diff --git a/hosts/vessel/README.md b/hosts/vessel/README.md new file mode 100644 index 0000000..8ca9d42 --- /dev/null +++ b/hosts/vessel/README.md @@ -0,0 +1,8 @@ +# vessel + +## File systems + +* Main: White, 1TB, for the system and home directories +* Vault: Black, 2TB, primary for all data +* Void: Green, 1TB, for throwaway data +* Sync: Red, 2TB, synced from the vault diff --git a/secrets/forgejo/admin.age b/secrets/forgejo/admin.age index c32b18e..185915f 100644 --- a/secrets/forgejo/admin.age +++ b/secrets/forgejo/admin.age @@ -1,11 +1,11 @@ age-encryption.org/v1 --> ssh-ed25519 SFHVrw /Rn9mDfrW6WXvk2rHnvFRikKPKjytoZSxr7nIHfaYBQ -dk43RULffWoNdpcyg46PYoyp4+Se/P7hKOq9dlYKHQs --> ssh-ed25519 S+dwQQ j6cPjS+jTJZ3vX3RtBgcdHDNYUpwHaK470znK3t2PAU -3x9YctUrApvED+9Z8RXRzYbYvzmWcY6OLySDViAAruY --> ssh-ed25519 bPbvlw wLrlOsWNEhfkJS08IVvIRbuadsZj/mw+J3PmH9dlD1c -FZ2U3gdU2Y9LqCiQ1mz7beYSPyNY3tIEbsPGVfMjmHM --> ssh-ed25519 ffmsLw aCodb4aiUqIlMGzR7YwQDb8eQh1BHvmUeQAcOaT7fgo -KxSrylhmv3aylhqUp4j9dO/z5judvI5CeRDXE0XqbyE ---- 3tsgl8nyTeB1+YqslwzwdENX1QbP47GZG4EbRPKy8r8 -qJIh.H'O-Ob_s6  \ No newline at end of file +-> ssh-ed25519 SFHVrw YXLrKcQDjg8WXHns+pfHIFMk/1s/Bp0VIiZ58FyqXQg +B3SjUuA24zwnjXDU5iSxUmReTViuoMCZeZqwIxHsyzE +-> ssh-ed25519 S+dwQQ IdozEITW4In3IKL0v3agjtl0/IUPbMLWcrlw1FAfjwI +nS9UgEd0QTO/BnL/Oeao2bUMe1+rBHscukldwrnLzeo +-> ssh-ed25519 bPbvlw GYobYmQS6Rtg+DCHQ5rBKK5LF/08+SImgbKnuVrrwUo +UR8mK/CDysazh+EIkD1MrAjbbJ8l5r1qbBIsa+doOYE +-> ssh-ed25519 ffmsLw 4NSaaK3bigyTcb3WcSx2jIrDJggw4Jmk1BXXUqSObB4 +5ueO3nz52f8LRvCU91HJcYsw3OWC40i/13txt+ECUCM +--- nAYKVwYL9E811ZCXpjIGxZTMNl/iC7DFl/9RsvykL74 +dAɤS0((%@ὀ2"M"g \ No newline at end of file diff --git a/secrets/forgejo/mailer.age b/secrets/forgejo/mailer.age index 2475d67..da9486d 100644 --- a/secrets/forgejo/mailer.age +++ b/secrets/forgejo/mailer.age @@ -1,11 +1,11 @@ age-encryption.org/v1 --> ssh-ed25519 SFHVrw 6hEwUxHZ7YxTRZGxM+pGfKKtpt0KUME5onbtQqHdsxk -zUEng+GntP/LGygdZTPCsFK9Vmn++VODWR0lWCuC0kQ --> ssh-ed25519 S+dwQQ eznFi6oeKUpS1VmkK3cVjcRFF3zI6o9zzFkukj1X6lY -KApBmW4r4AQwqv6DrBg8I4x2TCUjgGOzHOfsLP5NDx4 --> ssh-ed25519 bPbvlw 86J2AsTVgm3GAbLmlOi5n73b8qgHxsIlDZKtM96zcQo -SYR28elHJA6Z0NCo90bZVQvixpKGTWmeafqr0CrLhcM --> ssh-ed25519 ffmsLw LdxVlRNsqwSZc0qXWC7N+q69PTIXY0q49upfuEk5GwM -Z73ga/GtcdDUgAWRteHat0gmtISjTbVvzjUaugtYwCY ---- D065LOfAd9xDAc2QMAmEZQeduBgIaYtpC/W/wgcwY7Q -R~OZJwj]1~9QVm \ No newline at end of file +-> ssh-ed25519 SFHVrw bc8choUvtq0NOGCX6GprtMxIxvg00r6rIxntpeik0lg +oDyFv802mE13WDj2SFjCPsfNKb2CCvw+9j39ENbifUM +-> ssh-ed25519 S+dwQQ 8UX9FA1loXIJM4PTJGLi8KtsOvxWl0SqBqXrgALl0nU +qmHgPDO6XezEkoIdFzYvnMX2bFOxduPTXwb99rBooFw +-> ssh-ed25519 bPbvlw m04uwnUfEg6WG2k86Dk7p1Gt3bKaRUfWffz0xyN8XHo +8UPX+qO6jKWWPhuXsj5p0fmKAUVWd5E7LeR32Vi/cys +-> ssh-ed25519 ffmsLw KRIhI7tO9OA7jz6zUAwplsqmaU1t2+KNg+gro/AnWUs +RseUNOticbboC/zrI6Yjkk499MAJte5urjzsPsIL/w4 +--- /Pa972vDaNrB+BgoUhoyFN9AQ/zSKl0PE6hDwQ9OOeg +cMon1L$ԋ~MSAAN0ZN 'bpVl \ No newline at end of file diff --git a/secrets/restic-abacus.age b/secrets/restic-abacus.age index 47478e4..74743ab 100644 --- a/secrets/restic-abacus.age +++ b/secrets/restic-abacus.age @@ -1,11 +1,11 @@ age-encryption.org/v1 --> ssh-ed25519 SFHVrw Zs23Eut5h8r5eg8eNS4Pe48fiy00ZjjkPV34oOvqn2o -lvAGCyJocqN6LTzpJzO26EcS8Htodj3w6vx0cuadRLY --> ssh-ed25519 S+dwQQ pGPwn9tDJgZIMjoINs9ycktLMMCltm8un6YRkhelqCM -xQG2NpdF12QbJTHt1RV+a1F5Bb72zEHzRBql/Ltiwq8 --> ssh-ed25519 bPbvlw /+nXnAnrWzOcUyCXH6JwpPraf373F6RyuiJHqUiGPBU -E4gDhpaFM7MeljorTgjhf+OpjwikjnVQ0L6fYtuQ4VQ --> ssh-ed25519 ffmsLw EdLQsb1ZCV6L6gtId3YWJQkc7Efy/w1BTKrTpjSEHk8 -adscvnC4DxmEU9Xss1Ark3V8hnZgrZXjkIYq13AfwiI ---- ZHi2rDQsqf9TPhmRN58d4R04OUNFoPGgDFcY1K/HgUw -QCʚĥ_ " .+T0X N;hR1#ۆ,ri \ No newline at end of file +-> ssh-ed25519 SFHVrw +WkL7exi9MJOXiwranslc7NJmWi066Cfnlj3pHcuAkY +UfMSjVIQQiXJgS3FGJvIErDrPCzHvqbWJFTy8/2R4h8 +-> ssh-ed25519 S+dwQQ j/nw/qJjGri1+gHHdtPseyRGEAa+/DvXQBW79ALIuU0 +KENJAljEzeh/grgVSA6ACFI0b3yyke7auTbBr9iZC7w +-> ssh-ed25519 bPbvlw H2WTz4QGxM3KG+x892MOF8VFDzZvbdNub67bAtcwg1Y +yik/pneTRiWopt7lV/lUv1wJbzP6AW9HAeW3aObdPks +-> ssh-ed25519 ffmsLw NITcTVrNCwxrYkA92j5B1srBhm9C3hBngiSb1qyL52g +qxrzOS4CQJbRDin1vPy6bel81KE6xjq0Q0uZrObSmqY +--- QOOWcDTTfSE5cNZkdkGBeCHQXvbrCURkk8cuaBG0mAY +Tp%'q`YPH7kWJ=ս̱P`SSos \ No newline at end of file diff --git a/secrets/restic-vessel.age b/secrets/restic-vessel.age index 654cfad..e926e83 100644 Binary files a/secrets/restic-vessel.age and b/secrets/restic-vessel.age differ diff --git a/secrets/secrets.nix b/secrets/secrets.nix index e93b6ad..2251d3e 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -20,4 +20,5 @@ in "secure-boot/glacier.tar.age".publicKeys = (builtins.attrValues users) ++ [ hosts.glacier ]; "secure-boot/abacus.tar.age".publicKeys = (builtins.attrValues users) ++ [ hosts.abacus ]; "secure-boot/flamingo.tar.age".publicKeys = (builtins.attrValues users) ++ [ hosts.flamingo ]; + "secure-boot/vessel.tar.age".publicKeys = (builtins.attrValues users) ++ [ hosts.vessel ]; } diff --git a/secrets/secure-boot/abacus.tar.age b/secrets/secure-boot/abacus.tar.age index b34def7..93d754f 100644 Binary files a/secrets/secure-boot/abacus.tar.age and b/secrets/secure-boot/abacus.tar.age differ diff --git a/secrets/secure-boot/flamingo.tar.age b/secrets/secure-boot/flamingo.tar.age index fdfc6e8..bd63276 100644 Binary files a/secrets/secure-boot/flamingo.tar.age and b/secrets/secure-boot/flamingo.tar.age differ diff --git a/secrets/secure-boot/glacier.tar.age b/secrets/secure-boot/glacier.tar.age index c428c59..5ceed7c 100644 Binary files a/secrets/secure-boot/glacier.tar.age and b/secrets/secure-boot/glacier.tar.age differ diff --git a/secrets/secure-boot/vessel.tar.age b/secrets/secure-boot/vessel.tar.age new file mode 100644 index 0000000..ebcf01c Binary files /dev/null and b/secrets/secure-boot/vessel.tar.age differ diff --git a/secrets/syncserver.age b/secrets/syncserver.age index 3fa9b09..a46262d 100644 Binary files a/secrets/syncserver.age and b/secrets/syncserver.age differ diff --git a/secrets/users/helvetica.age b/secrets/users/helvetica.age index 28ad975..0379e93 100644 --- a/secrets/users/helvetica.age +++ b/secrets/users/helvetica.age @@ -1,20 +1,19 @@ age-encryption.org/v1 --> ssh-ed25519 SFHVrw 5O32JjIL6EnnFpSEWuqYSnlQXCi86TjEGU5hKxEVfUk -mnI5nBEyM/M4hiOEl0lBdBt0v4cthrIlnWd6kvgud5s --> ssh-ed25519 S+dwQQ bOtKQWynZxYPRukkGBVJ8p6d7mU6J1LxDc7RbxRjxn8 -ykEExNA0KIXWRS0oAME7c6lScb7P5PR6rcoao35dd6s --> ssh-ed25519 bPbvlw mBeVkAPVjuPyiGZoWTtU9cZEJ7DjT06wS7+BbK8xrlY -l5yxGa/CH2pM6IL6SeWgtQg/nJvcU6vLZQp9f10eQCg --> ssh-ed25519 ffmsLw LqpIMiGZF5DZwibH8hJD8V8yJfpaRddJRxFC+MWqaQQ -1mGrkOKPZ7ZOQ/kwHA0VigU9DUY8SYTxRiq5tZnaWqk --> ssh-ed25519 d2fKsw L8PpoPH43jKLkC8tduV2ILAypnwfGP2eJUTjX5foLzs -/Hu7tHtq9m4MYV6K48KDk68HWJzzCCr1DL7dKCyvndo --> ssh-ed25519 US6ATA XqSHAd4tAGQgfD5zZUgGi85F4WX3Uz3K72ZbSf1b7lI -EYfjkYeoG7fvskrKdUnp/Yz713QfF2Wb+zZyXC/0pHc --> ssh-ed25519 Sm0lOA UTaaX0IZkosP/zU1s1a1ExcD0Y3lgru+RoAZq4vjaRY -CLFv9o3r3R5RFFlkglmvKQ0S1ROY6VI9yvMO43YjZf8 --> ssh-ed25519 bgFypQ 6YB0i3QUbaAbTim7e+KSBYUUCRLCbrE+Tg9iW8MG/Uw -EN/o6IgKLUjsNkCNfEeThJZWEmglRis3yWTVWkq0ATg ---- 6oBNTwtiKyo7lhARYSWj1t3pudr+m5ESdA95+Ij3orc -6TB#gX4QUJV(32ZɟD縪 /&9 - ssh-ed25519 SFHVrw F71Rs+u8bKDKFvNH7MQCsiVa10FnLlKCSR8jf6STxVU +BwHfdTNG+Kk584sF9XdIHK+B93+cTjMei7SYlIv2bgQ +-> ssh-ed25519 S+dwQQ yNVrP3Sms7kfwIerwVocKbj8yZ/TbgyZCml9im/5iE0 +dbogFzPHpq4cz/diDvQipe91JK/0GKC3xHjKHVOOBVA +-> ssh-ed25519 bPbvlw aPbIKFkdiq+GfEZPXvkVyajQg6rRAorHxwOZTITB2i4 +HHVzGmC3yPzaEQBb/A3d7TP9XpDYJVsq2JkHkZi6NZg +-> ssh-ed25519 ffmsLw JSvKv25C5WcZahMZRv/6K53s2SujJl81CbE2/FqzMnA +oauCH79Cmi9bD+sRwjImS5BTPg+ICcDM1jnM1RyjxyU +-> ssh-ed25519 d2fKsw QTtZl4e+sc+I+CZ7f8Y3N+RfSsedbwDvf3wOpHwjEUk +BOwDlvqU8OubHX62XkJ3DZb9qwxfQEWhqcXX/vuM33w +-> ssh-ed25519 US6ATA pxa4jIQ2a51qn+2s4CRzdgdabiwf31XfUjIagrHWGg8 +TOLVUg1uyjOP3MeX9FSu57dRfjTbnF8yWPiFL/zejuo +-> ssh-ed25519 Sm0lOA j7gSiXP5THO6PubUzuxkrL6SBZk9X9kRGtLCfAJH8Dk +Fy44au3i1xqbtRDEntW1Q302PAQUYrF5uqOvyOSk18w +-> ssh-ed25519 bgFypQ bkAjPiZwB0y0EteWU5Zmbe4jaVhU7/j/N/e7DVEFYVA +2LrN/bBMtNmhiBWSNArZ6rfQs+rQzPgNv9Oqv1Bbl7s +--- 9rqi17J0VQJ0s9nkFSxjtDwUFjU5V3M6rfNf440lew0 +Qr %8u'2\KT y)Yn;e, DGےpY_I2L{>S͙Ш HRKP_=":Ch &I "'{'uX:0MU' \ No newline at end of file diff --git a/secrets/users/insomniac.age b/secrets/users/insomniac.age index 9f1133b..17877c2 100644 --- a/secrets/users/insomniac.age +++ b/secrets/users/insomniac.age @@ -1,14 +1,11 @@ age-encryption.org/v1 --> ssh-ed25519 SFHVrw iq1lz1cbf7HgkH5Iglb9j9JChuJQALY3JPltoh0DcR4 -xHJ4UsmFymFb7f5mGR6Yj8GGqKQRmD8YLdqYv8wxJMU --> ssh-ed25519 S+dwQQ wKenvkV4uWqPHN4PNBZ+hQhmtQwULS/Vft6UDYmeKhs -G6fLhpl3K4S/JREeUBnIPs+XOj1BO0S2pAhrOPeQSvI --> ssh-ed25519 bPbvlw GRzNM9ZIwICpUEjEVl+3Sk4jBKTQ8LxmqLAyaILTUHU -2RLJirofLXeDyvYijMwW5VbDSq6a0iZpCZU7WYtvgFE --> ssh-ed25519 8l76Rg KReunAJWnHAVMs6Se2MvkWtsnHJwyZA1ZXExvxD93zE -xJUkcjqO33R728mU0dmhBnmF45ZkuxXtW0XgwVf74HA ---- aNnE3YE/Oe/IcRUDuoMNNBeaIcEtPfCpy69bZX8TQg8 -}'C=vTЄq -b.Y?4Ye5|Ӱ7A]+3o2 - &'0ؔⰺU -x \ No newline at end of file +-> ssh-ed25519 SFHVrw VvRWN857MXOUqUqMIAv3OCgUp7zIJgOmCDhibsfR4BM +pOwTtL357S/fuJK2n5RAKBBcCcL+tnMqt/n7o5BX/nI +-> ssh-ed25519 S+dwQQ h5Hf+yOK61iARFKtI3BvGfUuesU7JfBG73xg2OfNO3w +9a/WN5wQZ4T7ar9GD5iCjw1E9k8FafdcQCt78f3PmzE +-> ssh-ed25519 bPbvlw eeS4sFLhm/5pyPvc4A23iZY7Yx6Rr1DeZve3NmjaDyM +ZFQZDhcqMjWrncTFS/URGcOXdK/xMpbprpetdsE7gI0 +-> ssh-ed25519 8l76Rg rZlqjtuvCJthjPQ+uF7SBlz6gSioCXdmUO330IuheD0 +p85nindSGaWqthF7y/t7jLpkA1tlOIunuJcB1Jsjk00 +--- BTcCQGFBm3QhL0W+aW8Z+w85VVtcmezgBVafqt5DS5c +lK ?tglaCKͰϜjZN@nXY}T xFs< O vs6~Is}7sÞZC@ \ No newline at end of file diff --git a/secrets/vaultwarden.age b/secrets/vaultwarden.age index 2e8452b..d24fa4a 100644 Binary files a/secrets/vaultwarden.age and b/secrets/vaultwarden.age differ