diff --git a/modules/nixos/services/ai/default.nix b/modules/nixos/services/ai/default.nix index d6c0b4e..2595528 100755 --- a/modules/nixos/services/ai/default.nix +++ b/modules/nixos/services/ai/default.nix @@ -7,13 +7,19 @@ }: with lib; let + inherit (lib.${namespace}) mkOpt; + cfg = config.${namespace}.services.ai; aiConfig = lib.${namespace}.mkModule { inherit config; name = "ai"; description = "AI Services"; - options = { }; + options = { + llama-cpp = { + model = mkOpt types.str "Qwen3-Coder-Next-UD-Q3_K_XL" ""; + }; + }; moduleConfig = { services = { ollama = { @@ -34,7 +40,7 @@ let port = 8127; host = "0.0.0.0"; openFirewall = cfg.openFirewall; - model = "${cfg.configDir}/llama-cpp/models/Qwen3-Coder-Next-Q4_0.gguf"; + model = "${cfg.configDir}/llama-cpp/models/${cfg.llama-cpp.model}.gguf"; package = pkgs.llama-cpp-rocm; extraFlags = [ "--fit" @@ -105,7 +111,7 @@ let set -euo pipefail MODEL_DIR="${cfg.configDir}/llama-cpp/models" - MODEL_NAME="Qwen3-Coder-Next-Q4_0.gguf" + MODEL_NAME="${cfg.llama-cpp.model}.gguf" REPO_ID="unsloth/Qwen3-Coder-Next-GGUF" # Create model directory if it doesn't exist diff --git a/modules/nixos/services/caddy/default.nix b/modules/nixos/services/caddy/default.nix index 3aa700f..5a7b7e5 100644 --- a/modules/nixos/services/caddy/default.nix +++ b/modules/nixos/services/caddy/default.nix @@ -11,10 +11,13 @@ let cfg = config.${namespace}.services.${name}; caddyPackage = pkgs.caddy.withPlugins { - plugins = [ "github.com/caddy-dns/cloudflare@v0.2.2" ]; + plugins = [ + "github.com/caddy-dns/cloudflare@v0.2.2" + ]; hash = "sha256-dnhEjopeA0UiI+XVYHYpsjcEI6Y1Hacbi28hVKYQURg="; }; + # "github.com/hslatman/caddy-crowdsec-bouncer/http@v0.9.2" caddy = lib.${namespace}.mkModule { inherit config name; description = "caddy Service"; @@ -87,14 +90,14 @@ let package = caddyPackage; environmentFile = config.sops.templates."caddy.env".path; email = "jalle008@proton.me"; - enableReload = false; + enableReload = true; dataDir = "${cfg.configDir}/caddy"; globalConfig = '' metrics http_port 80 https_port 443 default_bind 0.0.0.0 - ''; # b710da1b0182eadcb1e569408de778f9f3c50 + ''; virtualHosts = { "*.mjallen.dev" = { extraConfig = '' @@ -102,19 +105,54 @@ let dns cloudflare {$CLOUDFLARE_DNS_API_TOKEN} } - @gitea host gitea.mjallen.dev - handle @gitea { - reverse_proxy http://10.0.1.3:3000 + @authentik host authentik.mjallen.dev + handle @authentik { + reverse_proxy http://10.0.1.3:${toString config.${namespace}.services.authentik.port} } - @jellyfin host jellyfin.mjallen.dev - handle @jellyfin { - reverse_proxy http://10.0.1.3:8096 + @cache host cache.mjallen.dev + handle @cache { + reverse_proxy http://10.0.1.3:${toString config.${namespace}.services.attic.port} + } + + @gitea host gitea.mjallen.dev + handle @gitea { + reverse_proxy http://10.0.1.3:${toString config.${namespace}.services.gitea.port} } @homeassistant host hass.mjallen.dev handle @homeassistant { - reverse_proxy http://10.0.1.4:8123 + reverse_proxy http://nuc-nixos.local:8123 + } + + @immich host immich.mjallen.dev + handle @immich { + reverse_proxy http://10.0.1.3:${toString config.${namespace}.services.immich.port} + } + + @jellyfin host jellyfin.mjallen.dev + handle @jellyfin { + reverse_proxy http://10.0.1.3:${toString config.${namespace}.services.jellyfin.port} + } + + @jellyseerr host jellyseerr.mjallen.dev + handle @jellyseerr { + reverse_proxy http://10.0.1.3:${toString config.${namespace}.services.jellyseerr.port} + } + + @lubelogger host lubelogger.mjallen.dev + handle @lubelogger { + reverse_proxy http://10.0.1.3:${toString config.${namespace}.services.lubelogger.port} + } + + @matrix host matrix.mjallen.dev + handle @matrix { + reverse_proxy http://10.0.1.3:${toString config.${namespace}.services.matrix.port} + } + + @ntfy host ntfy.mjallen.dev + handle @ntfy { + reverse_proxy http://10.0.1.3:${toString config.${namespace}.services.ntfy.port} } ''; }; diff --git a/modules/nixos/services/coturn/default.nix b/modules/nixos/services/coturn/default.nix index 7e5a85a..7da0c1f 100644 --- a/modules/nixos/services/coturn/default.nix +++ b/modules/nixos/services/coturn/default.nix @@ -14,38 +14,59 @@ let description = "config"; options = { }; moduleConfig = { + # Add ACME certificate configuration for TLS support + # security.acme.certs."turn.mjallen.dev" = { + # group = "turnserver"; + # dnsProvider = "cloudflare"; + # credentialsFile = config.sops.templates."traefik.env".path; + # dnsPropagationCheck = true; + # }; + services.coturn = rec { enable = true; no-cli = true; - no-tcp-relay = true; + # Removed no-tcp-relay to enable TCP relay for better VoIP support min-port = 49000; max-port = 50000; use-auth-secret = true; static-auth-secret = "Lucifer008!"; listening-port = cfg.port; realm = "turn.mjallen.dev"; - # cert = "${config.security.acme.certs.${realm}.directory}/full.pem"; + # Enable TLS support with ACME certificates + # cert = "${config.security.acme.certs.${realm}.directory}/fullchain.pem"; # pkey = "${config.security.acme.certs.${realm}.directory}/key.pem"; extraConfig = '' # for debugging verbose - # ban private IP ranges + + # Add public IP address for NAT traversal + external-ip=73.242.17.96 + + # Allow localhost for testing + allowed-peer-ip=127.0.0.0-127.255.255.255 + allowed-peer-ip=::1 + + # ban private IP ranges - modified to allow local connections no-multicast-peers denied-peer-ip=0.0.0.0-0.255.255.255 - denied-peer-ip=10.0.0.0-10.255.255.255 + # Allow internal networks for testing + # denied-peer-ip=10.0.0.0-10.255.255.255 denied-peer-ip=100.64.0.0-100.127.255.255 - denied-peer-ip=127.0.0.0-127.255.255.255 + # Localhost now explicitly allowed above + # denied-peer-ip=127.0.0.0-127.255.255.255 denied-peer-ip=169.254.0.0-169.254.255.255 denied-peer-ip=172.16.0.0-172.31.255.255 denied-peer-ip=192.0.0.0-192.0.0.255 denied-peer-ip=192.0.2.0-192.0.2.255 denied-peer-ip=192.88.99.0-192.88.99.255 - denied-peer-ip=192.168.0.0-192.168.255.255 + # Allow local network + # denied-peer-ip=192.168.0.0-192.168.255.255 denied-peer-ip=198.18.0.0-198.19.255.255 denied-peer-ip=198.51.100.0-198.51.100.255 denied-peer-ip=203.0.113.0-203.0.113.255 denied-peer-ip=240.0.0.0-255.255.255.255 - denied-peer-ip=::1 + # Localhost now explicitly allowed above + # denied-peer-ip=::1 denied-peer-ip=64:ff9b::-64:ff9b::ffff:ffff denied-peer-ip=::ffff:0.0.0.0-::ffff:255.255.255.255 denied-peer-ip=100::-100::ffff:ffff:ffff:ffff @@ -53,9 +74,30 @@ let denied-peer-ip=2002::-2002:ffff:ffff:ffff:ffff:ffff:ffff:ffff denied-peer-ip=fc00::-fdff:ffff:ffff:ffff:ffff:ffff:ffff:ffff denied-peer-ip=fe80::-febf:ffff:ffff:ffff:ffff:ffff:ffff:ffff + + # Add better logging for debugging + log-file=/var/log/turnserver.log + syslog ''; }; networking.firewall = { + # Open ports on all interfaces for better connectivity + allowedUDPPortRanges = with config.services.coturn; [ + { + from = min-port; + to = max-port; + } + ]; + allowedUDPPorts = [ + 3478 # STUN/TURN standard port + 5349 # STUN/TURN TLS port + ]; + allowedTCPPorts = [ + 3478 # STUN/TURN standard port + 5349 # STUN/TURN TLS port + ]; + + # Keep the specific interface rules too for backward compatibility interfaces.enp197s0 = let range = with config.services.coturn; [ diff --git a/modules/nixos/services/crowdsec/default.nix b/modules/nixos/services/crowdsec/default.nix index 605b030..1295801 100755 --- a/modules/nixos/services/crowdsec/default.nix +++ b/modules/nixos/services/crowdsec/default.nix @@ -119,6 +119,15 @@ let capi.credentialsFile = lib.mkDefault "${cfg.configDir}/crowdsec/capi.yaml"; }; }; + + crowdsec-firewall-bouncer = { + enable = true; + registerBouncer = { + enable = true; + bouncerName = "nas-bouncer"; + }; + # secrets.apiKeyPath = config.sops.secrets."jallen-nas/crowdsec-firewall-bouncer-api-key".path; + }; }; }; }; diff --git a/modules/nixos/services/matrix/default.nix b/modules/nixos/services/matrix/default.nix index f5986f1..f211f57 100644 --- a/modules/nixos/services/matrix/default.nix +++ b/modules/nixos/services/matrix/default.nix @@ -122,9 +122,11 @@ let turn_uris = [ "turn:${config.services.coturn.realm}:3478?transport=udp" "turn:${config.services.coturn.realm}:3478?transport=tcp" + "turns:${config.services.coturn.realm}:5349?transport=tcp" # TLS version for secure connections ]; turn_shared_secret = config.services.coturn.static-auth-secret; turn_user_lifetime = "1h"; + turn_allow_guests = true; # Allow guest users to use TURN server }; }; diff --git a/modules/nixos/services/traefik/default.nix b/modules/nixos/services/traefik/default.nix index 782e603..0d3be47 100755 --- a/modules/nixos/services/traefik/default.nix +++ b/modules/nixos/services/traefik/default.nix @@ -58,70 +58,12 @@ let configDir = "/media/nas/main/appdata"; in { - imports = [ ./options.nix ]; + imports = [ + ./options.nix + ./sops.nix + ]; config = mkIf cfg.enable { - sops = { - secrets = { - "jallen-nas/traefik/crowdsec/lapi-key" = { - sopsFile = (lib.snowfall.fs.get-file "secrets/nas-secrets.yaml"); - owner = config.users.users.traefik.name; - group = config.users.users.traefik.group; - restartUnits = [ "traefik.service" ]; - }; - - "jallen-nas/traefik/crowdsec/capi-machine-id" = { - sopsFile = (lib.snowfall.fs.get-file "secrets/nas-secrets.yaml"); - owner = config.users.users.traefik.name; - group = config.users.users.traefik.group; - restartUnits = [ "traefik.service" ]; - }; - - "jallen-nas/traefik/crowdsec/capi-password" = { - sopsFile = (lib.snowfall.fs.get-file "secrets/nas-secrets.yaml"); - owner = config.users.users.traefik.name; - group = config.users.users.traefik.group; - restartUnits = [ "traefik.service" ]; - }; - "jallen-nas/traefik/cloudflare-dns-api-token" = { - sopsFile = (lib.snowfall.fs.get-file "secrets/nas-secrets.yaml"); - owner = config.users.users.traefik.name; - group = config.users.users.traefik.group; - restartUnits = [ "traefik.service" ]; - }; - "jallen-nas/traefik/cloudflare-zone-api-token" = { - sopsFile = (lib.snowfall.fs.get-file "secrets/nas-secrets.yaml"); - owner = config.users.users.traefik.name; - group = config.users.users.traefik.group; - restartUnits = [ "traefik.service" ]; - }; - "jallen-nas/traefik/cloudflare-api-key" = { - sopsFile = (lib.snowfall.fs.get-file "secrets/nas-secrets.yaml"); - owner = config.users.users.traefik.name; - group = config.users.users.traefik.group; - restartUnits = [ "traefik.service" ]; - }; - "jallen-nas/traefik/cloudflare-email" = { - sopsFile = (lib.snowfall.fs.get-file "secrets/nas-secrets.yaml"); - owner = config.users.users.traefik.name; - group = config.users.users.traefik.group; - restartUnits = [ "traefik.service" ]; - }; - }; - templates = { - "traefik.env" = { - content = '' - CLOUDFLARE_DNS_API_TOKEN=${config.sops.placeholder."jallen-nas/traefik/cloudflare-dns-api-token"} - CLOUDFLARE_ZONE_API_TOKEN=${config.sops.placeholder."jallen-nas/traefik/cloudflare-zone-api-token"} - CLOUDFLARE_API_KEY=${config.sops.placeholder."jallen-nas/traefik/cloudflare-api-key"} - CLOUDFLARE_EMAIL=${config.sops.placeholder."jallen-nas/traefik/cloudflare-email"} - ''; - owner = config.users.users.traefik.name; - group = config.users.users.traefik.group; - restartUnits = [ "traefik.service" ]; - }; - }; - }; networking.firewall = { allowedTCPPorts = forwardPorts; @@ -131,240 +73,295 @@ in services.traefik = { enable = true; dataDir = "${configDir}/traefik"; - dynamic.dir = "${configDir}/traefik"; group = "jallen-nas"; # group; environmentFiles = [ config.sops.templates."traefik.env".path ]; - staticConfigOptions = { - entryPoints = { - web = { - address = ":${toString httpPort}"; - asDefault = true; - http.redirections.entrypoint = { - to = "websecure"; - scheme = "https"; + static = { + # dir = "${configDir}/traefik"; + settings = { + entryPoints = { + web = { + address = ":${toString httpPort}"; + asDefault = true; + http.redirections.entrypoint = { + to = "websecure"; + scheme = "https"; + }; + }; + + websecure = { + address = ":${toString httpsPort}"; + asDefault = true; + http.tls.certResolver = "letsencrypt"; + }; + + metrics = { + address = ":${toString metricsPort}"; # Port for metrics }; }; - websecure = { - address = ":${toString httpsPort}"; - asDefault = true; - http.tls.certResolver = "letsencrypt"; + log = { + level = "INFO"; }; metrics = { - address = ":${toString metricsPort}"; # Port for metrics + prometheus = { + entryPoint = "metrics"; + addEntryPointsLabels = true; + addServicesLabels = true; + buckets = [ + 0.1 + 0.3 + 1.2 + 5.0 + ]; # Response time buckets + }; }; - }; - log = { - level = "INFO"; - }; - - metrics = { - prometheus = { - entryPoint = "metrics"; - addEntryPointsLabels = true; - addServicesLabels = true; - buckets = [ - 0.1 - 0.3 - 1.2 - 5.0 - ]; # Response time buckets + certificatesResolvers.letsencrypt.acme = { + email = letsEncryptEmail; + storage = "${config.services.traefik.dataDir}/acme.json"; + dnsChallenge = { + provider = "cloudflare"; + resolvers = [ + "1.1.1.1:53" + "8.8.8.8:53" + ]; + }; }; - }; - certificatesResolvers.letsencrypt.acme = { - email = letsEncryptEmail; - storage = "${config.services.traefik.dataDir}/acme.json"; - dnsChallenge = { - provider = "cloudflare"; - resolvers = [ - "1.1.1.1:53" - "8.8.8.8:53" - ]; + # Access the Traefik dashboard on :8080 + api = { + dashboard = true; + insecure = true; }; - }; - # Access the Traefik dashboard on :8080 - api = { - dashboard = true; - insecure = true; - }; - - experimental = { - plugins = traefikPlugins; + experimental = { + plugins = traefikPlugins; + }; }; }; - dynamicConfigOptions = { - http = { - serversTransports = { - internal-https = { - insecureSkipVerify = true; - }; - http1 = { - serverName = "localhost"; - disableHTTP2 = true; + dynamic = { + dir = "/run/traefik"; + files = { + "serversTransports".settings.http = { + serversTransports = { + internal-https = { + insecureSkipVerify = true; + }; + http1 = { + serverName = "localhost"; + disableHTTP2 = true; + }; }; }; - middlewares = { - authentik = { - forwardAuth = { - tls.insecureSkipVerify = true; - address = "${authUrl}/auth/traefik"; - trustForwardHeader = true; - authResponseHeaders = [ - "X-authentik-username" - "X-authentik-groups" - "X-authentik-email" - "X-authentik-name" - "X-authentik-uid" - "X-authentik-jwt" - "X-authentik-meta-jwks" - "X-authentik-meta-outpost" - "X-authentik-meta-provider" - "X-authentik-meta-app" - "X-authentik-meta-version" - ]; - }; - }; - crowdsec = { - plugin = { - bouncer = { - enabled = true; - crowdsecLapiKeyFile = config.sops.secrets."jallen-nas/traefik/crowdsec/lapi-key".path; - crowdsecLapiScheme = "http"; - crowdsecLapiHost = "localhost:8181"; - crowdsecLapiPath = "/"; - crowdsecLapiTLSInsecureVerify = false; - crowdsecCapiMachineIdFile = config.sops.secrets."jallen-nas/traefik/crowdsec/capi-machine-id".path; - crowdsecCapiPasswordFile = config.sops.secrets."jallen-nas/traefik/crowdsec/capi-password".path; - crowdsecCapiScenarios = [ ]; - }; - }; - }; - whitelist-geoblock = { - plugin = { - geoblock = { - silentStartUp = false; - allowLocalRequests = true; - logLocalRequests = false; - logAllowedRequests = false; - logApiRequests = false; - api = "https://get.geojs.io/v1/ip/country/{ip}"; - apiTimeoutMs = 500; - cacheSize = 25; - forceMonthlyUpdate = true; - allowUnknownCountries = false; - unknownCountryApiResponse = "nil"; - blackListMode = false; - countries = [ - "CA" - "US" + "middlewares-authentik".settings.http = { + middlewares = { + authentik = { + forwardAuth = { + tls.insecureSkipVerify = true; + address = "${authUrl}/auth/traefik"; + trustForwardHeader = true; + authResponseHeaders = [ + "X-authentik-username" + "X-authentik-groups" + "X-authentik-email" + "X-authentik-name" + "X-authentik-uid" + "X-authentik-jwt" + "X-authentik-meta-jwks" + "X-authentik-meta-outpost" + "X-authentik-meta-provider" + "X-authentik-meta-app" + "X-authentik-meta-version" ]; }; }; }; - internal-ipallowlist = { - ipAllowList = { - sourceRange = [ - "127.0.0.1/32" - "10.0.1.0/24" - ]; + }; + + "middlewares-crowdsec".settings.http = { + middlewares = { + crowdsec = { + plugin = { + bouncer = { + enabled = true; + crowdsecLapiKeyFile = config.sops.secrets."jallen-nas/traefik/crowdsec/lapi-key".path; + crowdsecLapiScheme = "http"; + crowdsecLapiHost = "localhost:8181"; + crowdsecLapiPath = "/"; + crowdsecLapiTLSInsecureVerify = false; + crowdsecCapiMachineIdFile = config.sops.secrets."jallen-nas/traefik/crowdsec/capi-machine-id".path; + crowdsecCapiPasswordFile = config.sops.secrets."jallen-nas/traefik/crowdsec/capi-password".path; + crowdsecCapiScenarios = [ ]; + }; + }; }; }; }; - services = { - auth.loadBalancer.servers = [ - { - url = authUrl; - } - ]; - cache.loadBalancer = { - servers = [ + "middlewares-geoblock".settings.http = { + middlewares = { + whitelist-geoblock = { + plugin = { + geoblock = { + silentStartUp = false; + allowLocalRequests = true; + logLocalRequests = false; + logAllowedRequests = false; + logApiRequests = false; + api = "https://get.geojs.io/v1/ip/country/{ip}"; + apiTimeoutMs = 500; + cacheSize = 25; + forceMonthlyUpdate = true; + allowUnknownCountries = false; + unknownCountryApiResponse = "nil"; + blackListMode = false; + countries = [ + "CA" + "US" + ]; + }; + }; + }; + }; + }; + + "middlewares-ipallowlist".settings.http = { + middlewares = { + internal-ipallowlist = { + ipAllowList = { + sourceRange = [ + "127.0.0.1/32" + "10.0.1.0/24" + ]; + }; + }; + }; + }; + + "services-auth".settings.http = { + services = { + auth.loadBalancer.servers = [ { - url = cacheUrl; + url = authUrl; } ]; - serversTransport = "http1"; }; - hass.loadBalancer.servers = [ - { - url = hassUrl; - } - ]; - nginx.loadBalancer.servers = [ - { - url = "http://localhost:8188"; - } - ]; - } - // reverseProxyServiceConfigs; + }; - routers = { - auth = { - entryPoints = [ "websecure" ]; - rule = "HostRegexp(`{subdomain:[a-z]+}.mjallen.dev`) && PathPrefix(`/outpost.goauthentik.io/`)"; - service = "auth"; - middlewares = [ - "crowdsec" - "whitelist-geoblock" + "services-cache".settings.http = { + services = { + cache.loadBalancer = { + servers = [ + { + url = cacheUrl; + } + ]; + serversTransport = "http1"; + }; + }; + }; + + "services-nginx".settings.http = { + services = { + nginx.loadBalancer.servers = [ + { + url = "http://localhost:8188"; + } ]; - priority = 15; - tls.certResolver = "letsencrypt"; }; + }; - matrix2 = { - entryPoints = [ "websecure" ]; - rule = "Host(`matrix.mjallen.dev`) && PathPrefix(`/.well-known/matrix/`)"; - service = "nginx"; - middlewares = [ - "crowdsec" - "whitelist-geoblock" + "services-generated".settings.http = reverseProxyServiceConfigs; + + "routers-auth".settings.http = { + routers = { + auth = { + entryPoints = [ "websecure" ]; + rule = "HostRegexp(`{subdomain:[a-z]+}.mjallen.dev`) && PathPrefix(`/outpost.goauthentik.io/`)"; + service = "auth"; + middlewares = [ + "crowdsec" + "whitelist-geoblock" + ]; + priority = 15; + tls.certResolver = "letsencrypt"; + }; + }; + }; + + "routers-matrix2".settings.http = { + routers = { + matrix2 = { + entryPoints = [ "websecure" ]; + rule = "Host(`matrix.mjallen.dev`) && PathPrefix(`/.well-known/matrix/`)"; + service = "nginx"; + middlewares = [ + "crowdsec" + "whitelist-geoblock" + ]; + priority = 1; + tls.certResolver = "letsencrypt"; + }; + }; + }; + + "routers-matrix3".settings.http = { + routers = { + matrix3 = { + entryPoints = [ "websecure" ]; + rule = "Host(`mjallen.dev`) && PathPrefix(`/.well-known/matrix/`)"; + service = "nginx"; + middlewares = [ + "crowdsec" + "whitelist-geoblock" + ]; + priority = 1; + tls.certResolver = "letsencrypt"; + }; + }; + }; + + "routers-cache".settings.http = { + routers = { + cache = { + entryPoints = [ "websecure" ]; + rule = "Host(`cache.${domain}`)"; + service = "cache"; + middlewares = [ ]; + priority = 10; + tls.certResolver = "letsencrypt"; + }; + }; + }; + + "home-assistant".settings.http = { + services = { + hass.loadBalancer.servers = [ + { + url = hassUrl; + } ]; - priority = 1; - tls.certResolver = "letsencrypt"; }; - - matrix3 = { - entryPoints = [ "websecure" ]; - rule = "Host(`mjallen.dev`) && PathPrefix(`/.well-known/matrix/`)"; - service = "nginx"; - middlewares = [ - "crowdsec" - "whitelist-geoblock" - ]; - priority = 1; - tls.certResolver = "letsencrypt"; + routers = { + hass = { + entryPoints = [ "websecure" ]; + rule = "Host(`hass.${domain}`)"; + service = "hass"; + middlewares = [ + "crowdsec" + "whitelist-geoblock" + # "authentik" + ]; + priority = 10; + tls.certResolver = "letsencrypt"; + }; }; - - cache = { - entryPoints = [ "websecure" ]; - rule = "Host(`cache.${domain}`)"; - service = "cache"; - middlewares = [ ]; - priority = 10; - tls.certResolver = "letsencrypt"; - }; - - hass = { - entryPoints = [ "websecure" ]; - rule = "Host(`hass.${domain}`)"; - service = "hass"; - middlewares = [ - "crowdsec" - "whitelist-geoblock" - # "authentik" - ]; - priority = 10; - tls.certResolver = "letsencrypt"; - }; - } - // reverseProxyRouterConfigs; + }; + "routers-generated".settings.http = reverseProxyRouterConfigs; }; }; }; diff --git a/modules/nixos/services/traefik/sops.nix b/modules/nixos/services/traefik/sops.nix new file mode 100644 index 0000000..8a00f98 --- /dev/null +++ b/modules/nixos/services/traefik/sops.nix @@ -0,0 +1,76 @@ +{ + config, + lib, + namespace, + ... +}: +with lib; +let + cfg = config.${namespace}.services.traefik; +in +{ + + config = mkIf cfg.enable { + sops = { + secrets = { + "jallen-nas/traefik/crowdsec/lapi-key" = { + sopsFile = (lib.snowfall.fs.get-file "secrets/nas-secrets.yaml"); + owner = config.users.users.traefik.name; + group = config.users.users.traefik.group; + restartUnits = [ "traefik.service" ]; + }; + + "jallen-nas/traefik/crowdsec/capi-machine-id" = { + sopsFile = (lib.snowfall.fs.get-file "secrets/nas-secrets.yaml"); + owner = config.users.users.traefik.name; + group = config.users.users.traefik.group; + restartUnits = [ "traefik.service" ]; + }; + + "jallen-nas/traefik/crowdsec/capi-password" = { + sopsFile = (lib.snowfall.fs.get-file "secrets/nas-secrets.yaml"); + owner = config.users.users.traefik.name; + group = config.users.users.traefik.group; + restartUnits = [ "traefik.service" ]; + }; + "jallen-nas/traefik/cloudflare-dns-api-token" = { + sopsFile = (lib.snowfall.fs.get-file "secrets/nas-secrets.yaml"); + owner = config.users.users.traefik.name; + group = config.users.users.traefik.group; + restartUnits = [ "traefik.service" ]; + }; + "jallen-nas/traefik/cloudflare-zone-api-token" = { + sopsFile = (lib.snowfall.fs.get-file "secrets/nas-secrets.yaml"); + owner = config.users.users.traefik.name; + group = config.users.users.traefik.group; + restartUnits = [ "traefik.service" ]; + }; + "jallen-nas/traefik/cloudflare-api-key" = { + sopsFile = (lib.snowfall.fs.get-file "secrets/nas-secrets.yaml"); + owner = config.users.users.traefik.name; + group = config.users.users.traefik.group; + restartUnits = [ "traefik.service" ]; + }; + "jallen-nas/traefik/cloudflare-email" = { + sopsFile = (lib.snowfall.fs.get-file "secrets/nas-secrets.yaml"); + owner = config.users.users.traefik.name; + group = config.users.users.traefik.group; + restartUnits = [ "traefik.service" ]; + }; + }; + templates = { + "traefik.env" = { + content = '' + CLOUDFLARE_DNS_API_TOKEN=${config.sops.placeholder."jallen-nas/traefik/cloudflare-dns-api-token"} + CLOUDFLARE_ZONE_API_TOKEN=${config.sops.placeholder."jallen-nas/traefik/cloudflare-zone-api-token"} + CLOUDFLARE_API_KEY=${config.sops.placeholder."jallen-nas/traefik/cloudflare-api-key"} + CLOUDFLARE_EMAIL=${config.sops.placeholder."jallen-nas/traefik/cloudflare-email"} + ''; + owner = config.users.users.traefik.name; + group = config.users.users.traefik.group; + restartUnits = [ "traefik.service" ]; + }; + }; + }; + }; +} \ No newline at end of file diff --git a/modules/nixos/services/unmanic/default.nix b/modules/nixos/services/unmanic/default.nix index 607e241..86a37dc 100644 --- a/modules/nixos/services/unmanic/default.nix +++ b/modules/nixos/services/unmanic/default.nix @@ -19,10 +19,7 @@ let autoStart = true; image = "josh5/unmanic"; devices = [ - "/dev/dri/renderD128:/dev/dri/renderD128" - "/dev/dri/card0:/dev/dri/card0" - "/dev/dri/renderD129:/dev/dri/renderD129" - "/dev/dri/card1:/dev/dri/card1" + "/dev/dri:/dev/dri" ]; volumes = [ "${cfg.configDir}/unmanic:/config" diff --git a/secrets/nas-secrets.yaml b/secrets/nas-secrets.yaml index a4a0444..ba089b9 100644 --- a/secrets/nas-secrets.yaml +++ b/secrets/nas-secrets.yaml @@ -1,248 +1,249 @@ jallen-nas: - admin_password: ENC[AES256_GCM,data:0XUblR800UyliA8JfYUZbncDRxiU6eoTaf3i80+OCwJ/31oBhSqj9OtgYeRg3IyURwik1Nk/609IuHjIhly3mgTjOD6Hpzxpag==,iv:0yO3z8ItHRQFeI9JOnFTKhKVHi5u9cMtpglFRlkvYLE=,tag:iUd79iWAJQ9iqP0qolSwfA==,type:str] - nas_pool: ENC[AES256_GCM,data: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,iv:ny8qQhSrfokW3iS0KXtCVYgtvj07c25jfEUCIExD7eI=,tag:QD8C37p3gUJr42NHiL7PHw==,type:str] - ups_password: ENC[AES256_GCM,data:tYuJ9nU3E2/Ko6Y=,iv:lQq+g68lKCp1rmPvS/84xGIXHxD9zY5zZrrjEJlY8Hs=,tag:p6McEr+sXGAQyMAz1Kaxfw==,type:str] - authentik-env: ENC[AES256_GCM,data:PhHiiDJuKx/LKbJR6wx0HknqAs+fnAilA2HsMHwl0N3CMQ0pa+qKEB9x0a16Jr0yC9F4OKD7k98Q4wHbQWuE8IORB9CaiWVQzwJEaFvQ1wdv0wtHC23Aq5ppUPG941xArpF40/64vLYYa8w5Q1wxQr6xeg4VZwpSahIRAa6tB4eMAgopl4QeXGMskaPrL7A9Eu6lXt5LQJkCEFRuyL1XX5W33/l0HYeovgevhqTcbRmOLiG8r4XOihQDUtVWIhW8X3iDlCsgNEgxJE2s+7UuqwetvHpLCQMEyPfITx6FMI6vw8+raLTwQC7fDWXyqjWIJ3/xds7DTcBjJZMj72S6tggX0QLDfnrtjIG0iVNmbRDE2Cv96VJVdV6B381B2XKYx1EThjgucxbmp2Gz4+dpGu3O+rNxlfd9VR7KDA1FH2ddPr8JMhRpeBYbYpxCfuKqgKgfBqvxdI7lV2/alsqLZ3RdzRxi3mCilrldnKEw9YzEJEh0UU2L9J2bP8GJWpyfQsSGnNjpGL3k877e7R0NrKle7ertp2NZKccrKCXyYDGbfERrfmtN2ebaWZXmtbj9Hf/PZBQyXa8onf85QeuY5574pvm8+TZRGorhuMyKi/19lOuEgrAayDM8lQZUDW/QWmU3qf8dO4LAbE7HpzJfv0nEgnKbqVUrV4wcgHYPWNSCFLfdW8eVISgIgZBNA/FD836fwBTCwB91jfWI8g9yrK0l+fvk7RL7Spz7XoK/YIELhojoS6LLr/1wgP2atekDaUBMKw==,iv:w6M8cm+5eCkGPJiD0NkBgZuIVjYPUd9d1yp95y/BwyQ=,tag:SgOpa23x395CefA9zvI5GA==,type:str] - traefik: - crowdsec: - lapi-key: ENC[AES256_GCM,data:tEEr+KtGPseweqWn7eyrZwZBl+pPqzQqr5cmlYZF2ugm9pF4sUwBdEy21A==,iv:x1h0Op29Ta15dPe1Tfm4c1Mlo85aqvyOgZ5bELRNTGE=,tag:y0R8DHc0ya96n6hLLhteYA==,type:str] - capi-machine-id: ENC[AES256_GCM,data:W6G/jr1qr3KQQmVtAApEZkaAfEmGbqapmcv93ENuprAVrSWAkndyKbtpqg3iYwZK,iv:PAhZq0GkdOEIlU/50hl7ewNHhC/a9S6Sb4vreRBo/ZU=,tag:6ELW9NKIzE4sRH4vR9G3JQ==,type:str] - capi-password: ENC[AES256_GCM,data:iH3rG5Y8vg4TbM8yPzqe0i2vrH73Md8Yj/vGfFp9IdqTmZqCruFS/s/7PpWOUQ9OnTnmLqA4LXOMr8eDA8hjFw==,iv:jlsajO+xKOAP8hlFmT+t0nYXBq/td7uath/u4gEb8+I=,tag:SysRfxuWKA3b493JOGYiRg==,type:str] - cloudflare-dns-api-token: ENC[AES256_GCM,data:ZHAP3KuCIh5LAH3FqCaUEoKNRkoRqrbY/NySsubzGCbZtO4aXYI2GA==,iv:IdGRIpfxxDhHQKaU4PeQI8ESIvzcNNgsqEFsyZ1ar6k=,tag:1u/bhR0CuI9rsn8gycYHzg==,type:str] - cloudflare-zone-api-token: ENC[AES256_GCM,data:N02jcaPLYVzOmo5omGvOKUw2MZg8/cVolRcw/pu+sFnV8IsrUFOjmA==,iv:NZ+OaNR5lmsXicYQ7QL9CBMhlm397VbqmIcmr6GGBWw=,tag:FOT0EzDDuJ/kKOArn8e/rA==,type:str] - cloudflare-api-key: ENC[AES256_GCM,data:SWCsa1YzUpl5aQmeVBzKjfkZdAfduX8pl5RKd+EP6pgyMCCc6Q==,iv:ccIzA1OzGyRnq8gxXAg4B3HHtKcvXhXKMWVuTs/PHLI=,tag:R9KrYDrAluTAyuv7DfYVWQ==,type:str] - cloudflare-email: ENC[AES256_GCM,data:WCe6JlTQnv2PXYcySZNbZ5Lv,iv:qc+o+GEqdRm3U5qBqvH23HOah3Sa63QzqZyDXWozcqo=,tag:v8YY3jCoVC8h12wHTFjkIg==,type:str] - crowdsec-capi: ENC[AES256_GCM,data:9T3e6CzJZOT1KAXlpG323oPmk9xsoVVWI/WYnhdmzyymj61LgNJKvA==,iv:NywJk/tkmIGR5jIgxpvheRBCrK64QytXAkr+40nn62M=,tag:XFeafjL/84r0fLa8UpjyjQ==,type:str] - collabora: ENC[AES256_GCM,data:tFbbm16DFMsxT0I1ogXTRwyTgkE=,iv:yzembXvJ9+DroplBUDiMPa/jn9pjpAI7f5oHSTaZedA=,tag:yprIBtaRIjaHW6nplLYYzQ==,type:str] - mariadb: - root_pass: ENC[AES256_GCM,data:AmZ3lU/GM9lMAjchF4kvjkIZlYX0KZV7ov0dxtnDmg==,iv:9JQuHWcb3/lCR3gw4PFtzMKxk85GXzFV35NguJydUkk=,tag:MEvmiYhAYa1LUGTN9wm/3w==,type:str] - db_pass: ENC[AES256_GCM,data:xjdxuUl14d0qQXIuYi+Zxx3mu2fqN5c3Zg0=,iv:AcrrY6BUi/Bcg/8FcDORmsDrhSEoN+kzdx8OLyAUS4I=,tag:pwwKbiK4HiaNRwp/k5/QrQ==,type:str] - redis_nextcloud: ENC[AES256_GCM,data:mllmOV98zpqLPhI=,iv:Vl52jKAfzy+aCqpGYUQ80Ye3sGDAR/3ULSStEjAi1hg=,tag:DwUT2cdQ/BA1TwdnXoElXA==,type:str] - nextcloud: - dbpassword: ENC[AES256_GCM,data:kvBa4tUglGHuLH0=,iv:IUWHIH6vx6QlXaKNyq2l0lZGZvudskCW9+jCZ2oENVs=,tag:2UC565EXzGxb2N4XO43ydw==,type:str] - adminpassword: ENC[AES256_GCM,data:UJ4LBpif5TIOJqY=,iv:28UgOD1LIoHOVBPTQ3MpofjdkBwY3ghLK2vIbTwZQaA=,tag:F/77ApazlfppzQG6UdTQdQ==,type:str] - smtp_settings: ENC[AES256_GCM,data:8KyWmx+e/DouS8OucMrd2AMFE9w1b4WKHr8RuJ8kMqSlL7MP5GLwW4WZhPCJto6kTzAsy4WPFb23oG6UbQg9DK7b2CiUoC5S5mcDxX3lnzX7clyrosDvIHqVlwjamtgfCuNJWcT+RB6a91T84HEDTnKMTsiJvLxpSEHehzL3ItndV9p4+JTs5tZFX+dOZgqVIMN9syQqFsSpI6fk8LNJh90rXXg4jkh7+EFjmBk3QoSOuI1z4JiRpiauVP23VwTtTqiL1Aw8NpDhX1bU0RL+DAWQIZd8o9k/oedziCfKuea73yq4Z8uDaZJ3BW5m1Z1QA44Yu08qvKzBiAAnEb3bQ83ltWI2mfygupjm3tfIVfQoMB8scivaN+5Nlkx3u8f9SAzxyuvqYxZx8TDsyWGEG6p2frHxX72qxu/xb+DYrXBpyDkVA6ng,iv:CqS+/0kL4JmPXRc05Zr2+CFksP1RhOvzIr732z6A1bw=,tag:ux0ja/g1Y40c21hslYnorA==,type:str] - gitea: - mail-key: ENC[AES256_GCM,data:kfurnrj8eNKGw+KZcijs4jhJgQ==,iv:mFNVcxVyOj5Se/SyLOcKh5ja/QJmL8wfejzSGOzq6yo=,tag:XBU3urrqarICO7niqBRNbA==,type:str] - metrics-key: ENC[AES256_GCM,data:qgISwC1fgApJhJo=,iv:BH3tPh8NE3ByYJjRuL+o8772o9qWeMUVrEcVwrIUkM4=,tag:vJxscFZFAQowXX12OSb6HQ==,type:str] - onlyoffice-key: ENC[AES256_GCM,data:9kWRGt8hHc4XmPU=,iv:Oql7Fa+Ap4F2BTEFeyUmPI4e0oZ6f7Up47rKe1XENRo=,tag:6FmuA07rlokGNfjta2i2kg==,type:str] - manyfold: - secretkeybase: ENC[AES256_GCM,data:nu7BpqodQ1F1Exsk7jfl7k+chONHJsVk/a7e,iv:BWUjAHDWUz3WHWFIj+TXWOzQPjmSw7cFW9YVrBshhNQ=,tag:zydtByGW8ZN0ixC8IoWuFw==,type:str] - immich: - db-password: ENC[AES256_GCM,data:VKXAsUngn97FDqNEEZFp2GPObNMILv8=,iv:PSIbO63irXl5cx8l6sOSKAKNSygV214vrq48bR35/gU=,tag:PuJV5R2rmYtX8YfRvMGK/A==,type:str] - open-webui2: ENC[AES256_GCM,data:pTd/xPCZxLy95U+6RDZhLwkveKVO0UwrriVgp7QvwS5hXfZq8OdEtmmj/wVxCcRmao6u1icjPa13r5AyNMkONtqIW37nG9vhlv5t2AmXDZo5g+fhE9i1zws+UcjanAKOKaFL/jWXO/BOOuMcmEgL9HaqZSvFtcyr0mNuMH0AH3U1D6FXXfAlm8Zxp2Dpfs9PdxY1MgMyeA44sAnAkRCkk76p7DBtBoAuQf5Qaqk61pqUlm/SLGYd6ycL3A9EvTWffYwoEpHH4ktHQmA4lA==,iv:cfkg10puhlq7WSNmonO57yfkT8m7yxnI17szfaSY1Is=,tag:FqvDXMcaxdcfUXwgkUNrGA==,type:str] - open-webui: ENC[AES256_GCM,data:Th2WQmGPCqd2lsSCvl0NhnHT2/dVoV5k1DM0IhrewEc=,iv:rNEYe/nZAz1Bex/Eb8z8T70z2CV4+nTpzjzTX7Nz0Uo=,tag:yh3ID15I1ZrBYjnCgeo44A==,type:str] - paperless: - secret: ENC[AES256_GCM,data:b/7MEdo3BQ0v8vaBnfNMamo5NKIA,iv:op2/RA6+HwmmVK2QVkfJUBQjPpvce6716U066YaUehM=,tag:66eEjU68GYZi5bBXtEojWg==,type:str] - authentik-client-id: ENC[AES256_GCM,data:b8XMIBa71HuT22sd/CRSctq7dZwna85WcPYAJRPZLSWWpZENMx03bw==,iv:4DQjjF4TiL3xQltVC+GyzWjoCXJr/w8DLRZxf/636Dk=,tag:FUAzJg1Jj27p/C3RwgOrGA==,type:str] - authentik-client-secret: ENC[AES256_GCM,data:IroyLoiv8TT7+bG43bnThsz+b4vAdKc3+uLQWbtiag9+NAIMH/yDRdcyoag+PZIF3BjUJHClbnNHFZmSOlT+rymv9q9Ja+WDdSHD6jc4KAtPakshh+WfwSzdMhegbV3EWbxNcRb02eCZifnpYFH8aUqHDpbeU9K7lx5XBMe/bNA=,iv:08rzurhosfME0FtTEOdcSxbiq3dq9sc6Bm+OXvVyn8M=,tag:RnY57cWBr+jBqlVUSYaP3Q==,type:str] - wireguard: - private: ENC[AES256_GCM,data:xcv4eH8WggS/05MkcL96MpJVqwsFp7AzFoYVoQmOhNC32oy+g3vEibmYCNc=,iv:LWBA3UKqEKs7NISVWxAT9zZ2OMM/1Em+fchZKlrMLIw=,tag:pZkNHc7CGV10X2pfT16djA==,type:str] - public: ENC[AES256_GCM,data:HP/vP2bVp26cGyP1rJuXSX9BnUeauOVx1c9y48FakuQ+lMr8jymYGFm0vUA=,iv:h/FuDPaTQfGRGqA1H0+kz/kQyJ+2eIWoi7zObaIJPjE=,tag:zrjbq7S6DEbE9O+JAZr/4Q==,type:str] - free-games: - eg-email: ENC[AES256_GCM,data:pv3jGc/aOdc4hvbP0IqfWIFoojRaOZw=,iv:LwBpIVhtSegL/YbkKfcHSVcu3lW0F/01DRkMMbvOCQk=,tag:ecZdRFeioctVrBWTHnLwmw==,type:str] - eg-pass: ENC[AES256_GCM,data:JOd81wrPKpPH+qpZxIO9dVw4qzw=,iv:CNP/GALkZUoFYIQnerCNg7O8WqxMVC6KBwuxUa4KZyM=,tag:KfRNc3qOR92J/biloxYtMg==,type:str] - eg-otp: ENC[AES256_GCM,data:DTa1gbSOvBwoWBU2PP7DXOC4XzkAd9NCPZWaFle+xR3mPvsm/hkjBqL6ElO0KthhCuX5vA==,iv:Rfb2OzXL7J6pJwkX4H6c7NujYhBgTT28AlQFJN89u/4=,tag:7QxB5repYKfNiBZW72OsqQ==,type:str] - pg-email: ENC[AES256_GCM,data:RkZCkaw85bxTx3GWSSVJduFa,iv:HNV0SzhDnfFMNbWHWIAhA2U46xNYEgbH4HkNdME65AI=,tag:NYoPdQc0EqO4Ebq5/dOqxQ==,type:str] - pg-pass: ENC[AES256_GCM,data:YI05qDIsdvbXvHk=,iv:WTovWiBZxeZButRzqHKM+kFaLQ/73ZeJhsgiDX5zzAI=,tag:jUdhMk+w2H/iFmp/MjMnbw==,type:str] - gog-email: ENC[AES256_GCM,data:VMb/oJxLey5TZvBhRZFlwJt4yvXUFEs=,iv:uV/MFBR07ZbhtCStnsVEf1HtXTBK6/AVH//IyEtdH34=,tag:+7RzaXYx2WS8BGJJhuXlqg==,type:str] - gog-pass: ENC[AES256_GCM,data:3jNo/Hwe+F0UsLA=,iv:XSqyMn2GHdCwRfBfWdICcYAANKNsUDlTKfvtu9BiIxI=,tag:/VtO1syI4ybJxJa8xEgTHA==,type:str] - nix-serve: - cache-priv-key-pem: ENC[AES256_GCM,data:5loCy3Xc2U0C/WflfTbnptoHkUCRU9iuSd+2H1XQDk8jkSK6/09/p0b6NlP6tdNiEPfSazRr9eWe7Tb5l+Hs4O5HGQrZKUKDak7L7+tgl0ncDo7ngm4LD2WHZYS6WrrgYfuToB2KbKmoHOdG,iv:q2F9gkOwKNpYt8+r0MJk7XqTg/aFWIThpC06dHxcmEY=,tag:ls4N9PXshXgUZ3VxBvI6WA==,type:str] - cache-pub-key-pem: ENC[AES256_GCM,data:b67q/o01xnsFet4hpOwnbRK2jb7/+KdkRexLIZxOC3er7ue5tTfBTlelombAUv16377hSWFGW4kDqBC4zUKIJw==,iv:2uYKZ7sWEgFMtSjCxD+LraZUiHt3sFyLHugQeHGpsCw=,tag:T1eRke3306cwSYiEeieb4w==,type:str] - system-ed25519-pub: ENC[AES256_GCM,data:likQGiGyNnUQZXIMi61ax3nWufRT90iXiaMQ3Yo7TWKdvjQlwyEIjYImImEW+SquIPMYSABpt0ZzX4dj+yHa0rFKToWObQmRq61q4gZ7I4irj2mimiEFrzmrNxwZplHS,iv:LcjzMno+g298jzbskR9Pi5RPjhv3o8mSFxDGlHO7MVk=,tag:NohNVOsd+Pm7p43rEERUFQ==,type:str] - system-ed25519-priv: ENC[AES256_GCM,data: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,iv:9CU3QJORv0CD1u9nnFDbKo9DitjQvWGUVjtLD9TkcQw=,tag:zJLPWaKrSNPJtd/PFvmf9A==,type:str] - system-rsa-pub: ENC[AES256_GCM,data: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,iv:3ziWTbKw4C7noiQvrsx1+/rA5me/zZLMImR0Emjc6d8=,tag:3ncMX9pUOSB5VjdbO8HMgQ==,type:str] - system-rsa-priv: ENC[AES256_GCM,data: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,iv:BnghwsMVzoXpHXJcmii1vQykVQYzqRlEbDrC1ofdBfI=,tag:6CQYbV17YcIjBmaOrO6/NQ==,type:str] - attic-key: ENC[AES256_GCM,data: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,iv:/Qwb4B4uS0aimH3WaVPh4D0iRhQneDZKiSes2eXR6Ws=,tag:WH7C6VGckzqSycEXfYLqkA==,type:str] - ntfy: - auth-users: ENC[AES256_GCM,data:5k2a8GxQ76tGFv0kSlnS2Cr3te0pkKjLlswtnK7m3JOuBMN4hFxOuleZJgy/gbcYvxtKgs5zx6l1pVJVUBnaSZxzANK/LWjbYPaM8VOkzTFxCpLWjhCOlLn0gao=,iv:7BrNN929jGkkquMVnRx1kjnDNg1F47MdCFkYK8fCPL0=,tag:lpMUK9rLmHUYOh7LSpXsVA==,type:str] - matrix: - client-id: ENC[AES256_GCM,data:mMpc+BsS9YYCXRrTNaCQcMMVdxw98uQdvywauYGjVV+ASalZA3PbBA==,iv:5Qzgny+6HkKFAYLckkVYsHVlhp0GuI96PPMjVx6RRZI=,tag:5LlLg3nnyHy9ak2VT1+hMQ==,type:str] - client-secret: ENC[AES256_GCM,data:mH83GAgAziN0CMy/GuSGCTrm0wyopzvrxw1xkA7aBDSdP7N0ZYkfJ5et7daB+5jew+bbVA/Gy8aO1U2/rJ4FhRr5C0XhayHs1fT1sZBel904OHboTGRpy+eg4H+RSaA6WYWk5HRKH2ZcAfMa1jOqnbqol3+P96KpIPiMotDGL/c=,iv:mg8XbHu4ZkYICDjK2Q88SXt1Gl9IdbehFZyKES8OU50=,tag:UBnysN2qgIg53GRzbog7+A==,type:str] - glance: - arr-username: ENC[AES256_GCM,data:PlLrcaYLmvv5,iv:ZdBAkR93TLh0FMYhqBhxw8hZI5a/UeS3fpWkORH2e4k=,tag:hpuEgLnF5hCtt0XJTC/gAg==,type:str] - arr-password: ENC[AES256_GCM,data:K8J3fPGWc3SWeKo=,iv:pkr+m92OlAszLXmGn34tEtaEvvBV+ohObj2uRDqKIYc=,tag:wBxe9gijHie6sq0brtpMRQ==,type:str] - govee2mqtt: - govee-email: ENC[AES256_GCM,data:wpNBUpXM3H0IWGUYbJ6OYk09,iv:RvlNQEjTmDd1nkvJ+IJc3zuO0v+b39xM2yVUbJ7Dm38=,tag:4iZ+y2u/N3jYtFgXOqPCcA==,type:str] - govee-password: ENC[AES256_GCM,data:04bJqeUPMcnUbvY=,iv:V976DOOSHZtcQXqdR+iDt5R9wExX7sxcjJqxSclDvu0=,tag:ApcF6Nk39ye0drG+0ZgMyg==,type:str] - govee-api: ENC[AES256_GCM,data:Ypg0SPDQoS2/PIyPzT9z9fNbZtwC+xW444rVAEmVLQZj4kv+,iv:L7CwI7vkE+GZoK/jc4jVP3W2RnI/5pi+HJ1ECv6EyT8=,tag:PXwzRcBLJ2x8QXOtcbWHSQ==,type:str] - sabnzbd: - password: ENC[AES256_GCM,data:5M2XFuXckd8tR+0=,iv:PbWl0jcZbEon1Ya+UjihoPQHUmzPzLQiM8C6WR3K5qc=,tag:DM5doxx38cTAEFZGPwLZ4A==,type:str] - api-key: ENC[AES256_GCM,data:qVkd9hOlB0/pKX3E2u2xPi364+VkeUaOWDKmUaWvloc=,iv:0AqgJqvNYYl69SlkHYwAvqeRiSpTOWgoPhS/5VgFdRY=,tag:40FYFK9pk4iH7hBMCkHR0Q==,type:str] - nzb-key: ENC[AES256_GCM,data:XPY9zpLJmez2K6RB/rhvnW7A1ppJ5/2N69qNbatPPQU=,iv:pnWzfKe75OlbK9fCA+mCYGtjN7hWDL55P5dt7PYfiGY=,tag:vzX3cdzh83EnxNzWIn7ziQ==,type:str] - server: - username: ENC[AES256_GCM,data:pD7AWpTcwU1G5fHo,iv:y0Ys8sjgIH/bwsLLKzyfPowgrlKAaGBArdXlPqGT+6g=,tag:AKbdJ9Br9mpla/hr3rOF3A==,type:str] - password: ENC[AES256_GCM,data:HGh6pPDCV0w=,iv:lFPjGjFALlX6U/4MWLCJ282q5OReNdklmAR+qFmSCJs=,tag:AYrsjhuST/eSpgmRpv+dfQ==,type:str] + admin_password: ENC[AES256_GCM,data:0XUblR800UyliA8JfYUZbncDRxiU6eoTaf3i80+OCwJ/31oBhSqj9OtgYeRg3IyURwik1Nk/609IuHjIhly3mgTjOD6Hpzxpag==,iv:0yO3z8ItHRQFeI9JOnFTKhKVHi5u9cMtpglFRlkvYLE=,tag:iUd79iWAJQ9iqP0qolSwfA==,type:str] + nas_pool: ENC[AES256_GCM,data:LBiUC/5qMFUnWUWYZgRPrGopdPd6oWB0+xe1S+GiOMtSIsBH34ZoE8U/v1HmxR17mt0x169xq7iXAQZTCZ/Vd8KGmecTK7hC+H6kmSUcwsuoPiVyoSPdet3Zb716eXGWmnSD6QlReUpq6xiCqOwKUkgNgRtkdc92PAEcmbrw1tfooxTesxB3n9pSCXAkwsPxJWl7nLrCZIf6wOZci/TiwFJf534/YPKIz8q5JxX+E+VeQ4NNRfZxn4EqlMDgmNcEcuHdflqTNAlDmREqhN0XNREUaFveQ01T5sFb6XHorEHpUlKIzDpMV4LKjZQMZax4T+6nbGpUa5kf/Gr3xeOpMpTGNir1bM8oPQGP/Iz9u4AjGP56+JYcqUBcxG1wwNFIqBrrC+Bf7vdjGxgMClwW5AbMtGXwE9y+dSM9MMkj8kiaK1zWZfyIqRBheXtXUhPIjJSR8fmnVtKW358E7ynC9R14AsA3qxpxEc4+VmF7cJEzjStP//FRSuUFRlvgIcGBfncvt0b+ecEk8WostYAMHhqpyHtW2hG5orv6qFupLz0VCBbFLqlIEMG1d/EfjulGqWN4fGIhlAGpssvuo8r/9bOz4efTwODnKJqX5YfOPhFDAJZzj7pgFgAjf8/xAgelAU1yR3nlj2PR9itEAApY0L0FvnC4fEMBqlpINM8gGeNcfTraIYo7bqVhOT5sVOXmru+nRoyG1I01rJ1lQpis5Kqt+HWGa43fi81dtTm7kj/4bOPSPrJimIOD37O3GRlbiiGIhy/Ta/iVqzRsYeUZOyIQT+IjZ4pX5tgJ/AxASVzdRd9GluexPdUGVDb9Kjf7mo7aYsXyWDBP7ZoXDQGHndrlTlrQreDLgcwCXo1hHEn9YkIUfYpBd5Th7LJrsaNWXH838S+9sDqSCGdVPVcH0HC8x5T5Uo3Jb833uaQjtaXsSaAgaRkcEtAHz4LO5kKii3AgP0vA,iv:ny8qQhSrfokW3iS0KXtCVYgtvj07c25jfEUCIExD7eI=,tag:QD8C37p3gUJr42NHiL7PHw==,type:str] + ups_password: ENC[AES256_GCM,data:tYuJ9nU3E2/Ko6Y=,iv:lQq+g68lKCp1rmPvS/84xGIXHxD9zY5zZrrjEJlY8Hs=,tag:p6McEr+sXGAQyMAz1Kaxfw==,type:str] + authentik-env: ENC[AES256_GCM,data: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,iv:w6M8cm+5eCkGPJiD0NkBgZuIVjYPUd9d1yp95y/BwyQ=,tag:SgOpa23x395CefA9zvI5GA==,type:str] + traefik: + crowdsec: + lapi-key: ENC[AES256_GCM,data:tEEr+KtGPseweqWn7eyrZwZBl+pPqzQqr5cmlYZF2ugm9pF4sUwBdEy21A==,iv:x1h0Op29Ta15dPe1Tfm4c1Mlo85aqvyOgZ5bELRNTGE=,tag:y0R8DHc0ya96n6hLLhteYA==,type:str] + capi-machine-id: ENC[AES256_GCM,data:W6G/jr1qr3KQQmVtAApEZkaAfEmGbqapmcv93ENuprAVrSWAkndyKbtpqg3iYwZK,iv:PAhZq0GkdOEIlU/50hl7ewNHhC/a9S6Sb4vreRBo/ZU=,tag:6ELW9NKIzE4sRH4vR9G3JQ==,type:str] + capi-password: ENC[AES256_GCM,data:iH3rG5Y8vg4TbM8yPzqe0i2vrH73Md8Yj/vGfFp9IdqTmZqCruFS/s/7PpWOUQ9OnTnmLqA4LXOMr8eDA8hjFw==,iv:jlsajO+xKOAP8hlFmT+t0nYXBq/td7uath/u4gEb8+I=,tag:SysRfxuWKA3b493JOGYiRg==,type:str] + cloudflare-dns-api-token: ENC[AES256_GCM,data:ZHAP3KuCIh5LAH3FqCaUEoKNRkoRqrbY/NySsubzGCbZtO4aXYI2GA==,iv:IdGRIpfxxDhHQKaU4PeQI8ESIvzcNNgsqEFsyZ1ar6k=,tag:1u/bhR0CuI9rsn8gycYHzg==,type:str] + cloudflare-zone-api-token: ENC[AES256_GCM,data:N02jcaPLYVzOmo5omGvOKUw2MZg8/cVolRcw/pu+sFnV8IsrUFOjmA==,iv:NZ+OaNR5lmsXicYQ7QL9CBMhlm397VbqmIcmr6GGBWw=,tag:FOT0EzDDuJ/kKOArn8e/rA==,type:str] + cloudflare-api-key: ENC[AES256_GCM,data:SWCsa1YzUpl5aQmeVBzKjfkZdAfduX8pl5RKd+EP6pgyMCCc6Q==,iv:ccIzA1OzGyRnq8gxXAg4B3HHtKcvXhXKMWVuTs/PHLI=,tag:R9KrYDrAluTAyuv7DfYVWQ==,type:str] + cloudflare-email: ENC[AES256_GCM,data:WCe6JlTQnv2PXYcySZNbZ5Lv,iv:qc+o+GEqdRm3U5qBqvH23HOah3Sa63QzqZyDXWozcqo=,tag:v8YY3jCoVC8h12wHTFjkIg==,type:str] + crowdsec-capi: ENC[AES256_GCM,data:9T3e6CzJZOT1KAXlpG323oPmk9xsoVVWI/WYnhdmzyymj61LgNJKvA==,iv:NywJk/tkmIGR5jIgxpvheRBCrK64QytXAkr+40nn62M=,tag:XFeafjL/84r0fLa8UpjyjQ==,type:str] + crowdsec-firewall-bouncer-api-key: ENC[AES256_GCM,data:aGWazfVmD/j6PEK+UD7P0KQ+ArfL/lNx5EiHg/v6hUnLM3GASy2624/6eg==,iv:TIczLd7Tzxriz5ADOmrp6YYP/IU2cs5GMabfMhMTTl8=,tag:X9MB3nIg70OLM8S8a6eBuQ==,type:str] + collabora: ENC[AES256_GCM,data:tFbbm16DFMsxT0I1ogXTRwyTgkE=,iv:yzembXvJ9+DroplBUDiMPa/jn9pjpAI7f5oHSTaZedA=,tag:yprIBtaRIjaHW6nplLYYzQ==,type:str] + mariadb: + root_pass: ENC[AES256_GCM,data:AmZ3lU/GM9lMAjchF4kvjkIZlYX0KZV7ov0dxtnDmg==,iv:9JQuHWcb3/lCR3gw4PFtzMKxk85GXzFV35NguJydUkk=,tag:MEvmiYhAYa1LUGTN9wm/3w==,type:str] + db_pass: ENC[AES256_GCM,data:xjdxuUl14d0qQXIuYi+Zxx3mu2fqN5c3Zg0=,iv:AcrrY6BUi/Bcg/8FcDORmsDrhSEoN+kzdx8OLyAUS4I=,tag:pwwKbiK4HiaNRwp/k5/QrQ==,type:str] + redis_nextcloud: ENC[AES256_GCM,data:mllmOV98zpqLPhI=,iv:Vl52jKAfzy+aCqpGYUQ80Ye3sGDAR/3ULSStEjAi1hg=,tag:DwUT2cdQ/BA1TwdnXoElXA==,type:str] + nextcloud: + dbpassword: ENC[AES256_GCM,data:kvBa4tUglGHuLH0=,iv:IUWHIH6vx6QlXaKNyq2l0lZGZvudskCW9+jCZ2oENVs=,tag:2UC565EXzGxb2N4XO43ydw==,type:str] + adminpassword: ENC[AES256_GCM,data:UJ4LBpif5TIOJqY=,iv:28UgOD1LIoHOVBPTQ3MpofjdkBwY3ghLK2vIbTwZQaA=,tag:F/77ApazlfppzQG6UdTQdQ==,type:str] + smtp_settings: ENC[AES256_GCM,data:8KyWmx+e/DouS8OucMrd2AMFE9w1b4WKHr8RuJ8kMqSlL7MP5GLwW4WZhPCJto6kTzAsy4WPFb23oG6UbQg9DK7b2CiUoC5S5mcDxX3lnzX7clyrosDvIHqVlwjamtgfCuNJWcT+RB6a91T84HEDTnKMTsiJvLxpSEHehzL3ItndV9p4+JTs5tZFX+dOZgqVIMN9syQqFsSpI6fk8LNJh90rXXg4jkh7+EFjmBk3QoSOuI1z4JiRpiauVP23VwTtTqiL1Aw8NpDhX1bU0RL+DAWQIZd8o9k/oedziCfKuea73yq4Z8uDaZJ3BW5m1Z1QA44Yu08qvKzBiAAnEb3bQ83ltWI2mfygupjm3tfIVfQoMB8scivaN+5Nlkx3u8f9SAzxyuvqYxZx8TDsyWGEG6p2frHxX72qxu/xb+DYrXBpyDkVA6ng,iv:CqS+/0kL4JmPXRc05Zr2+CFksP1RhOvzIr732z6A1bw=,tag:ux0ja/g1Y40c21hslYnorA==,type:str] + gitea: + mail-key: ENC[AES256_GCM,data:kfurnrj8eNKGw+KZcijs4jhJgQ==,iv:mFNVcxVyOj5Se/SyLOcKh5ja/QJmL8wfejzSGOzq6yo=,tag:XBU3urrqarICO7niqBRNbA==,type:str] + metrics-key: ENC[AES256_GCM,data:qgISwC1fgApJhJo=,iv:BH3tPh8NE3ByYJjRuL+o8772o9qWeMUVrEcVwrIUkM4=,tag:vJxscFZFAQowXX12OSb6HQ==,type:str] + onlyoffice-key: ENC[AES256_GCM,data:9kWRGt8hHc4XmPU=,iv:Oql7Fa+Ap4F2BTEFeyUmPI4e0oZ6f7Up47rKe1XENRo=,tag:6FmuA07rlokGNfjta2i2kg==,type:str] + manyfold: + secretkeybase: ENC[AES256_GCM,data:nu7BpqodQ1F1Exsk7jfl7k+chONHJsVk/a7e,iv:BWUjAHDWUz3WHWFIj+TXWOzQPjmSw7cFW9YVrBshhNQ=,tag:zydtByGW8ZN0ixC8IoWuFw==,type:str] + immich: + db-password: ENC[AES256_GCM,data:VKXAsUngn97FDqNEEZFp2GPObNMILv8=,iv:PSIbO63irXl5cx8l6sOSKAKNSygV214vrq48bR35/gU=,tag:PuJV5R2rmYtX8YfRvMGK/A==,type:str] + open-webui2: ENC[AES256_GCM,data:pTd/xPCZxLy95U+6RDZhLwkveKVO0UwrriVgp7QvwS5hXfZq8OdEtmmj/wVxCcRmao6u1icjPa13r5AyNMkONtqIW37nG9vhlv5t2AmXDZo5g+fhE9i1zws+UcjanAKOKaFL/jWXO/BOOuMcmEgL9HaqZSvFtcyr0mNuMH0AH3U1D6FXXfAlm8Zxp2Dpfs9PdxY1MgMyeA44sAnAkRCkk76p7DBtBoAuQf5Qaqk61pqUlm/SLGYd6ycL3A9EvTWffYwoEpHH4ktHQmA4lA==,iv:cfkg10puhlq7WSNmonO57yfkT8m7yxnI17szfaSY1Is=,tag:FqvDXMcaxdcfUXwgkUNrGA==,type:str] + open-webui: ENC[AES256_GCM,data:Th2WQmGPCqd2lsSCvl0NhnHT2/dVoV5k1DM0IhrewEc=,iv:rNEYe/nZAz1Bex/Eb8z8T70z2CV4+nTpzjzTX7Nz0Uo=,tag:yh3ID15I1ZrBYjnCgeo44A==,type:str] + paperless: + secret: ENC[AES256_GCM,data:b/7MEdo3BQ0v8vaBnfNMamo5NKIA,iv:op2/RA6+HwmmVK2QVkfJUBQjPpvce6716U066YaUehM=,tag:66eEjU68GYZi5bBXtEojWg==,type:str] + authentik-client-id: ENC[AES256_GCM,data:b8XMIBa71HuT22sd/CRSctq7dZwna85WcPYAJRPZLSWWpZENMx03bw==,iv:4DQjjF4TiL3xQltVC+GyzWjoCXJr/w8DLRZxf/636Dk=,tag:FUAzJg1Jj27p/C3RwgOrGA==,type:str] + authentik-client-secret: ENC[AES256_GCM,data:IroyLoiv8TT7+bG43bnThsz+b4vAdKc3+uLQWbtiag9+NAIMH/yDRdcyoag+PZIF3BjUJHClbnNHFZmSOlT+rymv9q9Ja+WDdSHD6jc4KAtPakshh+WfwSzdMhegbV3EWbxNcRb02eCZifnpYFH8aUqHDpbeU9K7lx5XBMe/bNA=,iv:08rzurhosfME0FtTEOdcSxbiq3dq9sc6Bm+OXvVyn8M=,tag:RnY57cWBr+jBqlVUSYaP3Q==,type:str] + wireguard: + private: ENC[AES256_GCM,data:xcv4eH8WggS/05MkcL96MpJVqwsFp7AzFoYVoQmOhNC32oy+g3vEibmYCNc=,iv:LWBA3UKqEKs7NISVWxAT9zZ2OMM/1Em+fchZKlrMLIw=,tag:pZkNHc7CGV10X2pfT16djA==,type:str] + public: ENC[AES256_GCM,data:HP/vP2bVp26cGyP1rJuXSX9BnUeauOVx1c9y48FakuQ+lMr8jymYGFm0vUA=,iv:h/FuDPaTQfGRGqA1H0+kz/kQyJ+2eIWoi7zObaIJPjE=,tag:zrjbq7S6DEbE9O+JAZr/4Q==,type:str] + free-games: + eg-email: ENC[AES256_GCM,data:pv3jGc/aOdc4hvbP0IqfWIFoojRaOZw=,iv:LwBpIVhtSegL/YbkKfcHSVcu3lW0F/01DRkMMbvOCQk=,tag:ecZdRFeioctVrBWTHnLwmw==,type:str] + eg-pass: ENC[AES256_GCM,data:JOd81wrPKpPH+qpZxIO9dVw4qzw=,iv:CNP/GALkZUoFYIQnerCNg7O8WqxMVC6KBwuxUa4KZyM=,tag:KfRNc3qOR92J/biloxYtMg==,type:str] + eg-otp: ENC[AES256_GCM,data:DTa1gbSOvBwoWBU2PP7DXOC4XzkAd9NCPZWaFle+xR3mPvsm/hkjBqL6ElO0KthhCuX5vA==,iv:Rfb2OzXL7J6pJwkX4H6c7NujYhBgTT28AlQFJN89u/4=,tag:7QxB5repYKfNiBZW72OsqQ==,type:str] + pg-email: ENC[AES256_GCM,data:RkZCkaw85bxTx3GWSSVJduFa,iv:HNV0SzhDnfFMNbWHWIAhA2U46xNYEgbH4HkNdME65AI=,tag:NYoPdQc0EqO4Ebq5/dOqxQ==,type:str] + pg-pass: ENC[AES256_GCM,data:YI05qDIsdvbXvHk=,iv:WTovWiBZxeZButRzqHKM+kFaLQ/73ZeJhsgiDX5zzAI=,tag:jUdhMk+w2H/iFmp/MjMnbw==,type:str] + gog-email: ENC[AES256_GCM,data:VMb/oJxLey5TZvBhRZFlwJt4yvXUFEs=,iv:uV/MFBR07ZbhtCStnsVEf1HtXTBK6/AVH//IyEtdH34=,tag:+7RzaXYx2WS8BGJJhuXlqg==,type:str] + gog-pass: ENC[AES256_GCM,data:3jNo/Hwe+F0UsLA=,iv:XSqyMn2GHdCwRfBfWdICcYAANKNsUDlTKfvtu9BiIxI=,tag:/VtO1syI4ybJxJa8xEgTHA==,type:str] + nix-serve: + cache-priv-key-pem: ENC[AES256_GCM,data:5loCy3Xc2U0C/WflfTbnptoHkUCRU9iuSd+2H1XQDk8jkSK6/09/p0b6NlP6tdNiEPfSazRr9eWe7Tb5l+Hs4O5HGQrZKUKDak7L7+tgl0ncDo7ngm4LD2WHZYS6WrrgYfuToB2KbKmoHOdG,iv:q2F9gkOwKNpYt8+r0MJk7XqTg/aFWIThpC06dHxcmEY=,tag:ls4N9PXshXgUZ3VxBvI6WA==,type:str] + cache-pub-key-pem: ENC[AES256_GCM,data:b67q/o01xnsFet4hpOwnbRK2jb7/+KdkRexLIZxOC3er7ue5tTfBTlelombAUv16377hSWFGW4kDqBC4zUKIJw==,iv:2uYKZ7sWEgFMtSjCxD+LraZUiHt3sFyLHugQeHGpsCw=,tag:T1eRke3306cwSYiEeieb4w==,type:str] + system-ed25519-pub: ENC[AES256_GCM,data:likQGiGyNnUQZXIMi61ax3nWufRT90iXiaMQ3Yo7TWKdvjQlwyEIjYImImEW+SquIPMYSABpt0ZzX4dj+yHa0rFKToWObQmRq61q4gZ7I4irj2mimiEFrzmrNxwZplHS,iv:LcjzMno+g298jzbskR9Pi5RPjhv3o8mSFxDGlHO7MVk=,tag:NohNVOsd+Pm7p43rEERUFQ==,type:str] + system-ed25519-priv: ENC[AES256_GCM,data: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,iv:9CU3QJORv0CD1u9nnFDbKo9DitjQvWGUVjtLD9TkcQw=,tag:zJLPWaKrSNPJtd/PFvmf9A==,type:str] + system-rsa-pub: ENC[AES256_GCM,data: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,iv:3ziWTbKw4C7noiQvrsx1+/rA5me/zZLMImR0Emjc6d8=,tag:3ncMX9pUOSB5VjdbO8HMgQ==,type:str] + system-rsa-priv: ENC[AES256_GCM,data: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,iv:BnghwsMVzoXpHXJcmii1vQykVQYzqRlEbDrC1ofdBfI=,tag:6CQYbV17YcIjBmaOrO6/NQ==,type:str] + attic-key: ENC[AES256_GCM,data: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,iv:/Qwb4B4uS0aimH3WaVPh4D0iRhQneDZKiSes2eXR6Ws=,tag:WH7C6VGckzqSycEXfYLqkA==,type:str] + ntfy: + auth-users: ENC[AES256_GCM,data:5k2a8GxQ76tGFv0kSlnS2Cr3te0pkKjLlswtnK7m3JOuBMN4hFxOuleZJgy/gbcYvxtKgs5zx6l1pVJVUBnaSZxzANK/LWjbYPaM8VOkzTFxCpLWjhCOlLn0gao=,iv:7BrNN929jGkkquMVnRx1kjnDNg1F47MdCFkYK8fCPL0=,tag:lpMUK9rLmHUYOh7LSpXsVA==,type:str] + matrix: + client-id: ENC[AES256_GCM,data:mMpc+BsS9YYCXRrTNaCQcMMVdxw98uQdvywauYGjVV+ASalZA3PbBA==,iv:5Qzgny+6HkKFAYLckkVYsHVlhp0GuI96PPMjVx6RRZI=,tag:5LlLg3nnyHy9ak2VT1+hMQ==,type:str] + client-secret: ENC[AES256_GCM,data:mH83GAgAziN0CMy/GuSGCTrm0wyopzvrxw1xkA7aBDSdP7N0ZYkfJ5et7daB+5jew+bbVA/Gy8aO1U2/rJ4FhRr5C0XhayHs1fT1sZBel904OHboTGRpy+eg4H+RSaA6WYWk5HRKH2ZcAfMa1jOqnbqol3+P96KpIPiMotDGL/c=,iv:mg8XbHu4ZkYICDjK2Q88SXt1Gl9IdbehFZyKES8OU50=,tag:UBnysN2qgIg53GRzbog7+A==,type:str] + glance: + arr-username: ENC[AES256_GCM,data:PlLrcaYLmvv5,iv:ZdBAkR93TLh0FMYhqBhxw8hZI5a/UeS3fpWkORH2e4k=,tag:hpuEgLnF5hCtt0XJTC/gAg==,type:str] + arr-password: ENC[AES256_GCM,data:K8J3fPGWc3SWeKo=,iv:pkr+m92OlAszLXmGn34tEtaEvvBV+ohObj2uRDqKIYc=,tag:wBxe9gijHie6sq0brtpMRQ==,type:str] + govee2mqtt: + govee-email: ENC[AES256_GCM,data:wpNBUpXM3H0IWGUYbJ6OYk09,iv:RvlNQEjTmDd1nkvJ+IJc3zuO0v+b39xM2yVUbJ7Dm38=,tag:4iZ+y2u/N3jYtFgXOqPCcA==,type:str] + govee-password: ENC[AES256_GCM,data:04bJqeUPMcnUbvY=,iv:V976DOOSHZtcQXqdR+iDt5R9wExX7sxcjJqxSclDvu0=,tag:ApcF6Nk39ye0drG+0ZgMyg==,type:str] + govee-api: ENC[AES256_GCM,data:Ypg0SPDQoS2/PIyPzT9z9fNbZtwC+xW444rVAEmVLQZj4kv+,iv:L7CwI7vkE+GZoK/jc4jVP3W2RnI/5pi+HJ1ECv6EyT8=,tag:PXwzRcBLJ2x8QXOtcbWHSQ==,type:str] + sabnzbd: + password: ENC[AES256_GCM,data:5M2XFuXckd8tR+0=,iv:PbWl0jcZbEon1Ya+UjihoPQHUmzPzLQiM8C6WR3K5qc=,tag:DM5doxx38cTAEFZGPwLZ4A==,type:str] + api-key: ENC[AES256_GCM,data:qVkd9hOlB0/pKX3E2u2xPi364+VkeUaOWDKmUaWvloc=,iv:0AqgJqvNYYl69SlkHYwAvqeRiSpTOWgoPhS/5VgFdRY=,tag:40FYFK9pk4iH7hBMCkHR0Q==,type:str] + nzb-key: ENC[AES256_GCM,data:XPY9zpLJmez2K6RB/rhvnW7A1ppJ5/2N69qNbatPPQU=,iv:pnWzfKe75OlbK9fCA+mCYGtjN7hWDL55P5dt7PYfiGY=,tag:vzX3cdzh83EnxNzWIn7ziQ==,type:str] + server: + username: ENC[AES256_GCM,data:pD7AWpTcwU1G5fHo,iv:y0Ys8sjgIH/bwsLLKzyfPowgrlKAaGBArdXlPqGT+6g=,tag:AKbdJ9Br9mpla/hr3rOF3A==,type:str] + password: ENC[AES256_GCM,data:HGh6pPDCV0w=,iv:lFPjGjFALlX6U/4MWLCJ282q5OReNdklmAR+qFmSCJs=,tag:AYrsjhuST/eSpgmRpv+dfQ==,type:str] sops: - shamir_threshold: 1 - age: - - recipient: age157jemphjzg6zmk373vpccuguyw6e75qnkqmz8pcnn2yue85p939swqqhy0 - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxQ2x1cHQrNmNKVU9HVTll - c3VHbGxrVmdhditSUUF4dHZ0a2VsSFpnTjJ3CmFrcm9lb2pVZXEyWkx4ODV2NnZ3 - SFpmYjRSY0Y0TDdodHpRRXZqZTJraGsKLS0tIHZRZU84MzBJbWUwNHRNMFhpUGZV - Z3lDRk9GTDBwVDlPVGE1UWEraC8rSDQKvISTsmt59okKcPRRLKuGnKxHtEeodjCW - +K3B+kT8EI8XsqbT6YLyLYn5c9oELpgNPwlYstVtO+Ad+0izmBlr3A== - -----END AGE ENCRYPTED FILE----- - - recipient: age13g9a4d4jrvckfddpgn8sm4kjtzajr67le56pfdg78ktr5pd09phq32j89u - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2SWN0ZExxY0ErZ0JRZzA3 - QUdhSTNwY3lpQ0U0TDRzYWJkM29qVjlSenhvCnR1NzQ5Ti9hc3hDWjgzd20yZnNs - VkRFOGQzVlVZQTBXRU42eDNQTU05YWcKLS0tIEduc3hsNVFIN0RMMTB2N0ZXelJQ - TEpJR2s5ZjVsa2xLYnZxM3VqeWNYMGsK84kBk2QOqPyLmtJLX+canSECQhT8QoJ3 - NQzLVs/x34p9Ov2nmPqxSlto+syg5YBE2weWLVBP2q8ViniIenBEPg== - -----END AGE ENCRYPTED FILE----- - - recipient: age1wpvfpv5n32lruk7c0da4uaeapsmhjxdvg8z4ljehn06l6g2y0e0sum404l - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNUWJ4V2djZncvNkIrTE1j - elczZndleHFLWWszbm9yVngrMnlIUDhPK0VRCmFkNVI2b0Rka1dCUEVvQkJkUTZK - YmxvT3orUUg4Z25OVkx6UHVQWTNITE0KLS0tIGNUS0ZWYTZXeGFXVkhOYjJ1WVJQ - eXoxVmpRVStmNWtETmMyVGl0QisrOXMKcmqoeZ6u93Oib3fzIgkeg17vQgSdDeja - FMUx7pC1N3wLCA2nYRvVhMxOtMUBkAyRC4FZCfKK58s9xavWEuqPvw== - -----END AGE ENCRYPTED FILE----- - - recipient: age1jv8ap5zwa49ftv0gg7wqf5ps0e68uuwxe2fekjsn0zkyql964unqyc58rf - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMRGM5eGR2ZUZuWVFycmdX - eS8weE0zVm1aNktidm1RcDJlSWRxcUNCdFNjCjErVityN0s1TExvc2pYNm5Qb0Y2 - V2hrMG1ZZGlSRWtmOVRtN0djaXAyTTAKLS0tIDlXTll5elBGK0NYUDk3Qm9DV3pN - TCtRSHBEb3oxUmpBQnVoNHFoeGZYSncKcty8s9r+bqcuND6Vi5tR8sRDE8JMxzQw - Shvfqt8xLdRCeXsYugDkHz6U6VyJSy+ugFGGZbSEXjyLfaB+2zFiFg== - -----END AGE ENCRYPTED FILE----- - - recipient: age1pm3fehmmk0vmnrscz9vm96rakn46aaldr5ydpscmde3v9x0k3faswwdzxs - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvdDZzYW5qbU11MHRESnZ3 - TGc3TG1MUmJmTFQrMkRwWnZmWElzZ3dVdmlJCmtiVFhjT0FuOWtHS05QNTgydDhX - ZjBHaDN5bjhTUnErSmxMblYwRGttaW8KLS0tIDY4OWozeEpHM2pnZU5KUE1TeVVC - dzdPeWVIWkFRTGlVSE9xWVJhRUxXeDQKAyAV8LhFR8LEzoGhBy4R/x+ss6d//rPx - g18G+X1z7gudDfblw/5U/Zy/rjUpZr4y3k5FaOQmmQ99jLFgVz/IKw== - -----END AGE ENCRYPTED FILE----- - - recipient: age1mn2afyp9my7y7hcyzum0wdwt49zufnkt8swnyy8pj30cwzs4zvgsthj0lt - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0N0cyVkdFWWNsSkszdFNG - dkpVRFNMQmtRbEtWaWdSYkVYcTVKc0dlSmtRCk9TYmhsTEtXaFFxSUdBQWh0ZlE0 - eDNNd1VLR2d6UktKTDVwdjJZMVFka2sKLS0tIFgvak1XWHJzOEg5eDloN2FrT1Ny - NVYzWGt1SUNRcEd3RCtrMk5IYmY3cUEK6kudcbS/Do/XrjZQse5C75BXYzqi6lnJ - CPeSLFiR/70mAtpIK/+FwEGlMalxwS6s2GluWHHEWyk/sgXNiXQWNA== - -----END AGE ENCRYPTED FILE----- - - recipient: age1ykkjw57t3z3deup3gtp7dujyaslskn74e0d9hsmqaha2pj3rvazqgndw5a - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaWll2bUYzaG9oc2xLUkI5 - UWQyRVMrbURGeFkxL3JXZkZpTkoydVJXY1JBCjBIeE1VQyt5K1RUUFZ1d3QycHF2 - SGhZc3pIRTZ0TjdZbUJLaWExb01ha0UKLS0tIDFkb0EwZTVpcEhjbkJyWTJwcXB3 - aUNKekJzeDh1bDZPbXo2MGhtZ1pGbjQKLQtWWTnIngTx5vgdKAABmY5bSHf8QZEZ - YVtKyYfbcRpg62TlZiQ/CbQKrrIkkHtzjdAq2nZe6t4Hxf8sWjs6bw== - -----END AGE ENCRYPTED FILE----- - - recipient: age1t2d5scrukk0guva5sr97a8tge5j8kd865adezrcru7p269pzwvpsamkgje - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2T0hybks3K2NKQU5JdGRx - N1VMRzZuWXZWbDBFb0taRGZOcUl3Sm9lT0RVClVFV1ZBU2hvUERHb01UVHVpaU5u - V1VzdUU5K0pCUnZMaFR1bmNyRVZXbFUKLS0tIHdnN2JESGl3dGlYcE1HdGtDci9K - RnFramloSjJCcnFCSUo4c3loZFF2VVUKcJYt3yOa3KCVRdTuxdIFHJmWGNsDXlmc - lbxklFDK2miUq4mZbYjwtEnpadCue4DDSuMzgcfKgt1hKOq8iLYuzA== - -----END AGE ENCRYPTED FILE----- - - recipient: age1c8qw59ffcq9l77gfmtyc3djtvt3md0u6dwhrjcgsm98ntyf72ufqugj7cg - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAydlJCcHBGa3FhTGFmR3BV - b1VqWWc4WEN3Wko1YXZKbWk3ZW0vcXgyZzA0CnlkbnNDeW9saG4ySUdEYU56aVhL - S1JNaXBrSzBMOHR2d2U5RDdOTlJOK0EKLS0tIFY2WnNySWpvWUNiQm9kZlR6MEt0 - N3BidGxja0g3eGMwQlhURll1S0xEUEUKlEdDAPofN3XbT2DYE0X8Hpxbz20O5AMH - ga+YqB/V+u4oBoQVr7FlF+hLz6fesdpM3448LqSOeermkX5YeSC3gw== - -----END AGE ENCRYPTED FILE----- - - recipient: age1er5qucsc2mugrzrr7n3xhzv7kemkrqrw4m84r544fkk7nkg5g5eswxkqj0 - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuT3VjRE1QV2d1b2RDUVVy - d0xIZzZ4QXl4cmpQTW82QkFBRlBza1lqK3pFCmtaUXpoTmQveCtFS2tuZXRxbUJz - OFQ0dElMdU1GckRQN3N2RXBqSDN3Z1UKLS0tIDc1QVdzWEVMejdmQkNjcWpDbGZT - TjRlaTJ0bUgwMm44dFBYN25KcWFFbkEK3cufiFpolejKPnaOGQovp2KXvqrAuxub - iSHSJkdQgQ3ehy2wvQDokuWLXed+77sP9in1mKNRUfUN43h0LbO/Rg== - -----END AGE ENCRYPTED FILE----- - - recipient: age12gu9hqhd56yl5x3t5yenkn9yg57du08h77vzjqsmnu5hdppne38qcur5a0 - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCRG1BK2ZDSmpxdTQzNU5r - QjVlajZMckk1WGlNVE5HeW9IeE02UHBydUhJCmVlSXdoekRUNG5kOU15Tms0bXFQ - VFJQZ0plalJSVnBJT3owNmdvLzNzc2sKLS0tIFkwODF5OGNDMGtKNkREM3N0bm8w - cldzczBROWkvZVhmbWRxcU1WZ3RjeFEKMjongUvWCOfD+AK4N2zAYz/xCKJxliD9 - gg1ntpafmrFZp0ctzesP8BDix15wXeM6n8iF55bxJBzUiGvBty7DoQ== - -----END AGE ENCRYPTED FILE----- - - recipient: age1t7378n8kmd3f32fkye2gw3jj6qswv3exjdx0dq8kl0xra3tmcdnsvddq3u - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsTDVIYnFRZDFGNzBNOWN2 - eVNZQWVxK2VUcFlKcnREa3JuSmRodjNISEhBCkFZTzk4bDBUc1hKbUNRMllmaUd0 - Uno4anpja3dadGd0b1dnWlIvTFNTRk0KLS0tICtRWkN4TklScmJtWEVDT0dvTWxX - b2JmN0tHbkIvMVh4SmpYSEw0bUQ4L2sKcLh5FzizClELiWyRmKLE35kf7+Df0PAi - s4hW3NNAV0t7mQkTBdTnNnm0nlJNfwSJjEH11xpLVHHU2oskJZDuhA== - -----END AGE ENCRYPTED FILE----- - - recipient: age1yn82e39pxt0d0pgny34ux4lkge4ff7wxvsye8ragvwngehemt4ps27phyw - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzVjFwSjdqSmJaeW5oSEI3 - aU03Mnl5WDhSV0FTZmpHS1J4UGtkT3FjYUR3ClRha3FDbXNnOThzMlNJd2NlZWFz - UkNaa2hpWG1wZmlmZ0tIS2JiNUMwZnMKLS0tIEJEQ0VBYVJoN1dpb0tuVWExMFBB - VnVRSFM0Q2hvZ1IweWxXZ1Ntb1hScFUKQEZ9VLERhz6k/bX/f12whQujQR7K5VW3 - TAXqOnQidi0A3teeTMWihcPlvq6uobYqhx9aBcOrQuBfp7umTWXIWA== - -----END AGE ENCRYPTED FILE----- - - recipient: age102el4snus37dj807rwvsmlvwu2sg2d8rw3vfmtntgczfkz04l9nshetcq0 - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTMm55UDhlMFlQRjgzbG51 - RW1DbnA0OXUvdGlHVU5aZVdzenZuWUZ0NUVrCkJBY1Vpd0Z2cVErSmpmYlZORGVP - bEg5c21MK01iMTJTbk5DVVJXazlPeFEKLS0tIERRT3h5WlJFYzlSdm54cll4NHFa - UkM0am9QcFNBNGFpZ21kdGV2NlJYUnMKMWXd40/WyL148PFNSw/XfteP1FmFZ9BW - z9YI7M2/Di+itD0GTDzJHRzZUpcZq3a6b1bmNXbSXlfY0lZUEtNUJw== - -----END AGE ENCRYPTED FILE----- - - recipient: age1n5frpwgvps7c2348ynu9g7g47kqar4srdplw5kkcyn4x80eqzetqw3ej2m - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaaVREUnUzU0ZtR0tIcnRW - dEgwamxndDlkUnBYOGFNSCtmMEFlOU1NNHk4Clp0blhPSFhTVXBZanU1MHFBTS9K - bDZjLzdKQ0pNZnc1VlFoczZwaXFQbk0KLS0tIDQ4U2RrR2lZYkt6VVpMVFRmSDlY - YWcxcHNwZ1VmVEhNS3JuSnF0ZjhQR2cKgaT2UT4LycwEKCnIQWi6iUNCoGPL0WiI - 9OqGOd+igPI2z9aeXpqyp5KLYZoPUq3w55xHHxWpR8pME84PjbV9ew== - -----END AGE ENCRYPTED FILE----- - - recipient: age1lvks0rdf743cn9rvvx90mzu3mjldydlzslpmv9608wn4j0m8u3xsmu7yew - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxWTgyVHI1T3QzSlNpQ1Bu - cXNxOGJvN3Z2N3FUS0N0Wlgya210WkRzU0NVCmpKSzVJQjNRZUowblllaU1ndnEr - bTg0OXVDZnVORWxQUmRscXpaWlVxelkKLS0tIGtjcDN2T2FmMjk4U0t5WVRjMTh1 - L0gwQm5takNjMkVGNzVlSStJYlUwWDAKP8QA3rRUHYbyyhPC/k0Eq2EIKfjyc7Co - 7BkHH3msC6h9g42BB5iIYe6KQ+UGxMQBFvp+qSB27jaIfajN5MP0BA== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-02-09T16:07:02Z" - mac: ENC[AES256_GCM,data:wObXRnXCkE5yfBpwtkuFnzlGaF2BugipRxnx0Z/pTwc6PENKHrCFqnuOdb4EDnlYBGXTGSCUzksWS1kZVc8SF0tiimzlPAB9suS31386I3ex+IJNlouv6MFkvBpeI5OnMo7y/eJVK9GBmC5bxoNhySMAQBRCuDGs9uCaTHdYkRI=,iv:kAInXG7UMeIN/ZJwmwY2cd6V/n3fxOUodvCP0sADvcc=,tag:oFa8zO9WNOGLQZKC7vTN+A==,type:str] - pgp: - - created_at: "2026-02-06T15:34:30Z" - enc: |- - -----BEGIN PGP MESSAGE----- + shamir_threshold: 1 + age: + - recipient: age157jemphjzg6zmk373vpccuguyw6e75qnkqmz8pcnn2yue85p939swqqhy0 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxQ2x1cHQrNmNKVU9HVTll + c3VHbGxrVmdhditSUUF4dHZ0a2VsSFpnTjJ3CmFrcm9lb2pVZXEyWkx4ODV2NnZ3 + SFpmYjRSY0Y0TDdodHpRRXZqZTJraGsKLS0tIHZRZU84MzBJbWUwNHRNMFhpUGZV + Z3lDRk9GTDBwVDlPVGE1UWEraC8rSDQKvISTsmt59okKcPRRLKuGnKxHtEeodjCW + +K3B+kT8EI8XsqbT6YLyLYn5c9oELpgNPwlYstVtO+Ad+0izmBlr3A== + -----END AGE ENCRYPTED FILE----- + - recipient: age13g9a4d4jrvckfddpgn8sm4kjtzajr67le56pfdg78ktr5pd09phq32j89u + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2SWN0ZExxY0ErZ0JRZzA3 + QUdhSTNwY3lpQ0U0TDRzYWJkM29qVjlSenhvCnR1NzQ5Ti9hc3hDWjgzd20yZnNs + VkRFOGQzVlVZQTBXRU42eDNQTU05YWcKLS0tIEduc3hsNVFIN0RMMTB2N0ZXelJQ + TEpJR2s5ZjVsa2xLYnZxM3VqeWNYMGsK84kBk2QOqPyLmtJLX+canSECQhT8QoJ3 + NQzLVs/x34p9Ov2nmPqxSlto+syg5YBE2weWLVBP2q8ViniIenBEPg== + -----END AGE ENCRYPTED FILE----- + - recipient: age1wpvfpv5n32lruk7c0da4uaeapsmhjxdvg8z4ljehn06l6g2y0e0sum404l + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNUWJ4V2djZncvNkIrTE1j + elczZndleHFLWWszbm9yVngrMnlIUDhPK0VRCmFkNVI2b0Rka1dCUEVvQkJkUTZK + YmxvT3orUUg4Z25OVkx6UHVQWTNITE0KLS0tIGNUS0ZWYTZXeGFXVkhOYjJ1WVJQ + eXoxVmpRVStmNWtETmMyVGl0QisrOXMKcmqoeZ6u93Oib3fzIgkeg17vQgSdDeja + FMUx7pC1N3wLCA2nYRvVhMxOtMUBkAyRC4FZCfKK58s9xavWEuqPvw== + -----END AGE ENCRYPTED FILE----- + - recipient: age1jv8ap5zwa49ftv0gg7wqf5ps0e68uuwxe2fekjsn0zkyql964unqyc58rf + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMRGM5eGR2ZUZuWVFycmdX + eS8weE0zVm1aNktidm1RcDJlSWRxcUNCdFNjCjErVityN0s1TExvc2pYNm5Qb0Y2 + V2hrMG1ZZGlSRWtmOVRtN0djaXAyTTAKLS0tIDlXTll5elBGK0NYUDk3Qm9DV3pN + TCtRSHBEb3oxUmpBQnVoNHFoeGZYSncKcty8s9r+bqcuND6Vi5tR8sRDE8JMxzQw + Shvfqt8xLdRCeXsYugDkHz6U6VyJSy+ugFGGZbSEXjyLfaB+2zFiFg== + -----END AGE ENCRYPTED FILE----- + - recipient: age1pm3fehmmk0vmnrscz9vm96rakn46aaldr5ydpscmde3v9x0k3faswwdzxs + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvdDZzYW5qbU11MHRESnZ3 + TGc3TG1MUmJmTFQrMkRwWnZmWElzZ3dVdmlJCmtiVFhjT0FuOWtHS05QNTgydDhX + ZjBHaDN5bjhTUnErSmxMblYwRGttaW8KLS0tIDY4OWozeEpHM2pnZU5KUE1TeVVC + dzdPeWVIWkFRTGlVSE9xWVJhRUxXeDQKAyAV8LhFR8LEzoGhBy4R/x+ss6d//rPx + g18G+X1z7gudDfblw/5U/Zy/rjUpZr4y3k5FaOQmmQ99jLFgVz/IKw== + -----END AGE ENCRYPTED FILE----- + - recipient: age1mn2afyp9my7y7hcyzum0wdwt49zufnkt8swnyy8pj30cwzs4zvgsthj0lt + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0N0cyVkdFWWNsSkszdFNG + dkpVRFNMQmtRbEtWaWdSYkVYcTVKc0dlSmtRCk9TYmhsTEtXaFFxSUdBQWh0ZlE0 + eDNNd1VLR2d6UktKTDVwdjJZMVFka2sKLS0tIFgvak1XWHJzOEg5eDloN2FrT1Ny + NVYzWGt1SUNRcEd3RCtrMk5IYmY3cUEK6kudcbS/Do/XrjZQse5C75BXYzqi6lnJ + CPeSLFiR/70mAtpIK/+FwEGlMalxwS6s2GluWHHEWyk/sgXNiXQWNA== + -----END AGE ENCRYPTED FILE----- + - recipient: age1ykkjw57t3z3deup3gtp7dujyaslskn74e0d9hsmqaha2pj3rvazqgndw5a + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaWll2bUYzaG9oc2xLUkI5 + UWQyRVMrbURGeFkxL3JXZkZpTkoydVJXY1JBCjBIeE1VQyt5K1RUUFZ1d3QycHF2 + SGhZc3pIRTZ0TjdZbUJLaWExb01ha0UKLS0tIDFkb0EwZTVpcEhjbkJyWTJwcXB3 + aUNKekJzeDh1bDZPbXo2MGhtZ1pGbjQKLQtWWTnIngTx5vgdKAABmY5bSHf8QZEZ + YVtKyYfbcRpg62TlZiQ/CbQKrrIkkHtzjdAq2nZe6t4Hxf8sWjs6bw== + -----END AGE ENCRYPTED FILE----- + - recipient: age1t2d5scrukk0guva5sr97a8tge5j8kd865adezrcru7p269pzwvpsamkgje + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2T0hybks3K2NKQU5JdGRx + N1VMRzZuWXZWbDBFb0taRGZOcUl3Sm9lT0RVClVFV1ZBU2hvUERHb01UVHVpaU5u + V1VzdUU5K0pCUnZMaFR1bmNyRVZXbFUKLS0tIHdnN2JESGl3dGlYcE1HdGtDci9K + RnFramloSjJCcnFCSUo4c3loZFF2VVUKcJYt3yOa3KCVRdTuxdIFHJmWGNsDXlmc + lbxklFDK2miUq4mZbYjwtEnpadCue4DDSuMzgcfKgt1hKOq8iLYuzA== + -----END AGE ENCRYPTED FILE----- + - recipient: age1c8qw59ffcq9l77gfmtyc3djtvt3md0u6dwhrjcgsm98ntyf72ufqugj7cg + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAydlJCcHBGa3FhTGFmR3BV + b1VqWWc4WEN3Wko1YXZKbWk3ZW0vcXgyZzA0CnlkbnNDeW9saG4ySUdEYU56aVhL + S1JNaXBrSzBMOHR2d2U5RDdOTlJOK0EKLS0tIFY2WnNySWpvWUNiQm9kZlR6MEt0 + N3BidGxja0g3eGMwQlhURll1S0xEUEUKlEdDAPofN3XbT2DYE0X8Hpxbz20O5AMH + ga+YqB/V+u4oBoQVr7FlF+hLz6fesdpM3448LqSOeermkX5YeSC3gw== + -----END AGE ENCRYPTED FILE----- + - recipient: age1er5qucsc2mugrzrr7n3xhzv7kemkrqrw4m84r544fkk7nkg5g5eswxkqj0 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuT3VjRE1QV2d1b2RDUVVy + d0xIZzZ4QXl4cmpQTW82QkFBRlBza1lqK3pFCmtaUXpoTmQveCtFS2tuZXRxbUJz + OFQ0dElMdU1GckRQN3N2RXBqSDN3Z1UKLS0tIDc1QVdzWEVMejdmQkNjcWpDbGZT + TjRlaTJ0bUgwMm44dFBYN25KcWFFbkEK3cufiFpolejKPnaOGQovp2KXvqrAuxub + iSHSJkdQgQ3ehy2wvQDokuWLXed+77sP9in1mKNRUfUN43h0LbO/Rg== + -----END AGE ENCRYPTED FILE----- + - recipient: age12gu9hqhd56yl5x3t5yenkn9yg57du08h77vzjqsmnu5hdppne38qcur5a0 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCRG1BK2ZDSmpxdTQzNU5r + QjVlajZMckk1WGlNVE5HeW9IeE02UHBydUhJCmVlSXdoekRUNG5kOU15Tms0bXFQ + VFJQZ0plalJSVnBJT3owNmdvLzNzc2sKLS0tIFkwODF5OGNDMGtKNkREM3N0bm8w + cldzczBROWkvZVhmbWRxcU1WZ3RjeFEKMjongUvWCOfD+AK4N2zAYz/xCKJxliD9 + gg1ntpafmrFZp0ctzesP8BDix15wXeM6n8iF55bxJBzUiGvBty7DoQ== + -----END AGE ENCRYPTED FILE----- + - recipient: age1t7378n8kmd3f32fkye2gw3jj6qswv3exjdx0dq8kl0xra3tmcdnsvddq3u + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsTDVIYnFRZDFGNzBNOWN2 + eVNZQWVxK2VUcFlKcnREa3JuSmRodjNISEhBCkFZTzk4bDBUc1hKbUNRMllmaUd0 + Uno4anpja3dadGd0b1dnWlIvTFNTRk0KLS0tICtRWkN4TklScmJtWEVDT0dvTWxX + b2JmN0tHbkIvMVh4SmpYSEw0bUQ4L2sKcLh5FzizClELiWyRmKLE35kf7+Df0PAi + s4hW3NNAV0t7mQkTBdTnNnm0nlJNfwSJjEH11xpLVHHU2oskJZDuhA== + -----END AGE ENCRYPTED FILE----- + - recipient: age1yn82e39pxt0d0pgny34ux4lkge4ff7wxvsye8ragvwngehemt4ps27phyw + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzVjFwSjdqSmJaeW5oSEI3 + aU03Mnl5WDhSV0FTZmpHS1J4UGtkT3FjYUR3ClRha3FDbXNnOThzMlNJd2NlZWFz + UkNaa2hpWG1wZmlmZ0tIS2JiNUMwZnMKLS0tIEJEQ0VBYVJoN1dpb0tuVWExMFBB + VnVRSFM0Q2hvZ1IweWxXZ1Ntb1hScFUKQEZ9VLERhz6k/bX/f12whQujQR7K5VW3 + TAXqOnQidi0A3teeTMWihcPlvq6uobYqhx9aBcOrQuBfp7umTWXIWA== + -----END AGE ENCRYPTED FILE----- + - recipient: age102el4snus37dj807rwvsmlvwu2sg2d8rw3vfmtntgczfkz04l9nshetcq0 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTMm55UDhlMFlQRjgzbG51 + RW1DbnA0OXUvdGlHVU5aZVdzenZuWUZ0NUVrCkJBY1Vpd0Z2cVErSmpmYlZORGVP + bEg5c21MK01iMTJTbk5DVVJXazlPeFEKLS0tIERRT3h5WlJFYzlSdm54cll4NHFa + UkM0am9QcFNBNGFpZ21kdGV2NlJYUnMKMWXd40/WyL148PFNSw/XfteP1FmFZ9BW + z9YI7M2/Di+itD0GTDzJHRzZUpcZq3a6b1bmNXbSXlfY0lZUEtNUJw== + -----END AGE ENCRYPTED FILE----- + - recipient: age1n5frpwgvps7c2348ynu9g7g47kqar4srdplw5kkcyn4x80eqzetqw3ej2m + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaaVREUnUzU0ZtR0tIcnRW + dEgwamxndDlkUnBYOGFNSCtmMEFlOU1NNHk4Clp0blhPSFhTVXBZanU1MHFBTS9K + bDZjLzdKQ0pNZnc1VlFoczZwaXFQbk0KLS0tIDQ4U2RrR2lZYkt6VVpMVFRmSDlY + YWcxcHNwZ1VmVEhNS3JuSnF0ZjhQR2cKgaT2UT4LycwEKCnIQWi6iUNCoGPL0WiI + 9OqGOd+igPI2z9aeXpqyp5KLYZoPUq3w55xHHxWpR8pME84PjbV9ew== + -----END AGE ENCRYPTED FILE----- + - recipient: age1lvks0rdf743cn9rvvx90mzu3mjldydlzslpmv9608wn4j0m8u3xsmu7yew + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxWTgyVHI1T3QzSlNpQ1Bu + cXNxOGJvN3Z2N3FUS0N0Wlgya210WkRzU0NVCmpKSzVJQjNRZUowblllaU1ndnEr + bTg0OXVDZnVORWxQUmRscXpaWlVxelkKLS0tIGtjcDN2T2FmMjk4U0t5WVRjMTh1 + L0gwQm5takNjMkVGNzVlSStJYlUwWDAKP8QA3rRUHYbyyhPC/k0Eq2EIKfjyc7Co + 7BkHH3msC6h9g42BB5iIYe6KQ+UGxMQBFvp+qSB27jaIfajN5MP0BA== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2026-02-12T04:19:13Z" + mac: ENC[AES256_GCM,data:t3sxHQSeVb1agLpIuC4Mm/6hIvlhA4d4WWJu8y3vm3rHafhZK9HKQYDJ48fB/oMNpszy0IcgSP7j9WQPPKKAcsDRj7fHu67Z9lFyv+C12leBm1kCKmp5e4fl8aykQRSxT2Sy5eo4yt+8PTUOd8Cet3tYO/riSgvWtL6iCEjO9ik=,iv:7uLvDk7suunzx2kVoK8JV/bAFeHnJDDF+vInhiw2K6I=,tag:Dnov7AhsMzLaJT9p9f99Sg==,type:str] + pgp: + - created_at: "2026-02-06T15:34:30Z" + enc: |- + -----BEGIN PGP MESSAGE----- - hQIMA0B7mmjbybiOAQ/+NuBex8EB8XTPqNWJg0OjThRQzRY4+mkshMePjBbbSI/S - YICUf4cshS6j0T6EwWEpmVZKohN+gd4YgOyJi5hjjcXxwJBEho9URlFay26YvmTV - NWNgcEt5xiNBJ6J1gxA4m5VzGkUOZB5OvVXtMTQwkL7yNEPk6sHQcDYu7rVTJqe3 - zm82SHbOtoAyP/Ati4AcHujneHx4OlFuc3YjGfKTrJdBNmX7ouJQOY3l/Vr73okl - 6JbjxApLjEy82Q2e9mgIGD7iwytyW27yKgADwhAB3xqjOGMHzk0jnDJPNDgDZXGA - E/Axt8AwHaO/iW/gSdL0nguoTGMbwBPSE3ENtNROjXIR/kqMvc8qyavD7lAaPuwP - +KC05QUKVzhUULxXs5HAIm5sm8QOJXG+X14J48oIh/f16v7Spw5mrbrCAkzH0ZzE - kotvhpsaY2b442w7GDgQX2/l9rbqPyDC3xufaQJcsoPzdSIsa70CbBS28tUhqhkX - jrYPYJPOC27sonquK4z8T4D/jde0+iOKMZc33T0i59AEPeJtfLaKv7OcqNGPO8D0 - x9ki63lOmVrWOq/HZy60+GWMLF/Gv70LNRPIXxcT0yZlDxB3U7ykNht5lrGh+R2F - 8T6129pwCOAvu/rKtAERDv6nMTBa8/ulvzmQY1si4qEi7CnYDiiBZcZX+HZLGOXS - XgGRqw4/lIj25YSfpw6RreoKdPR/OZYajFyy3ZDMjYf66eY8zOy28kMVfcHDLw2W - yNeJFlJ6I4zIrgrumI6zpGmr5ee0mlFLONo5bHL4ofuS4CPXMsL9ReH2NOYGu9Y= - =C/N/ - -----END PGP MESSAGE----- - fp: CBCB9B18A6B8930B0B6ABFD1CCB8CBEB30633684 - unencrypted_suffix: _unencrypted - version: 3.11.0 + hQIMA0B7mmjbybiOAQ/+NuBex8EB8XTPqNWJg0OjThRQzRY4+mkshMePjBbbSI/S + YICUf4cshS6j0T6EwWEpmVZKohN+gd4YgOyJi5hjjcXxwJBEho9URlFay26YvmTV + NWNgcEt5xiNBJ6J1gxA4m5VzGkUOZB5OvVXtMTQwkL7yNEPk6sHQcDYu7rVTJqe3 + zm82SHbOtoAyP/Ati4AcHujneHx4OlFuc3YjGfKTrJdBNmX7ouJQOY3l/Vr73okl + 6JbjxApLjEy82Q2e9mgIGD7iwytyW27yKgADwhAB3xqjOGMHzk0jnDJPNDgDZXGA + E/Axt8AwHaO/iW/gSdL0nguoTGMbwBPSE3ENtNROjXIR/kqMvc8qyavD7lAaPuwP + +KC05QUKVzhUULxXs5HAIm5sm8QOJXG+X14J48oIh/f16v7Spw5mrbrCAkzH0ZzE + kotvhpsaY2b442w7GDgQX2/l9rbqPyDC3xufaQJcsoPzdSIsa70CbBS28tUhqhkX + jrYPYJPOC27sonquK4z8T4D/jde0+iOKMZc33T0i59AEPeJtfLaKv7OcqNGPO8D0 + x9ki63lOmVrWOq/HZy60+GWMLF/Gv70LNRPIXxcT0yZlDxB3U7ykNht5lrGh+R2F + 8T6129pwCOAvu/rKtAERDv6nMTBa8/ulvzmQY1si4qEi7CnYDiiBZcZX+HZLGOXS + XgGRqw4/lIj25YSfpw6RreoKdPR/OZYajFyy3ZDMjYf66eY8zOy28kMVfcHDLw2W + yNeJFlJ6I4zIrgrumI6zpGmr5ee0mlFLONo5bHL4ofuS4CPXMsL9ReH2NOYGu9Y= + =C/N/ + -----END PGP MESSAGE----- + fp: CBCB9B18A6B8930B0B6ABFD1CCB8CBEB30633684 + unencrypted_suffix: _unencrypted + version: 3.11.0 diff --git a/systems/x86_64-linux/jallen-nas/apps.nix b/systems/x86_64-linux/jallen-nas/apps.nix index 86eca20..118b3ca 100755 --- a/systems/x86_64-linux/jallen-nas/apps.nix +++ b/systems/x86_64-linux/jallen-nas/apps.nix @@ -11,13 +11,13 @@ in ${namespace} = { services = { actual = { - enable = true; + enable = false; port = 3333; createUser = true; reverseProxy = enabled; }; ai = { - enable = true; + enable = false; }; arrs = { enable = true; @@ -49,7 +49,7 @@ in enable = true; port = 6066; }; - caddy = disabled; + caddy = enabled; calibre = { enable = false; port = 8084; @@ -197,7 +197,7 @@ in port = 8265; serverPort = 8266; }; - traefik = enabled; + traefik = disabled; unmanic = { enable = true; port = 8265; diff --git a/systems/x86_64-linux/jallen-nas/default.nix b/systems/x86_64-linux/jallen-nas/default.nix index 95f92b9..476196f 100755 --- a/systems/x86_64-linux/jallen-nas/default.nix +++ b/systems/x86_64-linux/jallen-nas/default.nix @@ -137,6 +137,7 @@ in allowedTCPPorts = [ 80 443 + 8080 8008 # restic 9000 # authentik 2342 # grafana diff --git a/systems/x86_64-linux/jallen-nas/sops.nix b/systems/x86_64-linux/jallen-nas/sops.nix index 9124e6a..5599f0b 100755 --- a/systems/x86_64-linux/jallen-nas/sops.nix +++ b/systems/x86_64-linux/jallen-nas/sops.nix @@ -98,6 +98,10 @@ in # crowdsec # ------------------------------ + # "jallen-nas/crowdsec-firewall-bouncer-api-key" = { + # restartUnits = [ "crowdsec-firewall-bouncer.service" ]; + # }; + # "jallen-nas/crowdsec-capi" = { # sopsFile = defaultSops; # owner = "crowdsec";