From b9c23c303997536c439b37d19ffde91a66e44bdd Mon Sep 17 00:00:00 2001 From: Patrick Date: Fri, 23 Aug 2024 00:30:11 +0200 Subject: [PATCH] feat: invidious hosting --- config/services/invidious.nix | 24 ++++++++++++++++++ config/services/kanidm.nix | 7 +++++ hosts/elisabeth/guests.nix | 3 +++ hosts/elisabeth/secrets/invidious/host.pub | 1 + .../elisabeth/secrets/kanidm/secrets.nix.age | Bin 2245 -> 2273 bytes nix/hosts.nix | 2 +- secrets/secrets.nix.age | Bin 5824 -> 5825 bytes .../elisabeth/keys/elisabeth-invidious.age | Bin 0 -> 827 bytes .../elisabeth/keys/elisabeth-invidious.pub | 1 + .../psks/elisabeth+elisabeth-invidious.age | 16 ++++++++++++ users/patrick/firefox.nix | 3 ++- 11 files changed, 55 insertions(+), 2 deletions(-) create mode 100644 config/services/invidious.nix create mode 100644 hosts/elisabeth/secrets/invidious/host.pub create mode 100644 secrets/wireguard/elisabeth/keys/elisabeth-invidious.age create mode 100644 secrets/wireguard/elisabeth/keys/elisabeth-invidious.pub create mode 100644 secrets/wireguard/elisabeth/psks/elisabeth+elisabeth-invidious.age diff --git a/config/services/invidious.nix b/config/services/invidious.nix new file mode 100644 index 0000000..fefa154 --- /dev/null +++ b/config/services/invidious.nix @@ -0,0 +1,24 @@ +{ config, ... }: +{ + services.invidious = { + enable = true; + domain = "yt.${config.secrets.secrets.global.domains.web}"; + settings = { + external_port = 443; + https_only = true; + }; + }; + environment.persistence."/persist".directories = [ + { directory = "/var/lib/private/invidious"; } + { + directory = "/var/lib/postgresql"; + user = "postgres"; + group = "postgres"; + } + ]; + + wireguard.elisabeth = { + client.via = "elisabeth"; + firewallRuleForNode.elisabeth.allowedTCPPorts = [ 3000 ]; + }; +} diff --git a/config/services/kanidm.nix b/config/services/kanidm.nix index 0b5f39b..d71f343 100644 --- a/config/services/kanidm.nix +++ b/config/services/kanidm.nix @@ -140,6 +140,7 @@ in groups."ollama.access" = { }; groups."adguardhome.access" = { }; groups."octoprint.access" = { }; + groups."invidious.access" = { }; systems.oauth2.oauth2-proxy = { displayName = "Oauth2-Proxy"; @@ -170,6 +171,11 @@ in "email" "profile" ]; + scopeMaps."invidious.access" = [ + "openid" + "email" + "profile" + ]; preferShortUsername = true; claimMaps.groups = { joinType = "array"; @@ -178,6 +184,7 @@ in valuesByGroup."firefly.access" = [ "firefly_access" ]; valuesByGroup."ollama.access" = [ "ollama_access" ]; valuesByGroup."octoprint.access" = [ "octoprint_access" ]; + valuesByGroup."invidious.access" = [ "invidious_access" ]; }; }; diff --git a/hosts/elisabeth/guests.nix b/hosts/elisabeth/guests.nix index eedaa8c..3e96c12 100644 --- a/hosts/elisabeth/guests.nix +++ b/hosts/elisabeth/guests.nix @@ -30,6 +30,7 @@ let homebox = "homebox"; octoprint = "print"; pr-tracker = "tracker"; + invidious = "yt"; }; in "${domains.${hostName}}.${config.secrets.secrets.global.domains.web}"; @@ -180,6 +181,7 @@ in (proxyProtect "oauth2-proxy" { } false) (blockOf "paperless" { maxBodySize = "5G"; }) (proxyProtect "ttrss" { port = 80; } true) + (proxyProtect "invidious" { } true) (blockOf "yourspotify" { port = 80; }) #(blockOf "homebox" {}) (blockOf "pr-tracker" { }) @@ -310,6 +312,7 @@ in // mkContainer "murmur" { } #// mkContainer "homebox" {} // mkContainer "pr-tracker" { } + // mkContainer "invidious" { } // mkContainer "ttrss" { } // mkContainer "firefly" { } // mkContainer "yourspotify" { } diff --git a/hosts/elisabeth/secrets/invidious/host.pub b/hosts/elisabeth/secrets/invidious/host.pub new file mode 100644 index 0000000..d3cfb38 --- /dev/null +++ b/hosts/elisabeth/secrets/invidious/host.pub @@ -0,0 +1 @@ +ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGadvYM2iRdTri9xboKlTHG91mE/agT5YwQdJhnB94uj diff --git a/hosts/elisabeth/secrets/kanidm/secrets.nix.age b/hosts/elisabeth/secrets/kanidm/secrets.nix.age index 7ad762c1cefa0c61823ec1cc53eae9dc7ff951c7..05af5e91ba32961f5da6b0a01ddf161cd95c9703 100644 GIT binary patch delta 2232 zcmV;p2uJtD5#bS#AXjxxS~hJmP)k!oFLGLSY;7`8c2hJ{IWRdlP%$!5Ls>>eR%LTR zLU1rba|$$LMnq>bMMq3zbZJa_b#HQdHe_aLH)u^kQgl*pYGGDKS9U~ccXwe+G?PyO z6@PSdVR>RsVly~(RYE~hYELvPGEG-;bSqCeZ#HB{Q+juEWLP&jSyyyUQwlRYN#=Xfj$cD>8FaNM%@SQZz3)Nij!Fbwy2Kd0H@JO$seOAaH4REpRe5HXvA3 zQEOE}AVF?oW>08SaWh0tXmVFVacNFSFhoc)QZHg*cVlm1YDi6WW^hq8b45f|cXbMH zK~Q5#ZE^nY;SU5V|j8;Q&VA3SW15|ICfNTcx!AiGHz5@c}z`rF)&R^ZYydEMPpAeLwaL& zOEye*H*HKdXkb7de~ zEn90j3QBrGXhBjkS4CPlT24}DR!vZ9a$|5*NkvXLOG{5|MlWtgadLlfcv^T*cvDL; zF=%2~VRS+>WnxfMO+qU;S6K>IW@j)#Z8<_!PI6{eK?*G`Eg)KGD?(;rR8}x~V^wcs zPD)R9Sx{Fua!PP3GFNyoR%2vWRa$FVSWGfmK?*+JML;;!Z?7j<#=9~}@VH`7Uq$`0 zVU>5BC@k0!g1Y4no`iq=ZCRIv8fpqt9Y~(qgIp<+nquSiUvWVNyaS9Pufd8npYEcA zR`FV*AL_NY-ShzaP0yN&bK`T}eQs|9+q zF=O6qX6;cBjY*%) zjfN>lg>>~4zqo7@M58NtkqY@_@^kazVqcFJ1u7~U%rSqtO(y)k58iG^)sB+&H*J|? z_>ee7XNy{yCR{hlmekPdujwNucE!k_u^qztF640~_3!{xJ&AshvTuG$DYySER~0=l znwbRa1K69z`!?AUOlixgJ;*?fm}|DlUGJT5oX%>5WYI(to$m07&^hJ+j>(Wit8=w# zlPz@ep<;j0$mPayfo*rF?U?fM6#ivmV4P+v+JOMWRens0k2G|W0IEOhPbq+2gH3;E z`iK^~N@0Z4-vP~z1!!$L#=1|WyeT(mfr4wpL^(={{}&lUWwVcVk+ts9XM;mlXzEF? z4wEi@*~Gu&oUo@60^Swoc)a^aMB?~lz`s%W>)(G_@F6Xixl9zlH$$&E+FTmcnJ`iG zo3v%J;b6p*9A4hyg|^}yKo$UIT<3B_!o;khpSWlEI|6p>sH!Fi&p*PWdgWT?{&S)l z=`|vV|5k2Y{UDl|*PU&^5Jmun>(Z5UD=mvYjwa+Twst8Az;Fb~WW-cp#p zwGw}u1=9A{Mv-~<7jIf$>GPBvC(Z1IC8wP6tU_JUo6Ok-eXfVWUK+V%B1J+{6X@{! zu!O(+5s0c|$~O}d?j>;!Iy7-cTM*h|Hl);$0RE-nENq^aQ}@?)!7NoBQ>IZKlVCNa z1K%di{b8$5&36~XfSdA~FC2SI<7 z<^6Vl@>O8)^st%5%H*)^>t1l^_@9_BOKPx9X^jt@&_iew+$oXRKe4}<%j-q&7LprIDo0EfBGwrXC1*$WYa;pWU}OWjn)N5YKuKLX zyaUR=a?)1t*b1&9PibNpi#ZM%IJmLwMv|en%8;?3Ms1a%I16N*BOq=_oMC@M3lCAu zem+AX@T+eC1enV@GjI>+uko!A>#NbEEoQYx2rv5o(}G{I~#(}T9knrECE4N*)1#0z}Pk<&F=8)MFGX~CcrRx$Nk&*POiBtiIb(K3N<&vSPfJcK zWO`3zFK=RadMi0|MOJx1SZ+;5MNe9EN?KJ~cS#B@J|J*ub}eu+H8vnMc5P5}Q6NES zT5~y3HE?WAN=#{YFfw;&c4U85GI3#RbwX)0FLOpPF;Z0YwEEFpjN7ixigMyPy3*$8x*E8;s7_=TeBorG0fz5PZaJf+CHC>l%B zGXQsy#-cSs=XtKWdF5=~4W`PW3l8c2dA?a;*tJZ0ZGLw6R=4A)6xZBJFkLbq7L`fX zvAY@C|0M%gu`-i=TF`p+OUKBkuh8nq30FHVj8BI?=4|RHwhw=u_+`Vv4ExbD8D;r6 zWor#j#N#M{&{b|*=*;qp(2%{MDX#W;$>(02mLh0p9W8X5yh@_><`dNHXbUC9@O`O+ zIXufVBJiu;Pk6#x#4A_uuj?laf96qTJ%|Z{^%l^i(xx(e2noNPd^<@uo13;4k#2)A zeGk=yRDwY3=39S{ZKdNp9V!C-NxUz^UtZOCxNa3DS*FCF(ZnG8`ty}N=^v{jOD8)m z0}+u}>-3escI^Q^T`?iP_?5dsG=FV6J@Ik~GFdfCTMuVQ13W4}y0H=-F;fUyPx7Q; zkw_rkSj=Ca!#gLxiY`T!V6WnVF?0V#EmT-(9V-huZkK;5ZJ^k<9wTH)9OcD2*9uTX z&FMiQ2*!Tj1&czSRNUBOh+nLc;U4-LpK3fVudOegJPs!qE$H?z>XlyCy z&LVy30^NVDfH__Ede53=&47C6cB@w@`wdB(&MbTUN*x>|_pbKdV;VL(S??`s42AlT zc|vwLt{j?pRs`_4FpEK_^c4_Ekx78VQ7wbW+UXGx`Ve)e5_-6xM&qfpx9Ud%8i>4E zjVrFBJVY2QUHF6ns~1EBp$rM@6iKSQOv#cv8=ikjV<5bE!{^w%-b66bhO4vVd=s27 zmrGBDx7`lI;u!0lws2WYu76h83alA*ld_B9qjfg=8$ZG$h%6$*?>tdje?*C`eDhnG z2Ic3Xvn&u|sUlBG;S;E%ZV9@1(vmny@H@660W@0_@VhoRb5XT`$wGI5obqjzkcFe}t;Js`O(huU;@v?>trf#Qn#D7a z@ig;~A93QZ4F0Tw0mAFXbt)$GJ4n(}ky3y0ir3u31fU4r7Q{eLu%j47?_AGfH*^Xi zUWY|mipOpD@{Vt*sop?bc*)QUB}njCRz`1++kI?v!=j|tO%8EMdzAVkeIaE-EN|r? zeQVs^8-KZ>b`C*{!VU*yG&H;)r-&{mm(nmAa{*1?jprGD>Vi*-v(skL)&xtu)m(pP zK$baMO^P=E-JU1Tql|3qd!ssnzsiZPnU1I$d-D+i4ikPC_|T)}m2~QlMt^JLECKPn zEtqjO#EA0b=Tj;?l0J8D2$%;7sYQ`h#aM#wrG+@)K`cMfYAcmXoCs;~^#nFc99d3x zGR8F}OZH89NZPd$}h(Q(t-BwE^Hkht^i@2@iNRj;wm zvn>2a{WhU9+e)@{p9(n5{{c5=S-RK*KBd{tQmLs3+ry2*De!XKPQaVC)?j~D0d$_A ztez+E<96DK=5W7un%e#(XJ4H0wA~9aGtw^CI&C_kpdqpf!PzS~F_NX?jjDYgNP|r# z6iG}-2s9rd+n{%q4>t!b+@Qh3#P1DE_b0_`@0wloN1xJCSzm(POg_Z6jb6+GX5_EA z7uiUlJ*pqYtfr{|gfXE>FeGnln}y&Bz1hX8t4ieA9UvMYA5zvPi=K!2+PF!7(-7eC z^3Vv*3EzhSZ%~wJ6?dy^FcF|67uMjZTQba*{OL;X{bv0;aRy09VFhMk7XJ<`OR&Z%#FiuovaZ_bNG72_ob4OBH zM>T19LP=3+ZaHUnZbDTRWLJ3Z#H^KXH+ynb8KWoR&zlwP)=7xG%!P2Sa1qCdNFB4QFC!eIZ{nY zG*xFyOG9=@ct=A;aZgiJcS~$Ha%XxsXis5ANoNWzJ|J*ub}eu+H8vnMc5P5}Q6ND# zZFpKVctmV3a8qMTX<1foMq+*?|Z*w&YR#RDMSw>i6 zF+?(QZ&X%KZE9;-N;GjraaUDyLo#ntHcC)7d2(4#R5&yWEj}PaTWvTwNitL|XL4m> zb7defJT+5pS|C_1I|@%rR7qGfdSho=Xf$VoED=GHO|QWm07?Vsv3nK?*FIgni1G0S>JYzYkj~ zG2Ov`kC8nH&bE|IXc2R#|2%a#N6=SmK!Y9KmPOlP5|H0Y28Q)qmLYjfV-Q%xoBwn4 z*+rpR5=^$9;6XO`u9$z=-ZrzBMRufJMA{RktKX9kgeJG4F=`YToCrrC_r%C=9yb{b z6H}*(fcHRxsywBABG!n4Qk%XBd|V*rh#%-A43&Zinc|ksv<2Swsa0_BYXk0YAZ*dU< z@a|nvjy`?%DU;+5aAw;Wj3jQw_Yl+NL;@hv@@0=q#&36N(RHSJvSl^y4-PC#Kw-W9 zj&uyW?&u6qH;#=Q&s!lq&3s=mVZ4nmM6|KFldG2yx2=DpQKCFe&p)4tszO|%-_>@Lf1Phf69dmBsDCqif>J|k6hCQu|8 z4ht!COnTT|TA3BX6eClM{*s5L{isd_lT&NyM~-nx(f7EGDhZ;x9so>2!yu;8rWcC{ zLnKVUe?xzrOZielZDPYy35cS;wd>Nf;~M$6eg&cgWM^yHdz{4bHM&-Czs8?IM@vg| zkUtAV-5T&d_x(OSw#m3jcw9TvD-}7G_gRf1eEf9Luoz2Y1a?_5^Vk#cj3vVymGzSi zN%}1f3}oN6HCc}4F)=?oQ&!{!m?88_e}H&U;FW)!EK9!2!qJ?-em}OPu?*(i5OsI| zgk~nmLoTAJL z>Xeh&ACDrerfKQ^+kF^zI%*_h+!hcTEQi^I`Rq-8NTa*wQsKiMH{%j{=#2ap&3+AZ z=vsfev|xG?i4b_Nwp6fHFfTE(>Q}Esv;$mbnNT!Uda8O+M`2F!-wKz(Z z3)H-qdgY_pp=;XO@pNwW)NjORRi3Qo4Vc-kssfZwEN{ZU4?CD3!D5CNvo0TId70 z&&4bbXN+7~*E%>=H`Sl`=QaF*xcEmaQCiUz{b8DjQ?+W-jK=LKxbHAu3K%kPs_Jz8UKoD{ zpaw#|F{5%{DOY2{HNq*3r35E)j`>A&WoaP1U2%A&Jbn zMJBW94WW1mQWk?i5iG#Q^&akzBx!&B;xk-eCt3(ApOF9R=x}1yu1BozNiIUkUuUQh z+F<`16_asFo!Z{0TUR_uNrU;QSy#(d)ItNW+)m-+nHesmvFkjm9k2Q<1n+<3cq^Vx zf>Sj}aFlF}%{LUs;`uCHHU>%hGp6+F)W+{-G#5=oSAXNX$SV{=DeT-9T}dMqhTVpSARdZ?7&1Z{oMd`D$^58uN)4TN?j3 z)?;LDD~(MfE2v+`ozfSS+Y}SI(j|C6FJT@VeSzCybeB~Q&k@rv)Ode_>~>B$HDJ(2 zG%sX{GCi<09~PKko(UY6jz@Tf+z6jX+vI(s6;|1+wmn>Z3yIU}*^hyXZ$yU$orwMc zLROok&N*5cfy6T-4op)SgZU8NdFz`-@v4cU(t^E((O8LJwkwsm*4HbDnGDoM@{RS((Rlb~ByIGQc?QQk|BWr&EFtr10W(U1AT$3m$ zD*#OCIhv=9X+ImFeF;`Roc%Y6FrtP;Sw#KTa8Wff@xj;8qrdLo$6#rEyfCQFFMk!| zWafTsj|zg3Ra68D2*X7R_!2AYZf(`M=%BaL8osd@Q?p_I&Vpgm5-FO9fLqJ= zQC5h`-`KG+tQvpYxvyph$p9IYPM70pfkDqEbA8BBphq=;R&a3&u{RQ24041NnGa41 z_Yp=NU5dWbG+?e^=T&i>fwG^ltYdwj-p`RVf7Xxhh;z1%#&vsK3iaqUi5U$N38vtY z^#diJGI=jI$pLklf`s(zp;?nE*U&-#cYA;p>2eDraFP1rq`yHdgmb!})%! zXOQmDO+DK8LFuPk;n{wwfuD4o2)WGp&ELUV5RrctlD+@R6c)=}E$Q4fFMw+ZyVtde z_i)IM?u1daGh7I}G0!P|ZhJ7O>uK@v(2Paw(%5}zy1H)N7~(A@pT5he;}2ie)TcF@ z6#xOtHnrmFE6X{s$K6Kqa3t?XFe|7zFGjk&ku@u=Xqe`fbMU$tV5jnVkunL(e~>;9 z7jS>st0SShwS5d4wBEP)KAbB!G1;|T#!)@|@?Hd>&dbXTT~aUj*g|8B_$O_!6+;AU zR!RvQk@471G_;czyzt^OK>dc+&`pjRC_JEB{Juy0sB0WKWJrJY7C562-~t4byBf$J`Y~W-`%sL}w^c!E z@;RPzuvM|n?uL+Z5ObM$ul1~c2i+HUJ}xc0urdA&dkpa)q)DxUwN7eKwIC7aFJ|FD zzD5D>>}XyNO_&wkYETt;OSF>yVJZ!D{{;(I`T{(PY>GW6|{qDOr8c}o%3<1Eab^^vx% zCOPN`O}Y=*oJ8Nh&OC#C_6Z1?MfawRlk~T4=!YgxR9nuX8hE}LDvI;I`htpXC2Rvg!)4^~F>ZSK2a2fOlt@-J_I%}sys{P53)X~OtL@xc@}3IkhQ zSg$Umg?AiXxSR$=ylv*ALWw*xX<#P);LE-eAV~b8h;Ju|ZOA?#oN6#&iwUypQe_x8 zMOyBxNN}L}%&v5uLa?^=g z@7Cp{`jme^x|o~(+^Yc>@gE;BepXtWq1tA`g}1lHJe^ySfSrBH!`_KTo;>p4E*`;9 zY`Bw=Vdvcr(!M%J%i$Wl3FK35+ir`=0aVywjwv&1|Qu4iGN+iT{CVJ`lm{pz3%z3N9%LSB8#L{2V@nBBUMY7hhEO=8YXe-M5+lM3Sc8`5~F?G*$n+ zGz;4Z#KHbdU&hv89tqsTx9}mH7+n`qLn1IsD`=Rc)2cpGguvo_{M0oU2458@mK0DTc~;@vgy4x637{*>IB?ueY#E1@6)n zw~l1m`L(bsR>0~(SqXKSGuu)>32tX=x5HlYJT&Gn1#bKBnO&BkPFwI?v%x|RS z|9d=@H=KWFYHSOPno|93-}1sN{a!+rG_xrbQgu*3;#=h%*J2$BA3sN2=RSD3kuyT%3ss0A@Y?fL!> zFr@{aDZ{~}DEu>n@M+PM6jnx}2AtyYUBuke=bL{9BHPKrk>0fC>`>x98GKiT(pr?} zZgQY2vS)tVF}ADTTtcl@@RNW}PoSEdwVD;NFUgqH7%c(+b~1;go+rOg3A1R&z5=-KIqCtQ;YzSDlj2w3G3ES;d97NZLaH2_=;{+4>fEtD1?L?wU1GY(i~IzD zZK+mJ(cnwms8HQ4@dlSt1lkYppKST&WISWu5$JRVWe}GNEypEl9x< zrPP$(!yDPD?}Yoyp?!8~S4Vj31Um*@r(^-XCO+?XZq&#KsmKHg3ObkbF$!@(Z1D$` zvl&?4H@Hnq9Y|u!eHMLSfB%CyD|zi-U@}$ePPf}ZP}5}NY3N2}`Niei_pg7^O3MX8 zkx^j@aU|rrJ4Kn%CUd12G-R%9i&7|x^>%FNi{=F8JM>0@2h|e*B<%7ZTA8%j#41Xa z?dTv-$%k=~axKLlaglf?flm5C$A*{o4~7#tyrB>81g9X#d9_+728%}c@3(>b;HwQP zv0fx=!JGlE>0W)YFBUclEe+|9+5)ZIv)%n494sZzXUEu=n;ds#SgHuc?2rv?r?}c6!m`5v delta 5811 zcmV;k7EI~EEx;|1AXiB@V|iLOMoM98M^sKwPftctbuw>HL_=v)MRa#ZLP%w1a%_4+ zOjKc4X9_Y1PL1#00bwp}Ia9VeDPf}t^P;qojQDkUEa!^lVGGz)- zQdKc!WHwS}H$-Y#Ib%^aPh?m!G;&dFL~KY#VOm6Yc2{FKPeM+0ZdsF00Tq8YW>|A+ zSvhV>X;NWXNI6Akad%2#cVszAGFeVVHgIr3d2KLHb1Oq^a6<}Nab#h1Pfb7cxq zPb+LpP;GEgaXC(TV|PMrRC;YtS#DTCY%p|8VRbQ2dSY%+b46-yX=8tEWn)1|RCO^? zRylV_Gg5VSZBRy43Sw}2Fivc53N0-yAXj2zH$+GF?nP{Wo`KyffgNb04B6%5NL8{NWucd7I}RFn zQ{*U|&q$n6`*jag;x)*C@i{%8O|`docCI=8;=&$cmZ zXJ(EIA)kUG<1)K-I+{Id1_7B$ybC(A@4;M4$oHTp3t&j;^$x!0clG}S`Tud&FP*hM z^*)^yuNiV>pefn|o4X1e zk)9U+mmFG60(u;t9Gp*Q3UqwZmJo|_fx19QBLSL~KrPIWRH;8mj9nYy8Laq6v>}^7 zHNciG0_0QYaAjAfF}+OmkXyy=>qZdgZHW+nf!_mkkN)utYmX$kQ2?I)6X*e`fG*Vl z>s;C~q-meP$bf(8+YHE+kQtl$H~N?bT0w2u9PT7EaZiX)L3MZo zdh|%pG1QJFX$qy`$EDec=fws2y#Vg%lK!*FiPIE(9mIb@V)szLCVy6R3;N04@F9c6 zcLd-s41AOHi3ClzQTM%*PPUX}+}1Vjwfhpp>wPBA=syO8=}P|62BjP%^j-=)=OaZ( zkhn4Ew^>AC1zzY2AYJY=q}$MYHQ+bUd1okwW9Y9Hm9?vTQL13%p-hK6eBu_{mJzKr@!cNEWKhX3(uOHI+Wz(8##H>~`tiO`;J$fS&*EI5 zKvr&!$bbyi5>%kM0EYKi68t6`c^=$+LF2o}E;n1M&z_YrTYjA03bWXKZs%P+#~{DU zOb%odGPsZ9MPbT+)B9Lx27W90dDJad+@?!z!PtNDYNy$QV+f=a$wFc1S{+Lv0Z|h}jS^uXa(<=53;1ZOOj8X|3pllJ|FANeO;l zkw@}st9wod29xl76f$SFynG6j1C`kD&Z)8n4349xD`al+HAuB{Oh^fK;WC<6pt+^R zBoTj)Qj>-LEErNC^6UUM-HHB&Q)rRO;PoA^QoWYPEwnG{c z=`Z{(sH6kevyDM`#ZK07;~ZkyFzrxb1f|-J9if!CXhih31T=zT zDEwy4T^Y~|A)r3J(Qn3EHf{e+(620vjjwfGB(D9n>+S(cyx6#wRmv~#)0iFbNh(Zh z*cBWsyJ58w{g%p3w&hJ_1;G+st%Pu|^N=BXdecu5IL!Vo+0TMfx@hcqJz|dd0It`6&X#u5Q->K3?P=D?%E;X15q8`$FiUAEo-e?mYhz>bfJEa;z zwN{DHQ7R)AiDtcSKQp}E?g=WRJ2No|X+kpDrO-)!*sW4cAcnf1y4D^N5kvm;Mxrax z?JdjIqF88P+z3@zUCzubO|!4Wu)uQm`i0r>621ATt<7G!rdZE>Sl5a0@OOXRewgB} zxtoZE)o$0ir2 zZt~Sc9pt~GZ|#4H!uohc)((G~DV@C>nmiiMXT;~nV3MSPuJ=`b%>_%fF8!Avq~gaZ zq|fVn)Qp9z7E+c-;0s20sQ}K~el3`m+qf{T#3UVXQ&zi(#xJ2l1xRA4HmtKR<0jpZ zBHdkzitV>EaXvJ9bNK!&0QAEJA))&){LhFC7?T2TLgZE51 zBD8(}Oazgz0F0iY3VM0@C2xYEZ(AUfP5)=S&~Jbcc^_hD2oL>!Hrok|cV-)+^NYn> z>_kGbNocqz_egxHZ8*S9bJGq?rTB(VAqDTpN zEmdhib^hQK0i>(>XE>$Hn;e3;x{rZQQ+-s_4vS=?Q%cHSOc#IM&fi7xcJ|&+*He1z zVo2q__CqW0u8uOu3^a11?Zb|c&q{zSN9fncY&eg{qQ7CseiDBzNlnj!^yk?vDGqJU z5#%1ent7c-h!HIB1ii=gL{Fch6AkMXdXYv-S+vK~JnM=#)A#neGox2ItiX-uE2%09 zLxo3wp$BNNrK;f)ZmBj|;;XUh8S}sK-Cg7747i0G2Ugv0K*nYF1w0oG!6N`X5Y<*) zr}W7QqT-H~9iM;Oa;QalTNsw2<+9$_ZDIM+$<;{qt<)(woBg03}B>GsPotq(h*vP$BHFbhcF25m`f? zr*t(D_3YK!u9junY1b7WZNtOWd#WvGZ;y6;66Eu!H$M!xCR}Ih;oEJfex28@vmg;8 zz1IURx}1OFn1FD|4UM@oK0e6brFr}P%`M;#dg;~ivY#f;YW9L8b`t@=YVv>n79HxPxT5!5U;oAMeTRyx3e%tXH!AQE$H#* z20&3#I5Z(ay?~J3NU`z-sn5`fWq8t66mEi<8Vt*EH@QCeb>PxXjAMWA94Gv4 z@B7na4mu!U<1TPSa_s?`#M(IunjRz|6gp%NOx&ztB6-0YKeo%{Zsf1OB&DX{_qN6& zl4sLfqL53~mYALAbX4b)+cuylj$rXe<2!#+LN&OBQE1_1B{w4Dmb;&s1pw%&aw_f4 z9sd%irsOjH%1>_t|2z=Bc!mb%2tI~ z7-5%=IiKfz+sw8K3053e36piKQnWBSstGDm{%bFCOTal55f-XjS{~hv88% zo9#j$+77+ek`8pNPfePp=)}^IsfT~bx116PWxWKanzo<1b>m3X z{WQ9%fehT_=W+wM%j5Da$pH}Vu>rQGe?@ydaAGq&+X-4u=@{#hj|ECyCwHmRe~AYq+YJ*tpyJ)o(82 z=#n@}hmf|4ERhfQv0%XOavRt65js-ZV2_wRq4QZX`$Ipt@EI|*-o=0NEMEr2W;rO$ z-u-Rw`Hl!%u%9oT`EqiO$iPtll7Dm%Og>91U;X8!&m_!vaN={7&Pk*q(cS2PTrjQ+ zDf@`tZwag6lWIqA3~;k%w-UYl?af`)5!JLYq!y1cEaOSO@-*CG1k&^`xx>3shFcJF`P9)mcSl>)_xpHTxb zSO_q#{wCj=1;0t6Qo1>wTfKb8b>3)c-YSK9u~Ha@P4B)ME81Qdd8n~+G%&C@MT`EI zr`ZZkO-R2-yHn(_K-W@vw}amm=bP10Z}k0UiD&pL9U41;IrC5Y(RT&RR`{{2;{LvK zH81*!5C*{R0^xtgTV~9=?IZ~HWqM(0iaR9ZjlA~S?uwLAB3DT@6%E52QsZ5luO%QX z%C`MUK_RwyUKU@VQQa*5V3}73ulN2KA(ltvv}Y}*O$db$f=oC_3YUqFyBQ#Aw93y} zAZ;}39V}oi-dSFfs}g;qiMaDyMBGSek4!JF4o+V~e|Ue>z={kRC=Oc@m-2G+%|qTJ z+nwN71#!#GlR<2bT;+c)+3+YZMJaNYA>MEYp1GZK$SD1BuM$CWJ7ajrzfcNc5@AB7 zbXslnd#O^Pg>FJE-Z@iwvJ9*L#V$hGtdSYZcCJ+KzuOrU6fxtdEb`310M+FI9{k5U zZ?4SfKly*{p0r+LRu|<2eySm>K=O@FOpIunemzpi{yf0KanNbNaww#{3p8Dl8jv)Z zH`fZk6|BhkY&9({yJ^ep#=-rQ-7_Brs^Ok171;#ezmW@?{4TTpT!VjzwxEqy-HvnV znwD%(BqA@wa|8z32T9CATy>F}Yd}wUPkOUpcgug{Q6scy=(Jyj)Eq+WIiwDL6B!m3 zDLuFz)K?~(m9FSmVBTxmpD5QWm)^fX&Hn{nbO{m!xv)~ zUu=K$Am^mIFPyPzBBb)1@u7^900X6K`8VG))o7|-ApXz@Or@OV%E7CxEfJ-O!klPq zkl)>7?ypATSZ`dum`o6EpQV`cnUYP1`AW< z7OrTUdE=~yw*IwN^9No0Y=($E;K@7~S#5ujvL-uOI|!day7ay@Ft9bxqT3tLIp@1< z3!W(pA!;GNWO%pZX2%DgYl>nEK!R)^zAL5f5mpf;k?y95$jNa zbW(~T1IRX=HE2*aHoUveQ(VTl6fE*+CTXM2rqX_DW0P0I)n2`Jb17qDSILJp5*&Zi zW6y(OM~hU?#lfXDZTl%*oaabL%zFQFxWbGlLvLG~0-g}*ky_4H;Q>~8kt}v6{Ug&cyR0(29&%7%a7|2hE-e&-~+us5{&t=O3C3F8c$!_59-*f7JC zfFbM|73${&iRxNe29TpeI(9^VOoe6jaEB}~gMYN$>3P=XL+LfX)agX;N*z%z`V=ID zr6X2j9dt4pu+6pC5TvqcY~&Hf$#`F?$?ABsw0rHd(Rq|@&N0~iNDO)>d~JWWjRAei zn0S9;Re}Ar6%?&u3!bNG`Z6nokM&*lJI(iyf?!44Cy~u$%*A>Vi?@@%DdM2zjPQAY zlgY^H#?<9q$3x8;MF=_)%5}D`gUO`Vw82XM+)m_3UE&nlnY`26*k@OT#@nVGQYWd_ z)c4{*eE_HuHw0Nu!dLj!fx&;}DKPc7>JUnzk9Rliv@U4+_K5uY2vxWk$t@%X&eT?o zY52VdU2Po2SmuOTyTK$-(X|Je8tQZfK=!ua%H8vS>TchFB9{NiEswVOW&`!Yb2r26 z9hS$k#syTt+&s&GO>IBh5dz`zH}~`{{|bFGx)AuVxYSGUBOvHTq1}Il?v9|Qs=HY7 z>5yQIAEZ1b8N*D)atd&%%Qa6IZBrv7K4GPs&K!tQ-7551(_IW<<3xCx-`FitKD6Xv z?@Jo5&I42FzDdNN(mKCh)`>sIV5za9>U|^5WeOzm{ zRw&@&-|BZwJ(&k(e+qxBbQ4B6e96;M$Qv~TN{gKQ(DGEwCi@dpYNfssV=4q=y^GXY z7Sn1P_^a2B-MvY?Saq6eCmybN#>$~UBK)i&S3VKoi5wy11fG*1LFmo!TF?sPB_VhU x@A^hexWLO(6)Z5-o}=e5Jz`~~GQRWa5i2$wSS_@WBg`^>1IY(EVjeCjY6ZaB_oDy+ diff --git a/secrets/wireguard/elisabeth/keys/elisabeth-invidious.age b/secrets/wireguard/elisabeth/keys/elisabeth-invidious.age new file mode 100644 index 0000000000000000000000000000000000000000..0219ba94bba8bcace510fdcfd51f58d01942458d GIT binary patch literal 827 zcmY+<%5M57c zC5nNz-l|cM_SXjLyLxP1-Uu-6rf^2l6Nd|9p`WnryzyEU%u=Gvaw%A{vpp?}+W;#B z=~$o{8qlz;jKSK7$T{4eEG=?@i`LY*Q?eV}y;cshon)@*eAp0$wktD&CYAn{1x)Q? zu@g4-WZa7lQu3o5_fg#`BFG33^%7kqoZ!^j4h46HSJXBFY4i{hRK;V>5V@UG3eL5d zk+z)xn9#9jMClP0bH3cmx2*qPm!#^K=~Ba>xTCy`mR6P8xS;A~#T7YRVTTqpI(i1n z0?BGHw?lmJxat|n>cI#Uf)n#g<} zN9T%Vy|I?|XCF_)%0Jcq#ESY&>evo)LMhhsHgqU@oykzPh*w6KOKgDgq`r4o!T@8R zQ9-*e&gXcsCA_n{O4aTpVB|HS3IBzCd9?`Tl^{0)S-@lBYmx5RnXTweF+-Yzb4aNCuNfrqk)9Z^?}g1pvegmh5$|IJ9bfNG>YcDJrJeg1E4yXj#yf zjePm`cYpr&&rAC5_kTUR3cr2$$2VUYkN^JV{?{+|@4uA~KRqLwFP=aB`4jN`&i!{@ my?g%rwfW$|J@(0y7eBn_Nc*E-uReJB^wICHe*Eygjr}h?(ie>Y literal 0 HcmV?d00001 diff --git a/secrets/wireguard/elisabeth/keys/elisabeth-invidious.pub b/secrets/wireguard/elisabeth/keys/elisabeth-invidious.pub new file mode 100644 index 0000000..d427d93 --- /dev/null +++ b/secrets/wireguard/elisabeth/keys/elisabeth-invidious.pub @@ -0,0 +1 @@ +34nMC0dvuS70Rn+685ExtKqQcEHdJvUzVvTcTZNwoVM= diff --git a/secrets/wireguard/elisabeth/psks/elisabeth+elisabeth-invidious.age b/secrets/wireguard/elisabeth/psks/elisabeth+elisabeth-invidious.age new file mode 100644 index 0000000..14d0a91 --- /dev/null +++ b/secrets/wireguard/elisabeth/psks/elisabeth+elisabeth-invidious.age @@ -0,0 +1,16 @@ +age-encryption.org/v1 +-> X25519 rqjulMMqQvFeDApkCZo4KQvgVbmZ/TLOpy3fe9CQCTc +j3JoyoBWSZtVDka4qqquips0HmZakBuToEjNe+ZEccQ +-> piv-p256 ZFgiIw A4e5w+3n+gkOMBeSI5VklW1kJ3846byVint8b7HGer4Z +jY/O+b0JwsNxpSvEtrWB1IaeVACDagAaqfLmoy9VGrw +-> piv-p256 XTQkUA A8WfkKXTvoJ4M4gX/t3xaK8wy2pZbLO9dBHrlUqKJHjr +I6WsWbqg+DIrOR7cJCk5cHz4gz0d44RhcNSqUU/9VSA +-> piv-p256 ZFgiIw Axn28eRfih6xjAKMw9ZFXHN4jKs013d2IhmLTAwl1Ixq +RldIXTSGdfjC5o4xzOttzyX89zAsuJGitSeoyts62mo +-> piv-p256 5vmPtQ A7sqh4eBJsdzALHPVdbk2WJ5YH0M8iSBX/wP8DtI7Mpm +tq6yVRXYXKwQD3qbvvBdF4AuFehgvgS7lq2DkI5hI6Y +-> s?-grease 38 Pego6HDg _|QaxRe +rexAgfgN8bC3JvURMFuCxfHxnIQ88B2hvka0BmvM7XJSWA8gAGLxjhOr0sw6iygG +6R+lshVeDfexCFxX4KWENEVzb9f4JWCqcGA +--- NtjNfHsaetHNRBHHwX0ncFGEb5hewYNhg8/WmJCLg80 +OJZu#|4|/kd n^@߅3{85Gt0m.!׹X!Q \ No newline at end of file diff --git a/users/patrick/firefox.nix b/users/patrick/firefox.nix index 672e8a6..d17f04a 100644 --- a/users/patrick/firefox.nix +++ b/users/patrick/firefox.nix @@ -39,7 +39,8 @@ "media.rdd-ffmpeg.enabled" = true; "gfx.x11-egl.force-enabled" = true; # enable if grapics card support av1 - "media.av1.enabled" = false; + # invidious kinda depends on av1 + "media.av1.enabled" = true; "widget.dmabuf.force-enabled" = true; # General "browser.toolbars.bookmarks.visibility" = "never"; # Never show the bookmark toolbar