From 35ff85a51323e4a769505bb96546fb3a4da17f00 Mon Sep 17 00:00:00 2001 From: Flake Update Bot Date: Fri, 30 Jan 2026 23:00:57 +0100 Subject: [PATCH 1/6] chore: update flake inputs 2026-01-30 --- flake.lock | 36 ++++++++++++++++++------------------ 1 file changed, 18 insertions(+), 18 deletions(-) diff --git a/flake.lock b/flake.lock index 077ccfb..b8d753d 100644 --- a/flake.lock +++ b/flake.lock @@ -39,11 +39,11 @@ "uv2nix": "uv2nix" }, "locked": { - "lastModified": 1768220016, - "narHash": "sha256-jIYGoq90mDkeVEM9r9CHa/3H1ByYp7ZkE0IRf+haysE=", + "lastModified": 1769348998, + "narHash": "sha256-nP4gw7bdwYGa+TQEvpMrYrp6/wsGklrC2cmIUjP4HNI=", "owner": "nix-community", "repo": "authentik-nix", - "rev": "94c544f6cd51735728391c8e9463efc893ddf26b", + "rev": "eee255ff2ffd90477889740a56ee75cf7020886e", "type": "github" }, "original": { @@ -55,11 +55,11 @@ "authentik-src": { "flake": false, "locked": { - "lastModified": 1769201216, - "narHash": "sha256-IGtjOOtjJb8qoVC5HAq2Sb8VgdW3PjNFamNtwHqKpEY=", + "lastModified": 1769532389, + "narHash": "sha256-DO7wfgQBZ2uecbr+nptSHbz06ErT415SDucg7JFg7Y0=", "owner": "goauthentik", "repo": "authentik", - "rev": "b72e3b55a0d7b9873231b2f0a845331f1f8d4db7", + "rev": "aafb7cb7dc709eead634b5570b01d9e04f272d7a", "type": "github" }, "original": { @@ -262,11 +262,11 @@ ] }, "locked": { - "lastModified": 1768949235, - "narHash": "sha256-TtjKgXyg1lMfh374w5uxutd6Vx2P/hU81aEhTxrO2cg=", + "lastModified": 1769580047, + "narHash": "sha256-tNqCP/+2+peAXXQ2V8RwsBkenlfWMERb+Uy6xmevyhM=", "owner": "nix-community", "repo": "home-manager", - "rev": "75ed713570ca17427119e7e204ab3590cc3bf2a5", + "rev": "366d78c2856de6ab3411c15c1cb4fb4c2bf5c826", "type": "github" }, "original": { @@ -360,11 +360,11 @@ }, "nixos-hardware": { "locked": { - "lastModified": 1769086393, - "narHash": "sha256-3ymIZ8s3+hu7sDl/Y48o6bwMxorfKrmn97KuWiw1vjY=", + "lastModified": 1769302137, + "narHash": "sha256-QEDtctEkOsbx8nlFh4yqPEOtr4tif6KTqWwJ37IM2ds=", "owner": "NixOS", "repo": "nixos-hardware", - "rev": "9f7ba891ea5fc3ededd7804f1a23fafadbcb26ca", + "rev": "a351494b0e35fd7c0b7a1aae82f0afddf4907aa8", "type": "github" }, "original": { @@ -376,11 +376,11 @@ }, "nixpkgs": { "locked": { - "lastModified": 1769089682, - "narHash": "sha256-9yA/LIuAVQq0lXelrZPjLuLVuZdm03p8tfmHhnDIkms=", + "lastModified": 1769598131, + "narHash": "sha256-e7VO/kGLgRMbWtpBqdWl0uFg8Y2XWFMdz0uUJvlML8o=", "owner": "NixOS", "repo": "nixpkgs", - "rev": "078d69f03934859a181e81ba987c2bb033eebfc5", + "rev": "fa83fd837f3098e3e678e6cf017b2b36102c7211", "type": "github" }, "original": { @@ -407,11 +407,11 @@ }, "nixpkgs-unstable": { "locked": { - "lastModified": 1769018530, - "narHash": "sha256-MJ27Cy2NtBEV5tsK+YraYr2g851f3Fl1LpNHDzDX15c=", + "lastModified": 1769461804, + "narHash": "sha256-msG8SU5WsBUfVVa/9RPLaymvi5bI8edTavbIq3vRlhI=", "owner": "NixOS", "repo": "nixpkgs", - "rev": "88d3861acdd3d2f0e361767018218e51810df8a1", + "rev": "bfc1b8a4574108ceef22f02bafcf6611380c100d", "type": "github" }, "original": { -- 2.51.2 From 2ee91cba2c44b070df557afea3445b77137efe1b Mon Sep 17 00:00:00 2001 From: pazpi Date: Sat, 31 Jan 2026 19:05:09 +0100 Subject: [PATCH 2/6] Add host public key --- ssh-keys.nix | 1 + 1 file changed, 1 insertion(+) diff --git a/ssh-keys.nix b/ssh-keys.nix index 70ad24c..1f1d57a 100644 --- a/ssh-keys.nix +++ b/ssh-keys.nix @@ -26,6 +26,7 @@ rec { n8n = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP18IdsIxK7EdIOLSONJ4NA6AfLnM/3NkR3+OCDvJWXJ"; librenms = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM/dmfOVzj37ZYwLTs+jjQUQYRIgvW3NrtBDsr8rllss"; immich = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF8H49AYwKmHLV5QwgqNjlFRhLVg/k3/kKR53/ihz/cu"; + ilpost-podcast = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHo3tGrspZlSVbC1X/MHFFwDGj8G8+ZrZihU28DkbJEh"; }; # Machines able to provisioning other machines -- 2.51.2 From ae49cce015d0869f9966a09e07409386840baa59 Mon Sep 17 00:00:00 2001 From: pazpi Date: Sat, 31 Jan 2026 19:05:52 +0100 Subject: [PATCH 3/6] Add Dockhand --- hosts/caddy/default.nix | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/hosts/caddy/default.nix b/hosts/caddy/default.nix index e69612b..b5a3b72 100644 --- a/hosts/caddy/default.nix +++ b/hosts/caddy/default.nix @@ -182,7 +182,12 @@ in } { subdomain = "maps"; - host = "http://${p.hosts.portainer}:48080"; + host = "http://${p.hosts.portainer}:5000"; + domain = p.domains.public; + } + { + subdomain = "dock"; + host = "http://${p.hosts.portainer}:3333"; domain = p.domains.public; } ]; @@ -193,11 +198,6 @@ in virtualisation = { proxmox.enable = true; - portainer.proxy = { - enable = true; - domain = p.domains.public; - host = p.hosts.portainer; - }; }; }; -- 2.51.2 From edb41b3245c896dcf74ccfaff4eacffdc2b0e533 Mon Sep 17 00:00:00 2001 From: pazpi Date: Sat, 31 Jan 2026 19:05:56 +0100 Subject: [PATCH 4/6] Rekey --- secrets/arr-secrets.age | Bin 759 -> 759 bytes secrets/authentik-env.age | Bin 644 -> 644 bytes secrets/cloudflare-pasetto-apiKey.age | Bin 560 -> 560 bytes secrets/dns01-admin-password.age | 17 +++++++++-------- secrets/dns02-admin-password.age | Bin 446 -> 446 bytes secrets/exportarr-secrets.age | Bin 465 -> 465 bytes secrets/firefly-iii-app-key.age | Bin 465 -> 465 bytes secrets/forgejo-runner-token.age | Bin 479 -> 479 bytes secrets/grafana-admin-pwd.age | Bin 446 -> 446 bytes secrets/grafana-secret-auth.age | 18 ++++++++++-------- secrets/mqtt-password.age | 17 ++++++++--------- secrets/nextcloud-admin-pwd.age | 17 ++++++++--------- secrets/nextcloud-secrets.age | Bin 557 -> 557 bytes secrets/paperless-admin.age | Bin 455 -> 455 bytes secrets/paperless-oauth2-client-secret.age | Bin 561 -> 561 bytes secrets/scaleway-password.age | Bin 579 -> 579 bytes secrets/searx-prometheus-secret.age | Bin 607 -> 607 bytes secrets/searx-secret.age | Bin 594 -> 594 bytes secrets/shadowsocks-password.age | 16 ++++++++-------- secrets/snmpd-config.age | Bin 2445 -> 2555 bytes secrets/tailscale-authKey.age | Bin 1044 -> 1044 bytes secrets/vaultwarden-admin-pwd.age | Bin 665 -> 665 bytes secrets/watchtower-secrets.age | Bin 545 -> 545 bytes secrets/zigbee2mqtt-password.age | Bin 479 -> 479 bytes 24 files changed, 43 insertions(+), 42 deletions(-) diff --git a/secrets/arr-secrets.age b/secrets/arr-secrets.age index 3c4b1b706b7d18833edc9fa283c6e1fdb458ee1e..86563cc93c77b1feaac62e106dfc1bca1ebe0ee4 100644 GIT binary patch delta 707 zcmey)`ki%xPJL8frjJv;S$Mv8m{&?(aIU3~qeW_}p}uo*o~Nf_fw!xHuai@zetBr9 zBbR%HcDbpOc2!hZeqvC7Pl{hisYPyNXij#ylbLpQg?E5Sl%aRHSx#xB0hg|wLUD11 zZfc5=si~o*LTO>TQC7KvNlrybu~%}bcR{{Wl4DY6h+A%QUTJngWmH)~QBr}Mc6pj} zeuibTf0Ua6mv?eNRAzEnrD2w3rC)(#l0kWqo2f-!hKrMBmADqZNk-qt1g+3L&mQ}%}$t5B6&W3r$ZWXzaT%A5W%J;YMXDzs2`tA6i zlu$<2XKvU2O|ao=^lA(y{f^?CwU+`Db+EsG4p_oWshq*ES|EX)^mXH*gY5 zU*Q+UkF)RmDCW8T&i1C>T)xO_;XB>E9$TL5Pw<)DaPLH1+^q*I?D!5uzP-GDYfh%y z%K5RTKO^c>W+4bZ5 z)*j9W={tDkR{Xs1mN!{GKbh~Ij%mlUX+5(qYBR2$ljk0v8Y&yd!=L%V>FGwhtqqn> zOdZn?<)8dm_95s-Y{nno+0)E==S+2*U9jX#jdu(0y9aDPiq<{9)$%-hCHsu6^PgRw zST{Y2(Id@fo5xcZ^SxF=aYmWnsy?$NHO~I3eW|*kz|WUGcEvJ_>)RfBI^=6^5#o@j zVOt(AdZqUDUU8mRzcpBu)U!=gqJ<-ME`G1tD4?9ipS+a&K#;(eZTT*d?pp(0&d!?r F7XU7yBPIX< delta 707 zcmey)`ki%xPJLxzh?#|RifdtLYH?9yshMx7c9OSKUSgt?wqt}_T3}?hQHHj2US?os zK9_fdK}J$ZuD?ZActm87v$LTQC7J^kV!^jN=B4_l1E6MMTD`Br(0F9VW@9mu~DIRYH(CeMS)?F zvuSW{NpMv@S5io5h?z-Hj=sNpafzpPm8XHHp<%LVRavffWR!NHPicl{c2tsAqH%Ke z#E;_juF1)fh8BM1h5=c|KCY#eMR^`MB|*W#Zc*Cd?j?clIR&0Bk@~4cnW4p8-pQtJ zVTsx~p&3;nY0fSIDc)`-ZpQwFxfQOJ{#9W?IezX%K~6@MrrDufy1Kdw>E1z!MOBr- zX{p6gS&r$3$xddDAufJNhT$2ddFH9c=~Y4Xjs?Yj8GaGzT$kpq<-Ty|_Cd=let!!# z+s;an3zqDf<$Yo4wEfW$m$S5woZfDOO5>ZtTPsiAS{!+83SXmxhfl$^@9U-=y)SKXtoF`>*sxbmQyfJv zP18QP!Y%vc^<`)MuQ26UwnZ5AhW?o@p0(s*$H(Z85*m_QlMWPdRd_pF#yrXVk5SL|n2krC#U%%y9mP+Xj$ zo0?)|YHDbyP+FL7lvS>f5$x++;+>&ykYZ{WQJ!I3;$|M0ZekkjSW#LU8R1u~uWjJr zYV7IarG|p|NwWwz*e%nP-5fUzoFBNO_j2k+Vsjftf*8WMPn_sgrA^o1p<$L_xAy zK$eAzdzMF$Q%FugP*}2mdR}(9SE6fLMM+^!d0tkqfp=0xWr!!2uCA_vlW$p)zL$2C zpL2nEs#`#4re$K3SCms_uv1!MWPU|?nQ>0Ne~3?ji-~74*Kf{?u_iZr51v&qxIEM4 z@+JlGe08By(`LoS2(aY{`9#K>!P^mV^fRB zi)&5aUs-q-@~gzmocQO0vE5A32sJIA3$CYE1zk3@53TIF)Q=Pq~tJFx@+kZkIl delta 591 zcmZo+ZDF0DQ=d{~>>B3kVvt)Ls9jJTmFK6Q?UxvwWt`?3mK^Ep=pRvFlCPg$kmwtp z&J`GHoNH|4ndg)0Q4(a4=3br^YGIL8nVRO8Y~W!S8fcbXXzWvH>1~-8%B5?kP+Xj$ zo0?)|YHDbyP+FL7lvS>fUFug=lwD$xQDR)=p6+az=~nJtT}Q zQ4|{HV&E3YmFMc86lk7X?&t1ZQeIGMX=d(`;pt@VXl8Cunx1K7>F<`GZsg{tondY; z@uPTsrL$MLSy)&~hDm^TaY2AtSw*o)S!7;-VNju2uu-aqpHoq>zgbzCuaOCtX=p)| zeuZO}n{iNLsZUx~aafvDM82IBQn zWom`H>yoQ8+M5KvSch@w%spz$wq^(Oq6-@)hU;H*U)1wo#jV#@e0z!eyW49TZ*Z~b$O12a|Kjr>VBI;{V@jBHt`+B5zdBp($2VLe^ diff --git a/secrets/cloudflare-pasetto-apiKey.age b/secrets/cloudflare-pasetto-apiKey.age index d1ec549d7722b121454ea9b50a05fc05d29dda5a..550f274b5d82674d08fd0e2d7e112043d54525be 100644 GIT binary patch delta 507 zcmdnMvVmoSPQ784OJ-@Ri=j_NVo+6ONq&x#r$=IGsDZa>U{0i^nMt9mt4D>SMWUr^ zI#+6?zek~oYo%eXV~AmileUSUMNUp$dR9)3V^xH&x2cI|RC$`QqpOK|HkYoQLUD11 zZfc5=si~o*LTO>TQC7J^nOT^Jfk~N}k#}xURB&oknwx&Eb5(I(MP*(^R6s_)OPFPp zduhI@hf{7OmywB6WNKM?SVd`tN13;AWwLu-NLWU&pGUr9Xi$1iT1i=2Mv8@nX+~A? z#E;_j75VvDWflIB!9`^Tt{$F&{<*>B1`)my-hR2-!KJQ2&S`mmiJ>0ZCAsNbK|bb| z#(_qLsrt@Q{!Y$5#pWjYrFrHqK4xwf6-H^6iEfE01z`a`20@-&y1KdwC8nmqp%ulJ zd0A$O-sv8WZoYn&?qwCmQGrI@A&J^X#ir@?TQC7KvuXmD3fM-;ZcczhJURipQv0G@4p?+>!p`Tx>t4W1-RJmV3 zv5&ENsr@nvs z#E;_jmZqkm6%kdb6@J>~uAX^Lj;R6up+Sj>W<}a%zG)U-rIEfKX<3ziW{&3mK3?g?iS9+Yd6vb-+S!g#C5Gu-y1Kdw-j!8mZW;Rd zVWvfimK9YM>As ssh-ed25519 qaHa5g JDYajBrgbhmlxlp6BOYmayavSBD0kkJpCHvckczl2Hc -Vea1sj6nmQ2VU+5Kf2M02BcDLS+vWDqjsvLzruSHKkE --> ssh-ed25519 uqg2jw uXzaoV/Sq3Y2DQmAxMyOtP69WUEWQj2RcCS0VHnrbU0 -QYJD7NY/hdIzfyovYIHz1b2JSTzov+8MCoNAYkeOCK0 --> ssh-ed25519 a0HhMw hm8GkkuScZiCM+jY6HEZpPlzQpAJ5NxMMMoGl/oCwQ4 -/sGmc7XTdXyxgScF2huBnoho38Ie3maw4KHHHDWkiRw ---- U5Hy5/jK+Yej2y1hwbM+mIpxmxraYdwx/ka2EduPCek -,`~Q vHҝ2|5Oan_Sg \ No newline at end of file +-> ssh-ed25519 qaHa5g r1s6gQZZ6spXDa3YksYXbcYtwQxjYCnYqRlL2b3shzc +gFyNsuyXpcrhKKuXUQnKVvC7rAZaoJAALxV9St51F7s +-> ssh-ed25519 uqg2jw mAExf33ZWQC/otjOlponu8aJlVlqpZH5w7R1C+xBUy8 +G0wDMc1j8xEUWlA+Om7rCJwN3uuPLr9mgM/ZjqXSBL4 +-> ssh-ed25519 a0HhMw trAZZw0oVhlecjdN13R2aGXKSxE4c/LXELT6i+sKnQc +++dsWaAUTPZqZb3TqggDeLjErh/8Wv9PnLp7/j/13Qc +--- NLfCOJgGIqI3vCrRs+4pQ2gqKkTkVh/VK4O3PxnNiXA +T?#0Q[@_)KfK}9Qݫh +7)n \ No newline at end of file diff --git a/secrets/dns02-admin-password.age b/secrets/dns02-admin-password.age index 015241e0753b5709fc05bd8f6205346db326a14d..55a0142c54b69cfd2fa9ce6e3ff2227edfc2ddd3 100644 GIT binary patch delta 392 zcmdnTypMT;PQ9mgK}v>GwxxDTfs=W1XjOW6QgWhkRbpC7lt;d2W~hHukYR+et9wvo zK9`%hdr?qeq;IaNWpZ(aqi1-oQB`1mqKA7%UQo89se5s$Yl(|#g^N>>0hg|wLUD11 zZfc5=si~o*LTO>TQC7J^PG-8dseffeMTSvmM7m?Xkz1OPMQ)OJct&A(P@zv%YEp1W zQn`y!VPcRkS9(CEVN^zyNnt^9Mq-h%fuFXIV^~IFKvZIwpMQamNpWyql|fpVv0IeE z#E;_j$u1`4CB_CR{$9oz<;50-CWT4aiO%{}WjU7VA*R{o+LjsN-o7EmA)%pM1%|1` z!8tD8hG~JmMJYxRWhqI;CMAi!Md?+(73uk=l@TVPj+KTMp@r#Oy1KdwY1&a)Wd-`i z`4Pzl0bZeA#-2&}`k|Q~&Jh8g$w5U~{^kMZnHE8oUL_&vT&vfve-@^{%6#pujy2B@ moLpR-5|#C;t7K{*`vb$?8S_ip4A|uoA09rv-X~|b+XnzNCW~|c delta 392 zcmdnTypMT;PJMofrE{1^mRm|rd0~d1b8@kvlc{&Op>cSHn?XgUxp!umVR2??fmw2d z1(!usaGASVd6JuVUb$0Mu#cl}fw5tfZ;6*@vVLxMpmCIGflsN0TdHYRK9{bYLUD11 zZfc5=si~o*LTO>TQC7J^j)$8`Rzzxue|DK!epOk9ft#hVNuGg=uUT@qfv>TnmszEm zVY!ocPHI>=S4ysDN{E}KlX`56(0-bLod#f6nld7%Yn-WBPExrG5~;mJv9MIn(~>6WgR zLB(bfDV`~*P9;%}iB$$^{#i-kZr-NBA3fgYh;y1Kdwc`1J36$buQ zsTMg=p#_fGx%nkVLHYU4fyLhLrf$Ji>E>zXMahod+WO{!TsjP#+Z+_-`h<4`=j=VR l<`grdn$O)6+N)0fvewW!wC}L1Sd=yEfq<#z@$Df}4gitVgCzg} diff --git a/secrets/exportarr-secrets.age b/secrets/exportarr-secrets.age index 52f22407f38dba89c6949df1f9f6b4a0538f4184..544c5d4a3a9eae269d7343e5fe85eb44e7c564b6 100644 GIT binary patch delta 411 zcmcb}e35yAPJMc&xqC`RT25v_pqp<}R8p>qpT28RWTl0d zBv+bYdS<1*c|}lier|GQg|>dOS%{0bn@P4~nU8xxSXO$lPqB|%xlf8)B$uw8LUD11 zZfc5=si~o*LTO>TQC7J^foFNSnW3S!VR?~RQDCxuh+9}mltG?*MTBQYR7G)ql&e8_ zvR`_5h_O>LmuFC>e^hFcS-D|uluvNFab~JXd7gKvZ>CX2L14bNzl)=Put}PGsBv-V z#E;_j75*iq={auYe!-5;d9DG$24)53?nS;%6?vsmmD*Kq`UOGmd0B3jhHjo*`bNH% z$wu0~rbgywdAXKR7WzRs>4jAWRnA!kjz&d}-s#zy9?o8YxuFJJy1KdwJ}JTa`kpDt z$@;;D5jn2rc`oTeexXMG=59eAfhi^?X~juifhNJ(o~enBTwX1&rlbc7-eB5lF}>%G z;|<5Ho1&}tU6-;yzwXB0DDB%xzh#1TC4Ra^&$_$B%QIut5U}#y1Swx0kx<|IL z1(#7(P+E#pVL^CEu~&qLhi_DNh+9aqYrb2Bk)KO(cCL$`Ux9IOnRigR0hg|wLUD11 zZfc5=si~o*LTO>TQC7J^WPX}0&Qejnoq=}-?m?Dr<$f+cm5E6f26+}v1}Q;hZiOCZnZ*WysRof;CO%Gi z#pbyNuD;IZc@h4RW+~3unPEi*r4`!Q+7%Ino?Zo}c|l2z$yMoGy1Kdw;TA~&e(sSz zk=m}o{%ICQA;E3|ndu=Gq1j;}UWvwe5yi<~ImzD6g;B}nT;2sU?&)3)j0q5nsNAz- z0sA)h5RHz4ql>m`Us%@ibr~lEd-Ik1hpoyvPg}M=3hWBKG%2cX5%vSGHeH zGFPx`aAM4*SGhexPenNws~lzxzJK9{bYLUD11 zZfc5=si~o*LTO>TQC7J^v38!jTYzhbX`ZRCzgvcHqMKn_dSrN6X_$YhxqfJ%yLUy3 zg}GOXL2h6&mtU5?UtpedWPnqSyG6OPU#^dDrFo^hwr7!JfOcR;c!iN+a)7priHB?Q z#E;_je#IFTZr+v2iN2|6DP;kk={~8Mjv1as#`;y2&QVEO2F2c%9u=WM7H-*GVTFml zQEp+rB@wxa=1~QOt|b{3rRFJ_McPGf234t^RXOG+h3=LW&S{Zcy1Kdwo+&|*S>Aqr z+Wwa2{)HKlUY`Et!NJC+xruI$8Kp(u!NuNQspe(I<}QYzT(vG1T^$RZ)t+Cvd@$^U zU&WR%hADqr-xXDNIcMeUKITA_cUf#ROy+Jx-4$rB%OMm~>eH$=;ZedRF GNmBp=?v#E2 delta 411 zcmcb}e35yAPQ6E{MP@~1RAEY4PL7jNq`zZvy0%Z6mtS_Kb4sPLeo%-(v2#IcN?K`# zFPC#cnvbV>SdqV_wwHyASGtdRURhFZx_McNVWmg1S$1-6mA7_cN?2hTQC7J^L8X3Xc0_1qKys<2e}s2=x?6;apRcx;c0iSOVNiO0Mn$Qa zPnCI5zJ5h0S5SnprJIS9Us`yXMP*7#iC&T(ftW{%2UkG?mG_?WxU~ zw~w^eT4b28ONthk>(^XL62fN=iw7GMBEMLUD11 zZfc5=si~o*LTO>TQC7Kve!g3-u}89{VL(u>ud$(-qgzpsXSP#Nrh&7!Q9zP@l!<$U zUukG|g`Zn7S6W4BW{yi~qES(>uWM*XL{X?gmO+u5aguSNxr?E%X?kvHsZ&N-mbt6J z#E;_jzFx)p?h)xlZa&6U#sPsYfkuYru4bh{{ze`}`pFdr9yt+Srun8$S?=Xr=4r;} z+PO~N$sUOoS&{xlxs`rNX+EY|`cA=t#TiLP$$4Qu`37$K1}@oLy1Kdwg@$Ivu0aOw zMrJ+*DV`ST-dTBR6)bwh6Rp7Q;bl{IR+&xNkvfkaL+!np;_@Z-`HrFPE;JLUD11 zZfc5=si~o*LTO>TQC7J^aF9u8a&VM^VUc-=zGIewvs;jb~lMOAT`rM`KjSGuWBsAFlmafO@7 z#E;_j=6N28IR%bMQD&z4S^1&Cnfj5&K0fYw$&P*nJ|&rHMu}!FZXrQQ1`)|z&IRtK z<(BzDVR-==p(*)Ak-5cgmRTW|*}lcvWmPE#sf8A5@S&yATes$Bx#(;lZ@^Sl3L%aicge`Edhe>Z7;3Hoq+ Vqwe;(^Wrb>K6}R7@SBwBI{?O#m&^bF diff --git a/secrets/grafana-admin-pwd.age b/secrets/grafana-admin-pwd.age index 1bfca9a4f80df22aa82830cb96be4d756a9e0ae2..696bb4f0a5185496867407b65804a38a0baa8310 100644 GIT binary patch delta 392 zcmdnTypMT;PJN_bcA&9oVS0F}f26mow})G?f0T(&ib+9*g?^4#fLm&ERiar^Za`#S zGFPNuNqAtHk*lR)Qjtq`kfBM2Wo2=uUzS%^Xm&taX;PkLnZBi^Z)BlCIhU@TLUD11 zZfc5=si~o*LTO>TQC7KvWne)@aHOAORkpjOc3E+@wwsq_NL6uBg=4Z$q;^_VX_c2( zmTQSchDBy5S5&x#S6FU^e}SJxmPw?!SCLb?siTE!gpqqlaGFo5NtRi#XMn%6lcB4@ z#E;_j-WloIKG`K9UPd7~;lUwM?vBC1!C7Gu28rcf8JW37UirB`Ua2Vsjs}5T1r-La zA)Zlz+94*HPHtX#;T4Id6>j;)6?v|KMv=Z%?ry<8g;Dy!CP5}#y1Kdwq1su_epw-& zrunYs1xCpp{+5+FJ{F!4Y1&DaWyvNbr6Dfnp4lN5RZjT^Tov|@c|Y|Uy<2q3&@q4^ mKXTvqy1oV{k6YW%@pJcdDQp|5tJ zE0?xgV0KQqaeiQyrFWjQYmi^Lk4c7WfRC|7MrBS$aG6JGxnpT%QBJy#E0?aFLUD11 zZfc5=si~o*LTO>TQC7J^L5QiVd014YaeltHXQXjel$&c=nYnjTVzFg-c$Hy ssh-ed25519 xSWWeQ 1ELSHFW5xDmS3R5XpEBecA3+vMJzYskLaDgWIYZAMRU -4nTfGewJ4pm1xTBo9CDO9hdNYnCSrJ2FfSe1qeGt5Bs --> ssh-ed25519 uqg2jw DCqusDELTWtg6X+xl6S97LS3f0BfsoKnSa68aLQbtxM -8qxUZpiRDe6yzqy0KhS19JerfBA57etTzz7+UjhujlU --> ssh-ed25519 a0HhMw JNKlu6vvAbLuc0xGFad/3HihP9uUuRbhBkZOPgubcgg -jrW5wU1vnbk1ltDFtQJSbLGWveT98BexkOajoYc/HxA ---- atlqyy47gXhvPf+gWm7DmhwJ0N7lDOwoEiIp3P4dAHQ -w7W 9;e̳Ƶ²J ^ ssh-ed25519 xSWWeQ a1i+WDaOrAuTQJYpCV7/zZ25mgDLUtFf1isc8uTvUCc +n5ge1cJ1bp3LzhleDUEZbmYYK17HKurwhfded0YJjQo +-> ssh-ed25519 uqg2jw VS1osLeEyC11hg4/jdVrFcF20Y1243zJPWjiF6ongkw +XGoL5+8/ccfndcM+lUzs7yShS1WgSLT7AHeJSEHSOFA +-> ssh-ed25519 a0HhMw xxzIyXafnVGv70rb5G7JNL2gYXELNAjw0tieWUPZjU4 +01ag9xGVFI76aBaUpuXdxg3VmEB3FpoRhYNwsRlz8b4 +--- QfrxirayYUNwCnoSR5T7aP+j2DUPyKdZYEaFmd2vRnc + +. m3ٕm[t[2C$Jiv|chVb9Pe"͔I~@wc +`'_OJX:WN |% H?bOe_0#.BiΫfNIy}QmFs YԁsRSll \ No newline at end of file diff --git a/secrets/mqtt-password.age b/secrets/mqtt-password.age index 814bf15..9ca802d 100644 --- a/secrets/mqtt-password.age +++ b/secrets/mqtt-password.age @@ -1,10 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 VfYKTQ xMoobFdxUR6z+ZpRQbu69K6DfjFouS2/VeY14z6aBlI -Yana0VF9enzOkV/BzZ7z7tmhWDEiCSJzzaiJpjOC+IU --> ssh-ed25519 uqg2jw zCL88Iu2tKMpHjcZwe/0CV04acj0vzJok3T7enf/zUQ -fnrg9+13tzjL0sIiLP2WWKeYufL3ksm8HHljEnIAZJs --> ssh-ed25519 a0HhMw AMKdtR6XaroB3cGuXCYc2Fw3HHwNcBXvRC1lWH1CLgk -HFwgqLhfuHy4+XMafonoqDjgaaQ+L5s71cP+/3kVt+o ---- qqPpy+/ZW87v13ptI33zO1yxIVkoU0D/dKh6dmcogRw -)Kݾ_D_ -77 c%{Usii ^Q; ssh-ed25519 VfYKTQ AbM14mSwas9zGjq+LusHB35CP2vj1B7VcZbYHbkqzho +ImZfK7ICMHhhMJGWHDlm/2PpUSPVCohiQXJeADH6m5k +-> ssh-ed25519 uqg2jw BciWCj0ArQ0j3zXH0FJGvqWcME3UMWOo4Q5c4R015RA +djrxeoG6DRXKqjnJTrFjY8iZB6mlpmF8s9c5VkS1l/E +-> ssh-ed25519 a0HhMw RiZ6SKx1Bww4/TARRDS0ZSaU9pweqbrE+TbtPLNOuQY +OxNw2jmEQ7y/Pd34yMYIP0/wVVEFvMg16tQF6FzVr6Q +--- 1dC9eVZB5S8zx18K1XyJOQUKOsAv4WlXhHXuij3XNMM +Nm`"3iNnx3fY6Ǭ پ脿;0JřDP \ No newline at end of file diff --git a/secrets/nextcloud-admin-pwd.age b/secrets/nextcloud-admin-pwd.age index 5e776ed..f40ea89 100644 --- a/secrets/nextcloud-admin-pwd.age +++ b/secrets/nextcloud-admin-pwd.age @@ -1,10 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 S1eK8A F5K7JIXTSg+5AfFuRsFtbxhbX/3a/x7SNZ9eiiG2FXo -umaFiXV9ypTxdXzRl/X37fyQlWwFsug7TD+prQ4w97I --> ssh-ed25519 uqg2jw JaT2wgqEQpnfbzspUpEBpa8M5OCYs53RnRwWpaWpzSA -OHp83Xf5WdHNxG3Wsm4zsy9wOLZDcoaFpRxQGtoNdi8 --> ssh-ed25519 a0HhMw yZEM714bWIN657VGrGDBmSZZljOURIZwYZmKV+Zyi1Q -nL1koyimO4OGaE2c1Mbm+9u6GR7Axi3t3Ay842ck9kQ ---- ycl+WPu2ZtL+Av2/hTn8tJOkVrQPjNwdp1R4fwI4ObI -.C/ -42Gq%z)&bLrjy!*IE> \ No newline at end of file +-> ssh-ed25519 S1eK8A nuwCf9oMLnaY4No1xiDJlHiCctR5brAyjAi7y/8sUlQ +r4TBp9fLxthd0tyZOvO8HLbxWF31xepvHn+TKUDTbT8 +-> ssh-ed25519 uqg2jw JFJoBxg5FXacTlg1RdP7nMXOlI49/ztVOLAfhjDHuVE +J0FM0sVFcT75b4FJtmLya4GTm8ytvW+G2/PsSyzwguQ +-> ssh-ed25519 a0HhMw ZyQIQhEXiA4ZKB/T3KrNVbkHPUY0DyFxEmWgGrvY31Y +Pc0G82/RgETkawX346yFRMjh3GiVrs9g9i28Zh/1pZg +--- yIhMYtPBSmLN2w2012b2jgcJsDzH27/I9Fi/ChZX7MM +_yB9p]fXR#a4pIu.6Pqw|N[w=pd \ No newline at end of file diff --git a/secrets/nextcloud-secrets.age b/secrets/nextcloud-secrets.age index 5c860941a0c17477482612b0f06201e59e8a13f1..07fa2a13c602ecb4d30203c320062fa41410f4ff 100644 GIT binary patch delta 504 zcmZ3>vX*6nPJLB|zC~1NaZpi4q`s@8b5>Y>o~M4enQw?uXpmcmX{BFsh_An2a+X(l zIhUVTS#VB?g{MhKxvxoZzG1Ofg@w15Nm-SfqpM*~a#%)2zKel-sX=*pHkYoQLUD11 zZfc5=si~o*LTO>TQC7J^X`p*)_fq7(9QK`3iNnmCA z#E;_jj{fB?m6mPP)S1`+1<*~V^xrkO<+TqlD0Ih+imc1s!W(%kTT zhDb`n9oM5}w{$*4?O1XrV5bmUm&3-X?E5~)E6M+uTl8vT)eN6X)wIX*3~~)={9hRJ z!kkLC1ROCqb2Pbrz3oO1`QI;}7;k;J;$x@xT#a=bUrfC6;&|F_L6+x6by15aFa3Wl zJ45DH>vnY)hSiTIovX*6nPJMb{K}nj4Nv>b0zM)%@YhYS_N>IM9hmU@hTTxg^mA6-!xxaQ)h-a2t zIahM9ghlR7hpSHiDZ-rr2B$uw8LUD11 zZfc5=si~o*LTO>TQC7Kvk58&;UUHISnT2slq+51isau|7xS6{}Mu}^cQ;313zIKj> zM{r(da8h|OS5kz5XHa6Le`vBnL1~Gpwo!0KMU`W^SGjv`PGnhtwz*MAQF&FaeyVHo z#E;_j5hdwn`T4&2dF7^6#pQvnq5fg+rA3*cLBWBJ+S*=GL7o;Br3LAEzM08fnLaMb zF4_h;=>fSpj*iBe1tvx=q2W=*`DPK$CdFxynMsKjWl?1r5#GsMy1Kdwc`1HInP~;Z zDaj#@j>RRGe*RS<#%`HGm4W$wZUxC9`fgeEC8>e>VP3x3T<0UsHzlc@QTkNT-B_aV zNx*CR)U|j2+zLwSpVB4Jd($Z9jjPASNB-<5SFxL{)f7Jxw8%OrVV<_-rCVHEHLgDi zI92mqSnF_#M&3q8Hs@g7{ZEa&qD{{S7s5T)d~zG2y^G zueURN?y7&D&Hk-YWxok~5JBo-#No(4FIz? B#IpbZ diff --git a/secrets/paperless-admin.age b/secrets/paperless-admin.age index 1d5e33554ea46efe4e73e55d19e963f95c2350ad..818031f7078c61dff4af2f81b15f5e2c66fc3633 100644 GIT binary patch delta 401 zcmX@ke4KfLPQ8J1k)vl+WO|sXTV{rDl)qoDlee3hM^uHse}t!>cZqpmaG*z`cD`#y zC|6Wohu5)HUfuDJ*QI)AlLB4BgRcK_9VP1t{GMBEMLUD11 zZfc5=si~o*LTO>TQC7J^Syp;LkWWT%lxv}Zldn-|sasKmQ-NuoVQFG;V6mHbNoZ(t zR+gWoS88}RS43HcZ=#E7hI3S*foVlqT2M)DWuZkuU_^O%fVNMBd6cDou$O_pfpb;y z#E;_j6`>X-fu)v~MQJG^*=3%&l@?~HIhAGx5!yl71qDS($tm7hQQ4_3rHBnYrd^-h~y3K_*$*DZWnb5$4*-MwX>UUX`I-y1Kdw7NPmMIfZ6f z24>zVMjlbQ1wjUZ&ZcgmW+jDgS=mLAM#ZiUg=XbJ{@PKlTobmpf8am&<#6l1^>Ncb vnwiyP#4yAxk$fhTwsBA4C!v5-24 delta 401 zcmX@ke4KfLPJLQIT7jphSEjyKuDOM_M^TQC7KvXP#w#wx^@BwtkeqyM?Jqh+ArUhKIg>sCKHiNv^xLQL3wj zYo(E!r%`SwS8|kJu3w^0MQBxKpkcnLQ$R(imrIC&rG=M%q@|;wUrunji=lT?nYUl^ z#E;_j-susA6~W#H#)T&OZjPy8VZjw90l9&Bd7hRQiRFQr=0)B~W|c;n$(5m8W*+Ij zS(TB=X~{)SfrbI$h9SY(Sy5@hMP5;90YyR1UR4Gq{(+Sd9)XTry1Kdwrsn=Wj&4z@ zc>#_=xsln~zMd|Ip+%JiPNA-uY5J~JA+D|tRo>qERaN?tTx-7lD1Fs?=*x^H4u9-= w98VtaH~%g3c3&;pVe@-+h)dYp)fI#Al9g56K}Ht0Ie*G^8f$< diff --git a/secrets/paperless-oauth2-client-secret.age b/secrets/paperless-oauth2-client-secret.age index c57b412483a7caf15ddf32eb426e9ebb56031871..42e4c72df8e784c576971d390f34b6834c869d79 100644 GIT binary patch delta 508 zcmdnUvXNziPJKmIZf2=TQe~=7Qkiz4VMSuFzgdV$q-&&MRK7uxhmU)3p<8G{Xn?+l z30H`3a*}yah)1fUV{WBmctDkZsdJUFr@3)*N?>wncA9a4Q*c$7n}=I|IhU@TLUD11 zZfc5=si~o*LTO>TQC7Kvg@1BIXjr1ZceqQox3i_6zgxOvYFU_@yMcRZL6)J5v42=d zfoEl@VT5x&S42r-vbSlLW4fbuVPIlva!zT4YeiOwg;S7MafwBkQ&xFaiGQ#`Rd%?= z#E;_jm4#_;&WSnYC8fy`l>wEJC80hg`i140+L@-l=_X13IbQB&2EiHb7M0~(0Tu;i zQ2{xD*;#G@75T}I<^>ks;So+Q?%qzp89rVWxt=DbsX@7!j@gl1y1KdwzIj0zUS@^f z+36K-c_HSB89ouk1s=|>Wu9J6k(NQG`Xxp6+QptlftD4XT(cu{n?xx8kqK>Q_E;OJ&bS9h$uAVW1CJukopADtzf1J}2rK>n$_w)QwZWawN6J z`sl$-j>d1r9+HofSH4x4u=4Tm6WL)Eb%$@;`xZB>d$eIvWe2(;r}jlC#0GA0-^s2jcA--IwwX=E>2=SSr5|nr E01wK+kpKVy delta 508 zcmdnUvXNziPJLlefoXPXia|w^V`zw*Q@LYkkcm%HS%!;6g_&z=l}}orqlIZ$lDDB_ zD3`aFc1~rbWw?_?Zhla*QIxa4k#}B3a&cC$NtA1Lm0PZ(YoTQC7J^v0qh^fls2hi)m&>QFd8DlACs-Te6d7g}F;mva5Nzd16kK zp=U{wNoBSHSGsxu1WPW0*;LPHv%@SEWy7nPqtS z#E;_jZk45F5dl$|h8ZP6?oQz)K52;_o^I|%`7R~CxoK{erTURBP6g>%UV-UcIc`;1 z+4`B`xd9$Q#qMQcK{-jeUfRhi877AAenD;-f#H$*o@SPn?nUWby1Kdw+GZxs<&n+- zmKi3=RY57CWnOu{eubr$#-_%}ekp-Qh9T+oxrMJW8WniUosatA5X0U6yX?Q_~scVXBW@KoH zk%?obsheRsmxZ^XPo{-SgolfXd6=s~cDa9XX+(KdVzR%7L6o_%S*TNKh>M@Thlh*F z#E;_Pp4wiEj3Q!Ho{`Cu;~B;4^TM10OoJ_p zjEi#ovb`!SJ$=oByvsw&BQwIBQY^DFlg$m1{EB?TA~LeMatagk!<++(yemsh4Rg(N ziX##YwIdT9os12Gqk;pni!ELBJu=NJ{j-y~baizV68)UAd^~eYwDmK>49b&3OEa=c zP5s==GlL4sQWDKmogz*B$_(`rUCbhUxsG1UXYgHi^tN(q7RQ2oyE$i)U-E1V-*4eR z!;Ud{{?z&5!arvCZFf|g7NlTw#c%qD8OvJ&7sMe2p;u|Xt9D*aSfXWi zC|7BCa+PyPo>yd1L3v(~i&L_8W?`jIYMMb%fqSr9T7geML~3zxUZ{6kB$uw8LUD11 zZfc5=si~o*LSkleMnJhjaHT<&n?X@|ZiKm^V`f;2ms@UWVN|4#QAxQ|Sc+Gnse!9U zp0-n}g@vODS5lyJR8VeYfPPVyL0F1uSVd)dNm^N%VVR+^v#)-!PiAVcp?RrqMv!y< z#E;_P79r+l=23o*`9(g#CCPb3DHRn?Q65DB?%GwwX+cS*t|^HY`Vpy>#d+CWrHK|H z>FMF6`F_UbQJF!G-UZ2NMS(>*DHY|ONnuGzMoup2UY-@1q1xG#;~B;4gA6opK^lvpw=7^1WTTbaizV49m6igPa1*qsns1GksmMB0UUD zy{oFSEvpL4%)P6e416;D+E+h+Mq#3*b7oP7n}K6!ML=3mnz3b4M1GoMhKX^geuS5IRj#L# z0as9QT4HudVM(NCgn4CUL6T2WQm%(ta*{z%M0%b{czBqzi@t@2dyj*i)x0ov)MZq625VcDrk zRpq57+TIrV<&mxdE(ReH?pamI3bRbo(sG?Ms)C#|eEf5bN_?FYqb$Rn%8kmoN==<3vRo^}vmD*4qD*`P ziVgC;Dl&`AODhc$3)~I!i!uv*tBh0pTvLm=baizV3aeav{34t~f%Wk+)A`hF4}ro`<7;iG^jpQA&VWxr?`B zAeX;uX>O8Js6|kwtEWe@ws&%5Zm30AXnB54a*0b>VZLv2VQOZwOL9Sp0hg|wLUD11 zZfc5=si~o*LPc7S zvXg?7BMnU4@~gD{%zVO}Q;RCRTzpCcOgyu>baizVOfm~IGr|pnT`SZ4(gG86oV1OM zBCc2=5xrAKN-Qi`Wx zBv)9vbBV8Ej%iScm#aylkw=D4h-I*&cV=;TfoE=+PockCu76^>e`a>5FPE;JLUD11 zZfc5=si~o*LTO>TQC7KvM_!PzV~Tk}ihqGoW=dF6mRquUZiu5(U}}YZS)sZ9=7IisRVkGPZl;MPE*3$?5m_F2#RkP(W+quMu!KFrS=EmCjp61CGp>CnR?wLtNMf#DR#hy+Ufrr9lxD#E$kf_OrNmm3yVeazhAiHcIz)qQ-eirHy1px zUoqnl)cpkgtvip5|+;`*p mOs_e5i~knJ7rhBc&JSB)@o3gJ;b*^X=Qk(RH=Zw={sjQWRLkK2 delta 541 zcmcb_a*1VvPQ8;`m{CP)U{GjakY_-VV}_}DQE;hyU`l?zhf}`0WnhVui?*|IW@SKV zF;`SsXijiukzs^SPPwD6QTQC7J^nrDthM!vg?ds$eqK~Pnqmz$xPVWGLVM^0v`yN_W&Zefy9 zWI$q4R=P_dmuqH*Yi6Lac44@?ca@)`yR&ghX=+GXdYVaQmZ`b1g?C_qb7DrBSFnZ2 z#E;_jIqptACT>pog&qMRCfOn0+QFrnMyZLOh2B0@!AU0BX8y@;xlsXyCSev_QI!>m zX1RXlWiExz+5r{j5mEWUK1I3usU=xv#=*(HA%?~|mOeSTL4L_xy1KdwN&3a9t}ec% z=@sdDen}YyX6b%LWdVVPY0mjs7S81*u7Te58E(0uX<-48Tsd8Hwuf09JS;9P6MId= zh`%<0#p&om^Gg=H^Pk_{>?9r<`PoK^xoXGkY(_a3^$Wj_Y27$BCrVlQMwI1;QVHk7 z+-mc}zq&fr?FzEeUB%%qq_|V!%I^!;vsX^|(9k<~a&m^0pWS0U3x;(?e*)g89t(V$ znJOZ>-sj1BpQ#o%6BjJ{`phG0xNo8D}0`M_(q|D!BR m6q~$V&`tL+E6;U$-X ssh-ed25519 HvFEmA Q+XkhVoaICO0J/pa2m+oxiScwCOhoH/Erbzxb4QwuDQ -wexloSa07qcMCp6nZDz+fE3eAQJJ6VKcF8zNoAm3GhE --> ssh-ed25519 uqg2jw Q+MFZ9kpICAk65WAx1l0JyPwUFdBEQQDvwUdOkOghwQ -3i5249ur+HAuDIflPEgHG9/i+ZMlMU/IY95mbuAiYaM --> ssh-ed25519 a0HhMw IuLcBhMtGOW8HXIxSGZuIVX15lfsPpgx2sBPwSQ4dVM -F+jlFf4Mdyt7bcUimFWQajlIvFhGnckxdxrxQdJ87NY ---- YMyXtuT9aN/Le5+XZuHojFrfCjILigxdP9VWsBxi7VY -({b{ЮR3YcΥ5T{CĻMf}頚cggbjOU.VUCxchu9R-::`O \ No newline at end of file +-> ssh-ed25519 HvFEmA UWbeWTSBZ78hSnN4jozMvMUUsNnG8CfcoDbJ7KXt9yk +5H0/lJ2fy/4nGqTzOGX8apfNqOEhDKy/vMy4gbx+bPM +-> ssh-ed25519 uqg2jw tCXS8mQPkIvlosi3Y7Auy9CQ39ikfDYB6lJ5tmmbCzU +iLeWcqkgqgUxKexVUast1Sp4TbLXSMU+NNyJyT1PU4A +-> ssh-ed25519 a0HhMw uaYgjglhXYZPYi4QqH6xitkkduJTE/Af7x2zsRCUc10 +bZRzpwR6vCCx1Dnu6u2fZ3Ud+qciXQFq640kkzSKtm8 +--- a5/HmRVLLvwE1ViHhUi8UcwN5iaumYXP1Weqx1MM7yU +<|gzNjrR}BtXh$G)L =W^h Qwix^~=[@k /+ɂA7 \ No newline at end of file diff --git a/secrets/snmpd-config.age b/secrets/snmpd-config.age index a826095b82331a6cb1e9839715c4ce5cc90a050d..f72413eab9871e224072094c7a4445f5376cf751 100644 GIT binary patch literal 2555 zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCSP%nNrl3{-H*O){wn z2}mt0am_Dv^maGN&G*d;4lQsoG}4X=^KkSi3-e0~am@&FG2jZzbq^~s%M8d4EliIH zib`?y@C``!buG&=NDg&M(a$S(s?g5LOLGkHb49l;$2`NxH&7ul(IeG8yCA?f(LBRc z-zCi{Q#-xLv)IEmJ;yn%Jk=n`Pun!Sq9n}4IGM||xXRVjqF6t`IJ+v-Ezlx4B`Tu0 zDkZSY+|R;4UEj$!Aj3T?FvKL-%Msl+C$|z~w{(Rt^8(i*SD!#L)5568EVoccXK(K? z6T{Fjr$m206DMzrs4ACiOY>C!90M-ju;5%5lN{GbZReom;N+-6H;)XHAZ;JZG~Yt! zqyWp{O3Oq)AK%o{pip$%3KKmNP16O?LebF)n% z(hL%-N(|6#b8|QINiA1!wQzQe^2`iNF*Zu93N7(83JbP0PczKV3e0v6bS+8Eaknfg zvB=Fg4o&AuOgAh~%Qy50^vDZx^N;Y3N;lVb4RXnGHb`^zH;Kq{cXbR(4a%!Z#`Ifa zW^zVAxq_KNRHa{JnTe@oj#F5mb9ri!i*LE9XNaq7x>%4bs9b!Yj2yi!HLt-8_=rJj(*zEz*lZBJ+Zri@DN0GPFZI9lavF zD??Mm%RNFpi(L~93j+*XTrYfWC)YC3)HNj_!`wH?#j&iiD8nGwge%G|N4qS^HL=7bIix7FD#Dqqok%46y z1%?GBRl!C+`YGNig;|bX7^%e7-_$?JQ6V6*!Z*Jn-#NFS#4OV{#nRkA#K+6aA}=Mo zsw6i*J;yvhz|YYnL_5?ykgFigJjXoEz{R*A%q_|%)XU7P($X@qAUi!fE5y(!$t%6s zM?b|V%qy}O!*9ufIk_o;3IQ2azNy+t1tD2gWqt-(X$Aqt=3!M{fsO@%{*kT)QO*T< zRk=xC>3+`TToG=ej^Tmcp5{T?l_3>jrjFssmc~A*;hsfN?%BD;xrIfk+8zOp5qZAZ z=pk7V93Gw;sNiH;;qIQFt#9B_o)ZzAmg*RpWmJ)CnV*xC6K>@0Xi%80pORY{neCRH z&E+2+o|0=B?pu(PlAIP^6}&);#QbejBZYhEk3#I#q<1hnlCB8<={9MRIv1T0~_PM`l#Hxn!H8tEn)`T_8~PQO`vrScM55c~Tw0iu;i%voZt3J#;9HoO<>rza6rAF19PXA| zSn1?nnyej}?poknW#p2Uo*nEHVZc?97G6~3mX_$JU2f#-SYc^u(1nT&2*sB?)8ydrQj4lg4@)z{q$*GUutLiUFB9|JNUn_H z5{m#Q^T^6F->fQaM}5Pj$dDWl_d>I<$WjA~bdNlPvI_q|1K&J%jQkds7U>-lsE}bA zWsu@qWtrp=5|~}&o9E^i<{2E7=V57Xk>#CHke_QFW$5PUoR}7t%$1*CoF49XROnn(61`|zilwQ(Wtee*fw^glvwwL-L{TnAyCl)TBg3~`!M{AQA}~2I!dyQit0K|GIi)ze zBC8@jDJ#R!!Y@C}Gt}I)B*ZLkP z+%u#!BC^UeCCJx3ys9dhOIKG{!Q9y2**ndm+@r$R&)KK4G%Y#IC)?A)i_t5?G*_A(TtlIH8YU#Q9*@kh!BIg%e j?0CG3CCS(|y`UgM-@wl} zrP8#p+^;MmC)2&cF)+|kKOi(E+ZWw7C$|z~w{!(RcYXKr%Hm8fv&=Hr%tS}CvLYi> z7q7%}--`UmjDXPmoUGEEaEtuV^mHz_lKg-$vtY+Wf3GwXf5X5c3&$vziU`wOpCpU? z%(4)l(BP1W(tOi&Ur%(~3KKmNP16d0LmlUsz zfJkSzs(gRX#LUuyh~S)D1Fq5lUoU5`q|g#SU;pwvBbVH~C_nA;{LrwHyZ{3)Uq?5$ z3hzi?ORt>7e019?g2Tg80~N}=eA5idvod@mjLI!beZ8ZKUDG{ty-i9}v-908J+i7I zBg`_ByiN53)458E10r3540E%+Qi?0ngNrgsJd(@9{C$&s!knE;P0N$=i%JY4yaG!y zG0KwSGS?9Oas{(oCzF&sLj!Hguu`X}WY;3+^58Nz1FyuuP*Eh&+<7}+$9%kU3QEu*HSzer5T5J?i6;V{+Q4yBq>RVBn%vE9Olk8EN zm77}-l#yEGtZ(AxnxE`p;h&pa73q`aoNbhspJbV2lI$FUk-JTb)5{A374)48)5A<0 z1JXQ_-2xqh4ND?2OT$u99o>z6vNPR{f=#nZ(@WF6^gSItx$@jos*DY)Ld&yKic%tr z3R442eKXt(0^Ewc3{rgkLrsmm{fh%LOtaGs(BsXyv@j>bQ6VVV$j37>#Iq#~_n1{J$7NkUFW;unsrKNdB1$sDU`UmFuR)$1+JG;0PcsN&h zJLLx&aQPJE79^XdCprZbhB^AD8km^{l;;@v7ljw6`j;mM76$nkC;GXC1{HZ?l*(ag zk=`MJ3PvR+nOV--DbA(l{^_ok9;t;cIsQiaP8lZ2ZiX3Y1_70!q1p!Se){RITxD)f zNdX4th9;pF{=SZ-ZfRbn5m83TmDy2l{>A~Rk$&!OUira+7C8~+=pk8Jm~NC+t`P27 zneGu}7Mxm=mKmY%?Gv8vYvhy@nx5nt5~!{1nO}IK5 zZkl0klJAln7?^2cX&RB2?h=PK9{bpu7amWnyH6(XlRK?sbxS}rDIWkZiZY6XkELC4JkaFLF6Hy=z`nPFHHJ3scQ@V$ rxY1!?R!4kTd;DbO`Xx19Z)Qbv<(~oo8kZdn diff --git a/secrets/tailscale-authKey.age b/secrets/tailscale-authKey.age index 4dc59feb6438233db11bac71f23e628009dd791e..1e1bdfd8c8ce609916e4c2c19e0b7402c70b8231 100644 GIT binary patch delta 957 zcmbQjF@;~B-nJ(Da`4Gb-+ zl9NosQaz1>vi-~QybLlEO>!+#BXcc00vz)^%JR)DeZoAs%=5D&JS!Z743i9_imIHG z9NqOxO+8F2$|AK>0?o_a%`)6F3@kj0l6_q#pJf!U4=+!(h>WN(N^{n?%r>wrPp&Za z%+2)7whT;9(htip$_sW4v&gjwD|U9|3dl>!OUm-`DDW&wF09JU)c15TDALdLF)j8A zGzfDs4DmH7b_oyl3)e13j{%P|H`iQ8g%XP}Z4akVCl8;B0@F|nZ{vDxm&A0_)FkhS z;_QOVBKM>yFK2(hg0QOcd@hd+Q^P8s;L<9yT#t~%;zT1O|J0B`UpL?6P{&e_{a)5VYU|M)ixN%5SSe0dtab!WEUwM_0X_cFiu}?@ruA>2$uCA^^ zc&TxSWtyXjlSg8*o3}->cD7|$uA!e>j;F6dPKH}j-s$rnMS-1h$zc$|w4;821 z+Bfr?ChyK;e!TmSWk@evaO=vBTTk{abvYlgteNMU`}KQ$d?w}Jzfr&aPWUOK^XD8(0QZ_i(*OVf delta 957 zcmbQjF@BVX=YMxaYT4&u}^T4pIc#0aB@b8cbTb?n^BZ@kWZ+Y zQLssrQF@RgSBa;aaY%)`zFT6LQBsj-U}#veqp4RxNQSwyYi?w?p<$%EyKhuMskw3J z#E;_PK52o)RppUk1x^K_N!kI1LHU+NdBJJr<$=liZe?cf;rTuWmWIiWW#yqI?V z(#xDuog)2HbHjq&Gc!Z7i&FC43sSRO4Sg*ppJf!U_e(M}HS!9#@HTaG_V%;zsVXin zstikss;COhDR2pn()UO%tOza*uW$_Hs&p!})DL#`@(DF?atikL%P9>t505ZNO?LCt zch3tp$S=q+%W(4xbuTwSj{%P|H`iQ81y2iKi^5E=RM#Bu++_WtDwq14@=_1Cim-qJ zlc+GKvR$3)79V$`#V0j4VrxOrt__3zEV-ETbYTQ-c!={mgt)1M@4)LvkHM z>w_wdoHASu0+YFNlROs&`vGN%JXtJHcxkR z4ff=6cQZF}Dow5TD@k%mbS})Qs0wp8H_FP?_mA?aN^;Mu$crlSjkGihH7-i#($&>f zFwZQnO7n>bt*i_P4zw(CHO$g3ajFbRG72g%i%1O2FwJ*LPE0QHuPiX&T5ejN-fG(P zD}K-A^9<)A9vfI4ZQ^kj+T3rp`(*I_lMHrG-g3q*6_J>E&E#9dA?ulGq6G`|z13#j tSP*q9X}!X?)eG-&YA~Oc|IuuBG*Ur*%f6}^Gq2gYortb)FBbiC7XWKcM`!>5 diff --git a/secrets/vaultwarden-admin-pwd.age b/secrets/vaultwarden-admin-pwd.age index 2360890abca85a77f1182062af010e6c675b0ebb..b2de3492bf03994af70ac1b8abc5672367d8c8c5 100644 GIT binary patch delta 613 zcmbQqI+JyRPJN`OhqjAxQJH&GdX{l^rh9QoRER-Xa7CC?Xn|#RKw_YUnRj4jW`(6u zIaje^K)F|dg@=2US!sYvh=GeyxsOqyp@C17cU4KScY&d)YkG)tP>@MvAeXM4LUD11 zZfc5=si~o*LTO>TQC7J^zOR3gNqAI6T2yLqglnQ(p_{jtuVubZc!W`+L0*JMX^3N> zQAU1Zd45(pSFVR~R)AAkQC>wzc}{7WYi4nXPiRqKd6H3qmtm-9se7(dMo2-Wi?&PT z#E;_j-X?{);XyeTW|4t8S#H^eKEaWxrj=o7UTLApj#0%CVdaHshT26z2F~eRjyc-7 z?#|vN25#lzD9--~9fR674ad6K~)doJq`!A1E;=6={Au&Mg5 z<_Z=bri*klqI zn>)|3p1=H7LeAuloSWzJe_xpETVBM|Tz+w)j;ZA)o1JMdFNkO-FJOCG%Vre6t%*J8 L?=z{^@2$H4(iQuB delta 613 zcmbQqI+JyRPJLKzwqu05L1tK}kCThPS&(b6iN8xph?{ASPoQhKNn%EJxv8mRv1zWW z374s_UtyJ7mXoh%fm2zkr%O^sQC>!1u&JqAhTQC7KvqnVSpce;5-X|iEyrKP#Kp__}od2nJ*NK|o3plg;zacOFD zu2E#MOQ4Y>SFmHHp+RnDSeQpufw8$~QdOX3PChQ#`61@zzWx~{A;qb_Mg{KKRkJ1s4Sqwt4%sY;n*H%^A zZ4th<>3hl3d)%ShR{qSfNo~QAobFb5f#lRhWryUa(`iL6KpEL8*y$h--S5le>9lI+w1ULUD11 zZfc5=si~o*LTO>TQC7Kvsh69XTe3k>zPX{NNq&T1iCbw_nNeO?Sgx~CgqL$lj$dY; zesYzuo4H{iS9wNhpn;!ru0?L9r)z+lS5lR;SDJ5lszs7fu}f({xS6SYrde^Wvvzs* z#E;_j$rk!m>BdC{o;ki2iJ6XpCFy3`DLLBtIZ1^kp6(Uq7FEV+0gjFti5@0g-gy?` z<^jfq9+7TgY31b>Mg=)8=5Bterj>;e>7MS%5$4{ef!;-~g<;uTy1KdwB{@az8P3H% z#vb~Cu7Ooql?EY}nH~kfd6l6#5f;VyhT4AhZo$bx#lHEWT*qAZF7S#u<&|P2?^ZkI z>pQszt15(fStm3kUsjmpGVg!hykPc)VilQ>rv3jTRq&fvV@W{!j(nx)uNNDcPX(DS zsc(L4KjUm~vjVGMdh`o delta 492 zcmZ3;vXEthPQ6c=o3>w$i??fXfRm5DerREKZh(0~K$TNqhMPftT9s>Xfrq(YltHF* zHkYG+rBPO5v7b+&K~R~gewD9FWO!P#Q<1NBmaB_VieqGUacX8-lBKDOFPE;JLUD11 zZfc5=si~o*LTO>TQC7J^QNEdHs;i;7XN0$pc3PybwwsG{ZgOOBXjz7Fcu9%5p-Y-e zs<}m>QCd|xSCY1?g_BolcD{c`W`(nbxo3K%M}&4{j7{0cg=tlJj{b%|VL4S6p*fKm+Bv4?z8PteMTH)wIc~+7j((wBy1Kdw{>6?-9$|T9 z+9f59Ir&B*5y6h>nPrycS*F_A{`%eprmn&DKBi9Td0zQ}T!G6sq~FUZl}y{Jy8XnP zZKtzTuggE1>b-O4k$?|J1kZc;SxyQscj~OTQC7J^VT!p?rjtofaF}0^bFQypk()(YqQ0?ZptHG|nSPL8lCQo| zrFMl^UZ#Nomq)5Wg>Pg;MY_3XkYS={c}ZxhTaK%#aYc}ep=)_js(WQ#k+FYaNU2%m z#E;_jRnEDA{uRO6-o7a%*+CWgNfz2Zj+Q=AWv&tV>G@%XRT*y1B|do;Nx8mU`ITuF zDPEZ+rDo}gC3!`@Uj7lL1!ax_0p97}l>x~5oy|y z<|RQ%6~*R7CQfPk$?j2=mc^B&sU`+thFQT8zNM}{UiogxT)&PSsh$1iWc}5phu1&d zy5m~S{y#hJZQAL~{jJx|rdd?WDJN;;T)Wo}foErFim&5zzY@sLz9A;&xKQ4g)A|m! V`Ao*)t&s~?O>yIsZ@OIW4gg5ym)igU delta 425 zcmcc5e4lxOPJKm2K)!d7Z(^}`hL2mahf|c7Q+`;0U$JSjS9Y?#Yn5k`S5~BHg?>bp zE0=+{bD2v;U_oW1g}Y~%cUfqupHWF(KxTnocBx}ZMMYXbMnz&!c1A{NK9{bYLUD11 zZfc5=si~o*LTO>TQC7KvWmtZZd!d(`vtxReS9XDcpIf@VQ&w1DPDMnBVP>S4i>pCq zMnrk4o105Amt%opskVPwu3w6qYoLX9L8^y$fQwtQZ%B%Bcvz8Psdr?aYnXG1QGsjV z#E;_j{vnm25m}xtX(h$Q1rhmfNk)OCVa2KD0Y2XT`N6@dMfpL-Aw{XdK|$qQUT*#= z0p_XNZpj|r+S*AjS(Qb`+9_eVUS7HRdC5^Bu1*y`o?!-Dy1Kdw;W-9IVP2jg z`Bg>krJ2R<>Dev@5gs|Nk;PF-rn%WpfkvhgY3}(!K^5A`T-NV*FZuU`<$=fg12g)+ zuXeJog8D Date: Sat, 31 Jan 2026 19:18:20 +0100 Subject: [PATCH 5/6] Remove portainer in favor of Docker --- containers/README.md | 2 +- hosts/caddy/dashy-settings.nix | 14 ++++++++----- hosts/caddy/default.nix | 10 ++++----- hosts/docker/default.nix | 21 +++++++++++++++++++ hosts/hosts.nix | 8 +++---- hosts/metrics/default.nix | 2 +- hosts/parameters.nix | 2 +- hosts/portainer/default.nix | 38 ---------------------------------- secrets.nix | 2 +- ssh-keys.nix | 2 +- 10 files changed, 44 insertions(+), 57 deletions(-) create mode 100644 hosts/docker/default.nix delete mode 100644 hosts/portainer/default.nix diff --git a/containers/README.md b/containers/README.md index b0ef27c..80cea54 100644 --- a/containers/README.md +++ b/containers/README.md @@ -1,3 +1,3 @@ # Containers -Easy to deploy in portainer that nix \ No newline at end of file +For deployments via Dockhand (WIP) \ No newline at end of file diff --git a/hosts/caddy/dashy-settings.nix b/hosts/caddy/dashy-settings.nix index c9f265d..5389a70 100644 --- a/hosts/caddy/dashy-settings.nix +++ b/hosts/caddy/dashy-settings.nix @@ -12,7 +12,11 @@ in oidc = { clientId = "FiIJTqBIlMKmeSBjznUFgXIJadt71av8dfICvZvf"; endpoint = "https://auth.pasetto.me/application/o/dashy/"; - scope = ["openid" "profile" "email"]; + scope = [ + "openid" + "profile" + "email" + ]; }; }; webSearch = { @@ -325,10 +329,10 @@ in }; items = [ { - title = "Portainer"; + title = "Docker"; description = "Container Management"; - url = "https://portainer.${p.domains.public}"; - icon = "hl-portainer"; + url = "https://${p.hosts.docker}.${p.domains.public}"; + icon = "hl-docker"; } { title = "Primary DNS"; @@ -354,7 +358,7 @@ in url = "https://node.${p.domains.public}:8006"; icon = "hl-proxmox"; } - { + { title = "Krzo"; description = "Proxmox Node"; url = "https://krzo.${p.domains.public}:8006"; diff --git a/hosts/caddy/default.nix b/hosts/caddy/default.nix index b5a3b72..5f8ed8a 100644 --- a/hosts/caddy/default.nix +++ b/hosts/caddy/default.nix @@ -125,7 +125,7 @@ in uptime-kuma.proxy = { enable = true; domain = p.domains.public; - host = p.hosts.portainer; + host = p.hosts.docker; }; librenms.proxy = { @@ -172,22 +172,22 @@ in } { subdomain = "ai"; - host = "http://${p.hosts.portainer}:4080"; + host = "http://${p.hosts.docker}:4080"; domain = p.domains.public; } { subdomain = "keep"; - host = "http://${p.hosts.portainer}:3000"; + host = "http://${p.hosts.docker}:3000"; domain = p.domains.public; } { subdomain = "maps"; - host = "http://${p.hosts.portainer}:5000"; + host = "http://${p.hosts.docker}:5000"; domain = p.domains.public; } { subdomain = "dock"; - host = "http://${p.hosts.portainer}:3333"; + host = "http://${p.hosts.docker}:3333"; domain = p.domains.public; } ]; diff --git a/hosts/docker/default.nix b/hosts/docker/default.nix new file mode 100644 index 0000000..9f7dc74 --- /dev/null +++ b/hosts/docker/default.nix @@ -0,0 +1,21 @@ +{ + pkgs, + lib, + ... +}: +{ + my = { + utils = { + commons.enable = true; + lxc-standard.enable = true; + }; + + monitoring.uptime-kuma.enable = true; + + virtualisation = { + proxmox.enable = true; + }; + }; + + system.stateVersion = "24.11"; +} diff --git a/hosts/hosts.nix b/hosts/hosts.nix index dd73b05..8b006da 100644 --- a/hosts/hosts.nix +++ b/hosts/hosts.nix @@ -29,7 +29,7 @@ "auth" "metrics" "nextcloud" - "portainer" + "docker" "vaultwarden" "immich" "firefly-iii" @@ -155,12 +155,12 @@ ]; }; - portainer = { - module = ./portainer; + docker = { + module = ./docker; tags = [ "lxc" "bacco" - "portainer" + "docker" "secondary" ]; }; diff --git a/hosts/metrics/default.nix b/hosts/metrics/default.nix index 91853c1..c54e603 100644 --- a/hosts/metrics/default.nix +++ b/hosts/metrics/default.nix @@ -104,7 +104,7 @@ in "${p.hosts.nextcloud}:${defaultNodePort}" "${p.hosts.vaultwarden}:${defaultNodePort}" "${p.hosts.plex}:${defaultNodePort}" - "${p.hosts.portainer}:${defaultNodePort}" + "${p.hosts.docker}:${defaultNodePort}" ]; } ]; diff --git a/hosts/parameters.nix b/hosts/parameters.nix index 87949e5..7f9267a 100644 --- a/hosts/parameters.nix +++ b/hosts/parameters.nix @@ -17,7 +17,7 @@ in nextcloud = "nextcloud.${private-domain}"; vaultwarden = "vaultwarden.${private-domain}"; plex = "plex.${private-domain}"; - portainer = "portainer.${private-domain}"; + docker = "docker.${private-domain}"; colmena = "colmena.${private-domain}"; pve01 = "bacco${private-domain}"; pve02 = "node.${private-domain}"; diff --git a/hosts/portainer/default.nix b/hosts/portainer/default.nix deleted file mode 100644 index d2ae030..0000000 --- a/hosts/portainer/default.nix +++ /dev/null @@ -1,38 +0,0 @@ -{ - config, - pkgs, - lib, - ... -}: -let - portainerDataDir = "/var/lib/portainer"; # Define the directory for persistent data -in -{ - - age.secrets.watchtowerSecrets.file = ../../secrets/watchtower-secrets.age; - - my = { - utils = { - commons.enable = true; - lxc-standard.enable = true; - }; - - monitoring.uptime-kuma.enable = true; - - virtualisation = { - proxmox.enable = true; - portainer = { - enable = true; - enableWatchtower = true; - environmentSecrets = config.age.secrets.watchtowerSecrets.path; - }; - }; - }; - - # Extra packages - environment.shellAliases = { - docker = "sudo docker"; - }; - - system.stateVersion = "24.11"; -} diff --git a/secrets.nix b/secrets.nix index 9518d43..4a01d50 100644 --- a/secrets.nix +++ b/secrets.nix @@ -16,7 +16,7 @@ let machines.caddy machines.metrics ]; - watchtower-secrets = [ machines.portainer ]; + watchtower-secrets = [ machines.docker ]; authentik-env = [ machines.auth ]; dns01-admin-password = [ machines.dns01 ]; dns02-admin-password = [ machines.dns02 ]; diff --git a/ssh-keys.nix b/ssh-keys.nix index 1f1d57a..1231b7e 100644 --- a/ssh-keys.nix +++ b/ssh-keys.nix @@ -13,7 +13,7 @@ rec { nextcloud = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGYobAlQ9tPKjyh7eE2Ku81ZiMY6OWd3ELDqo+xBmjbC"; vaultwarden = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOW9uYQpPMiKvI/KFRvd/5f9J8a0zLaQxstWRI8VNObV"; plex = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINp9itRJGSSVWLxwrcudyGUNOOKl+qqtf+IzLHrhffyt"; - portainer = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMgg4SKMCw2/21l1crY7trFnrCmNSrkYPl3vEDnJ8aQn"; + docker = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMgg4SKMCw2/21l1crY7trFnrCmNSrkYPl3vEDnJ8aQn"; auth = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFsSQbXHRt+MpUh+YQxd5p6YPnbbWR/4ylz/pXjdZ9Bs"; dns01 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII7BdiP/dCE6FHoJylcBKQ5AXz06UpLHNyeuvfLVccSi"; dns02 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ+HIq6/ebjiv71xDozdOTn5AdnXgr1fGqIzXnH7Not+"; -- 2.51.2 From 9088b7df6ca2f8c944c34b81f4646f2ca1508090 Mon Sep 17 00:00:00 2001 From: pazpi Date: Wed, 4 Feb 2026 08:27:27 +0100 Subject: [PATCH 6/6] Update Go to 125 --- modules/services/authentik.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/services/authentik.nix b/modules/services/authentik.nix index 572bf6d..883bf3d 100644 --- a/modules/services/authentik.nix +++ b/modules/services/authentik.nix @@ -103,7 +103,7 @@ in final: prev: { authentikComponents = prev.authentikComponents // { gopkgs = prev.authentikComponents.gopkgs.override { - buildGo124Module = pkgs.buildGo125Module; + buildGo125Module = pkgs.buildGo125Module; }; }; } -- 2.51.2