diff --git a/packages/system/nebula-sign-cert/default.nix b/packages/system/nebula-sign-cert/default.nix new file mode 100644 index 0000000..915c413 --- /dev/null +++ b/packages/system/nebula-sign-cert/default.nix @@ -0,0 +1,187 @@ +{ + lib, + writeShellApplication, + nebula, + sops, + coreutils, + jq, + ... +}: + +writeShellApplication { + name = "nebula-sign-cert"; + + runtimeInputs = [ + nebula + sops + coreutils + jq + ]; + + text = '' + # --------------------------------------------------------------------------- + # nebula-sign-cert + # + # Signs a new Nebula host certificate using the CA stored in a SOPS secrets + # file and writes the resulting cert+key back into a (possibly different) + # SOPS secrets file. + # + # The CA is read from: + # at YAML path /ca-cert and /ca-key + # + # The new cert+key are written to: + # at YAML paths + # /-cert + # /-key + # + # Usage: + # nebula-sign-cert \ + # --name # e.g. "nas" — used in the cert + # --ip # e.g. "10.1.1.2/24" + # --ca-file + # --ca-prefix # e.g. "pi5/nebula" + # --host-file + # --host-prefix # e.g. "jallen-nas/nebula" + # --host-secret-name # e.g. "nas" (cert stored as nas-cert/nas-key) + # [--groups ] # optional Nebula groups + # [--duration ] # e.g. "8760h0m0s" (1 year), default: CA lifetime + # + # All temp files are written to a private tmpdir and shredded on exit. + # --------------------------------------------------------------------------- + + set -euo pipefail + + # ── argument parsing ──────────────────────────────────────────────────────── + NAME="" + IP="" + CA_FILE="" + CA_PREFIX="" + HOST_FILE="" + HOST_PREFIX="" + HOST_SECRET_NAME="" + NEBULA_GROUPS="" + DURATION="" + + usage() { + echo "Usage: nebula-sign-cert \\" + echo " --name \\" + echo " --ip \\" + echo " --ca-file \\" + echo " --ca-prefix (e.g. pi5/nebula) \\" + echo " --host-file \\" + echo " --host-prefix (e.g. jallen-nas/nebula) \\" + echo " --host-secret-name (e.g. nas) \\" + echo " [--groups ] \\" + echo " [--duration <8760h0m0s>]" + exit 1 + } + + while [[ $# -gt 0 ]]; do + case "$1" in + --name) NAME="$2"; shift 2 ;; + --ip) IP="$2"; shift 2 ;; + --ca-file) CA_FILE="$2"; shift 2 ;; + --ca-prefix) CA_PREFIX="$2"; shift 2 ;; + --host-file) HOST_FILE="$2"; shift 2 ;; + --host-prefix) HOST_PREFIX="$2"; shift 2 ;; + --host-secret-name) HOST_SECRET_NAME="$2"; shift 2 ;; + --groups) NEBULA_GROUPS="$2"; shift 2 ;; + --duration) DURATION="$2"; shift 2 ;; + -h|--help) usage ;; + *) echo "Unknown argument: $1"; usage ;; + esac + done + + # ── validate required args ────────────────────────────────────────────────── + missing=() + [[ -z "$NAME" ]] && missing+=(--name) + [[ -z "$IP" ]] && missing+=(--ip) + [[ -z "$CA_FILE" ]] && missing+=(--ca-file) + [[ -z "$CA_PREFIX" ]] && missing+=(--ca-prefix) + [[ -z "$HOST_FILE" ]] && missing+=(--host-file) + [[ -z "$HOST_PREFIX" ]] && missing+=(--host-prefix) + [[ -z "$HOST_SECRET_NAME" ]] && missing+=(--host-secret-name) + if [[ ''${#missing[@]} -gt 0 ]]; then + echo "error: missing required arguments: ''${missing[*]}" + usage + fi + + [[ -f "$CA_FILE" ]] || { echo "error: CA secrets file not found: $CA_FILE"; exit 1; } + [[ -f "$HOST_FILE" ]] || { echo "error: host secrets file not found: $HOST_FILE"; exit 1; } + + # Convert "a/b/c" prefix → sops extract path ["a"]["b"]["c"] + prefix_to_sops_path() { + local prefix="$1" + local IFS='/' + local result="" + for segment in $prefix; do + result+="[\"$segment\"]" + done + echo "$result" + } + + CA_SOPS_PATH=$(prefix_to_sops_path "$CA_PREFIX") + HOST_SOPS_PATH=$(prefix_to_sops_path "$HOST_PREFIX") + + # ── setup temp directory (cleaned up on exit) ─────────────────────────────── + TMPDIR=$(mktemp -d) + cleanup() { + # Shred all temp files before removing the directory + find "$TMPDIR" -type f -exec shred -u {} \; + rm -rf "$TMPDIR" + } + trap cleanup EXIT + + CA_CRT="$TMPDIR/ca.crt" + CA_KEY="$TMPDIR/ca.key" + HOST_CRT="$TMPDIR/host.crt" + HOST_KEY="$TMPDIR/host.key" + + # ── extract CA cert and key from SOPS ────────────────────────────────────── + echo "» Extracting CA from $CA_FILE ($CA_PREFIX)..." + sops decrypt --extract "''${CA_SOPS_PATH}[\"ca-cert\"]" "$CA_FILE" > "$CA_CRT" + sops decrypt --extract "''${CA_SOPS_PATH}[\"ca-key\"]" "$CA_FILE" > "$CA_KEY" + + # ── build nebula-cert sign args ───────────────────────────────────────────── + SIGN_ARGS=( + sign + -name "$NAME" + -ip "$IP" + -ca-crt "$CA_CRT" + -ca-key "$CA_KEY" + -out-crt "$HOST_CRT" + -out-key "$HOST_KEY" + ) + [[ -n "$NEBULA_GROUPS" ]] && SIGN_ARGS+=(-groups "$NEBULA_GROUPS") + [[ -n "$DURATION" ]] && SIGN_ARGS+=(-duration "$DURATION") + + # ── sign the certificate ──────────────────────────────────────────────────── + echo "» Signing certificate for $NAME ($IP)..." + nebula-cert "''${SIGN_ARGS[@]}" + + echo "» Certificate details:" + nebula-cert print -path "$HOST_CRT" + + # ── write cert and key back into the host SOPS file ──────────────────────── + # sops set requires a JSON-encoded string value; use jq -Rs . to encode the + # file contents and pipe via --value-stdin to avoid leaking secrets in ps. + echo "» Writing ''${HOST_SECRET_NAME}-cert into $HOST_FILE ($HOST_PREFIX)..." + jq -Rs . "$HOST_CRT" | sops set --value-stdin \ + "$HOST_FILE" \ + "''${HOST_SOPS_PATH}[\"''${HOST_SECRET_NAME}-cert\"]" + + echo "» Writing ''${HOST_SECRET_NAME}-key into $HOST_FILE ($HOST_PREFIX)..." + jq -Rs . "$HOST_KEY" | sops set --value-stdin \ + "$HOST_FILE" \ + "''${HOST_SOPS_PATH}[\"''${HOST_SECRET_NAME}-key\"]" + + echo "" + echo "✓ Done. Certificate for '$NAME' written to $HOST_FILE" + echo " Rebuild the host to apply: sudo nixos-rebuild switch --flake .#" + ''; + + meta = { + description = "Sign a Nebula host certificate using a CA stored in SOPS"; + mainProgram = "nebula-sign-cert"; + }; +} diff --git a/secrets/desktop-secrets.yaml b/secrets/desktop-secrets.yaml index 6ae01e6..e3982aa 100644 --- a/secrets/desktop-secrets.yaml +++ b/secrets/desktop-secrets.yaml @@ -1,183 +1,188 @@ desktop: - matt_password: ENC[AES256_GCM,data:wmcn47H15fVRhzLwuw5rATFIjKblT0TNY+K2abT6WAF89M4sATGqpRCB7p21CCXjAGM9HSY/E5EfPoKFFh6qYe6D9ykvvWTB0g==,iv:IIG0IotGRXrEYNq0PjOt0gI0TJIWBieI16RCYCyKS6w=,tag:6+QvPuK7wo5o1x1p0dz8/A==,type:str] - hass_token: ENC[AES256_GCM,data:xex09ibizTRtqY4hdeXDnuBfpUUKn+cBeaPJkHeBNzO3nbMGXdaW5WXOc07ea/ANPj1Qz2U/npjzG41AUHVUSVeOK4e/FkrPsMPzTH0TiPURPJr/XPaOTCzoA+ryL1NPFc3sTIbX+wSVRtNQr7Jm59IIyfLv/wdd4De7RnhD+kyNLBDXnT9kPFJKfp4WcxcgmiJZGFPby6+U/c4gT3Z5hG0NzwmtLcur4VI79q+4RIoQYVb0A1oH,iv:2P766cm+rJ+8cWzYRV2tgmzoVWbX0gJe71aNQVoGNp4=,tag:8DusTheWmAIiDcKepS4Anw==,type:str] - restic: - user: ENC[AES256_GCM,data:IoDWBPg=,iv:Am5YWSr6qhQZumY/BUUgtL131q/gsk3OpSLFjPpYu8c=,tag:3fhkAZdukXbppH9BLUVSfA==,type:str] - password: ENC[AES256_GCM,data:D0u9Wq67jDetyzI=,iv:yjL3Ywfa5VlKbMhQFduujReElGWTJFT2ppUEtYxsLwk=,tag:YlnW17CTmADN8p9rzwGhlQ==,type:str] - repo: ENC[AES256_GCM,data:iWw+aBd1S1WVyP5QinxZBuw5JPvpgLi2uAeAf3AWpKccRtQfE2D8nOUE5ynIek1pkfBn,iv:ltqNrRXeDkiesc2Q6ScNcMGYTyQAYUonAqOfA9KRQTI=,tag:n7Z9iLgUCGUs7uJLLilLEg==,type:str] - system-ed25519-pub: ENC[AES256_GCM,data:yM0Q6bf5qoY02jxayk0F3U1d4mR5ZTAmGEscmYMIQncUthefbfhaBgZn2uaDwEdagSN6ihZ9IzZ8i+KEiCW8X1iWt+N2zd3dCyQCM9D/5VUDulvjoNE2IN+T/bIsbCfh,iv:iLuNOQV0M40wao1LBjwy0opqxZZRmPsAxTbg18CHn/Y=,tag:PmxE9ldU/hWEqKL4juLdBw==,type:str] - system-ed25519-priv: ENC[AES256_GCM,data:neR7rxQic+JxfkupQh9hIFOSF+QEahIWhFaP4Vk7bDBims9nimy1WRF4jwwoY8+rco+mfrQZT+/F5URpC0uCf0UeL+RCnGcVPMS+NS1+T9/Wygh1ZfsdQNv3G9+H2r59n4kGmaPfaLxfeftNf2M2YkTD5VEt4oZuHg8gcivoeQ8evtezjicIZGLrMxJLXn+SxDq6+glKKk4xOel9AdYsXTw6fCZ/y8uXCjhpMp0FvV6DZbeBawm8O+R/m0KUIEBpfDLXWXnpjZ71XhYCNYRyIwiDBhW5S0o0X+0iX4vSQfxBcwd1oLPYWJjYlMcUSTmaiKH2x5JaQJRiXCd6t3vQchRNQ81wNbL1Q/xERO8RsUMu7u0EW5qeBiGAuW7z/sx3yV8c8SNBwr1GfT+d3g77EShXn48XaGIYvNKW1ANdxkgSc6h66acWeI1kY6/Dk9IpVxvuAQgV3Ukwv8HDCnSHsKJVfm7KYw/jqVZGKTE/msVkCm7KGig1OfinZCs5VvBO7YSWrSyeb580kiiKf32xxBJtmELWueVVov1c,iv:m2Eqw9OAWf1UO38r5i4DVdh9zqLdrbggUOcxqu2339w=,tag:+yq0MDE3dofu8XbDdcTbPQ==,type:str] - system-rsa-pub: ENC[AES256_GCM,data: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,iv:tD8LK0+Ksb+3Ahhx2td//ktIgeyFykdrFjN1HURZwno=,tag:XeRgt9DQhWUynhBRZF+rcA==,type:str] - system-rsa-priv: ENC[AES256_GCM,data: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,iv:1buceQb4i5BsZDLh7bY22+mZvnSrJLLpdPOoewXgvU4=,tag:Y7N0bwnIHrvPAPzhTiROig==,type:str] + matt_password: ENC[AES256_GCM,data:wmcn47H15fVRhzLwuw5rATFIjKblT0TNY+K2abT6WAF89M4sATGqpRCB7p21CCXjAGM9HSY/E5EfPoKFFh6qYe6D9ykvvWTB0g==,iv:IIG0IotGRXrEYNq0PjOt0gI0TJIWBieI16RCYCyKS6w=,tag:6+QvPuK7wo5o1x1p0dz8/A==,type:str] + hass_token: ENC[AES256_GCM,data:xex09ibizTRtqY4hdeXDnuBfpUUKn+cBeaPJkHeBNzO3nbMGXdaW5WXOc07ea/ANPj1Qz2U/npjzG41AUHVUSVeOK4e/FkrPsMPzTH0TiPURPJr/XPaOTCzoA+ryL1NPFc3sTIbX+wSVRtNQr7Jm59IIyfLv/wdd4De7RnhD+kyNLBDXnT9kPFJKfp4WcxcgmiJZGFPby6+U/c4gT3Z5hG0NzwmtLcur4VI79q+4RIoQYVb0A1oH,iv:2P766cm+rJ+8cWzYRV2tgmzoVWbX0gJe71aNQVoGNp4=,tag:8DusTheWmAIiDcKepS4Anw==,type:str] + restic: + user: ENC[AES256_GCM,data:IoDWBPg=,iv:Am5YWSr6qhQZumY/BUUgtL131q/gsk3OpSLFjPpYu8c=,tag:3fhkAZdukXbppH9BLUVSfA==,type:str] + password: ENC[AES256_GCM,data:D0u9Wq67jDetyzI=,iv:yjL3Ywfa5VlKbMhQFduujReElGWTJFT2ppUEtYxsLwk=,tag:YlnW17CTmADN8p9rzwGhlQ==,type:str] + repo: ENC[AES256_GCM,data:iWw+aBd1S1WVyP5QinxZBuw5JPvpgLi2uAeAf3AWpKccRtQfE2D8nOUE5ynIek1pkfBn,iv:ltqNrRXeDkiesc2Q6ScNcMGYTyQAYUonAqOfA9KRQTI=,tag:n7Z9iLgUCGUs7uJLLilLEg==,type:str] + system-ed25519-pub: ENC[AES256_GCM,data:yM0Q6bf5qoY02jxayk0F3U1d4mR5ZTAmGEscmYMIQncUthefbfhaBgZn2uaDwEdagSN6ihZ9IzZ8i+KEiCW8X1iWt+N2zd3dCyQCM9D/5VUDulvjoNE2IN+T/bIsbCfh,iv:iLuNOQV0M40wao1LBjwy0opqxZZRmPsAxTbg18CHn/Y=,tag:PmxE9ldU/hWEqKL4juLdBw==,type:str] + system-ed25519-priv: ENC[AES256_GCM,data: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,iv:m2Eqw9OAWf1UO38r5i4DVdh9zqLdrbggUOcxqu2339w=,tag:+yq0MDE3dofu8XbDdcTbPQ==,type:str] + system-rsa-pub: ENC[AES256_GCM,data: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,iv:tD8LK0+Ksb+3Ahhx2td//ktIgeyFykdrFjN1HURZwno=,tag:XeRgt9DQhWUynhBRZF+rcA==,type:str] + system-rsa-priv: ENC[AES256_GCM,data:Xu8hN6CtBWZwaY/l0H0iJKIzWBjT3G0YLKqsSSzr914x1ux+790B3H2Tj0aF5tLgHhpqlBD0jzq5Jo4snIxAdBbvttmuJU+VIWRAxqa5YYZVs7G2cumKYvCyY9SoNKRydyBlNqZlWazpx1/TmFwYkj5monyDUm1ShzJ3YqYm/eX9p6sUalJR0atB8YdaXSh0R3b+GM4kMj2OhVOezJmWwpcVXahr/lqwke2j+A27886LyLX9a/vjz9H3B/yIPwSKccAIc4okru+CvQ+IinKas9QZ0PF/rfh4Slv7SqxzyoI5OaxK5ODPu5KfZpNXYv5h/3frueICsfsP4iRb/KPNK5sQtXuvDAOMVXfY3/LkoqcwNjjRKXK6LRiL2AZSgE94qkQgybTNCrKgRLThdK5ckgFAnS/AC16Qy5YpErV8qOprNeh9/9m9mqXK2DfhnXR26z/grb7IFmI3oDTvjBpFppqcQqO42XFhQY18rpGMqXZNiIp544lBHk0zXZkyQAVDSHjHpjQInCxFtFgISUjOrzvnFwewxAN7s0wv6WzEMBiTTz6aigwZ1fn3mM5M197scBsffnM8aT204fyRkPLSfS8hhvL3PlZegBjlW+GIpmFDe7kyXOGLU37TIEVE9k1N9/JrEWSSNqfLEhtKxAhI8dU0Vq03IgM30RvNEmAWXkl0vYRrsj1ciNQ8IX1/YaP+WhcRNre8pZ8iQKP6RyTQrwCYvy1pP8NhwmCbZnuN+57vO8PEwt8r6cL18OlxTZNfMPRtDgeXDRMV3XIlBtIPHSFbzslvXxsIYw+v0iIGEU4amukonrEzxU4pXOq8VN/lL/Y+v0Pi8X5QSG4kGzABwQPZec4zf0PUh+jZWtiVtNNkSAwSX2ENY85MaT1x2YXuTsUhG4uQslPWUXgDnR4RRf2tfsFOC7CpK0VB1QJkjHbV8v7y75PyK7Gk4+q9+qd3vTxatPFaaTzH1UlFlc6GajKjhyifSa2tBB50+DB3c5brOrVRktBWjIVP4ynx0Pxv7XYdUowNsqYQ6DC7ussAlVDuzxXO0TAuiQ0M3sBBGxTZ7j2n4UAXR27dKTGpvyEGrBpaVVSy1v3Ae3CXn0ZSFsY8MNAObnkaNrV7KXU2kcVTPHzxBFAg29ykfg2qkbFp5TP6UlWPl/JF9YPoWSoL9C1WzC5D3cwrXKxgKY6TS3OSDqXaHFK8CZhjiHJitXNWOPr3lKkN3sePRh/8pEw0cbKMn90HWuAuWdzzT8S70nYpBJCeLzFTpkJ4lqLFf3e6z1haojHuKpF463W6FyeZl/a0N4W/ceG1ZgYRBlMm8bXkcq7t2lbSfPg8AqLYDIf+5DXOpr0puhe1/0kpUm6xc/V+B8r4Z8Q15+g2DGIL0DzSyD/SvxADLfsakdUbZkVTDxJ8pjs/jksgeR67VHSKGCwd3BYfzfw2SN/pJ14nIQ9loVe5HLWYcMuCXkNzVBfPINQzA2LC1K/hPQ1BbT0AxU0MvNV1omybgwro1kFPzwkeycT2JJxNz31esHGQsOONh9R6bw4HGgKkOR2UMkTQExg/XRDtBM1g2Sx+t//nNh0bHixSqArtEqNnXyhGQRSYQd1BLHro40wG6GnwRLy2FPdSVPQKo5Uo2OWRl2jKh51yCzBEHRtC2uWR6i1SyqLmr6wxwwxuePEAnE38kQOsfDjWsErEhHtjtEN2GxuLCb016tD6BVkzXWhA2jvKBnQL0NjMB7GEjGHSVXjOWasLJ1EVmNel/AJ8Ic65jdKlINAajVuuPhl/vXVXdnyYBHlLSSgsrFaWWo7uwvlnq5DxDLfFBgRisj3dEv+rN25ZYyFNkCeRPzTFfPmloSmoT/hzlz9jWNwlgM84yspuiBAgBw0ci+eqbWA/1dQiqB36W+SmMdtmZhCTjD3QZ3u216S+Zyc/HvtOlc2UdUn6P2JCq+x2hQgI/4X0aalwUo15q3rSlJaOK48SEjFOgqOUlxrdSXPE6YfMECqgTtLsj7Ym/gxidIoT0/QFIbuu43WEGzk8bnVKRHvthuv0EwhM5cWCfWvF0EsC9GGacP4NKpRfKDxOV+gSG6s4FvKwiRiHqy9ATSv2ZSxwUDN+pjBAkZBELbkMBC8D//M5kXQh+PQHD09JoFqOnfRfSDF5WACiVx27kRBxbV/LlVIL90u62Wzd5eFMGCnihd1efEyX3ulP2qBK8WTr/OP2cGHjEXdXT7RdZvINNSLjwRUQtUKzFHNM/LxnegTufOrxGJ9zcIzMfyFVHmBra6Yg1Fyp7LEP5ITQpc6b44sHF7lTZuSyw4xyqPvfoBHuki2f+d3Z7oqvnjGSEJFy1uclORr+IDlutCImcjw/VOH/Er4ivwLXzxtbG8pf45XgJUcpPHSliFL8cV84jRSqIHToPVttHjLbpPcKm8efc9SYcpGNZeK1a3AdiFhB3o/X3duZmZuxuRHvjh55AKsJBinM4MH6I43XvIljmncQY7CKHz7S3E56fmDEOOsPv+IDnLiu0F7xOLytMM3JJUrb7VDYMvPuTPbsGb7kBYeozJJLl5GACc0Xp+1pk2DVxnq5EdVBqxhV81m5WPY/rMUsAAHnZyvYeZoxC8sKtTlromE2U6WI/N4znAfl0xGtjxosJkmgx7HrrhJnehGWNDwad5sHNyIc7T2NpP22PILG4OLUg5fm5NNTs4u+3ebsY3awQG73xRWqWM78NJbIClhiRih/qttaEip0557ymBwpBvYi4ZLH+t40sd7wSuuiAhTSCx/XD5H3aEaDTGohloUJ7BfyyVDQA56T5i45WdxEd3Dm4W2GE2rcRmxasMA6ayqxaAD3rpucLaY5LO/K+KDJYlMY3R6En/nLM8V0losMutVPziM8br+6xz5wqSUSilAUqFWWsCotrdwMYu5EFgb6XF63JiwZZC7MZOyDpFCnaj8zw8IOgV1PMlVx6sbi3hyRa/xBlCh0ktts4LWDAHzt3ckZaLs+eIqdYQyehOck7MtK+cc7Dm/9XBR1/lrz2Mk8WC/rLjG6ZOD0Z+OhQwTneQLYHCd8oNMpXrjlu2YfjW8mMyK1sl2YoyFfP1P1XdDt0Ln563WOJNuv9jaiuHUvkf4mbW98K3RUlwvp/Gb0dIVjn+8Ei8oLnw1Xoc78SFwqvid77RG7+cqxDSsU2PPmMM+K3WlLV9LvoYswSTmYEkmBFscDFANaqrM9+nMYWwsaoT9JQb+ADBSkMwO/Ha8uGaGxVYdcZT53pfXjSQ46AyYkTFDuDGszEP+RhwX4bwRJMubq0sxHz1igRh/8apl0AA5TRgECuM2wFPJH8Md1Nvp8IRoeJLk81smFgjJ4l2al8G+TPAxCgNR64iwIXWZH9SwYnPaQECmPaNFtihAIPrZ6wcTrF2WjmlrTj11Gj34wj6cmoKJSELUm0cWl4zJ5SLyqPV00UFuRIWHyLz8Rc1Tcz11L6B9CZL0FYRTfZYvu/6PT4k5nZQSp3QlBm/XRYiWbYy2HT27cnBn4qVreYtipru6wwB6Px/dNvV6YZb+rAZ2gsHEi6kG1dgQY9qEsN52hDh2ggQ7FHKJpgX98ir35qgufTQ5eLdN8zmcfSs0ZCwPrm+Yj/VuGzEGAuqcaIPvmiez+9O9tbs7Bl8iF6f5Em7hpgyXem4/b0EiI1Y0cKyJNp2sXgh6cOiAe5emw8Oxpmkuu8mkqqo8Crl4GcDYLKg5kj9HjYD8SeE5mYNi63PUshSG1+ikgxpS3ZEtv6P1xIOhM8dIGu/Y0DlgfYHp2pGcQNQAWfEIsTGrvXlY94cQaCc0Q1ZqDHCLdebgGe3wfSL4wsBDxhIljFujbbXzHPov4AkYXcH4wi7NYUs7+BoGu8em0dQZBpLgW3BHsxyeRX5HNec6TrvWI+norIgtDwQnZ6gbVnERiOCjudrEyROXjwr3GRpcy+33ec2Ou6nhAYMx9Wf03MlkSG7VjSnrsU44R0+okyfUm0DlGTGxpUEtDz0kprkBqmx/XknZZt9LHOhsKlWTDwVzlgSt/JVGN8pRFnNxy16mjWwFPFXeTeseSyX8XtGbPyH7bpf8XvOkcMs82kkeemFhdDyoqC40JPzUBObrNoHRF3vd+UJyS+79Kl3DijeIPS5gtdRlVQW53XL9J9xFpDsVUI6n50Ha5CT/QjsOmoh6vCi6hVWPEB0RjmD4v7K/eLw3IPI3CNi5/VDY+we5eLb7p6fPLmi6x2uXjFvJsfNG7S4hCzHonoOrmkGg1RaL9eYdMJAaMwvC7Kq8rgmSWvW0iahZviOEtvc8sKs1t8lS0mlWlM3Gh5q6DDoe1aiI9Nu3IzmI7QGpmKpD0po3JzbJ+HLwqpPfMEju56RWmaXMv3iHd0vpQHaPfcXqXmuI67q1ilVwmx4lwcGzPGk4THJdvrVB3bsVZzAjT/hz/FJ8yWeNzJqwvtC+mGqB8kdlmQwQpeYBsCtlKHK5e6gJUW+F2z6XfqX7MBVZiDrk/VPaNw6gZhf8p3RCXYGYkgcO0R7IcXmQ=,iv:1buceQb4i5BsZDLh7bY22+mZvnSrJLLpdPOoewXgvU4=,tag:Y7N0bwnIHrvPAPzhTiROig==,type:str] +matt-nixos: + nebula: + matt-nixos-cert: ENC[AES256_GCM,data:ycSIZdRnUjpErv8AlogulCj6rqOddyEuvxMsm19FNbEblsG7CIUTXywoQlmx6cZthy83sbFj7RRVSPIkIRL37Zq0zJ4ZBI7kD2o58pfEmS5z6COrhiRVv7pirjlS0kJAlI7ELy6+qwbHWFVwvTWh+d9zpWf7aiEdAQjNvnFU1Oopc9ginN7qQU1UVtl0R5SsSYaGsAmayCb+2ooQOo8CwfBEzNXbxCkFgDnjDCxFjZUqxwO2kwe5z20dORVmB0rOhOwF1IOFfPwuXiFRxK1NaGRoaqH7ILJ+4ULQY2+kwMxpXxJkoP8IvvjXgNntGAy/OAR77jQ12EA6dDFbkSLxPwGB4gp3Q78yjAeqZmnK0ZIEaNsl5nu5L4O4k0QWmReufpXInxBYmBLa1lQLWXlBfNw1jsN9eA==,iv:xKwEFFzdI8pC6EaxKJuZLExb8CsOAuZjBcMen4O78VY=,tag:5WwJwUrtopo0Dwyi7H6GAA==,type:str] + matt-nixos-key: ENC[AES256_GCM,data:lwcpFV/HqrVOglxNxnbcnNYGdSFVXLLa0wdvqNO2DUAwWgaM/fZMdOVJgEt05xCeuB3liI8YkjQ5JxGv4CFE+YxsgetA4X81d7MZEybneg4ajuWQFWTdfgCZPOOqqpW7N7eHOc8VxdOGMJmVNeT1ZWUyTja4hhQ3yJF/5i2evQ==,iv:ueuRlJ+86LkM9Uz74ROX0pBvAgujquGXsC9gtzacs4o=,tag:6goq8LY31G7Bj8WpsoRUsw==,type:str] + ca-cert: ENC[AES256_GCM,data:n+mwKUzg3Ic8l21JzkLbOCWVg0dksXoqmuwnEVb3tPS1DEAMUih1OunwRV857nylKV1VUf2P4EL0O5CJSCHoaFYOJXnNfL0weWWoLjSU+sYJMOjWMJTPymsu86H0D5p0+cVlZo2jBEGXlVTW05GFMOt25gtVq5assNjRbRkpLxbMJo5WHW5j/qhRF8ec/IcN/NOXMCvIar/ZbRjXbw0JxVFCtdvX3Z/mcAeXOQuLiX/o0H1vTxLUGjAnggfLMTZbFKTQqt6e+aMlbQ3+XAp6GYrGoY6JtM+83r2XWBCTX3n9oZKcx3cTYIZRM1cQz7wYeMAOPcPycfU+4MDumA==,iv:v2V9uLeRrobKREzVIEMg6WPQDh3K1yg5kCqQNAenZ38=,tag:RjwbL+OiM+92QiUo3FHXpg==,type:str] sops: - shamir_threshold: 1 - age: - - recipient: age157jemphjzg6zmk373vpccuguyw6e75qnkqmz8pcnn2yue85p939swqqhy0 - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWd1loU2w3dmNGM2V4OWl5 - S1RiREVUTDBkS0c4ZEhWbW5sUEU2Qm1udDNJCm9SK3Y2WjZCSm5QVitGcXp2UC8w - REY0ZEVhaWt6Wm05WUtrUng4RGNLem8KLS0tIGpmZWRML3lqZnlHeGVGSDdXL3Yy - bSsvYzM4MlovUVdBZExRaWlvZC8yV2MKLc2cwGn7bJEtSr/RAKoSiyHs2aW/NmBk - neSEApGWB3Ho415WoLST6QZ2Timu+YT6EvKqeUNzxIqLq+/dY5FHbQ== - -----END AGE ENCRYPTED FILE----- - - recipient: age13g9a4d4jrvckfddpgn8sm4kjtzajr67le56pfdg78ktr5pd09phq32j89u - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3VEpmY1owRVo5dmNVQmFv - TFp1a2lyazRjQXIyVmJrNlBjd3Jmb2N5ZHhNCk4yMzJJQXVMelN5OUZMTno0NjRQ - dkM5SmduaFF4bXp0RWoyV1A1cDlsTnMKLS0tIC9ZNjR4WEdVNng3VlhnVDl4ckZq - SXB4TEVCYzlMYUJPa0N3bG1na2ZBMVkKglIgiRoDrM10dY+lbzIoMi1/c8cPCfTO - 4FZcBPqjrskLl1UvXx+lPIZ6nD++Ch51oUjME6VXC0Hnaoifdwm63Q== - -----END AGE ENCRYPTED FILE----- - - recipient: age1wpvfpv5n32lruk7c0da4uaeapsmhjxdvg8z4ljehn06l6g2y0e0sum404l - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFaGl6S3dyR0ZsTTJ6YjBw - ckNUczJqa0tEZllSQkJXUGR0dm1KUnN6b1g4CnhTQllWWlVSVDNmM3Q2aFdMUFhW - VUc1bjBnNXU0WUpTUmlYVmw4UTBtcjgKLS0tIEtYTnc5NTVVR0I2M3FYVWtDM3lJ - VUZob1I4S3B3WEcraVhHcXpLLy83S3cKOxxHn3t4cbk5wfP1AGAciGPHe9ALd0B9 - 24Ks94HMhEUlMrFhk1TW1sDHMz6MpMdhJlPfdPrRzaIA4bXRMuzmeQ== - -----END AGE ENCRYPTED FILE----- - - recipient: age1jv8ap5zwa49ftv0gg7wqf5ps0e68uuwxe2fekjsn0zkyql964unqyc58rf - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxNVRUM1RvamdsMWtaQlQ2 - QTgwOFVLRGpFaGtPZlBPSFRLdUYvWmlSZEU4Ck81SHprMXpuOHdSbUJHWWJGblBy - T0V5M1Y2UVpZZ1k2ZktGTXV4d091dzQKLS0tIG9YQnRHSW44bWJIcmxZU0ZFVnhL - aDI5alRiaWJKKzIzZW9HKys2RDFPVmMK608jczWivhr31TEqjBc3bvwxd7C2YRfT - pu/R4usZs1m+a1XscVcjQs+HlC2ZYYo1E+lFQQCLTy3cirHTHW5V1w== - -----END AGE ENCRYPTED FILE----- - - recipient: age1pm3fehmmk0vmnrscz9vm96rakn46aaldr5ydpscmde3v9x0k3faswwdzxs - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0L2xZb2FaaWRrbFNrSkhH - b3BkZENQVGZHck9MYjgrOUU4aFU1enZJMkMwCjFXWGU4UEpXRWNMRmNHcjVjc3Zt - T0FHRktnbWxlbFRoR0Jpak5ZV3g3MWcKLS0tIEhIMW9DWHJMUjNJeUY3ZW5YT1Mx - TGZGdUl3aWErdHZnK0Eyd1Rad3hFYmMKkekz5AAk9/Z2+8JX2pTbfLIsXFlO/x/Y - ocbUgtRCeXQ0GVeLC63PVcgmHQkWmJDlzOy4UOZFPkZcVauw92VrsA== - -----END AGE ENCRYPTED FILE----- - - recipient: age1mn2afyp9my7y7hcyzum0wdwt49zufnkt8swnyy8pj30cwzs4zvgsthj0lt - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByN3RhNmJyV0ltY1hqbkdG - cGNZcVJZZnNSY0FzNUVJdlJhQ1ZEUlpoNlM0CkxpTm8wdmhEbGpIOWNVYVAxZm5B - U2ptT0dQTVJjV2pNT3BUTVFaRDBqK1EKLS0tIE1ROW1Iek9yTHhmMm05bWRqZktp - Mjk4cWMzTWRTTUU3ZTRjWXR2dmhkWGsKUUT2lZqiv4gIt2zm7WAVbNKC7w7vTrJZ - oLvzhWaxhZTMm/7umN4AhovLymohaVT7Dj63HeLeu7kIs7n+aSnvuw== - -----END AGE ENCRYPTED FILE----- - - recipient: age1ykkjw57t3z3deup3gtp7dujyaslskn74e0d9hsmqaha2pj3rvazqgndw5a - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZcFRETjg3WlYzQU5tNnRh - ZmE5VFRvZXBvNkdjZllaMmI4MS9BR1AwR1RnCk91Zzg0T0wrN3h3eG91alc3U3dG - Q1BEV0FNMmJhN0VybTFOTkNwUk9pUGMKLS0tIGh3cU1Jb256WWluZnJCRm4vaUhi - eDBWUE9RTWNuN2h6dzk1NDkwU1dmb0kK/gBP3e3+ZD7Za4Oos0zI3BR9Jw/Q7IKV - 9UzG8zzlYXFgbouvzDZXTweFhEzAflu7P2O/GQn6j/FmHf8ObA12vA== - -----END AGE ENCRYPTED FILE----- - - recipient: age1t2d5scrukk0guva5sr97a8tge5j8kd865adezrcru7p269pzwvpsamkgje - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2UWs3YngzYUx3QXRid09w - ZExNYU42Qzl4WDBZWjRJQTRqVW4yTnNvY0VJCnl3SmFsei9DcnVnbUl1cE5Scm5q - Y1hVK2dabzVxQjh6SWpCMFhXaXY2akEKLS0tIGx4c2lTY3R6TFV2MXlteDZ2SVgx - NE1qUTY0ME1YRnZwMWNJb1kvQTRIb3cKcjoTRZ9VhgXo4gWwuo86gUMxGIEwIH3q - Jl3hN+PB0zGeKSymn4c0lYAhz/KTYZE0wU8h0cyziVjvfoztxs/zVQ== - -----END AGE ENCRYPTED FILE----- - - recipient: age1c8qw59ffcq9l77gfmtyc3djtvt3md0u6dwhrjcgsm98ntyf72ufqugj7cg - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNT2tVanJxUFV0Ti9EWVly - aDZHL2FQY2FySStVVzk5SE1hY0lTdTZqWHdNCmR1c3M2TFp2NitLK2QzRGpsT294 - ZldrbDVjZDFYeFhaUnQrVW9rL241b1UKLS0tIFcyVHcyM2EvK0pjV3MyTFNSd1Aw - VmtRRzRJeUV0UlE0RDJiaU1GY0dGS0UKhW9fBFK/Bau35M0tutZ+0cK3jIIUPBxf - oT0jlpTjcCi42+UmOenuj0ykXEl0lspnd10rBxoDo9CKXN3FA3pr3g== - -----END AGE ENCRYPTED FILE----- - - recipient: age1er5qucsc2mugrzrr7n3xhzv7kemkrqrw4m84r544fkk7nkg5g5eswxkqj0 - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYNzBqaTZ3NHRVOUQxSURF - Z1RMcWFjKzgxWmgvamwyTCswSFUyRjQrWWxvCmo4RDhjODRGNldxQTdmRXFnc1pC - dks4MThpLzA5Vy9iQkpZZ0NMeUZrQTAKLS0tIE1lVEg3Q0UycS9qMENMSWJ3T3Iv - VmY2eHhGeFRaM2ZXdEZYRUJ3bGwzeWsKD3YhMkNCbulvQulnVOBHEbOVvJDdLhiQ - FXCj6nK0UC2PBSyiAMw4LECf9NFjauuVW15hv36zzm/gH7XdPK/iJg== - -----END AGE ENCRYPTED FILE----- - - recipient: age12gu9hqhd56yl5x3t5yenkn9yg57du08h77vzjqsmnu5hdppne38qcur5a0 - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWem1vcms1bHZiWkxlZFlm - MEdyRkdZcG53MzgwKzZwandMS1k3YWtOSWpJCjAzVDkrMjNCOXh6N3NzK1VLaFYr - R0dISUNOdlFENGVuYkVkaWVETEFZSUUKLS0tIGJERjR2TlgyTmVaTnRKUUd5Ylgv - TmtKTFVqY1FjZjhpOW1UaW4ySmNXNzgKJqvXj4k0ovsjAIBBDo5/O2Ad6qVQ8XYC - nrQavkwABVUQFXnmWCZnp0mDnJc8ZCv4qBzkVDF2QIXhkMTTvauwJA== - -----END AGE ENCRYPTED FILE----- - - recipient: age1t7378n8kmd3f32fkye2gw3jj6qswv3exjdx0dq8kl0xra3tmcdnsvddq3u - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzRmdQU3hRcjhVb1Uya3ds - T24zcmkwNGVmTC93Y3hmWVJtZ1V5L2RJUWpRCnlTWkx2N0tJVnVRUVZNWVdaQkZl - M3h4NTJiN3drcmpwTFFGZElac1pjUGsKLS0tIFR3bUYzdHMxbzRoc3pzYUhQSGU2 - MmUrSjRUUGp3Vy9mM2NlTFROWXpQd3cKZdFgKPqmdkeo/eh89ogHKpBt+Gh2FXbW - qjr2fqruoCgFBZH5AQzG4vdnYdQSCmY1W2osSLlU3qGu0lsWJXdZ+Q== - -----END AGE ENCRYPTED FILE----- - - recipient: age1yn82e39pxt0d0pgny34ux4lkge4ff7wxvsye8ragvwngehemt4ps27phyw - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzYmtKMVFHcm5lYW9teXNu - Sis2UzdKRWtiU0pveVFob1R6U09RZ2FqbVFnCmo5TU1UeVJ3VnlnRDBQZi9iMzdv - TFZ2Ylcrb1ZzamhUOUkwZ0U3azN2NVkKLS0tIGl1L2R1TzJXK1NKUWJMTTJ3RERx - TmdMelFzK29nakxIMi85VWQwMklLekUKZgx4FTFXqK2q+Adsjl2TOmlHSuLKQTlK - lP8k+LmibgKL4hiX6aaiy+HYEdRdOIcJLuQcW/puPCS8QxvsogzuiA== - -----END AGE ENCRYPTED FILE----- - - recipient: age102el4snus37dj807rwvsmlvwu2sg2d8rw3vfmtntgczfkz04l9nshetcq0 - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1NWJKTUwzY1pHYWgyUVNJ - dkd2Nk5UbWdsMDZ1MWVlMktEdDNCaVRhczFrCkJsZDhBK083M0M3Tm5zQ1R6Z2Fa - dFEydm5VUzZialdlb2UzVllDWG9pL2sKLS0tIGRaTlRGM2dzV1NIUzE4TFIrSkxl - aTI1SVFuamN0Y1QxQVZzMEZPUVQ4R28K7xksqTpUcrg2Ar6kUBeEppj7pBLnPVyz - SRLIJNDOanHVl0QVZCsorZhrI9ZNRszNvHIDvnRJc4gVp9eJm5CxZQ== - -----END AGE ENCRYPTED FILE----- - - recipient: age1n5frpwgvps7c2348ynu9g7g47kqar4srdplw5kkcyn4x80eqzetqw3ej2m - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzOE1pd01RZSs2R0xiYU1R - bm5jV1BndHpja2xNdHlkbm43c2J3OXBMUlVBCmM5eEFNNlEwQk9aK1BUOU5JaXJp - VkdsNThRTVpINFZuTm52OFg3U21kTXMKLS0tIEpwa1V3dVF1VS9iOVhWUlVmdkxK - a2wvTjgyRmxYcTRMZFRuZmRYWGgwNTQKZQQrp6sLCYoib8hevcyzEGnmQ4XoEmYs - 5MG/MHKlROttr4/oAHrYowLV+efwar1ktyYmNfe400nYYM5sA/Uf8A== - -----END AGE ENCRYPTED FILE----- - - recipient: age1lvks0rdf743cn9rvvx90mzu3mjldydlzslpmv9608wn4j0m8u3xsmu7yew - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5Sks1UVVST3o3bnZLMW83 - ZVhMZnRpY21oRXF0SnNmVzg1ZWVIZGhqVTNBCjh5WFFYWXlGc20yZlRMMEZyYmZw - QVZaL1BhTlZVeW11clQxL1RiWStLV0kKLS0tIENzeTlVMXVzMDNJQmlURjlNbzBY - STU1bkRXNVRsYkJac0RPOVpZTmJCaW8KS9zUt1QpP0k38LQ6OMCkL7Ee3r/fZsWp - hfISSv9uO1uEmgRHtXSRaElQmOmGgcZB7oqSJvY3SJHxENPiCK4cDw== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-02-24T20:19:24Z" - mac: ENC[AES256_GCM,data:HInBMtc8M02FH+rwH9Xp1YPsNlMEu5b2m7S49E3Gu1sja2SnA4W62MII92UYPJXqKXDrddkkQjLbOnAX4C9mp8krQ/DaNZtd0nor+tgrSu90DUHQq3pT7tEs4MlTYTI6sGZ0Lhl+9Styr831lH/rC4uqB+nZhHmN/WRnPsDM3Ds=,iv:qkoQLi3IvgJqfdAiSpAxndCSy964fVahXSEHNDKBiUc=,tag:Qr4Ahk0nChcv0itzObxN8g==,type:str] - pgp: - - created_at: "2026-02-06T15:34:29Z" - enc: |- - -----BEGIN PGP MESSAGE----- + shamir_threshold: 1 + age: + - recipient: age157jemphjzg6zmk373vpccuguyw6e75qnkqmz8pcnn2yue85p939swqqhy0 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWd1loU2w3dmNGM2V4OWl5 + S1RiREVUTDBkS0c4ZEhWbW5sUEU2Qm1udDNJCm9SK3Y2WjZCSm5QVitGcXp2UC8w + REY0ZEVhaWt6Wm05WUtrUng4RGNLem8KLS0tIGpmZWRML3lqZnlHeGVGSDdXL3Yy + bSsvYzM4MlovUVdBZExRaWlvZC8yV2MKLc2cwGn7bJEtSr/RAKoSiyHs2aW/NmBk + neSEApGWB3Ho415WoLST6QZ2Timu+YT6EvKqeUNzxIqLq+/dY5FHbQ== + -----END AGE ENCRYPTED FILE----- + - recipient: age13g9a4d4jrvckfddpgn8sm4kjtzajr67le56pfdg78ktr5pd09phq32j89u + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3VEpmY1owRVo5dmNVQmFv + TFp1a2lyazRjQXIyVmJrNlBjd3Jmb2N5ZHhNCk4yMzJJQXVMelN5OUZMTno0NjRQ + dkM5SmduaFF4bXp0RWoyV1A1cDlsTnMKLS0tIC9ZNjR4WEdVNng3VlhnVDl4ckZq + SXB4TEVCYzlMYUJPa0N3bG1na2ZBMVkKglIgiRoDrM10dY+lbzIoMi1/c8cPCfTO + 4FZcBPqjrskLl1UvXx+lPIZ6nD++Ch51oUjME6VXC0Hnaoifdwm63Q== + -----END AGE ENCRYPTED FILE----- + - recipient: age1wpvfpv5n32lruk7c0da4uaeapsmhjxdvg8z4ljehn06l6g2y0e0sum404l + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFaGl6S3dyR0ZsTTJ6YjBw + ckNUczJqa0tEZllSQkJXUGR0dm1KUnN6b1g4CnhTQllWWlVSVDNmM3Q2aFdMUFhW + VUc1bjBnNXU0WUpTUmlYVmw4UTBtcjgKLS0tIEtYTnc5NTVVR0I2M3FYVWtDM3lJ + VUZob1I4S3B3WEcraVhHcXpLLy83S3cKOxxHn3t4cbk5wfP1AGAciGPHe9ALd0B9 + 24Ks94HMhEUlMrFhk1TW1sDHMz6MpMdhJlPfdPrRzaIA4bXRMuzmeQ== + -----END AGE ENCRYPTED FILE----- + - recipient: age1jv8ap5zwa49ftv0gg7wqf5ps0e68uuwxe2fekjsn0zkyql964unqyc58rf + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxNVRUM1RvamdsMWtaQlQ2 + QTgwOFVLRGpFaGtPZlBPSFRLdUYvWmlSZEU4Ck81SHprMXpuOHdSbUJHWWJGblBy + T0V5M1Y2UVpZZ1k2ZktGTXV4d091dzQKLS0tIG9YQnRHSW44bWJIcmxZU0ZFVnhL + aDI5alRiaWJKKzIzZW9HKys2RDFPVmMK608jczWivhr31TEqjBc3bvwxd7C2YRfT + pu/R4usZs1m+a1XscVcjQs+HlC2ZYYo1E+lFQQCLTy3cirHTHW5V1w== + -----END AGE ENCRYPTED FILE----- + - recipient: age1pm3fehmmk0vmnrscz9vm96rakn46aaldr5ydpscmde3v9x0k3faswwdzxs + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0L2xZb2FaaWRrbFNrSkhH + b3BkZENQVGZHck9MYjgrOUU4aFU1enZJMkMwCjFXWGU4UEpXRWNMRmNHcjVjc3Zt + T0FHRktnbWxlbFRoR0Jpak5ZV3g3MWcKLS0tIEhIMW9DWHJMUjNJeUY3ZW5YT1Mx + TGZGdUl3aWErdHZnK0Eyd1Rad3hFYmMKkekz5AAk9/Z2+8JX2pTbfLIsXFlO/x/Y + ocbUgtRCeXQ0GVeLC63PVcgmHQkWmJDlzOy4UOZFPkZcVauw92VrsA== + -----END AGE ENCRYPTED FILE----- + - recipient: age1mn2afyp9my7y7hcyzum0wdwt49zufnkt8swnyy8pj30cwzs4zvgsthj0lt + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByN3RhNmJyV0ltY1hqbkdG + cGNZcVJZZnNSY0FzNUVJdlJhQ1ZEUlpoNlM0CkxpTm8wdmhEbGpIOWNVYVAxZm5B + U2ptT0dQTVJjV2pNT3BUTVFaRDBqK1EKLS0tIE1ROW1Iek9yTHhmMm05bWRqZktp + Mjk4cWMzTWRTTUU3ZTRjWXR2dmhkWGsKUUT2lZqiv4gIt2zm7WAVbNKC7w7vTrJZ + oLvzhWaxhZTMm/7umN4AhovLymohaVT7Dj63HeLeu7kIs7n+aSnvuw== + -----END AGE ENCRYPTED FILE----- + - recipient: age1ykkjw57t3z3deup3gtp7dujyaslskn74e0d9hsmqaha2pj3rvazqgndw5a + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZcFRETjg3WlYzQU5tNnRh + ZmE5VFRvZXBvNkdjZllaMmI4MS9BR1AwR1RnCk91Zzg0T0wrN3h3eG91alc3U3dG + Q1BEV0FNMmJhN0VybTFOTkNwUk9pUGMKLS0tIGh3cU1Jb256WWluZnJCRm4vaUhi + eDBWUE9RTWNuN2h6dzk1NDkwU1dmb0kK/gBP3e3+ZD7Za4Oos0zI3BR9Jw/Q7IKV + 9UzG8zzlYXFgbouvzDZXTweFhEzAflu7P2O/GQn6j/FmHf8ObA12vA== + -----END AGE ENCRYPTED FILE----- + - recipient: age1t2d5scrukk0guva5sr97a8tge5j8kd865adezrcru7p269pzwvpsamkgje + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2UWs3YngzYUx3QXRid09w + ZExNYU42Qzl4WDBZWjRJQTRqVW4yTnNvY0VJCnl3SmFsei9DcnVnbUl1cE5Scm5q + Y1hVK2dabzVxQjh6SWpCMFhXaXY2akEKLS0tIGx4c2lTY3R6TFV2MXlteDZ2SVgx + NE1qUTY0ME1YRnZwMWNJb1kvQTRIb3cKcjoTRZ9VhgXo4gWwuo86gUMxGIEwIH3q + Jl3hN+PB0zGeKSymn4c0lYAhz/KTYZE0wU8h0cyziVjvfoztxs/zVQ== + -----END AGE ENCRYPTED FILE----- + - recipient: age1c8qw59ffcq9l77gfmtyc3djtvt3md0u6dwhrjcgsm98ntyf72ufqugj7cg + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNT2tVanJxUFV0Ti9EWVly + aDZHL2FQY2FySStVVzk5SE1hY0lTdTZqWHdNCmR1c3M2TFp2NitLK2QzRGpsT294 + ZldrbDVjZDFYeFhaUnQrVW9rL241b1UKLS0tIFcyVHcyM2EvK0pjV3MyTFNSd1Aw + VmtRRzRJeUV0UlE0RDJiaU1GY0dGS0UKhW9fBFK/Bau35M0tutZ+0cK3jIIUPBxf + oT0jlpTjcCi42+UmOenuj0ykXEl0lspnd10rBxoDo9CKXN3FA3pr3g== + -----END AGE ENCRYPTED FILE----- + - recipient: age1er5qucsc2mugrzrr7n3xhzv7kemkrqrw4m84r544fkk7nkg5g5eswxkqj0 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYNzBqaTZ3NHRVOUQxSURF + Z1RMcWFjKzgxWmgvamwyTCswSFUyRjQrWWxvCmo4RDhjODRGNldxQTdmRXFnc1pC + dks4MThpLzA5Vy9iQkpZZ0NMeUZrQTAKLS0tIE1lVEg3Q0UycS9qMENMSWJ3T3Iv + VmY2eHhGeFRaM2ZXdEZYRUJ3bGwzeWsKD3YhMkNCbulvQulnVOBHEbOVvJDdLhiQ + FXCj6nK0UC2PBSyiAMw4LECf9NFjauuVW15hv36zzm/gH7XdPK/iJg== + -----END AGE ENCRYPTED FILE----- + - recipient: age12gu9hqhd56yl5x3t5yenkn9yg57du08h77vzjqsmnu5hdppne38qcur5a0 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWem1vcms1bHZiWkxlZFlm + MEdyRkdZcG53MzgwKzZwandMS1k3YWtOSWpJCjAzVDkrMjNCOXh6N3NzK1VLaFYr + R0dISUNOdlFENGVuYkVkaWVETEFZSUUKLS0tIGJERjR2TlgyTmVaTnRKUUd5Ylgv + TmtKTFVqY1FjZjhpOW1UaW4ySmNXNzgKJqvXj4k0ovsjAIBBDo5/O2Ad6qVQ8XYC + nrQavkwABVUQFXnmWCZnp0mDnJc8ZCv4qBzkVDF2QIXhkMTTvauwJA== + -----END AGE ENCRYPTED FILE----- + - recipient: age1t7378n8kmd3f32fkye2gw3jj6qswv3exjdx0dq8kl0xra3tmcdnsvddq3u + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzRmdQU3hRcjhVb1Uya3ds + T24zcmkwNGVmTC93Y3hmWVJtZ1V5L2RJUWpRCnlTWkx2N0tJVnVRUVZNWVdaQkZl + M3h4NTJiN3drcmpwTFFGZElac1pjUGsKLS0tIFR3bUYzdHMxbzRoc3pzYUhQSGU2 + MmUrSjRUUGp3Vy9mM2NlTFROWXpQd3cKZdFgKPqmdkeo/eh89ogHKpBt+Gh2FXbW + qjr2fqruoCgFBZH5AQzG4vdnYdQSCmY1W2osSLlU3qGu0lsWJXdZ+Q== + -----END AGE ENCRYPTED FILE----- + - recipient: age1yn82e39pxt0d0pgny34ux4lkge4ff7wxvsye8ragvwngehemt4ps27phyw + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzYmtKMVFHcm5lYW9teXNu + Sis2UzdKRWtiU0pveVFob1R6U09RZ2FqbVFnCmo5TU1UeVJ3VnlnRDBQZi9iMzdv + TFZ2Ylcrb1ZzamhUOUkwZ0U3azN2NVkKLS0tIGl1L2R1TzJXK1NKUWJMTTJ3RERx + TmdMelFzK29nakxIMi85VWQwMklLekUKZgx4FTFXqK2q+Adsjl2TOmlHSuLKQTlK + lP8k+LmibgKL4hiX6aaiy+HYEdRdOIcJLuQcW/puPCS8QxvsogzuiA== + -----END AGE ENCRYPTED FILE----- + - recipient: age102el4snus37dj807rwvsmlvwu2sg2d8rw3vfmtntgczfkz04l9nshetcq0 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1NWJKTUwzY1pHYWgyUVNJ + dkd2Nk5UbWdsMDZ1MWVlMktEdDNCaVRhczFrCkJsZDhBK083M0M3Tm5zQ1R6Z2Fa + dFEydm5VUzZialdlb2UzVllDWG9pL2sKLS0tIGRaTlRGM2dzV1NIUzE4TFIrSkxl + aTI1SVFuamN0Y1QxQVZzMEZPUVQ4R28K7xksqTpUcrg2Ar6kUBeEppj7pBLnPVyz + SRLIJNDOanHVl0QVZCsorZhrI9ZNRszNvHIDvnRJc4gVp9eJm5CxZQ== + -----END AGE ENCRYPTED FILE----- + - recipient: age1n5frpwgvps7c2348ynu9g7g47kqar4srdplw5kkcyn4x80eqzetqw3ej2m + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzOE1pd01RZSs2R0xiYU1R + bm5jV1BndHpja2xNdHlkbm43c2J3OXBMUlVBCmM5eEFNNlEwQk9aK1BUOU5JaXJp + VkdsNThRTVpINFZuTm52OFg3U21kTXMKLS0tIEpwa1V3dVF1VS9iOVhWUlVmdkxK + a2wvTjgyRmxYcTRMZFRuZmRYWGgwNTQKZQQrp6sLCYoib8hevcyzEGnmQ4XoEmYs + 5MG/MHKlROttr4/oAHrYowLV+efwar1ktyYmNfe400nYYM5sA/Uf8A== + -----END AGE ENCRYPTED FILE----- + - recipient: age1lvks0rdf743cn9rvvx90mzu3mjldydlzslpmv9608wn4j0m8u3xsmu7yew + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5Sks1UVVST3o3bnZLMW83 + ZVhMZnRpY21oRXF0SnNmVzg1ZWVIZGhqVTNBCjh5WFFYWXlGc20yZlRMMEZyYmZw + QVZaL1BhTlZVeW11clQxL1RiWStLV0kKLS0tIENzeTlVMXVzMDNJQmlURjlNbzBY + STU1bkRXNVRsYkJac0RPOVpZTmJCaW8KS9zUt1QpP0k38LQ6OMCkL7Ee3r/fZsWp + hfISSv9uO1uEmgRHtXSRaElQmOmGgcZB7oqSJvY3SJHxENPiCK4cDw== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2026-03-23T21:04:05Z" + mac: ENC[AES256_GCM,data:RzOE3TI/cz2OD/cfyuR4aUTm2idclRiBEMzex8HAdg9MiHbxrBST7UF1D0hkG8tRxJZccKerwjJLj+cY+zfMGI59299AC8PEdHQFnyK8JJH3Nk93Bl5Ctsd0eSRV5UHo+XerZbEh0/5o2YlXLQcar++08GhDf0bRjiacjBt6TRc=,iv:79JFaUW4ro35VS9NFlSdG57y6NJ10KglRQOLfhiiQHY=,tag:7CpnuBT5kdcMqEsKcGtimA==,type:str] + pgp: + - created_at: "2026-02-06T15:34:29Z" + enc: |- + -----BEGIN PGP MESSAGE----- - hQIMA0B7mmjbybiOAQ/+K0Z998jg5zBN44mq6Ec/mt3Mbon4KSdLPLUNXfUooO0V - 3ezgimlu0pwlUAf6B4Hucj971bulVMKa72gKZ8wnWgL/Wnc4yo0Vd/jFE3eKUbnq - DBk1GTuKwvWDkh+LSLO0QyBp396qjs/m0n2uxAOhEwB0gJz9UIu0SwbML1D8dUZV - wdFT24UmXpHFTlUYcfA6jHX5s32axIgB4vA71TES5Cm3B92iCCHgQkAUSUm5kmBG - FsTOwVSKpxCsHODczkut1RxYDdLii+smGIcR5BEvLDQ4m7Hqwv3v5KpQ5YK0KQyd - PnBHq0bdLWSESrGyjg+cStH4+np9csDTchwNcNxuAhtlUoBD3X8m4gwVS/l9npqv - kTUOzlcTyOrDfNEpCX5EXGu9fkzz2ZHfWwLsYHckXN0E5cs1KmnKHh7UmM0oEm2v - SO2SMq1CgKnGE2diJm4eFSJlw0znwjGAvjW4hpgRg2EKtpyKh4hWLPYOzcjh1zKC - a9Fbh0NK5ySsxJQt8/pIECtZAznRbc9/TEVdMyLAQWuI8GEYPmtr7AtMszoFLr1y - weM3jdaFtrCK6zV2gxuF40Vwtf412ewgrbwHt9mZazfYb8iKnZLLK4iAvFARBnDG - 842jHIqZRGziTKqQ2rdXdLbNeTf+Y21xfQQ1gn3YydkelFQqD++hYE1tuMCIjtbS - XAGhGb9fjGJPinAmY08JYZRhrM/NAXTiVP29v+Q5RD7AcrOuxhrP07hjwmHOlibj - Zr3JZD/glU8Yi51n3b55rYcK08/JCwsGaKSXtPYXt+degsuPG0cMvLzn9KkD - =ESgF - -----END PGP MESSAGE----- - fp: CBCB9B18A6B8930B0B6ABFD1CCB8CBEB30633684 - unencrypted_suffix: _unencrypted - version: 3.11.0 + hQIMA0B7mmjbybiOAQ/+K0Z998jg5zBN44mq6Ec/mt3Mbon4KSdLPLUNXfUooO0V + 3ezgimlu0pwlUAf6B4Hucj971bulVMKa72gKZ8wnWgL/Wnc4yo0Vd/jFE3eKUbnq + DBk1GTuKwvWDkh+LSLO0QyBp396qjs/m0n2uxAOhEwB0gJz9UIu0SwbML1D8dUZV + wdFT24UmXpHFTlUYcfA6jHX5s32axIgB4vA71TES5Cm3B92iCCHgQkAUSUm5kmBG + FsTOwVSKpxCsHODczkut1RxYDdLii+smGIcR5BEvLDQ4m7Hqwv3v5KpQ5YK0KQyd + PnBHq0bdLWSESrGyjg+cStH4+np9csDTchwNcNxuAhtlUoBD3X8m4gwVS/l9npqv + kTUOzlcTyOrDfNEpCX5EXGu9fkzz2ZHfWwLsYHckXN0E5cs1KmnKHh7UmM0oEm2v + SO2SMq1CgKnGE2diJm4eFSJlw0znwjGAvjW4hpgRg2EKtpyKh4hWLPYOzcjh1zKC + a9Fbh0NK5ySsxJQt8/pIECtZAznRbc9/TEVdMyLAQWuI8GEYPmtr7AtMszoFLr1y + weM3jdaFtrCK6zV2gxuF40Vwtf412ewgrbwHt9mZazfYb8iKnZLLK4iAvFARBnDG + 842jHIqZRGziTKqQ2rdXdLbNeTf+Y21xfQQ1gn3YydkelFQqD++hYE1tuMCIjtbS + XAGhGb9fjGJPinAmY08JYZRhrM/NAXTiVP29v+Q5RD7AcrOuxhrP07hjwmHOlibj + Zr3JZD/glU8Yi51n3b55rYcK08/JCwsGaKSXtPYXt+degsuPG0cMvLzn9KkD + =ESgF + -----END PGP MESSAGE----- + fp: CBCB9B18A6B8930B0B6ABFD1CCB8CBEB30633684 + unencrypted_suffix: _unencrypted + version: 3.11.0 diff --git a/secrets/mac-secrets.yaml b/secrets/mac-secrets.yaml index 911d6b8..2621002 100644 --- a/secrets/mac-secrets.yaml +++ b/secrets/mac-secrets.yaml @@ -1,176 +1,181 @@ macbook-pro: - mac-password: ENC[AES256_GCM,data:pGnlpi1EMIq6yyW/Wuv3N/60rk6mXA5wlkkwTTVHpFKIRx9IEQK5nXGJa/bbxIoexpIGySbswRBzrG+skx0tQtdg1ae6VR8TEg==,iv:7v3OQmd3oj4WquCBu35AuozTdpAk2ehYMZbjhcQOGGY=,tag:DW96+jPxQzGsjylRfchwRA==,type:str] - sys-public-key: ENC[AES256_GCM,data:Haq1gnVd2MwbvG8UCC+hOVAz65dMgfq+kIqEJ3jvDL95HKYS9zBScMR2m/qhk0q1cwhRkrb52NuWsEq2BTW1Bdd/MFwtUInd0hpdncnP0KMYxtBs2q8CX7s3ZWeDkaVjdCkVk3hCNA==,iv:lM4csf/RzLIUYCLpcQPHwqj2XDIPRY6H93m6XIp13Oo=,tag:Vj3cYh5SQe3mkv5XbMp3/w==,type:str] - sys-priv-key: ENC[AES256_GCM,data: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,iv:Qbw4VraVAi1OCzqsSGdiLCgHvpBxae6m+R0ypLsAC/4=,tag:lXxveQCPgxRY9mwS4Z0a3A==,type:str] + mac-password: ENC[AES256_GCM,data:pGnlpi1EMIq6yyW/Wuv3N/60rk6mXA5wlkkwTTVHpFKIRx9IEQK5nXGJa/bbxIoexpIGySbswRBzrG+skx0tQtdg1ae6VR8TEg==,iv:7v3OQmd3oj4WquCBu35AuozTdpAk2ehYMZbjhcQOGGY=,tag:DW96+jPxQzGsjylRfchwRA==,type:str] + sys-public-key: ENC[AES256_GCM,data:Haq1gnVd2MwbvG8UCC+hOVAz65dMgfq+kIqEJ3jvDL95HKYS9zBScMR2m/qhk0q1cwhRkrb52NuWsEq2BTW1Bdd/MFwtUInd0hpdncnP0KMYxtBs2q8CX7s3ZWeDkaVjdCkVk3hCNA==,iv:lM4csf/RzLIUYCLpcQPHwqj2XDIPRY6H93m6XIp13Oo=,tag:Vj3cYh5SQe3mkv5XbMp3/w==,type:str] + sys-priv-key: ENC[AES256_GCM,data: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,iv:Qbw4VraVAi1OCzqsSGdiLCgHvpBxae6m+R0ypLsAC/4=,tag:lXxveQCPgxRY9mwS4Z0a3A==,type:str] +macbook-pro-nixos: + nebula: + macbook-pro-nixos-cert: ENC[AES256_GCM,data:Y5/NkBKhilxU1zbA9/tP2uPMqdLquVboEADROJ4HvHqN3EDY1BqfdqBapW/Ka4kH/m005qWEMsZTwM+/WPDRz2wujWZ/55NrOEK/wXwNEAA9rlXwIS9BWuSGInRSb8Z1jfH8EIBuCoKlckAhEpgu31wC2M5I6xG+Jq6kmI+nlhNhHVyAeizzYUrY5PlNUZBP/COWpFs9ukvgvZxAtYWNCr6tlNumEQP2D4rVo5llqxFobGwAXLqvm2rVb8akZlg+UTlp7lZQfZGpOGTZRf3MEcmjXUEsT/aL4f6LtiVTKwEB76bvtYF5SxIx+SAgaUkqsaxJeTGc8c8ZNtw9TqynMdBHSfB0fIxXf6cCHZaztHe5eWUhSnxW0VvLd60btdA7jUHGcvx8LkOpsR0e+WMcXjrw9zO4mEs+JOQ1OQL1,iv:T85Qz/1H6ojbq0ZlqfBpeyznNigoCA8czMMqLBIUwjI=,tag:jEznUzK9V+QMfho/f+3TIQ==,type:str] + macbook-pro-nixos-key: ENC[AES256_GCM,data:zemLrMzg+IuIIA3dbIONVzKzBJFjdR6LMIPKGSnP23O/ZhoiflRPI1xZX3dKBcws51XtVhxKdfv/9UIiJwo2YRkW3xd2twJSld91ccN9xpwlnTciL4SS1lw4Tvrls4jmvpEZ6H0I2vwSOUyRrtx2/9cFGiJ/UfmnkxfbPtaBdA==,iv:5RMzQN3Pra2XnS+XZ/NKyOm+EvKY0d/76tQbczTjEAg=,tag:qyZviaLehXBZpjJ2VxXYDg==,type:str] + ca-cert: ENC[AES256_GCM,data:lHROT0PA2cMxrNr9DOYF87oJwyclpiWmuHSKLqBojtLFBUovJH1uQQPIRKEuJ2+3PiAg+4Oca9RRuDfmdik7NJcjNW6WCOdIhkxiHtZsQnP5jR+oY5xvQ100nrxa4ucwK6M8da3P0o/5AiniFulxlqRC3x4o+Ntxh8pqEGbN5AgCKgqds3qqv9LdVtIIQD5BB9IBlKwMEixHGoYreIoMxDEbjCuqc3/uwigE/xzxs1LqfmbBu1sSX3tnLpZvmt3BpZ6e/nhJahVzA8ni2GNcorNb6UXX9wXpuI1rkNC/7q5bXtZqBqe0ewR/qf/Mc306sZp/omvI/1/MWnwq2Q==,iv:kIohsCxkydUC0gaK5DAERdVR+wlNpMlTZzAZf2G6tGk=,tag:Tko/c8L6iy5zEqL+/qRPUw==,type:str] sops: - shamir_threshold: 1 - age: - - recipient: age157jemphjzg6zmk373vpccuguyw6e75qnkqmz8pcnn2yue85p939swqqhy0 - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0T1c1WkxRdzQ2N1ZhS3BX - VHdXYlovL2JYZmEraHJXZlIwdWpjblhQSmdZCkpVRHd2YTJKSkhyVlRMWWRsRzhC - ZVRHQm94M2U2ckRrWjZHbHl6RUVqU2MKLS0tIDFOT205YnJ5clgvRzN5R2tsdjlQ - T0pjclM1OC9LNkJxWVE4cTdFV3JaYzAKm2zJcCtiOVGhwLkX8cH3+/ql7n8IGB+p - YJTBPBnWDQn/QksQY8KpDOUZhlqVlm0WNTS+JsovpN66urNFayQ3AA== - -----END AGE ENCRYPTED FILE----- - - recipient: age13g9a4d4jrvckfddpgn8sm4kjtzajr67le56pfdg78ktr5pd09phq32j89u - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArUVRQalNyMlQxSTZkN0JG - dmUyUC90dFl4MGJ1ajNMSUhYRGNhUzlOUFNVCm8xRmlzWUFUNFcreUlxLzJCUCs4 - YjdOVy9ML1I5emlBbi9ZOXVORVhhMm8KLS0tIGhjZHZpWWR4eSs2TEpnb1ArZC9P - bVo2bXB6NERhTGZmMEpaTzVVNzNBTTQKJWMPqD7mmbAiGQWPvqTVJVJNETp3zBfk - gFFLW1zn1YEH1vpFAqethuIw/yj0Lqjg50I/gKptzle2BSgWfP7HQg== - -----END AGE ENCRYPTED FILE----- - - recipient: age1wpvfpv5n32lruk7c0da4uaeapsmhjxdvg8z4ljehn06l6g2y0e0sum404l - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1NDlDejRsUUhBODUyMjdx - N3haZDJqTXdQYXJtZkw1aWNFcE9Wdm1sWUNVCkd1SFZNZjU4bmw3ZWdCWjZ1aC9o - aHpjbEFYd29JbHdwY0xlbE1sRHVQS0kKLS0tIG5hTGlBd2k3OHpnK0tpMDBsN3d6 - eFgya1BkNWliWlgvUXZwVDZqZkNUUTQKWsTzLuMc2r6FFxvl6Y7WYChd6bFvFzpq - 5TzTLHHhk7M2jkQcEIJuichWP7tQQo2GHMthbfH6ScFlrBJY8S5a0A== - -----END AGE ENCRYPTED FILE----- - - recipient: age1jv8ap5zwa49ftv0gg7wqf5ps0e68uuwxe2fekjsn0zkyql964unqyc58rf - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqSEZhSVNZSmR0TjhPTkpq - bEhXRkgxYjFQamJ0UDhQUmFvNGM1QnZFMlRRCkdmMEh2aUFhcGhIRC9PaXYxTkFB - NUg0U2JoTmx2VmV3ZDlLc21SRkZtU1kKLS0tIDFmTHcwMHk0VEFtTHJMTy9xZ1pQ - QXhEaHF0dWxCY2tqcDViQXN3eGxIa1kK4qRtlqxVsmbsflLj5ERkjyfrVnwk+sWt - I4PR5mM+e+XssliYJ1/d4+05ywvVpgHFxMhfYtbsKXD6/+3m5FjRaA== - -----END AGE ENCRYPTED FILE----- - - recipient: age1pm3fehmmk0vmnrscz9vm96rakn46aaldr5ydpscmde3v9x0k3faswwdzxs - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNV2JMamhtNk54TXdWaTQ5 - ZjFVZ3oxWmo3VUphUnRQQ2dkYW9nQzRGZndFCnZrRG9yVWs2SFB0NWpBbzRYcnB6 - M21JNVlsN25DVER3UFNES2JjMjhoK1UKLS0tIHZ1b1A5SWFUTnplS3UwRDVIdDFG - NzZJQmQyRUFKc0ZOZ3E1MEJPVTJZbncK/QlNUrO+AlDxCf0noyhTcNKGPGjHbVyN - qKLla9GJTYLQzY1WUAC9msNqp9j5Gyn8MYS2N6V5BkGSmdpvCX5Iog== - -----END AGE ENCRYPTED FILE----- - - recipient: age1mn2afyp9my7y7hcyzum0wdwt49zufnkt8swnyy8pj30cwzs4zvgsthj0lt - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRdnBWbGYvYjcvK2ZUYlds - alBmTS9PSnRjbWI0V3M0Y3Jkd2xpdklvbHpNCi9UUXJueXdIQXJoZVVlTDBmbUJz - QTNtVWJMcEhCbldHTmZRS24rQVQ0UjgKLS0tIHRCTUpvTlo2NkxoL2hBcUs4Y1NP - b2NxYXhMQWFPZ0V4QnAzamdDa1ByeWcKj6nlb1jx1Erw2YvX+dxiZ2/Og20iqJn7 - DqIVMtVvEVR7mnFvWt7lfn0zuvGebBkF7pmv9OQJq82tcxeyq8uJaA== - -----END AGE ENCRYPTED FILE----- - - recipient: age1ykkjw57t3z3deup3gtp7dujyaslskn74e0d9hsmqaha2pj3rvazqgndw5a - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDdzNlc0taZWxNKzdpMEQ2 - RXZvSVM5MUtLZm0yVWhPOWdTU1puT3NCNnljCi9SblhuVkZTQW1iWWtpcW5KRnFq - M1QyRzFHam5qTnRtT1Nzbm92ZlpZUDQKLS0tIG9SVXcvS3NqMEhuNHM4WTZFMkk4 - N3k4TDR4NXYySVJFekJQK3Q0OU1aTjgKc1Up+2fiGIHbQq4sMNP5DS2q+ZF76xSp - DNj585CRgwNggGlAqMo/nMsEBFHaT126aGZ/t1vSwOmXgBL35KHkhw== - -----END AGE ENCRYPTED FILE----- - - recipient: age1t2d5scrukk0guva5sr97a8tge5j8kd865adezrcru7p269pzwvpsamkgje - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuemNrU25zNWZja2lxTkds - QTNNUjFRTlFoQkhyalUzNWRGTllrNlQzZlNBCmI4R2I2WjdlaktDS1VqQm93Yk1q - S3BKOXV1NDlHc1RNOVVadjVJRTluL1UKLS0tIDhCeDJ4RjUyTFZtdzV4VzJzT1dP - bkJBUlNSVlg0bmtwZzgycFBkNG9qSWcKnQxYTE9K2mt5pVF7SM+mVAKlgFryu+ha - 5/+M0wyrlbKQuZljdzCHo7AM9qD7fa3/SaAirm7QA1fpduKl/u84rQ== - -----END AGE ENCRYPTED FILE----- - - recipient: age1c8qw59ffcq9l77gfmtyc3djtvt3md0u6dwhrjcgsm98ntyf72ufqugj7cg - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmdm9NaFAyWlRUYUhRTCty - VmRXMHN1L1NjdTBjSFpQNlFnUHE5bnNGaVhBCjZQRHdhWGFuQUxKdDNkOW9JWHM4 - SWw4ZjJCVmJaOHRpdkU4Q1A5STRjcHcKLS0tIDFQN2tpME4wNjgvNUNBUEZqUVRl - SzdLYU1icU11STJMR0l6cEJ0d3YrblkK8U3RZbAPo1DScIUfOFgV1kFnPMGxpVwj - BavJvtjadqaHj8fS49KDuW9wRF1Dnb4WsI4rpJPXnksYsV/rRWsIKQ== - -----END AGE ENCRYPTED FILE----- - - recipient: age1er5qucsc2mugrzrr7n3xhzv7kemkrqrw4m84r544fkk7nkg5g5eswxkqj0 - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqcFczVHlWZkczNlVzVlFy - TFdyTFh6NmJ2M1hqdEtycVlGczZMNmZ1NlhrCmw3b0d4WTE0NFVGSlV6K1NPYnMy - N2NvK1NTUUJLVVh6d05NYytpZHdReG8KLS0tIDlraE9oTWlocXN1Zjg3WnlYc0xE - eHFmbXZ5Yk9Ga3kvNDVqSWFINEIyT0UKULvHSs0R4Y0MPv5D/HFBl1WJ5FLLpuNW - SiD1lEqudAQ8Ymz5WtZ6AV+KFipTLvqYpZceLt5GULgGFO0KroHu+Q== - -----END AGE ENCRYPTED FILE----- - - recipient: age12gu9hqhd56yl5x3t5yenkn9yg57du08h77vzjqsmnu5hdppne38qcur5a0 - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3ZEZPNXU0ZzIxcGFMM2J5 - cVJCbVA3S01OZEU2dTVBSkRZQXRiZ3NVQTBZCk1IVUs0RVJ6QUhrazl6VGNTdTlX - d3FPdDhuelR5WWJkM0dlK1Z6a3AzdHcKLS0tIGNrVHluQ3B3emkyL0J2cjFHOFdw - UlJpdnA2MHpUdkFQcDcvZW1IRWx6STQK2RAZTsvS4c4LjG+ch4TNZcy27KwJToEF - APar/dAwuM0bnMqjL1IWQurGLi+lrpkuiWR4iB0HtRSkluNbDkHVzA== - -----END AGE ENCRYPTED FILE----- - - recipient: age1t7378n8kmd3f32fkye2gw3jj6qswv3exjdx0dq8kl0xra3tmcdnsvddq3u - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPZ1JXY2NzYVl1ZEVqdXhR - K3ZwRlJ1a0JTYkdoMDEvTkV5d0Q1RjhyUnlNCnpYU1BqSHVkY2VqYU9Rc2N1c0hF - OXZRVHRjaHZnN3BreGhOdzhHRThGclEKLS0tIElWZktmZitscmU2SW1PL1Q4czdr - QjUwWVM4S1BRdE55bXRQR0o0anR2ZGMKWk4n7JyQItS+liOWNRrPwiosY7f6YTfn - h9qnG1QJ7mNST7L/nR4i7aFPdqtW/447PTY7DU4E/H4jtPGE3f6xpQ== - -----END AGE ENCRYPTED FILE----- - - recipient: age1yn82e39pxt0d0pgny34ux4lkge4ff7wxvsye8ragvwngehemt4ps27phyw - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWOXVKZHpKWnoyWXdOQ29N - K3E3enhLZ052ZWFkTzlDN3BiekhlYVk0Z0QwCnBKQ2hZa0VsUzlzOUVrYW1KOWll - Y2VsVUVRc21IRnFQQUF2NGR5SkZQMkUKLS0tIHI5L2ZsM1dpWUFnSE1pQXoyV2kz - OXIvS1RDNEJpQ2xWQld3SHpMQTkwOTgKiaiSXmYU/29Fzqe5cWim+SFhV6eLn1RZ - eoCVcL9u1I+UQvtLSdyFXI4GZJreVP48zROjJh7bkOUFkPNmkc58VA== - -----END AGE ENCRYPTED FILE----- - - recipient: age102el4snus37dj807rwvsmlvwu2sg2d8rw3vfmtntgczfkz04l9nshetcq0 - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwamxFdlQ2em5aSk9yYkZZ - MmRubmM1dHlrWFdnbyt5ZG1uOHpJeVJMcUhrClo4andsbzJYaStrMEI2NGVpZHFs - dUwxNnJNcXBEajlnYmxjODBwQUdKVzgKLS0tIEM5aTY3VDdjVWtqS3RwZndQZ053 - SXZxNUR3ZDdUUFl0WG54azlheEhZR2sKcf6lLtVvE4E+3WkU5UW9FNwJIesiwvtP - f7ZjGr35hYbzPf4ji7Pc4VLK5JNMuZ/CWWPQlpX146gApueaeYk12A== - -----END AGE ENCRYPTED FILE----- - - recipient: age1n5frpwgvps7c2348ynu9g7g47kqar4srdplw5kkcyn4x80eqzetqw3ej2m - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0N1lmME5BVEd2TFpxQVVh - VGtlUDBwYmxMWm1zMTlFWDhzZEVrMFpPWEE0ClczamUwS1dpNEZidVUwcGRLaFFu - RmxEc3pWdlpSajNoTVBVTkJyeTlhWEkKLS0tIFBJUDBHNDVmenpxemYzMzRXM2d3 - ZTc5NGVUaWwwcjdqK3dPMXY2bVdQVkUKvqjjVR0yEZcqUFwvLa+lqj3JUwsrbL1F - uzagj3aaJms8BOT8XsBilEgVa41zG4rVTJm3zD/RtSqaHcQROU0fMQ== - -----END AGE ENCRYPTED FILE----- - - recipient: age1lvks0rdf743cn9rvvx90mzu3mjldydlzslpmv9608wn4j0m8u3xsmu7yew - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIS1hwOVNsK2diNlhWTUhK - TUg3Vy9yUW0vdTFoQVlXSHAvQjQ3MzdKb2hFCkRoZGhEaHRsZnJEZXM2Y0dGZjMx - cVI2MHdacGFPYUNBZEFvNlQzTUhrdTAKLS0tIE1yWkRmQjdJc0NFQjdKMFVFNW1j - SlVQcGorK3l3UU1WbTlLV3RvUVoyQlEKdR12pS1USSx70fvyNRLcHRD1IUOK+OkD - J9XppV46eyGY5GLTDO7y7tmTu1Bw94inB0QA3PEw+6TZ0PEUTAqZVw== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-02-09T22:45:04Z" - mac: ENC[AES256_GCM,data:nvi+6VK6S7TpYVbFZHXkPU3LObc7i0N1bjp5rzEjUZUDjcPuI3IOM47Rs51T3uRi3AUyGy9sNR2ndkfD6qtT3QXJz6v/eyk01tJ9F7nEMYe+eoa8eC9GgaaJrrqgN1yPonMCLlUGUkQ9bslo/4opVMpQC2GM4EktsCvamHcAfSM=,iv:wljbtstRruCI69HUYqu/3WfUbPMAj+W1UFrz/+keQOU=,tag:uEAvNG9K3+qUJ8P3c/46ew==,type:str] - pgp: - - created_at: "2026-02-06T15:34:34Z" - enc: |- - -----BEGIN PGP MESSAGE----- + shamir_threshold: 1 + age: + - recipient: age157jemphjzg6zmk373vpccuguyw6e75qnkqmz8pcnn2yue85p939swqqhy0 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0T1c1WkxRdzQ2N1ZhS3BX + VHdXYlovL2JYZmEraHJXZlIwdWpjblhQSmdZCkpVRHd2YTJKSkhyVlRMWWRsRzhC + ZVRHQm94M2U2ckRrWjZHbHl6RUVqU2MKLS0tIDFOT205YnJ5clgvRzN5R2tsdjlQ + T0pjclM1OC9LNkJxWVE4cTdFV3JaYzAKm2zJcCtiOVGhwLkX8cH3+/ql7n8IGB+p + YJTBPBnWDQn/QksQY8KpDOUZhlqVlm0WNTS+JsovpN66urNFayQ3AA== + -----END AGE ENCRYPTED FILE----- + - recipient: age13g9a4d4jrvckfddpgn8sm4kjtzajr67le56pfdg78ktr5pd09phq32j89u + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArUVRQalNyMlQxSTZkN0JG + dmUyUC90dFl4MGJ1ajNMSUhYRGNhUzlOUFNVCm8xRmlzWUFUNFcreUlxLzJCUCs4 + YjdOVy9ML1I5emlBbi9ZOXVORVhhMm8KLS0tIGhjZHZpWWR4eSs2TEpnb1ArZC9P + bVo2bXB6NERhTGZmMEpaTzVVNzNBTTQKJWMPqD7mmbAiGQWPvqTVJVJNETp3zBfk + gFFLW1zn1YEH1vpFAqethuIw/yj0Lqjg50I/gKptzle2BSgWfP7HQg== + -----END AGE ENCRYPTED FILE----- + - recipient: age1wpvfpv5n32lruk7c0da4uaeapsmhjxdvg8z4ljehn06l6g2y0e0sum404l + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1NDlDejRsUUhBODUyMjdx + N3haZDJqTXdQYXJtZkw1aWNFcE9Wdm1sWUNVCkd1SFZNZjU4bmw3ZWdCWjZ1aC9o + aHpjbEFYd29JbHdwY0xlbE1sRHVQS0kKLS0tIG5hTGlBd2k3OHpnK0tpMDBsN3d6 + eFgya1BkNWliWlgvUXZwVDZqZkNUUTQKWsTzLuMc2r6FFxvl6Y7WYChd6bFvFzpq + 5TzTLHHhk7M2jkQcEIJuichWP7tQQo2GHMthbfH6ScFlrBJY8S5a0A== + -----END AGE ENCRYPTED FILE----- + - recipient: age1jv8ap5zwa49ftv0gg7wqf5ps0e68uuwxe2fekjsn0zkyql964unqyc58rf + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqSEZhSVNZSmR0TjhPTkpq + bEhXRkgxYjFQamJ0UDhQUmFvNGM1QnZFMlRRCkdmMEh2aUFhcGhIRC9PaXYxTkFB + NUg0U2JoTmx2VmV3ZDlLc21SRkZtU1kKLS0tIDFmTHcwMHk0VEFtTHJMTy9xZ1pQ + QXhEaHF0dWxCY2tqcDViQXN3eGxIa1kK4qRtlqxVsmbsflLj5ERkjyfrVnwk+sWt + I4PR5mM+e+XssliYJ1/d4+05ywvVpgHFxMhfYtbsKXD6/+3m5FjRaA== + -----END AGE ENCRYPTED FILE----- + - recipient: age1pm3fehmmk0vmnrscz9vm96rakn46aaldr5ydpscmde3v9x0k3faswwdzxs + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNV2JMamhtNk54TXdWaTQ5 + ZjFVZ3oxWmo3VUphUnRQQ2dkYW9nQzRGZndFCnZrRG9yVWs2SFB0NWpBbzRYcnB6 + M21JNVlsN25DVER3UFNES2JjMjhoK1UKLS0tIHZ1b1A5SWFUTnplS3UwRDVIdDFG + NzZJQmQyRUFKc0ZOZ3E1MEJPVTJZbncK/QlNUrO+AlDxCf0noyhTcNKGPGjHbVyN + qKLla9GJTYLQzY1WUAC9msNqp9j5Gyn8MYS2N6V5BkGSmdpvCX5Iog== + -----END AGE ENCRYPTED FILE----- + - recipient: age1mn2afyp9my7y7hcyzum0wdwt49zufnkt8swnyy8pj30cwzs4zvgsthj0lt + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRdnBWbGYvYjcvK2ZUYlds + alBmTS9PSnRjbWI0V3M0Y3Jkd2xpdklvbHpNCi9UUXJueXdIQXJoZVVlTDBmbUJz + QTNtVWJMcEhCbldHTmZRS24rQVQ0UjgKLS0tIHRCTUpvTlo2NkxoL2hBcUs4Y1NP + b2NxYXhMQWFPZ0V4QnAzamdDa1ByeWcKj6nlb1jx1Erw2YvX+dxiZ2/Og20iqJn7 + DqIVMtVvEVR7mnFvWt7lfn0zuvGebBkF7pmv9OQJq82tcxeyq8uJaA== + -----END AGE ENCRYPTED FILE----- + - recipient: age1ykkjw57t3z3deup3gtp7dujyaslskn74e0d9hsmqaha2pj3rvazqgndw5a + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDdzNlc0taZWxNKzdpMEQ2 + RXZvSVM5MUtLZm0yVWhPOWdTU1puT3NCNnljCi9SblhuVkZTQW1iWWtpcW5KRnFq + M1QyRzFHam5qTnRtT1Nzbm92ZlpZUDQKLS0tIG9SVXcvS3NqMEhuNHM4WTZFMkk4 + N3k4TDR4NXYySVJFekJQK3Q0OU1aTjgKc1Up+2fiGIHbQq4sMNP5DS2q+ZF76xSp + DNj585CRgwNggGlAqMo/nMsEBFHaT126aGZ/t1vSwOmXgBL35KHkhw== + -----END AGE ENCRYPTED FILE----- + - recipient: age1t2d5scrukk0guva5sr97a8tge5j8kd865adezrcru7p269pzwvpsamkgje + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuemNrU25zNWZja2lxTkds + QTNNUjFRTlFoQkhyalUzNWRGTllrNlQzZlNBCmI4R2I2WjdlaktDS1VqQm93Yk1q + S3BKOXV1NDlHc1RNOVVadjVJRTluL1UKLS0tIDhCeDJ4RjUyTFZtdzV4VzJzT1dP + bkJBUlNSVlg0bmtwZzgycFBkNG9qSWcKnQxYTE9K2mt5pVF7SM+mVAKlgFryu+ha + 5/+M0wyrlbKQuZljdzCHo7AM9qD7fa3/SaAirm7QA1fpduKl/u84rQ== + -----END AGE ENCRYPTED FILE----- + - recipient: age1c8qw59ffcq9l77gfmtyc3djtvt3md0u6dwhrjcgsm98ntyf72ufqugj7cg + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmdm9NaFAyWlRUYUhRTCty + VmRXMHN1L1NjdTBjSFpQNlFnUHE5bnNGaVhBCjZQRHdhWGFuQUxKdDNkOW9JWHM4 + SWw4ZjJCVmJaOHRpdkU4Q1A5STRjcHcKLS0tIDFQN2tpME4wNjgvNUNBUEZqUVRl + SzdLYU1icU11STJMR0l6cEJ0d3YrblkK8U3RZbAPo1DScIUfOFgV1kFnPMGxpVwj + BavJvtjadqaHj8fS49KDuW9wRF1Dnb4WsI4rpJPXnksYsV/rRWsIKQ== + -----END AGE ENCRYPTED FILE----- + - recipient: age1er5qucsc2mugrzrr7n3xhzv7kemkrqrw4m84r544fkk7nkg5g5eswxkqj0 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqcFczVHlWZkczNlVzVlFy + TFdyTFh6NmJ2M1hqdEtycVlGczZMNmZ1NlhrCmw3b0d4WTE0NFVGSlV6K1NPYnMy + N2NvK1NTUUJLVVh6d05NYytpZHdReG8KLS0tIDlraE9oTWlocXN1Zjg3WnlYc0xE + eHFmbXZ5Yk9Ga3kvNDVqSWFINEIyT0UKULvHSs0R4Y0MPv5D/HFBl1WJ5FLLpuNW + SiD1lEqudAQ8Ymz5WtZ6AV+KFipTLvqYpZceLt5GULgGFO0KroHu+Q== + -----END AGE ENCRYPTED FILE----- + - recipient: age12gu9hqhd56yl5x3t5yenkn9yg57du08h77vzjqsmnu5hdppne38qcur5a0 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3ZEZPNXU0ZzIxcGFMM2J5 + cVJCbVA3S01OZEU2dTVBSkRZQXRiZ3NVQTBZCk1IVUs0RVJ6QUhrazl6VGNTdTlX + d3FPdDhuelR5WWJkM0dlK1Z6a3AzdHcKLS0tIGNrVHluQ3B3emkyL0J2cjFHOFdw + UlJpdnA2MHpUdkFQcDcvZW1IRWx6STQK2RAZTsvS4c4LjG+ch4TNZcy27KwJToEF + APar/dAwuM0bnMqjL1IWQurGLi+lrpkuiWR4iB0HtRSkluNbDkHVzA== + -----END AGE ENCRYPTED FILE----- + - recipient: age1t7378n8kmd3f32fkye2gw3jj6qswv3exjdx0dq8kl0xra3tmcdnsvddq3u + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPZ1JXY2NzYVl1ZEVqdXhR + K3ZwRlJ1a0JTYkdoMDEvTkV5d0Q1RjhyUnlNCnpYU1BqSHVkY2VqYU9Rc2N1c0hF + OXZRVHRjaHZnN3BreGhOdzhHRThGclEKLS0tIElWZktmZitscmU2SW1PL1Q4czdr + QjUwWVM4S1BRdE55bXRQR0o0anR2ZGMKWk4n7JyQItS+liOWNRrPwiosY7f6YTfn + h9qnG1QJ7mNST7L/nR4i7aFPdqtW/447PTY7DU4E/H4jtPGE3f6xpQ== + -----END AGE ENCRYPTED FILE----- + - recipient: age1yn82e39pxt0d0pgny34ux4lkge4ff7wxvsye8ragvwngehemt4ps27phyw + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWOXVKZHpKWnoyWXdOQ29N + K3E3enhLZ052ZWFkTzlDN3BiekhlYVk0Z0QwCnBKQ2hZa0VsUzlzOUVrYW1KOWll + Y2VsVUVRc21IRnFQQUF2NGR5SkZQMkUKLS0tIHI5L2ZsM1dpWUFnSE1pQXoyV2kz + OXIvS1RDNEJpQ2xWQld3SHpMQTkwOTgKiaiSXmYU/29Fzqe5cWim+SFhV6eLn1RZ + eoCVcL9u1I+UQvtLSdyFXI4GZJreVP48zROjJh7bkOUFkPNmkc58VA== + -----END AGE ENCRYPTED FILE----- + - recipient: age102el4snus37dj807rwvsmlvwu2sg2d8rw3vfmtntgczfkz04l9nshetcq0 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwamxFdlQ2em5aSk9yYkZZ + MmRubmM1dHlrWFdnbyt5ZG1uOHpJeVJMcUhrClo4andsbzJYaStrMEI2NGVpZHFs + dUwxNnJNcXBEajlnYmxjODBwQUdKVzgKLS0tIEM5aTY3VDdjVWtqS3RwZndQZ053 + SXZxNUR3ZDdUUFl0WG54azlheEhZR2sKcf6lLtVvE4E+3WkU5UW9FNwJIesiwvtP + f7ZjGr35hYbzPf4ji7Pc4VLK5JNMuZ/CWWPQlpX146gApueaeYk12A== + -----END AGE ENCRYPTED FILE----- + - recipient: age1n5frpwgvps7c2348ynu9g7g47kqar4srdplw5kkcyn4x80eqzetqw3ej2m + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0N1lmME5BVEd2TFpxQVVh + VGtlUDBwYmxMWm1zMTlFWDhzZEVrMFpPWEE0ClczamUwS1dpNEZidVUwcGRLaFFu + RmxEc3pWdlpSajNoTVBVTkJyeTlhWEkKLS0tIFBJUDBHNDVmenpxemYzMzRXM2d3 + ZTc5NGVUaWwwcjdqK3dPMXY2bVdQVkUKvqjjVR0yEZcqUFwvLa+lqj3JUwsrbL1F + uzagj3aaJms8BOT8XsBilEgVa41zG4rVTJm3zD/RtSqaHcQROU0fMQ== + -----END AGE ENCRYPTED FILE----- + - recipient: age1lvks0rdf743cn9rvvx90mzu3mjldydlzslpmv9608wn4j0m8u3xsmu7yew + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIS1hwOVNsK2diNlhWTUhK + TUg3Vy9yUW0vdTFoQVlXSHAvQjQ3MzdKb2hFCkRoZGhEaHRsZnJEZXM2Y0dGZjMx + cVI2MHdacGFPYUNBZEFvNlQzTUhrdTAKLS0tIE1yWkRmQjdJc0NFQjdKMFVFNW1j + SlVQcGorK3l3UU1WbTlLV3RvUVoyQlEKdR12pS1USSx70fvyNRLcHRD1IUOK+OkD + J9XppV46eyGY5GLTDO7y7tmTu1Bw94inB0QA3PEw+6TZ0PEUTAqZVw== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2026-03-23T21:06:15Z" + mac: ENC[AES256_GCM,data:02pvRfBy1zjwj62YNtmYqeXwQic6zOQqAIeYASszItFQUeFKDZvM+gONNzKgONCS0Zp2V3CuRY5xofsaPLpk8pef6ZoUxQJGhYCIN410R59aJia6KBVnCMHeky5knWGNqTcErGym90GVQMwvQTLpbcTZLtlESAXpZzdk5ESDv9U=,iv:6COWTXKpxzBb/3h3ueln9Dgr0Zc+ElZg0HIn+57WveA=,tag:7hNizplCE2LJGpvTSmzmRQ==,type:str] + pgp: + - created_at: "2026-02-06T15:34:34Z" + enc: |- + -----BEGIN PGP MESSAGE----- - hQIMA0B7mmjbybiOAQ//YvWt6/5BJEJ0LANsATgrivkx+Ge2vxiw+gzMuPj+tEtF - 6ulwm4i42D4X1S35VGhiqBlAimU7M/LjfDOhFphFjuI7rGuCu9UEvC3Tn/BTMzxz - urza2yeKLxz/3K3TqUKmRY1LYzV6rtWujvbw1H6XheaHY0Omxtn65yuHG/dSyo0V - UsDBfxMmYIF2kZAsOqj3IBvCLGrp5bjttYrSMH8V6FinXM1La+lUObvzJ/ugfMxm - qf6VWGDY8QR1f3XshqOPSU2YnORx+mrQ0l5itgneMXvNZCaSa8WapcpEgJThyrcb - ulQCVUgyUk+sA8MWiCZ+Kt+HmQZ6tSrknwHOYg+e8l/sHw3lGP492fuXau77gKZT - hGP4GbyVuv5zp/3JHRSGtLxTYodjd6Lpx+Bz9OUpcQ1jzF8/ml0/XDFeByXUOJat - /b8HKvtIVua09S3ifWQMPIckAUji0KNq4NgagrEutDzPr+ek+XK8ABcQ07oTveab - xh9+vciptkyc3Pco9XIYAs5cZ3Oxo4pLD0scxPEH4LTuW/uLr9K/r+esIfviqPa9 - WZSpGK0uB9EZAnpXvl8YYzwliOeDjrDb6lscIL3Ewf4RDjR3uISoPkEdNkwUIes8 - MQ32r+pDO7HXato/cGHGL3F/S2ULVgPYnmZ9VQrlzYX4389o8gr/anVoVjW+iETS - XgF7wAvhzXr7d1Y1JSsWVxOiQr0W0dhRyR2rWx+v7+rkplqNvZTrmSppIdW57KYQ - ILDKPYjXhrR6ob8aDmsLABRuvZiDDUGclsd7BvplQtSi1e8LHhE8DEPiGTZAQGQ= - =Vav+ - -----END PGP MESSAGE----- - fp: CBCB9B18A6B8930B0B6ABFD1CCB8CBEB30633684 - unencrypted_suffix: _unencrypted - version: 3.11.0 + hQIMA0B7mmjbybiOAQ//YvWt6/5BJEJ0LANsATgrivkx+Ge2vxiw+gzMuPj+tEtF + 6ulwm4i42D4X1S35VGhiqBlAimU7M/LjfDOhFphFjuI7rGuCu9UEvC3Tn/BTMzxz + urza2yeKLxz/3K3TqUKmRY1LYzV6rtWujvbw1H6XheaHY0Omxtn65yuHG/dSyo0V + UsDBfxMmYIF2kZAsOqj3IBvCLGrp5bjttYrSMH8V6FinXM1La+lUObvzJ/ugfMxm + qf6VWGDY8QR1f3XshqOPSU2YnORx+mrQ0l5itgneMXvNZCaSa8WapcpEgJThyrcb + ulQCVUgyUk+sA8MWiCZ+Kt+HmQZ6tSrknwHOYg+e8l/sHw3lGP492fuXau77gKZT + hGP4GbyVuv5zp/3JHRSGtLxTYodjd6Lpx+Bz9OUpcQ1jzF8/ml0/XDFeByXUOJat + /b8HKvtIVua09S3ifWQMPIckAUji0KNq4NgagrEutDzPr+ek+XK8ABcQ07oTveab + xh9+vciptkyc3Pco9XIYAs5cZ3Oxo4pLD0scxPEH4LTuW/uLr9K/r+esIfviqPa9 + WZSpGK0uB9EZAnpXvl8YYzwliOeDjrDb6lscIL3Ewf4RDjR3uISoPkEdNkwUIes8 + MQ32r+pDO7HXato/cGHGL3F/S2ULVgPYnmZ9VQrlzYX4389o8gr/anVoVjW+iETS + XgF7wAvhzXr7d1Y1JSsWVxOiQr0W0dhRyR2rWx+v7+rkplqNvZTrmSppIdW57KYQ + ILDKPYjXhrR6ob8aDmsLABRuvZiDDUGclsd7BvplQtSi1e8LHhE8DEPiGTZAQGQ= + =Vav+ + -----END PGP MESSAGE----- + fp: CBCB9B18A6B8930B0B6ABFD1CCB8CBEB30633684 + unencrypted_suffix: _unencrypted + version: 3.11.0 diff --git a/systems/aarch64-linux/macbook-pro-nixos/default.nix b/systems/aarch64-linux/macbook-pro-nixos/default.nix index abd69c6..716a3a1 100755 --- a/systems/aarch64-linux/macbook-pro-nixos/default.nix +++ b/systems/aarch64-linux/macbook-pro-nixos/default.nix @@ -2,7 +2,12 @@ # your system. Help is available in the configuration.nix(5) man page, on # https://search.nixos.org/options and in the NixOS manual (`nixos-help`). -{ pkgs, namespace, ... }: +{ + lib, + pkgs, + namespace, + ... +}: { imports = [ ./boot.nix @@ -93,6 +98,19 @@ iptables -I INPUT -p udp -m udp --match multiport --dports 1990,2021 -j ACCEPT ''; }; + services = { + nebula = { + enable = true; + port = 4242; + lighthouses = [ "10.1.1.1" ]; + staticHostMap = { + "10.1.1.1" = [ "mjallen.dev:4242" ]; + }; + secretsPrefix = "macbook-pro-nixos/nebula"; + secretsFile = lib.snowfall.fs.get-file "secrets/mac-secrets.yaml"; + hostSecretName = "macbook-pro-nixos"; + }; + }; }; nixpkgs.config.allowUnsupportedSystem = true; diff --git a/systems/x86_64-linux/jallen-nas/default.nix b/systems/x86_64-linux/jallen-nas/default.nix index ad17262..5bca535 100755 --- a/systems/x86_64-linux/jallen-nas/default.nix +++ b/systems/x86_64-linux/jallen-nas/default.nix @@ -326,7 +326,9 @@ in tigervnc tpm2-tools tpm2-tss - ]; + ] ++ (with pkgs.${namespace}; [ + nebula-sign-cert + ]); persistence."/media/nas/main/persist" = { hideMounts = true; directories = [ diff --git a/systems/x86_64-linux/matt-nixos/default.nix b/systems/x86_64-linux/matt-nixos/default.nix index 2fdd1b9..329337e 100644 --- a/systems/x86_64-linux/matt-nixos/default.nix +++ b/systems/x86_64-linux/matt-nixos/default.nix @@ -72,6 +72,20 @@ network = { hostName = "matt-nixos"; }; + + services = { + nebula = { + enable = true; + port = 4242; + lighthouses = [ "10.1.1.1" ]; + staticHostMap = { + "10.1.1.1" = [ "mjallen.dev:4242" ]; + }; + secretsPrefix = "matt-nixos/nebula"; + secretsFile = lib.snowfall.fs.get-file "secrets/desktop-secrets.yaml"; + hostSecretName = "matt-nixos"; + }; + }; }; programs.coolercontrol.enable = true;