cluster/services/acme-client: configure on thunderskin

cluster/services/acme-client/default.nix

@@ -1,6 +1,6 @@
 {
   services.acme-client = {
-    nodes.client = [ "checkmate" "VEGAS" "prophet" ];
+    nodes.client = [ "checkmate" "thunderskin" "VEGAS" "prophet" ];
     nixos.client = ./client.nix;
   };
 }

cluster/services/dns/pdns-api-key.age

@@ -1,16 +1,17 @@
 age-encryption.org/v1
--> ssh-ed25519 NO562A L8hpKYttTvdcgFE0dutUUaUE8PFJ6vL1pUtf9qyrG3s
-pWu4g9K6JIIRqstPodUEKrAKtPFJ6zanBK6N64jMw18
--> ssh-ed25519 5/zT0w m1YXyS/RJEtc79mY39jfierPxzP/Tj11VfJA2VjFtB8
-5VeWMX7EQ3d+z4M8Nc2uRbrhr37KbSJsKOSAAIsyVqk
--> ssh-ed25519 TCgorQ ITq5QOMfdpJNpXv7EH3FXaZvUyfCMbeEfAZwq27YAl4
-fHVxtu2wwQDylXFFUgmEwIoTGrltKeSqgYvVdIl/UVs
--> ssh-ed25519 d3WGuA 9NGFoevYhPhU6tu88PplKtBrw/wP6ESfhAmRe9nV01s
-dBqxeoIv1KGANbooK1s0Lr6c7khJN1nnfua6rFyV78E
--> ssh-ed25519 6YMlxg oPkKqmsaV95qpewGlWcoaXqTJt2feAmH6TL3CqzymxI
-NMC1SRCdbGtrd+jsCZTz8Dwaf4TFT/JoV8Twih2iDMw
--> =|z4N-grease
-03zbvyP3U5X8meDamKgLoK8UQe4nFi8e4ycdkPyacFTHk9vp+y4cI2vnEtAz
---- xEJd9gIQxtWG43mtFiuhZWPb7ajMIYNeA/8MMuFpe2s
-‰Ìóû	uä·u'T­€²Ùv<•	/_ÞßhïÙZº'ß!þ@ìkL%#Ê—Ö‘²@MFdo
9Ù‡Ò2 ú/´ù—nV[}—kÇ#úÓÛ©NंŽ>{¨Q4Ÿ|‚àv*AôíøR…nÆmi!q¸š<11>©Ü?ÈÚç÷›ò
HÏ7(È9è¤jÜ`^l6ðM-²>¹À„q[œ…_
-_G‘}3<>è)ÿõ6k‘òq¾ôš’/p„<1B>Ü2bˆæ™¤>wŸú?><3E>|ÙÂΩÂÜÛôkÆ]AnŠžüŠ†Ø뉎^W&Œœ¼c÷CURQLz÷	º» ïó˜=”~‘Fo¹
«©öî ÃÞ@(ó¹&Ó‰<C393>a,QÒ°F	ª}æP
+-> ssh-ed25519 NO562A kAHZShAehshkObd7+Akev4jpG4PvqbSLQNIrzU5yXgM
+FS15NvorHehekk2y72xY3NOFPfJ8xGoBHQp/my8ma9M
+-> ssh-ed25519 5/zT0w mrjm9Veup+j/F+Z06lTtKblJZ/x4tOZQ5kdNC4Ha0gY
+RKX1hqqTpSQNlca8vxa9WfAczF5dlXmHiFLwjn0M6Ag
+-> ssh-ed25519 TCgorQ qTeV4F1KFTD/JC32faYiq3aO96yxrMI5R7yTyFUoGUc
+ojgnRfIqlirupulnFdedLu3KPjeeaPFaY3ZUdgrs/bU
+-> ssh-ed25519 FfIUuQ G8OoqsgrjzlQnJ6YlvUYEPx8PuYORI4fKymHkT7qUjY
+stsXwTAuZ8hd58diFo3SFY+89Id99v8pU98j3qT7Zr0
+-> ssh-ed25519 d3WGuA 46a7AXZUDgPeNJXrzUWJopVH4m5aXJBVy+10ueOclwY
+95aFNwjSbMPKUd5jCkl3NwaViVAy2VOIembJHjrd130
+-> ssh-ed25519 6YMlxg rRYXK+AoitaZz3jOlw2oc+3WZ1Se3FPIsRsw1w92kDA
+T57MkjRxOdzDsokf2ZGL2Clc+7UbdHMWhBJQkeUokkI
+-> Q|Ed-grease o|Rr;1d # ;$&]T}x kQ?/B
+xQ
+--- ABWVHUGGpCJnPRMRLYTJqFlDWh7CLu6heNjhMXL0VBM
+¹‡0ýðêÊ`àÆéü%ÿúž0ª'3SvW<76>WÄ¢A}â‚š7ÞHæt¹LÇ	QVéO/,±Ä].Ùy…ã˜ý–;;ÄØrt+$
`Ö²ŒÐ<C592>"l⎊õF”´5d*¤i¢Pa»sŽÉÖQŠØô<C398>p¤ÎZ5)›ÚÇu<C387>6Ä4}"MÚ§YaÅa%Ø<>×ÖF™— „ûÙ4É©ÙàºJÝj§]@†‰7h¥h„8¡Ã•ó€êè	É‚ä÷Ù¶2b<32>_„'÷hå=ÇqãE¯ciØ£ÿ ›÷ô9BwqÐjÎ2@öÝ0«xA†Àà2Lô—gµ®?GÕ´4¯Òf€{Žä.Š}<7D>ƒB3ž÷‚ÆT)¿ÁJðFâmi<6D>ö°?åó#åZ›<5A>

secrets.nix

@@ -8,7 +8,7 @@ in with hosts;
   "cluster/services/dns/pdns-admin-oidc-secrets.age".publicKeys = max ++ map systemKeys [ VEGAS ];
   "cluster/services/dns/pdns-admin-salt.age".publicKeys = max ++ map systemKeys [ VEGAS ];
   "cluster/services/dns/pdns-admin-secret.age".publicKeys = max ++ map systemKeys [ VEGAS ];
-  "cluster/services/dns/pdns-api-key.age".publicKeys = max ++ map systemKeys [ checkmate VEGAS prophet ];
+  "cluster/services/dns/pdns-api-key.age".publicKeys = max ++ map systemKeys [ checkmate thunderskin VEGAS prophet ];
   "cluster/services/dns/pdns-db-credentials.age".publicKeys = max ++ map systemKeys [ checkmate VEGAS prophet ];
   "cluster/services/hercules-ci-multi-agent/secrets/hci-cache-config.age".publicKeys = max ++ map systemKeys [ VEGAS prophet ];
   "cluster/services/hercules-ci-multi-agent/secrets/hci-cache-credentials-prophet.age".publicKeys = max ++ map systemKeys [ prophet ];