diff --git a/flake.nix b/flake.nix index cff8771..65ee459 100644 --- a/flake.nix +++ b/flake.nix @@ -74,7 +74,7 @@ nixos-hardware.nixosModules.framework-13-7040-amd lix-module.nixosModules.default nix-index-database.nixosModules.nix-index - # private-config.nixosModules.default + ./modules/utils/agenix/agenix.nix ./modules ./home ]; diff --git a/modules/utils/agenix/agenix.nix b/modules/utils/agenix/agenix.nix index 175f613..56576c0 100644 --- a/modules/utils/agenix/agenix.nix +++ b/modules/utils/agenix/agenix.nix @@ -1,6 +1,7 @@ { config, pkgs, + inputs, ... }: { @@ -28,66 +29,73 @@ # Choose a directory to store the rekeyed secrets for this host. # This cannot be shared with other hosts. Please refer to this path # from your flake's root directory and not by a direct path literal like ./secrets - localStorageDir = inputs.private-config/modules/secrets + "/rekeyed/${config.networking.hostName}"; + localStorageDir = ./. + "/rekeyed/${config.networking.hostName}"; }; secrets = { - access-tokens-github.file = inputs.private-config/modules/secrets/gh_argstr.age; + access-tokens-github.rekeyFile = ./secrets/gh_argstr.age; - fbda-wg-privkey.file = inputs.private-config/modules/secrets/fbda_wg_priv_key.age; - fbda-wg-psk.file = inputs.private-config/modules/secrets/fbda_wg_psk.age; + fbda-wg-privkey.rekeyFile = ./secrets/fbda_wg_priv_key.age; + fbda-wg-psk.rekeyFile = ./secrets/fbda_wg_psk.age; obvps-id = { - file = inputs.private-config/modules/secrets/1bvps.age; + rekeyFile = ./secrets/1bvps.age; path = "/home/rhea/.ssh/id_1bvps"; owner = "rhea"; symlink = false; }; + dn42git_token = { + rekeyFile = ./secrets/dn42git_token.age; + path = "/home/rhea/.ssh/id_dn42_etwas"; + owner = "rhea"; + symlink = false; + }; + ncvps-id = { - file = inputs.private-config/modules/secrets/ncvps.age; + rekeyFile = ./secrets/ncvps.age; path = "/home/rhea/.ssh/id_ncvps"; owner = "rhea"; symlink = false; }; gh_etwas = { - file = inputs.private-config/modules/secrets/gh_token.age; + rekeyFile = ./secrets/gh_token.age; path = "/home/rhea/.ssh/id_gh_etwas"; owner = "rhea"; symlink = false; }; gcd_etwas = { - file = inputs.private-config/modules/secrets/gcd_etwas.age; + rekeyFile = ./secrets/gcd_etwas.age; path = "/home/rhea/.ssh/id_gcd_etwas"; owner = "rhea"; symlink = false; }; ebd_rhea = { - file = inputs.private-config/modules/secrets/ebd_token.age; + rekeyFile = ./secrets/ebd_token.age; path = "/home/rhea/.ssh/id_ebd_rhea"; owner = "rhea"; symlink = false; }; glrwth_tuda = { - file = inputs.private-config/modules/secrets/glrwth_token.age; + rekeyFile = ./secrets/glrwth_token.age; path = "/home/rhea/.ssh/id_glrwth_tuda"; owner = "rhea"; symlink = false; }; etwas_sign_key = { - file = inputs.private-config/modules/secrets/sign_etwas.age; + rekeyFile = ./secrets/sign_etwas.age; path = "/home/rhea/.ssh/etwas_sign_key"; owner = "rhea"; symlink = false; }; ffda_outoor_key = { - file = inputs.private-config/modules/secrets/ffda_token.age; + rekeyFile = ./secrets/ffda_token.age; path = "/home/rhea/.ssh/id_ffda_outdoor"; owner = "rhea"; symlink = false; diff --git a/modules/utils/agenix/rekeyed/rhea-laptop/0a56e97c88baf935f97f26b3dbb2f44a-ncvps-id.age b/modules/utils/agenix/rekeyed/rhea-laptop/0a56e97c88baf935f97f26b3dbb2f44a-ncvps-id.age new file mode 100644 index 0000000..e04c8a5 Binary files /dev/null and b/modules/utils/agenix/rekeyed/rhea-laptop/0a56e97c88baf935f97f26b3dbb2f44a-ncvps-id.age differ diff --git a/modules/utils/agenix/rekeyed/rhea-laptop/3796530060742e02dec8258c831b607a-fbda-wg-privkey.age b/modules/utils/agenix/rekeyed/rhea-laptop/3796530060742e02dec8258c831b607a-fbda-wg-privkey.age new file mode 100644 index 0000000..2c06366 Binary files /dev/null and b/modules/utils/agenix/rekeyed/rhea-laptop/3796530060742e02dec8258c831b607a-fbda-wg-privkey.age differ diff --git a/modules/utils/agenix/rekeyed/rhea-laptop/40408494c83d98968e479aa395db52da-obvps-id.age b/modules/utils/agenix/rekeyed/rhea-laptop/40408494c83d98968e479aa395db52da-obvps-id.age new file mode 100644 index 0000000..7030a14 Binary files /dev/null and b/modules/utils/agenix/rekeyed/rhea-laptop/40408494c83d98968e479aa395db52da-obvps-id.age differ diff --git a/modules/utils/agenix/rekeyed/rhea-laptop/5bddd42c320acee77e20eb733d468315-ffda_outoor_key.age b/modules/utils/agenix/rekeyed/rhea-laptop/5bddd42c320acee77e20eb733d468315-ffda_outoor_key.age new file mode 100644 index 0000000..57c19db Binary files /dev/null and b/modules/utils/agenix/rekeyed/rhea-laptop/5bddd42c320acee77e20eb733d468315-ffda_outoor_key.age differ diff --git a/modules/utils/agenix/rekeyed/rhea-laptop/75b8bbd64b17a040f92a8c09aa0a18b1-fbda-wg-psk.age b/modules/utils/agenix/rekeyed/rhea-laptop/75b8bbd64b17a040f92a8c09aa0a18b1-fbda-wg-psk.age new file mode 100644 index 0000000..c4667f3 --- /dev/null +++ b/modules/utils/agenix/rekeyed/rhea-laptop/75b8bbd64b17a040f92a8c09aa0a18b1-fbda-wg-psk.age @@ -0,0 +1,8 @@ +age-encryption.org/v1 +-> ssh-ed25519 7JS6dg krvfE+Q3MyPk9atXqvWIZ34jdnLIuJ0SoocHwHiC9l0 +8DuWAGg+sp/22GVFxx5NIBp2NF3mk/9hs2uOBWx0Q9g +-> @-grease ]0mX_ M2]l G +q/uLLUTyYlZpDQ +--- akYJCo6Fx7+mjZBYtwXI+4ji9+VHq+qtNHLjp051m/0 +BhsGqnw덈,'vM_.x@~7 +An?ϑ$ ]~3U}9 \ No newline at end of file diff --git a/modules/utils/agenix/rekeyed/rhea-laptop/803e60da3826e0f3b5f311db436e944b-ebd_rhea.age b/modules/utils/agenix/rekeyed/rhea-laptop/803e60da3826e0f3b5f311db436e944b-ebd_rhea.age new file mode 100644 index 0000000..638f6f0 Binary files /dev/null and b/modules/utils/agenix/rekeyed/rhea-laptop/803e60da3826e0f3b5f311db436e944b-ebd_rhea.age differ diff --git a/modules/utils/agenix/rekeyed/rhea-laptop/9fb79d5c0e16eba378425e35191701e9-glrwth_tuda.age b/modules/utils/agenix/rekeyed/rhea-laptop/9fb79d5c0e16eba378425e35191701e9-glrwth_tuda.age new file mode 100644 index 0000000..6ca2be0 Binary files /dev/null and b/modules/utils/agenix/rekeyed/rhea-laptop/9fb79d5c0e16eba378425e35191701e9-glrwth_tuda.age differ diff --git a/modules/utils/agenix/rekeyed/rhea-laptop/b790376cb1623e6f029904629b93a04e-etwas_sign_key.age b/modules/utils/agenix/rekeyed/rhea-laptop/b790376cb1623e6f029904629b93a04e-etwas_sign_key.age new file mode 100644 index 0000000..98785dc Binary files /dev/null and b/modules/utils/agenix/rekeyed/rhea-laptop/b790376cb1623e6f029904629b93a04e-etwas_sign_key.age differ diff --git a/modules/utils/agenix/rekeyed/rhea-laptop/b79f0747e29f24845755c1cb9934d9ea-gh_etwas.age b/modules/utils/agenix/rekeyed/rhea-laptop/b79f0747e29f24845755c1cb9934d9ea-gh_etwas.age new file mode 100644 index 0000000..09464c0 Binary files /dev/null and b/modules/utils/agenix/rekeyed/rhea-laptop/b79f0747e29f24845755c1cb9934d9ea-gh_etwas.age differ diff --git a/modules/utils/agenix/rekeyed/rhea-laptop/bb6fe4a15d7da76f3f5987ee6513421d-gcd_etwas.age b/modules/utils/agenix/rekeyed/rhea-laptop/bb6fe4a15d7da76f3f5987ee6513421d-gcd_etwas.age new file mode 100644 index 0000000..ab1ce91 Binary files /dev/null and b/modules/utils/agenix/rekeyed/rhea-laptop/bb6fe4a15d7da76f3f5987ee6513421d-gcd_etwas.age differ diff --git a/modules/utils/agenix/rekeyed/rhea-laptop/ef9af6b8ec4ce9e691e8ff00e4ed721e-dn42git_token.age b/modules/utils/agenix/rekeyed/rhea-laptop/ef9af6b8ec4ce9e691e8ff00e4ed721e-dn42git_token.age new file mode 100644 index 0000000..65e4d4d Binary files /dev/null and b/modules/utils/agenix/rekeyed/rhea-laptop/ef9af6b8ec4ce9e691e8ff00e4ed721e-dn42git_token.age differ diff --git a/modules/utils/agenix/rekeyed/rhea-laptop/fe3b797d7fc54e6a24d4e9dcb049e626-access-tokens-github.age b/modules/utils/agenix/rekeyed/rhea-laptop/fe3b797d7fc54e6a24d4e9dcb049e626-access-tokens-github.age new file mode 100644 index 0000000..1113654 --- /dev/null +++ b/modules/utils/agenix/rekeyed/rhea-laptop/fe3b797d7fc54e6a24d4e9dcb049e626-access-tokens-github.age @@ -0,0 +1,9 @@ +age-encryption.org/v1 +-> ssh-ed25519 7JS6dg X4tDO/iunyQPRSCQElOeZ2Wggl1iVgXtsi1U4AiLIzs +YhWzsL787a4tidiOfGm4wBEnextzg7q2T/NvSOYgHhs +-> )lD,-grease L s=]tTt0 %fL1 +Z8++T2G4ef9Rogaf1khv2rVNQC2ksRR+BV80ZCc4vRPfbocTbeYzLkKhlDNcBI7x +uM6TGxU +--- BVxz5t84EgdJoqGCbd7r8y38wOPmQzW18DI+8M8Z9/U + +69k"MZ%Y@);߽5Id܊*Wv㿧Wdއ"TZV7xp|E+ U}BrP X25519 9gg+So36zrxzTKZ+NKEE0Mi0+1PJhg25+h5TJCDCWCM +oD9VMqfQQ8enVjUoHugRbaICHRcUILhhaMMfk4VkYLA +-> v_-grease ) +Ig +--- XuF9ikNgXeY3V4FBAfrSftQXmA1Jxm7DIU77EFyPt8A +πa;I}ecIm$zmAT !ZQ`9eK`g 7 k{ \ No newline at end of file diff --git a/modules/utils/agenix/secrets/ffda_token.age b/modules/utils/agenix/secrets/ffda_token.age new file mode 100644 index 0000000..b1ed0f3 Binary files /dev/null and b/modules/utils/agenix/secrets/ffda_token.age differ diff --git a/modules/utils/agenix/secrets/gcd_etwas.age b/modules/utils/agenix/secrets/gcd_etwas.age new file mode 100644 index 0000000..2418a4f --- /dev/null +++ b/modules/utils/agenix/secrets/gcd_etwas.age @@ -0,0 +1,8 @@ +age-encryption.org/v1 +-> X25519 bX7dt9ZzmW/ViStZiUjJwithRJYu1Lj40JNtIa+PFhE +qf2xV/RFHRwH7Gf6mt1uNHJxS8p8og4M7+NVfzQHkyw +-> 2t&,-grease +Ah3d0tGRGEH4uxayOFlydRpnEQNiGZFthb2iuYvpLWH6R8UTCR2CwsGeVt1z/VYx +q3wl3dUBgyG6rUnulGN+gSyoxjd9ogER +--- OxvK2Z3y5XhXwngfxzlRLyCnRnHayXVb8W1V7LAXil8 +=Ϡg67lVвȞ@'p1\2q~wy`='k}ZG+^fKb\̨]@S/t=]hEYFZ-ow.;acPN1ꬳ5`ӊ>UO`dPJbqzRJlB8dI59!4c="|`ȪKMƱP#\4cFj6Ft&Iڥ~~+m2tcwcYQnmAg06UO۠=C`f hwe J$C.,ND紹`b=7GYg×EBҳ AIҲ,|tob+ess?";y oUj0ce,U=>*V)a%xЫӿsUSݴ7JE O \ No newline at end of file diff --git a/modules/utils/agenix/secrets/gh_argstr.age b/modules/utils/agenix/secrets/gh_argstr.age new file mode 100644 index 0000000..8263565 --- /dev/null +++ b/modules/utils/agenix/secrets/gh_argstr.age @@ -0,0 +1,9 @@ +age-encryption.org/v1 +-> X25519 GKUURHej+ErV3IMimOmdGwFVPZ/h+QaqdjZPLxseNBY +C1Pig/pPSJMk34PrH3mXbMwX9tMDKuelJ5ttUB5e3+k +-> $g:]dvYJ-grease +1z69372dSEFbYg7Ny+Xn/6RAozi43aaSybJG/HScdMSzFvttJ7gYbZEStEo32MMm +TjLKHwBX205vizvoeskIMdhp0Vr7vz894//0MEEJAeIbsVKV/eEUbw +--- FhK586dKqyoWab5v9kI7SW+Cg+ID+fYtlsrpidOA2PA +2RK@lE0Ao~Wme\ )ZaJ)p "1irQy2ݛ.fnMΟ~ =9׼X *\>M BTf +dD W:bM]TSPJ2 aEՠ5)߿c \ No newline at end of file diff --git a/modules/utils/agenix/secrets/gh_token.age b/modules/utils/agenix/secrets/gh_token.age new file mode 100644 index 0000000..634a6c3 Binary files /dev/null and b/modules/utils/agenix/secrets/gh_token.age differ diff --git a/modules/utils/agenix/secrets/glrwth_token.age b/modules/utils/agenix/secrets/glrwth_token.age new file mode 100644 index 0000000..daef265 --- /dev/null +++ b/modules/utils/agenix/secrets/glrwth_token.age @@ -0,0 +1,8 @@ +age-encryption.org/v1 +-> X25519 cRGm7gXPptdANVdI68CkmKmguojNn/8fI9KS3m/6wng +p//dLMAqSr/UNYsmWCHy28hiMAFI2u4xyrZ0jb+yTQ4 +-> wD%m*X*]-grease " qB0 9npD" +vT2TiwtPdyYwvUxHusUhE8Ef4iqAzwkBzA+xmlW0UA7bgMe/7yMx9UsyRv4Qo3TL +nQKDl4Z16SVXWXPUWXa4JiWhIXCrIQ +--- g9xrDSSxbAzvkNpHNMRAaBAPqHxRAE9Bw0fvTUV4UQ0 +Yv? ˉE/:Y%~E6-{:ıMPmNeeo}F/l1ïM./F0܄rς# D,zXmOq7Ofm'YRMV$DLP͎#X2~p~zkhzSA+ZՉJn{ATDW&w+JNW{˘ʚqWXF~{cl+$]^ LԦ>wra* J;.d=sDžӖ(lMJX?g>Tf;շ8Kfh芓c$)Fy!Ӑć7$87+B%himrJKU{ \ No newline at end of file diff --git a/modules/utils/agenix/secrets/ncvps.age b/modules/utils/agenix/secrets/ncvps.age new file mode 100644 index 0000000..e3b2c72 --- /dev/null +++ b/modules/utils/agenix/secrets/ncvps.age @@ -0,0 +1,9 @@ +age-encryption.org/v1 +-> X25519 cGBOe2zfyQXE72uHNGIqjjPDbzZ7k6P6rXw2Y/2LtRM +DGc8dJq0A+3lYFBQcEAHLX68w2A5VjsTVejIuz14rfY +-> @R\SB5D{-grease c(E:qB PUX C_!n` +KDzwVYv4OFSYKMTDrFzow3MybnsarrLcwgMg/Ul4d9ZxBNQXuzLqtHaS6ppNyBh2 +OVsDZNq3r8LNyh8xfAWwTU9ViAffCRQ+ +--- /ki/C/Y4topj9uabMskg4jaiQJj/5jESdxjfgyRkFnA +;InZAf}xy$'S謧|ӓ*a0j~|[W7Nf9JPWU̸GQŭfW=Gmn.(Ƕi؜W=ؔT>6,T$4:2*"kɨIޮ,*{of b:2T;#n|< T'jWUe hTtppePekKEæ#H7J24^_(\Zp.=^ZUDa9wZ +X$so