diff --git a/keys.nix b/keys.nix index d491d6d5..b98b2f6d 100644 --- a/keys.nix +++ b/keys.nix @@ -22,8 +22,9 @@ rec { storage = [ bay lake2 ]; monitor = [ hut ]; login = [ apex ]; + services = [ tent ]; - system = storage ++ monitor ++ login; + system = storage ++ monitor ++ login ++ services; safe = system ++ compute; all = safe ++ playground; }; diff --git a/m/apex/nfs.nix b/m/apex/nfs.nix index 8334d507..2497f252 100644 --- a/m/apex/nfs.nix +++ b/m/apex/nfs.nix @@ -7,7 +7,7 @@ mountdPort = 4002; statdPort = 4000; exports = '' - /home 10.0.40.0/24(rw,async,no_subtree_check,no_root_squash) + /home 10.0.40.0/21(rw,async,no_subtree_check,no_root_squash) /home 10.106.0.0/24(rw,async,no_subtree_check,no_root_squash) ''; }; @@ -15,19 +15,19 @@ # Check with `rpcinfo -p` extraCommands = '' # Accept NFS traffic from compute nodes but not from the outside - iptables -A nixos-fw -p tcp -s 10.0.40.0/24 --dport 111 -j nixos-fw-accept - iptables -A nixos-fw -p tcp -s 10.0.40.0/24 --dport 2049 -j nixos-fw-accept - iptables -A nixos-fw -p tcp -s 10.0.40.0/24 --dport 4000 -j nixos-fw-accept - iptables -A nixos-fw -p tcp -s 10.0.40.0/24 --dport 4001 -j nixos-fw-accept - iptables -A nixos-fw -p tcp -s 10.0.40.0/24 --dport 4002 -j nixos-fw-accept - iptables -A nixos-fw -p tcp -s 10.0.40.0/24 --dport 20048 -j nixos-fw-accept + iptables -A nixos-fw -p tcp -s 10.0.40.0/21 --dport 111 -j nixos-fw-accept + iptables -A nixos-fw -p tcp -s 10.0.40.0/21 --dport 2049 -j nixos-fw-accept + iptables -A nixos-fw -p tcp -s 10.0.40.0/21 --dport 4000 -j nixos-fw-accept + iptables -A nixos-fw -p tcp -s 10.0.40.0/21 --dport 4001 -j nixos-fw-accept + iptables -A nixos-fw -p tcp -s 10.0.40.0/21 --dport 4002 -j nixos-fw-accept + iptables -A nixos-fw -p tcp -s 10.0.40.0/21 --dport 20048 -j nixos-fw-accept # Same but UDP - iptables -A nixos-fw -p udp -s 10.0.40.0/24 --dport 111 -j nixos-fw-accept - iptables -A nixos-fw -p udp -s 10.0.40.0/24 --dport 2049 -j nixos-fw-accept - iptables -A nixos-fw -p udp -s 10.0.40.0/24 --dport 4000 -j nixos-fw-accept - iptables -A nixos-fw -p udp -s 10.0.40.0/24 --dport 4001 -j nixos-fw-accept - iptables -A nixos-fw -p udp -s 10.0.40.0/24 --dport 4002 -j nixos-fw-accept - iptables -A nixos-fw -p udp -s 10.0.40.0/24 --dport 20048 -j nixos-fw-accept + iptables -A nixos-fw -p udp -s 10.0.40.0/21 --dport 111 -j nixos-fw-accept + iptables -A nixos-fw -p udp -s 10.0.40.0/21 --dport 2049 -j nixos-fw-accept + iptables -A nixos-fw -p udp -s 10.0.40.0/21 --dport 4000 -j nixos-fw-accept + iptables -A nixos-fw -p udp -s 10.0.40.0/21 --dport 4001 -j nixos-fw-accept + iptables -A nixos-fw -p udp -s 10.0.40.0/21 --dport 4002 -j nixos-fw-accept + iptables -A nixos-fw -p udp -s 10.0.40.0/21 --dport 20048 -j nixos-fw-accept # Accept NFS traffic from wg0 iptables -A nixos-fw -p tcp -i wg0 -s 10.106.0.0/24 --dport 111 -j nixos-fw-accept diff --git a/m/bay/configuration.nix b/m/bay/configuration.nix index 7bdfe740..9bb353eb 100644 --- a/m/bay/configuration.nix +++ b/m/bay/configuration.nix @@ -35,7 +35,7 @@ # Accept monitoring requests from hut iptables -A nixos-fw -p tcp -s hut -m multiport --dport 9283,9002 -j nixos-fw-accept # Accept all Ceph traffic from the local network - iptables -A nixos-fw -p tcp -s 10.0.40.0/24 -m multiport --dport 3300,6789,6800:7568 -j nixos-fw-accept + iptables -A nixos-fw -p tcp -s 10.0.40.0/21 -m multiport --dport 3300,6789,6800:7568 -j nixos-fw-accept ''; }; }; diff --git a/m/lake2/configuration.nix b/m/lake2/configuration.nix index 477cf59c..338c2d40 100644 --- a/m/lake2/configuration.nix +++ b/m/lake2/configuration.nix @@ -57,7 +57,7 @@ # Accept monitoring requests from hut iptables -A nixos-fw -p tcp -s hut --dport 9002 -j nixos-fw-accept # Accept all Ceph traffic from the local network - iptables -A nixos-fw -p tcp -s 10.0.40.0/24 -m multiport --dport 3300,6789,6800:7568 -j nixos-fw-accept + iptables -A nixos-fw -p tcp -s 10.0.40.0/21 -m multiport --dport 3300,6789,6800:7568 -j nixos-fw-accept ''; }; }; diff --git a/m/tent/configuration.nix b/m/tent/configuration.nix index 2b7f3f42..c3e126a3 100644 --- a/m/tent/configuration.nix +++ b/m/tent/configuration.nix @@ -17,6 +17,7 @@ ../module/vpn-dac.nix ../module/hut-substituter.nix ../module/tc1-board.nix + ../module/ceph.nix ]; # Select the this using the ID to avoid mismatches @@ -64,6 +65,13 @@ fsType = "ext4"; }; + # Mount the NFS home + fileSystems."/nfs/home" = { + device = "10.106.0.30:/home"; + fsType = "nfs"; + options = [ "nfsvers=3" "rsize=1024" "wsize=1024" "cto" "nofail" ]; + }; + # Make a /vault/$USER directory for each user. systemd.services.create-vault-dirs = let # Take only normal users in tent diff --git a/m/tent/gitea.nix b/m/tent/gitea.nix index 5c458306..4f8a595e 100644 --- a/m/tent/gitea.nix +++ b/m/tent/gitea.nix @@ -1,4 +1,7 @@ { config, lib, ... }: +let + cfg = config.services.gitea; +in { services.gitea = { enable = true; @@ -26,6 +29,52 @@ SENDMAIL_ARGS = "--"; }; }; + + dump = { + enable = false; # Do not enable NixOS module, use our custom systemd script below + backupDir = "/vault/backup/gitea"; + }; + }; + + systemd.services.gitea-backup = let + exe = lib.getExe cfg.package; + in { + description = "Gitea daily backup"; + after = [ "gitea.service" ]; + path = [ cfg.package ]; + + environment = { + USER = cfg.user; + HOME = cfg.stateDir; + GITEA_WORK_DIR = cfg.stateDir; + GITEA_CUSTOM = cfg.customDir; + }; + + serviceConfig = { + Type = "oneshot"; + User = cfg.user; + WorkingDirectory = cfg.dump.backupDir; + }; + + script = '' + name="gitea-dump-$(date +%a).${cfg.dump.type}" + ${exe} dump --type ${cfg.dump.type} --file - >"$name.tmp" + mv "$name.tmp" "$name" + cp "$name" "/ceph/backup/gitea/$name" + ''; + }; + + # Create also the /ceph directories if needed + systemd.tmpfiles.rules = [ + "d /ceph/backup/gitea/ 0750 ${cfg.user} ${cfg.group} - -" + "z /ceph/backup/gitea/ 0750 ${cfg.user} ${cfg.group} - -" + ]; + + systemd.timers.gitea-backup = { + description = "Update timer for gitea-backup"; + partOf = [ "gitea-backup.service" ]; + wantedBy = [ "timers.target" ]; + timerConfig.OnCalendar = cfg.dump.interval; }; # Allow gitea user to send mail diff --git a/secrets/ceph-user.age b/secrets/ceph-user.age index 48b912cd..7a293426 100644 --- a/secrets/ceph-user.age +++ b/secrets/ceph-user.age @@ -1,25 +1,29 @@ age-encryption.org/v1 --> ssh-ed25519 AY8zKw /gmhFOFqOs8IobAImvQVKeM5Y6k0FpuR61/Cu5drVVI -g9FXJg2oIoien0zJ70FWHwSTM8SBwbpS188S3Swj7EM --> ssh-ed25519 sgAamA opPjlWPhSiI0Rd5l7kd204S5FXFLcQcQftyKb7MDmnU -3XrRDVnglCP+vBwvfd1rP5gHttsGDHyXwbf10a8/kKY --> ssh-ed25519 HY2yRg QKZbubM76C3tobPoyCFDRclA9Pzb2fC7s4WOoIgdORc -K5kckU0KhQFTE6SikJXFJgM41Tco5+VqOsaG0qLrY1Q --> ssh-ed25519 fw2Xhg +ohqts8dLFjvdHxrGHcOGxU0dm+V3N//giljHkobpDM -jR/UzGrfS9lrJ/VeolKLxfzeJAf2fIB2pdIn/6ukqNk --> ssh-ed25519 tcumPQ 3DPkDPIQQSVtXSLzIRETsIyXQ0k1o18Evn6vf+l/6R8 -bLXF62OmJjnOT1vvgq3+AcOKKSG5NonrK5EqCVc0Mwo --> ssh-ed25519 JJ1LWg 2Wefc7eLolMU5InEmCNTq21Mf71mI0a2N1HgDrlHvy4 -qXFW9CQBnrzubZ0mzS0Io2WGRrwGBkmeYndBTcZn/fM --> ssh-ed25519 cDBabA oiH36AoIt/fFFYgnoxtH7OoetP+2/wjtn8qo3RJDSHc -qKmkxy1aZGP4ZwC0iH7n7hiJ0+rFQYvjQb5O1a1Z0r4 --> ssh-ed25519 cK5kHw bX3RtO5StMejUYWAaA37fjHA5nO7Xs1vWDQk3yOjs2o -Egxmcf8FKAd+E5hMLmhV1yQsCo5rJyUazf1szOvpTAM --> ssh-ed25519 CAWG4Q oKqqRDJH0w8lsoQBQk0w8PO+z5gFNmSaGBUSumvDp1I -m1zWp9MfViAmtpbJhqOHraIokDaPKb0DvvO4vAGCTWI --> ssh-ed25519 xA739A G26kPOz6sbFATs+KAr7gbDvji13eA1smFusQAOJXMwA -Sppvz7A103kZoNxoGsd6eXeCvVh7mBE2MRwLFj9O1dY --> ssh-ed25519 MSF3dg 55ekNcp+inbUd+GQ/VZ7BoBASaJ8YDqF74CVXy1PUxQ -aTHLLAbzQPWWld/OT3BKebc6FcmsqMTaWCPBGm1UHic ---- mVkAMnI9XQhS3fMiFuuXP/yLR9wEG9+Rr8pA4Uc0avY -DU sjM$[M[_K7sjuvD4g܄3Gn ɽP7~rZs \ No newline at end of file +-> ssh-ed25519 AY8zKw Crgof1PMHzv3jBw8VeJAst6FKSoyqPFdANFpf79CAgo +7fagE5BmlWdTsdY/i3RbExu1KBcjW1LQXbYwu6chxlk +-> ssh-ed25519 sgAamA tGRCaK8mjvz65YziXjRcjMOHIRoyGNJFzBEEbivXPDo +YLzE5a3J81r+gzkfZIeh9gS+mXzMooC82tBbZ+C3C8o +-> ssh-ed25519 HY2yRg +vhO1/vdGPM1JnZRsvVnViFWaFWUZ7MIqvWdePivkxA +2K+JdN82DTeGh9QwZBTaghg8C5BCLoEsOgTCM64PU28 +-> ssh-ed25519 fw2Xhg NHDn0dq32I/AVdUZlpzBX6retlEYEUipde7A9R90qW4 +SJO78ooqEwfHlBRW+YCzgSQJb1JHNo8jz37t3qvLClE +-> ssh-ed25519 G5LX5w d4HfLzI2623artkR2FIfRJgr5yb2BKZJUWqPnwOWDCk +Kh50QESJZSjaJPyp3xroHGn0fD5pPNEYgKkDdqxGpjs +-> ssh-ed25519 tcumPQ wQyOKtT15Qezs3cyv5/xxIPVD7Jyk6N6ZLkfxxBHLTo +rKlRBjJdfDVT6U8211+ssFF8yY9yRs1u3GhCSvsw2oE +-> ssh-ed25519 JJ1LWg 98tF1MdA244xNny4w3RnMFuubf4WcuQaZf2bN2Uq8Qc +MA1Xh1H9vHisVYdqkxNeBkngtn8cYuT2eSimvooIXYo +-> ssh-ed25519 cDBabA imJ0rXLQETELP7yo3sArhqA9nJwY+S6gkC7tA7CJsQA +pKMHW/KDAoEj5ZD64VKekg6et9hlS2PKSgDw3eB3eu8 +-> ssh-ed25519 WY7yGw +2g5021/02HvLxLqq42ynr6qKgOKJ3J5GgB1a1bmFXg +fYvj52R6bM6ngPOZ2lwVezTJnx+8LJBbdnaapKKbyd0 +-> ssh-ed25519 cK5kHw fLZ6yF3NggJ724rjYqhs5ZZh1xUExuK+ITAyqONluzk +NS9OMX70XEHrbPQnmC4KB/eoiHChIb8DwDLYJiwOLUU +-> ssh-ed25519 CAWG4Q tVduE/wMzdfS+DjNbU3Q4blNhL/A63IehNSZGJkJjD0 +jEBB5zG+gLA/88YF+KqWQsNH7lfCsWNvAkrgfbescFs +-> ssh-ed25519 xA739A ZhFvev77I+YOl1YSHKn2ZcEvGoLjWOILufjd4q/k8HM +YXEtHHtjPQlgZW60zHgHm7CLI6vYiRo+AM8QERL9tCg +-> ssh-ed25519 MSF3dg 9DvLNheBU1vlfW2zNNxBrGnJ6k4P5ox7s+OGKlgRdyQ +wseHfLGHz0huNi5sZsNOfeNkm6Kjjx0SZ8lK4/oXtUQ +--- bnJE+14onuSla0XmckD4z/wChWGZh6exbkcbyhcmNYU +tN猈Uw▮i2-iV'(IF Sxs/s NDmQowZv.\ \ No newline at end of file diff --git a/secrets/gitea-runner-token.age b/secrets/gitea-runner-token.age index a5c23d93..b144b256 100644 Binary files a/secrets/gitea-runner-token.age and b/secrets/gitea-runner-token.age differ diff --git a/secrets/gitlab-bsc-docker-token.age b/secrets/gitlab-bsc-docker-token.age index 2b77fcf0..45624d73 100644 Binary files a/secrets/gitlab-bsc-docker-token.age and b/secrets/gitlab-bsc-docker-token.age differ diff --git a/secrets/gitlab-runner-docker-token.age b/secrets/gitlab-runner-docker-token.age index e7f58c7f..a81096bc 100644 --- a/secrets/gitlab-runner-docker-token.age +++ b/secrets/gitlab-runner-docker-token.age @@ -1,13 +1,13 @@ age-encryption.org/v1 --> ssh-ed25519 HY2yRg U2KQWviZIVNemm9e8h7H+eOzoYNxXgLLS3hsZLMAuGk -6n5dH1McNzk3rscP4v2pqZYDWtUFMd15rZsEd/mqIFM --> ssh-ed25519 cK5kHw Ebrj/cpz1cFWAYAV9OxgyyH85OEMUnfUIV66p7jaoFY -6J7hWqODtS/fIF4BpxhxbrxZq5vbolvbLqRKqazT02M --> ssh-ed25519 CAWG4Q mXqoQH9ycHF7u0y8mazCgynHxNLxTnrmQHke+2a5QCc -mq6PdSF+KOqthuXwzTCsOQsi5KG0z1wHUck+bSTyOBY --> ssh-ed25519 xA739A TADeswueqDEroZWLjMw3RDNwVQ2xRD+JUMVZENovn0M -KFlnSjVFbjc+ZsbY8Ed7edC5B01TJGzd/dSryiLArPc --> ssh-ed25519 MSF3dg Pq+ZD8AqJGDHDbd4PO1ngNFST8+6C2ghZkO/knKzzEc -wyiL/u38hdQMokmfTsBrY7CtYwc+31FG4EDaqVEn31U ---- 1z4cOipayh0zYkvasEVEvGreajegE/dqBV7b6E7aFh0 -R@/iI'Nxr"`Oy8 \/ID`ߓuy:9Lt؋AU`;q8GLU#iyiڜ \ No newline at end of file +-> ssh-ed25519 HY2yRg eHM55QsHK1ca9b5nP3EoVUZYu0w2d4B5tkilNK0j/lw +6Na6lkMe0fOd7+vNP1fLIaVEQDUw5m65Wh8jUH1I6C0 +-> ssh-ed25519 cK5kHw 0ekhoBYwF7OSWwn4P5f/J4gXb9UHJAWGKV0yI7HCzzE +2Q+Tt5jXAB9ip9jf1z+jeM4FSiqd1w5DNtbqtacuOcM +-> ssh-ed25519 CAWG4Q Jmw4v9efOFXHjjNky96q/d6vGBP5dNM4wK9zoGrwOh8 +u5I17wcIq8/2ARWckDXsYckhfX0jWE4AEm5mip/KHws +-> ssh-ed25519 xA739A 10pPeC2YG9DJzaQlt7p+fGo27VDiL2dN6JmvY2npcUw +4aRV8DekYeL9HagGWgOSjlYnPKmYdKZH8Aw4lRdm+r8 +-> ssh-ed25519 MSF3dg hDwIE3Su6cN3sq2E5v/oy6vTNfxTT1ZPts85//gIhwY +aoiaGjQYJB1ededhIuVBCKDRLIOVThWz1pSTvg65J3Y +--- OYPAGb5U/nwLOIV5VchSvxhChjNnwzbEgU9glSkWCl4 +=cWȟJSaІ&ቧ)E CJ~uc2vsvfX7(~=XCi;״\ߢܣɳCeD;;X*3irEm< \ No newline at end of file diff --git a/secrets/gitlab-runner-shell-token.age b/secrets/gitlab-runner-shell-token.age index 0290f9a7..e01dfbd9 100644 Binary files a/secrets/gitlab-runner-shell-token.age and b/secrets/gitlab-runner-shell-token.age differ diff --git a/secrets/ipmi.yml.age b/secrets/ipmi.yml.age index c02079fa..e1ae8574 100644 Binary files a/secrets/ipmi.yml.age and b/secrets/ipmi.yml.age differ diff --git a/secrets/jungle-robot-password.age b/secrets/jungle-robot-password.age index 1a296c6c..c774f259 100644 Binary files a/secrets/jungle-robot-password.age and b/secrets/jungle-robot-password.age differ diff --git a/secrets/munge-key.age b/secrets/munge-key.age index a92ac0df..b20d0788 100644 Binary files a/secrets/munge-key.age and b/secrets/munge-key.age differ diff --git a/secrets/nix-serve.age b/secrets/nix-serve.age index dcc0b5e8..2e0e4ce4 100644 Binary files a/secrets/nix-serve.age and b/secrets/nix-serve.age differ diff --git a/secrets/tent-gitlab-runner-bsc-docker-token.age b/secrets/tent-gitlab-runner-bsc-docker-token.age index b8fe92d5..187c863b 100644 Binary files a/secrets/tent-gitlab-runner-bsc-docker-token.age and b/secrets/tent-gitlab-runner-bsc-docker-token.age differ diff --git a/secrets/tent-gitlab-runner-pm-docker-token.age b/secrets/tent-gitlab-runner-pm-docker-token.age index 863144d8..871bf449 100644 Binary files a/secrets/tent-gitlab-runner-pm-docker-token.age and b/secrets/tent-gitlab-runner-pm-docker-token.age differ diff --git a/secrets/tent-gitlab-runner-pm-shell-token.age b/secrets/tent-gitlab-runner-pm-shell-token.age index 74527b0a..dce063ab 100644 Binary files a/secrets/tent-gitlab-runner-pm-shell-token.age and b/secrets/tent-gitlab-runner-pm-shell-token.age differ diff --git a/secrets/vpn-dac-client-key.age b/secrets/vpn-dac-client-key.age index c414fd70..75ebda4d 100644 Binary files a/secrets/vpn-dac-client-key.age and b/secrets/vpn-dac-client-key.age differ diff --git a/secrets/vpn-dac-login.age b/secrets/vpn-dac-login.age index 6191ec7a..c35d902f 100644 --- a/secrets/vpn-dac-login.age +++ b/secrets/vpn-dac-login.age @@ -1,14 +1,13 @@ age-encryption.org/v1 --> ssh-ed25519 G5LX5w SRJhNenoQXbT1FgX3TMPnVH5P6oe2eHot+M1YsEjsEk -hfTSLgKi98Eh7JK5o7x2POpTEtQlQCpEa3keUFYCuME --> ssh-ed25519 cK5kHw z5TwWJTkvx7HztjXHJW/aCOtOfPrQaLP0gyIT7rXcyU -b4NCpHfasgvkLLr+6LcWUl60p59aSNnfp3bl2OFYXo0 --> ssh-ed25519 CAWG4Q 4VpS1/OnFe8nxcQbRTKNhjsh/ZQ5cbhSMXwK/jjQ+3o -WF9wvOkqVml4UcEzyzeumKuUwCwwr2zvKLMg+PCB8nk --> ssh-ed25519 xA739A 67FhuJ070jBVMt/xbKHWhfri6iIm0FyaFvzQabsvFBM -1G5/913dDv/r/6p1x/c5YiUnZzrX/LvIj33KW+PN0KU --> ssh-ed25519 MSF3dg Bj/yB4N2wkyHCHC22tcjjJAA4ebSamN0Z4UVX3ZnryI -6D/ZgTs+j+MGDAbPU5zyK0i9zN6tQy68IcOnQZ27mYg ---- 169erk3ICSYLs4FPEuXCn7QlekWhsmSn0Lr+/R14I5Q -ҽ3s -w4Db."|)";.ɫ7)LeC=S؟ \ No newline at end of file +-> ssh-ed25519 G5LX5w /9lcJOXC9CN02+XLswUaJ0H7jU6Xhjd8Xg4+KY0l1Vc +fCLzsLc9zrocM8SHOKyZwt6eUEr8r1WLug9RLi63KU0 +-> ssh-ed25519 cK5kHw 1qza6h2NRSs4g8LYdFU7E+Dn1CgdtCU7DPdYInP1GwM +/6uk7pTFkNTRTI7nA+x4y4CyOBVQVXX2lnpOg3ktPe4 +-> ssh-ed25519 CAWG4Q o+vyzcejSaNVYPSGzzOdzaqPByZ6zA1uaJf4KOg+wQA +wfZmWrDSfRV8C+Hu+SeZDcomf/qigBqxuQK77SfnuEo +-> ssh-ed25519 xA739A +rBsOC+IBE3lmc/pfrziftLIqMSyaGMsggRjC5Pqwl0 +xa7ulLz2+YC3g2hu7e9XhRYDIUb2sriaaigJRYF2oB8 +-> ssh-ed25519 MSF3dg TK6PmKjjQt8ni0mJLCt7P41lUsgimlj3o5Q6n3N+DE4 +ne+s3ctcg8cBjY06LY2lrW7wcxomvKHxu6MlirEA8Kg +--- eorg2ckkUZ1Ogi4iTTg2MoiVBwl1F0RCmH2D8N1d1So +8i$]KJ=2ZӼF][8ޤ =LD/gz \ No newline at end of file diff --git a/secrets/wg-apex.age b/secrets/wg-apex.age index c22c1673..deaeb828 100644 Binary files a/secrets/wg-apex.age and b/secrets/wg-apex.age differ diff --git a/secrets/wg-fox.age b/secrets/wg-fox.age index 57079f3e..f7636022 100644 --- a/secrets/wg-fox.age +++ b/secrets/wg-fox.age @@ -1,14 +1,13 @@ age-encryption.org/v1 --> ssh-ed25519 cDBabA heyW9/cxgwFX9IexQIXjAQDWGQPNcMXcArQp2Rxsqx4 -o9MQ7EH8PDDjsJdpH9F3Xq2zUoaDAJQlfFmYucSFs6Y --> ssh-ed25519 cK5kHw Sza4pos7K3qW3omEeyidI/jszJNf9smemSZnUJfCIww -D6vazXki7hIYraIuSiGPS+FPbkFUwHhHWDf52OhEIMg --> ssh-ed25519 CAWG4Q YexIHueOIMmIN8JIDyNUOKBkyz/k18HqV3hTXh48KlM -xh8UJzzWT6ByN+Dpn4JrMNsjGC/uc/v6LynwjBDz9NQ --> ssh-ed25519 xA739A KySG3TXdqfCMUkVEDGa74B0op745s3XGYxFLyAXSQAc -5EI/yb5ctW9Qu18bHm3/sK97kwGcKzzmWvPSCWm89XA --> ssh-ed25519 MSF3dg MNxnNj0fHmri8ophexXPNjRUBUWrzcuk5S1mucxUMTE -GVFWXtISEU8ZmlwL4nh4weAgfGrt2GHX0DTzbpS6zg8 ---- UdrqkYG2ZApAuwdZeNhC50NP2rkD/Ol6y8nJa4RHx7Y -ܻm(>HY87G+*9V.pOo=+哇P0{)>z3P^ -u \ No newline at end of file +-> ssh-ed25519 cDBabA So/Tqwdwd7G0PbE4RwH2qDrNcdqTkhFjF4IJrLKKpkM +MEA5dzlUeFXm3pa+ndxrcE0ZWdO00Xf98+Q8U9LZ+cQ +-> ssh-ed25519 cK5kHw sCHD/hHBOfMBUQXkLG3MBPNC4ebLOXW37OlF/C8FEjU +4TFbKoy23Ic2vteXZ02fMrFxyb4NxyWaSo5I8dn48mI +-> ssh-ed25519 CAWG4Q KYGPAXTx8H5cBC3YIBxi5B7OeF15C9rEIPFCcG0vEDw +9LC2Zvp1Oiau1/hfPf+nJknl6BUSr+lzTn6TozZNxJg +-> ssh-ed25519 xA739A hpvNBHPgYRtUx0HyUAdCW8s7QTmGyPXwzRHb8qYoeG0 +QkUZINY7Fr7HpyY6lbIMcP+hGO3oCmLL6N+yDN4weyk +-> ssh-ed25519 MSF3dg P9TmEfXS+hyxsbVKja58UWAFpad0ZS3LhwrMkLnSNAY +hiHuh7HhoYwHi2KFbCczXJoF3On9eqjD1Wsp9Q1NW/w +--- SN3peoDvjXuD/Q4DdebQFam1CE22NyGZlMmnKyCTuX8 +s&׳֦}#In0&{1. 0ÛBp75/Ьê~T3 fjm \ No newline at end of file diff --git a/secrets/wg-raccoon.age b/secrets/wg-raccoon.age index f32a2aa3..fc29bc7b 100644 Binary files a/secrets/wg-raccoon.age and b/secrets/wg-raccoon.age differ