commit b2e5ec49c9273b72704fc4027843295a0a944f88 · pyrox.dev/nix

+24

hosts/marvin/secrets/minio-root.age

···

       1
       1
       +
       age-encryption.org/v1

     

       2
       2
       +
       -> ssh-ed25519 iqBxIA mgvSF87cU7AZU7wodayiSUZAKkAkwqSrtjhqa4Pykl4

     

       3
       3
       +
       eFNRjsChXz5ij9uOJvf+mJIE5zd6pwKJie7UKmwl5bE

     

       4
       4
       +
       -> ssh-rsa fFaiTA

     

       5
       5
       +
       NcGWHG9CTQ1Gpje+gsMrVlp1qc8w9NW+Onvv8WhaI+IFVEcUD85fvgPaO2jI88jK

     

       6
       6
       +
       TXyPk9RanxiCupk7dF9OXqMprOHexss+h9SSl1AN+4V0Ob/H0r63de0Uuro70t/4

     

       7
       7
       +
       /4FP8t5AE/aoFGdw6CeGyhOYjoLo6YRZAq4fYO0vvitFdcbWVm99OFbO3WfoxNZB

     

       8
       8
       +
       TgUJ2ELV1mRfPKe3QwHYLztKcyxN4CArjNjQvjQbLXS2Hbu3I4f4qIdKPwGVC1HE

     

       9
       9
       +
       Q0c9veAaffaAGgbNUyohDjN4I4jEzkRhTlRN4LNQmOUNLBorWu9ml+IyCnsg2Q+a

     

       10
       10
       +
       nIyp6OvE7t0qElPv7H4m7krBP6WsSXLhUkCd75VgWEgJRqsLz7p8XyUpb/EhPmql

     

       11
       11
       +
       CQy8gcAnsvNjYzC0xpZKsxN37dRvmTmQkWd3E1w4XDwHoh8EMdVXFkTAIZ3IZabZ

     

       12
       12
       +
       4MSkwhtgTBMiQvWMxIPN9fgsd6t1GawDsH+uN0tPpBslerlF17bszmdSdVYpYZBN

     

       13
       13
       +
       Z2YE9z13vbL3eHvp83fp7n7Ale8sFd6FQ6VpbAa0xHiwYV0WooUHymhcG2W8Lcq9

     

       14
       14
       +
       5w9LJSaV7HMxjc0nUBloxsOF6ODcrOsfNo1VXe1vnbDAwhDqpcwaylxUoh3zpXHW

     

       15
       15
       +
       XBEIzqVG3qC3ACD/xqCy27DkomgKXCG9eJvirAiQ2Uk

     

       16
       16
       +
       -> ssh-ed25519 wpmdHA xWldzzokOiLqGXnhbDz+xpHYeqkV0ZNuQJqGp1h28VQ

     

       17
       17
       +
       i2/gdjHevsacZhuSDeABMAKEbU0U00U0TQWSHDS82ws

     

       18
       18
       +
       -> \G-grease v0 "."c0,-f Y3.

     

       19
       19
       +
       MpzHrbDONd6D0zPzvCfz/ycI8sKBIP20soAtSN7EucFLN6BCbb13KT1BOh/Yvg5o

     

       20
       20
       +
       +52Mlpg3p0KAdZFYp9Siqmcrb8GEEZ/8lqKu/n8TyD1BWe+eWq2PfbrhCtgqvMlR

     

       21
       21
       +
       Dg

     

       22
       22
       +
       --- lLxTWRzSaZ/GAzAmD88c//dzNqT4UDZQb4szP7MgCGY

     

       23
       23
       +
       +�P��������q�f=Yc��,)��F�P�9�.�����Z<��ɟF�c,�q���o��Y �>������\�l��z��2ϯ���_s���z��&_�B��q<�J����+0h�_��W

     

       24
       24
       +
       隓

+4 -3

hosts/marvin/secrets/secrets.nix

···

       8
       8
        
         default = [marvin yubi-back ssh-new];

     

       9
       9
        
       in {

     

       10
       10
        
         "authentik-env.age".publicKeys = default;

     

       11
       11
       +
         "dendrite-key.age".publicKeys = default;

     

       11
       12
        
         "external-wg-priv-key.age".publicKeys = default;

     

       12
       13
        
         "gitea-db-pw.age".publicKeys = default;

     

       13
       14
        
         "gitea-mail-pw.age".publicKeys = default;

     

       15
       15
       +
         "golink-authkey.age".publicKeys = default;

     

       14
       16
        
         "grafana-admin-password.age".publicKeys = default;

     

       15
       17
        
         "grafana-smtp-password.age".publicKeys = default;

     

       16
       18
        
         "miniflux-admin.age".publicKeys = default;

     

       17
       19
        
         "miniflux-oidc-secret.age".publicKeys = default;

     

       20
       20
       +
         "minio-root.age".publicKeys = default;

     

       18
       21
        
         "nix-serve-priv.age".publicKeys = default;

     

       19
       22
        
         "ory-hydra-secret-vars.age".publicKeys = default;

     

       20
       23
        
         "step-inter-ca-crt.age".publicKeys = default;

     
···

       22
       25
        
         "step-password.age".publicKeys = default;

     

       23
       26
        
         "step-root-ca-crt.age".publicKeys = default;

     

       24
       27
        
         "step-root-ca-key.age".publicKeys = default;

     

       28
       28
       +
         "tandoor-env.age".publicKeys = default;

     

       25
       29
        
         "vaultwarden-vars.age".publicKeys = default;

     

       26
       30
        
         "vikunja-env.age".publicKeys = default;

     

       27
       27
       -
         "dendrite-key.age".publicKeys = default;

     

       28
       28
       -
         "golink-authkey.age".publicKeys = default;

     

       29
       29
       -
         "tandoor-env.age".publicKeys = default;

     

       30
       31
        
       }

+10

hosts/marvin/services/minio.nix

···

       1
       1
       +
       {config, ...}: {

     

       2
       2
       +
         services.minio = {

     

       3
       3
       +
           enable = true;

     

       4
       4
       +
           region = "us-east-1";

     

       5
       5
       +
           browser = true;

     

       6
       6
       +
           listenAddress = ":6990";

     

       7
       7
       +
           consoleAddress = ":6991";

     

       8
       8
       +
           rootCredentialsFile = config.age.secrets.minio-root.path;

     

       9
       9
       +
         };

     

       10
       10
       +
       }