❄️ Dotfiles for our NixOS system configuration.

chore(secrets): update variable names, add key, rekey existing secrets

Chloe 0dc8e97c b32b9bb2

Changed files
+39 -26
modules
nixos
secrets
+5 -1
modules/nixos/extras.nix
···
inputs.ragenix.nixosModules.default
];
-
age.identityPaths = [ "/home/chloe/.ssh/id_ed25519" ];
+
age.identityPaths = [
+
"/home/chloe/.ssh/id_ed25519.age"
+
"/home/chloe/.ssh/id_ed25519.auth"
+
"/home/chloe/.ssh/id_ed25519.sign"
+
];
}
+13 -11
secrets/caddy.age
···
-----BEGIN AGE ENCRYPTED FILE-----
-
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDFDVDk3dyBtdXht
-
R0xWSE9oS01obUxRL3l6QVhWamNyZDRoZ1ZESEc1V3g4WkZZeDJnCmc0TlhuRlhR
-
MW83VFNWa3NCZjhyRHpXYlRiS2d0ZGRTMGpyNFlUN3hoRzQKLT4gc3NoLWVkMjU1
-
MTkgZVAzVHRRIEsvbWk2dFg1MlB0VGRTL2NET2FIWW1MREc1RUVGSEQvUFFoZTdh
-
Sm9RU1UKY2pTeW9BMnVlcHh0OS92a3ZLSWwrTUtEdm82ajFRdC91YzZiSzdKUnY0
-
bwotPiBSe3dlTS1ncmVhc2UgT1dyfSByZ2Y8bSA0dFVOLC0KbmEyQk1KaVlGcjdK
-
bGp1d3JML2Z5WFVsWnlxdzJ1Y3owTHVQNEJwMnMrc0Jvd0FKSm9pNnZnTVVicVdU
-
UmYyVQp0N2c4Tk1LR2x3cEo0WHNHS2ZCMW9DbEpBL3FOQ3FOakJZcDZ0aGcKLS0t
-
IHJxOVhmRzhacHF2ZWlRT1FaOHU3Wk4zOUV1NVE5VzgrMEtXbEUzOUpoWFUK0AIu
-
jL2DKEdBY9fnhsxzAJF3YdYvZp3ZodaO7zeeK23iCaqCB2MTFrMgJ5z420yA+JDH
-
E8wwcXDVNFfoEyLKcy4v/s4oNpf+aILb5TQMxBESMJ/LusA=
+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IGN2U2dKQSA3OTRw
+
N0pLbkIxZ2lvVEkyb0o4RGdZVVEzQ0VtSlp5MVJPMWNPd0xoc0JrCmRRMWR5N2hs
+
dFRwUVQ3RCtIb2hKT2ZvVlU4UUFBM0dkWmZ0U0lCUERZMUEKLT4gc3NoLWVkMjU1
+
MTkgMUNUOTd3IERweUM3ekJqTXBNTVYxU3p1OVhwZGxGdDl5bGNLRHBzbW12OHdN
+
NlpMRmsKendPWjFTZFFmMnpSWWNsa0NDM2kvTTNKYk42M01uS1BpazJzSGErUnE5
+
MAotPiBzc2gtZWQyNTUxOSBlUDNUdFEgb3prY01iWjBlS1pLSnZnTFJsOXM1NkVL
+
S3hJZTJ5V21lNFBDN21RTFN5VQpCa1lVNStyVWl5TS9Lcm9ZZHArV3ExWmViVzNv
+
cm9zNUdzN2ZjcVFkTjFrCi0+IDF3VVg2LWdyZWFzZSAvLUNTTzp0NSAyRUFrdSBp
+
UH0xIEgKWDJxU2tkQ20wZ29aQzlEWlh4RTQzaHBFV0tUb1hNUVg3aENOT0NxY0Z4
+
eEtpd3Nwb3BBYmU0a0JKZFBFOXFJYgpKMVNPcTIxNnhUelRmNmFqVGNsQVV6NTRO
+
d2cKLS0tIDYrQ2tWRWhHcTFGUnVNRU9kaWJCRkRSTXB5YTJvVnpwZ2ttLzhubGg1
+
N2sKd+UAtI0xQxss7MdlaHSRhAK6sOhBJ84PmnjDYDBhf4Xg2ON/EmD5AmUfcmcD
+
yEfwQSp1/vvUCtW1CXzEUswCRUzzhufms8GSLC7ehRAbhImhIK0lCKU=
-----END AGE ENCRYPTED FILE-----
+15 -10
secrets/glance.age
···
-----BEGIN AGE ENCRYPTED FILE-----
-
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDFDVDk3dyBZV09o
-
RHlHTWszNElqclZFM3FDWnRaQVZKbWYvcm1rZUdyV01lbnNockZRCnVTODV2T0k4
-
ckEzMnN5UmpseVZLZ3F2dmVnQ1BsV0hOVlNDdXpyaytsaVkKLT4gc3NoLWVkMjU1
-
MTkgZVAzVHRRIDZWcnBVOVJ3ZFdZeFJMYUxLeXloKzFnMkV2dW9LR25oU1JMVGFL
-
bXczU0kKUmhmN2FQWkl0TEhrMzFiVnpDajB4bEZUU0pRaGpGcktaQ3RhMDlrM3ZM
-
dwotPiBiKT1xMVpALWdyZWFzZQpTeGpyd0docEh6UXJTUmhtCi0tLSBsek9TdjVH
-
OWZoaDJKT3pFZkxaZXJ3a09UenpmVDY1ekdOVldOVTJzOEM0CpmiXeScFuofCW5E
-
aS/Rsu090wT1g+yn5ytGnXkDWWXO4+K7BEMLCVFipm7vi3W9NyjOEF8rWfJC5W8F
-
0wwxzypjtrdQ2Bp0yHZf/RqcM5uWBfz9paGfu7edX7mUQfxf5lUJoK4qNkvqqKbS
-
hiieLa1w53kYi5XjinBiJeQLjInB9Lp+uDEzLi2xM5H9XJyVXTUq1rI=
+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IGN2U2dKQSBheE80
+
VW1uVitPS3Eyb2hBc1YxZ0Yvak53M2ZaeS9NbG51bFV2ZFhNVkY4CmFZcHR1SDFm
+
djNYRlcxTEhtaFM4ZTNKSGRncG85Y3dBQ09OWjI2YW9xa1UKLT4gc3NoLWVkMjU1
+
MTkgMUNUOTd3IGRWcTdKd3l1bVVBdUdpZ3JhNms5YVo0RjFubnRDVGsrTktUYlFE
+
QWkxVkkKZW00WlNqQ3hCUjlKUm9QdkFkbkRQYnJSblpoa2thSm1ZakRlV3djYVZK
+
VQotPiBzc2gtZWQyNTUxOSBlUDNUdFEgdGJ2MWtpQ3VxOXMvMEVoVjBhbUh0UXlt
+
NlpTVisyODFjREFWQ2l4c2hpWQpOeEhNcjVUdlZ0ZjFxWFFTVC9MaHYxQUZTYVd1
+
M0VabkRqZ09qdnNHOXRJCi0+IFUqQ1ttLWdyZWFzZSAvTDEwIGh7MUYKc3dYYVhT
+
MmoxWm5wS2pUdCtCdVppVENzeXlPNmdQMWpMUmlOZGg5ajNoSjJjSWZsSlVibkJ1
+
bjFCS3VyR1NHTQpoL1Q0amhLUThkQjNaTlZvcTFNSjE1TEhON3hYMUJPT05lZlkK
+
LS0tIGNVa0Z4TE1iSkZITTNxc2VDQ0RNZ05Da0hFRVRjVUpQcjJRQldZRVllNU0K
+
9DqGs1dPBn2JRWjmSTtdmoM/4mLXMLCj2LNqQDVFsnu92+JL2ns2pC3BPa8ynY8P
+
ozEtfdrKn/lfTklrFUzVN6DY1965GmBcjDrAtdee+SQJH+5+fPoux6gEJVcSA0Ed
+
UeYrmvASts4h3JiMLcayXXIUYFEcmPMj9PNdfzaYvqHT4esV9vQXmI+kKKo7Qi34
+
Kc9Ovg==
-----END AGE ENCRYPTED FILE-----
+6 -4
secrets/secrets.nix
···
let
-
key1 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJug+9rnFngnFQpY0lAO0NuVBhDCcJc5imPHazgOSTTx";
-
key2 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICM6XP+CNc2CStEDe/W4LfkcRcG98obQiM2aqnydCRbX";
+
age = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJflwNs6B8GIVoGEZkeb56lqHq3qbWYp+PJZtvIGzVlZ";
+
auth = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJug+9rnFngnFQpY0lAO0NuVBhDCcJc5imPHazgOSTTx";
+
sign = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICM6XP+CNc2CStEDe/W4LfkcRcG98obQiM2aqnydCRbX";
keys = [
-
key1
-
key2
+
age
+
auth
+
sign
];
in
{