From 2d5ab4bc3b514225fc7f55472a412fcfdc8c84ab Mon Sep 17 00:00:00 2001 From: Noa Aarts Date: Mon, 8 Dec 2025 10:35:34 +0100 Subject: [PATCH] rekey to use host ssh key --- secrets/authentik/env.age | 17 +++++++++-------- secrets/discord/disqalculate.age | Bin 409 -> 519 bytes secrets/factorio/solrunners.age | Bin 428 -> 538 bytes secrets/github/anstml.age | 16 +++++++++------- secrets/github/flurry.age | 14 ++++++++------ secrets/github/nixconf.age | 15 ++++++++------- secrets/home-assistant/ns.age | 14 ++++++++------ secrets/nifi/password.age | Bin 361 -> 471 bytes secrets/radicale/htpasswd.age | 14 ++++++++------ secrets/secrets.nix | 12 +++++++++++- 10 files changed, 61 insertions(+), 41 deletions(-) diff --git a/secrets/authentik/env.age b/secrets/authentik/env.age index 18956f1..2f524df 100644 --- a/secrets/authentik/env.age +++ b/secrets/authentik/env.age @@ -1,9 +1,10 @@ age-encryption.org/v1 --> ssh-ed25519 tcnWbQ 7HShBCBklt5U0I5CsutAUUzE2R0H31z18K2SrD9xtGk -UmxNTG98sYfdBgM9ZdW+sQj4ejnh6Fe4NVPB5dAM+8w --> ssh-ed25519 JSqVog 04vf7RElfQvTnLk07lq2VCR4EhzT8IqwuRDPbIDUmiQ -dwZwmO9JDt0GKuVQ4madmRD1BsBWPYUMJYhxPyzQL90 ---- o+aR5JOGdQCmh4VVHRhZoN4uo4z1e4OjFQHMmusZhHc -x+ ФG5Ŗf%0vxaMevU?oaP-'U% -cR3ljg.*ǣE׺m?)̭ɩ48ƒ-UmEЯm浡)N}h!&s1D '6jyq @{QW -d _Нs=esg-fͻC 1A {'s_F \ No newline at end of file +-> ssh-ed25519 tcnWbQ Oi7RlTsZ9FYSa/4wiifB35R8LxxzXknbMqLv/lv3fhU +4c2Ues4l+GIsKJ//g2vHjlo/N5PRQqDNayDk9IWD83s +-> ssh-ed25519 JSqVog O6odWVNR+mFub3rB5TEh3P7p+JVqbVX224P/mGd5Mww +iOdicwnsdKfwgRKr5IUTcumB74lqJ8zKxe8eXUr9BJw +-> ssh-ed25519 p4Hqyw WvwnQzdcw5b3jbea14KYPOw5Jrttv81Oq7VViEhLnw8 +9iVIvUMu2VFHAB2mdYQxqym5KmlE2re+0ZBScPyYXIU +--- 8qUwToGeKg+wNQ1a9A4Hoi0gtsfHNOmkbmbcKvbeQvY +Py)r;,m|H/{ p7D]PAD" +Vk}#}4H8dNyuqME#6qohWjIߊgOڱߋh+E^"r~ ԅ]HB#"\BujB!ͫzM<#'WzD4-g '!F3ˈuW9?Zz;6w \ No newline at end of file diff --git a/secrets/discord/disqalculate.age b/secrets/discord/disqalculate.age index af514dedf0313cd5bdbb7114cef7b7b840adef2c..fac5b2cf2d3e00108d57d11a45f819b950ae55ba 100644 GIT binary patch delta 485 zcmbQq+|DvVr{2-mATq4f)1#y~y(-kSJl7=K!qGR&qJJ;33Ak4@yw9K$D$=o8; zE2JttC&D0~D=AUmprk4-Gdnl3GQ`<1xwz28Aj&nj)X*f?x6&)!SUeL?buTf-?W2DvOY+P>+lJ+^c+LWyl@|P z1Fmpw!{oxsB7bjFlkCdmvh=J#&(f4)Z|#y~^Tfa^^Gr{djQr#vcT0csWG-D@U4@+N zki^2sFn3Rj{NO^%vQYmN{qm$ji_#3|fH1%CC_@7$_tKn-5>F%lVy-5=nfsnPOM3?| zJ@3J{$&mGyxlKdPv2HEKxP;B7w?gI8msI?b5NrIsRjAGK!7K)k$kQ&|;mcoiA9{7Z zo#$P7$Jg6|U#@W3`R2xxLBdYO@cV0O4q_ssI20 delta 374 zcmZo?naMmsr#{dt$-}@qG2GD2BR?rM#WTv-)h#U~sa!iHAlW##s@&JyqRPiRDb>?B zlB+b((W5vlqcl0Iz&j`?&?`4QwaT+N)JZ$X)5k2-J-^h)+p{>s-^jEepG((Hp}06h zH#Nn`)YQ;Y!7I2hEI(aAJHsn5-7CT+H_b32(YU0@us+H>%so5B$s;>oJ2|hgD%j8` z-PFT3LqF7nE4?DsH_tOE*D^KK(5EUlEydFyH^slqInXIHB+$b$u`DGi*V81~KQhCY zOIKG{A;luM$~C3b$RMZOHzdT_FFPruz$MYeI6L3CASy93Fx}Uw$il?TFjPC6>xcLZ z)4~aIDft5H6rxwP7;NB*+;H9Cd{)O6xz7@BVm?ZKuW}7PclYwGy#)zM-L5k(xU36J z*`yE_{{CfbNok~A*`^6M%NdV}XugmCJEM5EZ}iIAgU)WZTh_Dbg>QNLIIQ5(nL8P! X_f#ZH-n>(o=`Pk)Q~v0B)|@r~im8ss diff --git a/secrets/factorio/solrunners.age b/secrets/factorio/solrunners.age index be7604825e5754df8981e2468e0b5d39b0d75baf..954752c4ab5b76b85b52dd36b78a040d8077b37e 100644 GIT binary patch delta 504 zcmZ3(Jd0(5PQ7j-=esH0mse6^Dfwre{l5eGUMTm!!rE^i1 z0as|4Q(l>IR%m{*aj99Nv4xRAn1xG3Ql4*cmRC_qq=}zrYFV;NWJFnhIhU@TLUD11 zZfc5=si~o*f>&^1Sbn-fXoW$3v3Y7rg=v~oqPDSjP`znlesE!0SXG)+zH_R(siBKg zfN@D+VN$LuS6P9dk-2wSn3=y%iI;YINxptafWA|Pdyr$KPh_Q&wokTCvZ;|zuxDvD zx^)F69)*?V3a*~HZU#=dmbsD6Ua9Gh1qLMEOPMoASp>7}IxX4#bnAqLvMuA#Y!hVG7$srf#x*``6R>0Gutr#+ev3UzX9 zpOLq4Mq#x1@^{)FI)s(i7B0>6QMcsLkxHC6bAq7Fv-RmKm7n}(3N7OJ@V9d5mQsNr zi33kWKUFLK+-@uQN8rgehorq>lK&=raSdA@o_X|=@%h=)SN>yReXRQ3MEX+3S$2g2 l!(S(FCARI6i#}V$8UOj8{}IuY2NQROo6U6J!u;!ZJ^ST7goS&dUrJ<&^1Sbn-fxP^YUwpn6?i%WJ&fl-iGS$#={v7u$xhOPGq_P zm#(g^Lb6+ah?8S@L7;_Sh(UpyL8)IsxmlRMtG2d(XkMhLfoZ0(L9lCXMp0!x*S+pN zy$@rz-Kp>D-4k-9d+&CSIqex9EB@CXeem5n{#dxIzut?O4~MG4w_E=Euu?x|W*q0X zUl)&O8_emCTx5DA`NS^CAm%Ln57T@N*cCVIytZ*ol!zmbEob%mmEOk|y7K1Ti4;83 t)3>d5iF=32#M_oSFU)o_)YX|vn!B#9i`;Nl|Hod#!$Lo{Fss~~2>`kpm{ ssh-ed25519 tcnWbQ rj1m8hBgVp8y8jpXFM9u13JWEc3xBXEdyi8qZLNkuEs -iuwace0StxGE8azxeQsWiRD8r8RdnRR300gd/RsKJ7Q --> ssh-ed25519 JSqVog eexOWv0sQABenvwYd78sc05657ZeAqYUeA965CKmMFg -XcjG8pbwdxs0/Me/BT80xirUwjRFt/zVtLf0U8fCGdY ---- DTSUauKyhq/PoCWhLExihAI9Jz8ciM1793zrRdBqubI - 0>(h n/X ssh-ed25519 tcnWbQ GGdw0rmCi2HwU0Ccryib4LqUtXhMq/7DUq3s2LeLGQ0 +kPUvfTQQXSZv6U0SNOJiLnFj8PEUd31u64NWv46ywJ8 +-> ssh-ed25519 JSqVog 2jj/2TGoHQwC+XfSz1UA6g+pT14gKMeJnt/3tcJBoRQ +YPnKEYKCScjkiohAtLPxP9TDv7+QUeWLcyYvEcAeKEc +-> ssh-ed25519 p4Hqyw 3tKXcY0qApoVYbs0rsrqoQ9QeF4SCN3NfiyAh2jY70g +eHMdl+m0IGZJuFnkCVTlXgyKUDwCFrO/tXJBrwZh2vQ +--- Uz8aUyf+5WhFj6L8boY02aHV6UsddGSaSRVrwfS+jR8 +.I{;-bgI4azJf{Wni\D>p\ЖQ# +] \ No newline at end of file diff --git a/secrets/github/flurry.age b/secrets/github/flurry.age index cf0fb59..68269ec 100644 --- a/secrets/github/flurry.age +++ b/secrets/github/flurry.age @@ -1,7 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 tcnWbQ vNa+UM2viqUanjRjqeUcWldf6CK1Rht+szN+smAcBTo -hmxMANgCgvmih42c+2jy+yWInzN2LmEohB+LvtjZ47o --> ssh-ed25519 JSqVog Ygw0pWcJgmfm90ZjLMmW7AdsadoGHP9m3Wp77N0bES8 -UAncArFf7/d6IQARgdlG80ra4kGWXwMDnBufCF3I/Bg ---- xBDa/W0mVJhFHDg84VFyNKwb1rYNaDD55IPrn37NT8c -5 ߟ|~M+yTCp-'cHPZmh!|k^4 ʍ2= \ No newline at end of file +-> ssh-ed25519 tcnWbQ CJ9FInDiMEhhdt+PPJCBAhOExyf0CJQgLPyhZxyTL38 +t7bVYtiJpuzpUePaQ730xShntQe9xDgYNVhSx+gxH8E +-> ssh-ed25519 JSqVog lTQgB4uRxT4GinnM+61ZIVOfspfL0EFCVWJJ7ZYlBFk +aH86del3X+ac2aGpicnN+lxHnFixqRHuU4YDPVYroVI +-> ssh-ed25519 p4Hqyw o2ZSU9MgGXtY5ZkAlV10f6MKBcyOM3wfcCB0NaDFLDY +bDSh8xpWJqC4g/U3OGHChTKxv1CpDBr+3ZUvrigdwL4 +--- 3byvLWIziAkY6jgPqSuFIcTv9OmyfdFGmPTWzObhtKE +(㎋Z/nop86 G~gKsζW7yV \ No newline at end of file diff --git a/secrets/github/nixconf.age b/secrets/github/nixconf.age index 52e04e1..b31da5a 100644 --- a/secrets/github/nixconf.age +++ b/secrets/github/nixconf.age @@ -1,8 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 tcnWbQ g2eaRHVTGQ10exoXUN81BnSfQ862fuaK1HJjlJ4LfCs -+haYdffcaLqyhp/lln6Z58kQwSOc6Om5sBVvRdzVTgc --> ssh-ed25519 JSqVog R2HZY26sPYw0VugnsCHocjdZcqEuErjuOF5XGTlp51s -CXkU20+zkcdG7pq8EO1ZIJe1vGrDPvF12d6c3Y81dIY ---- ZyjTqcMfRPabnArlayoCmiPcxnTGHdr/+G2nuPPraQc -ri_jV MT;Cc,2ևA} -xNt/o)O \ No newline at end of file +-> ssh-ed25519 tcnWbQ GUG1UmQarmSwVLXE7ZMsikfctWx/s750c1NPHYGU7m0 +jXkf74jkOUDz8vUKyetFVotSgU+YRQ0I3Y3rTSVTavw +-> ssh-ed25519 JSqVog rY8ZWnmyl2gPNrvfSHt3VLU2dbHTwmhcKhF6Am3mNTI +3483nzwlNLd3qKBToi2DO7dM3/ELRcIdX7b/Vdzt05Y +-> ssh-ed25519 p4Hqyw iG0dZfaTy1R3vsgWzgRv3WZtWU5Hr6hA2ajywi5vjyg +AclOAYDgy9BnSxvhZfTgM7fgC/ZPoRVsPclEFyJa9fQ +--- cDlq/UuIxJxPiZ6DY6qyLacyxjplQC1epdZ3kGbHo7s +魥WG/ϴ; #X \ No newline at end of file diff --git a/secrets/home-assistant/ns.age b/secrets/home-assistant/ns.age index f625c15..3da1ab2 100644 --- a/secrets/home-assistant/ns.age +++ b/secrets/home-assistant/ns.age @@ -1,7 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 tcnWbQ hEBwHQPa8XGINvylevOyqUIRvJe8r6Gvk1X10TKPLiM -SHDifOgXZoQYOGsuYFppGMxioZx2Qk2AQq3AT+2obac --> ssh-ed25519 JSqVog akrf6ZTXzylcyQdKhPnk74hS8OvJVTJA+8apopk/9lA -iS1XZfqeiX1MNURNw8AeDFJg3jB/1V9Bonm+A9Ojmas ---- y5rwM1aUQtseXfk3jbJ0j6Bz0CubHny+QrR6zezxYuA -\KEq |KO Mi%Gr'<\TjLYE&Y>8 ssh-ed25519 tcnWbQ RHvjhnAu2uUcrp0vU6fkM0Fij/xR97kgtyMEyDrw7hw +bVFvYT62spqvDBQX7z3BS/O+kKAlBDQ3XIstbPhDwHg +-> ssh-ed25519 JSqVog 0u49GPT6o8MlyjfqDK3Y8LZl51tthW2yzTnpltsTTkA +G9qCU0IOXRKWlCjeP6M3CieMbrF6HdVyqvQuAp2f9Bg +-> ssh-ed25519 p4Hqyw 7dXFUBGHjAhkpl8yuvmAJVlrHYW+FIEjBghekopEyFU +PS/kTbiq4XV/AhTAB9Yh7SUxBpOc60pgKJCI+E/06h8 +--- vqrISHgwlcMUG+jYnyOLVXkSuU9m+IdCCZ90Tx2D3EI +XM_0݄|Shf4"U& "(6XOO :ONF^oE*IfuF$ \ No newline at end of file diff --git a/secrets/nifi/password.age b/secrets/nifi/password.age index 6c59d9d00a66f01344863fe90748a65f7542ab35..888c3216ac1e0b0774e3a675a0b7948a8954de03 100644 GIT binary patch delta 437 zcmaFKbe(yEPJKy;hg+IivXQ%6l%G?0aZ;hab5db(flHb}kfUo-h@)4kM^0gCL4`$C zB$t7|dx&e8xka8)c5rTKiFrs#Mox)Im_=HVak*2PS9XAVWNB)UPri4RFPE;JLUD11 zZfc5=si~o*f>&^1Sbn-fxr>K;Xs&xiRj#3DkaK0OW4%vaMV@n}levYrXJVCWPN8p3 zL_~;bhGk$nS4m-RK&4Y+x_L#Zeq?xwftkBgkb8brv15gkdtOR}k-KA1n1_qGesP8g zx^)F69)*?V3VwO{L8)HO`4)brDdv7rrA9eLx#ceTIo?r8l~GyFMk$W7dX*uDRp~ayEo>569iOGRU>0IjjyZA!FP6{*3 z<*D!}&+FL}vB>M+0`?ON^)CIqZMR9bZ`REAJ%4*IHOIKu?l`^XRlrXc0pD^vWG=-l(s=tc6fMMScqYzn|nlRPLfNwPlZQDsDW2fXr-BR zIaj(_g^Np3N{NAifr(*GhJJQ_prv+hzG+%Ofp=!Mws&cUk9N9|Z=Soe1(&X!LUD11 zZfc5=si~o*f>&^1Sbn-fTAr(ZWM-tHrE^u8g}=6sbA4`zSCWCLVPiME?#a<0F5VP2x2nTKbwsk=+IyH8S7Hp>JA-hgn2gny*u`K|#4^c6d^8VPvXbMVOa ssh-ed25519 tcnWbQ 2slM1WbkhT3PBw/Uf+iE9HkvzvSdxPhGuJX6K03I01s -qIpt2BbS9A4vyN8IRc9O+EJ4cKGNPme7SSyY/2/mNl8 --> ssh-ed25519 JSqVog hYmBhVPC2SZAQbuZgMauni7c+wWSeoOaXu72f228fyg -nxh4y6KodtjEXu0Hebe1szxRpLtRwH2BaolLybtV+jE ---- 2Bz5IH4igAwQCsb12ArNZcUep4K+aW48963JUCRTl8M -Mydi8`կ-XiKr##°w,_4צ=-ِd| ƣ ssh-ed25519 tcnWbQ Ys0MIpoc9tEkDWlUD8VEcAZG+04ufOF3GI5jL6eQ4RU +/0ZPjQUs2oBd76ZvB25kn3JU948rK/KSpNomRnbeN18 +-> ssh-ed25519 JSqVog EIyaw39KzGhEkPrqaDhatPnwvWc2TixubdTFhWG4N0g +6ra8jyZa5JQcTCEGcMf3OLK+22FAX7vTHP9c9rsXNt8 +-> ssh-ed25519 p4Hqyw il0hbaCfr8IFqm2M8q1BCt8gpRamowZtSA6XWycQPUY +3wgK+AxgXiiV8iY21tKNi2CE+5o4bRuxyuRf53FOyUU +--- pDNLVqoCm5mLseggbCZ8volJROnLF/ArWrzDXkWB0Pg +^=Z\ sp[&Za?5ˀUS<#!XLwi!lAI_5}T=jpֳ.tWW.MQݣfp \ No newline at end of file diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 0a41965..e365f5b 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -1,10 +1,12 @@ let noa = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKOiz4Dsp4fgtwgOvARzOO9kZI4fSwJ4QJCf34dGVB6Z"; - nuOS = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMD1SQumqEsx1N0v35ThrGgb9rH12j/eOIUf3TdEi0G6"; + nuOS = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDV2IDF4FP1T6qWcv+drtnbKyXkeB9kOAbU4wVWNfPSO"; + muOS = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMD1SQumqEsx1N0v35ThrGgb9rH12j/eOIUf3TdEi0G6"; in { "factorio/solrunners.age".publicKeys = [ noa + muOS nuOS ]; "restic/env.age".publicKeys = [ noa ]; @@ -12,34 +14,42 @@ in "restic/password.age".publicKeys = [ noa ]; "github/flurry.age".publicKeys = [ noa + muOS nuOS ]; "github/anstml.age".publicKeys = [ noa + muOS nuOS ]; "github/nixconf.age".publicKeys = [ noa + muOS nuOS ]; "radicale/htpasswd.age".publicKeys = [ noa + muOS nuOS ]; "nifi/password.age".publicKeys = [ noa + muOS nuOS ]; "home-assistant/ns.age".publicKeys = [ noa + muOS nuOS ]; "discord/disqalculate.age".publicKeys = [ noa + muOS nuOS ]; "authentik/env.age".publicKeys = [ noa + muOS nuOS ]; }