···

       
1
       
 
       
var DSP_CLOUDFLARE = NewDnsProvider("cloudflare");

     

       
0
       
 
       

     

       
2
       
 
       
var REG_NONE = NewRegistrar("none");

     

       
3
       
 
       


     

       
4
       
 
       
var DZWONEK_IP4 = "94.237.26.47";

     
···

       
9
       
 
       
var TRIMOUNTS_IPS = [TRIMOUNTS_IP4, TRIMOUNTS_IP6];

     

       
10
       
 
       


     

       
11
       
 
       
function host(name, ips, opts) {

     

       
12
       
-
       
    return [

     

       
13
       
-
       
        A(name, ips[0], opts),

     

       
14
       
-
       
        AAAA(name, ips[1], opts),

     

       
15
       
-
       
    ];

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
16
       
 
       
}

     

       
17
       
 
       


     

       
18
       
 
       
function hosts(_names, ips, opts) {

     
···

       
45
       
 
       
D(

     

       
46
       
 
       
    "gaze.systems",

     

       
47
       
 
       
    REG_NONE,

     

       
48
       
-
       
    DnsProvider(DSP_CLOUDFLARE),

     

       
49
       
 
       
    DefaultTTL(1),

     

       
50
       
 
       
    TRIMOUNTS(

     

       
51
       
 
       
        [

     
···

       
104
       
 
       
D(

     

       
105
       
 
       
    "poor.dog",

     

       
106
       
 
       
    REG_NONE,

     

       
107
       
-
       
    DnsProvider(DSP_CLOUDFLARE),

     

       
108
       
 
       
    DefaultTTL(1),

     

       
109
       
 
       
    TRIMOUNTS("@", CF_PROXY_OFF),

     

       
110
       
 
       
    TXT("@", "v=spf1 -all"),

     
···

       
118
       
 
       
D(

     

       
119
       
 
       
    "ptr.pet",

     

       
120
       
 
       
    REG_NONE,

     

       
121
       
-
       
    DnsProvider(DSP_CLOUDFLARE),

     

       
122
       
 
       
    DefaultTTL(1),

     

       
123
       
 
       
    TRIMOUNTS("@", CF_PROXY_OFF),

     

       
124
       
 
       
    DZWONEK(["nucleus", "trill"], CF_PROXY_OFF),

     

···

       
1
       
 
       
var DSP_CLOUDFLARE = NewDnsProvider("cloudflare");

     

       
2
       
+
       
var DSP_BUNNY = NewDnsProvider("bunny_dns");

     

       
3
       
 
       
var REG_NONE = NewRegistrar("none");

     

       
4
       
 
       


     

       
5
       
 
       
var DZWONEK_IP4 = "94.237.26.47";

     
···

       
10
       
 
       
var TRIMOUNTS_IPS = [TRIMOUNTS_IP4, TRIMOUNTS_IP6];

     

       
11
       
 
       


     

       
12
       
 
       
function host(name, ips, opts) {

     

       
13
       
+
       
    if (opts)

     

       
14
       
+
       
        return [

     

       
15
       
+
       
            A(name, ips[0], opts),

     

       
16
       
+
       
            AAAA(name, ips[1], opts),

     

       
17
       
+
       
        ];

     

       
18
       
+
       
    else

     

       
19
       
+
       
        return [

     

       
20
       
+
       
            A(name, ips[0]),

     

       
21
       
+
       
            AAAA(name, ips[1]),

     

       
22
       
+
       
        ];

     

       
23
       
 
       
}

     

       
24
       
 
       


     

       
25
       
 
       
function hosts(_names, ips, opts) {

     
···

       
52
       
 
       
D(

     

       
53
       
 
       
    "gaze.systems",

     

       
54
       
 
       
    REG_NONE,

     

       
55
       
+
       
    DnsProvider(DSP_BUNNY),

     

       
56
       
 
       
    DefaultTTL(1),

     

       
57
       
 
       
    TRIMOUNTS(

     

       
58
       
 
       
        [

     
···

       
111
       
 
       
D(

     

       
112
       
 
       
    "poor.dog",

     

       
113
       
 
       
    REG_NONE,

     

       
114
       
+
       
    DnsProvider(DSP_BUNNY),

     

       
115
       
 
       
    DefaultTTL(1),

     

       
116
       
 
       
    TRIMOUNTS("@", CF_PROXY_OFF),

     

       
117
       
 
       
    TXT("@", "v=spf1 -all"),

     
···

       
125
       
 
       
D(

     

       
126
       
 
       
    "ptr.pet",

     

       
127
       
 
       
    REG_NONE,

     

       
128
       
+
       
    DnsProvider(DSP_BUNNY),

     

       
129
       
 
       
    DefaultTTL(1),

     

       
130
       
 
       
    TRIMOUNTS("@", CF_PROXY_OFF),

     

       
131
       
 
       
    DZWONEK(["nucleus", "trill"], CF_PROXY_OFF),

     

···

       
38
       
 
       


     

       
39
       
 
       
  users.users.nginx.extraGroups = [ "acme" ];

     

       
40
       
 
       


     

       
41
       
-
       
  age.secrets.cfDnsEditToken.file = ../../../secrets/cloudflareDnsEdit.age;

     

       
42
       
 
       
  security.acme = {

     

       
43
       
 
       
    acceptTerms = true;

     

       
44
       
 
       
    defaults = {

     

       
45
       
 
       
      group = "nginx";

     

       
46
       
 
       
      email = (import "${inputs.self}/personal.nix").emails.primary;

     

       
47
       
-
       
      dnsProvider = "cloudflare";

     

       
48
       
 
       
      credentialFiles = {

     

       
49
       
-
       
        CF_DNS_API_TOKEN_FILE = config.age.secrets.cfDnsEditToken.path;

     

       
50
       
 
       
      };

     

       
51
       
 
       
    };

     

       
52
       
 
       
    certs."poor.dog" = { };

     

···

       
38
       
 
       


     

       
39
       
 
       
  users.users.nginx.extraGroups = [ "acme" ];

     

       
40
       
 
       


     

       
41
       
+
       
  age.secrets.bunnyApiKey.file = ../../../secrets/bunnyApiKey.age;

     

       
42
       
 
       
  security.acme = {

     

       
43
       
 
       
    acceptTerms = true;

     

       
44
       
 
       
    defaults = {

     

       
45
       
 
       
      group = "nginx";

     

       
46
       
 
       
      email = (import "${inputs.self}/personal.nix").emails.primary;

     

       
47
       
+
       
      dnsProvider = "bunny";

     

       
48
       
 
       
      credentialFiles = {

     

       
49
       
+
       
        BUNNY_API_KEY_FILE = config.age.secrets.bunnyApiKey.path;

     

       
50
       
 
       
      };

     

       
51
       
 
       
    };

     

       
52
       
 
       
    certs."poor.dog" = { };

     

···

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

···

       
1
       
+
       
age-encryption.org/v1

     

       
2
       
+
       
-> ssh-rsa Abmvag

     

       
3
       
+
       
XNh6H/W0srZXbGmkLGQ/YpXfamisyK/duLeSftkcrXU67b5s8x40HUv1NaKr/QQt

     

       
4
       
+
       
7ZBvKfm+8YsKcmmXaIINOHl6/LQ6GTpWprN91VDxTGOGzpO/GmD8MOUk8zfJYh+D

     

       
5
       
+
       
3soDoZuuk1gr8Q7+f8AIrfT+x3QwHA2h3hCm3un3MqhmAicTTip2C3NFQhlsEwHi

     

       
6
       
+
       
DhgOJ1Wy9/lSXwIzhg62s8KDOQ4cBETA8PRvspWh8GsV1oLU/brk2itwUaj0P8xA

     

       
7
       
+
       
uQrQzo71rbUttXeGnW4yBZjzzGMJe5iHY3H4aQxjklC1yGpInDf3HGaO6X/yaZBx

     

       
8
       
+
       
vRx2YxwCH4AdhgVpllbZo2++uGX8mye6fu5Lap04+dXU+ubglEvDQ1uRDrbXML9/

     

       
9
       
+
       
PpRszgmu5z7k9u+qWI/aBywUChvVSy4TDWKcj2JAqvCuU7QYiEi6SKhIiDLNd/BQ

     

       
10
       
+
       
7aa/GHSUpUu6TnpRwuBF4l2g5+jO27hsNWb3nAm/SV5YHEVCn+Tr5PiRPxBK8Fa0

     

       
11
       
+
       
ngJjBK5r4ra+uGulwGn1uoM0jYVCl6EtjtKgLeP5cvbdLylKWRXRYxyL7XTxqmHb

     

       
12
       
+
       
oLJsVvxuF1pFiaUkAmMBctaYdMw9EVwV8vTp4/eebVe6pU0Lmxv5B0u5nDiWar5o

     

       
13
       
+
       
RQzfwfGhtOaE0PUQNqVz7VfdoIzCcUjqnJMwInh+XwU

     

       
14
       
+
       
-> ssh-ed25519 y5W/qA rZ2rTM2n2bPULAefeeUvEFwskCNIEh5KdkC7uEnBcXM

     

       
15
       
+
       
P75OaqdeAt3BVa/xprDvJ/bLoGLkU6qdteVvwD9fO8M

     

       
16
       
+
       
-> ssh-ed25519 LaQclg Bnt8Z3Cve0gG6ItbJq+1+fUT/ykFsngstap8ymEr1m4

     

       
17
       
+
       
filHMr3njOkRpbu4UwutvqxVLf8joTBvqs3JT1gu7kk

     

       
18
       
+
       
--- pkIfClG050A3Kp8c+HUQJDwlxM1BbFaCRx8Vp0++xbI

     

       
19
       
+
       
4�dc���/\�ڦ �@:e��:e�o;�

     

       
20
       
+
       
�E�d\W�#m

     

       
21
       
+
       
��WA��#�uaJ��T�<���X�R���X�X"9
���)�'U:7��+�,�hNϏ�Ul\�FSP8c
     

···

       
1
       
 
       
let

     

       
2
       
 
       
  yusdacra = builtins.readFile ./yusdacra.key.pub;

     

       
3
       
-
       
  wolumonde = builtins.readFile ./wolumonde.key.pub;

     

       
4
       
 
       
  dzwonek = builtins.readFile ./dzwonek.key.pub;

     

       
5
       
 
       
  trimounts = builtins.readFile ./trimounts.key.pub;

     

       
6
       
 
       
  develMobi = builtins.readFile ./develMobi.key.pub;

     
···

       
9
       
 
       
  "nixGithubAccessToken.age".publicKeys = [ yusdacra ];

     

       
10
       
 
       
  "websiteConfig.age".publicKeys = [

     

       
11
       
 
       
    yusdacra

     

       
12
       
-
       
    wolumonde

     

       
13
       
 
       
    trimounts

     

       
14
       
 
       
  ];

     

       
15
       
 
       
  "pdsConfig.age".publicKeys = [

     

       
16
       
 
       
    yusdacra

     

       
17
       
-
       
    wolumonde

     

       
18
       
 
       
    trimounts

     

       
19
       
 
       
  ];

     

       
20
       
 
       
  "clickeeProxyConfig.age".publicKeys = [

     

       
21
       
 
       
    yusdacra

     

       
22
       
-
       
    wolumonde

     

       
23
       
 
       
    trimounts

     

       
24
       
 
       
  ];

     

       
25
       
 
       
  "persesSecret.age".publicKeys = [

     

       
26
       
 
       
    yusdacra

     

       
27
       
-
       
    wolumonde

     

       
28
       
 
       
    trimounts

     

       
29
       
 
       
  ];

     

       
30
       
 
       
  "headscaleOidcSecret.age".publicKeys = [

     
···

       
38
       
 
       
  "cloudflareDnsEdit.age".publicKeys = [

     

       
39
       
 
       
    yusdacra

     

       
40
       
 
       
    dzwonek

     

       
41
       
-
       
    wolumonde

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
42
       
 
       
    trimounts

     

       
43
       
 
       
  ];

     

       
44
       
 
       
}

     

···

       
1
       
 
       
let

     

       
2
       
 
       
  yusdacra = builtins.readFile ./yusdacra.key.pub;

     

       
0
       
 
       

     

       
3
       
 
       
  dzwonek = builtins.readFile ./dzwonek.key.pub;

     

       
4
       
 
       
  trimounts = builtins.readFile ./trimounts.key.pub;

     

       
5
       
 
       
  develMobi = builtins.readFile ./develMobi.key.pub;

     
···

       
8
       
 
       
  "nixGithubAccessToken.age".publicKeys = [ yusdacra ];

     

       
9
       
 
       
  "websiteConfig.age".publicKeys = [

     

       
10
       
 
       
    yusdacra

     

       
0
       
 
       

     

       
11
       
 
       
    trimounts

     

       
12
       
 
       
  ];

     

       
13
       
 
       
  "pdsConfig.age".publicKeys = [

     

       
14
       
 
       
    yusdacra

     

       
0
       
 
       

     

       
15
       
 
       
    trimounts

     

       
16
       
 
       
  ];

     

       
17
       
 
       
  "clickeeProxyConfig.age".publicKeys = [

     

       
18
       
 
       
    yusdacra

     

       
0
       
 
       

     

       
19
       
 
       
    trimounts

     

       
20
       
 
       
  ];

     

       
21
       
 
       
  "persesSecret.age".publicKeys = [

     

       
22
       
 
       
    yusdacra

     

       
0
       
 
       

     

       
23
       
 
       
    trimounts

     

       
24
       
 
       
  ];

     

       
25
       
 
       
  "headscaleOidcSecret.age".publicKeys = [

     
···

       
33
       
 
       
  "cloudflareDnsEdit.age".publicKeys = [

     

       
34
       
 
       
    yusdacra

     

       
35
       
 
       
    dzwonek

     

       
36
       
+
       
    trimounts

     

       
37
       
+
       
  ];

     

       
38
       
+
       
  "bunnyApiKey.age".publicKeys = [

     

       
39
       
+
       
    yusdacra

     

       
40
       
+
       
    dzwonek

     

       
41
       
 
       
    trimounts

     

       
42
       
 
       
  ];

     

       
43
       
 
       
}