From a02a9710e49659c8c930d6aa1d4d6874e6a373b2 Mon Sep 17 00:00:00 2001 From: Max Date: Sun, 10 Nov 2024 21:55:32 +0100 Subject: [PATCH 1/3] meta: new url for nix-super --- flake.nix | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/flake.nix b/flake.nix index 419a526..da52e8e 100644 --- a/flake.nix +++ b/flake.nix @@ -30,9 +30,10 @@ nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable-small"; nix-super = { - url = "gitlab:max/nix-super?host=git.privatevoid.net"; + url = "https://forge.privatevoid.net/max/nix-super/archive/master.tar.gz"; inputs = { nixpkgs-regression.follows = "blank"; + nixpkgs-23-11.follows = "blank"; }; }; -- 2.47.0 From f2ad4403fa7cff066ea82b7da09b6b25dcfded46 Mon Sep 17 00:00:00 2001 From: Max Date: Mon, 11 Nov 2024 01:45:37 +0100 Subject: [PATCH 2/3] flake.lock: Update MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Flake lock file updates: • Updated input 'nix-super': 'gitlab:max/nix-super/5ecd820c18b1aaa3c8ee257a7a9a2624c4107031?narHash=sha256-JctHGT1oa4pet4PgUKRM7pf0w%2BqGe0a/ahVij8bee3o%3D' (2024-04-22) → 'https://forge.privatevoid.net/api/v1/repos/max/nix-super/archive/1eb19dd804a83d99c497118af8ab781eee569c65.tar.gz?narHash=sha256-HSNUAfhtG/A2hnrzPMT3asZZ2Wb3dAmedOr1VzptOCg%3D' (2024-11-10) • Updated input 'nix-super/flake-compat': 'github:edolstra/flake-compat/35bb57c0c8d8b62bbfd284272c928ceb64ddbde9?narHash=sha256-4gtG9iQuiKITOjNQQeQIpoIB6b16fm%2B504Ch3sNKLd8%3D' (2023-01-17) → 'github:edolstra/flake-compat/0f9255e01c2351cc7d116c072cb317785dd33b33?narHash=sha256-kvjfFW7WAETZlt09AgDn1MrtKzP7t90Vf7vypd3OL1U%3D' (2023-10-04) • Updated input 'nix-super/flake-parts': 'github:hercules-ci/flake-parts/9126214d0a59633752a136528f5f3b9aa8565b7d?narHash=sha256-sB4SWl2lX95bExY2gMFG5HIzvva5AVMJd4Igm%2BGpZNw%3D' (2024-04-01) → 'github:hercules-ci/flake-parts/9227223f6d922fee3c7b190b2cc238a99527bbb7?narHash=sha256-pQMhCCHyQGRzdfAkdJ4cIWiw%2BJNuWsTX7f0ZYSyz0VY%3D' (2024-07-03) • Added input 'nix-super/git-hooks-nix': 'github:cachix/git-hooks.nix/f451c19376071a90d8c58ab1a953c6e9840527fd?narHash=sha256-6FPUl7HVtvRHCCBQne7Ylp4p%2BdpP3P/OYuzjztZ4s70%3D' (2024-07-15) • Added input 'nix-super/git-hooks-nix/flake-compat': follows 'nix-super' • Added input 'nix-super/git-hooks-nix/gitignore': follows 'nix-super' • Added input 'nix-super/git-hooks-nix/nixpkgs': follows 'nix-super/nixpkgs' • Added input 'nix-super/git-hooks-nix/nixpkgs-stable': follows 'nix-super/nixpkgs' • Updated input 'nix-super/libgit2': 'github:libgit2/libgit2/45fd9ed7ae1a9b74b957ef4f337bc3c8b3df01b5?narHash=sha256-oX4Z3S9WtJlwvj0uH9HlYcWv%2Bx1hqp8mhXl7HsLu2f0%3D' (2023-10-18) → 'github:libgit2/libgit2/36f7e21ad757a3dacc58cf7944329da6bc1d6e96?narHash=sha256-J2rCxTecyLbbDdsyBWn9w7r3pbKRMkI9E7RvRgAqBdY%3D' (2024-05-16) • Updated input 'nix-super/nixpkgs': 'github:NixOS/nixpkgs/b550fe4b4776908ac2a861124307045f8e717c8e?narHash=sha256-7kkJQd4rZ%2BvFrzWu8sTRtta5D1kBG0LSRYAfhtmMlSo%3D' (2024-02-28) → 'github:NixOS/nixpkgs/c3d4ac725177c030b1e289015989da2ad9d56af0?narHash=sha256-sqLwJcHYeWLOeP/XoLwAtYjr01TISlkOfz%2BNG82pbdg%3D' (2024-08-15) • Added input 'nix-super/nixpkgs-23-11': follows 'blank' • Removed input 'nix-super/pre-commit-hooks' • Removed input 'nix-super/pre-commit-hooks/flake-compat' • Removed input 'nix-super/pre-commit-hooks/flake-utils' • Removed input 'nix-super/pre-commit-hooks/gitignore' • Removed input 'nix-super/pre-commit-hooks/nixpkgs' • Removed input 'nix-super/pre-commit-hooks/nixpkgs-stable' --- flake.lock | 116 +++++++++++++++++++++++------------------------------ 1 file changed, 50 insertions(+), 66 deletions(-) diff --git a/flake.lock b/flake.lock index 3959b01..54ae55f 100644 --- a/flake.lock +++ b/flake.lock @@ -173,11 +173,11 @@ "flake-compat_2": { "flake": false, "locked": { - "lastModified": 1673956053, - "narHash": "sha256-4gtG9iQuiKITOjNQQeQIpoIB6b16fm+504Ch3sNKLd8=", + "lastModified": 1696426674, + "narHash": "sha256-kvjfFW7WAETZlt09AgDn1MrtKzP7t90Vf7vypd3OL1U=", "owner": "edolstra", "repo": "flake-compat", - "rev": "35bb57c0c8d8b62bbfd284272c928ceb64ddbde9", + "rev": "0f9255e01c2351cc7d116c072cb317785dd33b33", "type": "github" }, "original": { @@ -235,11 +235,11 @@ ] }, "locked": { - "lastModified": 1712014858, - "narHash": "sha256-sB4SWl2lX95bExY2gMFG5HIzvva5AVMJd4Igm+GpZNw=", + "lastModified": 1719994518, + "narHash": "sha256-pQMhCCHyQGRzdfAkdJ4cIWiw+JNuWsTX7f0ZYSyz0VY=", "owner": "hercules-ci", "repo": "flake-parts", - "rev": "9126214d0a59633752a136528f5f3b9aa8565b7d", + "rev": "9227223f6d922fee3c7b190b2cc238a99527bbb7", "type": "github" }, "original": { @@ -248,18 +248,34 @@ "type": "github" } }, - "flake-utils": { + "git-hooks-nix": { + "inputs": { + "flake-compat": [ + "nix-super" + ], + "gitignore": [ + "nix-super" + ], + "nixpkgs": [ + "nix-super", + "nixpkgs" + ], + "nixpkgs-stable": [ + "nix-super", + "nixpkgs" + ] + }, "locked": { - "lastModified": 1667395993, - "narHash": "sha256-nuEHfE/LcWyuSWnS8t12N1wc105Qtau+/OdUAjtQ0rA=", - "owner": "numtide", - "repo": "flake-utils", - "rev": "5aed5285a952e0b949eb3ba02c12fa4fcfef535f", + "lastModified": 1721042469, + "narHash": "sha256-6FPUl7HVtvRHCCBQne7Ylp4p+dpP3P/OYuzjztZ4s70=", + "owner": "cachix", + "repo": "git-hooks.nix", + "rev": "f451c19376071a90d8c58ab1a953c6e9840527fd", "type": "github" }, "original": { - "owner": "numtide", - "repo": "flake-utils", + "owner": "cachix", + "repo": "git-hooks.nix", "type": "github" } }, @@ -369,15 +385,16 @@ "libgit2": { "flake": false, "locked": { - "lastModified": 1697646580, - "narHash": "sha256-oX4Z3S9WtJlwvj0uH9HlYcWv+x1hqp8mhXl7HsLu2f0=", + "lastModified": 1715853528, + "narHash": "sha256-J2rCxTecyLbbDdsyBWn9w7r3pbKRMkI9E7RvRgAqBdY=", "owner": "libgit2", "repo": "libgit2", - "rev": "45fd9ed7ae1a9b74b957ef4f337bc3c8b3df01b5", + "rev": "36f7e21ad757a3dacc58cf7944329da6bc1d6e96", "type": "github" }, "original": { "owner": "libgit2", + "ref": "v1.8.1", "repo": "libgit2", "type": "github" } @@ -472,27 +489,26 @@ "inputs": { "flake-compat": "flake-compat_2", "flake-parts": "flake-parts_3", + "git-hooks-nix": "git-hooks-nix", "libgit2": "libgit2", "nixpkgs": "nixpkgs_3", - "nixpkgs-regression": [ + "nixpkgs-23-11": [ "blank" ], - "pre-commit-hooks": "pre-commit-hooks" + "nixpkgs-regression": [ + "blank" + ] }, "locked": { - "host": "git.privatevoid.net", - "lastModified": 1713821351, - "narHash": "sha256-JctHGT1oa4pet4PgUKRM7pf0w+qGe0a/ahVij8bee3o=", - "owner": "max", - "repo": "nix-super", - "rev": "5ecd820c18b1aaa3c8ee257a7a9a2624c4107031", - "type": "gitlab" + "lastModified": 1731271232, + "narHash": "sha256-HSNUAfhtG/A2hnrzPMT3asZZ2Wb3dAmedOr1VzptOCg=", + "rev": "1eb19dd804a83d99c497118af8ab781eee569c65", + "type": "tarball", + "url": "https://forge.privatevoid.net/api/v1/repos/max/nix-super/archive/1eb19dd804a83d99c497118af8ab781eee569c65.tar.gz" }, "original": { - "host": "git.privatevoid.net", - "owner": "max", - "repo": "nix-super", - "type": "gitlab" + "type": "tarball", + "url": "https://forge.privatevoid.net/max/nix-super/archive/master.tar.gz" } }, "nixpkgs": { @@ -529,16 +545,16 @@ }, "nixpkgs_3": { "locked": { - "lastModified": 1709083642, - "narHash": "sha256-7kkJQd4rZ+vFrzWu8sTRtta5D1kBG0LSRYAfhtmMlSo=", + "lastModified": 1723688146, + "narHash": "sha256-sqLwJcHYeWLOeP/XoLwAtYjr01TISlkOfz+NG82pbdg=", "owner": "NixOS", "repo": "nixpkgs", - "rev": "b550fe4b4776908ac2a861124307045f8e717c8e", + "rev": "c3d4ac725177c030b1e289015989da2ad9d56af0", "type": "github" }, "original": { "owner": "NixOS", - "ref": "release-23.11", + "ref": "nixos-24.05", "repo": "nixpkgs", "type": "github" } @@ -559,38 +575,6 @@ "type": "github" } }, - "pre-commit-hooks": { - "inputs": { - "flake-compat": [ - "nix-super" - ], - "flake-utils": "flake-utils", - "gitignore": [ - "nix-super" - ], - "nixpkgs": [ - "nix-super", - "nixpkgs" - ], - "nixpkgs-stable": [ - "nix-super", - "nixpkgs" - ] - }, - "locked": { - "lastModified": 1712897695, - "narHash": "sha256-nMirxrGteNAl9sWiOhoN5tIHyjBbVi5e2tgZUgZlK3Y=", - "owner": "cachix", - "repo": "pre-commit-hooks.nix", - "rev": "40e6053ecb65fcbf12863338a6dcefb3f55f1bf8", - "type": "github" - }, - "original": { - "owner": "cachix", - "repo": "pre-commit-hooks.nix", - "type": "github" - } - }, "repin-flake-utils": { "inputs": { "systems": [ -- 2.47.0 From 1c58f26fb14f77ec764c6c29aa05027cadd24ee7 Mon Sep 17 00:00:00 2001 From: Max Date: Sun, 10 Nov 2024 21:59:30 +0100 Subject: [PATCH 3/3] cluster/services/gitlab: drop --- cluster/services/gitlab/default.nix | 10 --- cluster/services/gitlab/host.nix | 94 ----------------------- secrets.nix | 7 -- secrets/gitlab-db-credentials.age | Bin 758 -> 0 bytes secrets/gitlab-initial-root-password.age | 12 --- secrets/gitlab-openid-secret.age | 11 --- secrets/gitlab-secret-db.age | Bin 609 -> 0 bytes secrets/gitlab-secret-jws.age | Bin 3837 -> 0 bytes secrets/gitlab-secret-otp.age | 14 ---- secrets/gitlab-secret-secret.age | Bin 666 -> 0 bytes 10 files changed, 148 deletions(-) delete mode 100644 cluster/services/gitlab/default.nix delete mode 100644 cluster/services/gitlab/host.nix delete mode 100644 secrets/gitlab-db-credentials.age delete mode 100644 secrets/gitlab-initial-root-password.age delete mode 100644 secrets/gitlab-openid-secret.age delete mode 100644 secrets/gitlab-secret-db.age delete mode 100644 secrets/gitlab-secret-jws.age delete mode 100644 secrets/gitlab-secret-otp.age delete mode 100644 secrets/gitlab-secret-secret.age diff --git a/cluster/services/gitlab/default.nix b/cluster/services/gitlab/default.nix deleted file mode 100644 index fd1c416..0000000 --- a/cluster/services/gitlab/default.nix +++ /dev/null @@ -1,10 +0,0 @@ -{ depot, ... }: - -{ - services.gitlab = { - nodes.host = [ "VEGAS" ]; - nixos.host = ./host.nix; - }; - - dns.records.git.target = [ depot.hours.VEGAS.interfaces.primary.addrPublic ]; -} diff --git a/cluster/services/gitlab/host.nix b/cluster/services/gitlab/host.nix deleted file mode 100644 index 85f548c..0000000 --- a/cluster/services/gitlab/host.nix +++ /dev/null @@ -1,94 +0,0 @@ -{ cluster, config, lib, depot, ... }: - -let - inherit (depot.lib.meta) domain adminEmail; - - patroni = cluster.config.links.patroni-pg-access; - - mkSecret = name: { - owner = "gitlab"; - group = "gitlab"; - mode = "0400"; - file = ../../../secrets/${name}.age; - }; - - secrets = lib.mapAttrs (_: v: v.path) config.age.secrets; - - cfg = config.services.gitlab; -in - -{ - age.secrets = lib.flip lib.genAttrs mkSecret [ - "gitlab-db-credentials" - "gitlab-initial-root-password" - "gitlab-openid-secret" - "gitlab-secret-db" - "gitlab-secret-jws" - "gitlab-secret-otp" - "gitlab-secret-secret" - ]; - - services.gitlab = { - enable = true; - https = true; - host = "git.${domain}"; - port = 443; - - databaseCreateLocally = false; - databaseHost = patroni.ipv4; - extraDatabaseConfig = { inherit (patroni) port; }; - databaseUsername = "gitlab"; - databasePasswordFile = secrets.gitlab-db-credentials; - - initialRootEmail = adminEmail; - - statePath = "/srv/storage/private/gitlab/state"; - - smtp = { - enable = true; - inherit domain; - }; - - initialRootPasswordFile = secrets.gitlab-initial-root-password; - - secrets = with secrets; { - dbFile = gitlab-secret-db; - jwsFile = gitlab-secret-jws; - otpFile = gitlab-secret-otp; - secretFile = gitlab-secret-secret; - }; - - extraConfig = { - omniauth = { - enabled = true; - auto_sign_in_with_provider = "openid_connect"; - allow_single_sign_on = ["openid_connect"]; - block_auto_created_users = false; - providers = [ - - { - name = "openid_connect"; - label = "Private Void Account"; - args = { - name = "openid_connect"; - scope = ["openid" "profile"]; - response_type = "code"; - issuer = "https://login.${domain}/auth/realms/master"; - discovery = true; - client_auth_method = "query"; - uid_field = "preferred_username"; - client_options = { - identifier = "net.privatevoid.git2"; - secret = { _secret = secrets.gitlab-openid-secret; }; - redirect_uri = "https://${cfg.host}/users/auth/openid_connect/callback"; - }; - }; - } - - ]; - }; - }; - }; - - services.nginx.virtualHosts."${cfg.host}" = depot.lib.nginx.vhosts.proxy "http://unix:/run/gitlab/gitlab-workhorse.socket"; -} diff --git a/secrets.nix b/secrets.nix index 3e1c920..a2225f1 100644 --- a/secrets.nix +++ b/secrets.nix @@ -16,13 +16,6 @@ in with hosts; "cluster/services/storage/secrets/garage-rpc-secret.age".publicKeys = max ++ map systemKeys [ grail VEGAS prophet ]; "cluster/services/storage/secrets/storage-box-credentials.age".publicKeys = max ++ map systemKeys [ grail VEGAS prophet ]; "secrets/dovecot-ldap-token.age".publicKeys = max ++ map systemKeys [ VEGAS ]; - "secrets/gitlab-db-credentials.age".publicKeys = max ++ map systemKeys [ VEGAS ]; - "secrets/gitlab-initial-root-password.age".publicKeys = max ++ map systemKeys [ VEGAS ]; - "secrets/gitlab-openid-secret.age".publicKeys = max ++ map systemKeys [ VEGAS ]; - "secrets/gitlab-secret-db.age".publicKeys = max ++ map systemKeys [ VEGAS ]; - "secrets/gitlab-secret-jws.age".publicKeys = max ++ map systemKeys [ VEGAS ]; - "secrets/gitlab-secret-otp.age".publicKeys = max ++ map systemKeys [ VEGAS ]; - "secrets/gitlab-secret-secret.age".publicKeys = max ++ map systemKeys [ VEGAS ]; "secrets/hyprspace-key-checkmate.age".publicKeys = max ++ map systemKeys [ checkmate ]; "secrets/hyprspace-key-grail.age".publicKeys = max ++ map systemKeys [ grail ]; "secrets/hyprspace-key-thunderskin.age".publicKeys = max ++ map systemKeys [ thunderskin ]; diff --git a/secrets/gitlab-db-credentials.age b/secrets/gitlab-db-credentials.age deleted file mode 100644 index 485ac1590fe9326996117852f8f874fd576ec141..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 758 zcmZ9`-AfYz008hr%2=6wftdzF>!Id#x0}1|iiF#CTepw9-P|>AAbGdV+ji~lyxVTx zg3zKKqKv)>DzNB7At{0&v4`p*E25Gtl2ZDxkfIPD(t_ygwZGu^*aPZ2tX_xi?hx_+H9J^}LPay_ z^yDxfBqjA2S?n|-B&QfiRx9w7u2A{B>`lh#PK39G8QO$n&OBo!2&=|G2pZj$z)F5T z62lcc@!4>9PeOV$MDsYiJW5{%pq7p&c zg8C6g{`>HVCW!@uF;{^1Q$k4l0P+MFI0$%0t|+`9lir9GxvXTwdJlm$>D~&<&T9L`uyhha}T!kyq<2T-S=zBr!()a z&KAE{ZeMtB>S*r7%Xt5&nQ!sGe|}(LHGcf!wy#9j@axNIU`%X`4BWoB{!#H`*{csV zW#0z1=A)J6jT7hl-rSs9v~`3JR$nT|Mjkn*W_#MCp?>_z;?MbBU&Y-E(`CGEUB|(( SJ+&7;{usQsfBET?qkjM(YaNsT diff --git a/secrets/gitlab-initial-root-password.age b/secrets/gitlab-initial-root-password.age deleted file mode 100644 index 1f703ff..0000000 --- a/secrets/gitlab-initial-root-password.age +++ /dev/null @@ -1,12 +0,0 @@ -age-encryption.org/v1 --> ssh-ed25519 NO562A XRrOSniXZk7nvufR3liJ3ocjX257eenhQUYZdlYCpl4 -ctZGdEgc9SgWka/3R/2WW4G9m1DHIk7HLKaBNyUeHtE --> ssh-ed25519 5/zT0w k3z9vLsjCPABV2kTRMC3xiriW+4BwSdvnk02Xtoi3zk -w43L1pm8VvwxVp6k8NJA73afZtPGfD8eCb2koa2goZQ --> ssh-ed25519 d3WGuA Bi1l2WS3kL5Y5NoVh7jAja3BG9LXxem801SSR76j52s -fKhRIb+Ug3sW4JI2rczNnh3Frx/EEnbQfhTUGdwLSo8 --> AOy-grease dju$ xL|5Hh q(A -h0bIKBg8yQBMqNR8M9DlA/wZWWFB+sdo4ApLXvTT19Moz3E5Vly8N2XKHrV3ggCE -Vn2a3snrXDrWxqQgfQEfJo7FnydItRcgO7ZDOuNAlnooyk0 ---- 9bMYjHMQsJt4fqnmE2ezRzN4AoKIrlRKAqh8pYRw8SQ -ܙj>r|>Q7pdh 357{Z9L $DU$0Y٠3BM@oU_dDݶ5jq/j`6ZiA&Qʡ*Օ:R%+ ɡ \ No newline at end of file diff --git a/secrets/gitlab-openid-secret.age b/secrets/gitlab-openid-secret.age deleted file mode 100644 index 3a57392..0000000 --- a/secrets/gitlab-openid-secret.age +++ /dev/null @@ -1,11 +0,0 @@ -age-encryption.org/v1 --> ssh-ed25519 NO562A ZCflrN3Tm5CiGr6ajyHWUBB/tQqvBuZkwTrJDrd/aV0 -ItnkxqiZTCT77SDnG0JgzaQlDL3LZ96V+kzjxjAJx5s --> ssh-ed25519 5/zT0w WoKnbgmzpR+HuLdXYCOkPfScle7g7U+NGA/YAmyfIhk -pNfp+gOVyTfnXpVDRXuk16RyjlWjDILrO7Gibh7nRmU --> ssh-ed25519 d3WGuA L5xjtPNva83jZWsu2bCbcgaDNlou5BFVMsFkR8+L+2Q -4+UtIsyOgY0NAuHtdg4lBJwMyZWquRsmRNeQ+YXqeA0 --> hD-grease q%QV%; &/ -jl4ZKGU+SBSR0xhJN0yz7sV2uW/+Yhw ---- 1LIvBjAzD1lUotPXuI4cPHSfUsMFbEaGjE/t+KnQcW4 -AWee c[ 3myΈ6 g{7rd_7WP':u N \ No newline at end of file diff --git a/secrets/gitlab-secret-db.age b/secrets/gitlab-secret-db.age deleted file mode 100644 index 347fe7f2c707b92eaddbfc6f1cdad81c0e3a4583..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 609 zcmZ9_OKZ~r003YQW7;quD8fLHpu>YDOVT#UqA*C4Y-^GwZPV@%aN0JnwrR3F+N3$` zAbRrPe1Jz~-~$oyAhP*HWYde@L=U3EU_%iR_2Oe7UibZhuVQGBX4ky#Y*2UXLB})T z4hlfSpzoWIrlv3qB|%Zb@Dv4-^=YidOH*i3)7!3>a?=!19T5vIHQnmCp^_rtVwGZ5 zlxBf6!edfXpekjykzzwX?L@^=mY_H$84H#QM`b>8;yB+PbvADp9G8#~Ea%6&u$WOP zE1kwitKo<)pq`#2u#g|AX%#u;hIP6m^W#Vv;D#_1$sl9FkVo2CxQIwYN&1*2>R5%>V-gH)uo za)2{!$b{pW4TJGrd~C8-DHce@4g-_Tjd!|rI2X!_?qN-$`G4zZ$05VhD!vACfTyUE znJEaZEEZ-7Jz^XgE|PhM5fyd9$N>-pfqug-O4)k8@WB-ps}GTd2O5^Q)JmgT}>I zdlzO;td;gHow<5fnCbj#j4eN~1_v5z2LSe%{p9!Rg?r|sg_U(`>E}Z`!R@(p=p6rW zc>QML?fJha-*KO}toXAVh9C%HNNF@Lcu8ntXJt5WacFXKWN1idS4?(6cvw(vK}T|OH$g*dIW|Z$WKK0= z3N0-yAUIQWR5WOKQ)^>EM=w-wac?ngS5Z`WNo`YNS!i}bXhlqKWI0ktVQxul3IS`Z zTlcu_WE^PH3J|Q$Lyb>aosWVw_%uAQ4~s4h5mC$&svD=>lN)9M8Q_CU6eU(H%4b@BJGYVQJYY$J)zIh8KA%VWKtCWcZq| zzs$cAB@yc0d_Or4aR)LK+zZ)`PW@G*Ju9*e7xmI=h5O2*L@N z#l?1?8$G4k#meWc{`I7u)(4HKZ>?|vrgem23~rGrusgQ!Mps+H3FC8mN)OLjD$(>b zIieR@5+BQUOQnu!;$D+PISLVbz(Z35Znf&PqRdRmJRWc>Glu*s3B z&7!WNK`P^wn^bmLP68fbRT8|gj-PNMjFh1|KuDOg2*^pV)#o&OUY6Y?GJRks3k|0Q zfIxc=)OvKYOArH&IWrNx+HRe)uRpPep+lR#H|X81DYRV zs{wJ$-aS>Ghc5{V)QkfpTeHcC4b5Ph{dN~iWIhx%Ln~>{h2wXZV1(KpUM%%ezlsM| z+P5TAW|Rm(k|$@Ij4f9``bi@`IWo}s^Q$SEg^55vDZ**!UxWeyAUdS+x7;|cEiuu5 zzZdS`UhVPRZLEH}2@cwc=1kUC)(tSX)_|9L55;i}WsJ^_S@TJqoFgQu1mdi^OnzDZ zpHI*PsMQ4$S%gHsROkU$ndp5qTAMW%q3kfCJJWx_?%G$OO|< zb$N(X$*7x%&UZ^Qm~R5ej0~)nUZ>R*BV9Db#d$x3-hc0Gc{eW%Ss46xNj@W&h4!f?=OJjMNMS1AX3Lv7{)0GYT5|6iUVKo@6f=$Ar*qsIlXd4^+tnp z!m{=S(wgCf2KNTN(U#aM0Uh7MPO*DOyrSUBHrr^F{`O{mvitT$bA=@$YtB{m#+&8#|lU3KmN7e z)sx8gFF#+8h{2qNN}WH=tD&e7Ga>I}yZ*(_18H;Tt0&PG6{i7de1xcBl-)LA1b)eS z5W@rnxE)#z+Fd+{(h`tN6+ZoOX#9HFEi1)s`;~7d>bk5ZN$>nv$r1PLnp{$HAYNiC z^Nxc0)cCRiovML1P;T1XB%}nv+7Coa(JK>qU;d!-wy>1fs5P&8Y>~=CoIixFZ`-ha z>!qk7O2yg|H}5~42;MDBsEQTG{I?rdNV9gE3R|cG2XAn70vxj*tbcw~>~ z4J$6kgS}rdXE3Mz$)x=Uss=u1HurtxX9b&)XkjbwBvGph>h2nUuKA5mwu0FFLzEu5 z4Gy6y{jvy5q%Hy1=!~`<%i$_&d8<-njEI2cY0W*zWXakSLbF1%j8mUL$T$L=>lzf3 zm~CboQqs5_`L*_jkQ;AL1r@c||5g1In*qb$IlC@fHT9a&UA%{!Oz({%&(&C%OW6ILXYMY8q7cw+XX84#|?4v!N!NLn@a*QZx5 zWM#_x)hOFg1!Grpz>cEDXrVMhoOuY~SYlqTGG~*w_VnaKYa^GSRdfRAkE58gIh#1*JHQCnrI` z>E67MMIuNeMIoVB)B3!K$bcJ;!m1kMXIl8kZgH+&O!xHv2=^)_ZH+&J?(4Gxo z!%c;`9ztaHxkKPivluE8s2gw^-c>j9h-v|jR?+&JeLg@9@42D01U^CewzMK2Mn#Gn zx9!TCKkp#`AeD{ojhccQ@-Y4XohN|ofhmvTI>8snn$nd%ii|!l<-V>^>TFU#WmLEa zv_9up)i9Nq=Z2M=j-i&xBGt8-ste~cD55rfYbrd>GoS4Mf_)e<#p|I; zg|4jq{bySSfP2t13}W8Z%&U3!PVK8n%X8+N39NjN3MDd&G6W|~CF_weOyyBVJ3$>= z7Q4s_t*4;yS5+0!dq;njgBT2s0f6DJI8s#(fQRTadAjnrvQg(t&uEbh0Dk;#j2@M- zMyj=B!zB2jXQxh=arlLp2!x-m`G!u9mHp(}vtH;=6yEFfVMqASf~|ETJ*S`BLGlsY zWZhloh#D}CHv&|h70oRvm&nrRW#(iVLz`-0g1WWd{Ormn4fk+sFR}Ufx)s| zwg_hOwkvB()BJL$X@7UQL{8Bz*;b^yfags=^D1CanAEtE-EN4p%JJ;sl-bX>z1e<% zbwySixy$hrqBFKv(5)uT4We+wN`{S;ZD>ZW)jou;nQ$-1xeW=I#;cQE&#lJju}*TO z6|h!#V{f-k+SeaBNmCjvtwnZWu7zKv(%oK{m%TJq*}KSi{P^b{Ut?7>oGyjVZVHDO zym@l8&sWi;k=&oH0!2Kt$3xpnBRAv4|%g+Fz38$8oJWNgG>q zbX_9nfi;D^7h9Ij1QMe&Y0M_f0_`auil_;)9=#S-7Sz8>rokL<1ROnZI(!x_zwK;7 zbGUR^jKS-aAyj}p2yXw5-3jDZua19$Q`)fD^iHWN9e(B#THywJE){9AgpdxHvXC0D z|GvWu2x)NiNdM0XD@)VABZ7l4T=g`9E9eo7SahJ4Kz4w5u0 z&oyH?ncXPFs+-4REuzf*}T^{wLt7he!0F-boj|Lo=acyG3@}c diff --git a/secrets/gitlab-secret-otp.age b/secrets/gitlab-secret-otp.age deleted file mode 100644 index 28e6c7f..0000000 --- a/secrets/gitlab-secret-otp.age +++ /dev/null @@ -1,14 +0,0 @@ -age-encryption.org/v1 --> ssh-ed25519 NO562A su6ATd6CDJ/TD/nAPw1K4ZmELBDdNLZI63DsZl0zCF0 -J+2ZXXZArtjDDLIaQL6HaEdawHo8tonMdzHf45IQMO4 --> ssh-ed25519 5/zT0w wdKMnoA5/huvtT/jyj1Aixf9nKtkzcyPSs1yoUpxoAk -yGiW4Zg0h4NGkdU0BZiWzC+72CJZK6pJdrSBuZCVGAE --> ssh-ed25519 d3WGuA p4QVeohmXdTo8v0Wh2pkEoyqMhZhmdrblBpq39ENnVk -7TybdsMNokMu+2q5ESnvdcNwAeWTl/5XGZltzJ7etjI --> Q-grease KJL\,Pw& c!aOPX -C6DVdLd90RXPgjf22U5Y8OsW9O9rkfE3kY0LGQhmmjCSZ7yHde4bhOAVNeNronxE -xFy8GtD+ZllI4NPUSyl3Y/90//H2fVUb32WA3Ga5WJmksrGXzg ---- yWDk0jbHXLxwE9jWTT85ORZy0Pw20jaRVihmkKfGnKo -@# -Q)F:G # gL-k{Td+8܃/-a\O*!^Ry@Z/o~I -[PO've^,?oM]1WFJęB&y yVv_ %Ǐ' \ No newline at end of file diff --git a/secrets/gitlab-secret-secret.age b/secrets/gitlab-secret-secret.age deleted file mode 100644 index 0b8f89ee44b2f695098fe4d802d99a4483c47c00..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 666 zcmZ9_O>5I&007_}bZnJ5^&ogM9>xwOOVT#!3iG3FnzT)mr7>-mu}juBY11}M@+RrW zb{bv;6)d}mAfkBCTgAhe-eh_bRK#6GMZJh~1JQ#xb>el;A9%E?j_R!n>^Z(^x29}Z z#o9y&J%e~&4b?$}B#8tf%#u_ji4^&4ouvqo6Qw$@0r@^24tb2{@?0TXcg+3rz6WQGT&6& zQ7#Bkr7ZBtZrqZ(6pj0;$%>+3!#HI$GaAFBD!{2HXbQ{o(|M?vR+CVZ?J#s9;g)8p zv=*|QEJ?D{JnS;AB04y9L!W=7Bs}N>o_qr zG?C~p+?wQGKiM4F`>@kI7o`bw>GY*-2HeyhZdr#L70|!eKXQlNx_$S?qtE^I3vXve z4%lz5O5mM0wDId>^xJ~>`^)g))!D)LALQs?xOq)f#y_p^t`uiZr0kjI<10hMqYJA$ zKe6o}FL&(~aqs=+vB5>`#e=Wt{gaoyk-gQ?v8T^^&nM^7-`9legNajz;s;}?jpebm H