cluster/services/acme-client: add checkmate to hosts

This commit is contained in:
Max Headroom 2023-03-01 22:45:23 +01:00
parent ea12ce8b31
commit b854cfdde4
3 changed files with 17 additions and 15 deletions

View file

@ -1,6 +1,6 @@
{ {
services.acme-client = { services.acme-client = {
nodes.client = [ "VEGAS" "prophet" ]; nodes.client = [ "checkmate" "VEGAS" "prophet" ];
nixos.client = ./client.nix; nixos.client = ./client.nix;
}; };
} }

View file

@ -1,14 +1,16 @@
age-encryption.org/v1 age-encryption.org/v1
-> ssh-ed25519 NO562A 1bb8hrQQunFIVGRUkg9QrAKof4tAAV8D1KRavicuaFY -> ssh-ed25519 NO562A L8hpKYttTvdcgFE0dutUUaUE8PFJ6vL1pUtf9qyrG3s
y6X5aiD66+jBrfA9u3k3UrWQSEAd9yadLa0j2LgS9GY pWu4g9K6JIIRqstPodUEKrAKtPFJ6zanBK6N64jMw18
-> ssh-ed25519 5/zT0w Ke3Ymtxr2Kvp4piYChcTfBxNnBO4MlYPxVMNqC6z5X4 -> ssh-ed25519 5/zT0w m1YXyS/RJEtc79mY39jfierPxzP/Tj11VfJA2VjFtB8
CHzxDO2LIUHNjCr4O3hkA/9MSD6LXD3YUQVhtCKp3So 5VeWMX7EQ3d+z4M8Nc2uRbrhr37KbSJsKOSAAIsyVqk
-> ssh-ed25519 d3WGuA qPlzxEKYYe7QYBhsQuO/MI5IikwqjXVZutQL23aq2WQ -> ssh-ed25519 TCgorQ ITq5QOMfdpJNpXv7EH3FXaZvUyfCMbeEfAZwq27YAl4
esQyjMbfaWYmtg9CAcHY/WJnsPZiZPITufIQ5TkGzEc fHVxtu2wwQDylXFFUgmEwIoTGrltKeSqgYvVdIl/UVs
-> ssh-ed25519 6YMlxg YajTOEPRSF/oMzlU4D0DC7DiBL22OxLBNTUN77wMwRY -> ssh-ed25519 d3WGuA 9NGFoevYhPhU6tu88PplKtBrw/wP6ESfhAmRe9nV01s
RNZFOE7KV6UffoFUTcdnfrgz6wptvkvkZfR7H3GKs0g dBqxeoIv1KGANbooK1s0Lr6c7khJN1nnfua6rFyV78E
-> hI!f;r}-grease |@) -> ssh-ed25519 6YMlxg oPkKqmsaV95qpewGlWcoaXqTJt2feAmH6TL3CqzymxI
PVxV1yo85W0ceDE3nuYqdfYoRIQkwyp1VK1WIkxQjBMIs5kIx0Fw+WjdHT6wv/HH NMC1SRCdbGtrd+jsCZTz8Dwaf4TFT/JoV8Twih2iDMw
Xh+qLqlgBfehoy28KZ52gsNRlDHN -> =|z4N-grease
--- +rOxrlTfSf4+mvHe8WZB1+xT0Jo/YxzEbEbIyOpLOS0 03zbvyP3U5X8meDamKgLoK8UQe4nFi8e4ycdkPyacFTHk9vp+y4cI2vnEtAz
4´éì ·†É. ß„þÞÄp—ûZ¨¶ïO)üB<C3BC>~¬ac£ˆTv†•Ú{_¥…UÛÜÕÄÖ<C384>Ä8=U¶P¹î0¾a"A¾TV…<56>„Ür1Ôèn¦<6E>NÜé{ 7¦À¥HòdþÏîu×çïðÚHgæe{{0d²ëMXyÐóÁ™^<5E>4RWoÌm¾çzßç-)Jö9!7.ÏoуÒŠ®9ôe+a´&+‰‡]z}κ4R×çš‚)ñÕŠ[<5B>ž4¯ûAÖÀ ±Oã3D/¯X¿Ä@7ýÁTRÀÒµç6Âã€]/ ß½_Hàj‰w°ØØK(ý<>ᓦ9<C2A6>npŽ;HõhbÞÚ2€Ç<1F>Yw;W æÄ0<C384>I6¿¾ --- xEJd9gIQxtWG43mtFiuhZWPb7ajMIYNeA/8MMuFpe2s
‰Ìóû uä·u'T­€²Ùv<• /_Þßh ïÙZº'ß!þ@ìkL%# Ê—Ö‘²@MFdo 9Ù‡Ò2 ú/´ù—nV[}—kÇ#úÓÛ©Nऎ>{¨Q4Ÿ|àv*AôíøR…nÆmi!q¸š<11>©Ü?ÈÚç÷›ò HÏ7(È9è¤jÜ`^l6ðM-²>¹À„q[œ…_
_G}3<>è)ÿõ6kòq¾ôš/p„<1B>Ü2bˆæ™¤>wŸú?><3E>|ÙÂΩÂÜÛôkÆ]AnŠžüŠ†Ø뉎^W&Œœ¼c÷CURQLz÷ º» ïó˜=”~F«©öî ÃÞ@(ó¹&Ó‰<C393>a,QÒ°F ª}æP

View file

@ -7,7 +7,7 @@ in with hosts;
"cluster/services/dns/pdns-admin-oidc-secrets.age".publicKeys = max ++ map systemKeys [ VEGAS ]; "cluster/services/dns/pdns-admin-oidc-secrets.age".publicKeys = max ++ map systemKeys [ VEGAS ];
"cluster/services/dns/pdns-admin-salt.age".publicKeys = max ++ map systemKeys [ VEGAS ]; "cluster/services/dns/pdns-admin-salt.age".publicKeys = max ++ map systemKeys [ VEGAS ];
"cluster/services/dns/pdns-admin-secret.age".publicKeys = max ++ map systemKeys [ VEGAS ]; "cluster/services/dns/pdns-admin-secret.age".publicKeys = max ++ map systemKeys [ VEGAS ];
"cluster/services/dns/pdns-api-key.age".publicKeys = max ++ map systemKeys [ VEGAS prophet ]; "cluster/services/dns/pdns-api-key.age".publicKeys = max ++ map systemKeys [ checkmate VEGAS prophet ];
"cluster/services/dns/pdns-db-credentials.age".publicKeys = max ++ map systemKeys [ VEGAS prophet ]; "cluster/services/dns/pdns-db-credentials.age".publicKeys = max ++ map systemKeys [ VEGAS prophet ];
"cluster/services/hercules-ci-multi-agent/secrets/hci-cache-config.age".publicKeys = max ++ map systemKeys [ VEGAS prophet ]; "cluster/services/hercules-ci-multi-agent/secrets/hci-cache-config.age".publicKeys = max ++ map systemKeys [ VEGAS prophet ];
"cluster/services/hercules-ci-multi-agent/secrets/hci-cache-credentials-prophet.age".publicKeys = max ++ map systemKeys [ prophet ]; "cluster/services/hercules-ci-multi-agent/secrets/hci-cache-credentials-prophet.age".publicKeys = max ++ map systemKeys [ prophet ];