cluster/services/wireguard: add grail to mesh

cluster/services/wireguard/default.nix

@@ -27,6 +27,16 @@ in
         extraRoutes = [];
       };
     };
+    grail.mesh = {
+      ipv4 = getExtAddr hours.grail;
+      extra = {
+        meshIp = "10.1.1.6";
+        inherit meshNet;
+        pubKey = "0WAiQGdWySsGWFUk+a9e0I+BDTKwTyWQdFT2d7BMfDQ=";
+        privKeyFile = ./mesh-keys/grail.age;
+        extraRoutes = [];
+      };
+    };
     thunderskin.mesh = {
       ipv4 = getExtAddr hours.thunderskin;
       extra = {
@@ -60,7 +70,7 @@ in
   };
   services.wireguard = {
     nodes = {
-      mesh = [ "checkmate" "thunderskin" "VEGAS" "prophet" ];
+      mesh = [ "checkmate" "grail" "thunderskin" "VEGAS" "prophet" ];
     };
     nixos = {
       mesh = ./mesh.nix;

cluster/services/wireguard/mesh-keys/grail.age

@@ -0,0 +1,12 @@
+age-encryption.org/v1
+-> ssh-ed25519 NO562A BNIU8M5X5C4LSiie6S4zVraFQAsyGKAv7BwLVIXHiFM
+LLcXZ7tiTUnN+tJLwqqs1hLZ8usCDWqNVGr1lAn5OQs
+-> ssh-ed25519 5/zT0w H/SGf0oYVg/JCd07bicWL1LWQwExr0gbi+gV1j7Fy2M
+yHjguPtS8ItpY+pAR3lLVpXQxq7d3cuQYU5DHs2qjMc
+-> ssh-ed25519 P/nEqQ z1us0mTbOuLrkI7n6doG+JVFAuqwZvC0dEfdGauM+Fg
+P/tKnt5gZ66HAWR0/pqpmJMHp6hLbcjwE3BhO9NCkZY
+-> ((I-grease
+r66LwGiqumMp/NlcnLgOaxZ7cfQMBCr4Rq9aJdjUck69113hNf4orC/bGVCDhmdu
+s1cSHPVw1hys
+--- FxWSO98U5IDaGPs57hzO70gVN/ELN0/UxKKmIoxadks
+1ÊnûEHvóî_QíÄV†7¬Çæ•Ãܲé¶m¡z2'ÛÎ¥¯zWÚ)¼Ôç.»!ãi#¬TXÎT‰k[Fy
üˆEë!>á¨tÁ !‹‚*Ã

secrets.nix

@@ -49,6 +49,7 @@ in with hosts;
   "cluster/services/storage/secrets/garage-rpc-secret.age".publicKeys = max ++ map systemKeys [ checkmate VEGAS prophet ];
   "cluster/services/storage/secrets/storage-box-credentials.age".publicKeys = max ++ map systemKeys [ checkmate VEGAS prophet ];
   "cluster/services/wireguard/mesh-keys/checkmate.age".publicKeys = max ++ map systemKeys [ checkmate ];
+  "cluster/services/wireguard/mesh-keys/grail.age".publicKeys = max ++ map systemKeys [ grail ];
   "cluster/services/wireguard/mesh-keys/thunderskin.age".publicKeys = max ++ map systemKeys [ thunderskin ];
   "cluster/services/wireguard/mesh-keys/VEGAS.age".publicKeys = max ++ map systemKeys [ VEGAS ];
   "cluster/services/wireguard/mesh-keys/prophet.age".publicKeys = max ++ map systemKeys [ prophet ];