cluster/services/hercules-ci-multi-agent: use garage

cluster/services/hercules-ci-multi-agent/default.nix

@@ -22,4 +22,15 @@
       ];
     };
   };
+  garage = let
+    hciAgentKeys = lib.pipe config.services.hercules-ci-multi-agent.nodes [
+      (lib.collect lib.isList)
+      lib.flatten
+      lib.unique
+      (map (x: "hci-agent-${x}"))
+    ];
+  in {
+    keys = lib.genAttrs hciAgentKeys (lib.const {});
+    buckets.nix-store.allow = lib.genAttrs hciAgentKeys (lib.const [ "read" "write" ]);
+  };
 }

cluster/services/hercules-ci-multi-agent/secrets/hci-cache-credentials-prophet.age

@@ -1,12 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 NO562A XV9fjixDzjYkcTAh/uAWS+vbvqe19HhF1D3ak1g1jiE
-t5PEwAn+I4bJN27fYEZVZQh/SVxQocBMxqxc1O5CCgE
--> ssh-ed25519 5/zT0w 0KuTIG51h+oX3QWZukAjoBVHXE6NxKBcSfDN9u/A2H8
-SGm8Eh5L5ELB3gjmV5pfh3HqDnGrdif0I7mF7ulabW4
--> ssh-ed25519 YIaSKQ bjHZIN85glRN0hdH76iu7kg243enfH6VlX8Yr54FfzM
-0RzxbV9ABYElM2DIfimkvzeVuhobpsiDTH39PgVDTvE
--> 8&39JRT-grease {)Hfc"$ |,#c1\: Vf>^[!hm ;2o>+a"M
-y9JRDuvO1YC61IhxUofWLAYfOEldTR9/SwnGuo7lAbAp8smTrlWO2qVe3Ztp+gQU
-NXZ9K3PaKKm1VWg
---- p75QmGUUBK5sNhkG6zDmEGa5injwKH119i6bHod55+Y
-ªzÕïMç(_b*öj6\Ý‹1CgÁ?
ãЂAvÝA¯tŠöx_¶
H<>¯èïø‹ø 5Ï'Ófú
*÷Mb¹«„ëŽF¦Ït®,)6ýÈÒÿQf)˜ú¿²šHgBQ~-7<>•RþçÚ‘?°¡ÑRUßÓòPõÛ(îU¾W>'¨àF«ˆ’B²§ÿOV<4F>¸Ÿ<C2B8>¤
+-> ssh-ed25519 NO562A jNUNRaIQC1DUBiacnWc3xjMUAxnAgiyJhRA74cof3Ec
+oZZq1AQ3F0nvrk7KpinLWgT3cIoCYZ5R1s0us69OI8E
+-> ssh-ed25519 5/zT0w FmoxaTg75/xaDmSOHL5Xs6QOr5rLG/sr5TmPMfkOqxw
+XXQrFxxt5GOzXgJoPY8U71NSYi/IWmL3QrenvOuQ43Q
+-> ssh-ed25519 YIaSKQ ++dqG+dr8ie+4sPW7L+eVkXvOVvM+/oBR722S2sQsSg
+879pmnhOtZ/MiMUwDlyujykQXNmCepI2FSU2QcvvkrA
+--- QcvlVdv2fYMKmT/aCpTjdmGJ+9KnUvZCZNtl7WhgCbw
+ï!jÊwŸ~×f%ÝJ>˜H	³·2ü9¬¥.VhþÅ·<C385>²«O!$iÄ<>ÝžÔ<>4\_̆J¸„šÀT>²J£‘î8Y´\ÁI³kÕýïk—tŒG(ÃAO¦#Ùš“#Ü(·LœøÍáô’0éh=[ÈRîw•Uj¸iVý2ÁÕ(ìÊBGgÔ„^L7fÍÊ«"zVµ<56>nË)ÑõË÷9½ï›<IäõúÃÍw1Š