stuff

secrets/forgejo-admin.age

@@ -1,12 +0,0 @@
-age-encryption.org/v1
--> ssh-ed25519 SFHVrw 1eOoURN0W33AUbKglRCVBNzW3RMTyLIwWMRdI/n0iHI
-cE0GpXpRyHqxXotqgvEvYYue05yASNmKpPS7QDadVOQ
--> ssh-ed25519 S+dwQQ YAhXTqFh18wXzQ02TUvfZJvYdyCZcNufvNTJ7ZjByGk
-T3bb0jOs9SL1/5cmsHbYrxYsW4DBOXWN3Bc93/bQ+c4
--> ssh-ed25519 bPbvlw isx3ppsjOWxJgp6w7m1+a1W5DsMWSrYmcwD/I7kfREY
-zZBV0iGYfF5kRdwnXzeUYCaNxrDAFn97072kg2d6uaM
--> ssh-ed25519 ffmsLw K6sD34XppM8mIaFAB4h43J8miednzvR4W9KUczc0Hk0
-pxOWAsf24bCVDTXeLgayKgqWB512Dzx/1+Gx17RT31I
---- JvtcFW8QYtA1PViXec9je99Shc/KVbACsvDZEfBV5kU
-D2ǵ,j¬q«˙íˇŞŢ¤ 7L­Ü­AŃ
-–ĄˇµfGQľë4ŃSËgŞ›á«<C3A1>·	

secrets/forgejo-mailer.age

@@ -1,11 +0,0 @@
-age-encryption.org/v1
--> ssh-ed25519 SFHVrw rEjkYPlPge7UMzbYwPwH80iWaQqIhPHwq9UKpF1LdEE
-hn+knYiTYUTobUnAx50E6S7kAwzOhJC3aTXp7tB6kVs
--> ssh-ed25519 S+dwQQ JHScT9expJ30xkXY/QZZs6fttyiUz81+xCnt4FCyLQs
-m1OykPIXU1WI/7rL/0AroNBp1alYCo7PsmKn6dMjiTM
--> ssh-ed25519 bPbvlw IFnxf/jKXZptRpEY7F00agI3yEbztWL8jf8WK03bZ3U
-djSqXIYLK+puHMUtVG2EOQyc1mwFRxUshkDPSNWVhkE
--> ssh-ed25519 ffmsLw S325emLg33EycUbKCVzD8nLYbVOrQoOhnW5HnJXATC4
-IKBSnzg1BaHYtJhVc8FliY1XVB7P46GsuW/ffeuEa74
---- QK8UE0WcbtpaBKOZJ/X9n+ZH9Uq1i+y2axyX+zjosXY
-G*‘9ßËk5åƒ>Ù\™Šu{<7B>ÃÅ<C383>ýáj<C2†ø~¢Ó<C2A2>„CÑZÅú:e–

secrets/forgejo/admin.age

@@ -0,0 +1,11 @@
+age-encryption.org/v1
+-> ssh-ed25519 SFHVrw /Rn9mDfrW6WXvk2rHnvFRikKPKjytoZSxr7nIHfaYBQ
+dk43RULffWoNdpcyg46PYoyp4+Se/P7hKOq9dlYKHQs
+-> ssh-ed25519 S+dwQQ j6cPjS+jTJZ3vX3RtBgcdHDNYUpwHaK470znK3t2PAU
+3x9YctUrApvED+9Z8RXRzYbYvzmWcY6OLySDViAAruY
+-> ssh-ed25519 bPbvlw wLrlOsWNEhfkJS08IVvIRbuadsZj/mw+J3PmH9dlD1c
+FZ2U3gdU2Y9LqCiQ1mz7beYSPyNY3tIEbsPGVfMjmHM
+-> ssh-ed25519 ffmsLw aCodb4aiUqIlMGzR7YwQDb8eQh1BHvmUeQAcOaT7fgo
+KxSrylhmv3aylhqUp4j9dO/z5judvI5CeRDXE0XqbyE
+--- 3tsgl8nyTeB1+YqslwzwdENX1QbP47GZG4EbRPKy8r8
+êqJI¨ä÷h£Œ .–äHÍóû'àéOöÍ-èOb¦õá½ÙË_s6„‹ò”Ö·¿¶

secrets/forgejo/mailer.age

@@ -0,0 +1,11 @@
+age-encryption.org/v1
+-> ssh-ed25519 SFHVrw 6hEwUxHZ7YxTRZGxM+pGfKKtpt0KUME5onbtQqHdsxk
+zUEng+GntP/LGygdZTPCsFK9Vmn++VODWR0lWCuC0kQ
+-> ssh-ed25519 S+dwQQ eznFi6oeKUpS1VmkK3cVjcRFF3zI6o9zzFkukj1X6lY
+KApBmW4r4AQwqv6DrBg8I4x2TCUjgGOzHOfsLP5NDx4
+-> ssh-ed25519 bPbvlw 86J2AsTVgm3GAbLmlOi5n73b8qgHxsIlDZKtM96zcQo
+SYR28elHJA6Z0NCo90bZVQvixpKGTWmeafqr0CrLhcM
+-> ssh-ed25519 ffmsLw LdxVlRNsqwSZc0qXWC7N+q69PTIXY0q49upfuEk5GwM
+Z73ga/GtcdDUgAWRteHat0gmtISjTbVvzjUaugtYwCY
+--- D065LOfAd9xDAc2QMAmEZQeduBgIaYtpC/W/wgcwY7Q
+½R~ˆOšÁØZåžJ¥wjÊø]°™ñ²1Ì~À«É9‘„ò¡QøûÃV²žm

secrets/restic-vessel.age

@@ -1,11 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 SFHVrw IS1zLmLNl5l0+IJoZObLSKzjg12V9hPCYOuD0ZJphk8
-FipqdCWVqXZ9RdNPXUnyqM8xvktCbjUHyAbh8GRLLg0
--> ssh-ed25519 S+dwQQ 0oWHsd3MryyksSbUZEWdFw8kyLPaxko1bMUWbmSxlyM
-xgu+2woj3pIRHcR3XasLaiMZqs2uj3VoDh8da9GQADs
--> ssh-ed25519 bPbvlw JwdTUP9poe45VREZKqDcqmM4Sgr8BMB3CrTw6rS+VFI
-WWkM2uC2uovhB5ZkQVQ4xnNKhY3B+2Lus+3Qd+SZFKE
--> ssh-ed25519 Sm0lOA Nu0x8ec0G7N9Tc1JNRGzHWCCUIY9zUanTOgfZfxrUTQ
-iueKqGbDunTkpgVsymj6yc7t7J1yhvg1ug0PJHRCyX4
---- 2ZAyA0YLFKg9DgbtmN4TVJPc6dLhrvu8UJMR0+DZItc
-Ž<0E>Ê¡;Ö*Ô(K‘›Ù’7öG©Žy
©,‘‰ï®°5˜dK>õ6ü’”g“§
+-> ssh-ed25519 SFHVrw nyWvoLnNXzbxV3pKyVFIJIdzO1WOCHThAEKe0dyDxgM
+N6t8SrPsvLrIRG4iu9896ZN8Ebzez7/pLC4RnS1ZEhs
+-> ssh-ed25519 S+dwQQ UPHt9CTJmM9VvubDx5XSnTusm4oSyq+/A2R5FLYKbj4
+n5wDmZwRmyjunS7njesVc0PZKhC51x5xqDlrD/9d1VE
+-> ssh-ed25519 bPbvlw /2b8HRR2KzTiiVQKxN82oQ8PqVcRKEJ6hwNfMhFaf2I
+1cDwbIcK9VI65Rb84wN87SdkyVP357+WrKk04PfXNhU
+-> ssh-ed25519 Sm0lOA LZ2gX5nnMF3xbo/dhGQa6Ms5ifheF4ulag8mKJp6YEs
+atOPulZBoi5Xf2uJ+bAXVo3I+XIitkaFM6eoMa7oqwo
+--- R15O8zIkvnQHp0FOz24YB0DPOaPWfkt3G4GbBs+lY2o
+¹ÝÖV7]6¿c”:¤D“°*@z%M3Ô=å\B§Ò
ÁŒZ¦´Û%2k¥»

secrets/secrets.nix

@@ -3,19 +3,21 @@ let
   inherit (pubkeys) users hosts;
 in
 {
-  "user-helvetica.age".publicKeys =
+  "users/helvetica.age".publicKeys =
     (builtins.attrValues users) ++ (builtins.attrValues (builtins.removeAttrs hosts [ "insomniac" ]));
-  "user-insomniac.age".publicKeys = (builtins.attrValues users) ++ [ hosts.insomniac ];
-
-  "miniflux.age".publicKeys = (builtins.attrValues users) ++ [ hosts.abacus ];
+  "users/insomniac.age".publicKeys = (builtins.attrValues users) ++ [ hosts.insomniac ];
 
   "vaultwarden.age".publicKeys = (builtins.attrValues users) ++ [ hosts.abacus ];
 
-  "forgejo-mailer.age".publicKeys = (builtins.attrValues users) ++ [ hosts.abacus ];
-  "forgejo-admin.age".publicKeys = (builtins.attrValues users) ++ [ hosts.abacus ];
+  "forgejo/mailer.age".publicKeys = (builtins.attrValues users) ++ [ hosts.abacus ];
+  "forgejo/admin.age".publicKeys = (builtins.attrValues users) ++ [ hosts.abacus ];
 
   "restic-vessel.age".publicKeys = (builtins.attrValues users) ++ [ hosts.vessel ];
   "restic-abacus.age".publicKeys = (builtins.attrValues users) ++ [ hosts.abacus ];
 
   "syncserver.age".publicKeys = (builtins.attrValues users) ++ [ hosts.abacus ];
+
+  "secure-boot/glacier.tar.age".publicKeys = (builtins.attrValues users) ++ [ hosts.glacier ];
+  "secure-boot/abacus.tar.age".publicKeys = (builtins.attrValues users) ++ [ hosts.abacus ];
+  "secure-boot/flamingo.tar.age".publicKeys = (builtins.attrValues users) ++ [ hosts.flamingo ];
 }

secrets/user-insomniac.age

@@ -1,11 +0,0 @@
-age-encryption.org/v1
--> ssh-ed25519 SFHVrw 5jjXKCP1LHhUGYyri1g04ZvmJCT3oaHKv3rrX17w2gc
-7WncrC6u6edUne4VQGZb/9EnNsL4JRQ/7egfViuclpE
--> ssh-ed25519 S+dwQQ KwH9DQOT0uLanFKUkbppGIX9Q5aDjjZZYO7gsF19K0c
-ese8sLUSS8c5FgMRITavOj6bqPWV0M3/zOnbyaSj6as
--> ssh-ed25519 bPbvlw ufEzOz5vppSomacvWoMe/RAKm6GKPNMjnGbhLpuID3o
-HKh4+nBARw8pHhl1+p+hwdvXY+wG4448pnUarQp12rE
--> ssh-ed25519 8l76Rg dMN8haWgW3i0EXv2ki8EySvdGVTQ36b6JKC4zSRNWmA
-6hoVTll3E8cYkRM1gNV4OU65dcYS/Ufy58xNOgppms8
---- jYMZqNR10eeeo2aUlSWM02A10ykvDB7mr+DZf7JxdDk
-- /ezG`[(¿€¡K;~BŠUUZ½K|ÓHnéeÝÙ_“iÇVO§?œÿˆ-4Š5Ãw‡7¾Õ±ìQ7/|&h‹÷rÐ(}¬ú’—þO›¯†L°C¥È(âVº
¬ŒhW5

secrets/users/helvetica.age

@@ -0,0 +1,20 @@
+age-encryption.org/v1
+-> ssh-ed25519 SFHVrw 5O32JjIL6EnnFpSEWuqYSnlQXCi86TjEGU5hKxEVfUk
+mnI5nBEyM/M4hiOEl0lBdBt0v4cthrIlnWd6kvgud5s
+-> ssh-ed25519 S+dwQQ bOtKQWynZxYPRukkGBVJ8p6d7mU6J1LxDc7RbxRjxn8
+ykEExNA0KIXWRS0oAME7c6lScb7P5PR6rcoao35dd6s
+-> ssh-ed25519 bPbvlw mBeVkAPVjuPyiGZoWTtU9cZEJ7DjT06wS7+BbK8xrlY
+l5yxGa/CH2pM6IL6SeWgtQg/nJvcU6vLZQp9f10eQCg
+-> ssh-ed25519 ffmsLw LqpIMiGZF5DZwibH8hJD8V8yJfpaRddJRxFC+MWqaQQ
+1mGrkOKPZ7ZOQ/kwHA0VigU9DUY8SYTxRiq5tZnaWqk
+-> ssh-ed25519 d2fKsw L8PpoPH43jKLkC8tduV2ILAypnwfGP2eJUTjX5foLzs
+/Hu7tHtq9m4MYV6K48KDk68HWJzzCCr1DL7dKCyvndo
+-> ssh-ed25519 US6ATA XqSHAd4tAGQgfD5zZUgGi85F4WX3Uz3K72ZbSf1b7lI
+EYfjkYeoG7fvskrKdUnp/Yz713QfF2Wb+zZyXC/0pHc
+-> ssh-ed25519 Sm0lOA UTaaX0IZkosP/zU1s1a1ExcD0Y3lgru+RoAZq4vjaRY
+CLFv9o3r3R5RFFlkglmvKQ0S1ROY6VI9yvMO43YjZf8
+-> ssh-ed25519 bgFypQ 6YB0i3QUbaAbTim7e+KSBYUUCRLCbrE+Tg9iW8MG/Uw
+EN/o6IgKLUjsNkCNfEeThJZWEmglRis3yWTVWkq0ATg
+--- 6oBNTwtiKyo7lhARYSWj1t3pudr+m5ESdA95+Ij3orc
+6TÃB—ä#ì§êgXš¼4QUçê¸ýª‰Júö›˜V€(´éÙ32ZõÉŸD縪Àª§/Û&9
+<±ÜW<C39C>»®á÷\cmRsy”tŸ4Àp'èƒ/DÐPw4æ:ë
çÖ×nš%"™3k3$䀫±!ˆ¼~¼–IAo¿Ä¢™Ut*µ7ÙÖó]<5D>V®

secrets/users/insomniac.age

@@ -0,0 +1,14 @@
+age-encryption.org/v1
+-> ssh-ed25519 SFHVrw iq1lz1cbf7HgkH5Iglb9j9JChuJQALY3JPltoh0DcR4
+xHJ4UsmFymFb7f5mGR6Yj8GGqKQRmD8YLdqYv8wxJMU
+-> ssh-ed25519 S+dwQQ wKenvkV4uWqPHN4PNBZ+hQhmtQwULS/Vft6UDYmeKhs
+G6fLhpl3K4S/JREeUBnIPs+XOj1BO0S2pAhrOPeQSvI
+-> ssh-ed25519 bPbvlw GRzNM9ZIwICpUEjEVl+3Sk4jBKTQ8LxmqLAyaILTUHU
+2RLJirofLXeDyvYijMwW5VbDSq6a0iZpCZU7WYtvgFE
+-> ssh-ed25519 8l76Rg KReunAJWnHAVMs6Se2MvkWtsnHJwyZA1ZXExvxD93zE
+xJUkcjqO33R728mU0dmhBnmF45ZkuxXtW0XgwVf74HA
+--- aNnE3YE/Oe/IcRUDuoMNNBeaIcEtPfCpy69bZX8TQg8
+é
ù}ÛÔ'C¼Æ=vTЄq¤²
+
Ób.ö²Y÷îä?ö<>—ï4êÜY”e¸¦5¸æÉÜ|ôþÓ°³¨7A]+3‰ÊñÊo¹2Ÿ
+	õ±•&'ü0˜¹ÁÌؔⰺUâ¾
+˜x‚»ó