Add SOPS to Saurosuchus
Change-Id: Ie333c73a102de8270202c29ec8605ba4d1aaa473
Reviewed-on: https://git.clicks.codes/c/Chimera/NixFiles/+/635
Tested-by: Skyler Grey <minion@clicks.codes>
Reviewed-by: Skyler Grey <minion@clicks.codes>
diff --git a/.sops.nix b/.sops.nix
index b4ef113..cac2fee 100644
--- a/.sops.nix
+++ b/.sops.nix
@@ -4,10 +4,13 @@
users = {
coded = "BC82DF237610AE9113EB075900E944BFBE99ADB5";
minion = "76E0B09A741C4089522111E5F27E3E5922772E7A";
+ pinea = "8F50789F12AC6E6206EA870CE5E1C2D43B0E4AB3";
};
hosts = {
+ # nix run github:Mic92/ssh-to-pgp -- -i /etc/ssh/ssh_host_rsa_key
shorthair = "B5237D6B63AB2E13FDA07170E5AED9775DD21543";
greylag = "047bf8897df877fe86133e98522c6d280d545c00";
+ saurosuchus = "12f47c96d9066c52897cdf9ddf581f86799fb07c";
};
};
in
@@ -18,8 +21,11 @@
pgp = nixpkgs.lib.concatStringsSep "," [
keys.users.coded
keys.users.minion
+ keys.users.pinea
+
keys.hosts.shorthair
keys.hosts.greylag
+ keys.hosts.saurosuchus
];
}
{
@@ -36,5 +42,12 @@
keys.hosts.greylag
];
}
+ {
+ path_regex = ".*\\.sops\\.pinea\\.(yaml|json|env|ini|[^.]*\\.bin)$";
+ pgp = nixpkgs.lib.concatStringsSep "," [
+ keys.users.pinea
+ keys.hosts.saurosuchus
+ ];
+ }
];
}
diff --git a/modules/nixos/wifi/default.nix b/modules/nixos/wifi/default.nix
index f033b69..00e8355 100644
--- a/modules/nixos/wifi/default.nix
+++ b/modules/nixos/wifi/default.nix
@@ -24,6 +24,8 @@
psk = "@Orange2_5G_A@";
priority = 100;
};
+
+ "OurVM2.4".psk = "@OurVM2_4@";
};
environmentFile = config.sops.secrets."modules/nixos/wifi/wifi-passwords.sops.chimera.env.bin".path;
diff --git a/modules/nixos/wifi/wifi-passwords.sops.chimera.env.bin b/modules/nixos/wifi/wifi-passwords.sops.chimera.env.bin
index d12d644..800269a 100644
--- a/modules/nixos/wifi/wifi-passwords.sops.chimera.env.bin
+++ b/modules/nixos/wifi/wifi-passwords.sops.chimera.env.bin
@@ -1,33 +1,43 @@
{
- "data": "ENC[AES256_GCM,data:rprc7E3CjSwrS1jhnbhToiROWEOxNYMjV1jHnx65sk7GPCbnfsSEtMw6ozMUEKWTlwjD0aTfkW9KUXUTQYSS0AOvnd/x/s9M99b6FKtvV51oNWFTehuP3npZL1IH2PEA1CMTFVAuFonh7tr30sqrcPdZHeTbUYXMbVepz0xRgETZN9KqQnqfaY+Kd9NSNGGiy0SE9ejIMOv8NmTKU1RgfBmnwOeOKWKTwDfdYr0Ghbdnx/1TLk2JfADTqX6EJxnF6ilF7CZuSJTk8u+HpY5OgwG0PLPG3HaE,iv:giyihKo0rubYawEuQNPzTW0EZZandRi8amiDQLgPTTg=,tag:fa41dpXMdaB1Cmy9t3Q8NQ==,type:str]",
+ "data": "ENC[AES256_GCM,data:ms0Y1pq554gMhMq9Rea9xbMwRAf7Qg4wwksMfk2M0eyD/YJKYaGaSaqurKeuvFd7t/xNQ3ool9ylPwQqIQWaUmjCgtEGzmg5bdcfxFvXJFHpF+yjHCkETgfFB+Jqzhi1LOAvAjd5jSpTBp7gyOrYSow67DpYzBfNDmZ1EGT/Lz9nLY3iC+CRKb7hCL8xYuiLwQ9rOPIe4PRGJ/+0htDSqMFt4oHJpm3+Z4RDez229QZwu7GzHsfgY2a0U8elQ+CjJgzQlSOcgHsoW7aIgcBODFt0VLbxOSs+skfImgIC0X3aBKVN50FmPOGyBkUAzZo+TvCaP+x1PVBSUUXdK+s1UPA=,iv:kC9j/a0SArqv3wA/2hY8mfYEl19aiX+zUtJ331/8tZ4=,tag:rkU5cUgdJq4BPoMdNNgFSQ==,type:str]",
"sops": {
"kms": null,
"gcp_kms": null,
"azure_kv": null,
"hc_vault": null,
"age": null,
- "lastmodified": "2024-02-24T00:15:22Z",
- "mac": "ENC[AES256_GCM,data:tZbZiGsTGD0oh7KY7gy4Cf+EZhUQ1ApIPy9TzUqGwNokKSUAVpstc5JuTRioLTcdpBKS9Tf59nOzkVJRNoPs30JFYflIOfBkOil17sXSI8q2LC2GiprPFR2XFIDwlO3naGrEsirdD6cEOtB9F4vFzreZGq4m/Axo0kW+UuEUn5o=,iv:sGks7VSKlJObVjsgOKUt0jqGnNjldpOLnEWuPkdbs8Y=,tag:ddKQdLLxsDsA9gmBYdUN8g==,type:str]",
+ "lastmodified": "2024-04-12T20:12:22Z",
+ "mac": "ENC[AES256_GCM,data:iinHFpC5NDZQzDZQwSJnxiaL9v91q+Yq3zt+D1e++OgLbVg4NVAEfqEhx75ugBDk6NAc6AEXkH4N7JTfhu/ueh+NwHr483p9zbBWUHpccAaFjst3RXFiGi2wBVYEU5TuJRqck0EIzDPkR38356dMYNXoWhsB5r8kZ7d05hVN0es=,iv:MxlPbWBV2YqlxiEkyM/0NtILHOY+MHUAB9EwIm0pio8=,tag:KopQkfIR8BAhHQFUnJTR8A==,type:str]",
"pgp": [
{
- "created_at": "2024-02-21T22:51:05Z",
- "enc": "-----BEGIN PGP MESSAGE-----\n\nhF4D6MHlIv4I/7ASAQdANKT/SFDkwogBm3dVhqiV53D3P2xiwvU2CQK7qQfqu3sw\nBAGRiDaCKxxnpW+d8Aow9PpT+oONTNdct4SDjuQV8hgHuXw+4CqVhHaP4ZsJWhfN\n0lwBdjli5wXxUi7dI2Lzmy0TbOne/kvnR8YiOuiANAbQCU66RFONQli+uQB7Fvde\nsHc8oUhJN65vn86ehS0x4rqsf4yrOjcDisQ8rSQFdo+7EzbjahkcCrm16IoCgg==\n=/+dT\n-----END PGP MESSAGE-----",
+ "created_at": "2024-04-16T17:09:43Z",
+ "enc": "-----BEGIN PGP MESSAGE-----\n\nhF4D6MHlIv4I/7ASAQdAwZJ22hVeyBJ0oyDxFhe49BgxE+QM5pa/hPwDpSK231Yw\nruc3HejETVulkC1ZWY1kJ4Fet82jFUupK9/Kv+Rce7DIUtqbC0su+57d93CMdvnP\n0l4Bj0LYhCir5SFG9tbE95hV5akVbF6euZnFoHl4bKwHk+t+55b2+Aw1xewc2x00\n3GWPDG6AsLZPFRxkY2O1P02me4T/zQXJkx6D06eLFhL2D8LpQ1LA66Kq+vNt6R+6\n=/ynV\n-----END PGP MESSAGE-----",
"fp": "BC82DF237610AE9113EB075900E944BFBE99ADB5"
},
{
- "created_at": "2024-02-21T22:51:05Z",
- "enc": "-----BEGIN PGP MESSAGE-----\n\nhF4DxpBiwsu2o5wSAQdAgf+PxYp6MSdGm9jRPQb3DEYKWLzjdrm9QQb/kp+EgjYw\naBLT8dM22hgvlgNA6MZjHXqKEbDK2UMNEcHr3DeNnGaZNhnmxtoDID+D0i15j5sZ\n0lwB/d666QbGjKQyr63G8EYKPpQYMS1zp8g8QCV4qQ7FQt9o3Pm8SHLFNfdame8C\nb4sgVRsnVaju7EzkMhBlIjuHPgiezLL25EwHKtwJyapEw27tBRKzGtoVuzEJ/g==\n=aOwG\n-----END PGP MESSAGE-----",
+ "created_at": "2024-04-16T17:09:43Z",
+ "enc": "-----BEGIN PGP MESSAGE-----\n\nhF4DxpBiwsu2o5wSAQdAWnTge3KgH9G1XRcEv36k0S6vyiD8l88B+a/UDsEuwxUw\nFYOkQ+nPqR6N1bDC/KqMNmlitbaFEiRIeMVsNvIqhcwMIeqJFND0NCXHv74+xipR\n0l4BxXCJfmslUUD3zDeZ4ON8A/VaIWWT0y8iROEBzAyEKMwkzIyWwFHqVFWEnae3\nfpMGCS5rl/E4UId+kW/M09zqhl1eQJUK4AYll3gfrSiNrIQYLgYgTJd5FamTYYE7\n=nIef\n-----END PGP MESSAGE-----",
"fp": "76E0B09A741C4089522111E5F27E3E5922772E7A"
},
{
- "created_at": "2024-02-21T22:51:05Z",
- "enc": "-----BEGIN PGP MESSAGE-----\n\nhQIMA+Wu2Xdd0hVDAQ//Zk6waKTo3JUj9VGtFlcaCUNl4SuNcelm9/LuyJ18ELD9\n7FdaX+swoaz5+RlVjNo6E1F9hEntmHK4Gsq0xSKmOzrKo2Apb7LukL40ti+bdr8r\nlFG+5xQPMwiX/lt2u0SX7/s31nyFJr7KyIddWJ42NrAROgQrbNs618MptDupwwJr\nfyaEU0hezB3Ume4x2h35G9/BQcL0Ax2HciYBrG9nOEOBAGUwzKNnH499AhhrLxSA\nIAqfSR6wJNYXiQ9SK2vvGxjvUgDNlTtDgyBHiOt5S9tMaoookfCfXQbvAr7nMZzw\nn5dGtkPYNyCBzt2BdShzBsNJY6o6z42VZoWXWNgLhtgPVFiEIprMycZ9EvWXLWwv\nPqeDcPEAAdYbgAJfPNramZqxR8dgGIEMbEMmqbguTS/cVzMRVNU5OEhuyO/O+mIe\nprQpD5XnDicYHkDtnNzNFPCQx09ogTrtdy6o3YtxBBgrwlyE0pvWAr1I6a6+Zg8J\nE3EDsxuPR/N6H2IaWTjO52VIRWia3HU6YKa5WXSVrryZKECJK4NSKLB79gzk6IER\n4uUaB8XrIVqSEhVtued0IgLqhW8/GBztEo/crME86mP9GZSwB3qSV++SB91Eepzp\no6Ju0/NdYPD4T9yL3oGMpmiV5vHOEWYFeibSstdMbRuATfqJD+FFgq0csBuHy5fS\nVgFN8sXnniYsQu0NBFXD3BvAf4OR/nAl16AIU0Ea+Uifu5Tav00SDpGIVlzAQihw\nGh6uNiKbn/SHn6nzTKNf2LLQ4Wk5M3NqWMIFJlFtQRHo12HQWZDj\n=I19Q\n-----END PGP MESSAGE-----",
+ "created_at": "2024-04-16T17:09:43Z",
+ "enc": "-----BEGIN PGP MESSAGE-----\n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\n=g0YG\n-----END PGP MESSAGE-----",
+ "fp": "8F50789F12AC6E6206EA870CE5E1C2D43B0E4AB3"
+ },
+ {
+ "created_at": "2024-04-16T17:09:43Z",
+ "enc": "-----BEGIN PGP MESSAGE-----\n\nhQIMA+Wu2Xdd0hVDARAAiFI3B8hPwkFhrNc9rrtam7AgWv8A6R8UoNbB2LKMoM5x\nvDT+n4AfvSJxqLS6Le8/yc3ttYJaLxNefCKPl3ocrlWZH37sEMpMjArYdOsHgUve\nbqPXW3bQMpmXh8BbzJBykk62Hsfl5N+i2HxdzWZ3oLhY7tfPYPkwuQC3n/2WUb/v\nUba6z8j/dB/WNTMLFdULR/5VhVLzntWc6rkCrhoSz5gYyBgX+oXAscmdg0nWtCSb\nz9LAg5Xhs4A/qk1fh6JTTKtmoTXcjV4IBAozx6kpLplPo4Z4mQ9aWo8Cu/YRkbV3\nYJT+HIZu1Q1LKQyHqvFNjp35oqB4dxHBOQSMo4RwhpQ6/rQ7vtzXai6wypuXulgu\nZpZ/PKjoU9qnMSYOkMxaFMwcaSPiCijgelybbjqIqUXeoBlg4PE03XcTb1jbTYW4\nsCTzDirUbWQNHy0iKcT9ct3+WvAKHIt3bYExk05tKQI5XSJZ83NHfar8mUKikpBP\nvJh1j6BqUxN+ym2Qzwj2Ji/KOsFJMwVe8YxRfm7ZMcgpPhRUe9ORlfOacslw3wcA\nCvSjgNp5DuaPIxv9CM+aCKk8+ZUKiWnyqtIzWU8PojJq/yt/CNgalF/vGL5ZYnv6\nmgi1qNUeI+w6Jsp3Xk0cAPWQzFelJzmJWxZYdixLfh7niTM/baWeudWC8FgDr3fS\nWAFvgLRQf6e7rQde+VqZ/G6O8nRyI3KXkMg5g83W9joZpGJdGXMefCRenTtZ5zBc\nl2D+yeZvWX5NaGMA+jODzFTpn8VbNK4Tc5ZO6qhAlyBJ2O1uKKVa/WU=\n=uApR\n-----END PGP MESSAGE-----",
"fp": "B5237D6B63AB2E13FDA07170E5AED9775DD21543"
},
{
- "created_at": "2024-02-21T22:51:05Z",
- "enc": "-----BEGIN PGP MESSAGE-----\n\nhQIMA1IsbSgNVFwAAQ//f4h2EtoGbd0AU14TqNmlgkyDPtLLVgG3zIVxnufugi+t\nWLCJqDXTLRSGF45tNiNsc0toAVSpRuULP4XH/5Xi5QVhyb7ceCMSIdyS/2M/S57K\nQloZgzvdax0+N0bcj0B5NIk3JWVp3wFKxu2xx97RDJSFqxiWEW32NK3AgVTBYEIU\nbbKXor7sgjxJiQnzKkhwc+iecXnLqxlR/eIY1R06ZM1z9rcDAt+eqOqb17HF5kmT\nmJYv+jGUYkx0hDxoOTZ2HEmeeORTsdWJwSXCx5nRQH0oXX5NZIB0hkOc5scf5fmf\nUNwB0o1dGxPDpc8WBvGZl6AMLUDecKFJQV6kXO3U0sfK08EpxIVdweyYjPmWihpr\nyAkVmzngHTjW5lbtNxhJ2/Snp9pDUboVS5mKp0PtQGNE/9VoOosJoS7nR+b37hhK\nubdKuSrT0iwWrzlfU9s8W0+nTCoV1xkRghJfu1MArD350rffWaycL0t8omynbWID\n87M7LOufGlEn/73MAZ51SeN6LWKh1nGYRMfSOdrJxQ9w3y4ghrSSNj5uY3gUhtCF\no4yIFx+4GGCZ6BVJGccYzJAgrve4WrfmAC+Hg0dJ6ISEAHPjCmgv7eaXBKvO6SBg\n/y6c34qIBVpjxzzs0I3aYVep4kHLD5UhH7xfqYoDYmbXfqDfDmgy8heD9WtOYpXS\nVgFvsDpNIYFLfUpn6gQS+Pz+XeN+NOUTdm63FwOgMyKnVWIQXlVjBxwnEPCPapkO\nzXDK6DGua8s4xMLSe74fyqTBuXDJtZSU00uO8bEVJUbumm/4x9jJ\n=8s0L\n-----END PGP MESSAGE-----",
+ "created_at": "2024-04-16T17:09:43Z",
+ "enc": "-----BEGIN PGP MESSAGE-----\n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\n0lXktD+puI5WTIAPxrhutzA/zVYYfw+bgLqD9mNg3RYdMc4sDn+taY0=\n=PJCL\n-----END PGP MESSAGE-----",
"fp": "047bf8897df877fe86133e98522c6d280d545c00"
+ },
+ {
+ "created_at": "2024-04-16T17:09:43Z",
+ "enc": "-----BEGIN PGP MESSAGE-----\n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\nVDoufsCEFQ5ScIB6egxqB4Jm0qONxrBOfh+Zs4PymZKymRyz/A4E1j4=\n=LP3s\n-----END PGP MESSAGE-----",
+ "fp": "12f47c96d9066c52897cdf9ddf581f86799fb07c"
}
],
"unencrypted_suffix": "_unencrypted",