From dc80e1c0de55a1a8992452fcb1fe56a942d4bf63 Mon Sep 17 00:00:00 2001 From: Xe Iaso Date: Wed, 5 Apr 2023 08:54:26 -0400 Subject: [PATCH] vest-pit-near Signed-off-by: Xe Iaso --- flake.lock | 6 +++--- flake.nix | 2 ++ hosts/itsuki/default.nix | 9 +++++++++ secret/vest-pit-near.age | 31 +++++++++++++++++++++++++++++++ secrets.nix | 1 + 5 files changed, 46 insertions(+), 3 deletions(-) create mode 100644 secret/vest-pit-near.age diff --git a/flake.lock b/flake.lock index 61c63f8..bb898c3 100644 --- a/flake.lock +++ b/flake.lock @@ -937,11 +937,11 @@ "xess": "xess_3" }, "locked": { - "lastModified": 1680044414, - "narHash": "sha256-eFB03LSx7Vc/fyappwUm6kCLjWAbz2hBa7LWU5QWyR4=", + "lastModified": 1680699326, + "narHash": "sha256-joRGdlduWVcC4Dwc2fEW51jYsJXooqRq2rXJ7r0/MY8=", "owner": "Xe", "repo": "x", - "rev": "91aa85bfeecb529a75cc0a6135ad42c041edf1cc", + "rev": "ed1c5538cca97fa60942b7f942ac031937e13572", "type": "github" }, "original": { diff --git a/flake.nix b/flake.nix index 4644fe7..9edae31 100644 --- a/flake.nix +++ b/flake.nix @@ -83,6 +83,8 @@ ]; services.vscode-server.enable = true; + + environment.systemPackages = with pkgs; [ x.packages.${system}.uploud ]; }) ./common diff --git a/hosts/itsuki/default.nix b/hosts/itsuki/default.nix index 10e055c..abbc0f6 100644 --- a/hosts/itsuki/default.nix +++ b/hosts/itsuki/default.nix @@ -50,6 +50,15 @@ services.tailscale.enable = true; + xeserv.services.vest-pit-near.enable = true; + age.secrets.vest-pit-near = { + file = ../../secret/vest-pit-near.age; + path = "/var/lib/private/vest-pit-near/.env"; + owner = "root"; + group = "docker"; + mode = "770"; + }; + within.users.enableSystem = true; home-manager.users.cadey = { ... }: { diff --git a/secret/vest-pit-near.age b/secret/vest-pit-near.age new file mode 100644 index 0000000..7fb9636 --- /dev/null +++ b/secret/vest-pit-near.age @@ -0,0 +1,31 @@ +age-encryption.org/v1 +-> ssh-ed25519 jO2MvQ R7mnP98BF9irvrwmSiGXvCGSH4HRHEXueLCI5hPi4Rg +e4gCAVjIMqK9sMCrJOvDkvDqBr/8049SYw07OfqeSlc +-> ssh-ed25519 txQL9A n1Li4JKnpqfuhOYkcxG1feGB6NLOWosw7a1EkfiVVA0 +YGNaFwd8LDA9fM/k4SLUNLKfWUVAPPgROv1IBgQB28c +-> ssh-ed25519 YcYwVA MKLHtMwH0HnJqbh/jX7SeY3VzAZjuDHkZPImTBFhsVc +7Fc9pKjIeZmeSxnkMsypBh8z8samVzZtMDhZPh/57x0 +-> ssh-ed25519 rIaBGw q6vi7BoJjbEiW5mgEQftQMPe36e8SDVOAuRcgtxqPH0 +622SRT3yK2/VR6fIVfZiM6dH1lXZtqu70+FiFMaHRWc +-> ssh-ed25519 H5HtPA NRfYR7Ziw/knEdVl8b+tps+52faQ6MFK0pZ38ky00Vo +3peAElIrLbMEehH3nXybb7sHIX59d3zO2+S9QCVuUu0 +-> ssh-ed25519 Yy06mw tXs3VZaZLgST6132PPrc+gINdNTA7W9A45RP0asmAkE +VPJNJzxdSEhd2tUOHxgdj1H/izwx2pigprmX/PWGN9U +-> ssh-ed25519 6Sqpww jxhE5WAniOiMRQCEP3vh9tvUGhDnfOM6En/a6j+QG20 +98KyhGiz8h2Y45mnybgYJwYvX79hQ/GLjRmZEM3mLbk +-> ssh-ed25519 Cb6l4g HpQlmIKD+Z5mVWNOrXA3IcAOKEiQ1AqTlSFO1O3BUQo +pjCKevKMv7l3iizclZssYEp8OUD9PpxSrvCsPi349Gs +-> ssh-ed25519 x40ZwA EKcqkK1B9jGdcTbDYUNw8tCENTZQZ5aSxHivZk7oUk0 +Clq2yo9lYorE5FGu7BV3pjKZ9TKfTqeocNe0vZcmPTI +-> ssh-ed25519 ZvILxA Ds3kdk1rrs/zIlNyqUpmfawQS5LUwpTFuRYLaMQnNlA +CLNJRbTIEsQN5l8NfjS+q1qULiufoWpREZwOC+GOUR4 +-> ssh-ed25519 0rx8bA Lc/VcsCB6K0smEcw5Ra1/xX9okpxNeIWEJuPLhv9lAI +/1V5SARjLBI1yiTJIyZpw9LYhZHIontyfJptrxbUr2E +-> ssh-ed25519 extxyg 0buC/eLOhx3bKc+fPo3P8fsFJDNY7u8ZUlw0QPMktSU +/gLQMN/h7hGC0UuMTEFK+mUwEpEWHP8yIdfzDGtwsGY +-> W)i,{"{-grease e'#HhO$m ?V,hnK^. rzk +Rc3mJ+WKdEOna0xQgjaJIKM4Ul41t+qlZE/VLzmtIctw6c9MHyPT/FbzDh/I3oM0 +c5y/AK00jKDpYpM5u6JWI4RAVySb5Q +--- j4F8++dU88EAhmgbQnzdssB4TMism4qhysNVZILXUJs +,Q>~t&%2\P>cʬ/My"T_:=΅θn<.fY +6c,}BX 6~D^ǫ-Ywܽ@*0iɡ&x;!lWΕ0l}%[@PE'v0@K>,i%])_WaA\9qط_ϞQg1j \ No newline at end of file diff --git a/secrets.nix b/secrets.nix index 2a3d778..220f65d 100644 --- a/secrets.nix +++ b/secrets.nix @@ -42,6 +42,7 @@ in { "secret/aws-within.website.age".publicKeys = publicKeys; "secret/robocadey.age".publicKeys = publicKeys; + "secret/vest-pit-near.age".publicKeys = publicKeys; "secret/akko-keyid.age".publicKeys = publicKeys; "secret/akko-applicationkey.age".publicKeys = publicKeys; }