3E1a29OaFpkbTFIT2xYZldKb2lXQ28Kob3jN2O7d5nGBX7GNsUIf+J8SrZnnCkc
JN1dMT23ChcOOtWyOGteJeEvylq9c1ya1h/xnw8OS75hqyfZEZAx8Q== mJ0gosM8uYOgQNfqP5nk8x069MUpEAXj1DqksvcMECI0aauKyOLkmQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r - recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGeHlBM2tpdExTUnVVQ0NY YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKSG1UOXUvcUc2MGVRVEJY
SlhkWWtsWWRyaXFGQ3hERkoxOW1PZVNKTUhjCmNPTE5uQVdKUTNsYW8yODRpaU12 MFNxZzAxNFAvWjZxcDJBWWVwc3FjRHNLdEVnClRra2FyWnBGVXFKeTMwdCttTnRW
angycG9qZFd1MWxwclh5cVM4aHRrTzgKLS0tIE0rV3l2eWZ0aGQwZzhLTXp0MEVC Y3Rlc1ExU29oZzF6SUIyTUZQUUpDTHMKLS0tIE42R1JncXJ6a0lhbnQrZlVXVUEv
N3c5cUJQMjNxblRpSStJbHM4VG5GS1EKnsevsy3SLB5gWgDj8LmbLHvxciOiyEyw eDEyc0hQeG1mRGVUUTVFZThVMktRMVUKqTzNuDVOOLFgbZnM4LJK7LIoI1Gxe2Db
6x+yK/6+/+Lp43myVyYMqwI9T7W6XzhY/yXuff3a4n7QFvBmS3GKfA== kvT03lpX9tbOpjS811qIImXrJbnF5yb+KJHIpp1EVyr614j0scZI5Q==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl - recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWV0JDVHBHVlpSUS9uL2l0 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4Z0lqVlQ3RENZY1RqV1Bv
L05UVWJaS1Nrd0ovRForNUh6ZUpDbXZ3eUFNCk53ZDlwYXBsNnBrWjh6bkFBcHEv UU1sNmRuUTY4MHN2S28vV3FsQWNUL3NOQ2tRCnJhZUwvWlNJYnJvejhRcjB5WXZG
Rm5rRm5UTTZiUm4yZmpaZGNRR1ZlK3MKLS0tIFVINVUrd013UGxxem9kVVUzd214 eFY1YmxjS0RxZmNRaEdiZFhpVENjancKLS0tIGsrYzhLcUhRb0htQi9hQXhsSzZJ
V2JiOERRWmtkemNSOVlzQlpMeWVtS1EKS8QV0yN//2HxYpyzb/gjPCzrPClsJmDy OHpNbTdYa2pXdk5XZ2VsQU5XSXo2R2cKFTZOtiiQqEl7uBoSCmjxFQxdX+gLAfIe
WftPOV7X7J0SVooNbnmyD2EZaaVOymBFMmMJVn8uHWK4rHynm/Mb9Q== TMHdiKIAoD47EUS42LHH/CMrvLwM0uXnNEaLsq2DjDOOalNMUAuxYA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-24T12:27:56Z" - recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
mac: ENC[AES256_GCM,data:cr+7dnLgU2BPg5fOjKgB0peIj03XM9NolZMIwDQFaTOCe7DanvNRwGVMkk6q5tzNY0QtRVDx/VYMSf7anMk3XMvsWCAwwQW6Jnki0MHEFMGgyFvXgONWD/ceeIvdNsefKsvZc6vUaM1zwpT+CFTQ4dzzzW6sa/BeWBcm7tvzZHw=,iv:PbvOhScTM7tL81wHL6ARQyOISaFpuydltVm22dPZLDo=,tag:3o73UQIqpOgCLMQAVYhW2A==,type:str] enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSRnlidk9nQU1CNkZVWWdu
MFJGK1pPYyt6WnJVRGgyNFFvS1J0Z0RMTUhnCk8xZEFsSVZMd0cya05wb2gzOHJB
TUVsODg1djBDLzdWYnBMOEFLMFNja0UKLS0tIDdGaWdKUTJkcjBmeVgrVHNURGFv
UnNuN1g1VjFyWkluZUlXV3BxWWRTY1EK37hyIgDAfgZZ8RCvbMrwR0hMCV/AccTU
t7/Hyy4ShhqBfXG2uy0PV3HAE1mX3wSNF2XmRSFdE38qbAH/nGE5uw==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-25T02:28:14Z"
mac: ENC[AES256_GCM,data:htXH1e8Yiba+ibTLjd6f8OdV16Qqs+GdeyTlqL0sJZ7qQv6zQrV4U24FaHl2rPnWAJq4Sc/fBDiq1F0R1MDTiytEar4IWSxD+eNhtRbkJTMJtxU2APSlhp2wFw2h1S6wThzQQnq9LNnYh+Rt4OLgj2HaayiPswje58lVopEmarE=,iv:MCNCcn+S7cfY2eXsUfLP0lkW04S5Oi4YjDN8XSxplOc=,tag:bwdEnem+1xpUmMBK7FBJPA==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.8.1 version: 3.8.1

2
nixos/modules/nixos/containers/plex/default.nix
View file

@ -58,7 +58,7 @@ in
}; };
mySystem.services.homepage.media-services = mkIf cfg.addToHomepage [ mySystem.services.homepage.media = mkIf cfg.addToHomepage [
{ {
Plex = { Plex = {
icon = "${app}.svg"; icon = "${app}.svg";

2
nixos/modules/nixos/containers/qbittorrent/default.nix
View file

@ -59,7 +59,7 @@ in
}; };
mySystem.services.homepage.media-services = mkIf cfg.addToHomepage [ mySystem.services.homepage.media = mkIf cfg.addToHomepage [
{ {
Qbittorrent = { Qbittorrent = {
icon = "${app}.svg"; icon = "${app}.svg";

4
nixos/modules/nixos/containers/redlib/default.nix
View file

@ -12,7 +12,8 @@ in
# fuck /u/spez # fuck /u/spez
config = config =
mkIf cfg.enable (myLib.mkService mkIf cfg.enable
(myLib.mkService
{ {
app = "Redlib"; app = "Redlib";
description = "Reddit alternate frontend"; description = "Reddit alternate frontend";
@ -24,6 +25,7 @@ in
domain = config.networking.domain; domain = config.networking.domain;
addToHomepage = true; addToHomepage = true;
homepage.icon = "libreddit.svg"; homepage.icon = "libreddit.svg";
homepage.category = "home";
container = { container = {
env = { env = {
REDLIB_DEFAULT_SHOW_NSFW = "on"; REDLIB_DEFAULT_SHOW_NSFW = "on";

2
nixos/modules/nixos/containers/sabnzbd/default.nix
View file

@ -46,7 +46,7 @@ in
}; };
}; };
mySystem.services.homepage.media-services = mkIf cfg.addToHomepage [ mySystem.services.homepage.media = mkIf cfg.addToHomepage [
{ {
Sabnzbd = { Sabnzbd = {
icon = "${app}.svg"; icon = "${app}.svg";

2
nixos/modules/nixos/containers/searxng/default.nix
View file

@ -54,7 +54,7 @@ in
}; };
mySystem.services.homepage.media-services = mkIf cfg.addToHomepage [ mySystem.services.homepage.home = mkIf cfg.addToHomepage [
{ {
Searxng = { Searxng = {
icon = "${app}.png"; icon = "${app}.png";

2
nixos/modules/nixos/containers/tautulli/default.nix
View file

@ -44,7 +44,7 @@ in
}; };
}; };
mySystem.services.homepage.media-services = mkIf cfg.addToHomepage [ mySystem.services.homepage.media = mkIf cfg.addToHomepage [
{ {
Tautulli = { Tautulli = {
icon = "${app}.svg"; icon = "${app}.svg";

2
nixos/modules/nixos/containers/whoogle/default.nix
View file

@ -56,7 +56,7 @@ in
}; };
}; };
mySystem.services.homepage.home-services = mkIf cfg.addToHomepage [ mySystem.services.homepage.home = mkIf cfg.addToHomepage [
{ {
Whoogle = { Whoogle = {
icon = "whooglesearch.png"; icon = "whooglesearch.png";

4
nixos/modules/nixos/lib.nix
View file

@ -33,7 +33,7 @@ with lib;
passwordFile = config.sops.secrets."services/restic/password".path; passwordFile = config.sops.secrets."services/restic/password".path;
exclude = excludePath; exclude = excludePath;
repository = "${config.mySystem.system.resticBackup.local.location}/${options.appFolder}"; repository = "${config.mySystem.system.resticBackup.local.location}/${options.appFolder}";
inherit (options) user; # inherit (options) user;
}; };
# remote backup # remote backup
@ -45,7 +45,7 @@ with lib;
passwordFile = config.sops.secrets."services/restic/password".path; passwordFile = config.sops.secrets."services/restic/password".path;
repository = "${config.mySystem.system.resticBackup.remote.location}/${options.appFolder}"; repository = "${config.mySystem.system.resticBackup.remote.location}/${options.appFolder}";
exclude = excludePath; exclude = excludePath;
inherit (options) user; # inherit (options) user;
}; };
} }

2
nixos/modules/nixos/services/adguardhome/default.nix
View file

@ -208,7 +208,7 @@ in
} }
]; ];
mySystem.services.homepage.infrastructure-services = mkIf cfg.addToHomepage [ mySystem.services.homepage.infrastructure = mkIf cfg.addToHomepage [
{ {
"Adguard ${config.networking.hostName}" = { "Adguard ${config.networking.hostName}" = {
icon = "${app}.svg"; icon = "${app}.svg";

77
nixos/modules/nixos/services/adguardhome/secrets.sops.yaml
View file

@ -1,7 +1,7 @@
services: services:
adguardhome: adguardhome:
password: ENC[AES256_GCM,data:as3qVnWWGeU=,iv:WHN5ss1A8rCqHYk+p0oXlwSaWd9J5ggMMz2HqJJNBGM=,tag:L468KpPoCPGh1pEBPMemZw==,type:str] password: ENC[AES256_GCM,data:LO+CWyPEYKA=,iv:of7rfa2afrK+/zO2fxpMgEFCed2FzHr3g3XvsW7MEqE=,tag:rmyDo8/MIUtBHLPCHjwoOA==,type:str]
env: ENC[AES256_GCM,data:5KjyHaT1SWQTMhShkfDu4c9AonnQqUiXZRP0WzqY4tCg/mZISrQ=,iv:ltm09YgOMhJBV9tOR/EJCtWltyZ7qbUCDlpGBTOi0M8=,tag:sAyh2TLOoKqtk2PdFnBh/g==,type:str] env: ENC[AES256_GCM,data:U8lindfbchCpD3DYkkwqMTcvKM/DWzbyAKvzOwx+FIfVl6OtMak=,iv:hRP5k9yipMVYEQB+lz2jauf59aSf3+or6YbRM7p2isc=,tag:fRz4aNoCHiwsCACN9+/CZg==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -11,59 +11,68 @@ sops:
- recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u - recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpKys0OEpvTGlnMjZQbWwz YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpaUo2NmF0VGhzQm9ycDND
cmNvUFduR3pPMDI3WHp6VFVwYUxOT254L3pFCjNpRlFUSUVEdXI5eDFTYWVFVXVO RnNNUGpsN3dWS05YRDM0YU9jQStEQWNrYUdrCkRQVDA3TjNFS3IwTWE0VkZISE5X
MEZuSFNueDJsOWxyRk5FVUNXSlBoMlUKLS0tIERGcTlkcHk2andWRzArbTYrVjlL MHN5aElJMFYzRHB1K1dsUVhEVDFxVmcKLS0tIEh0c2UvT2hCK0wvdHorV0dUV0JT
SUduS3liRmJFbEJsOUEyMmxwaTlXS1kKFzNgv8MPRrcnOPUUfNWjvuUi73T8uWVG REtTYXJnS2ZhNk9uaGhNSGJEQzV2S1EKWSmmm6xP7eplu8rAc6YXsXvj+lV96umT
hdt/SQW8Yu7LTsaOw+PZgupgn6IKpgIujqanwpueRPEL52iJ8dAzYQ== MOs0/6oR+rKOTknEEUTVeQl6Fe9rtHS7UHFP7Mpk3vh647l9KOFoZA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c - recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsenhjR3hxQjZ1ZFhlR2li YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOdkp5M1VtM1ZvM0tIN3p6
ZG82Tkl4UVAyeUZMcXU1Tks4QjBxYXdmVlhnCk55WGtmM1ZxQ2J4NDM2bGV4N053 WUs1a0xZYyswTlRoeFFlcTJFTWgrRVAvbEJZCnVPMTBRUTF4RFdYVk5yZ0NCMmJ1
TUlmemcralp3dkhCRDNPT3Rpd01RakEKLS0tIEp2UDNUU3g4eXlYTUJjTTZQaWh4 Y21YLzVrZDd5Z1ZFOGpwNmFXSWp4Z2cKLS0tIFJPMVcyVXpoRGRzSTlvZGtwUFRt
TmFEa21Hc2o0WlBrMHJJb3VYYmNyMFEKbf939GUXH4z6MZVTe5+1KkjB6c0tX4kR VmhzMUczR2l3b0RPem9VNlhXaCtBaXcK6Ch7J/UnzQLggMTS+4eOmIZatAY8cmqF
e0QTkgjXLFIGFCwqsfO7eb0ewCrVXb+FpsdjN+7iGrGzf0e+LMGtbA== 9DKeRs5euytwEDJUrXFm8hCc4p/Lf/OH0f74coXtXmEV1ejoHklDNQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk - recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtNXhDQmdoY2VKRmpxakQw YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5SmFpWCtRZkNVNktFK0Fx
UnZ5ckxvb2d5TGVNcWM3VlAvOXpGdmtSR3dnCnc1d05NVjVMSXBGUE9ienh1Nzg0 R05xT2NnU1d5RTgrTU81eDhwZDZtNkpyWVFBClRZRGNBaFg1WWhITncxL085clJ5
dXJ5dnhiNm5YQVdvN0pIRUNiRHp0TWcKLS0tIHg0RlVLQzRnSnVwazhGZTF4dHF2 eDY2Q1kzWXlMdUZ5RUl5eklMY2dNN1UKLS0tIDVDYXY3VVl5MStlUFNTQU9xS1Ra
RnVmRUZTRlEzN3hOcHZHeFJMOUVwdXcKLXaFohuK5feBl04Eh46hsWCVPaa4Ayeb bWVqWmpobEExcWFOdVpxQnJNaThWV1kKuZLi1DntH94dLnZejAZbkwxHGb6mAhSU
D1cI+nDFVDxWA5w/TTK38mcYO7U8b7TINSkH0h2LeR+uhTR+HEH6lg== UvdRVNOKB0+7vGMHRqI8XGBgrkDGe3eriya4tcHFA+hQlTqTPJsPPw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc - recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqN3N0UVgvU1RrcmI0bTg2 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkZVdDM0tGZEZRcHlyNnJJ
dlJSbnhZbDZOT29yaG5QZmViT3Y3dkRwbEVBCnZuS3JUTzk0eTNlK2xodklBeS9F SGh1VzBqRG1RNFFRaGtuSENCa3BrSTV0Y0JZCnJJbUhENFRoUW9JVjZSMmd2b25n
T0tWRUUxZmt0TnZSdTRML2FtWTY4NHMKLS0tIGtic0h4dVBmSTVQTXNaUUlzQTha bDVCdFBWQThGWjFHeStGQ1JTVkVOSncKLS0tIGM3YmdvUndSS214bTZHd0FYZXFn
R1ZvZ0M5b05iempsVjltOXRPdjVxZ2MKHjfZHNVKi6bzmvOUtdovW6vzNNhtuB9d a1FZUTE0cmVFMEt3K1l1WDlkcHllYk0KEyDE20xEfXT2n8+SxZcwirfiRkk+VPrg
8Sk4S/1iPiTmLfNRbi1xM/s4rsD3iyeMH1tCwhdjDYC8VvX47s54xg== iJJO46gNjwN6pmLW6N9XavAV7TRqSX9nRRNslMNcmf/FXo1jgwDiEQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r - recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpZEdPYW1acDBYTXVCK3JI YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2SVBzRkJvMVNsazM3MEEw
eFYrYnBGRjBpL04xUzBuQWVzQldIUCs2bkJzCmt4V2VwQVRGejRwWTF1OC9wcVZ5 OS91V3NqeGI2dklEbVlKekM0WEZRTmEvRnl3CnI5N0NIMTBFNmxaMjZQYVZGSmFI
VGZYc2RZemdDUWlUU2hkalMxd2xtWWMKLS0tIGRKTnFNeEpZSXFzcWVuQTBqZWlI MG9wWGpMc3p0UmZtd0hOLzE5R09DVGsKLS0tIEZBWWVIb0twWHlSVHdJQWd2bWRs
RVNDOEpSRC80K1BtdXBlR3grNzlOUmsKdScS3b6HAWd15MAX8tb/Ch1F1KWeQPzv dnlIOXhFc3VMQ29FeVdWL2xoYUpKa1kKd6tU03d/aop+Isl62DF2iorDOvGGqOob
ROYV1hWWWen8hlrvjI7V2SuorKbf/F3FoCmiIpsfL3GmX4fCjJE3CQ== u3JRXJYJsdEAzJb9hV1De4QGAm/pa8lsMFoG+3shIZOFo9ZG1Iu9sQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl - recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSelowWlk0cXVuNTIrR3ha YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlWDcyb1lhNk1HR1BkOURl
Zm5wY3JKUWxKSnpJUUhhczhUNnNKSG1NUjIwCjdxeWlNNVl6cWhHakpxZ2g4aVRU L2M1ZDRpUEVRS0VSRXRDUXpiVjRCNWFQa2ljCmJMY2dvRVZZTTd6L2V1MlBydmF6
RDVIblFEQnpRcDVhVjFiandsdkhMb0EKLS0tIC9xbEZiWnJqc0UxR09DSyt2V0VF Vld6U2ppcWhXSGh2ZElRQWErS0JNK2cKLS0tICtFbVp5N0FKR2lwSXEwc0NVTldk
cklTcUpZcXdoTXhBOGhueGVncitJOTAKrpC+LT3g6SqtB+LuFDJniDnzyiBYS7Nr MFlsOTZZSGtlSGVhaVhtdWwyWUF4ZkEK5OEd2m61aTa8HvKEhK82rfnIs4aff6gk
BP2pPD32tvTrtrIxnTCheG92OZNvCl7QR4jStylJCppIcKEG2JhRkw== Ls6g5vaV6g8oh60sunuVohf6E0Clnjf5T+l8emSy9a5dv6iQ5tkbfg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-24T12:27:55Z" - recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
mac: ENC[AES256_GCM,data:Akbhs7qZlzZOoX6tKtUOqTa3wyrdwo+AFJguI7V19IqZM9Ikq2qWMnDHI8p20JvzEC/Wk6TL37F3Vbqidc2NXFPtc/sRsp96FTWkmUBPFToyh0ehOMfAy33OS09UiRRBZlrhjDoOatL1hMyaJIHyaZukRTH7r75/ferapeVS6Bg=,iv:ZA8Ff8JUMA1M0HTflHxoGdThmIkrCwlr+Mibh0wLy6o=,tag:eirIz4fBV50weX2Q1W1c8w==,type:str] enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGSEh6VUc1UEhSUzNwQkcw
cnZnS214Ly9sN1hCTkVZYXdLTkUwR1kvb1Z3CnVKNS9CYitiYi81L09aV1RIb1hj
NUlmUUI1UWtac094dDJFNGVUWVpnek0KLS0tIGtxemxUMVFSMGVmYUFONlc0cFE4
L1dJbXJqVWxUNDR2dEI1YmVsRmVlZlUKpoRUvVf8IttYAyXdyYCKq3iAzS+nFXIS
8TGxzD1FHwOWEd7gEWVOvPFHiGYPuMbWSkt/iEuTfu06YFZ71n+O6g==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-25T02:28:14Z"
mac: ENC[AES256_GCM,data:NcY2RQcEu4RtCPotGn075MxA1Kn5spd8EHHem/IKsA68LoMXz7XN1RtFIvbvBPUYSOof93l88pJNGnz9gdTqZSkWEG3zUgCUxXryjcFj5hBojW3nEYtXJRlpsK++VBJSa50rJ7+E1tB5cA/6MIbUpY7F6IUu0ye7hatwj5TZ0n0=,iv:M5pZaYBIg3mJGh0wQ48WEYFfDvjY9DKnEveQRbfMrao=,tag:DrLPUtiKtc3NPRsCE1sJCQ==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.8.1 version: 3.8.1

120
nixos/modules/nixos/services/bind/default.nix
View file

@ -1,120 +0,0 @@
{ lib
, config
, ...
}:
with lib;
let
cfg = config.mySystem.services.bind;
inherit (config.networking) domain;
in
{
options.mySystem.services.bind.enable = mkEnableOption "bind";
config = mkIf cfg.enable {
sops.secrets = {
# configure secret for forwarding rules
"system/networking/bind/trux.dev".sopsFile = ./secrets.sops.yaml;
"system/networking/bind/trux.dev".mode = "0444"; # This is world-readable but theres nothing security related in the file
# Restart dnscrypt when secret changes
"system/networking/bind/trux.dev".restartUnits = [ "bind.service" ];
};
sops.secrets = {
# configure secret for forwarding rules
"system/networking/bind/natallan.com".sopsFile = ./secrets.sops.yaml;
"system/networking/bind/natallan.com".mode = "0444"; # This is world-readable but theres nothing security related in the file
# Restart dnscrypt when secret changes
"system/networking/bind/natallan.com".restartUnits = [ "bind.service" ];
};
networking.resolvconf.useLocalResolver = mkForce false;
services.bind = {
enable = true;
# Ended up having to do the cfg manually
# to bind the port 5353
configFile = builtins.toFile "bind.cfg" ''
include "/etc/bind/rndc.key";
controls {
inet 127.0.0.1 allow {localhost;} keys {"rndc-key";};
};
acl cachenetworks { 10.8.10.0/24; 10.8.20.0/24; 10.8.30.0/24; 10.8.40.0/24; };
acl badnetworks { };
options {
listen-on port 5353 { any; };
listen-on-v6 port 5353 { ::1; };
allow-query { cachenetworks; };
blackhole { badnetworks; };
forward first;
forwarders { 10.8.10.1; };
directory "/run/named";
pid-file "/run/named/named.pid";
recursion yes;
dnssec-validation auto;
};
logging {
channel stdout {
stderr;
severity info;
print-category yes;
print-severity yes;
print-time yes;
};
category security { stdout; };
category dnssec { stdout; };
category default { stdout; };
};
acl "trusted" {
10.8.10.0/24; # LAN
10.8.12.0/24; # TRUSTED
10.8.20.0/24; # SERVERS
10.8.30.0/24; # IOT
10.8.40.0/24; # KIDS
10.8.50.0/24; # VIDEO
10.8.60.0/24; # VIDEO
10.8.11.0/24; # WIREGUARD
10.5.0.0/24; # CONTAINERS
};
zone "trux.dev." {
type master;
file "${config.sops.secrets."system/networking/bind/trux.dev".path}";
allow-transfer {
};
update-policy {
};
allow-query { any; };
};
zone "natallan.com." {
type master;
file "${config.sops.secrets."system/networking/bind/natallan.com".path}";
allow-transfer {
};
allow-query { any; };
};
'';
};
};
}

71
nixos/modules/nixos/services/bind/secrets.sops.yaml
View file

@ -1,71 +0,0 @@
system:
networking:
bind:
key: ENC[AES256_GCM,data:4bPFw4DhCrdwtCa/OZSOvPvrGz2Fh/N1rJ0nUl8cX8eNbIQ7sR1dU3G5VanFQYRLxj0X4a/DT6p9i/09KmvMx8//VTQUU0Vp9lw0HJW68QoRz3S2NxzPRTNmY5MUsuWPm/QHYxcswcoo,iv:AWQ9mG5mcdeP86iA3mcI2co4L2atRj8IhYaKydDiHJE=,tag:nLZblnlYCG4fIko5UPyjPg==,type:str]
trux.dev: ENC[AES256_GCM,data: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,iv:/qxflj5J8CJ/ZmMbZ8HTP4PtKA6W0CdbiqhLfxBr4DY=,tag:z8VdVjZ4cs96zXu3HyOg7g==,type:str]
natallan.com: ENC[AES256_GCM,data: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,iv:fJQOuxZIWGnrfpyv43rBpWpj6DMXjFfqrmzXRWjYz6w=,tag:zi//Tbo/m8WJiKdt2S8J8w==,type:str]
sops:
kms: []
gcp_kms: []
azure_kv: []
hc_vault: []
age:
- recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6WUJyV3hyYW9JOVY0ellL
L09hZE9paHIyRE92Vmh2YVo2UzRCRHlxQkU4ClFxQWFBVXpXOGRrYlk0WGUxY1Fp
UDdkWWlDMXRNS1dFcWVaQ3ZyMkUxRm8KLS0tIGhZMHNEcng0dTJiTVB3UDhIQW5R
Z3ROUDBJNTJpcHNUa0RxYlRseWorc28K+x5sX6LB+MHWaFew+QSFYOfM5/jXqEs9
WxMvdabOCDoWvOwpWtOwGSIFrlaRFvuRtc89MHtRh2KdjvBmgA4XYQ==
-----END AGE ENCRYPTED FILE-----
- recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVNStJY0EvMHhuSHhzaUg2
TmRsTWZsZnF0TVdVaTVVdFcydjI2K0VlbUZJCktUN01ZSUJCcW1oRHdRNkVMYTJm
dlpPSXRTVEFrTjNHZHRSWURWZkJ6UTQKLS0tIHRrcFhwRk9aZld6VmJoSlJxeEFT
ZmNYYlJpeENHS2hwd0lPNGVLb081SUEKrbvZlSHQZ5NMwhfJKo+ulbcGeInEaG3Y
W8mTpd8B5FPxM7MOGC+PSFfMDRpG9DeZ8TurnRVJ83V67B91OhmNMQ==
-----END AGE ENCRYPTED FILE-----
- recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4aGJTcmR3SHlOL1EzemdV
Y3AzQXRTRXFBMTM3QVQydzgvNG16QmducGhNClNVdUNWeUVaZ2xWRUVmMjVhL09F
cldKOXVqUCtBRnh6aVltaU04RDlhcUEKLS0tIGw5U0szbDhJbGRwVzFhakdEUEtC
NVZOcmp4REk0UDRWYjJOT0c0VzZhbU0KqBDwqN1Yd3+YQhyIX17rZ94gn/nRHw05
/I/4HZS4x2FsSSCMfFRHUtIpbhDninFqsNSStribv0SwtiXbAqLxYw==
-----END AGE ENCRYPTED FILE-----
- recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSU2FsTFVaaXhmRXovMVRt
QUNUUjdkNys0VUFmTTR6aDFMQ3ZFMzZwdUhRCjZjM0lYQno2bDluU3o5RUpqVFcz
WmRDRWErRmRNN1BGNWltZm1xRG1tQkEKLS0tICtXV01mVzVpclVvdTh6dWp2SFdW
WlFSZXFPQWxuc05senAwR1FBVWFSb2MKsF8pvLppzELUJ6VqZ6fLdnLlU/sdIl9w
6qtLNiC0A3a4UzrA/Y4YfuB6HkLDC+DSdDB36FPOk7WdUG9nrZ2g4w==
-----END AGE ENCRYPTED FILE-----
- recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRRjZGMm9yaDQyTmQwTU92
QU5DbnBvMngzb0ppZUJsWXRSL0dFUHQxVENVCmVRcDdPMERtSUNBdmJ2WDBWUTk3
bWlwSEVmblpJaVRxR2Evdm5PZWtEU0UKLS0tIG5XcW1iRU4xcGdQK0toVU44TlJi
TEdra21iOWVsR0l3UENpOTlUSll1Q2MK0+JNQVj3WbFL6METOpMUPUHWJyGm3qcQ
fiLctcdpVrBaVdKWyB8w2p86RltfxOnHvIf9Yl0/+GXH1BvmQPbEvg==
-----END AGE ENCRYPTED FILE-----
- recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSQm95bnZ2WGo0RmJzWUo2
dURZYUhQUFRsNlowS2dKMVA2RUhNVXpla0ZrCjBZOWdjY2lrS0c1Z09EZDNpc1JS
c2FqK2FDdmlPMStHeEY4NTFRdnlpWHMKLS0tIEwwMVdQa3lHc3lYZWlSZzJncyty
eWhxTUQ5cjk3Mk14anBZRjJ0SE5XclEKI7BaoSN9GRdsjs0si+k0L0xtJPJsuz+u
7P5g5r9UuZEOL+6dSdMHQ/QceMV92N0z2Gaos5SNrTWHeiuVLspk2Q==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-24T12:27:55Z"
mac: ENC[AES256_GCM,data:NMBjEJHBDxOBuOAPUDJnkj4HENBaS2BK6kL27YRFuqeH/JF92eCD0/O4IrB0NkK064Uk3qBO+Hq777TF1tIXqZCkMDJjPGTAqj3cOG7jtIREb2gZcKMlxCWdSz/bYZ0kYr9awl/HTg6s/JvkMfqjTdJRsaA4E/GAW0vyzI3MbEU=,iv:Ef4rX6/dIZubwlWiQzoHTppq1QAP0BFi5oM8Mxhkfu4=,tag:C3iyDxQVMGFNA8E05eV/wA==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.8.1

77
nixos/modules/nixos/services/cloudflare-dyndns/cloudflare-dyndns.sops.yaml
View file

@ -1,8 +1,8 @@
system: system:
networking: networking:
#ENC[AES256_GCM,data:UJxG7H8L0BiVyOgcNJateaSwxhzmAttbioSBN0BmdQesLRjg2n/lShiuG2aXS3BB5wBeog/zfpYIgsxno7rhNUgv8dNefhJ8E1JSwQ==,iv:ie22f0gQJ7m10QROPEss5K4/X7bJGZARWrU7Dj+7hyY=,tag:4ZhBESevJPyI8PBttfnX4w==,type:comment] #ENC[AES256_GCM,data:X7ZBrVx1iAX44TtW5vVYcjyXioYMJPGQiGx/njc50KEubWmOcXofqnTDi6IM0M8JQucwqYh9GOL9JmH/ACvdvF6/QYJTMUr8FiyyVA==,iv:FZomZqIqoIlkD2xKrh8b50IyYVYUh6DOznr3Z9twI9I=,tag:XSunQ/X3+ycHAuznGGypOQ==,type:comment]
cloudflare-dyndns: cloudflare-dyndns:
apiTokenFile: ENC[AES256_GCM,data:CLFw7k9mwEt2/9YfvQ9gBxzJs70CA2CDtMJxNyPYvBhgvyA4camA8jPV/1p9NSEW1TEDhLtF5GxBQ51CNQMxqK6OfxQYk4EdxRUGLsmNQBb5HwY9dgrzthGJx8RTIFO4WRr8mBGfmbxb7cuAbIyIgAKVOQ==,iv:u80ZfXRdNDnJxHylKuyvLPOHyfpKLndC2BHaFdLOTz4=,tag:KaOS1zx4JFzF937wpw20cg==,type:str] apiTokenFile: ENC[AES256_GCM,data:O5rBqztJ3n04Tw11XGsevpd2cl8xro4ZL+nUYDgXEpiOg7/P+9biJCz182Cl8AAph217mBreWdrfv13q2kA6AZm6EYJHyd7xZY3BSdF6vIiKf7PhkjF7Cp88vHYzz+ZsTSc0tVCULVt3SXxAGH1CQW8TKg==,iv:CFSYtpAOwWeuFZS1PIS9rBOpwQk6n+GUgJrMT3l2c3Q=,tag:wrg9fj6pTgJjCuTs4CxmJw==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -12,59 +12,68 @@ sops:
- recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u - recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZUUI5cnlHMnhEeWtXSHg2 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFaytZdW8wczJIRUNtRkpt
R2M2SGhCSU9jNWoyZVBUNU8raHoxNCsrNXc0CmZUNUdweWhQaU5sZHFVakJ6aTY3 Q21LaEQvZGtvTkRseHh3d0R4eW5UbGcrT1dnCjlrR3lmRys4WllWVS95UFVTSGFP
Y3BHTVM4TnRFcC9QaXNncS9wNmhIQkkKLS0tIG9zUkhwampEanM4UlJDVmExN1l6 U3JMRWZGdmxJUDdhSDZDSWdWSHQzVHcKLS0tIGtpenlxR05RbFlNMlRjS25RSEdL
UEtjMmRWZ3pkSlpiallQZjN5cGFnUncKipy/mfz0Uppvrow1ChW/tMJWkX0hkVpE OWVaVEhxSjd1MDFYeHJ1Ukpld2ZzcTQKDcAQkr8Uhzko9i2gaJauRKervvzd7hOb
vmkmZxU0XmusmTm+m9PgDjPQWcrB5/dN283sBDSkkUXmGDkwidJ7Kg== WMoe/Fi2siErfL3Ryjo/gnp3P7MGuWxiYc4/axuvn+PxxyCj+W6yqw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c - recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUYWwzd1NjZUNNMTJLcmkr YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2R3ZKMWtrOW4razRFK2h5
TmJKSXp3eUNKWHJhTThxeXNOSXBnNjB6VXpFCkRBZkNoUkZGcnVxblhHZzl2cGVr RHppcXNWYzYraUdqYlRrR2c4a3pRZVNHTmlNCks4U0NRbWtsTnFyWFFtNzRJaktV
OVFsbkpHKzdQZ3E4NEZlRUlaN3FNZmMKLS0tIE9LVHMyTkx5SlQ2M1Yxc3pPd1Jr bXZnWXBmR2orL3JKcERkdEdFaXZMTGcKLS0tIHFFOGJTTEhMdEVSVHN5alZpMVlj
UHVLM3lTMDZXZEpQWjB2T2tobSs4U2MKY3iW5XNtaFVpSm5G6hVXKLEzE+FTqAIR VDFtaTB2Tzl5UWU2b0pkQnFpQUJjSUkK8LyIcCBiFn2lAZaIe1Frz32/6fIK06Gc
Ft45sp/FD1NAsp3ATGcAmehyS0zlgdu4yaoK4e5Zhar1gye70tCmDw== YhogbPQ0KueJWRwPjHChY5Z6d8Pl1dLu2TnfyYSuYMUwC+MdQteyAQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk - recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6R0F3OG85S0RXV2VyMU9v YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvb2QzRFVOcTlUUDVmeHBS
TEQ5dWlKV0JHczFldHhRc1RYd0kzR1BpY3dZCjJwL00rcXlCS2RzRTQvSkNmdzZN MlYxRk93VDZhbjdLTkRvemN1dENlNUF5SUI0Cjg1YVpvZzlwa3U2eWZvWlhNYUhy
VXhkK01aTkVVWHdYeFo1cCt0SGVzeTgKLS0tIElZMmRXYkJYdkZtalo1TVZvUldE aTVNa1FQazg2YnJQSjFRUHRtcm9tNFUKLS0tIDRZbTNsVXJ5SXBQZlU5TkdIVGVU
VU9pTWE1WlZ1L0NFazAreFo1cW15OXcKVghdQi8nHxJFszzXMX5QJ1h549IOQtvu WGZsS2NmdTB6djZ2eEJGNm5UbC84MUEKZZGG7BHn+eYu3nX/hThDZyGD6p4T3Vu2
afn65bTdHeUJGj3hDkUUdo+Z2urA2zX7YPi2naHXofzxcwpyxJ7N7g== VkyTS5U9ect/41CPNQ24En/t4dtNxbBEt6zXFmeW+C74NRZfwZd7Jw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc - recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmRVIwSGV1OWhsZjJ4YVpp YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmWEJnRmlrbnhmNUQ4Skg4
b1NWRTdrdHJMbCtKeisrVWkycENWRDB1eXkwCldBdU9hT04zdEs3M2NRV1lhR1Vh MGZyVUNnT0MzcXRQUlkvU2w2QUp2eFM3YlVnCmlwVDA1TGgxNWRyTWFDVjV2R3Jr
cVUxV3NXUXg2aFBYYlR5SmVaSHhHTjQKLS0tIEo3UjJpZS9PUDlGNVBETWY3Zksw SU5XUlRmRVpEWUJGWFpIdHRzMldUWVkKLS0tIElpVlR2K1UxV2srY2V5c3E5ZDFJ
NU9vWWFCTXhkUVlseU1lYjFKL0YxUmMKx+sZ3NyDbcemdSpQDkHI8/15HiCYzrEI Q1IyaXczQjB2ZEFXREExRXhpTS9nQkUK4lmxkVrFy7aYmtRytO1wTlGBTDpLAhys
vLQz7Mx15zxTKXJlZWMeZOsG9C6SrBK7fhT11CXuSuOH1tljrC+hJQ== LJsaxgsVStjsFh6wjA6VHBCNEvxLaukn8EYiMGU1xs0cWD8wG9m2Ag==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r - recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJc0l5M0U5VDRHaXhXOHBj YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwWERCb1ZINVAzZ05Kekwr
WGplM1RzOTIrckJ5VWtIWFpNaERRaG9KeGlBCkYzQXpsVE5NQ0t2U1kzSllhdmtv TERaYjN1TjZuVDY4K0liY1lyZ0dpdWxlU1VFClJ3TWVBZGNOY0JBYnVaYjg3VmNR
M3pMdUdyYzgvdlVsSG1nR2UrRnZsSDgKLS0tIG85Yy9jeHNHMlcza0dGaTRWbEJV UGRtNXIzbjBXNWJ6TEM2Wm1VMEo2U3cKLS0tIFBuZzhkMm1LOHVQdUtBUXAvNEc4
MFNVV2d0dDRJS2paMUJ0STc4OEVxM3MKvW5UYWJPES2nX0GcYJMgkQOlc9DJcYOI blovbnZWMm9wS1p3NERXQXdsUnYyK0UKK58sokjHh1tgVSGHiv43c0zmcA3iBJxB
g/+wa1qALRyWpVhzv6iIiT1WSdE4X1BIJAGBFefpWbYQ0ftpeyntqA== 9KaSxvaMeFwCvEosnSn+bqxy0oCgjBrIaeqIDfPy+hVDhyQmgqRg5Q==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl - recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4cElEczNzNzRENHdnOWNE YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0NUllWmZLWVYrbE9tNVc5
UVZ1TkR5SndUK2x3R253L1g1ZWdwdEoxelFBCk9FZjFlSU01ME80UGdJeUxDNHYr UlJsM28rd1RTd2N1ZWRmV0tzWkNtdi9OYzI0Ci9pZERpdkxvbEZLKzM0aGUyUzFT
N1dZS3FZR2ZyaHNCOTRtb2RUSStFcWMKLS0tIHIzd0ZwV09HMUtISU4rbUtxSXhS VEFuajF3NW1mUDB0Zk1vSktRcDdpM1UKLS0tIHhKUU5kUGVqV3o4dHdXZ1FwdGRS
ajRvdW5hdmtISmt5T2dCVlBaOHhkTGsKijCy9COgzXciK0d4XFzQRlgoDJi4XYVa VG5FdkVvb0doWFJxWXVsVml1Z2h6d0EKRh6C5dQVutVtV69k11L4oFn4azjloXia
pTHMhSvdMWLQVllcjoAurm4zrWgwMMSl7sb1ba8NkMoBr7eRSukpdA== t7ZrtVd1CU/MpqzCG/Z8p0s7obWXDZy5+a2v+k3j5iE8SxWhCRUBqw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-24T12:27:55Z" - recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
mac: ENC[AES256_GCM,data:e+uhlUIXPIarCDTOQJp8Jg1nS6VRYnJ8OrzFHSSxmprVffAdzAeFaZAmYdGoIkZ/NY/TJ1IysKR9qOp654nUhhBuVzHMeXLsV/jMqRA1sxEU10F8WFNREkVZIPj2GLUe6n23fzcMJJ93EK9pgHsTup3w1bD3Twht0AGwph8VQAA=,iv:k+tO5F+DnwkX6R+atASi4CkqVXTxb4fMILj9eiePVto=,tag:B8M1ReuF1UaYxgHwJaCkrw==,type:str] enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMZ3pnTGl0K3lkeUorWFR6
OFVxZWFrU1VUU0p6WVhLYnhlNC9mbnBKT0FnCkF0SnBGNjZVN3RrRGFTektiYnZS
UWkvYldhKzNoem9aVEEwYlVNRGpvT00KLS0tIHF3SktSY1V4RWRrWGJrRDNsMEdm
T21HYmI5Zm5SZXNsaDBpZ0FrY0NGdTAKdrMURvsm08/aVxkvOWJhD/MXJuE0n1fC
w5y2+jmvrLOcJGP43jDL3YxilM31gfFPvKxpnmwEQcfahRI2lBJnKA==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-25T02:28:14Z"
mac: ENC[AES256_GCM,data:JgA6fbpEVc/mO3SRQzDSPkX08tYsfw54FLvn551LPzmOGNj4TBZuW1m0euQGIw8/RmpdZNg+K9cH7+pWlg00/VuZL61AtiB8hWgFk4bQB6CDmYK1UIJ30uzWJtoDx3zL+/+ucfqIF/7sB1pfWS6Ow6u1Y+W2vvkheQUg6Q5vwUU=,iv:XM0vapMS1d4nvX0k34xN8Io5ZAgtH3boQuIPwLS8stI=,tag:534LW+MOVDbNDz/gKFU20A==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.8.1 version: 3.8.1

2
nixos/modules/nixos/services/default.nix
View file

@ -10,11 +10,11 @@
./traefik ./traefik
./nfs ./nfs
./nix-serve ./nix-serve
./bind
./glances ./glances
./syncthing ./syncthing
./restic ./restic
./powerdns ./powerdns
./adguardhome ./adguardhome
./mosquitto
]; ];
} }

75
nixos/modules/nixos/services/dnscrypt-proxy2/dnscrypt-proxy2.sops.yaml
View file

@ -1,7 +1,7 @@
system: system:
networking: networking:
dnscrypt-proxy2: dnscrypt-proxy2:
forwarding-rules: ENC[AES256_GCM,data:iJVglozUXWWRDBr/VIV7yFXHAl+QRj0XosYkAANbDQ5iUjF5EgIsyrZZ/OpOjbdcHMOXgkkTfyV6g0GvHcL0ZKvsZVx9tfVfBqC0m6quhtoJmCNnfvMJi7IXulMWkp6q0ZGeLIEyzpFBTPQ=,iv:+yrvQA16X0N4l21tc430V8oddO6uXBtKYyiNW+ABRLU=,tag:Hsc1zEPvPRT7ykxYryKOXw==,type:str] forwarding-rules: ENC[AES256_GCM,data:bV9tRlsQZqkiXCMoBW3iGhYY1pQvx24tx/1hvNqJAYnQRimrk7uNeZ7jr7SOpNotdS3JXklYrhE7K/Ot9KL49mgElX33bhrX1T7/Px09NpuT2TgSMTfzkP8h3cconPWHbu+D/lFWBscLH08=,iv:tOeffpRq+1GYJ8zlJUXDL4Qn8MObGQAGHTtOyCuKV0g=,tag:bqiio2H2+H5O3U2r5m0RZQ==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -11,59 +11,68 @@ sops:
- recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u - recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZS0FzMld3OEVQckZFbVRZ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4TDdBcTNuVSs5c2hYVis0
cmt4VzZ3NTRudW9tNldnM0djTWdlZXNZMmlRCnQvdm16TWw2MGFjN1hRV2hmQkky cFhuSUZEbStLalFsdHdzazFZYzVYaC8wSUc4CjJEK29wczBuc2VZT3Z1emNNNFNC
NWdFNzRSQkI1WC91SjkzZjNjME5QYkUKLS0tIGRRQVBZYUFRTzdOZTkrTFI3eDJS TnB6KzdQNE5DM0VvOTVsbTlIbjhtWTAKLS0tIEJ0LzNSTFhtcmd4eEI4WDliTGx5
Uzg1blV0ellXQ3hUSnBOQ0c3Qy9sbFEKnmX3GS9QJ0v32Ie132jSI4WvW2XoO0sd WnVuUGc2MmtnMS9aUUV1dzdHNEVqcVUKnBr4SA9ogJnCfbs6WW5pwmrpZfuXFgP7
dHZO0IpGE5H80zIp9xCNCrZKuVMMXuZPzY8Pt8pb6wHudpX87sFSeg== Qjip3jJ3cDKt9I/QbhMREcNTvYr6pC7u0CxgTORr/cNhacmGkleXnw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c - recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOdGtEa1pFQUZlYytJVDZv YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtc0paSlpOSmgwZTZuSWpH
UFNVdnNDa1U2M1RlMm80c1N5bGNJOU5NaTFBCnhPSmhLVUgrMGpvaTVldHdaVmZP UUZOSis4Tm9VeFFWeU9lQXlNN3VCQUpOTHdNCmhxOWZ5Mms1a1Zva1dNbm9ya0Jo
V0dDSkdZSFBOczF4VENFbGZZRFdyUTAKLS0tIG5ITXBNcG1oNThrQ3JFcHBUZW9Z ZUtkUGFXZHZabkJvd2NMQkk5ODdEQUkKLS0tIGFoMlpPU3dTWlM3aU9lRGZlbDg5
QXJ0Z1BtT1Z3UDVkMmZQRm0zRVBoRGMKvplNg5ZvifAKsL9SOH20IMEq8ezLPJgI aVAzZzBiSlFNKzRjemhQTkcrVGdvRW8K6xBCx8YsJfNGYKfROrY7s7p4MPZoO4w0
E1rQychhWcDmksxRxiW+dcE7109pqUl+rsUII+mcig1adbzQHyL58w== ABKfD23+A5NgMQzGMLG2bUApKZb4rwTriy3DLggGccsgwXU0/SM72w==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk - recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwZ2hDTUZUNjNFc1puTDJq YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxVFVQTXNWTTl6eER2aWdZ
SGNjNGJXaTA0UWtTZjZtMzhtNFhvMVZua1ZVCi9DSTIyNFhQWnNYdExNamJXTVdD OExCVThkWVlpbVZkYTVjU2lhZ3k4cmxmTkhRCm05R1ZReE85UnR0eG9KZlRCYzFV
R0U0WENrV0I0RXpFd05YaktXSHU3QXcKLS0tIEc5dlI3Zm94My90TlVKS24vd0dH Y243RzI3OW90czE3akhvMjh5RzY5WVUKLS0tIDhiZEFnTzcyU081MmN6Y3hpdVNN
TDlrNWFYQmp5SUhJUWE1SFJuZG9KeHMKmVzNVCjcKC0bx8XVDNi58OUNl8ffMG+c OFkwbjhlRHZwZXlJRlBReGQ5OWxCaXMK8DXerObZh2qNwVZ86txNrkz/AODDLAYq
jND05suMVkvguFMZxvv3gPNqu23XqftXv/qCyLJaBDlYkGhuiwAPjw== IPKwc3NJBepV4kTmE9ubqZTj/PgDGhJHte+5YrzogrHOmgYnjiXDIA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc - recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoczhwdkhMTEx6YVlFT1lv YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsVXFEWkNmMW1RblZPcExC
eFpOZ1dMZzhDVWI5OW1jeU9OUFRRRmxnT1JRCmJHVGtjSHJpZ21ZampJazg1bHRy RVJzaXh1eWxHRUw3Q2VsWjFQYXJpVUo0engwCmdOYkY3UzRKYndzT1lEQThKN3Zh
TWNHblhhdDEzQnhPWVhYRDNia1hmdmsKLS0tIDZ6ekE2enpYdlhrQlByKzhMN3FU VkFaOTVaNm1jbzdBdzYxMjc3eitac0UKLS0tIGQ4dUhlNGZ3azlQRDNIdVJQR0sw
YUJxTW8zVEE3eExwam5GaEVLVGpkRXcKgsQDSL8p6uBpPZPhhM4mF8ve69q8sFXo V1Y4dU9PbklYNitQN2xTZmp0alo3N00KdsdYhXLOQLvgkeYahB/2ppy6eeVtO6Rm
w6a6LHTITFM9Q1PfsPFcTnfpfsfoTOGISoWMvhNo8xr+wgTnZokJ2g== PIEOw3GvyJyDy4vgJicfRPdP2F9csKPlxPJL6dnZx1woxG6uaHxXOA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r - recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEaUJFSGZubUNkUUl4b1Y3 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtZkZDMkpiRXVheGNQMTdz
cE5ib3RvRm10bjExaHQwanBKbjZHWmFtSmxFCkliVWNYZm1DNmxRN1lnYVN0bFNH SVFBN1I0UzhVZjY5M1pSbmFsVXZxWjVkbEZnCkNlWFl2VnFDci9mZnhIZmEzUFZv
Umt0bGZ5QVhFV2gwTjdKNnVrYW9xRkkKLS0tIDNMWmV3TUI5d0o5SkRjZ3ZsWFV0 bWZXTjEyaUREZ0hpQU5tWm4xU1hyM0EKLS0tIG1TcktNQmtTQ2dWSk5SN0ZCd094
SVRKTlpEMVNFK1hCc3pHZmU3Tyt0TVEK1cXLsrV3A+pJJu2SZo6Ve+VUq61HI6SN a1RBbHZyeTFiRUY1R21jMFBnRHlOUFkKqNUe4RGalReXV8Biy8msJsZZPeMxDApz
b+uzHMbYPqZ++Onb8FE3td0fZhsqmaToyCuOb4S7m6bnoeJjMfDV4g== Z8ILTvF+U/vwcwlSl1tWT1yAKwXjZyWWtaUsEH69NG9HcWJPRO7bTw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl - recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4cGxQRWlSc3lvUENTbDR0 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMNHRjS2lxRko0YklPbHJ3
cWhhWHlYUHNvY1Q0cGRibUpPNS9JaStwUDFZCjJrR0pRNVVkdnptNFQ4TVl5dnRT eEQ1bnVOZTdxWXRranIzZldaRVJxUFJnczNzCkwwQktqM3NWM3JEaEl0LzlMRnY0
WFQrRDJEeWJrcGg0ejRyemFKa2VQamMKLS0tIHNvY1JHMkdpbmFxVGdoVGQ4SFVs WEN6N1dubmNRNzdialpKbGJMWTNPa3MKLS0tIEROMENVT2IycWswQ3lNNEZ1d0ht
aTdUNEhIZ3B5Y29IUUpaYTdNbHV1SzAKcDasRJYqDJxW6foVb9RaW6rFbrjaulTZ WEtNQnErTFlseThUbzdqempnOXhhVVkKT6Qc9GuQ4MCZztMtxvRxzbaVVrbjVcXO
5blpGooSmDDJ8cwtsfXmlDLlsZwMFBoas90NGr2/Xz0sBtvdNMKGnw== /rJCnyHXGTdJv3Jf7ih0OqB7GP+PUA8/u5CsoRcEumLQIaph9nTSWA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-24T12:27:55Z" - recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
mac: ENC[AES256_GCM,data:z6dQTvW/llmOPU8zl7N8NoBC+gEzsE4+xtkxaEmSRdyF5eFQTj6djQUYTB63onAwE4w57Sv1TeXJXtZT510BqikDbjeJh60XEUmMBArvkRl0mXcCdpxfTqwgmFCoghwpelcbqj4KQ9uzOIIb8MizgUrfWso6GZ70txucBVsCO8A=,iv:6P6yUBD7f0r9paytXAzWSx5HKUgJLPg8yaF8UpuLhh0=,tag:aUAv2ZG2caBuGWwL8YjhdQ==,type:str] enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlS09MS21mblpDMWtESWRU
Sy9SN2tvRVJyd3dlT2xlc09jOWV2QVRwdHlJCkp6TjN0VEN3UThxYVZvZlVMM0Vx
Ym4vSmt2N1J5Z1dmWlJLYjAvQTlzcG8KLS0tIFBvN0RZZ3VKR2tkUzVKVlVkV1FY
QTE1YmsvUlUzeWxyRGlwNUtyZ2JPek0K2/cbEGkS/uwWwTVTTmgG5To3Z09J3f6I
au0A8gMkPuttL2IsL9VsWLcajnoRuJ89L9h+6sM7osMSyBzhOfKXMw==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-25T02:28:14Z"
mac: ENC[AES256_GCM,data:gpHIF+xss4BuKuxCABMDRbQZ0HB2vZUE49//dTvBhG5htCMhOf+onivRIYi8r0+uO+n2KmTronVsYVpvlmIMq5FBceSvI6/SGDxbqEErZCZTdrzHR5lLQhjgzG4PzUiESxg3Kv8bJxhUPxrI8v9qkseT7OfOchr6ic01aFBwets=,iv:+YGow7sFAMoyyQhrBwn4mIpAxBt+CCtrSy6+j37EzGA=,tag:8vy01LJbV4gLDPUhnIgi2Q==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.8.1 version: 3.8.1

2
nixos/modules/nixos/services/glances/default.nix
View file

@ -80,7 +80,7 @@ with lib;
conditions = [ "[CONNECTED] == true" "[STATUS] == 200" "[RESPONSE_TIME] < 50" ]; conditions = [ "[CONNECTED] == true" "[STATUS] == 200" "[RESPONSE_TIME] < 50" ];
}]; }];
mySystem.services.homepage.infrastructure-services = mkIf cfg.addToHomepage [ mySystem.services.homepage.infrastructure = mkIf cfg.addToHomepage [
{ {
"Glances ${config.networking.hostName}" = { "Glances ${config.networking.hostName}" = {
icon = "${app}.svg"; icon = "${app}.svg";

75
nixos/modules/nixos/services/maddy/maddy.sops.yaml
View file

@ -1,7 +1,7 @@
system: system:
mail: mail:
maddy: maddy:
envFile: ENC[AES256_GCM,data:MtC+qHHCroAkS+WWymgwqG6FkpB1wOpjA6ZSvehsALIck6jVKrg4GtuERlVFdQ5rku4pV1GX2E8yn2IDkca661Uk2CIYIUmKm+ENnmpeVt5LlwxsXVoybMtYaIB2svcMdGBuSPFm1CJcFEtWN6RebcQBQMWQ+Tb26dK9dMI3HQ1f6u0=,iv:mT6AkiPRHhyr6+lAGBCPexlFZkloyp2UD2gvRMqbSJE=,tag:17edNH8jveDDyE6EZWDSkw==,type:str] envFile: ENC[AES256_GCM,data:QbXIb3ZOAFW+N6OZhejUUXtN6pBRpLn/C+rLnHTjZN6SoecWGGlqHebSCNiv3AP9pVflQrOgI0sq8w9TdMlUpmN+/Q9TaHobix07UyayQXl2ncy0jNmljAQV0OtXNlqJS3VEMCGREZR/DMEZ3sDMeB9YljzjFSsDElBK+0ZgPcvWyl0=,iv:xg8BJexQBsTRJdpiOJ+miAiJ+DBjHlyPhPjtzcdDAIY=,tag:sKV2g23yJzTC0L+XzEXIGw==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -11,59 +11,68 @@ sops:
- recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u - recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJUkdIKzIyRkt5S09kMElN YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPYTBNUEdaZDd3SzVkcGw3
MkFmRDhkY0tveGFiSFVaVUUzVC83V2RDTERRCm0rSUI2d0FlZkpkL0hSbS9zbzFX LzJIWXNnV1pHeHBZYm1VWDVQV2RqcTlaM0R3Cm10S2YrNWxmbGpOWjk0VjZZT0lj
T2pmMWNlK3Mvaml4aUZWbHhsYWRGOEkKLS0tIE9IU3BxV01DSXNKdHJzeWp2cmpx MVIvTXJ6M2ZzaHpQVktQOEVBWHNxRFEKLS0tIEkxTElQUnRiSkVpWVJtWXRrWFM4
bzBhakgvOFNEWnJ5Q1pjRmFWaWppR3cKoumQbFUt4nz9sSyY0UnSX+1oW7PMDzZE YWNPTDh6ODNQdEROa085VzdYNkFpZWsKgbCjwpvu14++nrwXFGZJ8JDWu6RhGw1S
RHrjjfR5TaENvRLRBsobQ3xIcLqg71dhK2BQ2ozB6MCSZ7WTNq/P2g== BP/d6mU0To2KWBcY3T5NQnW0IWCUciC7mBHAM13MkRIS4KydnWJCzw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c - recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSOVhpaVJtbmM3REVzQldj YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkeE1wbWMyOVFLZFNqVlJy
ZzBUOGI5Rk5ub2VYNTROVUtwZ0JYSzUybmw0CnJQcDJKd0NyUTFwaDk3UitPU25O QlpiQkxwR2RtK01DdVNVdTR2WlB4Umh3ZVdBCjVhZEc1Y0s5d0NvM3hzRGF6ZnB0
bDlaS2FMbVZ2QThvTFhDR0F5SGNxYWMKLS0tIDdKM2RBRzdRUkVmMEtOY2YrMTQ0 N3k3RFBUTUFoc05TUHhaZC80M2ZvbkkKLS0tIDEweVhLWlkrTzFZM2FzbXhiSEJR
bDljTC9CWmNvbmRRaS8xZUFSRHFtMTQKL1JnFQkBY/rEDOsyrwve14R8JG+e3N3c T0MvNCt5aXhIMWZjWUFiQ3VDMkQvYXcKmMYbpmlYh8KNt24L220r6CuSH8uWgQnl
wXO63HgWifkA8ZzKJ/TW0WBFpVg+R74CgCGmZe87xWxS9tf7nLKYkg== MFREXOsQ6fzomJm3NqOuQlQ9fon2dMZny2TwHXmA2Z+8QIfSNutugw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk - recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIYWdIMkZhd2VFQWhXcXo0 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtR2I0eWN1NEdEWEwzNGNz
SmVlZzkrQWp6NVJlZ0V2MkptcEFESmpXOGhrCjBTRk4ycVQzVDBtaStJZHlIQ0p3 cVJBZnhPbG5pVzQ1TzY0U3NsQ3VyZC8yblN3CmNkeUJPN1EyTVhURURobmdBNnRO
R3hYejFKR20wU053Sy9UQVlWYXFkTWsKLS0tIHN1VGxHS2ZoNEFsZXI1eEp4OVVG ZjVVQnpqbkNrajg3UEVMc3laSDRsK3cKLS0tIEQ2VWJXdERyQXc4d3Z0Skk3b1Ba
TjU0bkhlMHJyVWI5d0ZMTEtUZzJEVGcKp5pQAwmJRF8HXQ3EKljI55UMXMxWciS+ WFB1S1o5cm5ranBuNnh5TVFEYW1YbHcKv0xVSZ6HKyfrOLIGnYfz2K5pH/eZ2zYl
hQLfniFfdMurB9/7za62ek8uYZGuNL1WZjZtIdIN6vNFpizYhwONNg== O7HjSyhFqrCmFXOMRQDrzV71dIAengVzhebJcujF0seQdPKloxdfVA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc - recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5K0I0b2JuOEJtN20rQVRB YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0ZWhCWXZpamdPUDBNSDd2
S2QvZnhtbjlGVmFEWUEvOWEyOENEdDJIamh3Ckh3bVFwMzl6d28xMTljU0Q1c2l2 blh5cEVqNFF0dENjSUdHKzNaUGtkU3pvUjNZCi9xQzREMlppWWNWUHQ5TUU2WmFk
VjF2QUtNNlg1TW9EUGFHRWdkQlVuTlUKLS0tIDRlMGZNRDd6c1lnVkhDeVFCTytE ekdsMFF3VGdsRENraVlNMHNCRDBBZGcKLS0tIG1YalZHbWkxWWJ1TXpNS1gvdUNX
ajRSYlp6Umx5SHVLVnlrejNvSThZVUEKie7l1LQvd0zilvWCR6H4jpQI5BtxCp+W VUc0OGVGcG5VcTFIRGRKckdqQmtRWlUKBXaB2NIc2ar85jaea75CMZ0Ozu5FXrOY
MaVnO55u8lLNkXP3EUA1Rf7S9p/LOJvhQazsERIAcprIDlAh4ETVhg== CHVXZU5ta0fzm0+434p/zkqep7htI6o22Bh04JVS3nu9C78LoBgf1g==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r - recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0UWNacHRNV3FIb3NqWHpV YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyRmZ5OWNueHNlUGZZUUM1
Y3ZVL2hvOElKRUxYZXYvNlJNR25nOEh3MFRNCnNzQ2tUMEpocUtHbHB5SndSUmlp ZjQwdTI1UDdTV1B1NWFxKzBIQXI3dDhqd2k0CjhHYVRLRDBIMXd3eGVEV2lkd0Jt
WTErakx5WkN6K3BPQks3aUFxTnQ3Nm8KLS0tIEpWU1lGbFl6ODMvcGM0RHI1MUp5 d0dlemlGN3VBR1lIbi9DWkVSbnBwVUkKLS0tIFppd05SU1FzVDhqdngrSCt1eUZr
dndzSnhQbkhHRittRSs2MkNMeVJ2bFUKxVUrQ4u6lidGS2Qu8VDCqOlZQn5dt83B TlI4em9jVzkwSUdlWWcxa1pVZ1NTdTgKJqbX0CMRw+WTTL31q0Yl3fbjJFHV8Wy1
wUoSNIKFt9Zl9Gt2/aWu6k1UzgLpSn3oCnVGHNMWwqCEdUMFox7RLQ== AVlHh3bPMxLi/aIzfmP7qYbvZF4hfl3p1PFS60AuFZ/Cin/qUAj3wQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl - recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQbmhCNDVmQ1V1YWVvaTlS YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiM1g5bGt0Wjc3YS9meG5Z
R1hZQ3lVUUczamV3aDlSa2ZqUG5Da1JMcUZVCjZweXRtOS9sRTVobW5wM2dkT3FM ZC81WjBzb2U5eTVBRlRGVlEyZWwrVGduZkhnCitSM3kvUDlaQ2JPbXFpQjZJRDNm
WUZXMFZ3ZExwTXJYcUd4MEU1ZkpEM1kKLS0tIEhLZnZEejZyejFKTzFwL09JNVpO aXZ6dW8xMGI0NzRGc2dTb1F1NW5tNDQKLS0tIGg1eXJTZnZ3ZWVRanIrNGUxUGlp
a2t2Mlo5R2x3KzI1UXhVa09lbWc5a00KEVSzYvwVZV+yEJ5ppvEhRxRHn46+iGaz SWp4b1JwU3pYWUhXWTNvYU1zdTdOZzQKFtBrkYIgmDQ5CgWuwb0Xqq/IhTIvL3O+
Qpz/bbT19qHow17VEGxEB6SJSBG5rq5jCzrGygvO4lel8Ht3S+VTFw== +RjPbBSvPT9p2ESSTRkyordPwer+Pp6FX6q9r57VQsmjQUo5RMeDlw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-24T12:27:55Z" - recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
mac: ENC[AES256_GCM,data:QxpUpywyz98GrMUALpt4uWiOgg3KsLKFvP/RykOS7lYSjf6jFjlNNv0tkTQY6FxX9LU+FC0m8moBh+uhTYpiZTxuVcEgl6AUmT40oS1YwDJrBRi6BGvJUnrWY3YXEF1ywHHJs3y9ta2S14OsASxkkkJOkuz0tgA/B1kDukkSfnE=,iv:MwhS9dVRjncH8IFL56vpkL7K4YBhYdnz/gARw/LvFe8=,tag:pHAm0B2CuR7HoO6LAjKnDw==,type:str] enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3NUVzTndHcDBwSVZxcjl3
MlBtbVlXVm13cnZ3SFJ0U3dpMkRhUW9KY1g0CmRwcTVWbEpEYmhBTU9hV1VpSE50
RGh5dkJoVWNYZmMvM3hCdnBGYTdaWDQKLS0tICsrUDlBdEtwNVA3dmpVeVRZL0tS
QXRCNVZ3M1FLV0NjenFuZmUzRXV3dnMKpnptPs6aOeKvswRzwr7WKxRhyOx057IQ
Q2q4A2YFgLq5cnctsj6Eb/imf8DeND0d9bAxlsPI3eUjUZ4YGsDyZg==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-25T02:28:14Z"
mac: ENC[AES256_GCM,data:q9oFtvaG0jUfkAqrnZaaiN8NzLrbJWYt9kfkK5MySIP192uB37lApaVnjobVmdV9kmEseePNYdJmNnl3U9Fs4/KKjbmRc14Sncu84BqTgEoFM1yHGXXbFJ5kjEFv4FjeMGYvpU4dAXg1eL4zwm/s13Km1jYnPjxp4RAf423Rx5Y=,iv:o7OJyYkE5uOAMeClyxEwG++8ZmvGfCJAL9pZhzeOZcQ=,tag:6AOIZU30rEOEhN4ypeZ/nA==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.8.1 version: 3.8.1

57
nixos/modules/nixos/services/mosquitto/default.nix Normal file
View file

@ -0,0 +1,57 @@
{ lib
, config
, pkgs
, ...
}:
with lib;
let
cfg = config.mySystem.services.mosquitto;
persistentFolder = "${config.mySystem.persistentFolder}/nixos/services/mosquitto/";
app = "mosquitto";
user = app;
group = app;
in
{
options.mySystem.services.mosquitto.enable = mkEnableOption "mosquitto MQTT";
config = mkIf cfg.enable {
sops.secrets."services/mosquitto/mq/hashedPassword" = {
sopsFile = ./secrets.sops.yaml;
owner = config.users.users.mosquitto.name;
restartUnits = [ "${app}.service" ];
};
# ensure folder exist and has correct owner/group
systemd.tmpfiles.rules = [
"d ${persistentFolder} 0750 ${user} ${group} -" #The - disables automatic cleanup, so the file wont be removed after a period
];
services.mosquitto = {
enable = true;
# persistance for convienience on restarts
# but not backed up, there is no data
# that requires keeping in MQTT
dataDir = persistentFolder;
settings = {
persistence_location = "${persistentFolder}";
max_keepalive = 300;
};
listeners = [
{
users.mq = {
acl = [
"readwrite #"
];
hashedPasswordFile = config.sops.secrets."services/mosquitto/mq/hashedPassword".path;
};
}
];
};
users.users.truxnell.extraGroups = [ "mosquitto" ];
networking.firewall.allowedTCPPorts = [ 1883 ];
};
}

78
nixos/modules/nixos/services/mosquitto/secrets.sops.yaml Normal file
View file

@ -0,0 +1,78 @@
services:
mosquitto:
mq:
hashedPassword: ENC[AES256_GCM,data:l6QVTtfZJhsMfKoN/pIuKevjq6avIroUMSJQpj/53Lhuw/Okw2E9o1QBECBYvNUoU/367rCR82TBmPF5jguunWLI15bxnKxBvcPda33SlYwPGuiXDaALfk0WAPs11mpwvpgNNiVPOD5gDCW7YSNG8w==,iv:VF9Cm8Yp7SZY/CH5V6aLTGWb0CA4N50Kl7RPJJ/aKBc=,tag:dq9HwYCakSSel3cv/t3BjQ==,type:str]
sops:
kms: []
gcp_kms: []
azure_kv: []
hc_vault: []
age:
- recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFVlVjV3BBQjJHT1ZOVm9n
RGhhOGcxanhNWEIxTTBUMU9DcEd3Tjc1c25VCjZVOXhVajVhVzR4WWlEbTQ5amFD
WWN4bXJueVBrSHBocU93MDB5ZDdjT0EKLS0tIFhXY2xNZnVLYnIyYmxTSXU3Q3g4
dElVV3ZsNFZZM083Tm10dVJJeDlkTWMK3/QJ1Gni+zj7J7gc0x3xL35rfBr6UNVa
4ii+q0pHpMBTMb0S1nGbazi3wb1I5KxnINzS6mFSWXkMFU63l3b2YA==
-----END AGE ENCRYPTED FILE-----
- recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPejZ3NVMrZnRtMkNQV3dp
ejJraDFpcG5mNEs5WE5YMGJKTEx5OGs4ZkJNCk05NDA4NTVxTFQ4UU5Mck9hYlZS
Skx0L0xDVkxqU0ZROTBBTjQzaHdNSUkKLS0tIHpRQWtub3Bmc29aSjdBeHhKK1pq
L0dLRm4wRTZsS0thc3VUSit5cDgxL2MKXGdQz7a9oEoqxNnGCQODcpb4W1RUKcli
josRkGYVeOfRY0+1BKwk5XIbAKMohz+YbTKUKkWDYEXiffSjd7Ae2Q==
-----END AGE ENCRYPTED FILE-----
- recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtNWhPRkt3M1NJajBlOCty
RlEwQ1ZCQXhNQnIxbzVwcHpJUE11U2ZvcmxnClYyZ3dqSC91K2I2TmhSMEVIUWJy
N1dMbjdsNjVUdVM3Uk9BeElRaUhzRXcKLS0tIGxhS1pTUEt3aU9nckNHMnQ2Q0xw
WjdCRTRMdzVMekk1YXZBejdxdWF4UEkK7SPmOHbup24/IhITZzOnl7YSSYXl/ShW
gOqyzkXxe079LHOadm/nqn+XVgnYdTeGf4budabp1TxUaMPsxgjG8g==
-----END AGE ENCRYPTED FILE-----
- recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkcFpSOE16bVlKalc4eEJn
cVdwdWJwV3grR0dUUkZ2V1kvVyt5UVNmQVNrCnJLakF1aWhKaGYyYnR3Zlh0dUxI
WStFbmVjWEM3QkU0NmlodjY0OXJLOWsKLS0tIFRPOC96M3IxcXdsaDB5RnJJb1dZ
a3hpczhWUDVQM3JiVU5ja3ZDMVRGb3MKowyjuHf0SO6zJ4+dnnuxWUn17uTDh0Iy
4x0cAKbwuSLlna3miG0Vxvfy/EehDuiZFW3c3EM7ITdayodM4lQNwQ==
-----END AGE ENCRYPTED FILE-----
- recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXMy9XTFEvMExXQUJqbnlL
YTdLd0c4bnVkOENtVGlocnRVQmhocHRiTlNnCm5Cc08yK3lLTkU0ZkNzQUViOC9q
a1JGRFlaVnJyMVRod2NKWHJ6VVlSMzQKLS0tIFI4Z01hKzN5Y1VZKzIwb1VvVnZz
bXFlZ1hCV3ZGOXJBMDY3M1RzOVZzbWMKlCRZZ+cKYyxd5VusNklUqJkVGp4/A7/U
TBmsn2lHgLi+mnoCN6YLNcLz0gxG27VFMAQSaDECMW6HP0Yy2soAKA==
-----END AGE ENCRYPTED FILE-----
- recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZSnZKNjRGamJGZ2gxbnBR
S2t5TkpTcll6QVpmclhrWEtGODQrUkVyVVRjCmgwcWpBTWZhMFc4NC9MVDV4UVox
WVY1WjMxajVsNG9YRTJOYktrSTVZRUkKLS0tIE01dkZXRTFmM3lWN0RqLzJWQVF0
aSt3SUE2N3BJeFJUVnR6K2UzUDl0a28K2WcNLOYihCBoL5KMTQWvtbgqtTosA3Y6
s+2XzBnz/RonDVe2Wh+trkwfKfiwyEvhcyBHQIjU6g4eWovVDMq7Vw==
-----END AGE ENCRYPTED FILE-----
- recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkaEVuZWRaeExoaStDQW14
SFdwM1VxTFQ4dGdNRUdQOUF1djVnOUQ5M3hFCmc4NWxtTDNRcjlmVGxLSW45c0lm
ZzRURjZmTTFibk43Q0RiZkk1NmdOL2sKLS0tIDZ0L3U2M2JlamJwTVUwRFVHR1FM
aUsvNG95K0lxdUFjRUpXdHhDZjIyV0EKEYU4IkFdNXqWHD6+ukmcOkiB7UW5Fn1w
M009nesLsOp1j1sVEStgPzPJLnw/j2OZQgkiMSzeLE1CrGLaOLdpCw==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-25T03:13:36Z"
mac: ENC[AES256_GCM,data:YC1lPTCSUZPgZte0WHGbqh1k3vAfcvVNyxR7+daPH5xwrXyZa/jTIY5U/UuD+nVCr2YFB89QKGko6c76sqoDxhMRf/FDZt0YSa+RaOJO0LNinRBokV2sm0oYxeWoKEUB1B5cuXVfBqqsgw6qQqvIuysXGk0A8vjXUT/btZSd2/A=,iv:Gu3X3xxZ5dmb2Y6Ve/7xznmS0/x5uU9iIDRiOE/DR9Y=,tag:1l7GtZTxBFLvV4JzRVt4Ow==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.8.1

75
nixos/modules/nixos/services/powerdns/secrets.sops.yaml
View file

@ -1,7 +1,7 @@
system: system:
services: services:
powerdns: powerdns:
apiKey: ENC[AES256_GCM,data:tobbFIEgtTH1NN2hLvVvFYvZpds9WWKgWEdsNF+JCg==,iv:YQObI6pma1usATWYxH0vDtTYGAtygOjU5KY5emv8hkU=,tag:oCbJQx58LEo+Uyj7b92Y5Q==,type:str] apiKey: ENC[AES256_GCM,data:PkKzniqU588y/woV2Ce3JLiucbVWDfJAcpb9/naQHg==,iv:Gk7ki2WyaB3nTi9LeWvt0mTM7sjTeWGa4/thR/xX0jk=,tag:YEYGBBIv/LkzxyR4SifAZQ==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -11,59 +11,68 @@ sops:
- recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u - recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1RkFaZkRHN3Rrb1VXZlF1 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1NWJjS3RkSmVnVFF3Lytv
b1J6b0MrL3VwNEFjTGI5aVBHd0xXckZBVHhFCnpUMGUvdGRYK0xITWxramtEMlpl YUxKSG0rL3h4Mk1LcTdFN2xGV01yZ0lVRUFZCkpHZTFicmo1bEl4cmhIL1RqaUZH
cmE1Q3BkazIvd1FEWWZSZE91ZzJmcGsKLS0tIFplMFRGUVhwdDdlT3J5VWtlTXV6 MmJBL1hJampmeFpZMEhmTzQ0QVNqc1UKLS0tIFNaQUI5SndSdERSMGhLT3UrQ1kv
U0RaWkxOazJEVFZmblFsVDh5VTRGQzQKkTat4MB1BC6cY7TsAgYPV59PviMolxxn RExyRzYxRjN6blpoaWpuaTF4TlFGczQKBoSdVxfFTPmuq3OJzYnHO+KReHgQ2axi
qH20JmQXkkq5vhig8u6D9+oc8Cl3j9f2aSWAr5cGA7T2gi6qhlF+Gw== OeB+GBjN6jkBmPR5uoaXzoi78/wuoG3A4fgFIQhIMnE5mxUxwNVhtA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c - recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGMEZpYWxiV212bHFUUEhH YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSajY0YmdrUzk5U28wRnpk
TGdQZFFycHdWZGFjLzFLK3BYelYzYVJoQ25jClVPUTErR0h1U1NoT3pzZFM5cTdK L2pBZ3M4ZWhQWExVSVJFMXZWV0pXbzJHR2pZCnpvNTdSNXc3a2hUWFF1blBGNjRw
ZDNYNkF4aDdOUkkzaHVFMUpHbTZrcjQKLS0tIHZJQXZ0aE9NbjhNSDltUzlBbllY VjV0U3lzUmVBSWNpb2hSRXJlREFlV2MKLS0tIHJVazZpV2NPNm03QTc3NnkzdEkw
cDdobzM4dm9QS0VzV3pER3M2MnpONFUKa+36W2MUKmqb2JN8gnaF4hAV+cHmJV2s QThtaGdRNlVEMXNtVmdSMXdHejVaQ1kKKdF48ZzVo5Zbu6XdDU9tUY9F6LDDUvYY
+Qt2NWGrjHdgpwyAeCSEHebe7dsC//lWqTK98keZJC0IFzV4O2dtIg== q5h37s0zGizzDCSv7s3sWdXfGy9IE4+Y/t1RjKsJqcoHsN1qRfxNOw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk - recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1b0xQYmMvVDBNVlVRNUpx YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSVFlBTkpuemx3cmJYaDMy
a0x0YmFzdHhtUFprLzI3aGh3S0FqeVAxWWpNCmNQVUdjeERsdndFK1dEenRiQ0JC L3hSSnhjRVcrb0xZRUptNVZaNjQvVUgxSlNJCmpaNXZpMzd5dmllMlQ2bng4NVN6
d3FiTWNmQm1BQTVIQmt0VU53WFR2TlEKLS0tIFAyMXhXckxxNStiOWJwVVRmVzZ1 RGgwMXVsbGl1RmVLREp5c3Z3eXRzdWsKLS0tIE1GbEZzUmlyLzUrUTEzR3JEczA0
bWVNeVFvalRLMFlyOUFOc1BZcndnYjgKGmXi9CH9Fusan+f9cedl1xPu6CJstMOu dzNDZVlqREsraXRWQzVvNUsvNFMxQ0EKMvMvNUdeHLjZQUadibxlCKavNgAuzRxb
RDl+MEZ6c1HM52HKtxoNocu8WjrDR0KlqxXokhNjF9ZlNHwpCAyJ3Q== Da9wrovYW7r8WqxZuM8qaB7/3bfPbsDDd4ZZEFPMu0yfHmTiJ32HGw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc - recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmVXlZWGJ1bWtManpRRmJ5 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWTVpRcHhDQ0o3eUovUHJj
dEtJeWQvR1g2SWJsdWc4SmR3aU1YRjZ5ZkdzCnJzWlF4MTgzRUNmZTc1QVB1dWhY YjJralRRSERBSjR6MDVJVVhlNjJpd28xY21JClBLdEZidWZ0OGhUVFNSTVhjOHlk
dHZIcTZlNC9ETkRqR3RXb1dZNWcwdzgKLS0tIEpBRHdYeUsrVlRIN3psNi9SS2Nt ek1IT1pMcnBkUi9LZTJPemg0emszR3MKLS0tIERiWEtmL2NCT2tZbVhVNElXSFF2
VGZ4K3RHMFA1R2h0SUxBeFFCYlZ5dkUKkIyYAnzVhy9Yu4leAlVlMq5I/lYftSyH OEpaTXd6Um5na2k0NEVobVcwK2FXVWsKc/4zTiHXV5RB8O55HpoMwlTTmMGEzeDV
EWi340jknRM50BAj4gjcucIJyI9Ycmvh0Pm0/1noNqzVxEaslx9i0g== bEkK/+6lT/3YGUBVlNfkIOuQS3pQDiSYnLb9/yvIv0SoaLc7ObWwUQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r - recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqbVJyUGNvSjF2V2d3ZEhB YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIbzJ6T2d6OWVTSWFyQUds
YjZXc3VUV0E5cXNWZGRkc2ZTSkxrMEJXZkFzClg2WWlvVytMWC9RNldaK3lYbDFZ TG5ZN3k4T045Wk8vNDBrclR4REVMZmt0YmxzCmdSdWFuWXhBaDd1Y2kwbDBKbVRo
L3YwVGlBSUx1WksrL28vMXNDMTczaWcKLS0tIGk2NXFjbWlNbTk1QUZsaXhvSTQ5 K2pXbEQzbVJNQWtKNHNSV3VFUFFPalEKLS0tIFFDSW9ubEpIanpzM2gxMU5IVFVz
Qkl1eVd6TktsNnFJdVpvUm5lSWluaTAKx1I3fQ1nWzmkzDer0NgEz0PtOP5Nj7Z1 aVo0VnNSMVlsTWl1bEQ4M3J4Wm9OQjAKXNzl7NrFw2Tch2OUwjIACIvm8zVjLgT6
7HWD8eVQyi6Qb8W3UCSOPfSsvy6ob4rpoYQQiOQTOE2LQs+Fqs3y6A== zbjpbGbYXQrPvSQyHeCLVn0e4JWYOik4OmU8fAgkojwIC2xB+QVzfA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl - recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhb2xYYzZ3QlpVM2dvck5Y YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKQW1vcEpLTWF3alRGOWgv
blBOeWxjWGxSQVpteGQzdTQ0WXZBRGJ6N2xvCjArRkc3Wk1nKzMxVjNzWFZkamFh dnFGYko0OVhPaWVReUg0bzVTWURkQ0hvdlRzCkVpUEo2cmpkeGxBS2JxaG1ia1JM
SithTWQxT3h5SFVGelkyVFRLVHVmZk0KLS0tIGswNlVOc2ZJQW94OFFqUWFGTDBu dXJOQytXWXJBb3NBR0pGa2VwSUVlS2MKLS0tIEZZRFN2UUxETmNsNlVPYm1ZV2Jt
UFQrSWNJeFN4ay9sU3VpS0VoK0FSajQKoIPB9BK1qXRTfTmLPbJJ8HdPR89ZUkMw Zkk0MEtmcXdtZkVFdWNVZ3NyT0R3dUkKJWhBG/m4sPD00SHJn9jDFIdWHztoOus4
QVosdsN+VD7WcRha0JK0gPwH5nXE30TPcdTZ49hr9q/s+RFRXCTvgA== FWEZ4oXGqiSjomY7bh3jXJ9+j9HmMW8q+lO6VPL70UBaO8g4lSwLtw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-24T12:27:55Z" - recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
mac: ENC[AES256_GCM,data:e9q4VBDBsgVDbgmzjNAsED2TS1hkAMZS2yMhXcQkSfcju/xwvbJ8X7NHh5A7yVM6/MzWp2fNKaZ5rYmXJXpwkotshXJAIVZW9ne5zfDF+qfzMnLSrTJDJIwAXpjUKmqyWnTpEI7ZRLXocdRQeacWdLOaUbIz/O7OA1ok67o14ss=,iv:SOiajuNZro0BZbP+2ByWHFR1V490JAnUn9rwCVWqi8Y=,tag:Ji26wVKPLGGWlSHs2p2eGw==,type:str] enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNTmV4Y3Q5VmVaVlpac3Zk
aWpnendUU2NVQXVJbFB6QnF4QVo5OFVPWFVVCjVORUJnbFBWbDY0YVJOMFk3bXhN
S0h5c21GQnR4QVRCeHJ3bUQ3QWdOZ28KLS0tIFNZZW9PVVBqOHQvY2JrYURRaU8v
UnB3Z0krRzJYU1dsUlNRY2tIZ3dSMTgKNL8iof+1Uqhc6J770fha6gb7YZ3fKPa1
MyBDuOg4xg0G2WaKjzJo8hVpNj1ansQwE8ElaldSQN3YbhK5OA8b+w==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-25T02:28:14Z"
mac: ENC[AES256_GCM,data:UP4GldLx1HDzKv23gyaM+XJqzga3K3IraW/IWCXivrH0nHVxzQtVQ5Y2xkqSSWTqQ2CjX5mX8P5jpIfZDIad9DFLzvfyBq0XOWd2Yk3CR3hFrAC1nLs9lQPrHlXGO+xWyuFv2HEq+IOlTfMnHuiKXvK0Fi4vuaxvX3iPltorVmc=,iv:R/Ukfn5JCdnEeFuvHu5/1qXvmOXZ/rRATRA6wKQ2zcE=,tag:5ZwYYIvms/yUlsxUzuzOSg==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.8.1 version: 3.8.1

79
nixos/modules/nixos/services/restic/secrets.sops.yaml
View file

@ -1,8 +1,8 @@
services: services:
restic: restic:
password: ENC[AES256_GCM,data:Mb0O2qBiDjc=,iv:cDM5dZuBUO+ujRAKwXhTm9KJwkNw5rTLEsITj/y9eD0=,tag:LdKgMN+hWTRGEElRgtliQg==,type:str] password: ENC[AES256_GCM,data:V9iLpE2CZIo=,iv:TRfp8eIID7iiiv0cdeq73Br9TSb7zvar7wAcNMw4grA=,tag:0pjeF6S3gPlaJcULwcZ19w==,type:str]
repository: ENC[AES256_GCM,data:WGozCGcXhVSvM9MuknRSb4rACvtHj+58HHKyRAJQivQ6Rur1/ogb/llft75d81CIMwY/zVEDNyhtdwd61QuWUEeQWEZ4EJnrxhdcTzbv7TNf,iv:yAKjoHq9fB/FprHtE/rY4IwNcRt0lBpOOit+uxQXVyQ=,tag:HopVhZkvHTb7DKu789PxdA==,type:str] repository: ENC[AES256_GCM,data:KcsxSSsGyu/cugYRJ7C1M333AQqP2HK2as4bh5HVFDlLz26dDYIu9cPDH6MkCp0mgcmWD8tVXpeyqLdO5UBla8DwBRUNBEbBwpdkR5iMOgj5,iv:GGwOf/FbFDWyzY+pOsmRZbzPwUmsYPRPW6Jh6Z8tFsU=,tag:YzLiwEEWDi+FZiKRzgyrPQ==,type:str]
env: ENC[AES256_GCM,data:F/7wT7sIUWDO6p9zRQBAm3PsrO2qPy/KuTDUypgKp1NrHtKelORsKFRFpfNEqUwNFPjw8sKsRadgxmPsjArszcEjurI+pc4TeMfhwyatXhO9a10Ks8deJ728MSJh8dhgF9dHVV0s6sfrgCBNlOcSRf/l53oPKVyfJfoIZJqD0EM4pbEKIyinrzU=,iv:Y9s7DKuM+iJA3tNs98L9dK7Vyok6FZBjlRzUjGZ7AIY=,tag:Z9gGRLWIT5F1b2xU9LeEAA==,type:str] env: ENC[AES256_GCM,data:MWBMcqhZiZ5PQi5lC0AX/uSRuUK7R96/mtcdl6GFUl6WsDYQCwNydd9t2Tztgjo/ePcB0Tbe7EtdPgfcSBPpOj2EomWoXsYicugjBg9BielHeYlmiMNx+V5esenkcx2L20LLsPCSZyB/H+ogC+s9g9DXRfWez6wcL/RvtvHmGjhmR5CKS33Tr2c=,iv:itQAqeGr+OXnJ07hU6XQevx2x2ULB8+4KT2v1iqISWk=,tag:eMRmkx4kIDDWnC/rq+cD9Q==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -12,59 +12,68 @@ sops:
- recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u - recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKbDlBWnVhcnN3bW5hMGlD YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyTkFKR3BQanFZMGFQQnJ1
cFZ6a3cwQS8vVExScGdlVHZITXU0V0xzYVg0CndpM284WTBjL2E0RzVPQWZua2I1 Q2c5aWdwZGxldFFGdUV6alJUenhKb2N1b2lnCmhXZHlMUUh2djV6TXVQZitkaHNL
eGY2YzVhOG1DVE9DZU9qT256bUlwZWMKLS0tIGNmTGZlZzArMDZ4ZXBwK2dOMnRX NXkxT1k0QnJydnh6NUpRWTFxdFY0WGMKLS0tIEw5Q2cvbnowNmJBYTA1VVBaWTBu
WnVEaytoK250b3NvUTlnaWhVZGxvbGcKYwp71NQM69kseLMGuIFY1axiEzLuQOY2 UnlJVGs2RGswV04yVVA5aTdVaEg3NzAKZ0hljBdtGymWi+cL6xe6UpzLNMJ1t1Qs
AhoiOANlEVeA8kqzb4nEm1DvwXcjmO3Ycr//81DJLn35jS9p1hZeOw== NoZf4II4n+H0qqdBWqXYm04VCTgvTcCsLJg6nGsvhm0wzR5pMR3Lgg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c - recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoOXB2WmZTemlGbG93UVJt YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3Z0RtNnpPblFwQUpKNDBr
eHd3NzMyOEZKVkpQaEE0dElYT2NNSndNTVFJCnNlVmJqOTZLWTdUYWxMV3crVlpo a3YrN0RuUis1UHBWVU5IMFBUeEIyajc1RDFBCmVrayt6L1drVTU3N3gvZzRSVFpS
TXdScVoxMlRMRGh2dUFHck9mRXY0SFUKLS0tIE9raFV1L3hGUUVwOW9WRlNmTGg2 YVFkbEtHbHNsZHlJWnZ1R3FsOWJxQlUKLS0tIDRNZldOMldFb0dvY0Q3WWxjYkQ5
azNwVW1iUnZNRGFyZ1RzTHJxeTFIU1kK4lyC679z2+ldnczum6gdijDgwiLD8IC3 MlQrbG1XN2ozUHBkd0JTQVlCeXhDZU0KiPu42J5qLi/fJ2Ca9CK93TYdJx/ThULM
AZClkfe06Xpsu0fWILq6F+r02ZTYurx/zJeXZQMqtZfsCgSZvVKX9g== mPIqHs4ib5EthP4F+vwZCEZIXPitks/dGNBvhevbvck73iSZqlwR3A==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk - recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhYVN3OGpnMnErZ2VWM3FY YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqZXp5ZnJaWE0yYlNQeEFn
cW1IdEVSYTd6OEFyY0I5VlZhQ2NUMW9HZEN3ClNCRHRqMEk2SXQwUG1tQjhIM2Yz Rll1UkplT2NzcFYwRVBLWnd3cVBPc3pGWG1VCjJZNHZzM0hOVno3ZGFURVNYVkNo
YzdHdXc0TFBvbVlMYUQ1Qmt0cml4V1EKLS0tIFJrL1VqaDNNNjBCTHhjaXYzV0VX OENldDFzaUdrUS9IcUlhYjVXRGxyVzAKLS0tIE1QcWk5MGhpU28vVFJRdmpqVDA1
ZS9MR0tURFh5QjBydmZaUnJBeFZURWMKRQTPGzNRLFTJs7xvTShBUCPHbQMiWoug WDRYWmYvSzMwaHVCRnBNRDMreUZDZW8KNbrOY0XQfrD5ILM+5zCPsQs5VYgnZI+T
9fcfssy8KqY7Pcxky6w/UixlO6WYwM6JIx67HUCqK5eiGtE4l+6IiA== 5Zcy77fMtNbAt4jlS6DAsK3PM9uNiMnobNAUWkNUA34Gq/+lKttKvQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc - recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKRURaZ1M4VW9HYWFlWk5Z YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOaGxBMnVaRjVOSSthQ3Nu
V3VVeGdJVUo2a3pzOTJlNlVCeGx3cnJXcm5ZCnhJM1Q2RkR0eDRrYXhDTm0vek8w WCt3NFBwVHBXVjU5Wi90andjZ0Y4NnBPd3pNClRUc2tLYW56K2tNNXhOeHlMMm1r
eU1acm53d0Njb3FKZThwS2E1b0pMRUEKLS0tIDY1N1hHVFIvOWpGTDFIakVvOFln Nzl6RElPRVNwekdGODFnL3RkbktVbFUKLS0tIFc4Y3NkRnFIMzdwSG83ZzAxSkhJ
bUlhUlBOS1hRUmFmb0JDTlFaTkovZlEKZzB+Anwnse4r72HkOoFC3Ra+nsFeNgaT K000K0o0cXBzOG9vUFdUNnBjcFczeWsKNiigboYYg0YGklyyxjak7u4uyWQuO2dU
MuOnDO3d6sprXgV9uvmu20hkObz8lyalfjiAae28kutNvrQwUfkVgw== 35p9maPLegHedXtsIg/RGKJ3lcAf/9SeTvQBGj3aaZTrXfhHM6J3Ew==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r - recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsL29NeGxVbWpqMlFiVzJN YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCb3N6M2I2NkZUTVkrWmhV
WGEyVUpzUmtBc3AxWDdkS3YxT25Bb2ptQkVBClBjTVRoUHY4STVxcUZaWnYrNHpl NWdqZlNYWmdUNDYySWRHTTdyeXlvY1lkelIwCkhvaUc2eHR1ZC8xWnFFVzlSMmhq
cUpXSWJ3cVlFZFBqMWcxUWEvQnRKWDQKLS0tIHdyOThDTzFYc0NLNzl5cW9zTWxq eWdETU9OVUxxQ0VaSHZzSWloWkJxdW8KLS0tIGtua3lIQWZCSEQ1RzhJNGZFWGMr
MGdVKzljOUI3ZWU4SmNCeW9QR1NuR2cK96LgN3FKID/LC1s4ZvyMggnPmo6MkdCX Q21zVTNacXZvVHdhSXBGbS93VEN2TmcK1dejdC8FAtzZnEBSeOmz/n2pYUIz0BmK
dZXM6047vksj8Sw0a58iOx4jltR7ZyqvpO46KoCDl8UkdAv7bGYAuA== kmrKftI7PlI0u8khHXgUm2E8HtOQKMZa+2cKP/SPAkoRNeFOs987rQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl - recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwN3p5cnY2Q2ZUWS80c1ht YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrSzA5VWptTThieHRsSjRN
S1FPeFdaOG8xUllhbmRlbWt4V3h0Y0lXQ1ZZCmxZa1lFeUlLUTRsdDh6NDQyY1ZP YlM1eG9Da2FaRGxqSVI4NGVyTEZ5MU1UVzFNCjFEaWhNdmVLY296eWRGb2MrbXVs
RllWWkZvUmFsajBRRklSV3ZrOTdWK1UKLS0tIC9vSWo2K0dnVFUzNUp5c1RlVXVD OGQvZUdkYlZQS1ZLeGFxR2xYVWZqaGcKLS0tIHZGdm5NRmFVU1liRDltUDlNQlZO
cnRhOHo1YU5TMEJwUlJwN0R5Z2xwdzQKltxSCZfh7inHKVLwzY3YwScCSlHReAvT L1NqZXNUSWVaRi9Kck5WQ1gxOGRvcEUKAj/thIFVRDsmfS4bxfia64TUHieRIHXe
nITk3hBdncc6ExwuoBqGxKUw8ZSoqp0klJGYktZjvDKAf6cizHHm8g== 4NOBaT1JOd+wIVcjQCq96WtUdSN0KhcvpGnE0v1Q3Z+W51PtJbqK4w==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-24T12:27:55Z" - recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
mac: ENC[AES256_GCM,data:dSCsb7E8j7GXJiGBadOB7cCGQ0s50zsMYw6p7DKYrMYxV1uu/7cqmptspRu3cR2k0TKTaDdbujooRHgZ7KphjPPgtYF+PBCMcyprkevB17cm5zGIm5LO8jg5VRMv85v2Oeq0uuCavdyAMHifv4j9I8N09UKnFxPQTue1ImT6des=,iv:g8jC6I5rQNrfr2Q6f+5K2Zv8909Ay14GGGwI6PbxUj8=,tag:Vw1iZznXSlKeplDBCS5+aA==,type:str] enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0UjA1cGMyb0ZaRFRuanhE
b2d2VmlvYlhPbXZuMVBxaTE1R0cvNFUwb0RZCmorbmoyQXpuc3BIVGtxZ3EvNVVa
QmNvcFJBdWlqQzJHTUJUei9kSTIyc0kKLS0tIE10RlFtZmFqTEZvM2FWandtZUR1
V1pla3JYZmhWNUZkb0VwdXBZYlNhc1EKp6U2CFAWBKCaPoGIrlRAejkVt2jpGoGF
232ym+kVvqpYFOM1q1RCfF05fMuiryi3Ije/Sc43kO+6mnodAjsnNg==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-25T02:28:14Z"
mac: ENC[AES256_GCM,data:fPG/tN1YMWm/8G/ZYnZxGcOvfmcw1wWLkiGWeRqjF5O9LPbPexyfpg7S4g6VpOJ32Tu7EGNNhc7aA8Xad+48oavMuZn8oM84bodQkZZtcqy/sWLb0U2Sbc6cXv11Put22Qr0NmL6kUrsjlfDDaLh++lSQ6+5bLA7KK/O4L4ju4E=,iv:plFQO4B845VBAzrdVPfCbV6ACWe9TmoJ25r2vw4IGtU=,tag:KqXZ4h9yeSljarzmvMYyXg==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.8.1 version: 3.8.1

4
nixos/modules/nixos/services/traefik/default.nix
View file

@ -37,7 +37,7 @@ in
}; };
# add user to group to view files/storage # add user to group to view files/storage
users.users.truxnell.extraGroups = [ config.services.traefik.group ]; users.users.truxnell.extraGroups = [ "traefik" ];
services.traefik = { services.traefik = {
# TODO refactor into subfiles # TODO refactor into subfiles
@ -177,7 +177,7 @@ in
}; };
}; };
mySystem.services.homepage.infrastructure-services = [ mySystem.services.homepage.infrastructure = [
{ {
"Traefik ${config.networking.hostName}" = { "Traefik ${config.networking.hostName}" = {
icon = "traefik.png"; icon = "traefik.png";

77
nixos/modules/nixos/services/traefik/secrets.sops.yaml
View file

@ -1,8 +1,8 @@
system: system:
services: services:
#ENC[AES256_GCM,data:+09CZswQlGvb/RoSmkr8eeyZ6hz5VNqDKAunX02utGcqPD189bz3+2TZhdHq3j0iML41sPBkVSD1cYEz6OYRrYzvtzQQPGqnfnSg8Q==,iv:LudO1m7a0PhBac9asl5lKshOxwYGVe19meXlHwbc184=,tag:9il+O4DuQNVvSlxKLH8R0A==,type:comment] #ENC[AES256_GCM,data:nOjY3Vj7zNlnAtqKP7gQ85bvNFYy9LTUEvFEr7+Zcjl+SHVtav/xSvouZvHfS2R1s5FUO/IHhAO/b5lo+7gS5rXWprtwpmxTz274Mw==,iv:TXSdzhn10kgG16OSIhbJNWnuBHYPto7KEJmI4plMPJM=,tag:PiS2lcOE59pcX/P4kSfhCw==,type:comment]
traefik: traefik:
apiTokenFile: ENC[AES256_GCM,data:vO6/VriHCw5i8kIGbbDlzAvgO063DkriHX0VrfOdixmSTvXKDkWHWKYWYmPJH2veltfV2VRg0fIq0I+pu/7lVB2lRygCw1Tf8bny5idgoAMnvRCIY3JfjoWzKfpcfjzsww==,iv:slPVDaYzTnCXQqtEY+ucKctYDzW1VpTpDGL4DaWuHWY=,tag:dBQwrpYBXx3o0ZED/i0qnA==,type:str] apiTokenFile: ENC[AES256_GCM,data:y0MToeBoYzrlbHq6+7Z05A6qNgREyPc48GURsQlFf9vKnK1rEi+isezqJD1VMMy6QtOeJQrzCi22VrUYlEMV63sPOsHYK+el9Om6oa8WA2HrqMrAswDNZWGSXdX1RW98WQ==,iv:h0xIH6wnZloLz3EdlMEGkbz1L5Z9gOfnFnjWPupvevQ=,tag:nP8E0trNt/yhxWO0PDDCtg==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -12,59 +12,68 @@ sops:
- recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u - recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvM3dpb3Bwd1BHcjdpMWxs YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrTjFjWnBoQkhWYVIzb1Av
eU5KVEpsOXh2K25xNzFoQ2tnZjdaSGJCaml3CnphanRPZXBlUWVNbE9tNStqL3cz OENjREtkN20xZnFIb1gya3RnY3grN3o4d1RVCmpwd0pwWi9QVTdKVUdxa0M4NzJk
TlRZNzJ4TWVKZ0FqWUFzdVZ6YjdjZGMKLS0tIFJxMlFwaTZxNlNwZ0dFVDVZZGxk L2pCRWQ5bUNpTlJ1WjArQ0tVd01HdXMKLS0tIGhvVjZMcmlpVUhzV1FmMVFJdVQv
WVlVNWlyMlFQWXJGalhkeVBmdzNMRFEKrG6sOHrGeSbO8iWZcDMz0P9OrUMogCYh YzFLUFZXZEpmWHpha2Z0U0dqb0hTaWMKvKvBprEyebIYK0fc61x49G/ATlGsXUkQ
/SGEk+01fNlfciv3oDYakvdOrjFi6CwySJp6JE74eXrqeq7RJ9rYRw== HvStwbMhMKy2dctwtTiDSTPQyu3qLjHYqpFK0ePiTXxmIBMsEU3zGw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c - recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMSlBTdmM5NXFrd2M3dUpu YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzZ0tkOHBOZC9vaVdBU1ND
YkxBWUp0S24wMUlLVlp2SVE4SThTTUxHQlhrCklyMTQ2bDlnaDBmVEJuTWhLQlJk bkdGalM0WDBLSzRIOGl6L09oYkFaSm1MaFNVCmpYMzFqTFkvY2VTWlNWQW5Lak84
OHpUdCtBOUpscHQ1WEViOTMzZG1NR1UKLS0tIGJISVNOdk5mMGRmNGIyci9Gak5Z RmlRYktQQ1ZrS3QzWXJNTUxhajJDRWMKLS0tIGVUemd2REMrdncrN0htTVZYOERq
YUZSTng4bFcxN3FKampQZEpHbS8yUFkKlzAK23bd7zfTkku9xXYCAQXWB/N59hFe YjJmOXVjbzVic0wrZzBPdHNEWWZ1WDQKarMJdvW4G2ox95IZ+Nc4cuTfc5hvUYh7
i2dkCW2go9JiO1BTU0hCPMayWvv2A0MQOT7GPuTmafJpCWxHg6xVBg== uPxsSwHwicfKJf7lbdDnQc9YQ/xwre0aget6rUvpqKUA4uzXy7AN2w==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk - recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvZkJTc1dZOGVZcndLZWRm YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhamNwNFdtdlQrM1IzRnZS
a3h4SDRvYWk3VlZuUXZFSXJSbHNSeDBNZDFZCkxZdzZoVTdQbUN3V0pUNjNrZEgv V0I5T2RyN2pOa0IxMUNzRUFqN1ZJeUFRTnhBCkRDaEU4SlNhb0tCMFJBV2Q4N2Jy
NmhBa25ET1o0MGI3VU5MTFhQWHVXejgKLS0tIHZQUXRFYmFRaHQ4SDR1T1JTV0Nv QWFVSzVEU0p6TXF1b2IvUnUwNEZOZ00KLS0tIFB4ZGo5dWJtOVNvWWdvZFFPWnBr
bkxEUThTZ2Q4alVwcFRWMEM5VHhocTQKxKg9DYD1Dhkn00Dymrol2b8gc0ijneMr U0F2N3ZLdEVLaGRBV0Y1SDlsSGowM1EKjTbBambxpqg4ahEhKn0ky66XXMA/NESL
NExshKja5azcimlFSvLWLsryZRtnN1lnRkyda07sWReYxiXDK+JJ3w== QcGxQCpveOp2OFHswg2TMAjYcFeWyQD/GgR13ipSrHCWugoyMfqGOQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc - recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBibm9WdWllcG9kVGFQYXJV YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSNm9mYUN6VTZScWlaOTBz
anVvRUZFb2dWVU5sWTg2ZGpiSDJJcXd5clc4CmFmclZsN2RPYlFWcUJGQk1lSDAv Uk0xQnl0TlIvRlpid090Wk5ubnNPMk9GalhVCjc1aUlPVmE1bUdET3VVZ0NXMEdX
cnF6MTdYWU5yTVFOVWtpZmxpb01OV2MKLS0tIG9BM0QyZFF3MXVkV1FaM3RRSlQ5 MlF5N0RNTm1xNHhTL2ZDVGVyeEFHb28KLS0tIGVwMFZuUmYyUGk5T21LdWtRendW
RkJzR2xqRmlldkxhWlR6MEg5VlIvLzQKkTM+pVXw4i+vNsB/lVxXIkjpK8lK5MJ/ Sm9BUzhPSnFJMWJ3dmlObGJadmo0VHMKFDsnDSMx5Gr9i5lushxBkEWkEwLr/5HO
nCsenTX1fdVZBU6eAA768VGIoBGs16evjswsqeVTUHwAs2el0mUrTA== HNmzpSpIIf2cnKtSM3rw+a1Wq6l8kFX5KBE71Fxn59clbVlU1TTolA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r - recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1dC94VjU2TjNRUUdZOVQz YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSU1dvUWU1UXZINzQ0NHlD
LzNQVGlMbDhDbEl3UE1qd05QaWhSamNCUEI0CmJBbEFHZmlZempkb20wMlJJOHF6 TllxbXl2Y29sN0d4MHBLVHlaRi9NYUJDcUc4CnJ0Y1VhWkpwN1Z1dmhjNkNFYlRn
b1ErYzdHdkZuemZTM2dXOUhwKzNXSWsKLS0tIGhOeEdrRHFzUHhHb1Y4bnJwMk5t WTB2eXM3NnVyK2Z2QVhHWmNtNzM5RjQKLS0tIGlKRFZoblhXTjNXd1ZsQms2Y25N
OWR6VEhiaGVTdWNseVQ3MmFXYnh2eFkKGopQENPK4H/LgkBJUuGAz/TuRs9H3wrB M3RDOTVvK25scFF4T1kra2lGUXN1S3cK1rVQdADhWxjZjvKtNNs8tzkwzi/VkGs7
43+V35qGfc8KTLKdPhJXAiroxY4IV2qkXglIp4Xh46EcMGIamsTaHA== AyPX8Eb5aMSmiF3e36CLAiF29nRqhV78Y+HglenbmzuEVGhPqVTMTw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl - recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0eFVpVWFFcEIzNVpBSGpQ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPa1lCOHY0MWhFR2QxSHUv
cTltRDloVHpGdFZQRzdyTkRDVXBxUG40RUJjClE3Y1RrQ0RIU04yVnZpUXhxVE8y ZHZjMFVmR282ZGpwMzNpKzFIR25rbVN5MjNnClk4YWZzeTQ1ek1ES2tQcnVGcXhJ
OGYzWVRoa2xZNXc0VkVSaDZhMzRZMWMKLS0tIDJ2MEMzVTdNN293bXVMMnV5eUps d0JaMkM1Wm1DUXpQK084Z0JyeGQwREkKLS0tIEw2bWZhWk9hbEZDdDVmUmwzQXBa
MXp6azVybDVSd2NLbGkvdWIxVnZkMUkKY5u1uNo07ki+Q0y+s4uxuApcXHpqQQ4K UHdOaXMyVFNyMmwwSTI0UzRYMEtzNTgK2SmnaLbnNxaD8hL5cl87b+671ekxzrCx
Llnn7m6MTtGCFxYIHpMm7906kauLKWXW+fftsISYpqDW6zlkmKWT3g== owPvUyleS9PKpF3b38qEbK5Jo+1rkoWHduV4fuGniTScrsaSVWXm/g==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-24T12:27:55Z" - recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
mac: ENC[AES256_GCM,data:CntkQWCG+SGXbXFPTNYO7WTgW4+LDdmtF16aYHtnijOv7uwMRXHTdZXPBzewGIVHbTlVGcsMuOcwvpXMGZ1ABuY/Kxu44sFrQ6CshYBpftZTv/WSVHHS8CAl4oZqzY1yddcVsCGO0T+N4Q8D8cBqrzQgrlP1L7+gAncJEjPwufE=,iv:zyEFfPfPmnEyafBeyAtNMO98aK4sw59I55RUqk8cNHQ=,tag:bL7ytwPq0+wbDDBqjHokpw==,type:str] enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2Sm8xU1NkWHBOL2lZTDha
SFYvNCtxb3ZoeXhPd0Q1cUNES0JjKzRsUGx3CkZYcUFSdElucmNBekU4WjJvVDli
cW9RMi9tdUZjK0RBb2hnN0dBSkJMK1UKLS0tIGhrMlcrS1JvenJQOWp1OVdwOXdM
SFFlVmo2MWhFemRDYkwrL3pjeUovbGsKvcvOI7UAsuaNnlcR4jYhGFH3SWi4W9on
N+Wox9Hqr3ZLYtswpdAc6Zjzi1XBiEAaXEHWBFRLk0bSE9ZR9BZe6Q==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-25T02:28:14Z"
mac: ENC[AES256_GCM,data:0VhDlbDrYeK3aOqaeIqmQtTE4ubv+nmwQCx1GXIGB7qxs5qxQbx9UVO/xZJh08L8NBPtMwgM2LarvwBSqINjo9ekUkgKX9ezUMIJrvSN9DTarZiw6mBYLaKDF+sCB8/2C4mWNvzt9tBP94it/1d7lCzi/gutlGKzAyXVGIawwWI=,iv:UWueUfPPmUhMfacnmVW6jei+8Dm6AUykIFzqpNIYty8=,tag:ZIvY8e63TZ+n+rEp2VDWwg==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.8.1 version: 3.8.1

81
nixos/profiles/global/secrets.sops.yaml
View file

@ -1,9 +1,9 @@
services: services:
pushover: pushover:
env: ENC[AES256_GCM,data:c/d8B/IE6IDeQqAiX7YLIsrLhbTb+EINQOMxsmAyX3FdW6fAi8dA4ooUQPXPXCzApEc/JlaJ4PFTUMYqL/nwo/g7yKpygNa6aOuXRhhj9w1z0SOlVWOrVzNpavSxQOhQ,iv:l+Qb6Be//61y0kf/pRnta1xBFW1MKZ4h065kAPekj1w=,tag:fznbDkM6R2nQarzO9srygw==,type:str] env: ENC[AES256_GCM,data:JFaA8AGPO1tFgv+ApFSMCGxQPq4B9kMf07J0PzW96nFSJ2CIDv7Z4Eac49FkSdtf2XwbMkR2pitFKZOhavHJUfii7x0aafct7X7EWYK7VGk/Et4TGHszJN+r0X28Wtsw,iv:gwmTKE2/4hpkjWAODBleY1gz/yIy20cN/KuQM+p0V6A=,tag:bNro4dNks1+BaVjLgyqD3Q==,type:str]
pushover-user-key: ENC[AES256_GCM,data:VnQf4AFBzU5HypMWBA1ZX8PDHUJ1p/rQZL8XbbFy,iv:dOeY8jJm8sghzaM8owgbOtrQj47hvkrBqS/csefAigs=,tag:fefJ3B2SxgefghKr+Q5RKQ==,type:str] pushover-user-key: ENC[AES256_GCM,data:VzuVqeSrFvz6rzArcrxPMSo5R71yhzZYMMROnPpA,iv:6ECnvOpm3/A8DHEw4lpNe+fX1VGD537pKToAIswdIWg=,tag:VfGx7Paeq+xJikSstiHS0g==,type:str]
pushover-api-key: ENC[AES256_GCM,data:jnzDa2B266LMq2hu4339HgAsX10dAtIvfK9uMw8l,iv:aYVpjQVvBTJn51n5TqUHgEkKcmXH+rsnfbwjHhpBykI=,tag:THdiej+xaRkfFDZupnH7Sw==,type:str] pushover-api-key: ENC[AES256_GCM,data:3if3FcWV0Se01LqXDshIov3/2xrCgKwS2UXdR8q4,iv:Yj3r33IvUCUbn6IPKwd9xxBf0pkgcEiXnIx8tYRF6ok=,tag:NckP1sf+XOyc1shH1V2sxQ==,type:str]
truxnell-password: ENC[AES256_GCM,data:1h08uvWy3+HVMPK9piWYhHfZUC8bWRv7l2OktKnXAcZgQESZHcgITaq6vSBwjXriRYnTP0ZGujSeZyDphv6a5c7GkhQscKKu397UH+XQWU9pb1mHJJ6eM7Lgq0LNoYUtLIoUxPN4qWWJVA==,iv:kYmr4ApiWFPE9J0SYH3y28ObUJthhvpZaLYHTBCOld8=,tag:S8pj3wTUsgN2rtvIOnWubQ==,type:str] truxnell-password: ENC[AES256_GCM,data:C6xsOc81W9hHtaUO/U5Wcm1LNTNKECVAX0XEqweDZDTozbXtOedeQ8zXAV9i1NkL08DeaDbI8L32m8YKTI/uHlKA+yjiQyqn9xskUVcoxGV9TxivzHuyCqJ1RM5+Bx3CDjWfuCEZIN+K1g==,iv:5bp6uSrZyVLY2fZiWRt0tdN1KGNVRDTHpeFWJIISfqs=,tag:Zwrefec8O8ZPr1lclrc5Vg==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -13,59 +13,68 @@ sops:
- recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u - recipient: age1lj5vmr02qkudvv2xedfj5tq8x93gllgpr6tzylwdlt7lud4tfv5qfqsd5u
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyRzd6SWU5WUJVZUtBWWI4 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFNUFkdHZ2S3V0WUtWa3d5
aWJYQ3FRUm1pdzFEZ0hYcUgzSkMrLzduaEM4CklhZTM4VGNWLzdIditMUVhwam9G QzFERCtyRzZ6SDh1N1RHMXNJSkRpZnVnOEhVClpVZ3hMdThqZTZyQlllSUlMVXRK
Q3RCOG0wNlYxNnRpOHFGVDlZVnU2azgKLS0tIDl5eFFaUlpSWUpYLzdPdTRRUHhq cjQwNjZ4Qy9NRE80WTh2QUI5K2pSUncKLS0tIEdQenp2OWZVQTBQd2tMRldZQVVH
elBGdEwvZkw1UjUyYko5TVo0bG5SZ0UKbkmj47KuxQYEnNqop5umkvAueuqiz3Sn UjNxWU9ONTYya05jTVBPbUptNUNISmcKl4AO2oxYMcvkkYwMoKiFTb3t49nQ3GgS
/LB/Q8dJkd7czZ1CIRoIX7IqkUmixwHw4yt7p4uE4Ha5otAIrxjjBg== d9YZm8frhqqMWL3wdsJSKGtlO8nsSOllbj8D9VSx9b9ywtPd+irhTA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c - recipient: age17edew3aahg3t5nte5g0a505sn96vnj8g8gqse8q06ccrrn2n3uysyshu2c
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQYVRRb3BYeWFVRUZhSFd1 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsbkZ1eHE2SzdIOEQxVVpY
Z3B4ZDFUdnI0TkJZRHJaZk5yemYyYTA3ZUFJClNjOVQ0V1lPb0h0cTUrYzhSK01y SjNQSEJwM0pnK1lVNFI4dmxrZkowbjkwR1JRCjk1Sm1VMVcrVGZJbGIrRmVJMHN2
SENjMGxvZUZleWZ5blZmUWtQTFY5UUEKLS0tIHNTQzhZckhtckdxRElrZjU5empu YjFqNlo4ci9lRi9OV3hVRFg0Wk1QUGcKLS0tIEJhbnNQYmlQVjdURTdOdmEwQXpz
OXRVNmsvcGtnZllmUFVwYzBGZHd0UHMKcHLTCQmDfqSXkapGz9m9TFXruvp6PQnJ ZlFaYy8zdXVwM01yVHMvZUtxNVpnNjQKemUlnQ9kWJ4lvmxHRLj9uFZWRk4DUBZj
LoOz8g75bKGcBsBdayOUTP+wA7xieQMjFSLnMdw1w4bQZIx7ZHdkEQ== E1U/BH1ag8oFk7aMOvqYZmCH7niHzAYCdwjUQBxVEpu+TnqMu3z6ZA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk - recipient: age1u4tht685sqg6dkmjyer96r93pl425u6353md6fphpd84jh3jwcusvm7mgk
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuUklhd1MrV1NJSUtsUlFr YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvaWRlSmY0OUNFbEE2S3Rw
WW5udVE4TS9uSzJKQXc3S2w5ZWFDK2k1SUFzCjVnZUJEaWhmbUtnaWJpYmtzbkZS cVpqZXZ4cmpwVDFoU0JIL2xkL3h0UGJuK3dFCkRPaEtJVzNMZVFaVzROUHJUdVRL
MGxheCttT2xTQjJHeFNtdXZpQjVKMHMKLS0tIGRyOVp2TTR4ZDBvTjA5akhaOGFB L0ROdnZMMmRwd0J0MzhRcDRMbnhjMGcKLS0tIHZWcXdEWVJWL3ZyL3A4UDMyVnpG
NERXUGlaRmtBVkozdE8rdVBvZXRiM1UK8co5K1XyxlpGj5lMMReotZnREv1mugPC M3M1dTBVY3BkaExNbkRGdzMzU0VrUWsKM+0FCj/eqhFOWGG8IzqyNseUjGDN68eY
MEAIrdNkJ/8BmGkPiFstt8MdEWbSNRCVrHl4UIGzL4sF1u7GRWabDA== 6dV5FamWMBxRXiBDgGVe48PDxb7K7qubCzcF19WbL6R/8nUpDjHqNQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc - recipient: age1cp6vegrmqfkuj8nmt2u3z0sur7n0f7e9x9zmdv4zygp8j2pnucpsdkgagc
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOb2lHYUhaZkNPM3c3b3g0 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqZHRvRmN0aCtLbGNRMnlW
aVBEdXN6VzBpejhqV1ltN3Y2KzhJbkVCTFFRClZ5TXZ3WGZkSVRkZGZCZkxoQndm ZDFzb2h3K2twdzFPd2UrU2ZKaDJzTVFtNHhvCjVoUW15QmNqeE5ETXFzSnhDS3hX
NThEQkg3OVFhWVVQVjlhRzgvWkYwekUKLS0tIDJDaTlMMFZDbUNXQlh2cDBtQTda TVRvTXQyZkRSTDBHWGRxN3NjZ05VdHcKLS0tIEpOd2RhWkNPY3JEUXR1aWFMcUNp
UUt2N2xtMlJ0eHdUU3E5VTZ6TU9DQ3cKSabitLps+EtGVyb008kM9F9RFAuoxzJs VEdrQ0hFd0preVZMaHhtNTZrWHFIREUK0eRfXHKnyDXG8+SpPkNImNknNcXEe0wN
OWV3KAIeUZCuPcY+0abVfchlljjMj/pY5BVMwTgwAuRBbA1qQh7b9A== OPuBwjBAwXVa7KKiUOtMWkXkq/Pu5ePXZdj7mLHYtZWMqGV17Y34xw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r - recipient: age1ekt5xz7u2xgdzgsrffhd9x22n80cn4thxd8zxjy2ey5vq3ca7gnqz25g5r
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2Rmc3ODdIeFpFd1NNMUN6 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2OVQwK3B3ZjRaOVpnbEZO
SUMxOEJtbnh5WFJYOC80RTluNm1TTENZZlNVCm9hTi9CRmx5Z1FXNFhSbzNMSk9P RXNSM1lEL0xpTGExVy9GVEorUDBmVmtpeWdzCjNodU1mZUYyUStHWnhld09BbHNK
SnJ2L2c0WVg3R1VkS3VsWThBSUF2WTAKLS0tIDk3bStLVU5WVjFnOUNDQVJKOXNx V1RJNHgvUEtVS1hEeUpzSmJSZjNiejAKLS0tIGNPQ3dsd0xQdWp1T0QvVFA1YmVE
MC9pM0czV0RSWVhSWmMxUW1xS3pYZDAKb8QifbBdFcrOBw6114/RlddIWllUh72o c1g2SmNlWGZXaFNXY0NWdDRkMFN0UXcK79ldF6D4sUJpkvDyUzHA/A6SW7+w6XBy
2YYya1M9GfULU+RPKxDONb5eX6FZqQgs/Q/qGSOczYT6rHUZyDnEVQ== O0RKGRXwlO12QX4fjIDRIjc1TqRy1KsU7YbK0WrpP8ar/tMd3Nu6mg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl - recipient: age1jpeh4s553taxkyxhzlshzqjfrtvmmp5lw0hmpgn3mdnmgzku332qe082dl
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKT0E3Y3pxbU1LM1I1bnFa YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlbTUyUFV2dTFXWWF4Z0RT
dytOZTBCclA5djRtRHdVSHNuVE80T2Q2ZGtJCkJwYkY2QmxWakc1M3lHS1hzSW9j ZE9nSHJIR3hycDR6YVU4c0RuM1FjaCt4L2tRCmRtS2VLZkRHNFY1b0FVeVk1WlE2
ZGVjb3Yyc0RORFpHUlNmd3BnV1NpdHcKLS0tIHU4TTN0dVdvQUwzWHRLcHIyeUkw NEl2SVd6UUVCQVhBc2VzRCtZNWt4QTQKLS0tIHJyeFlwWHdHajBEODBTMWo0ai9n
eENKanRua2RRRlFtRzF3V0pDSG13bmMK0gB71XrEB+ORWwgie6gNXxzvWu/LYmIr MlBLVDN6V1JTOC9PblZvQ2FPSzZNalUKD19tba0s+/IZTGpdZQn80hUrTI2M9ih8
39LlHE/bxQvhlUo72YOuzxONb7fK6J6C85VJgTyORuAHSxQo5izShg== CFioBGEx4LLEhp0eF1YRtruXLD84UYvixQwQVVb9YJTBv9eCOlT6Kg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-24T12:27:55Z" - recipient: age1j2r8mypw44uvqhfs53424h6fu2rkr5m7asl7rl3zn3xzva9m3dcqpa97gw
mac: ENC[AES256_GCM,data:IEhkh4FHT6lgMiImkBlAOS1RJmph1GNKFGluseVXnG/srdnnBzKhk1d2vbW0nPr2/TjEGsiYwNfXc2p96SD46GFnHaJUryOcmKZB5J+q8oGruQzrN9dgu7m+VUblr2r5Rgbgb/QlHYZ6TfzYnspWjGViBdTMJJXmx4BePi6aHpA=,iv:2WQog19sjlEYsCJISHi+dBb1+gT0zWlSykebPrzw2PM=,tag:X74+eNpCV2kyFwLfp3Te6Q==,type:str] enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrZWN0Kzh4UW10dTZDenhs
dnNaYU5IZFArdTQwdEtVM3lvK3Z6NkVWeXlVCktyQ3JHSTBEaFFRdjN1WlRNaEdX
U3N6VFV1cEtvc0RxQWx1eTRuZlJBcEEKLS0tIG1USHpPNkJmTEQvY2NCTkJIZkNh
aTVZSTh3VkV5N0l1c1h0V1prSDgvNVkKYcJz8MP5QVi2Edajv+f8arkh+df+b+AJ
RxG7irfHZdJQ0waLV/DzCk+narH49IyWvtbN7QoXqAL01OZF4ujDKg==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-25T02:28:14Z"
mac: ENC[AES256_GCM,data:a3iSR/pqaHbTybjkr5Y7wZdvCAmL5/QirZe8IYg2yx5mcncXtKbCyR/eRs8L2w3SS9sPFTMG02y2+rz6aZV16PPmJlthiqGBpLPu8+GLWKFin0DBiRVYCuQUlaZK8zsHvV0M+xUbNL5vhRRgy/UHROOuwvRI/Mjma9tN9lwANG8=,iv:efmLgPZLafYhwJtmbkIZ6R/a4rFGEOyduY8mhgYMTTc=,tag:FehirgjHZYwB9FjERHGobg==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.8.1 version: 3.8.1

5
nixos/profiles/impermanence.nix
View file

@ -34,6 +34,8 @@ with lib;
zfs rollback -r ${cfg.rootPoolName}@${cfg.rootBlankSnapshotName} zfs rollback -r ${cfg.rootPoolName}@${cfg.rootBlankSnapshotName}
''; '';
# move ssh keys to persist folder # move ssh keys to persist folder
services.openssh.hostKeys = mkIf config.services.openssh.enable [ services.openssh.hostKeys = mkIf config.services.openssh.enable [
{ {
@ -49,6 +51,9 @@ with lib;
# If impermanent, move key location to safe # If impermanent, move key location to safe
systemd.tmpfiles.rules = mkIf config.services.openssh.enable [ systemd.tmpfiles.rules = mkIf config.services.openssh.enable [
"d ${cfg.persistPath}/ 777 root root"
"d ${cfg.persistPath}/nixos 777 root root"
"d ${cfg.persistPath}/nixos/services 777 root root"
"d ${config.mySystem.system.impermanence.sshPath}/ 0755 root root -" #The - disables automatic cleanup, so the file wont be removed after a period "d ${config.mySystem.system.impermanence.sshPath}/ 0755 root root -" #The - disables automatic cleanup, so the file wont be removed after a period
]; ];

1
shell.nix
View file

@ -46,6 +46,7 @@ pkgs.mkShell {
pre-commit pre-commit
gitleaks gitleaks
mkdocs mkdocs
mqttui
]; ];
} }