add backup secrets to config for hosts

This commit is contained in:
Tim Schubert 2022-08-07 12:50:07 +02:00
parent c43341a8b2
commit 3fccfe3b67
Signed by: dadada
GPG key ID: EEB8D1CE62C4DFEA
25 changed files with 242 additions and 75 deletions

View file

@ -0,0 +1,9 @@
age-encryption.org/v1
-> ssh-ed25519 L7f05w zuSOhGaD5loTrVe42D+9wisBe9uLPVk4jB04aNOnVkE
TPkwqjoryGxiw02PJEOXTU/Ypt3ux5DG0df2FmLVCY0
-> ssh-ed25519 Otklkw I6aDhKl2KS+JLkKzh1Wh2dlCHsjFaQpfoNvsoudBF38
HsSCHtawaNCyhd5p8mdXQGiMidCp2PtFydES4frjGY0
-> C'Lx21-grease "Ab:ca- #
/jYss39MTt1fbOK1t7s
--- ulSvMSFv1Ow1k20uMbgeQCO62S8wRNtuWuJVkjAlx/4
­u„¼(6'ò4á0½¨Ë°£9)ßU^np5:ïËÍtdD§æMÓò…å?OD×ÄZÏøZ÷39Á6ÈlüÐÒ

Binary file not shown.

View file

@ -0,0 +1,10 @@
age-encryption.org/v1
-> ssh-ed25519 0aOabg 2h4VEFdhUUGkviD4i0wm3NL9944guan9O0BDoz/7mGQ
D9clRO4ibGPMMA5KLOXU9CPlNSulZA9RmKelxUKqy4E
-> ssh-ed25519 Otklkw kG8jXHeM2kYTBTpYfo2N4V/hJx2HdLPlgAXTZRKJmR8
fesI+DSgCTMIY1pLJMx0q86+va3dF1ZFj3kRK+O0MIc
-> Z7_:1-grease 17g=iG^I #3%B ,.5lz
6YSTWBwtchUxqxCR2EvUic+OfO+XByzyqirtt8hW8eFdF/blR4McETrV3lb6n+xW
8SyICmVL60yGj3QDZWmus/FV8xaXh5hSJLqGNtwPdiM82mez
--- klL1U0W7ki7TRcM/lDsoR+/facAm7PDKTEw7bPWUmvc
L÷F™<46>7[j?EDc™(ÂÍT±4e„i9—Lj6Câs`å8ÿÚ¨2§à"X«5Šø©Yã´ûnB‡ÔáK ŠšÇm0nÄ? `ˆ^ÉYWyøc€¦

Binary file not shown.

View file

@ -0,0 +1,11 @@
age-encryption.org/v1
-> ssh-ed25519 yMjj5g V9rC+0UIZO6GMFXjsoF3qvSkEnc3iHaqsv9yQHg6XWg
lLkAndMDp8blMYJqviD+6H4l2uEqzsP9fsr8sZVCdXk
-> ssh-ed25519 Otklkw ehLzOysl9JmqPb0MuaSwg8MvNnPg44807PGyMsh5hhA
pf8vtXa85gF1XL2Xm1zCaAzDdCaebNFpZC1wm7lnUCg
-> #|)e#-g[-grease
UPUrPqT4ez2irVMxwsVYiAhM6pEaAzWt8RYNWzMtARHsTDLU9J17+x4
--- rigjthxdwl7djFf8pSoQuZEZfWLsMa0oWLplrQMOe7c
<EFBFBD>ý
˜ü6.Ç=ße Â}ÛoŒ¾ì(<28>
ÒµdÀïCÓïÉ«ùV¶š‡…¥9¾z—ܧÎ%J•ßRÒ<52>D_¡

Binary file not shown.

View file

@ -0,0 +1,10 @@
age-encryption.org/v1
-> ssh-ed25519 thf/Uw PPtflHayBrV0oWfJQr6RW9nJphdVFI9S5XjI+kmRe1M
fnwzt27PMwUYMqS25Z+0zxouC27KjeXaIbN4dYZPRLA
-> ssh-ed25519 Otklkw Ko14b+XMTZHVXMRN/JrfwTUrZA8ndj7bfaxe4O8/BCY
zRt6bLCbZPhoxKuLDglex2SpDwjUxyP6eKFaHzc0zu0
-> /:G-grease c5#5Vm+\ KX,
nljmCZ+NP2fbmIjzA/OiL4i4A2+UPRBf3KrXe3C6/lJaxiRggeXqdrucy/lLNjda
Y8emrCT5o7DfryEo3QGUQkPujBgUgYvcB4Q/XlaWaLBcsSnW2D4eZQ
--- SYKRV9hejrBWXgVt8pCRKcTxFNljA2IIFkONLn8+nuo
5J-òª· épô³cÜ mJ|ö¸Š!Þ®¨@ñí™…<E284A2>à…T]„Ô=<3D>&;Ë5}=9<>ûª§§ ̽yé

Binary file not shown.

20
secrets/secrets.nix Normal file
View file

@ -0,0 +1,20 @@
let
dadada = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN+bBJptw2H35vMPV7Mfj9oaepR7cHCQH8ZsvL8qnj+r dadada (nix-config-secrets) <dadada@dadada.li>";
systems = {
agares = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPcbuLtU9/VhFy5VAp/ZI0T+gr7kExG73hmjjvno10gP root@nixos";
gorgon = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDCcwG8BkqjZJ1bPdFbLYfXeBgaI10+gyVs1r1aNJ49H root@gorgon";
ifrit = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEYO4L5EvKRtVUB6YHtHN7R980fwH9kKVt0V3kj6rORS root@nixos";
pruflas = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJKnYOgzxZ4DAeFL88MhIVtNmMEHMQhi/pNJDbwFWOJW root@pruflas";
surgat = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOOJ9UgAle5sX0pAawfRztckVwaQm2U8o0Bawv7cZfXE root@surgat";
};
backupSecrets = hostName: {
"${hostName}-backup-passphrase.age".publicKeys = [ systems.${hostName} dadada ];
"${hostName}-backup-ssh-key.age".publicKeys = [ systems.${hostName} dadada ];
};
in
{ } //
backupSecrets "gorgon" //
backupSecrets "ifrit" //
backupSecrets "pruflas" //
backupSecrets "surgat" //
backupSecrets "agares"

View file

@ -0,0 +1,10 @@
age-encryption.org/v1
-> ssh-ed25519 jUOjpw U3EPRp3r/aE8kSb+D4kd3F2pJyyPgrG13KvJ4ImavUQ
lsWg2WW/nC9FT0JrZfhXPHcHduPfd+wm/vktSpUbRBY
-> ssh-ed25519 Otklkw +Ic/y3KF0l4/hlFGSRCJEQ+HsK1U9eZusMhSsBuIsDc
QE2W7F9fg49UlX3n0baZVEoq9zsahcEr5oEzOk12FMg
-> +'GD%5-grease |:[SW0@b c 36`)g
rvXcBtMeumpqo2OKg4q5wvvIDkCqlnwbdPEzJSqsEXXI2LenSbV0NM1mVjCXyvvr
4pwDLhQkRnQ3DkftGp3veOluxRLmmg
--- PMICHLb+oVMRdtD93FZyDc6lWL35bjvF1QWJYXhP2IY
`õv=ôb>ÏØ”ÈÏm²äò^Ôèùù¡q§5Î ù´¯<C2B4>Ñ9™üs®ƒ2¨c"Jåðçµ5[»qR±zj-

View file

@ -0,0 +1,12 @@
age-encryption.org/v1
-> ssh-ed25519 jUOjpw tm81EffU7KnPZZwEg1qy/fNr8leqD2y0oJcR5CWXTCs
Rnby8Wipp9jwYmbc0UskdYMRxYQ4t9Yhxa498Wsn8jc
-> ssh-ed25519 Otklkw q99wMvDcRSZzW5Zu7QtJO9ThlyYKpUBf1Rn9w+j7f2M
3aqp1If/L7Db7ikXwBlqsAbKTdcozDat+on9jQip+Zg
-> t1"Uq-grease WXdB"'
EUhZx0b3UqMCazu+zjPWOfWNs8s+rRWyyZh3TvvvYs5fLNJJzSAfAXbG17zfhHMP
DgBwNaTjSvwhMjqAiBYafAbsIzuwxp4bcZA3jRQ+FMUerwhWhHrw
--- sZ0GULTVh54+TtUY+oOfgicZmiDB6RCavVjWkSR7A7s
ë+O€!pÓ¢W¦RÛ?õÿ/dù"ŽÛ%a6ßHm»dW¢Å „íR JÉ|ÌðÓ·¿Î?P 2HÏ<>´”åé€j$0¿<05>Ч“SoUBæ?œ÷Z™'Cå-K
á½lE(ÑýDÀÑØ±9—óÃë”EKÈ3öл:O´<17><>³R÷ž¨ð'«mXt}¬M
Aç³ïÔörÎ]ô²Ú¥zApÿt°ÁC·z·l4r"3Ç韸Ø"3¯ ™L1E¬ÓWKÏÃŽýŸpÛxqß|dÚî$ð•rIFiš@ùZž|l$;¿Øë<C398>×µEÅgìá˜8¦AŒö^< 7GÂñÑ%-º™¢ØzÇoøéVWOE+Î’Ç<¡„ã]çq€ <þÙ]ËÐrÌžlÁþä`PâÌ`™“:O&êýu*â­Šÿ©Ê8fÕo §U— 7ÄÓ²Å4ÏpVžìªÓ÷"pßCÅæyìG‡â¬—5Ù¤ßÙ€—9@iÑh4íµšTÙ5ni4³…?î<><>©