diff --git a/.sops.yaml b/.sops.yaml index b0301ff..ca3aeb6 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -6,6 +6,7 @@ # nix-shell -p ssh-to-age --run 'ssh-to-age -i ~/.ssh/id_ed25519.pub' keys: - &system_bastion age1up8uth9hwtd9gup3v32l8dypdarj77s2lysm8js8w8mwa80rk4ds76ke6d + - &system_outpost age1us0wxu4me53y6djl5e5az07c83syxmm0u2jgwzgvdj9nfq6stq3sk8qcc8 - &system_redoubt age1ftcr6legvdxc2yn2zedqqsxaax3wedxqw5ad2k2f0m4vprfc3u9sgxty7t - &system_fortress age1fraz2lnnqtcxnu6tnjy4f7y9tuc0fnqekzmdynnhtt0h8a230v5qddpxdu - &system_blockhouse age14j6ns297c49wx5d8jddctfmek0kvn8rvw3y03nw3pankc03dlpuqhvvy7c diff --git a/dotspace/home.nix b/dotspace/home.nix index 3bf0012..a0c4066 100644 --- a/dotspace/home.nix +++ b/dotspace/home.nix @@ -13,18 +13,19 @@ home.file.".ssh/dotspace_known_hosts".text = '' - [10.86.84.150]:2222 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGeO5P0YXb11gWpu+9Zj8qulnOeEHxFVIq/d4hfV6KAM - - fortress.mlaga97.space ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINzNlalnh/cgosa5Vw85YEET9rwcEmfRGTFlNFqSo/53 - bastion.mlaga97.space ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFtmSrFZNFWFUH7ajyaFQSE85RC5Y5TdlZ0U/C863Zg9 blockhouse.mlaga97.space ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILGKN+xPvC+o9f5vlItdytZfKbsQyN/7XODU2jexL1TV - drawbridge.mlaga97.space ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOphVdDU4YpAc+5JiwarKVk32kfFtVCmQUIJaXc3XqJA + fortress.mlaga97.space ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINzNlalnh/cgosa5Vw85YEET9rwcEmfRGTFlNFqSo/53 + living-room.mlaga97.space ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEMvrjTnD5GO8cxnzSj12kKn3lQfPQpiuO5XZzWnfVMi + ll-latitude-e5591.mlaga97.space ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKiyCBH4WDsmkbsncWbEtzKcBh7t8dKFtWbGtp70lvGm + outpost.mlaga97.space ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEWI2SiXlBECjJaQa3i5xu2Kvcu0ju6oUdk/t3AJVUMr + redoubt.mlaga97.space ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOv4X7Na5YG3ty8l2cofMD1ib79YrIlcSBh+PceB9HjB vm-docker-0.mlaga97.space ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH4bp3QlO6M2dfPvjzdTfcEXEsaJ1fcIxyx8aRZRzekq vm-docker-1.mlaga97.space ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINolzmDBmxUIpR/pcvmQ91gydyty4HlrDyZcz78NYC9C vm-docker-2.mlaga97.space ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEm4WfWSfqmVGF6VwyLjxGcjn4YtqlWa2zS3eKxDJOCo - ll-latitude-e5591.mlaga97.space ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKiyCBH4WDsmkbsncWbEtzKcBh7t8dKFtWbGtp70lvGm + [10.86.84.150]:2222 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGeO5P0YXb11gWpu+9Zj8qulnOeEHxFVIq/d4hfV6KAM + drawbridge.mlaga97.space ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOphVdDU4YpAc+5JiwarKVk32kfFtVCmQUIJaXc3XqJA ''; } diff --git a/systems/outpost/.sops.yaml b/systems/outpost/.sops.yaml index da7781a..5981223 100644 --- a/systems/outpost/.sops.yaml +++ b/systems/outpost/.sops.yaml @@ -1,4 +1,5 @@ keys: + - &system_outpost age1us0wxu4me53y6djl5e5az07c83syxmm0u2jgwzgvdj9nfq6stq3sk8qcc8 - &system_ll_latitude age19v2gpucsykaqu3hsvskl67ss8mpqstp59vn687am6px9nmg585ksvlhctz - &yubikey_lauren_primary 5F78261B65C565041662A3B7FF8FC3C735BD4A51 creation_rules: @@ -7,4 +8,5 @@ creation_rules: - pgp: - *yubikey_lauren_primary age: + - *system_outpost - *system_ll_latitude diff --git a/systems/outpost/secrets.yaml b/systems/outpost/secrets.yaml index 5338191..072f29e 100644 --- a/systems/outpost/secrets.yaml +++ b/systems/outpost/secrets.yaml @@ -6,72 +6,45 @@ dotspace: rsa_key.priv: ENC[AES256_GCM,data:ofZzGqt+OfmzWPJfRY9OaHoS264OwsuI8St0ldAnB55tcA/WZu0MHpOzsFlR8ibAhYpMN7Qvj2Hjmw/Fq0tt1V9hrpiIWkyJ2SxrlPtNrVRSPxJaqBkOtm42r/L5we/wZO/xr6JAUV3ZXrNbpBv/Y58YLpvg/YCnjCYtUgzeZdwxRlRjUcx4rOEWI9GgbSraVlehG6EQiQLcrSENeZRnDAyrThuy1RgX/fduXnzHfHkNGqAepK9IfC1ffletWK+1xhRVfLrq9bSCKI2085PJIR8xLDk2/Saq6o2V/+xZEBRO8ISAvk9ZZ48XcjD0a/incyKKLXXbdUrGuS4BXGeIqdN7anG1BmrjlMNwajpc6hHTXiXb79B0bReQ2QR+8T0jK0hDPjC/6d+q32xm42jsHcXPaPP2R29+tf8N4ry2N9RYmxLPM48jOKrsAD4l7iF7d23HfvPHoYk6LknAEq3jXtDkqyNW5RTVfoSZtinHdijM6zvuGiyKl0kK88/EXTOZrjym2kHxN9gPPlk2neg5aKJ1Y0qHTbkh9BP6D7nPBz+ecjRx7CL+pGAyyfhwO/HFMX2Zyz0oog2Y+teErFVjg0p/WhMxlz/5KtslG5aSM0Q6+fMwcLmE46yb/VpuJCnNu8m3OwqInQS4Hpq7h2oIEnB+ptGaL3iDy2FdCZxsLN4ABatSaxDtjOnwaxWNHHtl1KaCRz+WU4MF8Me6u6xTQxj4GxHPKi9tV1sLRJgW1gA7ioMT8nhOlc9DKw6vZU7mZRGNHYiJMGII0LrrSr3pNN1qH4DpuLR5RDzYAFClsIKi6ZH73JPU0EhEPgrSO0xjqpje/vpf29haS6xaMn3djzuDKgkqDpqW5lDOrJvP8sHeNNYB5fkYbhPZbz1R79PnEQWW3zq9Z9iPK0/q5NiTy9rkqJp8vNmUXiwvP7/9nugTAHFDpt8fvImTA5Mxoy3r8y8+QUeZQvayVMuspBVmLrcpV0PEeZvoTU+G2/8Rx5CMLG2OMfdGUvpM4gHPlHWb+U4GsgCc7bTA7Ob7+sqXbKyGC9UudVnD8mtONtkngUqR7rT+TbQFVwid9DPmgnl17UVs8/qpcGJ+gbmjEbBmQ3ucZ9u0vdwBe+IK+tPmnCtQFnWpHRUvdTp6g0asLN/kYn1Y5nZ6VAOLXc/ANfq02jqTmBKQQXnR28OVXgM7pCJKufUTmfzDnRfszl83ILpUI3EHuiFzXw6Eb67HySajMKGGYrSRK8wSlr9bJSTN9I6k7ij3VvhSOEEsTO5coSmf5SNRWBkfCEDl0Oa3rsWhpAHcWZGcMEOEqKv2OsQ7IVnS8JRzJ8w3v7Ddy8Uu3D1uFZXKP779D8XvbUowKk1GD71fgRNWn027cl814OpLD8ncEjx3lGd0/PWH1+OK39ZYlmXZx9fBvUYnVoNT6XevTouW2c/VAkZR+D4SdTXEp+EZNscihPPW5vIb1xj59K96kqM6TS49VDOPQGritCHu2xDGJ0Wqxw0Pbd4c9yTfPu5Y8A5EeDXUA1/2UpxgpjC1fpXkztTGM2tVStbOcqeB+HieBNRUdUzexcuwKFC5aZ3ES8SXt4kEjiMlyHPyneMbd7LmGLaHwBHH+VXnyHXap8c26guXsjgNqO5IufW3pdGjZ77BUanzwVCRZySmO+SLSs5a63dXnXoGq4Resh6gKiwJGJGCgQ6xvBljzZkaPxjSk/gUOhdfG33/0ytgCfNS8pHxI9w1Ddb44VNL5M1LOlqx6akaPa4gqd1ORlgUjR7dbJ8d9ZNPzX3zH9gfAOLjrNY/xgo3LUQEnSRqmvtw/UfH+zbxYGKzskolE2JCxankuoe8XWnqz6KTyrPMLzjJuXfqepZi23jvRe7M+/Z1G5xp0YGAmU6Qq2EeFjQ2SLcHI1uJnt4AU+NNMMl4Uop4nxc0CSCFI3k4cg+JY6meYlLZs4BA/FKdk+VenKYVwpY/tsO1GbrsxlrEFjOO1OmQgjL2AsNQnjkHcveZCRqcq19LreRMvxCfGl7Cfcq34T7uwvvXmDrti/GWDhll4iSTsRGWxobY8HiNV929duXwiymqD/tdjUzTa3l3T0t6AXkEVW25y89qFtMlI9AH3oz6RC4YvB/ZYbZBn4UQAJsAYIm8x8Ox0Y4I1npxRa6HZnz9Pjyt+tL+wMsvCgqbGljLdvh1b2uRf/YFEDAoEUT6DyfHelSpuS7YN7o+1joR0tA9Lvli5+ZCgwN+KLkI3g==,iv:+ajn2mfJWvKCVYPa52jmIZ6Q4uX5ZuJG+EoaDjKtJXc=,tag:Zrgud6tf7fhw1Rw3d5Dy7Q==,type:str] sops: age: - - recipient: age1up8uth9hwtd9gup3v32l8dypdarj77s2lysm8js8w8mwa80rk4ds76ke6d + - recipient: age1us0wxu4me53y6djl5e5az07c83syxmm0u2jgwzgvdj9nfq6stq3sk8qcc8 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtWWtLdDUzOU0zTTFoRnBM - SnFlWGNiUzVGNlBsVG54QTFYVFY1OFQ4RFhvClgwTE93dk1YalFaNmJDNlFqTThB - dzFwT285aHE4bjdIWXowRGxoR0ptS0EKLS0tIHNuK2tIbVlwbkpWcU9WVnNNLzlS - bG0vb1I0NzM1UWxlWTVPWlhQOGwzaFkKeMRVoOsZM8aaI36/zQUSRXwTJz0XUfA4 - KmbEgR19YfPq2+EoPtGjdTFvtpZybBIf3E4YcIXAYy5BwJg22o4BUw== - -----END AGE ENCRYPTED FILE----- - - recipient: age1fraz2lnnqtcxnu6tnjy4f7y9tuc0fnqekzmdynnhtt0h8a230v5qddpxdu - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArSXo5ZUhpalpraUdNdGxt - bjFqSjd3U3k2VTdQVk9XbDNnSCttdVBJQm1VCmU2V3VXcU9JRnVwWk5TRHVuTE1F - M084MmVIM2VtUFUydkY0czFmWmw0dkEKLS0tIERDd0drY2RxdWYraVpaSmFkQlZO - bDZjd1lnUGZ5V1gyMkE1L2hNdzFSU2sKU2gBfOG0eeWw093lOwyjW8WZKJwVR3dk - d/Uc9tujyDUXsBmhXsUtEuGWS/ZDpwfhxYK/wZtL7ZkGsbUio/gWxw== - -----END AGE ENCRYPTED FILE----- - - recipient: age14j6ns297c49wx5d8jddctfmek0kvn8rvw3y03nw3pankc03dlpuqhvvy7c - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoa2tEVEY3MENjRlRMNExW - Y05nbnZmMnVuSi8xV2FEZUdLbXloeEFEVjFzCmQwSEpKQ0RvK0FUUU1oMFcydnU2 - TExkNGVOZS9TQUhQbXZLeVd4enh1cHcKLS0tIFRjR3JwVkI3WjhkNXhHSVpScVF4 - MGs1LzFVdXpiaXRWOFNJTit4WmR1QnMKq3W4cMAjHsFjlrDbdLf+0GvAU0t5Trcx - dBZwE0OsrHqEc+1sFitACdgeGj5uWf34f7Vx4UxoVvQRiszjLcsZiw== - -----END AGE ENCRYPTED FILE----- - - recipient: age1kmt2khucyvscmwvrjnt0v90zggttuap9utx7rw54g9amhtrkzdlq94fe4j - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2RmdNcUtzRXFsM01NTEFN - ZWRzQlU1NFVSTjR0WXpUY2thTi9hM3RreWw0ClpyYnpDc0FSYWhwbCthQW1sYTdl - VG16U255ZHZIeWlDUjUwQUJvcldEejgKLS0tIFV1Wmo0ampvY0k1bnpFNUdkM0tq - bkV1TU5kM1l4UlhVeUxOVnYyVlBXbFEKCsPqfT4n03vLgWmAOr0zRsTt7xd4Fy8X - zJPGt+Pr+GRyVDyFcvYO0hfFQ0rwi5IxL1Ee4HlMguOA0yguyeEQjQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2dXRTUlRNR29MR2hpOEQ5 + SUg0NFFZZzdCTnN1Y2hlT1lZbmluWkk5TGtvCk50MllJT2pGQ25rMHJpTmx2SWFR + SGN6NmdkVzBFOWM2eWdqREFUcnVmUFUKLS0tIGtYNS82U0k2b1VycDhIVGgvR3Fs + VFJKR3NYU2pVUG1QeDh2T2dLRDF1bFkKjppj+REmPq0ZtvLsCII34ena+kFeSj2Q + nDsjD7Fy4A7Zd6OcmK7yl7CTjYHTDsrTrFDCJUq3S92GRIG7bVpcvw== -----END AGE ENCRYPTED FILE----- - recipient: age19v2gpucsykaqu3hsvskl67ss8mpqstp59vn687am6px9nmg585ksvlhctz enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwRVFNejF3MzVKZG5KVmh1 - d0dBV0ZidEJVOVBuc0tQOFluWU83OElEOWpjCmxjVGc3MHl4WnVCUElCM240aUxP - ZGtONkhVZUtpQ3JvWU8wOXp1ZGhZbDQKLS0tIGUraWJ3Rlc2cGdiTFhIc1o0Nk5r - cUJyaW9RY2gyblRaTWdocmNVcE0vM0EK85ML4yYRTP8PqjiVTRW6U62Vm5EvExUx - tMKC4T8AJ/bYaJNy0mFH/MhmPkYHThHNxurIiGDLrzohTYy/D74xhQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkRTNXaEZVdEVQQ1ZrSnR3 + Uzl4LzR1MjRQd3luNmhud2hidk9uRGRQQzA0CmJOcEhJNXdTVU82ajQydUYwQlo1 + TlVsOXdLUHhXR2xmY3NHLzdRMkNwT3MKLS0tIHBmZU5tZmtuTWx6LzlhQjhXN2t5 + emR4LzN4WEtRSUJhbW1YN2UxNkZUR0EKHcsfR2hOb0LilIPUXtkRp1Rl+r9AioQa + LtL+Jxx3FyxSIfflhJ7+oT9QHZXMvzcbi1dhFiRVZDXHKWZMyLDsXw== -----END AGE ENCRYPTED FILE----- lastmodified: "2025-08-22T03:48:08Z" mac: ENC[AES256_GCM,data:5r5USgaoTikwqkxtuXHHAaMz6mPJ07AC0TFq3mEBGEScoO4XStf2AuY2j5EFr9aLep+cIZJEO1AUMaAZTcrZfumjwn/XysCQm1A5xEPU5a7ydrtQHV6gjQaKsG7NLjbueVOhWuerxvmC7U9Gn3TZAg7OHXqXpG3SWXGE3aZJsuc=,iv:YMeRi4MYqx/cQBWtQc3uzZkpVCIRQObplE8/YN15ft8=,tag:oO+O6H7l9np79m6AWjHa8g==,type:str] pgp: - - created_at: "2025-08-22T01:50:35Z" + - created_at: "2025-08-22T04:26:19Z" enc: |- -----BEGIN PGP MESSAGE----- - hQIMA9BR1U1EkAnnAQ//bn+DWuHDMMxHxv5SH0zop7bzApc+mn7OXBS7OQERKR6o - 2RA/ZExvEkCMXwjXI1lfzIkab5Ipa6h6Ao6DcFczdcOVa3jIzlZjpsS8lA5DqZ/v - fpP3tQOYfxvdtCLxkHPfJ7Tmq92Kqd1TBhIfG6A/YCuDiNnMQb/IC7RB7R810xtb - X/gMLftJCORa/qCaWVgjObqF5ehMFqtUIBNmBiMUihbOaAMKn60U8XWSgPH8/+uE - S/GrKEKRnuDHgaSfFDodtnLASR7UzWNSU0Xcw1dlWGDDadITextvorrwABVM2HmX - ZXh4noXFmAf8Ft16NY8Ke1FtzcqObwbIN6drcfjoI4NBqFF5OAKj6QR88yNtZrWD - 5YTMSdmYCJAZ7wOH8Jze0TgCTO/2x8/car4QoFShVwftrQqdKqaTXfQ1tChAgL4O - VjkaXFfnKB4aU6iQ8XB7n5WmvYBquDB8swjaTo42ejMtpxw6hxsCtP0qaY+Syv0B - SBt4k4KTi6Yb1pwbpxn5KilyqXSt8xGINYf/jY7uOanvL/+GuUUQzq052yMTQFlI - K8ePPh6MNJz+Z6AB0LPXGEIkAERbFv52nkchO8tyMD0TE7pSuWDWliVdCUBbYxeh - DsU4qES5P/MCRoDKmlUpfhCGhVP15fR6fumvVtLZuSCOtRY/YYoGUo/KPcKYIM3S - XgFk8knsaG1Ncmqsg3Y2Su5yNGVvjICxde0xTb7PPdR1+6R+Dp461Rorzgmp9XTu - mrdYZJGqlz/yKEqsxU7ExTsppRrzRcejImyeukgHPu4/0S0lsfDRvNpX+CS48wE= - =ACo/ + hQIMA9BR1U1EkAnnARAAqezp8QnTZlZAp78Zq8vnGvfo4XcpWWo5SLATglDsCUaQ + CHPZrifgdbekzirOR0chsOfNwdJpRNyS3lVxtVhbaA5TzGBYM6E4AHXBQV7Sx15O + NXQ6xxFlrpqxP3uRTvrT0UA2WSJVr0LfUzrY5DMgfcVX3H51YQFX5CQYgDj0sYyc + x57kPXGk3/+CxTOFaGyV7YP50JAEZ6sVW33wFgm5Ts+thPpZgtM3lQMnvcs/4RhX + 3/POIIQ/UQSlWL9wZvTmbMIddCnAhXxu8z9+qPkcaqQ/WEifDgxVqOgXMek6ePxd + FI09XapzVe6JSG8O0alNrKfVU2rwqXKDYndCcvAx3wVBqH5YMN3C+qORZEUW4Z2T + qlIA0V+eajnkthBq0IOhOEQzh18fV2sVhSvrOx4EoQCVL4vvJBxN9De0aW6X/Pgu + nrrEK1x5mhBKBKbBr7X8LXfbe83rEutvlrxYYogBlWMYfEYKcn9yoTbHYjsfZVx9 + 256srOjeXo7g8HGoVdkchzHd8COA5uWUhVIBPTQcqmJKnOGcWHEDlbWhGZObzu61 + GqUuXLdnmOnpaYjCOAbV6l01+gA13TsK06ByF76hVYuRlRq8FZnCfaYUkNI4+VUK + ZVx2cDK3naSZwPZPGElLKy7zoi667/pHtcJeliT5i4XajCcCv0nMkGE40fb56KrS + XgFrt6+KWSWytSpCNhNTXpNQNqPhQy8P6d6dYYjolXLDCj+TUp1cHJgp2GBzuvGj + q83tqAWawhhzYQufeKsyVxfvJJSuumWsmYI/RiNgpkT5ttUMCLNjWbV9+JwD02A= + =dXST -----END PGP MESSAGE----- fp: 5F78261B65C565041662A3B7FF8FC3C735BD4A51 unencrypted_suffix: _unencrypted