From de6275570be81d234d6532396236b3323921ee0a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Patrick=20Gro=C3=9Fmann?= Date: Fri, 22 Dec 2023 20:06:02 +0100 Subject: [PATCH] chore: system update feat: bought hetzner server --- flake.lock | 86 +++++++++++++++++----------------- hosts/testienix/net.nix | 14 +++++- lib/containers.nix | 3 +- secrets/secrets.nix.age | Bin 4262 -> 4247 bytes users/patrick/secrets.nix.age | 13 +++++ users/patrick/ssh.nix | 7 ++- 6 files changed, 76 insertions(+), 47 deletions(-) create mode 100644 users/patrick/secrets.nix.age diff --git a/flake.lock b/flake.lock index 776b6b2..f34dba8 100644 --- a/flake.lock +++ b/flake.lock @@ -11,11 +11,11 @@ ] }, "locked": { - "lastModified": 1701216516, - "narHash": "sha256-jKSeJn+7hZ1dZdiH1L+NWUGT2i/BGomKAJ54B9kT06Q=", + "lastModified": 1703260116, + "narHash": "sha256-ipqShkBmHKC9ft1ZAsA6aeKps32k7+XZSPwfxeHLsAU=", "owner": "ryantm", "repo": "agenix", - "rev": "13ac9ac6d68b9a0896e3d43a082947233189e247", + "rev": "d0d4ad5be611da43da04321f49684ad72d705c7e", "type": "github" }, "original": { @@ -330,11 +330,11 @@ ] }, "locked": { - "lastModified": 1702569759, - "narHash": "sha256-Ze3AdEEsVZBRJ4wn13EZpV1Uubkzi59TkC4j2G9xoFI=", + "lastModified": 1703162528, + "narHash": "sha256-pQ41wN6JlStkZOhRTIHEpuwVywLdh+xzZQW1+FzdjVs=", "owner": "nix-community", "repo": "disko", - "rev": "98ab91109716871f50ea8cb0e0ac7cc1e1e14714", + "rev": "a050895e4eb06e0738680021a701ea05dc8dbfc9", "type": "github" }, "original": { @@ -791,11 +791,11 @@ ] }, "locked": { - "lastModified": 1702735279, - "narHash": "sha256-SztEzDOE/6bDNnWWvnRbSHPVrgewLwdSei1sxoZFejM=", + "lastModified": 1703178811, + "narHash": "sha256-Orbqa8DvszYZ38XGWAs43hVs++czt2N6/Y0sFRLhJms=", "owner": "nix-community", "repo": "home-manager", - "rev": "e9b9ecef4295a835ab073814f100498716b05a96", + "rev": "fb5ac0c870a1b3ffea70e02ab1720d991ce812ae", "type": "github" }, "original": { @@ -827,11 +827,11 @@ }, "impermanence": { "locked": { - "lastModified": 1697303681, - "narHash": "sha256-caJ0rXeagaih+xTgRduYtYKL1rZ9ylh06CIrt1w5B4g=", + "lastModified": 1702984171, + "narHash": "sha256-reIUBrUXibohXmvXRsgpvtlCE0QQSvWSA+qQCKohgR0=", "owner": "nix-community", "repo": "impermanence", - "rev": "0f317c2e9e56550ce12323eb39302d251618f5b5", + "rev": "123e94200f63952639492796b8878e588a4a2851", "type": "github" }, "original": { @@ -873,11 +873,11 @@ "nixpkgs-lib": "nixpkgs-lib" }, "locked": { - "lastModified": 1702210144, - "narHash": "sha256-s0IJiLUxnf9PNl+lARwCBo5UzNgfNjTrlVwJG27VsLA=", + "lastModified": 1702814943, + "narHash": "sha256-tNKSDbtoEDfCTs30dyW0Fcj4KJpjzTRASL6f2BbuSKE=", "owner": "nix-community", "repo": "lib-aggregate", - "rev": "9237b96c80c556f28d13cfa8e3e6bc4d95e437fa", + "rev": "ac8b1c4cfb2f9111e709aaf503511df354e86733", "type": "github" }, "original": { @@ -894,11 +894,11 @@ "treefmt-nix": "treefmt-nix" }, "locked": { - "lastModified": 1702743345, - "narHash": "sha256-xvRuGxFJLPbUPrLke4zf9UiqZadeLzV/gSfFTum0K4s=", + "lastModified": 1702815315, + "narHash": "sha256-LEpv7kvB7KPj/6BoNYWMcVjRezTJe6FNmg5kCKZQxMk=", "owner": "nix-community", "repo": "nix-eval-jobs", - "rev": "4a1123c42dc9c4c07863a4bfa426f7fcc8f12b90", + "rev": "3c6e1234af3aa26fc60d0969619cf6806ec51639", "type": "github" }, "original": { @@ -936,11 +936,11 @@ ] }, "locked": { - "lastModified": 1702291765, - "narHash": "sha256-kfxavgLKPIZdYVPUPcoDZyr5lleymrqbr5G9PVfQ2NY=", + "lastModified": 1702864432, + "narHash": "sha256-xR5Igg2hnm979W3YgMDrSjErHFhHo4rbMboF6DC0mbc=", "owner": "nix-community", "repo": "nix-index-database", - "rev": "45d82e0a8b9dd6c5dd9da835ac0c072239af7785", + "rev": "4605ccd764fac78b9e4b5b058698cb9f04430b91", "type": "github" }, "original": { @@ -1025,11 +1025,11 @@ }, "nixpkgs": { "locked": { - "lastModified": 1702312524, - "narHash": "sha256-gkZJRDBUCpTPBvQk25G0B7vfbpEYM5s5OZqghkjZsnE=", + "lastModified": 1703013332, + "narHash": "sha256-+tFNwMvlXLbJZXiMHqYq77z/RfmpfpiI3yjL6o/Zo9M=", "owner": "NixOS", "repo": "nixpkgs", - "rev": "a9bf124c46ef298113270b1f84a164865987a91c", + "rev": "54aac082a4d9bb5bbc5c4e899603abfb76a3f6d6", "type": "github" }, "original": { @@ -1041,11 +1041,11 @@ }, "nixpkgs-lib": { "locked": { - "lastModified": 1702169224, - "narHash": "sha256-aOrQq0zzEMcaxXoiA7VWWJlwp7F50cOfTj6LkU59RQg=", + "lastModified": 1702774034, + "narHash": "sha256-M0IsUA89EKHL8IDx9bf+e2W2l1kMRpaZ4h08navMXig=", "owner": "nix-community", "repo": "nixpkgs.lib", - "rev": "2be0b7c27456d30195f65eafd029074f731f1978", + "rev": "9b4f1493009b8d2f55a525a01de10addc9a0a752", "type": "github" }, "original": { @@ -1144,11 +1144,11 @@ ] }, "locked": { - "lastModified": 1702757751, - "narHash": "sha256-fDmMncKTNVVypMjv4Bv7F66MUdmMC3qZUyC+uVjsLs0=", + "lastModified": 1703261986, + "narHash": "sha256-+OPGb6fOF1wpiCNnpnDHvLkwnhbcAx6785FyNdYupkI=", "owner": "nix-community", "repo": "nixpkgs-wayland", - "rev": "13140e9610b7de62b3f3e1e9d17f779c8d9fa21c", + "rev": "e977dcdee6b4c944b6309cd7973fd27f73efa842", "type": "github" }, "original": { @@ -1159,16 +1159,16 @@ }, "nixpkgs_2": { "locked": { - "lastModified": 1702667777, - "narHash": "sha256-qpgZVpFrOEgW0DimJ24UXeFh63TI9fQFXxc58DPtG8Q=", + "lastModified": 1702539185, + "narHash": "sha256-KnIRG5NMdLIpEkZTnN5zovNYc0hhXjAgv6pfd5Z4c7U=", "owner": "NixOS", "repo": "nixpkgs", - "rev": "203ecda835bcf69633df7183459283543dd4a874", + "rev": "aa9d4729cbc99dabacb50e3994dcefb3ea0f7447", "type": "github" }, "original": { "owner": "NixOS", - "ref": "master", + "ref": "nixpkgs-unstable", "repo": "nixpkgs", "type": "github" } @@ -1227,11 +1227,11 @@ "nixpkgs": "nixpkgs_3" }, "locked": { - "lastModified": 1701000000, - "narHash": "sha256-YclZV0n36KnkEZNcHxWqmuhdBa6eB8Wdmwcf5EMYEp4=", + "lastModified": 1703073600, + "narHash": "sha256-XSEHNoc3h21foVeR28KgfiBTRHyUh+GJ52LMD2xFHfA=", "owner": "symphorien", "repo": "nixseparatedebuginfod", - "rev": "c8e79d5b228b71686172ff6626394bed2ad7b7a3", + "rev": "c64424332b6198ed1411917232a2b0e3794dd09b", "type": "github" }, "original": { @@ -1249,11 +1249,11 @@ "pre-commit-hooks": "pre-commit-hooks_3" }, "locked": { - "lastModified": 1702653568, - "narHash": "sha256-SwrNBw/1/oMURAa9/8MdvC4b3UYohoMAvSazeIt3hkg=", + "lastModified": 1703260550, + "narHash": "sha256-wPe+0oCgzvf9Ixscme+NUS4iRX0n/alJvt3msnu9vPA=", "owner": "nix-community", "repo": "nixvim", - "rev": "b3fb1c4c8189bc873911da3f31d18082a0721fa9", + "rev": "e0521dde87825e4ed16e1ac5b6df9f1b7e60af05", "type": "github" }, "original": { @@ -1485,11 +1485,11 @@ "nixpkgs": "nixpkgs_5" }, "locked": { - "lastModified": 1702559747, - "narHash": "sha256-d6AmQp3M00WMPJquNfGVzIol5iojD1pi9slek+4N9VY=", + "lastModified": 1703004037, + "narHash": "sha256-ceYPl/ML0kQBCUaOw0gG2TxHHEl4k9xivFpsdlKidIQ=", "owner": "danth", "repo": "stylix", - "rev": "41d218597590a89324a4b7c50cf0bf088a7214ba", + "rev": "d14ac4912a9ab02f8b49b761e9e4b9ae836171af", "type": "github" }, "original": { diff --git a/hosts/testienix/net.nix b/hosts/testienix/net.nix index fe100d3..98e070e 100644 --- a/hosts/testienix/net.nix +++ b/hosts/testienix/net.nix @@ -24,6 +24,18 @@ boot.initrd.systemd.network = { enable = true; - networks = {inherit (config.systemd.network.networks) "lan01";}; + networks = { + # redo the network cause the livesystem has macvlans + "lan01" = { + address = ["192.168.178.32/24"]; + gateway = ["192.168.178.1"]; + matchConfig.MACAddress = config.secrets.secrets.local.networking.interfaces.lan01.mac; + dns = ["192.168.178.2"]; + networkConfig = { + IPv6PrivacyExtensions = "yes"; + MulticastDNS = true; + }; + }; + }; }; } diff --git a/lib/containers.nix b/lib/containers.nix index 340c8f6..dbdec8f 100644 --- a/lib/containers.nix +++ b/lib/containers.nix @@ -9,10 +9,9 @@ inputs: _self: super: { imports = [ ../modules/services/nginx.nix ../modules/config - ../modules/interface-naming.nix ]; node.name = name; - node.secretsDir = "${attrs.config.node.secretsDir}/guests/${name}"; + node.secretsDir = attrs.config.node.secretsDir + "/guests/${name}"; nixpkgs = { inherit (attrs.pkgs) overlays config; inherit (attrs.config.nixpkgs) hostPlatform; diff --git a/secrets/secrets.nix.age b/secrets/secrets.nix.age index 31c01ea685b719bf16d451978c5507d316c08a7c..d35e92e1d6cb132fd9df33e75665444ebc84dd04 100644 GIT binary patch delta 4221 zcmV-@5Q6WfA(tVLAb)5~D_U7rHB2#0RZwoXi!dbPi}E`Gzu*~ zAaH4REpRe5HXvA3QEOE}AVGL!S8h&AR#ienHE4HhLt!_0Q$#s9aanUxWK3}@M?_dg zO;b%uZDMmyPf-eZXmu-fP(^WZb5K`fFHK2uN?Af^axZpMOmss+QEN*?LNR7ZcWrlC zOmCA<0TowmZbD=#+Na!q4;ZDMygGkH;JXEjJkNn|%RHgGvqZDa~@ zbUAi4H+FPPa$#dwVOlF!V`gS*RcA&}K`T{eZ)taFD`7Ema78sqN>P(f0Tq8RcT-|+ zNmg)nO=VDVWioVHZA3^}b2u_`L1$BWT1Pc$YD{5uW-C!kHCYNoLT+a`aau=fGj2{x zNI_3@aduQ$K{$6-OlfdIHfCy3WoTx4cS22CH*X3pJ|I3Wa4lzYWnpt=AX{l}P&hm{ zHXvg|Lt!#tb|55OF)2D^Qy_nO3Tr_MEiEk|Xe)O|Nij1qb5BY+F>6OPM|n<6Xm(OC zXi8}@D{wG%GgCD|PH-|sSwl$*q(A7Yu64urF?JAhw$`8i{ekgquL=7>9rtY~UwEInGi+TzNvF(uK%QR&LO*RG1p?3H>m7C>up-~{bnoJ++o@AEzy{U^a< zk6keFdT)>mpl9g&cVaXCK zQua>fMB&)niZfw_7z~upQq6ogoz^cUe4^3+Fvnk({_Q|23#QQhEJJESWTulCSHxn* z%Qr3D|5ArmXbW8g3@}@hk8@$BMvzpHjL4}V7epN!7 z6aUb}L4UnJUC^}L#l7az13zP3FP_pVd~YlTh@i9|JD1TXq{NqN%(CBWw1O|sensha!2L@u zw$3_YtTTTKa~})V)6fHAeRRjsDIQSw9>P>}%BwB7*{$oJNsINdbg_HcjQy}{4QKG` z6ucr4Xgq?dkvn?XQCCsDLN5*tNTy5pVL2=r@OQ)_j{fnlyHn4}e%&QxcPqi}bT{)V zswhm7Ltey9+b;XkDA&=RDsW%tD%;Y`1^$r2(G!2dKRB|u7{3yTEYdCG?2*W#Yv*?h z93!ER+>Y3m;7+&<-Y?GX;1$+f1F>M6l>hRY_SD=cQMj4Mc#^bv+^MM&cW^(>3YYMr zXcsz~E40<-(QgeSUzXf+d+cEqM&DC%_k~b#4H+mP`}voR!_yPSAoIZ!j%lA`o;^ID zKe&ID(65M49J94E4z_O>^H)M4_J5x>&R~{GB%%ZGj(_`}V>v~-O!6EuD5Xv4m+c}xMa8jSXH-)$c- zEm~P$p}vKM=*RNm2ovnlTDomh(OfNL&>DZF`8kDzwKz01M8+w~w&gl5FEtVb!VH0k zzKEw30cQFE64zWVVDuN7?S-(Sqp-IdI&)sn+7&nh%Tvr&QDdC((X_%;JTtn7xzjW_ z_CB?FsC>Nj_p3*m4jr4tG30LOvlf8Dvg>;V`PZ#@F`eWvQu=bNr(ken&8Grpd`^FL zREO;Un3&P7tw?STO)$k&hhQf;96V5h2byNWobk;aiXHdQdG_YGES#n||*h|sL zN2`x+FCYI?-Bc3P2l=MuFZR8wEN%vvS#GMNO`$$}vgjCpTQvA0iy4@WVt<`RzL~Xn zS?^1U9b$|z4lXUk?a{5cqm#Yse(ir&p{$(o0B{JKgwPJQ_9wa;dyLT2E!CvM6~ef+xf*nnfy&uksW9F9fE%s#(t9JWp+{a^sT1@>GusrzcVTCFd7uh^|lYW2S1CR6} z#?alWqXci+*o`3FyPRvU3NqrdS{G8c#|sBw-Q{fbTz~n1&SsFi$A)kgCWAy z{N{`odbUea3g~uEdI`ril+yu){spN*>t6=u6&drP8cB}4qOmI zDq`1xK$n~MQWndRDQ?7BN2lO`aOgPT;~Dd_c(KaM1ig*cxuOg|(QOhD_Qp4{C(V)Q za=kvx#5o|qz#17G3pP)2DYS;zWi4xnx&bz>17SVspkWF@t&&P#c zPI|xKLS_I;atY;CbUz33SF(FkO+&inFyX&}OLI(`>7@-mH#FDVDexKL9A=oI-Vw+Q z7Rt?(%>BppH~gzAc3%v~?ga(i&>W~+%z;o00Xn=%V*?&?f35&Y^H`?V(Jde7v-6~} zN5KgjVM`3%2pR;-Lg9Z^WO{`1pop^Pv}PLRN2k$bZsKlPgE^HMp+_fAuL$D`9pVn! z1|KShI!S0vw+*Ica9MgM*FYNvaD(PE=3vPzu_d3*X)8LNFJL8!H`tH8`QXY|yMEpS zamzw#tbrWqn2;@UxNW)f6# zYH?XB-#lxR0Ln%qNKE)f4UfCy;ym2L_2RN}J#P7OPt1Gffm#P!3f6wU#{@VJeIMHW zSkZ@VA&W}XvZ{SG!=v4hloYN}t)Ue%<6*c~bcW1qZHIqS%VBGdmjZTJG zC%>2q@Jth3Png_Wl*OWc!LO4#Mzj2x>Vd(8XK))O#7gH(=@j1=#wP@dak20xC-gre z{;Mclp9MazMjdCtVA?kA@9ku1K1QGFITC>2c&pl=B9Wqjo^}GZ5*8WrgZfu7iSl`Y zr0C(t&5eK3HZX80fN@~j%XR7{U->m4g4j(Bd~Dz9^aXqAJ3)e|5q&_Msdpp`h{rub z!6ES?A14-o-;RDaI|_J45a<tzVw*FdB?ldppC=LgD=V<+Zx9Rm zLUH+90=SEVpgJq+xdU@`_`|vo1e2aM*R&m-bkl!uWNemb6X$gFS_|w11c7rX0Y@p_ z$`DrYDi`(Sn;NY?Z(lG?MLW_{4@@I32ZOd*gXqfirsU8EuA#KUv#TB923OpdyP;k0 zUIf_1C)r+9wqDz6Fl{GDJC4rTw(0c60`x1ai}T+VzWfxD5j7LdBGix=c3;IHr3@bj z-H(4R>_#!AJ~pttocBk};37i$99BmmTbP()gzh0)Gwy5?ljnAY-zLwBmEEl2o`JFR zR;_>c)Qif<_-R7-vWbREy39cW%0v+M?LOfOvrc0uf7dKZyi>@ix(ZkD$ll}0;Vr}V zt7)~p>F(o3gCXR^5$quw^4k`zy1yr6JY8K#9Zu7^d^{sQ5=>!B51*qkX%G z%_$C+aH^yhsG3Gxkj0%f)a_h1`%CS6rF+y|UzKexMXph1xF`d={Y8;7@1QN*8Nh!P zzG0jY?2q!QpJS(sh39Ow2)QLnbu!|q4c`+dghI1rIF=t(K`FYCpOlBFU*PoV^^Mp% z4^$l>aU`;pWD8r2b2uP6t3v0|f26QK{GFq2QxLu-LdRf^-0Wgfz+<$wo^_+Ed56*g#atIzbtMc8vSGMB+4)jKq2W!|AJH%eN$ zuOi{LB^017%Ehr(<90Qj0S0lO!}G}4Ibt<+G>1_gt7^1bOQ@qa;x%T;#U@n8C{_BU z5lqbSpl^CDPtDTZb3%zWW`WDpicIYD+6Idr?K^E@OhYY9bA9z65{+W zWvf_bx&jT0^%`gkj&W9WP!bUXj#Z%jP5M z>mrGqwW{vTn|6i>_Ht0hRJm4}k{9XZsn^0@kmDe#G4SPs%CX0vGc3tNs2W+T%HpNB z&Sl}bXsCib72W=Ymup3J$6SBKbBoN`l#(@KKYc9&UjSFFjp+I`%sSdgFL8P37kG-w z7XN->=-q|%wo5Ou9*20-lIC`MtOHsFW6f{oocP!`FWymc<>aw|5UQJ=?JNjWgj7)A zo>)HU*Ea2!oZKS)&-aV!t9y#~qh{!h0=^0cU$XCPra~VxY7W~lOl^NJ_I=7vjLanR z!1g=z;Q}TI^AR|3Wypo-ChM5x;bWy(65mfzyc?3o`oTnx77d+}!92c;2_i>|{tb`_ zLE=7b!R3%)O_72bO$l7r!pZD2E7QF99S<|C2FzA#ygS#@bMK&}}R5E&XcvD(+RSGRW zAaH4REpRe5HXvA3QEOE}AVE1bS9E1&L^EhrV{J%zQ%z-7WJGjCc2i7vRC;b}ZBJ)+ zVRtZ1Lvb%`L2?Q=R#|R(advHEMRYV;aBO2lOJ+7#F-p}MO>$RLD?th^EiE8!c5X{FD`+o8 zHhM}iOf`9MH+g19PhwYZaCk6cIV)*Nbwo;RYc^{*Om_;RuEV>SfXO$;_v;kuyvmcW;u`MD`|cPRz7^S3t-da$ic z?tCZaUCd?)IE{Eo>|B3#K9rzNWET#BvJ1Gpf;^^^3Fb8s(&h`vSY|1d-&{F!9atLp zS^s&;5)L$HiSaR*F5>amOAKs3S@nZtJCcBC$k6s?a#}@KLYPVkGB|1l(A2B?|KE1_ z`*vZ>4k5Mr$i#}o#Q!+CQN`(QF!54w=iX*Wv7hM(D>_O24m*EulK2vcguy6i_R9Ii zAiIxLETrw~Y#iVlU$;y}(%*aym))B}B--`voCwz80Fg+5%Sn$shyro$c%k)1kh!DS z-A)M$7q#(O&50s%S@?Ji-1p}8Es8(o9`n~I6todc}#w)CU%QHgJ%TLW@I7sh@S>u&y0V=n!OoC#A3#NmKboD&^losK+Cn}J?o1Fu*?iH61B~>17@)n&Xay5_Yb?|}(=@V} z$e{R1SuKAQbM|v!QVT6<9O$Y&To9+z9ujZvA`3s2r_TvbizE*@HPM>hV|XEFBOtG% zJW(*t2#F(|HT!+rgiERgebv`o{2S?45LOkl(lO0nj72`)q4a?1^8GD%D1C>-y|Go< zSP4@@TB^GB;;#3l_Ej#o`#JF0hcq|>==Qq;o5_F2(rzgQPD=4kq3fOui5_k5g3+Jv zIWD34D#irN(`h77{65led-`$;^d&j&J(!&cYCf2>D( zVtH%`dLXf>AtipqxiXy=+0r<;-jhG)})G5#V+BTUK zIj?`tWL$`4rw7%%%>@7V#$&pY|NbvlGiQZKs#;V#;6CFxm7()z_jTmpmx%9sZ)rH7 z8u_W^y0{#G-0Wd*W@E|jq)d1t$Xdmz7b?Wlq|2*#tLp%ph(v%$`W*had5aO=X#g+S zgd{Gh_U61_o3-mwl*5vVB`f5V`M~38_1%BJAG9CLUVv6pabB1A(10C zu!qboo5#@hk$e8E5Uvwk`SKeNjA{ZK+Xqd2A<`42pH1P-U4wNj!+53MO zVKaV1_NHI^bN!HNy;0bbbPJfNZLzY5YtupT45x~KhY zeY1|B!f%4))p|5Ethj9r#yNkpUuA!m`NrIy6@Al-bT7dWPo(~_O#f;FS;PPpM-~;h z(TZoKVF)XvYnt-Nigikr1FUYe#7WVe`v`^f7lP7F{(SDAoE;kB_kwrG&#Rv6%B%fU zie>{d1~`wW|G(JG@SZ=wBR%ub$L3UY+M2Ru#jYcDHaVj`9ZCM`h{+9{M2UZpEExDk z-U86hyH33GwK3_+!UjAADpNvfrR9eSJ^FIXy5R+W$642Hrr5lLPgXTXvBq!nhwf^N zhN-auR`@)6G;DfRN?&mJU5425LK}6gKIy zb+IqWo>3p{3slXfg&O9-%C=i&UTeBlsPAdzJ)(b>e-d=AljQu& z)F~FX-SW#M_24352<>59-1!x+6XUWJAJ>I*nhZTqd*(|>PH1v@fhnO-nLc_$J8(jE zdlR+^A$BCImP2>%l=|6#ryYwwW@U+&*&o9*qoG;-h61d$EuRk!tREn$$Q_bWtSd-I z3DXODa)Yy8)lgFuV`G21;9Emv?G2Oi=E%|ea?2mt5Q)%pJ!0-QnCH2{j$jh!K|}2! zcJNL81MtPFRp-zR} zYV6dDL)V*g1;$l1=RhXkr@C;bQK+N@Oboy`sGx{Qr5FpFJn4UXhjj94=!APfDaC2A z^7#WpJ$R6sF3EA!an9|pEAJl3Bkl6CJX`H3;t)JJ)P-iGQy3vLP+{E2^TwbQ@jmUT zF<>+m1!J&Emfpo?0g)?=bC1eyxCUqL^<z0krseT-|3KIUNfW0)l}_u3CQjg!7%i zvJnF(?)d#j$#8d3axsj8*!{LY4e?}ufZ29Bn`|jF@zOWP;3ETe)1w>q2CWy^0e^pOQu@eToP^4nGrxwbQt-@g zxKRLHTA)Fgw*MLZa9{FA=xsLgruTr7jT-Fso{yplH}xvse83YS6z!+$6&hLCKym`1 z|LgE{71an|ly;vwAupz#Su|2f1>i71_|4#WZ3l^=Mcv))$?X z=Hr~5d(z8=$#?wYfCV7Okj(_;4i?G1i}(M{?u-ySMA-fg?^Dpy$@slLdUEOh1|Xox zfliBtgrrVo6ZioT476gQA8wb-wvrXIT|xE3SVDjHh0dJtaR)dv^_Pn?eurM_(gY>G z)32H7nVSdkzuad35*bp5j^<=8l#Uuh8R;{rcTAk6?^;*Uw(d z0Uwh7!$3!f^}qaWG2Q5D(NT!T4!pn=4``c6mP%?6B&;?l(3&bvMP)@J%}B4I=0p=^ z>+^qak6S5RZTT~xL;mbxD?g?AmSl4T`c5Qxr z35`id7czfaI0h2}#%8DWTRBBwsLzzVJFb86z6t)O5+ms}eo~c+_=mA*-b+XAEdaX3 z?2u~7qsq9RZntbnGrkWuV_Uj`2M=4n)XxEkBe%Ex8~1vS){FF$e)xCmt`&RimuSOaD8#;Yx$#~R#zV&bA(c9!Pitt25qm<%R^SC0Hbwe3(|iFk)Qo@a_I)l;`55@YvCG1Mdco2efQ%#rG;JM z(ogEiibw(3K(WhdGbSb&Ia=Lj)n*B8dCwsLfb0}yZLL-{R`*>^)R>}qH! zpE(?1rk}+XhO{w>b?A15 z@BfsggCZ*^bMfF(O=d}eh40zj+03{QQnQ>%* zP<6g3@?~uI4X?NF>6FY3aFSGAxGWZ)qdP34N9Dq7YIt&16ER~5|)E+BMO-{Fm7e)M67O?UMkr0jIKzlnveaTya$ zl_`F2qaY|1Fa3QHh5Z54aT#;0rf1C~Z5@vsziCKc{FR>PYDdii5d#IwgMK~|8CBUm zR6i|N^H`nX(ovE_plvD(#Ju3oR`X@>`ASLE+NK-nKd1$aM9;Tr;j0x`GAM1B+&}ub zB;_-YhW7H_su%^b@>qZJLn7C$*hS2)(j>9-n!_J_ZN^cmy-j+f=gJblQSdN7*#Iv^ zJn8QO0=6q!UwNSfPgXu>CV`r0qM1nA_Yh5M$67~=bh~7$RKsamqK!b^@ym?Ua{=uJ zZmxJ1EN7PQr<~LsN;v0O9S6RJ^{GF|OXoeXrdu@~T^D9baE@S@G=H8*dVc*O&_TKM z$?HFm)IU|WbCo*T62?kG#zr187w?>Z0ODV-WnS{a)4(xw3RVHga!V{Uh?KP@;ks@{ iXBLy-8w^)BKE-X&_q?C@vcmojPK5p42P&JTcIQ)^vi1%D diff --git a/users/patrick/secrets.nix.age b/users/patrick/secrets.nix.age new file mode 100644 index 0000000..e813e00 --- /dev/null +++ b/users/patrick/secrets.nix.age @@ -0,0 +1,13 @@ +age-encryption.org/v1 +-> X25519 9MEBB2OoDS4OT208lJ4v9Tv9YuU/X/wx5e+mtZ3xTRc +qLuQjt7/1tjKGrnGSqZMxaAoD/9AijMATK1FcOJrkSg +-> piv-p256 XTQkUA AzB4IghZxRWJmwu0VS5H+xvTXbQXh55V0XFardmPnIgL +6hxXUJsXB0ruoMqjUNQBbKgEqO9hf3cDHqUsvKgZpnk +-> piv-p256 ZFgiIw ArGO8iI6Obq/zhr/TDx9Qv9lnlfLAH6O3urPlKGAa7Im +AN5c3qBtw3mGLlqTdsjDy9XttpGY5FCHxs3gnZn1oW0 +-> piv-p256 ZFgiIw A+XJmjPZfDHVrxFAaRNTt2Kqlx0HC8xt/vhlZpuxaefX +TxHZeRTGR35RLMtchnBInFy7qqTz/hl3bhiqQUvVYPM +-> H$}e-grease >U:d!w} ;j{MFjj }34T h +eimRsk4kJVEO7mZ5UDMEPuA7W/wo5p17ECWw+Q +--- 1jYOeELqbfUzPqpLpWe8SuktS5TnM4140U0DD5/O5aY +=-ڂKk8`qL$XMʭb]j7-M \ No newline at end of file diff --git a/users/patrick/ssh.nix b/users/patrick/ssh.nix index e5badc6..861d802 100644 --- a/users/patrick/ssh.nix +++ b/users/patrick/ssh.nix @@ -1,4 +1,4 @@ -{ +{config, ...}: { # yubikey public key parts home.file.".ssh/1.pub".text = '' ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDZixkix0KfKuq7Q19whS5FQQg51/AJGB5BiNF/7h/LM cardno:15 489 049 @@ -33,6 +33,11 @@ user = "root"; }; + "maddy" = { + hostname = config.userSecrets.hetzner_ip; + user = "root"; + }; + "desktopnix" = { hostname = "desktopnix.local"; user = "root";