From 284c7bcc8967ebc8ea12913806f1c6974d1c40f0 Mon Sep 17 00:00:00 2001 From: Patrick Date: Wed, 5 Jun 2024 23:00:40 +0200 Subject: [PATCH] feat: homebox --- config/services/homebox.nix | 75 ++++++++++++++++++ hosts/elisabeth/guests.nix | 3 + hosts/elisabeth/secrets/homebox/host.pub | 1 + pkgs/homebox.nix | 2 + secrets/secrets.nix.age | Bin 5815 -> 5870 bytes .../elisabeth/keys/elisabeth-homebox.age | Bin 0 -> 801 bytes .../elisabeth/keys/elisabeth-homebox.pub | 1 + .../psks/elisabeth+elisabeth-homebox.age | 17 ++++ 8 files changed, 99 insertions(+) create mode 100644 config/services/homebox.nix create mode 100644 hosts/elisabeth/secrets/homebox/host.pub create mode 100644 secrets/wireguard/elisabeth/keys/elisabeth-homebox.age create mode 100644 secrets/wireguard/elisabeth/keys/elisabeth-homebox.pub create mode 100644 secrets/wireguard/elisabeth/psks/elisabeth+elisabeth-homebox.age diff --git a/config/services/homebox.nix b/config/services/homebox.nix new file mode 100644 index 0000000..b025359 --- /dev/null +++ b/config/services/homebox.nix @@ -0,0 +1,75 @@ +{ + lib, + pkgs, + config, + ... +}: { + wireguard.elisabeth = { + client.via = "elisabeth"; + firewallRuleForNode.elisabeth.allowedTCPPorts = [config.services.forgejo.settings.server.HTTP_PORT]; + }; + systemd.services.homebox = { + after = ["network.target"]; + environment = { + HBOX_OPTIONS_ALLOW_REGISTRATION = "false"; + }; + script = '' + ${lib.getExe pkgs.homebox} \ + --mode production \ + --web-port 3000 \ + --storage-data ./data \ + --storage-sqlite-url "./data/homebox.db?_pragma=busy_timeout=999&_pragma=journal_mode=WAL&_fk=1" \ + --options-allow-registration false + ''; + serviceConfig = { + User = "homebox"; + Group = "homebox"; + DynamicUser = true; + StateDirectory = "homebox"; + WorkingDirectory = "/var/lib/homebox"; + LimitNOFILE = "1048576"; + PrivateTmp = true; + PrivateDevices = true; + StateDirectoryMode = "0700"; + Restart = "always"; + + # Hardening + CapabilityBoundingSet = ""; + LockPersonality = true; + MemoryDenyWriteExecute = true; + PrivateUsers = true; + ProtectClock = true; + ProtectControlGroups = true; + ProtectHome = true; + ProtectHostname = true; + ProtectKernelLogs = true; + ProtectKernelModules = true; + ProtectKernelTunables = true; + ProtectProc = "invisible"; + ProcSubset = "pid"; + ProtectSystem = "strict"; + RestrictAddressFamilies = [ + "AF_INET" + "AF_INET6" + "AF_NETLINK" + ]; + RestrictNamespaces = true; + RestrictRealtime = true; + SystemCallArchitectures = "native"; + SystemCallFilter = [ + "@system-service" + "@pkey" + ]; + UMask = "0077"; + }; + wantedBy = ["multi-user.target"]; + }; + environment.persistence."/persist".directories = [ + { + directory = "/var/lib/private/homebox/"; + user = "homebox"; + group = "homebox"; + mode = "750"; + } + ]; +} diff --git a/hosts/elisabeth/guests.nix b/hosts/elisabeth/guests.nix index 4e52ae4..ed02a57 100644 --- a/hosts/elisabeth/guests.nix +++ b/hosts/elisabeth/guests.nix @@ -24,6 +24,7 @@ netbird = "netbird"; actual = "actual"; firefly = "money"; + homebox = "homebox"; }; in "${domains.${hostName}}.${config.secrets.secrets.global.domains.web}"; # TODO hard coded elisabeth nicht so schön @@ -160,6 +161,7 @@ in { (blockOf "paperless" {maxBodySize = "5G";}) (proxyProtect "ttrss" {port = 80;} true) (blockOf "yourspotify" {port = 80;}) + (blockOf "homebox" {}) ((proxyProtect "firefly" {port = 80;} true) // { }) @@ -269,6 +271,7 @@ in { // mkContainer "ddclient" {} // mkContainer "ollama" {} // mkContainer "murmur" {} + // mkContainer "homebox" {} // mkContainer "ttrss" {} // mkContainer "firefly" {} // mkContainer "yourspotify" {} diff --git a/hosts/elisabeth/secrets/homebox/host.pub b/hosts/elisabeth/secrets/homebox/host.pub new file mode 100644 index 0000000..0412d8b --- /dev/null +++ b/hosts/elisabeth/secrets/homebox/host.pub @@ -0,0 +1 @@ +ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBq0dfFQA4Fs6mpzbAnM3Qa9pKoLk6eUezOvnp2iVA7W diff --git a/pkgs/homebox.nix b/pkgs/homebox.nix index 5f5bfec..4f41a34 100644 --- a/pkgs/homebox.nix +++ b/pkgs/homebox.nix @@ -128,5 +128,7 @@ in ''; meta = with lib; { + mainProgram = "api"; + maintainers = with maintainers; [patrickdag]; }; } diff --git a/secrets/secrets.nix.age b/secrets/secrets.nix.age index ad61f8eee9046de88740d0a26642ae5db2ad50e9..5ba8bb9ce21a1fb4c2134195e3a7d96535a951c5 100644 GIT binary patch literal 5870 zcmVotc4I_VHhO1dIbt|sGFb{OJ|J*ub}eu+H8vnvR8ebHK_EeGMmR%bO?g#p zZdzeXW3vcuPrbXfJL@ba-q*c5@0>X-P(KVP-@#PgG)BH)T>Y zOHXZVXiZ~LR53&~T1h!Hc1cllMpjQXZDR^8J|J*ub}eu+H8vnxMrUbBcOXG+SVmQ0 zdT}{3ST8m?RaSI#W>rUFW;s(*XhUyfNme&&Lo;VXbapj(aAyiqS~X~QNqBW{STjgh zZ((FhYj8_?dQ@>}MNLz0G*2{mM@MQ{YifBxGdKz@J|J*ub}eu+H8vnMc5P5}Q6NEZ zYBFj~Gg?7KX-9W3F?vL1VtGqpId3a?GjVWAP+?PdXL4##NH1Y$WkU*fPEIp!LTGDN zGIdmSYkF~dRc&xjG)Zc5ctR^wLTN}ZPf~6$ctUnWP;Uw?J|J*ub}eu+H8vnxMrUbB zcOXG%W;Jz7K{7~AS}`$ZQ#4^XPfKSjL`ZHjT1;0oMqy@AXF*YGMNxJ(bVmw9XLdJN zL1s^OZf#IfP*yl|bva2xNHJ(`PEuDMkNYEX?i(UW=mQ~cTF>DGE+x$L~l1)cWWY)DdZM>l#@Y%o@CF;h)1ZD@37Sul2VG*Mbb3JNVP zEg&&TX*o%8L~~V2ad%F1Vm4+%VNPLMMPg1_P)bc%H%fLzLrzS0Pj+l{I108lOW||4 zTZ4>JZd_^OShX~It|OkMwvhD$a8W{cDAA-SL{pCDU~eUPHE3`2zk-}nU?ENIcEAfH zv0YPNx@Rbi0X?P`5~kqRK#b^zpFP=*e(uy^LV!l0s4LjUAntqSc;r_dYU{ZYEN#||wnl*7 zK3<_O+39!*_3+a9R{;;G0+|8ZTEdIKlbHY)2%qD(7&7+D?o0D)@6_bhkxoZ(Oqt{V zWMDy{ARA;yliB!+8bB8-?p^tt-$n~-mY(i>sk5QP|zUhc5vfHBvOaGg@Cv;yz^FfeEsa9HED*w6=P?ki*%5#D}8g1}EVLb}FdM!*4 zdW+uPfEjM2_L5{LOPwHLs_L)iZ$UN2M~d|4+ew_<1rT z`B~Kjab9H6SZ;nO`91u7-U3s)#O9k|Y$am3AH~ZYrr(xgPgMSC`W`R3vo=pD?xFoQ z6Z_#BMYphOUa*nnxi53kl(CsW;^tt|Ws-o?H6CkMibC>o&1x6v>)_l^t3^}*9D5GL zG3ac6fhOF+sn^!d#p6K{b9XE+z>FBfQFT8V*dG>g=aAbmEhR}aYG&Df^tEp?-3%YD z?N&!f(h}A8rewi0o*Zvu5=l#)vV2^0&#D82Kol?2WkNl#TouUZoX3^kb}2H2j&1X5 z&t|aV{hRdr&4<}Jk_;@wax&OAz^M-a3wv}OYGTz$E-*T?ypT-}2m*6KN}L6T%C)%1 z#H`Z*Y753%lK)In8lTzV@2Rr8GX=8yX}pG zzFes$YuayK91WWmekQjZJD&<-EZ5znA*BatAX$|SF=;x1$jhBfsnycQFBAZ~D{h74 zhO+;!4(c+W$osDtck+TddET(Aa7rs-*7a%#S@-rH=U(?>K*X<5sk)8HH$SPe1dM2W ziRQ?$IRW@x{ZMI-S}R}aol?;sOf|YUW8P3iTRbIMo6ik8+(Z-ssM4vGv21cQR!R>Y zb^ylNxaWeV;Fx9E`}0!5^aLTFv^2N)XBA!WR50q&1=jz`OXHWLGZyfoUdL6c3cvZc z$&?ge1S)kqUsxY?`KK_m2`vJ8zYn+bb_AdSz8+rbklR!W!ptAZ)AG3ebq=%$-2oikbo|dT>KGbnCrw@r6S!I_K?s69--cqBL5nrguVl`iIsiba1?#x5h8vW*xSs4Ffc>}#G=idX zAODcG#qmHr>=PJPv(;jek;BOyjbeU&C!1isfCy9ahhR)^fHvb zU90Z|B8`V)eP0|S$5NYj+X}9UF5_CTBNy-vkdG%cg`%R9BIUrq`tI~@N96EdSc3Bvf>@6x;;sI(rXnQJDN{K@>vobZMb?0~AS zU@hMhEZU~BHSu!!Bu}1`s$Sw&%eMuAmH7e~T0IMFa$3W!j8o*wU4oUYjj}1(w0for_b(fGya=&(r6`x3>d4b$Ms+6+E zQ@_B=URe`=CjV>V&%(y8E+T$$o(KPJNK)7ThD{nfD%)tVD-BXPr2~t*=Z2iq~aOg3`tzVMv0`UBCT) z>~cp^A<=V8#Dgo0vyO14qwI52tlAXY>?(Fd=*#h7G6O$@!wh#7oGcqAvII(cE~CO7>_T@{wMR^WZ+1COR)+LM|gkM%x5#I+Ff}O zDwCvE{OSzl6w?<8#9GZgSHa?M73w20Tf7xjTVU!VGSnhz=U-Dl`7Z^QV9JPR&TOaMn>TGuwybc15t#f7O<>?WH@}%>5lCDgRvlurprc) zCpJ{Ygvk`0L3$Ig9-xecXJ?xZ$rl=G!$o_&RIlFR2eP!J=ZtWp}GrHWw-$b(o0BJUtDLf$xB{Tz+x8p-gcB`rqvypNy~MJ_AchJQ0VY}hfL4gmv z?1@hbNZJ)oHc_K}9PC}wUW5r`r-WB2TUNopl-2AqWo+3-blq6BHn8QIn)=Uc7|pT~ z_;%E(C~RLrHihActQKXH0y*n$l=oADPd{aVBgpAT>V?wNih8!ejeo-T0~uvFyy4rl zx@_tZn?Gyyq;Coo2`zeax`G_xg9WXk5lJ)i(y29BD{ySM`jx)SL+o*!lt!1JN~~tg zhC?LuK}YHwNAJ8r*e0b*Z>x<4YRC`$GYd3p5gWpce#s|nR!y|`FeoU5>`k_0zpSPb zX%&>gT|`n~Yfll^N-gFle#pHqH}Yu>r^r^WveU9ZayOcL%k zX_;m6yWCl3Meqa*d2o>Kn3g(G29bLdd~_^LgRW=2a#Zi$K;%mR&su>e&tIp;oLq2? zET34No|Z=rQfVqYCzJePH?t*(EF{g=iD}$lY$bb5SKPFdMHVk;T~)o78VJoA<*Ypv z4veZcssartX#l!Vi;`=%*{%J1HK@9D0vVFjf*EQj&Sw_iwPy>G->V+JH9*}etbGOI zZBhu;Sxb$1VV2Xf}3R2 zS?_fa%pt*0;7Rc(wP=}{cjvg0y@tWzG=sDnU3}G#prtsfv4NQA3uy#Ypa{h>hy6}W zNA&{miSSv7^7@Z|b`T?ole~y_=H!AtoTlUy?vK<)@?(AAz6v<_Gt7jXm-2=?9C-v5 z-Vy9iMT-?WhHMYIPkB}clbMctjAk|ybC&fUR;v~m+G#l06wPw)i|p=1(Z_|Z&hK*X zXQWG__{au~fHo`D2U-{ZvwhcIP1scpo|c8=j#NwKZ4qODLGL~LL(@!}Af!r@n4Q4W-zMGWUIvFS3Z^IZ9kWMGPprJ6NPK&zXJ;H*1 zla;Co0YGbUxqeQ2l?n@&rt+xS<};l~pU71r3`_iO+0~ntWLJ67RAp8*E(k_|3gASD zu8l|E^d#A01O`1QQ4g_j24T`s7$8~jDP%7%Fz^`IN++6>HRj1u&*KtmD@)-G-m@f9lA=jMRiQ}{VbUd`hwTj1#A6+0c}AD z=!SAi@`6-`MZCVzO_CQWj#w<*gKk@bT!o?Q)AoP=Khh*1DMBh3ilyyD+?~XsUp`4| zyuF$sb{$)lwk^4HB$+d&iyKZ`a?bY2Y*k4M9t;5?KIn+?Tbcy4y@bA1E1*ITW}5hA zV_ftDQ;BQqmptXWa^%7ZZL+|dX$9mE37r4YX1S4#tV|a$ccBQ;de~s!^*LAm*?6jFIr*M5ekS*`h zljylU=lb3iAF7i>oHM!1Z`>N4OXHt~3;fCz1Ws|vA=2y=1V&7ZHCWT}UlJgD;f+z= z9%iAP^kOJmQ!(^tsf*_|Fm(}cQH&hT;c7^{Lo`e{>K|%}=qO-(4gQejQI2Thod0Lh za{8QeRzSd4BGGb|w1CR!%2f!$v1|`#4G)Fm;|hK0A_CvNtPOM_N}=o}RR%>KH2h4E z-`&dCls}pMTrOe>_YRY_prrJ9p#(*p`IT($^0C$9Ax%YZ#EwO&Z;#+k0$vBi@zx#W zyDJrlt1*Zq4_Y)O;@*Eq;3iX;X5UcEz0l(2t-x*2DMy;pUck$Qd_BApRXtQH>U)LV z69`la!m*FlRk)@r6=YCcYE5xMymnc+fcCIlJN*oGeUf)ougfAa}CPxDc4}D04gC@BOoM-MSxm^?r_eQIc8Y zmpD5ol6N8kba2O~g@qH<&oBX5JNWPpi-e)-0v&ry^ekQ1mhs`VGLQOm zuAO3dY?gE`2gP}+fE$IqC#XUs12BZZF{~6JDY5PWOw z?bbGZrM0vGjW~0Bx_6y67y{NhppEX-*2>SNoa|%J_t|@JTu6ZVepAhtm2Z>CH|2zI z;$i`$s{`G4sa5y&;{Z_+UZ=-RH$l%MbLQ9AUVfpftL&NxTv5pv>Py2$d{}<@lCpho zjFS0^M$Y_rCC8ZqLi{aO_F@e=LIfoIYke1F!v7O5S#M`mG3{4x>p4fY3QMI|9Q5i{ zJP2P+J6wZP(r0&?HHne~b#G}U;6tfg;Gfkg%H?wmt0$n&lxNvcbugsG=TiBl9be*i zFgPQ2%Ub)0LrDpFrnf-&6f(+hZJv9K@@P@fbhQ;efLZr^%1&M}TcYfh3^zu~N8Iny+5iL6r`7{B&gB7GsN(IazGF_0Nc zKPjr0#ZJgGI56PYN$~3%BqYZ{=t}=C+4; zdxzVnuX&ymgM!uoHVJu%gqYFw3sTHuUCG~L$lDWNJG{3Es9c2?+>|GVO z{O?;IE9N0x+{2d(p(V72oK>_q0ybhjGKDeH%^=A2I%tL@C>`$S{n~zAHXd5Ox;Y9- ztseIKCzRSu4c`{Wf(qU%PkCSR^-AVI>8T)h1>X}S042+dlnY6# zv}>x1X{K2;p(<4k?YgKic;*@2g%dy-7tC@2+mcLHFy8}?Ct$AA$_cu%fdjJZEo;R* zlcVz{dAk4l@94G{@Yhh7cjm=a^FFZdldMxS?l`3p3m*b-3x` EOV%60#sB~S literal 5815 zcmV;o7D(w~XJsvAZewzJaCB*JZZ2oX>V{(F;8bfWi)44Fjr1mGh+eEH85Cic1%@EV^3H!SvFy9Z9xhxJ|J*ub}eu+H8vnvR8ebHK_EdgRAOyTc4uyQ zLvToVZcuqdYgc1*QD{|bbYXKjZ*F*DL@zjOc`r#-VNnW2Q$kTqXJs;0SwloHc{ea) zLNiulWma!kR(WP*R!>qmd3bYgXnI0ILrDrPJ|J*ub}eu+H8vnxMrUbBcOXG;QF2!~ zGI3!mMpZd8O=Va{P(^o0FEDO+F;-z#Z8ua_Z)I;vb4g)kPGbsMFj;wRPi9eBVofhr zaZyNEZe~w6PfJQiD@}K3H8V_eWO70?QaCYiPGM_kYD8={bU{~4MKlU>bX7HS zVoO(4GH*#)PcdcfazQk9P(?>JbahuzSx!t#Hbn|8J|HtKXL4m>b7de$ zYf4feQa@}+LvbWc3T`=9F*hqVXIWEGIY=^WL0U3(MsZI!a8_wWacpHzbXGV_R#`JL zR!mQJOh!ylcXnuVY;rj?QCUrBW;8c?cM54tX>2PvHfBgMa4SVMS~gKqD_CYVabj~+ zWKmjaVP#G-T1a_WV`6r1I5tOWYh_4h3N0-yAVo<-Mo~&JQcg^8Q8QC^P*yZZMME}7 zFfvS7Mp$KeS3_iLaAR3#K{iBL3a=~MHN8+GHnHYSg-i$KVKvKhm2yT7O*d5*24?Xu zWdj@Wb6pJIPbkR_6f8E5DlJyrl&kHSP`eu?*>s|QuVvTLv&p71ldbzGJ3FVw68EU# zRA|1z4&$f;`Ky`L#k%TGo)>(mD)=gl{3qu*J!TZ+gAN=jM)W&78A**OYTzX;_!o$o zXhEcKU#B$GOPtdO>0%bls@dPgJ(5y!;cwO(YskGb){j7&;6UUZ@7+obUGN+(3lq}K ze({JU;&l2nP4IMB^go+;uY(PM-n=u`>)5E+*TrppX<5~ZjlWxcr{`X`p~aVgCSD_@ zMV2o`h(u$xq%6%Sfwm>hjT##ybwtD)N`V)O0je;&V^k@B{_7RTPJQf{P#3Q2{tn2j zxQJLATT2hy8$%@V+{6SuHg%1L-I89P#+3=b z4c5zeTJdI(M|t2Ir>z@+G~(65(>~cFy9q8Ic3ALHPcg7r4-~`qRSpRy(e$!tM=E8*R)J6;5m9WH>WpdN{YFy)29e(T{I?| zL$d=FF+Ycsz@P9KzSv<0pK=ts#dHtCGlua##Z2hbE(?r=I?!}Cck>l%hfuRSR>B^a zucIzmWzl-DBCT;~!*EA4(&76{iQ1D}F3b`Mu{NkNFmK2jXdaQoUo)7_*ej>;&;j^_ zG2xqvUCqNotdG{*xo=iISk$WaD<>1J{^^fkvCw|BWm}wy<{I4*5tRoJ31ayS9J?*t zZ=nscUTFOhF7X(8`pqa9&mQ;!P*lqhAY;RA8Z|z&7}RdHq$p^d+zBA!s9hx|ZF2d9 z85r3@uj;HBKf+?LO3k)y|amsHO7peKo4;5_V+GJ)`^vN`=p#PU>qM>@^1_);@{r?^!n3+m1qPm%o z)87z{suD}-jLrX)B(hALjZk1ehkT4GvZ_Y}l(DIfZjvvl0aS#ZXLbK3T$5~C2>>kb zo!ZF(3<~N{#o6{}C?Tjy9q*h(&rX98vcK08!Hq;Mh9WTWquu4mHWQ$p!tXo_?ZB%b zzxYVBs}7B$dAtH5Jkl~1-14zzQq;lYu!-xEYk>jLi56T4VBMQM2rMW(2PaoUVnD_H z3+r?HlJas;hHwQR_Vy>k*aH5ik%rX}$OB&hamf2YOU+7P#bvH*&` z=*?SdYr7a$MREwH57eV&_7Tik#Q%A6pC|02zfg16*Mt~3fa?Kc|n8Ml1dG1P8 z7!{F%8A(}XXje8M?|&Cn(>SwS!hBVF3u5Ks8@dmRTf!uAzAa4(L?M1@*Xy?es34Ri zcs&J^P9UK#v-KFg2EIudA^`j< z_0AE}t>fbp+{v-3n@=X5%f_cdlMLH~FJ4V=jOyt>>ZFQXqal(c?-H+TlePF*E*yh# zcrN4RQ|$v{wq-r-7R`Ufnx6LX+`{(!AmUG+##}mtWSocFuO%2~Y2jZwz5!kyk}`8{ zG5Rp4o@B!W6rXzGtvJi+v1ym39MeKxUmX*d7ziX9nDly=*@IZMc84^wBT>YIM!+#=LY~~Ul z^fakeII0x$qczWzXjaAF-JV{@nF$(7K z5tgK;=JfGOrmG$Q%Mr;90Ww8!^<$32_o%Nc-XD`PDnEHoVb(G4fu2nz3SoEBPN?Uy zDK8NT6fnnGaRL-Q4M$Y8m zEu>0;<)^vPqq<*SAxpLpJdu~pmZZVpMg_^=?K3f!dZm?01!qVaooGpG)Fwtm>4E^f zHMtTljvvYqkUz)V;k7M_hf{aDv=buE?QBBD7K_wDnW)<7dqUCixxJYP$5x8P{aFzM zYzzpH45RUei8cemhikZV=okmqgw!n;{Y5aY^tFMIWMuwuU+EfI@@&Roqnwkux_!H5 zwGClIz(HOZoTAZ}&$=~hi)%rTBAXT)v298;?5TTW%@NB`sNvw)yaeG0v!@ou{td_hn&tt^xJ*FaCx_Y}oz} zYbq5JmNY%$`0Dj1^8ELD9N-g4b^z<+Jkd*GiWDj(f^?Cjkj^RLhkc^@ds|MGd}c@ROQ% z2L3A=goq~Y|Mx{?PcewZf;3bQrOm@tupZ%dzjy&DU^;SQtkIPg1R9L3k5N0KJ9Q8j z5KrmKFo%+n^-3)NpbtU3{OLL(ItRIV)rbM8-8Svvx8Qv1HvmsG;)#dFQhq8PpTs_I zW%jvfAVJKRLlI#?*Mh?V!a(D2NSK(frkD19$6g}Nk_DWYG*;Z6Soi17gBP&LlEs`B zKkf&=229$~tcYQB3{zLvZFdlBB7NY0<#VBpF(%{VX9@HKK&S=H8sx21g_aT26NpAo z3<6m&fy#^`JSWRy4Nt*w!UedDzNVn8v^6_0j45fX4z5oTrU-e`qCOnPEq_C^c0RIL z{(ZejN*PLVV&M^`EFX;TW6rytV|q<9%>n_$h|PLsjziYmwz~>&Wqu)7uD=XN~k4QGW$8k7-We8L3*D8S72 zha&UgvE<3xs!T9&FqnN83~!`2xs-D&D+?1sV4!2?jg$foaTm-|qIDV>t@Y|GBto#& zJw)fspna^|+O&K$xiJ6f$Ji4t#Tsn&k;34Qv)Goq4jb}MgnR+KX&-9`mb8Vz&|>2E z^hdds1|?W&rjUIq{4vC|(W90R%{?SKdE^}ZW^1^V69GK|jSe{6>!Nv(oJrmk9$&5j zU2Jmx(g0B0n>~9I3)`M>h6X3iN7?ZZ zT($@QQhH?6Az~dcywqv_H0zO|HNQNm(-nu&H1~EowdgcepCo(l3om47_+O>mpj`A^ z{)7EMGoIoc7_PWuA61i84p`rS5MZ{0Ri|AW#NcQ4M2e=CL!iL5a1YeC==u~}e;kY@ z=J*r8K!9tCK-m~D_&G4g{!;J$8p;k=9;xnmWg4RxuN})hqx8$xp6BBFJ~AedO^;)Z^ihqQJ;Hx~ z5{_wLpaX!JyLNJ3;W1V0le zO{WOw49M`eb=d`s%KK%E?oUT^jZ}$ zqq%tm&m(Dc@Xs-ZpenAxw*uVO=zLQBShS$R+eW?>#6FA3KO0a=78IyKV2L5S$QKW_ zDy3-O8O7BR{KS@Z4O4$fzHUTsB)`&29>54Ml-gvE@ss#-S~=Snq$ApO*~c^|E!}5P zpp>kT!l!qtnMzS(OT8j%JSVvtrqR$=$Go%){##fc`HAb3jS*Fx;^=|BDxLRr5>&`` zcx8k6U`7(!ToKO_$S?|vqGlG8*+ zt`3Y=cV#{rl;-os)QCiN#&m|YP5*kKP8p#)oSK^y)hd2pmRQxQ;t7ob(0@$57X;n| z`ZR_?;B@BTq4-K1G2pTG?&V=O9qxU<{CPhJPd9qxNsR zBQvn$==!;cfAd%u@%THr2S3@ebG^t^!-6PAI)Pnl>FV9Q>Ejr?1-OeG7&rzZ1=HmV z!|mOTsC*}nE5j&4wL6cpf#nZf{?{A-RO8tGN5hTZZySIY<<~yKxY4~Osalp2o2&;l zQg%256WX93eQ29LYa@cBvVOyqwbC)fH5dlhQu(++$@yX1jA@0Ci{R@8%Hx3Svp?RC zV`tAf5>>cgG@j<8hiF*J#>!AHjin{c?Vk-G7yn-~pE!F9L9~2F$$#7oe;RfX@Nagw ziEWa3HJme~t(Zs#)n}R*^;D=8UmM6!s!TGC%op;Kd*`BT`R55j;HfYMse|!gBqbNXdc8Sg%+8 zs=Mj&ySgea(X`EIVkLO6RIl?f+dB>sjRj`h{Rk|D3(`3`*^K7+lnryiHDZ&kj>gzz zv<`AY{{hPNVp!6zd`60KqMpD$1km8eU~FnONBcOLSK`)hrq)H)8NRIOsJNVEbEt~E zP(<1I(t;s<)0tmHm)Q(PRxD`%VWHZsjjfoG$t>dJjub_fQ(+@+|5azHKDi`AMW_*p z2n}+=lhkiuPr^XZT&VQuNLgg=(tuXTaLK^TaWt=)ER0L6U;uBRO0*s~WNR0?-8^=l zrRF=fx>J_eqscD@9TvEOQ7V{bE-8%ZZp>i>NS+=j0uxwe)~*x8xIc#xaJ8>@nW`#L z76N3X)0Nz(6jwc}DkAT{_qy0{(v{Oub$dahI^{CJY?9t>cShmh4SUQ>IQrV&Dst=f zcyqitIOw$hW~5=}K-A;5#QR`0YJ zL5~mKlV_EFf)Gtr+bT8I^?Zj(o3beJm3LeS4Imc?_mSvYH3N$)wL&8i-N$wPf@}L7 z-$FKo$_I_P54^9L?Oh{#HbRP{xVri1s3Fb%V!^tjgA&!;=JjMz!gNIbp2NVE3VszC zGkvzx%!Ps+gWN=OcJtUsIJR+EVGeDCEEauii% Byt)7Y diff --git a/secrets/wireguard/elisabeth/keys/elisabeth-homebox.age b/secrets/wireguard/elisabeth/keys/elisabeth-homebox.age new file mode 100644 index 0000000000000000000000000000000000000000..d611b919ae5e399086a0aa612d26f9502c5e9ced GIT binary patch literal 801 zcmY+1QNr2f}egt3a9W8wPStEs>7#Mn_@kVOs^&$ zLDM)p8O1h<^_#?BCYeMAtD&<`V_F6C?pjYHa(xRjbk+?#VFLtRDZB*(Nzr;WGE#t& zdrI)~QK43)-?b6pI+8--id|Cw3U$^`Yl3Db-p0%wZo;MVFf?e0yIXm0P>}{2Ge7R^ zcn+C7yjA^d4q3r*mzxG6tmZ1&7WmappiU^}RK!sg`i|yW&O_Hav4|~urHF*NcJ5ie zlxAR1+u+NCq#{db{lL=Hw3o(^Myl zlW-hn1W;~?5m|N^%^1qzd}Jc83R$7O!E%wvOxn!LvDvC}?+KQd^5lK%|5w$D*GaAr zy=a`yY=Y5>T-(yMZ)eqJTrE(uZii@yXj2-HU{2&KR_*EeDUO;<&PCvJ5U7^psqB#n zO97Okvw|J>pXGQkf81Y8(-sCDoP2V5iD*%=I3(qsl=b~$D`9S{>hq<0u9gMB-s~LA42x z>2x}YOqjd6w#H2sBiDSx0SxC{p{USEvAeev);|F0+i06WzSXaE2J literal 0 HcmV?d00001 diff --git a/secrets/wireguard/elisabeth/keys/elisabeth-homebox.pub b/secrets/wireguard/elisabeth/keys/elisabeth-homebox.pub new file mode 100644 index 0000000..e6178b1 --- /dev/null +++ b/secrets/wireguard/elisabeth/keys/elisabeth-homebox.pub @@ -0,0 +1 @@ +QZ8sx7wJ0pMAfxyA1hDgcemyI26/Vfaf7TICofiXPhM= diff --git a/secrets/wireguard/elisabeth/psks/elisabeth+elisabeth-homebox.age b/secrets/wireguard/elisabeth/psks/elisabeth+elisabeth-homebox.age new file mode 100644 index 0000000..ca80602 --- /dev/null +++ b/secrets/wireguard/elisabeth/psks/elisabeth+elisabeth-homebox.age @@ -0,0 +1,17 @@ +age-encryption.org/v1 +-> X25519 h2wNST4+qSw4uCVCUqSoprjByli3t11plBHp9y7dRGA +DCCsXoA+stUFmu0aNcNJSClOFTF9pNjgN6hsZjHkOrA +-> piv-p256 XTQkUA AvmTYpnMbBf4FiesxT0+RahR55nXJbmCsPh9jSXCk28K +AUOUpit2AsUMCh3KRqwMMSLJlSUlGBeoJZWyey3S41Q +-> piv-p256 ZFgiIw Ax8nhmzow+Pshj2paySHEdKc+V+BBP55FpwNa/HOumWu +1vnybx4PiWiep4LKISh9+DQzDcv46iTf0BytjwsVPqo +-> piv-p256 5vmPtQ A5l+gaNbTzurlEnGVdjdYBrXjF5R+xdxBANv3V9W74Tq +AmWUmtqPpGCG2G9xEswFwnCLNWS0iP9wdaS7UhMIA68 +-> piv-p256 ZFgiIw Aq2tikCz8rv/r8PcY/3PKws74HTRdKC5WP1Ht/0ifeC+ +kSiDUso530lPlYN2P0JIVG1LgEbL2TkRK9v8YQpUQ7A +-> =3mcTXky-grease |'ZI-R @E>y{ m){w =.h +yyiAGQon2cSKl+YqqZzrHRtsAnSVkg88UlO9Oj6nAdMc7/X+kNmoV0roz471Qcst +5WRDl9zm+ZUTS5bCqDdLThdKlxe2BFc4vp5WWd/QBVrlGuKPza8 +--- JfX5HKp3fQCfBufji0c+DBERd4JPBp1v/HG5vXkRUzY ++{|\X,50t+Kc(àpN[d +W:MȰJ㔭*n˙a9x-] \ No newline at end of file