diff --git a/hosts/default.nix b/hosts/default.nix index 7ddf705..7992193 100644 --- a/hosts/default.nix +++ b/hosts/default.nix @@ -12,7 +12,9 @@ let agenixOverlay = final: prev: { agenix = agenix.packages.${prev.system}.default; }; - customOverlays = (final: prev: { }); + customOverlays = (final: prev: { + zeroclaw = prev.callPackage ../packages/zeroclaw.nix { }; + }); mkPkgs = nixpkgsSrc: system: diff --git a/hosts/hosts.nix b/hosts/hosts.nix index 98e776b..159b082 100644 --- a/hosts/hosts.nix +++ b/hosts/hosts.nix @@ -213,6 +213,15 @@ ]; }; + zeroclaw = { + module = ./zeroclaw; + tags = [ + "lxc" + "bacco" + "zeroclaw" + ]; + }; + # Special hosts (non-LXC or local deployment) # deadbeef = { # module = ./deadbeef; diff --git a/hosts/parameters.nix b/hosts/parameters.nix index 3f0970c..43c8ac5 100644 --- a/hosts/parameters.nix +++ b/hosts/parameters.nix @@ -34,6 +34,7 @@ in ilpost-podcast = "ilpost-podcast.${private-domain}"; librenms = "librenms.${private-domain}"; collabora = "collabora.${private-domain}"; + zeroclaw = "zeroclaw.${private-domain}"; }; personal = { username = "pazpi"; diff --git a/hosts/zeroclaw/default.nix b/hosts/zeroclaw/default.nix new file mode 100644 index 0000000..585e4dc --- /dev/null +++ b/hosts/zeroclaw/default.nix @@ -0,0 +1,27 @@ +{ + config, + pkgs, + lib, + ... +}: +{ + networking.firewall.allowedTCPPorts = [ 37617 ]; + + my = { + networking.tailscale.enable = true; + + utils = { + commons.enable = true; + lxc-standard.enable = true; + }; + + virtualisation.proxmox.enable = true; + }; + + environment.systemPackages = with pkgs; [ + git + zeroclaw + ]; + + system.stateVersion = "25.11"; +} diff --git a/packages/zeroclaw.nix b/packages/zeroclaw.nix new file mode 100644 index 0000000..bce6ba7 --- /dev/null +++ b/packages/zeroclaw.nix @@ -0,0 +1,43 @@ +# ZeroClaw: built from source on NixOS (release tag as source). +# Pre-built Linux binaries are not used; this compiles from the official repo at the given tag. +# https://github.com/zeroclaw-labs/zeroclaw +# +# When bumping version: set rev = "v" and update src.sha256 via: +# nix-prefetch-url --unpack "https://github.com/zeroclaw-labs/zeroclaw/archive/refs/tags/v.tar.gz" +{ + rustPlatform, + fetchFromGitHub, + lib, +}: +rustPlatform.buildRustPackage rec { + pname = "zeroclaw"; + version = "0.1.7"; + + src = fetchFromGitHub { + owner = "zeroclaw-labs"; + repo = "zeroclaw"; + rev = "v${version}"; + sha256 = "0d4yx8r0yg54jv5yqgx6abdww5rdak3waxfrw8a00fz5nj3zd3qg"; + }; + + # Use Cargo.lock from the tagged source for reproducible dependency resolution + cargoLock = { + lockFile = "${src}/Cargo.lock"; + }; + + # Placeholder web/dist so rust-embed has at least one asset (dashboard is optional) + prePatch = '' + mkdir -p web/dist + echo 'ZeroClawDashboard placeholder' > web/dist/index.html + ''; + + doCheck = false; + + meta = with lib; { + description = "Fast, small, and fully autonomous AI assistant infrastructure"; + homepage = "https://github.com/zeroclaw-labs/zeroclaw"; + license = with licenses; [ mit asl20 ]; + platforms = platforms.linux; + mainProgram = "zeroclaw"; + }; +} diff --git a/secrets/arr-secrets.age b/secrets/arr-secrets.age index 9954d8a..cacfce1 100644 Binary files a/secrets/arr-secrets.age and b/secrets/arr-secrets.age differ diff --git a/secrets/authentik-env.age b/secrets/authentik-env.age index 541cc11..9800e8d 100644 Binary files a/secrets/authentik-env.age and b/secrets/authentik-env.age differ diff --git a/secrets/cloudflare-pasetto-apiKey.age b/secrets/cloudflare-pasetto-apiKey.age index cbaf0c3..f2c2dcb 100644 --- a/secrets/cloudflare-pasetto-apiKey.age +++ b/secrets/cloudflare-pasetto-apiKey.age @@ -1,11 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 BFt3Fg XIcZtfUlxRs0soVwX4r2S4tZ1+6Mg0Lku7So4yEDgU8 -wPkX9ULKNZ+VkS2IDGGjTLiCr4ugogFQmkj7K6n7aOw --> ssh-ed25519 uqg2jw btHyM+dMgUyhxwUkcRpiqPiOPzz6cpTRHD1ZPW0RTCA -ZLIXVbZ/FDvhuX3FZuNcclQL8T736ILfhudrR5Dn5L0 --> ssh-ed25519 a0HhMw Kvl92RsQe+9M4VTQAQKnVgJxzmPgpzkSTLbEq0ZNIUE -XWXKU7e4ZXKxWk9YnbKuQn82dPPn2AC4mpksoEnWHfw ---- RgMEIYrUSY8fi/qXFJiUiaBFoI9z4WbG7iy3x5RvAQA - +&&2]ȺR6\K., -Y ɤaAo s` -0vTB)^0-Ee%k#iZ^~5apc;8g?nN *Ak7Uh s-EAaΉI׭J ssh-ed25519 BFt3Fg UD7+j+geU1RckvTYGPEad6gEjmZM2P1J/5pUHaLv33Q +CrQcYMW5eobhhIPpRzrAFthAs2rIYqF14JAhY+dYVtY +-> ssh-ed25519 uqg2jw 39sd4IIdOov41H1U0wSqAsPzdEGmA7TIpUg27OIk0Rw +l2DrPTLnzMdzvK66iAzNGbIX0l8xVO7OEBKT5cX/eZg +-> ssh-ed25519 a0HhMw iBVBzaz60umIH5Bykwj6PLAfIPYavOCA+GQ1bGv61SY +mMLPpBgHK8ZZXjGnLUABPGu1XJy0oIpyR+vCX8k7AnQ +--- Xrz7yfREo20z2VGM0dgs/sAbg2nA7HQvzk2jM1mawKY +I#LY[m8& "\|p2wVitqkg+C^7K@fqIUpjR&""LbQ%A̴fLXojЩ1D\9W !GQT*C]C \ No newline at end of file diff --git a/secrets/dns01-admin-password.age b/secrets/dns01-admin-password.age index 758c543..6a8a124 100644 Binary files a/secrets/dns01-admin-password.age and b/secrets/dns01-admin-password.age differ diff --git a/secrets/dns02-admin-password.age b/secrets/dns02-admin-password.age index 3aecb28..0b6abd7 100644 Binary files a/secrets/dns02-admin-password.age and b/secrets/dns02-admin-password.age differ diff --git a/secrets/exportarr-secrets.age b/secrets/exportarr-secrets.age index 440469d..4f61be5 100644 Binary files a/secrets/exportarr-secrets.age and b/secrets/exportarr-secrets.age differ diff --git a/secrets/firefly-iii-app-key.age b/secrets/firefly-iii-app-key.age index eb16ff0..0eee42a 100644 --- a/secrets/firefly-iii-app-key.age +++ b/secrets/firefly-iii-app-key.age @@ -1,10 +1,10 @@ age-encryption.org/v1 --> ssh-ed25519 aichPw oj14cBNMRiorC8nUztIwqd0nF1rzAy2wgMoMVG3Aflk -bPM8yu82QeCqrHK4DLbJ82qQFLhO/x/d0XGsy+xYfSQ --> ssh-ed25519 uqg2jw MUZ7Qkq2BP+Fhfhw73NFfsGB5dKJQvrZiLruN+j+azM -2muR8YQ1+cOn4K0R2FGLyjL1sQnxsbsA9p1h305euBk --> ssh-ed25519 a0HhMw 8DZ7hMx5iWl290i2Ob5iihy3tXVK9kp4ujlTk4vXWWk -e+9UyigWi1uNM3XDzAMv6+tWEX41vkRG/fxRYXIl904 ---- cq0pJodOfHY0gzOz/gzgZDU9RJ7RM0X7sgaU0uisBSs -~0k_fibO <ƶm[a[P -z \ No newline at end of file +-> ssh-ed25519 aichPw qb6uv3irBsD4K/6dyR75A10/tOVogexjUJwurHFoV2I +aqEYLpfyMjSbfmvR8XrvasqyZ3Bhyl1bbsHTVT0MSC4 +-> ssh-ed25519 uqg2jw jv+zS3I3rpcZ1R9oGuVfpucjCWwEEnCweXggZOVW9D4 +D/j2L0r3VwU1c83NO3WUk1yMdSHrfjxiHTlypgVwxws +-> ssh-ed25519 a0HhMw BkL5f+OmRU/kqn3In+lzwrHFUaW3RLbEZwMAFSnlIHQ +uACreZHSBsGLXaeVNJWQtVPVvJaELSl/AE+gTIjtCkw +--- T4s314v0GvYXyHNiLE8RPkI1AotLe70D2HSieqhrVr4 +O'| +A)Cn) ssh-ed25519 kElbzA w0lkpAAytuQB4TW+cZwlA8Yxj4hSn6XidCrToSIqE0M -/uI8UqRwxnAsjju5Qmgns1YIWdCOW2GvGyyLGFS8nII --> ssh-ed25519 uqg2jw 9ALpppM5izrNPdsbh0v6R1OZmU96wrlfZME/NQw/EQ8 -beCx2Cs9d5GzLUmwAkfwjWTyIzsQErpzUjO/dNN+8to --> ssh-ed25519 a0HhMw iB1TdOcYWge4Q6wc73Ol2gWc3or4+E4SkQaPoL9Func -tU7CZQVSH32zxcffCZoScFBGssbFapydAGsGQzNS92M ---- 4CJM+a3+hhGzdH/bnNfpp1t+1qa7YDF5K8zcfLbrVDM -yi !y2>6igNz:0xnEIqƿkqhn^#\PզWSf \ No newline at end of file +-> ssh-ed25519 kElbzA 7XFHPcqLwIM3ahHAu9AwgoKIGiJHrBWAVrHOgEuGhAs +Ljweo9FA3AOKDbH1pU07u/kBNewygK+a+TkE/eLn7K8 +-> ssh-ed25519 uqg2jw +7N+oyvoF9BQj8qJO6mkhO+dPaUu0VYEaCVFSp8RYD0 +WjZfsDll93kBu6wVM3WCEH89byZqO78PLXNor368aB8 +-> ssh-ed25519 a0HhMw 7vRgbfwrsucM18d7iJVcL5SdvjeJE9xoE253k8m2EEc +u3+eze64HsM8Oi2DbkDfpXIjIP8JsvK7TVLtSQgJWNw +--- /dbF5sBUJ+q+wUISdMGX3fR8ElLJW5SR9HmV9koAKlg +yN57d{!δh1_Wr1}6N2}N[Q'H}\ڿ-)+" ssh-ed25519 xSWWeQ WMV3AZdK2U046xt0RT7C1O6GSnooPco9iYCvJwbwiFg -m+KCPob0a84nPNorJHuDTjpcq6QBWQmc8+PjPzaPB0Y --> ssh-ed25519 uqg2jw UQoZQyUIO5oLwMAQI3MdPPw6+OusFCsQMCKkSiBCnnQ -83jp2AdcBI9p1bhPnk5eQSAAgNhfG4e6WAZK1hhpKXA --> ssh-ed25519 a0HhMw no+5eTnSbfSxAffuemm8O2P2Klqw28HXaanfK5qJ20o -uZtEg6bEO4LrFnMvr3aQBgEvziDcNBGL5Eda3Ds781A ---- 4xMxweR7fMCZRVUDGSc6R6UmtDI2VtmQcpiHlqwTdhU -Ŋ;JIǹ|N:J;$~CD$6 wz[S \ No newline at end of file +-> ssh-ed25519 xSWWeQ 2Sy0jjGNx25sEEsNHFCfQG3BEMEUCvMj/B864JQ+zCk +z5GKnoVfs11Y0z7SXJg7H0GqnZt6rw8oR7ui55d8ii0 +-> ssh-ed25519 uqg2jw mQ+s0M7gQyUkn7To3Kce7IfT4viC1wdkPNWdAJSziS8 +KBINYOpf+N8UBStsnVguOF+pYhJwv5s/IVfvMYtzz8w +-> ssh-ed25519 a0HhMw JJm4IVBDbAppA/9yfvWr5Z8g//6j27UYz2T1zr9CQzo +W/z7yteubTAll5fOS7wph9ADLf+oJz0aKhvIrqz6l5A +--- CaEIYuDZLtL9B2YZdxhaY9utBxxlFWwDpc+8IEhNFww +5jhЉ.5V_z:@lvo^hJ=3pz \ No newline at end of file diff --git a/secrets/grafana-secret-auth.age b/secrets/grafana-secret-auth.age index 40521a2..b7d2c8d 100644 Binary files a/secrets/grafana-secret-auth.age and b/secrets/grafana-secret-auth.age differ diff --git a/secrets/mqtt-password.age b/secrets/mqtt-password.age index 8e0b9d6..b8cb775 100644 --- a/secrets/mqtt-password.age +++ b/secrets/mqtt-password.age @@ -1,9 +1,10 @@ age-encryption.org/v1 --> ssh-ed25519 VfYKTQ VIcgl0K8TCfByw3ePvmRpzr3jiCSvaUpDTJcsi3osz0 -90OEuN6K3ZMMd819DLklg1K2YtfV42r+TM7BEd+yjIw --> ssh-ed25519 uqg2jw 0le3Ee/zXgRvR49ObKCKm4Cf5PJFqIjC02ImdHAyrg4 -+9j6RKYhEkQEXRSzHXUygNTYLo5u8XNknffjWMp0wOQ --> ssh-ed25519 a0HhMw TzncAEpgB3FDus/b73WimP534QF7aQydMy1eOydjqEI -fBPnnfFZKS7rpPkWrrmq5MMRpV2gfSRUrQjD66Pw1KQ ---- 63G0AZIezivRLdi9qFDvfNPGorwupWEBVu+6cgO1/Cg -QjӘn~ZEt%'}PP#|^^N' \ No newline at end of file +-> ssh-ed25519 VfYKTQ 8W3219VaPezn6ZQ4PV2R2K7HKVWB05qoRm2rNcns+Tg +4YQMErC28PLENAyg3kbcJ2cSleWz3XU8dbQG5WJey0s +-> ssh-ed25519 uqg2jw /Cszl1RdBO8yVMZk+xvid8hzKSYO4RjzdElUJzOrPFE +PuMBqCAjKmh/MotxHfQephg6JETLDwavgu4+n/RL628 +-> ssh-ed25519 a0HhMw o+5KoRd7Ay6snnXp4h455szXS4fscjiKoe3CdJK0KGI +LrDvOYCvfnmI3yHXQG3lODqkmWlFTK+qOJQIoTnWezE +--- CqGCYUZSUWV/DsTIKD1taejEHDjPQxw1VGFnS2qeZYY +JH)>AYʺCÑsUӯ]'@'mr +c~nE \ No newline at end of file diff --git a/secrets/nextcloud-admin-pwd.age b/secrets/nextcloud-admin-pwd.age index 4374139..e2e80be 100644 --- a/secrets/nextcloud-admin-pwd.age +++ b/secrets/nextcloud-admin-pwd.age @@ -1,9 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 S1eK8A iYqnaZLB4k05Y7EtgY8Tu0sSzSaFcw9tCwgUuBWCPEg -IEf056RsERZtoG2ylXJ+ZKATiypah/WYpq33H4fu3Bo --> ssh-ed25519 uqg2jw m9j5hY6tZpJnF9ojFsIl52gt5EqifDr3nVcAa9YTlwA -T00VddmIxA8ssjZKEVJQj+YRW4OnI95n1bkVlF4ajCY --> ssh-ed25519 a0HhMw +8Kn9YaYbdC1D5wWlUfG67h3L/xHOuk8t2NIWe4DkQg -ZwvNdJUE0hI/XfJXpwlByefsN/NwlfnA1Iqslr4+66s ---- orXwCTLcvSasnOZKN3trsK2UlTpkqwg5ldMJiOveWxc -,(m NuXN/!M&@ЁڒRo!߆"ʋ:- \ No newline at end of file +-> ssh-ed25519 S1eK8A a3TRUKXdAk5RbMtSzek98mbxsQkzMhhXdZ2ex2HI/Hk +JSMBbBfW1/zDF1GRqbOjZXfgPzKCyEcHSHFh4vFV8RM +-> ssh-ed25519 uqg2jw bVMnanOLSY2IztQhiqWrCdG1dF6ofyf2P4TMH5Dm9FE +MTv3edVC5KeoEf+bQy9qYEuegNXxZTthvl6J2Nx4rjk +-> ssh-ed25519 a0HhMw S1+WP1Wfsok4KhvQbsChyZKEJVq2HhR7XKaMjragLhY +mAuN6i7zJWW/t3SUg/dp86cr8ub7Nv+VK+ZYgO/7pSE +--- Vx5+auSoLAjdsStbANhvzeYoMJD1wrhKUeAgb9y5RJ4 +z59^p"' ȋg?2ɽH'> \ No newline at end of file diff --git a/secrets/nextcloud-secrets.age b/secrets/nextcloud-secrets.age index e77bd5d..9614425 100644 Binary files a/secrets/nextcloud-secrets.age and b/secrets/nextcloud-secrets.age differ diff --git a/secrets/paperless-admin.age b/secrets/paperless-admin.age index 7c86ecb..72ed126 100644 Binary files a/secrets/paperless-admin.age and b/secrets/paperless-admin.age differ diff --git a/secrets/paperless-oauth2-client-secret.age b/secrets/paperless-oauth2-client-secret.age index a81a7ff..358dc03 100644 --- a/secrets/paperless-oauth2-client-secret.age +++ b/secrets/paperless-oauth2-client-secret.age @@ -1,9 +1,12 @@ age-encryption.org/v1 --> ssh-ed25519 4sgwqQ yWrdS8RFHAu06yxUn8Nw8UiLj7IkClEj2afF3skAE38 -z9lYHYKa4/hQlJf7hX7QCSmmMfzCtsR9qRbeJCXkU/I --> ssh-ed25519 uqg2jw j1u8gHQXSAaNnFtFClKTaRaf1zDx27HOv9e5lQlcLiM -4YDZi9KTXEPQ0J7rBzEZUWAvnd7NbIKj80mKwycakq0 --> ssh-ed25519 a0HhMw 4Mm6ghiylneEl/dgF5Xa5NDOvUORHizneG1b9i1NMRE -+cYH2iUyZIUeYMsHTX9T8GqSZz8kdaPFd0TnY39DvPk ---- VvFzxjVhL42MKAFdf4pI7c8LVjY4o/KStn/2xUvVjlI -G70\cqܢR9r _/<9"//zfj!B]2 qgi B ݒ7rbG ssh-ed25519 4sgwqQ hC3B269th5ReQgeg/GCsIO2fk75DPT5zl7x5Y58XHCE +xnPipfLwmYSUBLORUSVJTUTEIGjGNTY7tEToEm6jEXI +-> ssh-ed25519 uqg2jw Kyc7GHI6ti/SOiVzxCND1lOg28hgVa95+VVrS7iP4Dg ++K+y5H4U4528aGiZiPjdGjrRLX+9S9CHeZa+yhPFCmE +-> ssh-ed25519 a0HhMw crLuKtAVbg/R98gcO/kJrvbJjQyLVHn6HZVEZARRujM +2a5Xy7eVtl8B730f4Jc5WHNf/sx30tvZvgPLdgy9Cjw +--- KgYGKI1vTqS8ouIvuTDrHewtpG9mslUR8epSm8hbQdo +-n~M à5 {Q"j5n" \ FE1G2 +z! +lWT7hs[ABby!<0<".*5 踰u# +N7]4e3;mGk=C޸jQUAP2虴 H٩ 37y[fNb \ No newline at end of file diff --git a/secrets/scaleway-password.age b/secrets/scaleway-password.age index 983daca..db2274c 100644 --- a/secrets/scaleway-password.age +++ b/secrets/scaleway-password.age @@ -1,11 +1,12 @@ age-encryption.org/v1 --> ssh-ed25519 PCrpYA FVQ/DJuuUM/gKjtHZMBujeWOKKxb3p3kCHKCzkWm5Cw -9XZ4PWaIfLZKeyVRLxE/3Cq1O4CSTe2LMGA8BOE9eDI --> ssh-ed25519 aichPw FBSB/6HKz20F0EpPPdQl/TdMbSwSTY85oe+kgAGtMis -FcJqlHeDBpH4JVDVSLB050LypaDOGkei3tRcAsLh+Bw --> ssh-ed25519 uqg2jw 7eXM1ioOx/7Aj6//f0ayj4YHAlCNfu46Rniv9nAVf3Y -KQ4DGIN0ehCgCq7Rb9dIt2h8JftapNTvma2ytpbQdv4 --> ssh-ed25519 a0HhMw 9zZ2tBmL7A7umg5pdjwmjRz9hTvk3sI/OY+cBoZ2Wxc -X2aI5neSKl42OfwsaK9zKpcTOdFaOMdx20fcdyabzXs ---- 1QcLSTnVfMoDBT1Fpfsn8YuXgg9VKeAmiuCIuTkj45c -H䜀WME%1BtG68%WU3Uo8q"q}ߘ쾶Bg `~ \ No newline at end of file +-> ssh-ed25519 PCrpYA bSUjhtk4uZsqq/lmxMRpr9XcgAEKSh/2Yn8PU3tHhlE +utRRFVT5kIOwC3kBy7N4CzYtU84/mxj68BpON5aillM +-> ssh-ed25519 aichPw 9l9AnEKSAHobxMYB3UpV0+K9dozySuMaXsalwsFXKww +9XWkKadHb6cOapv9dXKyaeeWJ8L7iNnmZ1hNnQMaF+4 +-> ssh-ed25519 uqg2jw 3EFt/MNI4DumIs6ibrlPkk1VGclToZWFhX/K9L0lnDM +RIGwh5+fttEG+X8OJAw+k+poCULqSecy5CiskujzhsE +-> ssh-ed25519 a0HhMw hnyx66aVLdc7UdWkko+YUPxUdP6guFZabjnOojulc30 +L+pTW3J/3rwL/NsH+b0EEoUtfITtePUyav4Pk+EZmoc +--- Uny8/4sU3uLTUzsuRiVEZWJ+0jhAPBW2Uc41v1LZGBc +0voPPhKn=r*pj +kWTB Je^rF2)pͫ \ No newline at end of file diff --git a/secrets/searx-prometheus-secret.age b/secrets/searx-prometheus-secret.age index 8a4f00e..3bce868 100644 Binary files a/secrets/searx-prometheus-secret.age and b/secrets/searx-prometheus-secret.age differ diff --git a/secrets/searx-secret.age b/secrets/searx-secret.age index 15303f2..afa9ecc 100644 Binary files a/secrets/searx-secret.age and b/secrets/searx-secret.age differ diff --git a/secrets/shadowsocks-password.age b/secrets/shadowsocks-password.age index d1238a0..3a11e5b 100644 --- a/secrets/shadowsocks-password.age +++ b/secrets/shadowsocks-password.age @@ -1,9 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 HvFEmA /0F4JD/DvJ1oKqgD8pgcmFjV47OFtlxVVKykGSPKBk8 -T58po3bVSsdLZw7BxFx/cmwKSB9xW99Frw4DJSA49YU --> ssh-ed25519 uqg2jw aTL2HsoLtMmx+vtfTfdEG4XsDyAbTdkOBVZeGkOZlhA -JbTp2D18C3TMLkm9Tb0LuIk12zNuLVG7TJf27E/v7y4 --> ssh-ed25519 a0HhMw jXxg9AtU1WOh84N9n9gHXuq7mIlcI1K30u+/uZ7MekM -8/igLPM44E5F/d/0BF4pw68Dgk2LtXt+/3kWfv8JXzg ---- QY7Ws+rrNVXNKtQAFRIanKB9OgadUPI2z4IkP+BeYus -b9Dg.62*/%A?8\Y{yviyT%NQLD~pgJ:9bT6y遪lƮ>3.vovD@ \ No newline at end of file +-> ssh-ed25519 HvFEmA V7Y4VIxRQq8tZTNL8WgPIcytQpC7+omuv8bY67ibWic +6efRJn8fFTEjpozAIJLvHerLSyUEDjiaTdpKKbQQuO0 +-> ssh-ed25519 uqg2jw 2pdPZYvx/n9bkwMUxl8RVVmOiaw6qbI/zGlfq5iSAEo +RS4Fu5Z6Njnblv7gkbUF/m3GOhSYomreKqbKp6CGXhQ +-> ssh-ed25519 a0HhMw wlL68en8Unlp6VpDxUbZvpfOKgn6x8JUcq9LC7MML3g +Bi4syv2mn7DfhdftfQKgEVGR1q+dziPBLqu8+UlpTYA +--- sPFviF3qK4rRCtOVcTyAllWQo6BxeUrQ9RQADvYlc/Q + ssh-ed25519 1nWE1Q rut8mPXnbciiBM7e+HKxZct1yzkmwdpInRXWNuoMPE0 -+g49+Iwn+/EL/Mr3W/bDjZ7bZjz+eInSAWSJWc2AS0A --> ssh-ed25519 l7h2MQ vPBg0mmLdJ/B5mwL0mDnWG5Ag3cnaq+/ZRu5jsu0ZBI -rB68xtvgwatWKYdTya/sbVVaqBbsc37LRyfx/kjpoVk --> ssh-ed25519 BFt3Fg 6As/iHTewwf47XSp4QxFvci5o725Ysx6fnwZ24jnxQ0 -YZtMk8PVd1v8GrGeNZAbx3dzy82aFeNNLeX1Gvv/ZbI --> ssh-ed25519 hhnUMw JpPsxaeu8VJfNIdR7+EBKrhDOyFm0/DrBu0VFnSvUH4 -x4gFPXYHb2YB6kdBGBPwD8GMDVXo3+wKNw/4vmq1dRE --> ssh-ed25519 Gwwkag 0VDVOBeOw+Ul8mMTevN/INepdKnfRP6527wlDXudNwA -s6Cv+5H86D2mN3e7BOlf61zhZLGzdrdJN0jS2BJlYC4 --> ssh-ed25519 qaHa5g 4qdg+1dD5R2NFWSSzeCbqwOpkA548p/B4bcm5ZkzWTs -9jyzUdyx2Q051VrA6fnG6rBNNHT/VYkN9TzBBtkm340 --> ssh-ed25519 FG6Lew bLMXsM5VhjfFSCoFoec9boARahIRxytj3dIZbT6tB2g -MjyOd/ErWQeIA8+qfnNPx7f4py4h+vYWzXENbBflJW4 --> ssh-ed25519 UCdOEA PNVpM7ZjlIDZC0h38bsynnk8y520DJdixAlFVxQNrUA -sCXQoeZdiZ3DzhIdn/7jpytY4wNoRCLYmRMfSYZYOdo --> ssh-ed25519 aichPw 8+8OROoVeYw4cqfbU9O25ARAce3K7e5m9GQhogeIExA -UBmOMJ2VknDMw46DySI00Ci0icKqnEOS14F5ZIO6RZU --> ssh-ed25519 PCrpYA 2/lziDYm3e9pgri6PGljcvePwzEZS/rfQpzb6Pxm/Co -+oFK0QB+unaSkXQykvu5ofLtp1u1L29kkIGDI1/HcpQ --> ssh-ed25519 kElbzA GIbZkEkxOx5XLLpBkoZbsnLEmu0DUpy2YQYSVXu2RUw -/7ZLpaebH8GDOmkC+mbqDRnc6ntA/m0K+BCw5eXwnRg --> ssh-ed25519 Ux2oFg lUIe4xkwJPi4jTF4kqXO8y+zUD10omdrKsyCCEWDDls -4Ke4qBOD+aGF3sX1NBfBRB+P2lP3gf343uM0h9had0M --> ssh-ed25519 EO5ObA IhkEUmls2jH2EKFMyLR1i9xeD9IvbbzT2eXabYfljVY -DzgH5xBUjwhtNIeXTWsknoX10jOq3BQjmcfIHJ+G4Ew --> ssh-ed25519 cQlmdQ p0kmLODWk0rOtcojmz/c3XzoROQtajcQeSlwyAECP1E -LMKHfTtfx+OCMX3JRdckfrRgxWRUTfTfJ7vpe5n5zkU --> ssh-ed25519 xSWWeQ VjCKZ6ax4/+6CCddxTpO0iFW4TZ1M4vv9s1U27nXYi4 -dtVcT6JKoM5IJ2GcrsPCADwllo3FTrd0UlqtoGnwans --> ssh-ed25519 svET/w 9EXFfk6yzbI9nvKCuvAJw4ey1FB/4gvCI0Z338iNgyU -mWGPNUERCedkIEtcANVgCq5SdnDDHLtLdjPHuulZDL8 --> ssh-ed25519 S1eK8A wZskR2q4AndtKH77K/4r2UzqjZL+DMF86MT+EHm6OmA -0IPk1aRHuLLGjgbmF3NkqgOgDvKF1so/K++6bN2WAQI --> ssh-ed25519 4sgwqQ 32HnfnPT2cWcynhLffqj3UFS0700gxPldGms1V+L3A4 -ed52hi05sSlxBFvoUjB8/jksFsBmxbBqMuzavzrSOrY --> ssh-ed25519 CuqlhA C9WmgcT9JkizWYsY9yHaTd+nQdzeznI9NddwXXHRoSc -Na+qxdfP4Y+1Rw3sp9iKGl+i4X/qmU2f3m3l5ehehxo --> ssh-ed25519 HvFEmA ICF8VH5wbSELTxdU4IT84lmoRG3f3JKLKqSsYVfK0UU -mN1wok3o84YqoLCCKWJB6G8o3wWWBDlUEf5mOO0VEA0 --> ssh-ed25519 9GYwCg yKyS0g78hb9321KEnwCyVvGh4WxqZB9khiSm842rrU8 -2ZcS+CvKIOhHibmEYR8+d7V29CtKEQ7Hjhi48LXeT7w --> ssh-ed25519 VfYKTQ TEmWp+H791kcbrVRga/zxLs223TAl5ovbdYQKTqStgM -dbzdt1ncw5Jt3Ls3hIg1IYIAlA9gUtwlFTMtG0AUzK8 --> ssh-ed25519 uqg2jw t+PWWFrsYiWjYKO4nr9m1yfPUJO80d8Gn+LF+fG5RHA -Hkap5/4sQElLeuO4ly524OlID1h+VFA0OIva38sTA/g --> ssh-ed25519 a0HhMw oMoK1Sjt2ffvamqWQ7V6gngrSJjtesfhBdhTA08isAY -KRQU0EMSaebI3cJ+PSDdjARsTxZhfuiiSpZcrXiFkDw ---- 3W8raEJgUnjXKSfbIHCu7a5dQ43fURVQOsK28HDJQNI -;tQGv ssh-ed25519 1nWE1Q L+jQU6SuzlBaB2eBck5Ywg5lrKVkhfNV4IzwGSb5Cys +VUIzjIEUOVqFLVxr8YM6vIixtRQt7JqmRuheW0GPrGU +-> ssh-ed25519 l7h2MQ +4q0jemZh6gM6/OFyLwQnBiBEYlzYDrEf0xKBPhQhiY +YwSEfFwGos+W9x7pV/wMPiJkgvEpFiRcdFqRsWoBjIc +-> ssh-ed25519 BFt3Fg lNQWnsO+XmQca2vc4RCDUa10RA1U9tHeVnpC3AFA308 +ulbwdxJ6RnobCn2fGjVaTld3hw6XacDs5nxV0aSy8MI +-> ssh-ed25519 hhnUMw LNOU9/M2VkvQLhdhqpTeQG0tbit1qUZZVJAOtkKIsx8 +8x6dylDyNcX7MvBKrdZI5GyU7OtjwSbxrrclqmhXawg +-> ssh-ed25519 Gwwkag +bJyI2sdusKt90LZyDPR2Up7Vp1lIGSD2Gf4OSRnuAE +Un2/kfcfSP/TGhkLRb4vcekLW11o5EJmf2FYB5Sc7B0 +-> ssh-ed25519 qaHa5g jaMLmRZTOR3PRtJnDaGNqzFuBZjQxa7uPAT3MfhhyEQ +YG+yDXy3WVxsmJpPsA5KujJ3CqdtYQiVrGtHJy8epqc +-> ssh-ed25519 FG6Lew EtmSS3LUaJ0O5sRp4eXj6WcPUhpJg6eIDzL4ytKE8Cw +RhWerbOVXMLuTy/vDHG2AfHPObQ7kJBNco88KyrlfYg +-> ssh-ed25519 UCdOEA 6icDx0EpXiRAG+W72DGfOJnv/bOrHLYb9idZzu5dCHc +uJ6vDTJrXKjx5kMrVgqb6r56N6vzSXQtTnAqG6OdLZE +-> ssh-ed25519 aichPw HvlZa+X5OzJQRPXLcdDvMi66s+/YAPCGSsDIeynTP1I +0I/fpRPP8/mMKr+i0Zm5zDVto50e4J0QI7dnNkebubU +-> ssh-ed25519 PCrpYA 6cVdMiRDvj+B1KC4UcVqKHcpU9ZfwVbv5iY3cIbyjQs +41BdcDNpwHeLVsDpeF8juOCNLORo96+jyp0x6rXpw4s +-> ssh-ed25519 kElbzA 0m+LCSiCP0JiYIeU++cSymFz+OJzCySlHhWpa7SN414 +kj6I/wVprksObmENKqy8ZLLYcc3kcmrcivgv7sLaI48 +-> ssh-ed25519 Ux2oFg dH4HSgtaiqFOwHqRIWT6qrKslzT/2nSN66Er2BrshVI +0qn3cnwFhhusFEs8wtAA0EZlvKnCOcvt+kzKUads82w +-> ssh-ed25519 EO5ObA Q6COGCoPxNpObdk1OwdMO37YNZM+PW1P0syfCMiOvlI +PQcSNRcPCh0UFTHMpkdWQwaQv53woNy0S/fzhRnQuwk +-> ssh-ed25519 cQlmdQ sLt9mQVQA3CNWuPjT/cISKpiwypoaoFIeo58q3yd6VY +jBojShmGKkVpAyCvBF57VulpdeUeLoH5W5PPv1M8r1c +-> ssh-ed25519 xSWWeQ 2l+GkVMcEvsrEA7qxzl372baCIr3Xyfv+1sNn8o/FyA +Cr6WXP15bm5BnGLpJnsgQ0OeO6WmFuFAvN6NJb2P710 +-> ssh-ed25519 svET/w f4JmsQWroGyV8CmGf+loOX9JdpF7m0b3voiACGy46iQ +T2O+UrRpL9s5pWKZ47vziIRtciO3Auw47wvSH3TQKio +-> ssh-ed25519 S1eK8A AunjDz3h+0coZK06ZrD61YFdxeNJapyB1SZSu6xpUhs +B95EuomuOyLT/lPI57OWRCUxCuEm7iHHvD+PH0h84l0 +-> ssh-ed25519 4sgwqQ EZUR2LeFbBmS1M7IYu13xi4UW3Owj221q+sO/9QehWs +dFP3iFB549CS/bkIIMwLl0K3YWiJYUtrZlz+ZSPAhtA +-> ssh-ed25519 CuqlhA 0/mH8NXC9xKiOkoyZZhw6xXSuMpUZegC9vf4UmicEjk +yI9unLwD+0I51sEzxcRvL58BAQdG/h7BRV7MtVrQOGA +-> ssh-ed25519 HvFEmA TyEteAKJGh77sUsxt+CF35GouBrFftQH7jtoqGXHoVA +p4Jw2ntaN33bCubDTpvX7PIXQ4xz/RQSzPNuxTxjSTI +-> ssh-ed25519 9GYwCg rUqmGpr7CGEzzPtaA2sXa91v6tgbxRV96cunCBskbUs +uxq8zDYC0yXl+D4zW8p5zXxwdybkFndf5uizb4ocjZ8 +-> ssh-ed25519 V2n9Rw K1NLZIXdoInaoom1HGgrjrf210QgVQ8qYiwuNqroyD0 +mRusMjjgcV75c6TK8UjB3uU1D+MQQWCDr+ss8WBOC3I +-> ssh-ed25519 VfYKTQ ktLl4bMWBW172w70uLAks3zrk6BUxi14iIsvK6vRH1M +acMFg+GCcXEJjWX5XxtZwTVNu6EV2EJ11UO2LEXXt2c +-> ssh-ed25519 uqg2jw a64Vc+OuFabrOVfCOtSrDQxN2NSiPMB7w94exrsKFCY +Hd6/+aKtHt6/0m+C5/EEmxfDrGr442DIO6TEkbQEn1g +-> ssh-ed25519 a0HhMw Z6n8zUTKBefeUc1JCxOdZQ4fv3l+uR1rBZUQP4IhTSk +/WFvBhETc2QyPskbDTxoMS4IEXLPBMTqBzWRURPygT4 +--- ZDAA87gLlFUx5qOzcpF5mDVPg6o7Hse/7brzFqIn+Gs + ]k BmVTC0J-8+2"*׾m5_J~U|H- \ No newline at end of file diff --git a/secrets/tailscale-authKey.age b/secrets/tailscale-authKey.age index 9675fa1..918efa0 100644 Binary files a/secrets/tailscale-authKey.age and b/secrets/tailscale-authKey.age differ diff --git a/secrets/vaultwarden-admin-pwd.age b/secrets/vaultwarden-admin-pwd.age index 767c8c0..c747a63 100644 Binary files a/secrets/vaultwarden-admin-pwd.age and b/secrets/vaultwarden-admin-pwd.age differ diff --git a/secrets/watchtower-secrets.age b/secrets/watchtower-secrets.age index 9c2e930..8839508 100644 --- a/secrets/watchtower-secrets.age +++ b/secrets/watchtower-secrets.age @@ -1,11 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 UCdOEA 7xuPrqls9HGEinYuIuEPnROxZRxwORxN/Cv4m4cMdDQ -dG8ezg5j3+c/2pqNGmn8PbugMy/oA9UZt9K6OFpHFjM --> ssh-ed25519 uqg2jw VXgLF8qzjgDnZbgHehz13vIF5YaW+uyJmrvPYr/iS1g -l5xM2Y83M+T3nTzJCROHSC+NKLrl17pyrzbI0W38R4c --> ssh-ed25519 a0HhMw l7AS3TtBZeOq0Jy8zNMddNS/i5ptz7CxsifTBk0dfEI -agVa6lb/p7wVxZg3nri9KosPuDrUBP+d5Co8z+yIDxs ---- aeHJy0YK76jVKzQ9VX8yUGMzjlNm/nSXFBb2/9T1/mY -*ԥ =sN63B^'Ԑ5ޅw; ԀRo -5/cx%c$I4Dr^ɿ?cVB[ Ե٦RA -ɍu@F&7%D@&as=R u2 \ No newline at end of file +-> ssh-ed25519 UCdOEA 6g+N3SqaDTJH3JWUhE2l1GIrGbaQodwjnmAcPVWs4j8 +3OfHh5hV7P40GvUYHuPL6g2FGTFMo1XHJLbqkBepKRQ +-> ssh-ed25519 uqg2jw uSjMpcazqzn5XbSamA/7TK2BgMr4cBsdIEO0GqrPqG4 +ekx5teNzNCRmGacq8i37dicNWKf24Xuq72N4VfV9obI +-> ssh-ed25519 a0HhMw FVC95zIPJWEUKFjieClSi7++ReomvQJ14hZyFpifFyw +0/XFqI1PI1ea0rTzGckIZL9SjCoviConYKLz5z8Vbfg +--- 9oO3EXu8z2zAfb17KYGZW9F294A7V07onShpd341gVo +2Y?VЭ"2<bә׌uKSV2X AϜ^7jmOKR} #hW MfI;?0@s&F].-6F׺TRO`JΔSڝNzZ/ \ No newline at end of file diff --git a/secrets/zigbee2mqtt-password.age b/secrets/zigbee2mqtt-password.age index f9f0712..6e98682 100644 --- a/secrets/zigbee2mqtt-password.age +++ b/secrets/zigbee2mqtt-password.age @@ -1,10 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 VfYKTQ 6Py9mXS8y0SPxhMC9+Pv/07aQd1cJjU8YCXlD4VRkRA -3ufRuZnrcz0ISAxlPh0JnNK2SR/ms4rspvAlrcCaf1w --> ssh-ed25519 uqg2jw bS8DxxRr0n/oLFdFS0jk8RVFzIDsQDmIZzhIrZH2HGw -6L0tAR9ax+YXZEGmCtxxZUf61w08Tlq3lp7I5RVPV0o --> ssh-ed25519 a0HhMw V59mE2aUvmwgB27Ci9d5/c5s/LK8CoI6C46tyB+6M38 -uWnbe1XS1VeSmsc7FsMt51DucK8Fp4Apaex5vz1fPIw ---- V5xPOO3w7QJ9MpWu2ivRpEqcHRHbfRLGZdH6+4cSKzM -$}``vglK~>ue -+~a|x*Vśe\]kw^e`oqjɳ T4ul \ No newline at end of file +-> ssh-ed25519 VfYKTQ +hcBAbQKgyQQ57t03q7EEdnwwMPfopPAA7dQebf/3Bw +DdUak+jCI4ZvQhSpRWhuw4AQvOi73aS2RMLATcQeEag +-> ssh-ed25519 uqg2jw Ige4LXJl6J9S2hdCDjEggTGHplmaMizgY+nFEG0Cezs +BHXJkoPYbkupFAE/5YywG+7VVOZrfDjOqFymR0iJtH4 +-> ssh-ed25519 a0HhMw ZupYdXGzHK0d+AqvQ/ymaFeR5tiJ7j3G84bjlIhGNxs +ebgU0dm+Spet+zcaPJhzpiRi4q8tHEn0vKLM/Bf/zXQ +--- nfewyi+9+pxaWUxtMIE2FwieWodTgFirvK0YB1dZSyY +t8xgڇ\.wK,2䕇`9/=e!Dn)*i˕ڱLc+6LS%.rpY} \ No newline at end of file diff --git a/ssh-keys.nix b/ssh-keys.nix index 79570df..9dbcb3e 100644 --- a/ssh-keys.nix +++ b/ssh-keys.nix @@ -29,6 +29,7 @@ rec { ilpost-podcast = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHo3tGrspZlSVbC1X/MHFFwDGj8G8+ZrZihU28DkbJEh"; colmena = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOOVg0/MhkyTsZBITT0nZvH0hWskPJ7lyC5Mw70duczq"; collabora = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICSaXqZ+gqkbRJxsHRvCXw9U2Zip8YlPjbEIgPEzevO3"; + zeroclaw = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFSaWvSeZeWueOJ8nG/H5M0qbsmV+ArIgGi0O1xO3wXC"; }; # Machines able to provisioning other machines