feat: rekey global secrets for vin

rafaelsgirao · Jun 14, 2024 · a3cd38e · a3cd38e
1 parent eca2efd
commit a3cd38e
Show file tree

Hide file tree

Showing 12 changed files with 57 additions and 44 deletions.
diff --git a/secrets/ACME-env.age b/secrets/ACME-env.age
@@ -1,13 +1,15 @@
 age-encryption.org/v1
--> ssh-ed25519 SeKWOg 0z5AnKAk/2Y+jUpOIAOo4HH3RGaRlNebxxFOgEX5WiA
-Z7lNdiRh0NZDZuJQZt/HJMEnOrnR6s2I8yUHmK34hPA
--> ssh-ed25519 Xwp76w G0nMqfFue+/F/ZK8k2RjLpsje2yU6rSqcZGZXNAn1CQ
-2VdGu5muMMXoietykjHnKoHqueBToxUqaTwfffdQc7M
--> ssh-ed25519 mJ17DQ 0Uc84mrmWIYiikF5GF5BrOW2F09eEX3Tyvx9gaF1mn8
-sQsohPFqI0qr9NF4cIRrnw9FDO2ZWjeaKbgcPYpCBpw
--> ssh-ed25519 5E4Gxg wrntqWqDqGaYz8VsqFEiTkfbwZNaT8dNyokOOPCRKQw
-OPwT4wodN3iJ1G7SIHcj6PCWdNQMyiDLVnFJHTGUx9g
--> ssh-ed25519 iCe9kg z9hulcIg2GWSK57TGqAKFy+lUhFgWzPeCxdU1Q45iwY
-14/kbwttBu2PosCp+XsOr54V63P8CY6wSdMMUROWtAE
---- bUOeojHyoKBUPDi9sZUplmUpEkG8u80Bh9JvQyB40sE
-�p�TtI�)�y��K̲E�:����	�^U���G�Us�Vm��M�?��A/����!�[��'���#ؕ|�T%����G�K{l�ɟ��N�:*x�;�
+-> ssh-ed25519 SeKWOg s8GHPYda9/3CpCR8SbGtfy8Jt03bUPUVkGQWc8k91yM
+o06PJrAxl/RE1zcEKiw9xrUzddO7HaKI4aDSokYd8QU
+-> ssh-ed25519 Xwp76w SHpEYwGNuPpmiEbouLA/QwSxD6i0SUafVc+b9a7+TjQ
+bMcD8kBMZUn/Q0KxWZjc/IZzq8ZPOS3+64AIjmGdWko
+-> ssh-ed25519 mJ17DQ n7LgdM2SkhLm2NIV7SbDlqNOANWctYVpeizm4z9rhGs
+hA3lLyDaFj/pq75+AUyyEqqmlWi7TZUXa12i0+039iY
+-> ssh-ed25519 5E4Gxg OEpu2QiG07w33IBc7tfoAsyMxl19bo803uoDD6V8eUU
+4UukswkkpZroP0ZvUNdhSY5R+gERDsuOq7bCGQ3n4pY
+-> ssh-ed25519 JPa2Fw XRXjEU/s8WJi+da4V+NxCaCwspoUdVfB7En53IicCTo
+tVUWFzUIeIQGs9EWZM7BDb12iY3uRbxxVgLW6c1SCJc
+-> ssh-ed25519 iCe9kg m8lvI8QqHB4dDoK8m+/nBVutNTM0wedq9mNLqfQFznU
+sY+MTInIJ6dsoP1VNQ5zUwSCH0KlOJu7k/3fNLxS/H4
+--- zPYW+DzIrLL5DX1yEgTlp2Ox/nuh7TZ+kYSiPc2ItHM
+��o���/G�#��.Gk�H��l��w���TH�L�,�G�K�"K��"��C}qhm�X�\��$�\�c�o���q��@^u��6��hL����

diff --git a/secrets/ENV-mailrise.age b/secrets/ENV-mailrise.age
@@ -1,13 +1,15 @@
 age-encryption.org/v1
--> ssh-ed25519 SeKWOg uriBTZzhSBhovTaCy3o3pWD/3fgyI21kPGfWY2t4K0I
-wtlVmCIYi7Lu2JcpqIPToy108sbIwbXw3ALD1Xjbx58
--> ssh-ed25519 Xwp76w b9BilFluesnIeHsqQullUmP4MJg5CorFMzBSP4g16Xk
-DDLMWvbDx8siEBcfQUTUo7nb//+LCOxJ/pAZzSDRN6c
--> ssh-ed25519 mJ17DQ oJUCkyJ/Gr6dralDBmMgwEJOMx/sv8fQVP+supa6Nkc
-JzMai1aReYed7MWxhprOgS6OBrxrpvqHC1miLzjt3Ws
--> ssh-ed25519 5E4Gxg HclhcVK0EaxO2jonBr1CB1EgoSXiLMOK9nLi9kneWE0
-MNrm0JlybzL0PsxXNDlabrYqdivzZBdSSee/zNh0Uh8
--> ssh-ed25519 iCe9kg t9B/qjh7aj/oJtHRlbgLUkCO86a6s826wN7NWeSMoS8
-C2I5GGAaXAzdiwnjezV6vBln7pweS3/yMIFFKHXpIik
---- TnaucW7TUgGRhf6Lgao1ZTYz7O2tBuFyYiXbIsoFWMU
-Kvd�[��VO�gm��dF�m�u�=��4�����4�p�1��MI�Q�9�+�:uT(�	���GA@so���D�p
+-> ssh-ed25519 SeKWOg 36ICG1bGUJ6oCAwZJDzD8k60lAUpQSfR1weGfZOFAUM
+rM+PFC/2SkSNtOSqi7s8vkMXgcvwjIst9IZ69NhUlms
+-> ssh-ed25519 Xwp76w Ta6LS3d99EoIQdvweKBi97o2CDQk86HBPSFGwsrnFQY
+bjMDBZ9TIW3k3j9AAGvskwIkqjDq4oBkrauIFVpQtVc
+-> ssh-ed25519 mJ17DQ 78iAUtI1qdeNW5lupa0hRn4PMXyvFjftyE7CpMH1Gx4
+NTnQ3oWOOol6bKWJ7alkQ+pH7r1rSKvbPA/6cna+GKc
+-> ssh-ed25519 5E4Gxg NKcdRENWfIbQWhJ/4zkIseWg5+TSVluZo8I/k2qSNAo
+tO+2XiQHt3DqrP8els4AICacbDxMMfbNiyr9R0aEl7k
+-> ssh-ed25519 JPa2Fw LunjOgRDSHX0maP/ntiRDgrVQJFrJXXBY0+GNyDWTHc
+r9nGo23wYp+tN4w02GbXhdyYUOxVFf8oLcRR0+A/zmI
+-> ssh-ed25519 iCe9kg IxHP8R5ol6AwDgLiglmGfU0GrixAWI6i72KfMjH4Qz8
+cShR5LIdXeDp8u0ZtbTlQuvMbZoTuXdg7I0ckXCXW8c
+--- hn34/aB+Hj9Zuwy+QvdssZvzqczMUsNc6WZaHxMkXJw
+���&颏�#mm�c5���0�A_k\ E�yiM�Ant�G?�X����R���v��|׀yY�>�譊]�e��FٕP�'
diff --git a/secrets/RGNet-CA.age b/secrets/RGNet-CA.age
diff --git a/secrets/RNLDEI-wireguard.age b/secrets/RNLDEI-wireguard.age
@@ -0,0 +1,11 @@
+age-encryption.org/v1
+-> ssh-ed25519 SeKWOg 6utTVeb1jhBdkYfqNpxU0knoBGOr7Rw1fTKwfZ4XKDk
+awy7usG3v9gUW+iJ/I/svSR0tR/HghQnfYkcwkAo8oA
+-> ssh-ed25519 5E4Gxg tigGJRxbFVEINVHxTiEqofTTJTD4qr5AMIbyevfDqSA
++Su2QQvATSQe7+6xFnKX8NLIWg94mNznWthHZidARjY
+-> ssh-ed25519 JPa2Fw vS42VBhgQO+UxegE7HBZoxghHi1XJacwfU17HtE00h4
+oLxTPVYuyHopINZBUI9ld58mOIR2ZDn55cdhdl7R0QQ
+-> ssh-ed25519 iCe9kg kh6CXzEvq2AgM07uoJua3Cyw9aPCrJrW0Fe0nSXeLzc
+AqkzEvqWAdYiMRI3zKSZ6kwr/XceK+5rrg/vM2kcHXI
+--- YLK3fMGJjgycYYtCtrH2JmgzR/8SostrjFjTBm9M0YQ
++kA	��&���e�r1cý���W��;p��cH���n��{��G�H��@F�,�eS�W���E��:>H
diff --git a/secrets/SSH-config.age b/secrets/SSH-config.age
diff --git a/secrets/rclone-config.age b/secrets/rclone-config.age
diff --git a/secrets/restic-env.age b/secrets/restic-env.age
diff --git a/secrets/restic-password.age b/secrets/restic-password.age
diff --git a/secrets/scout/RNLDEI-wireguard.age b/secrets/scout/RNLDEI-wireguard.age
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
@@ -4,7 +4,9 @@ let
 
   users = [
     "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFDT738i9yW4X/sO5IKD10zE/A4+Kz9ep01TkMLTrd1a rg@scout"
-    "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBJi2uB1uGKJSSVYq0zM1i26l5Lr+dWw1M+I73v9kdhNzdE995c8a4uIl0J5eU+3XV4LJP/AFLv1eRBaVInTVGQ8= rg@sazed-TPM"
+    # Age only supports RSA keys and ed25519 :( 
+    #    "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBJi2uB1uGKJSSVYq0zM1i26l5Lr+dWw1M+I73v9kdhNzdE995c8a4uIl0J5eU+3XV4LJP/AFLv1eRBaVInTVGQ8= rg@sazed-TPM"
+    #    "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBBxyt2Uhru+PIf9SKRF96AW05P9WuyR7NKbS6OZyElNjOT+1qmkeL82+7B5qeHsACA3ZRo4svorIS1Q8khLmexk= rg@vin-TPM"
   ];
 
   scout = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFlOwjvhd+yIUCNLtK4q3nNT3sZNa/CfPcvuxXMU02Fq";

diff --git a/secrets/sendmail-pass.age b/secrets/sendmail-pass.age
@@ -1,13 +1,16 @@
 age-encryption.org/v1
--> ssh-ed25519 SeKWOg /YOSpZQtSuKGnbzj7pOFTRVQUNvi236QYpxE3oZfvws
-+U7i97xuIk2TdABTgwZmawkyHiu92eG5GFdis+bcAOE
--> ssh-ed25519 Xwp76w 7StVXlIFIhvc0GCgEErDj6SZHvWHCvtJkeQz0eiEgBI
-/ApNo+y8POglYK1gOQrr4+KmB3/bMaRJHdtzHx3OoJY
--> ssh-ed25519 mJ17DQ Ar064wp1bc2+VLULiLpPieEbv/MUwXhj27BTHC2pORM
-ml+gaxTksN/gzEG2UMf9ewUIBD3+kQ4lT2j096u0Jog
--> ssh-ed25519 5E4Gxg J+Wv1L5/wNGAhbfFlSEGHV03ZnMCw8bsTGi9ngVszHI
-4NFVOGmD34/kLMtg6hcUl56xYK1fnoPBxyEVr9DGj6E
--> ssh-ed25519 iCe9kg iGFW/pYIIydYfnFmrvoteNVLpHjXj8+Pb5aWrDZpIn0
-VAaPwj4JigZgxTzgRk5LB0pGqgXqlpL5fR49nG/Ejv4
---- 93EKn4G1yeau6MccFw+UZRJaMm/866QHjf/L6BuskzM
-K�1�o�ͬ�"�-?d����c~�k�} �`]��\�p��QT<0���xc�+��uYH��k����Z��U3T�B��d2
+-> ssh-ed25519 SeKWOg SPyEEC2oWhmKIm8VH4UrN58InKMM3ZHeIcpSVXUF6Wg
+WaYWELjpQ5PWI7oLtJfQzXPmGWIosN2TwiZhMUMkN5I
+-> ssh-ed25519 Xwp76w I/fisMmE/UPSqv/CnIyJb/EJiYBat2usmi74642xulw
+jbu4DwcadvV8ZJ6iC4iVVy8z+HtOR0pQUr443KFfMjg
+-> ssh-ed25519 mJ17DQ 1VEmWAeXrOZJLHjsP3bwETuQ2bL1cIWbGebPXZBJCC8
+K+zLZS5KxusPspoBuRObJdU2RIp0Tb4VXroVUql/xN8
+-> ssh-ed25519 5E4Gxg MY2ehtH9kOwbw/ta6aqtFuv3xBGdQVGQQvU4yeGL2gk
+XwFWIZmXqiv/jrIlOcvKWirX09saUCetvshLcAa2y7g
+-> ssh-ed25519 JPa2Fw k7P5Il/WyHChvTHBPciwacnMNwSlqdnxMtFK3paEs1g
+VxglXSjvCxteIMLpZuTLuFoKKqgI7f4tdlDXvM0oZr0
+-> ssh-ed25519 iCe9kg 7SdzI2g1fsmg3C9tZ9NABDrJIMQiiAogwgYErWCqaU8
+02tBdfsMWdQ5nzjIriTODhPXT123/XJXEAMmf0FyYx4
+--- ooRfJj86wu5PPYHN3RZCLKWISTfRkLRAtg18ysDytAY
+�&��9�}RhĶ��w���H
+�y`^��u]��4?t�CaQz"��y��R]��V�O��`�����T���⮹<qH�
diff --git a/secrets/wakatime-config.age b/secrets/wakatime-config.age