privatevoid.net/depot
1
1
Fork 0
Code Issues 23 Pull requests 2 Projects 3 Releases Packages Wiki Activity Actions

cluster/services/acme-client: configure on thunderskin

Browse source
This commit is contained in:
Max Headroom 2023-03-22 00:05:07 +01:00
parent a0fa03ab05
commit 4a6e329391
3 changed files with 18 additions and 17 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
cluster/services/acme-client/default.nix
View file

@ -1,6 +1,6 @@
{ {
services.acme-client = { services.acme-client = {
nodes.client = [ "checkmate" "VEGAS" "prophet" ]; nodes.client = [ "checkmate" "thunderskin" "VEGAS" "prophet" ];
nixos.client = ./client.nix; nixos.client = ./client.nix;
}; };
} }

31
cluster/services/dns/pdns-api-key.age
View file

@ -1,16 +1,17 @@
age-encryption.org/v1 age-encryption.org/v1
-> ssh-ed25519 NO562A L8hpKYttTvdcgFE0dutUUaUE8PFJ6vL1pUtf9qyrG3s -> ssh-ed25519 NO562A kAHZShAehshkObd7+Akev4jpG4PvqbSLQNIrzU5yXgM
pWu4g9K6JIIRqstPodUEKrAKtPFJ6zanBK6N64jMw18 FS15NvorHehekk2y72xY3NOFPfJ8xGoBHQp/my8ma9M
-> ssh-ed25519 5/zT0w m1YXyS/RJEtc79mY39jfierPxzP/Tj11VfJA2VjFtB8 -> ssh-ed25519 5/zT0w mrjm9Veup+j/F+Z06lTtKblJZ/x4tOZQ5kdNC4Ha0gY
5VeWMX7EQ3d+z4M8Nc2uRbrhr37KbSJsKOSAAIsyVqk RKX1hqqTpSQNlca8vxa9WfAczF5dlXmHiFLwjn0M6Ag
-> ssh-ed25519 TCgorQ ITq5QOMfdpJNpXv7EH3FXaZvUyfCMbeEfAZwq27YAl4 -> ssh-ed25519 TCgorQ qTeV4F1KFTD/JC32faYiq3aO96yxrMI5R7yTyFUoGUc
fHVxtu2wwQDylXFFUgmEwIoTGrltKeSqgYvVdIl/UVs ojgnRfIqlirupulnFdedLu3KPjeeaPFaY3ZUdgrs/bU
-> ssh-ed25519 d3WGuA 9NGFoevYhPhU6tu88PplKtBrw/wP6ESfhAmRe9nV01s -> ssh-ed25519 FfIUuQ G8OoqsgrjzlQnJ6YlvUYEPx8PuYORI4fKymHkT7qUjY
dBqxeoIv1KGANbooK1s0Lr6c7khJN1nnfua6rFyV78E stsXwTAuZ8hd58diFo3SFY+89Id99v8pU98j3qT7Zr0
-> ssh-ed25519 6YMlxg oPkKqmsaV95qpewGlWcoaXqTJt2feAmH6TL3CqzymxI -> ssh-ed25519 d3WGuA 46a7AXZUDgPeNJXrzUWJopVH4m5aXJBVy+10ueOclwY
NMC1SRCdbGtrd+jsCZTz8Dwaf4TFT/JoV8Twih2iDMw 95aFNwjSbMPKUd5jCkl3NwaViVAy2VOIembJHjrd130
-> =|z4N-grease -> ssh-ed25519 6YMlxg rRYXK+AoitaZz3jOlw2oc+3WZ1Se3FPIsRsw1w92kDA
03zbvyP3U5X8meDamKgLoK8UQe4nFi8e4ycdkPyacFTHk9vp+y4cI2vnEtAz T57MkjRxOdzDsokf2ZGL2Clc+7UbdHMWhBJQkeUokkI
--- xEJd9gIQxtWG43mtFiuhZWPb7ajMIYNeA/8MMuFpe2s -> Q|Ed-grease o|Rr;1d # ;$&]T}x kQ?/B
‰Ìóû uä·u'T­€²Ùv<• /_Þßh ïÙZº'ß!þ@ìkL%# Ê—Ö‘²@MFdo 9Ù‡Ò2 ú/´ù—nV[}—kÇ#úÓÛ©NंŽ>{¨Q4Ÿ|‚àv*AôíøR…nÆmi!q¸š<11>©Ü?ÈÚç÷›ò HÏ7(È9è¤jÜ`^l6ðM-²>¹À„q[œ…_ xQ
_G‘}3<>è)ÿõ6k‘òq¾ôš’/p„<1B>Ü2bˆæ™¤>wŸú?><3E>|ÙÂΩÂÜÛôkÆ]AnŠžüŠ†Ø뉎^W&Œœ¼c÷CURQLz÷ º» ïó˜=”~‘Fo¹«©öî ÃÞ@(ó¹&Ó‰<C393>a,QÒ°F ª}æP --- ABWVHUGGpCJnPRMRLYTJqFlDWh7CLu6heNjhMXL0VBM
¹‡0ýðêÊ`àÆéü%ÿúž0ª'3SvW<76> WÄ¢A}â‚š7ÞHæt¹LÇ QVéO/,±Ä].Ùy…ã˜ý–;;ÄØrt+$`Ö²ŒÐ<C592>"l⎊õF”´5d*¤i¢Pa»sŽÉÖQŠØô<C398>p¤ÎZ5)›ÚÇu<C387>6Ä4}"MÚ§YaÅa%Ø<>×ÖF™— „ûÙ4É©ÙàºJÝj§]@†‰7h¥h„8¡Ã•ó€êè É‚ä÷Ù¶2b<32>_„'÷hå=ÇqãE¯ciØ£ÿ ›÷ô9BwqÐjÎ2@öÝ0«xA†Àà2Lô—gµ®?GÕ´4¯Òf€{Žä.Š}<7D>ƒB3ž÷‚ÆT)¿ÁJðFâmi<6D>ö°?åó#åZ›<5A>

2
secrets.nix
View file

@ -8,7 +8,7 @@ in with hosts;
"cluster/services/dns/pdns-admin-oidc-secrets.age".publicKeys = max ++ map systemKeys [ VEGAS ]; "cluster/services/dns/pdns-admin-oidc-secrets.age".publicKeys = max ++ map systemKeys [ VEGAS ];
"cluster/services/dns/pdns-admin-salt.age".publicKeys = max ++ map systemKeys [ VEGAS ]; "cluster/services/dns/pdns-admin-salt.age".publicKeys = max ++ map systemKeys [ VEGAS ];
"cluster/services/dns/pdns-admin-secret.age".publicKeys = max ++ map systemKeys [ VEGAS ]; "cluster/services/dns/pdns-admin-secret.age".publicKeys = max ++ map systemKeys [ VEGAS ];
"cluster/services/dns/pdns-api-key.age".publicKeys = max ++ map systemKeys [ checkmate VEGAS prophet ]; "cluster/services/dns/pdns-api-key.age".publicKeys = max ++ map systemKeys [ checkmate thunderskin VEGAS prophet ];
"cluster/services/dns/pdns-db-credentials.age".publicKeys = max ++ map systemKeys [ checkmate VEGAS prophet ]; "cluster/services/dns/pdns-db-credentials.age".publicKeys = max ++ map systemKeys [ checkmate VEGAS prophet ];
"cluster/services/hercules-ci-multi-agent/secrets/hci-cache-config.age".publicKeys = max ++ map systemKeys [ VEGAS prophet ]; "cluster/services/hercules-ci-multi-agent/secrets/hci-cache-config.age".publicKeys = max ++ map systemKeys [ VEGAS prophet ];
"cluster/services/hercules-ci-multi-agent/secrets/hci-cache-credentials-prophet.age".publicKeys = max ++ map systemKeys [ prophet ]; "cluster/services/hercules-ci-multi-agent/secrets/hci-cache-credentials-prophet.age".publicKeys = max ++ map systemKeys [ prophet ];