cluster/services/idm: include soda

cluster/services/idm/default.nix

@@ -10,7 +10,7 @@
   services.idm = {
     nodes = {
       server = [ "VEGAS" ];
-      client = [ "checkmate" "VEGAS" "prophet" "thunderskin" ];
+      client = [ "checkmate" "VEGAS" "prophet" "soda" "thunderskin" ];
     };
     nixos = {
       server = ./server.nix;

cluster/services/idm/secrets/service-account-soda.age

@@ -0,0 +1,13 @@
+age-encryption.org/v1
+-> ssh-ed25519 NO562A a2L3S1TjwcnIzL1HIrpwJSOE8Eg6hpgqWsFdXM0F7D8
++1ZQR5AVTdyc3G47yBc17qCHVfHAChc8xgo5/dPiCR0
+-> ssh-ed25519 5/zT0w VGbJ45NOODZu+z0ZoKibiTcKmHn1kSl9eE2Hl+nC2jA
+U8L3eqGtIqM+QLFUKuARoQ527BGCy3Unba4bAmspnRA
+-> ssh-ed25519 ygudAg 3arSWho21Yv0hZlO1xAdtWlqY/ZS4mYzbRzYicd061A
+gvMaXTeJ4zit0WxwMhX2nBCGQF4lJ7MxM9RBOEqSqA4
+-> }Y-grease
+MmJNND/ycD5UGgt80hcIhay+fUQKmI3thTj6u6rx3KrPMxsW6tDTd/sYJYmZBy4k
+oOuaS+ZeG3pM4Qy9tAFkKh4q2gbwx1mNbysy3GeQIQ
+--- 1k5+oNWHtRqQC5kr04aCxaKglweG5Nc9aKkXB1JnQfg
+<EFBFBD>€;ÌK…dòët¶¥0ŸMf›
SËWQý{E,ZäÔ¸	᪗H›]ô-B¸îª,ˆôkaåþa§D5H¶¢.›ø
+†úéM­	\›æØ<C3A6>Öê
Ào¾°=ŒÕ®¤†dt‰x½(ÅÜf/¡ì<>;K§Û\?FLŸ

hosts/soda/system.nix

@@ -4,7 +4,7 @@
   imports = with depot.nixosModules; [
     containerBase
     fail2ban
-    sss
+    depot.inputs.agenix.nixosModules.age
     ./soda.nix
   ];
 

secrets.nix

@@ -23,6 +23,7 @@ in with hosts;
   "cluster/services/idm/secrets/service-account-checkmate.age".publicKeys = max ++ map systemKeys [ checkmate ];
   "cluster/services/idm/secrets/service-account-prophet.age".publicKeys = max ++ map systemKeys [ prophet ];
   "cluster/services/idm/secrets/service-account-VEGAS.age".publicKeys = max ++ map systemKeys [ VEGAS ];
+  "cluster/services/idm/secrets/service-account-soda.age".publicKeys = max ++ map systemKeys [ soda ];
   "cluster/services/idm/secrets/service-account-thunderskin.age".publicKeys = max ++ map systemKeys [ thunderskin ];
   "cluster/services/ipfs/cluster-secret.age".publicKeys = max ++ map systemKeys [ VEGAS prophet ];
   "cluster/services/ipfs/cluster-pinsvc-credentials.age".publicKeys = max ++ map systemKeys [ VEGAS prophet ];