feat: stroopwafel

flake.nix

@@ -104,6 +104,10 @@
             sshUser = "b12f";
           };
 
+          stroopwafel = {
+            sshUser = "b12f";
+          };
+
           droppie = {
             hostname = "droppie.b12f.io";
             sshUser = "yule";

hosts/default.nix

@@ -2,6 +2,24 @@
 {
   flake = {
     nixosConfigurations = {
+      stroopwafel = self.nixos-flake.lib.mkLinuxSystem {
+        nixpkgs.hostPlatform = "x86_64-linux";
+        imports = [
+          self.nixosModules.base
+          ./stroopwafel
+          self.nixosModules.b12f
+          self.nixosModules.audio
+          self.nixosModules.bluetooth
+          self.nixosModules.desktop-extended
+          self.nixosModules.docker
+          self.nixosModules.graphical
+          self.nixosModules.nextcloud
+          self.nixosModules.office
+          self.nixosModules.printing
+          # self.nixosModules.wireguard-client
+        ];
+      };
+
       biolimo = self.nixos-flake.lib.mkLinuxSystem {
         nixpkgs.hostPlatform = "x86_64-linux";
         imports = [

hosts/frikandel/wireguard.nix

@@ -91,6 +91,15 @@
             "fd00:b12f:acab:1312:acab:6::/96"
           ];
 
+          persistentKeepalive = 25;
+        }
+        { # stroopwafel
+          publicKey = "5iNRg13utOJ30pX2Z8SjwPNUFwfH2zonlbeYW2mKFkU=";
+          allowedIPs = [
+            "10.0.1.8/32"
+            "fd00:b12f:acab:1312:acab:8::/96"
+          ];
+
           persistentKeepalive = 25;
         }
       ];

hosts/pie/wireguard.nix

@@ -74,6 +74,15 @@
             "fd00:b12f:acab:1312:acab:6::/96"
           ];
 
+          persistentKeepalive = 25;
+        }
+        { # stroopwafel
+          publicKey = "5iNRg13utOJ30pX2Z8SjwPNUFwfH2zonlbeYW2mKFkU=";
+          allowedIPs = [
+            "10.0.1.8/32"
+            "fd00:b12f:acab:1312:acab:8::/96"
+          ];
+
           persistentKeepalive = 25;
         }
       ];

hosts/stroopwafel/.config/sway/config.d/autostart.conf

@@ -0,0 +1,6 @@
+# Autostart applications
+#
+# Example:
+# exec swayidle
+
+exec keepassxc

hosts/stroopwafel/.config/sway/config.d/custom-keybindings.conf

@@ -0,0 +1,19 @@
+# Touchpad controls
+#bindsym XF86TouchpadToggle exec $HOME/Workspace/ben/toggletouchpad.sh # toggle touchpad
+
+# Screen brightness controls
+bindsym XF86MonBrightnessUp exec "brightnessctl -d intel_backlight set +10%; notify-send $(brightnessctl -d intel_backlight i | awk '/Current/ {print $4}')"
+bindsym XF86MonBrightnessDown exec "brightnessctl -d intel_backlight set 10%-; notify-send $(brightnessctl -d intel_backlight i | awk '/Current/ {    print $4}')"
+
+# Keyboard backlight brightness controls
+bindsym XF86KbdBrightnessDown exec "brightnessctl -d smc::kbd_backlight set 10%-; notify-send $(brightnessctl -d smc::kbd_backlight i | awk '/Current/ {    print $4}')"
+bindsym XF86KbdBrightnessUp exec "brightnessctl -d smc::kbd_backlight set +10%; notify-send $(brightnessctl -d smc::kbd_backlight i | awk '/Current/ {    print $4}')"
+
+# Pulse Audio controls
+bindsym XF86AudioRaiseVolume exec pactl set-sink-volume @DEFAULT_SINK@ +5%; exec pactl set-sink-mute @DEFAULT_SINK@ 0 && notify-send 'Vol. up' #increase sound volume
+bindsym XF86AudioLowerVolume exec pactl set-sink-volume @DEFAULT_SINK@ -5%; exec pactl set-sink-mute @DEFAULT_SINK@ 0 && notify-send 'Vol. down' #decrease sound volume
+bindsym XF86AudioMute exec pactl set-sink-mute @DEFAULT_SINK@ toggle && notify-send 'Mute sound' # mute sound
+# Media player controls
+bindsym XF86AudioPlay exec "playerctl play-pause; notify-send 'Play/Pause'"
+bindsym XF86AudioNext exec "playerctl next; notify-send 'Next'"
+bindsym XF86AudioPrev exec "playerctl previous; notify-send 'Prev.'"

hosts/stroopwafel/.config/sway/config.d/input-defaults.conf

@@ -0,0 +1,9 @@
+input "1739:0:Synaptics_TM3288-011" {
+  dwt enabled
+  tap enabled
+  middle_emulation enabled
+}
+input * {
+  xkb_layout us(intl),de
+  xkb_options ctrl:nocaps
+}

hosts/stroopwafel/.config/sway/config.d/screens.conf

@@ -0,0 +1,20 @@
+set $internal eDP-1
+set $middle "Hewlett Packard HP E231 3CQ4290S5J"
+set $standup "Hewlett Packard HP E231 3CQ4251F33"
+
+output $internal {
+  scale 1
+  pos 1080 1080
+}
+
+output $middle {
+  scale 1
+
+  pos 1080 0
+}
+
+output $standup {
+  scale 1
+  transform 90
+  pos 0 0
+}

hosts/stroopwafel/configuration.nix

@@ -0,0 +1,42 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+with lib; let
+  psCfg = config.pub-solar;
+  xdg = config.home-manager.users."${psCfg.user.name}".xdg;
+in {
+  # Use the systemd-boot EFI boot loader.
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+  boot.plymouth.enable = true;
+
+  pub-solar.core.disk-encryption-active = false;
+
+  pub-solar.core.hibernation.enable = false;
+  pub-solar.core.hibernation.resumeDevice = "/dev/dm-0";
+  pub-solar.core.hibernation.resumeOffset = 15296512;
+  pub-solar.terminal-life.full = true;
+
+  # https://nixos.wiki/wiki/ZFS#declarative_mounting_of_ZFS_datasets
+  systemd.services.zfs-mount.enable = false;
+
+  home-manager.users."${psCfg.user.name}" = {
+    xdg.configFile = {
+      "sway/config.d/10-screens.conf".source = ./.config/sway/config.d/screens.conf;
+      "sway/config.d/10-autostart.conf".source = ./.config/sway/config.d/autostart.conf;
+      "sway/config.d/10-input-defaults.conf".source = ./.config/sway/config.d/input-defaults.conf;
+      "sway/config.d/10-custom-keybindings.conf".source = ./.config/sway/config.d/custom-keybindings.conf;
+    };
+  };
+
+  # This value determines the NixOS release from which the default
+  # settings for stateful data, like file locations and database versions
+  # on your system were taken. It‘s perfectly fine and recommended to leave
+  # this value at the release version of the first install of this system.
+  # Before changing this value read the documentation for this option
+  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
+  system.stateVersion = "20.09"; # Did you read the comment?
+}

hosts/stroopwafel/default.nix

@@ -0,0 +1,9 @@
+{ ... }: {
+  imports = [
+    ./configuration.nix
+    ./hardware-configuration.nix
+
+    ./networking.nix
+    ./persistence.nix
+  ];
+}

hosts/stroopwafel/hardware-configuration.nix

@@ -0,0 +1,57 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports =
+    [ (modulesPath + "/installer/scan/not-detected.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "usb_storage" "sd_mod" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-amd" ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" =
+    { device = "rpool/local/root";
+      fsType = "zfs";
+    };
+
+  fileSystems."/boot" =
+    { device = "/dev/disk/by-uuid/13B8-529E";
+      fsType = "vfat";
+    };
+
+  fileSystems."/nix" =
+    { device = "rpool/local/nix";
+      fsType = "zfs";
+    };
+
+  fileSystems."/home" =
+    { device = "rpool/safe/home";
+      fsType = "zfs";
+    };
+
+  fileSystems."/persist" =
+    { device = "rpool/safe/persist";
+      fsType = "zfs";
+    };
+
+  swapDevices =
+    [ { device = "/dev/zvol/rpool/swap"; }
+    ];
+
+  powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.interfaces.enp6s0f3u1u4.useDHCP = lib.mkDefault true;
+  networking.interfaces.enp6s0f4u1u4.useDHCP = lib.mkDefault true;
+  # networking.interfaces.wlp2s0.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}

hosts/stroopwafel/networking.nix

@@ -0,0 +1,23 @@
+{
+  flake,
+  config,
+  pkgs,
+  lib,
+  ...
+}: {
+  networking.hostId = "acab9998";
+  networking.hostName = "stroopwafel";
+  networking.networkmanager.wifi.backend = "wpa_supplicant";
+
+  services.openssh.openFirewall = true;
+
+  age.secrets.wg-private-key.file = "${flake.self}/secrets/wg-private-stroopwafel.age";
+
+  # pub-solar.wireguard-client = {
+  #   ownIPs = [
+  #     "10.0.1.8/32"
+  #     "fd00:b12f:acab:1312:acab:8::/96"
+  #   ];
+  #   wireguardPrivateKeyFile = "/run/agenix/wg-private-key";
+  # };
+}

hosts/stroopwafel/persistence.nix

@@ -0,0 +1,29 @@
+{ ... }:
+{
+  environment.etc."NetworkManager/system-connections" = {
+    source = "/persist/etc/NetworkManager/system-connections/";
+  };
+
+  systemd.tmpfiles.rules = [
+    "L /var/lib/bluetooth - - - - /persist/var/lib/bluetooth"
+  ];
+
+  services.openssh = {
+    enable = true;
+    hostKeys = [
+      {
+        path = "/persist/etc/ssh/ssh_host_ed25519_key";
+        type = "ed25519";
+      }
+      {
+        path = "/persist/etc/ssh/ssh_host_rsa_key";
+        type = "rsa";
+        bits = 4096;
+      }
+    ];
+  };
+
+  # boot.initrd.postDeviceCommands = lib.mkAfter ''
+  #   zfs rollback -r rpool/local/root@blank
+  # '';
+}

hosts/stroopwafel/step-roots.pem

@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

secrets/dyndns.key.age

@@ -1,20 +1,20 @@
 age-encryption.org/v1
--> ssh-ed25519 8bHz7g GloMoc3qIJq8coOIqGLIWtAwSZMu/tJdLDLt155o+RA
-XKt0Hw50VXh3YYYbKEqpVAAo4aj6X+24mX8saH6nu1w
+-> ssh-ed25519 8bHz7g eH2r8tjJDeICUju0I7YYvBoAzobNpED8hDnlwt2lllo
+I8Dkg5aarZ29V9TyXg4S3bSwNETx6kUb43mNkf1hv0k
 -> ssh-rsa kFDS0A
-dG8ZmFNRKsg0sihla32+amA5mlD/tzPgauOtsH64wAvQjPz+aBr7xL8l5usR+nMV
-BldXVlaYfipevHmWGE48vvNheAbBLNZ/0iIfJpV8EDdcUZd7v8Ijgp5f4zns2nRS
-CGHQRGtcxD1OtPl0Rg5/zF/0vBnmsIUyig/NHmrRaWF08WZBZhMgIcnoRXpUlcnj
-AlrW9ElfSTKRsOT2F4AbVcKBrbagSjzJ9ZrIJ/D4gxW8bE6pYkHd5sflXbL4TsRY
-4G3kBKC41Co5Z6byv4gaT+y0AfX7/Q6f1lvaqOOAbBzt18TaEZYDoe270L53Wfzy
-VPlnM41vo+EsGsKhzTaWLTmBaawSWRhxZScHygZhu+SgIFLEDpU2kOY8XlKp6yuv
-82jyEW+ts9069hGvmzrt5yr+HLMzlhEOPfGYqrDgbmuJsq0E4PQPkQOLeGROxaUs
-zceCwfg4HUFDRHVa8KBy1HjovjkLzl/auvJaUUre5RTGLp7QWYX5rqiME7AndgfV
-joxVMJY0tkrvollNI3xXmfU2xeuK4Jm7Jw54lJ13KaYk1QqC1sMNCo7cuEUIw8Ic
-N3aAU6KRX1ltZ3IIo+vJYVQO34UWNa9Xf6uGFTzX9HzpUYEkHbv90Gx4ck+2sYvi
-3dBfz1koiFyTfOT094zqDuecH0MsmWExtefBDvU7gcU
--> |0I<)A4-grease
-g/FEYilOi+UwM+E98Rvpav2jqeLUlVeDAo4PVWHNhjIbas8iJV6eKwwJMNfuEJ5D
-wdh+HTDijoUzaYTPgYqcKg
---- N46xNnGnaWTUqGo6Q7R0VNqgPpUEu0D2VDgOnPZhgiw
-zÁæ¤p¸ŠÕÕaf&èù€H~pÊÊrn·OŸk„÷øàü͵CÉÝ`ÿÞlùæºe¸ÎÆÓ‘ۨǾ"†Æ¦˜æî……&L41š‡ã)‹y%†Åü:;35ÎÀ‘樋ܛ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+-> Lb=*1hD-grease d@o1
+Smur/e9l/SztFWSieAOMMaCeMroN4GynvkA1a/aVrpaBPA9F1BVtt92wDikJUDsN
+Gk4GzGbS2kU
+--- eKJmYqlAspTO8kjTazwPyjAmwBigSw2y8+YINjqUWrM
+”ÜË ÛWV6µʳý
WR7Ò^ëp—ƒ{ÀüßO˜Õ²M&±Ífš®}v<>)u¡ò4〠àhv£Ç¥<C387>¸.ð+;(Yׇy<03>sÕVyô®œÒ™BÛäVŒa<C592>#

secrets/firefly-cron-secrets.env.age

@@ -1,19 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 8bHz7g gXgsQ6NkoJOl/wCYabj/qGDDA0YMzH8Zrt6GDCztHUc
-1NdpzPbw1TVr37OfZtqRN+PQkID7+T5QKBzE44k0oOs
+-> ssh-ed25519 8bHz7g 9R2dpxgakL2swKyFxYtsXWVtV1HgZvMofecnU+rJuRY
+RZN8JwFpsvN+piLui34/zK/eKDBmxnsf7PsLMpTMVwU
 -> ssh-rsa kFDS0A
-XW10XZsiDkvaWMLi4G5ZXQRN9iyAJjY9C11H5FadmEalm5KVfXBznEB4B21riU0E
-RlRM8tBSJWSMztUIEElt+X4C7W4NMn67ZhxnP8Aeqkfx8u88YRGdw0cHW12I81nv
-FRd3TOpcNAGDMEzX6o+SfvQyFiATmz2AQ5X3prURsQAB8v78rVZ9cF+AY02ceO0y
-1ZN2EQs2hL+SOdgmW4qCsVp8Q+/92T11DdlE4qvWe8dl1GMYsbpJTjhJl1nsvQBh
-obYMHgUiY2edrsStgK3ihi+Et3ibtUib5XYrPw6VzphO4P6afrmlUBzPUN9p9fYE
-ySlG6rTkp4jDj1zcmtiAiKpQD2SwZ/dJCZL6b1sWsHzOktYa16aNB2OLsWtOlSYm
-GknAFi814HA4QrbWfWOgZlfCerZHBZnWh8gC6M86x7DR9VDN5tF+HQCWM/IhwgKj
-j055t9PK4POhZzrD0ZjbRJZwmGtIq8/S6bsgIyGAAhH3Ie76zL4e0e9gI99YwMXn
-EftgbTOYQ8zBSoASxMPl3PYCtg8Q7bTqcDuLzVQ3JhIq8K6p7T+797mRw2uNSisi
-vUiLnxvOxT2dyAeaDaRUEsPnxx33SHoTTuoZHz8gdSGU1Y+tDeOps/QprVfy+0mG
-V2PWGjci30iN3NpZbv/EuOMMjwwl0iFzji8N50plfuo
--> o#R-grease .V $]$5c3( JcnS v@X
-xrpywd9RbU3pbX+ZNUmp8+FASc8RQjaewO9pnQNaCZc4hujhllw
---- JcL1P3WGCeePUgXoEdtlaTakrSkh7zs2zRM8G9f1bUY
-śZśŁmsÝ{+T}»	Ţr‹™·É#ÍĘR[™ăU˘K拇ř“Gýc¸Ć q&k.+Vd€^~©’Ž8¤Żb4±úz:f<><17>ä`Ď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+-> u9Y-grease V-v7W X&wU:A^
+3TF3rDKGzJy328+0Ozkhzv64NctG3ywtL+IW/SXVb4X6sKM4IJqV5DhHtQ
+--- ve3h0dNmfSTs3Lz26aG3+xuAeZ3/UztowFa0ZDdFCEQ
+Í”ÄNŸó)–ë4 v‘|<#ÚÁ·um°fyD=ÿÊ–œôÎ8v\¯5œ-H‰i& -#2£‚l;̬H)Ÿ!K³O’sÕ0HGRK)qç€ùÁ

secrets/hosting-de-acme-secrets.age

@@ -1,22 +1,21 @@
 age-encryption.org/v1
--> ssh-ed25519 8bHz7g 0fwjxxgvY3S/2oKgc+RxTWA9AuA7oS1MnMAqG0AZ2x4
-LReuCNO8r5UMlipXheXT1SLQKlwGMC8Gpu8VtAUI3/4
--> ssh-ed25519 n71/yQ fiv1s9XA/ATrK/s8OkenXCCp3mUhn8gzp3I3S8h7BG4
-XhzPW7aFm41nzr7ZaBSzS2qfQoVttgODXUqPaF+FvPY
+-> ssh-ed25519 8bHz7g nvVfc+YJceOunIoHDJS0CLcqIMXAH56bGaKMQtI2K3c
+L6Yb122zyzOJzptdgYMDddb0QFFs4WPlJoSKihDsPQ8
+-> ssh-ed25519 n71/yQ FdYL1Qf9AqSenPKxHLc3/vuXLeemJrnVkS0QytRupxY
+xhRI+SNcsAbvJVDuJN0nJBWR1R10WdZU3fXnmo/qqV4
 -> ssh-rsa kFDS0A
-gLhS2ce3jBP1UbJJt9dJ/4SmkNiL7LBuUik8Zq1WflxHlMqrRslb56Uuc4BJHTlp
-KGt2zrzRRNEdSJgzJfK+AT1AHCza++C96ZZsxfhDexL/Gx7Lm6Bwp+D/XR9KYxEn
-UF511OWWjoCbDWldUQr17y5cbiG4z+VlMMOuKox8RWHymG0ABe+kZEOg1GBZ/bLj
-tUwgxdK/uGGI2/AJIs4tiiemiNo2cMup7fe+wBPqq1b/TcxxTGHfWuJopp3ISl5G
-Ov7o7/HVCyemFSlBQTF1K3t68rw4a0ZkMcX86RpEtbiRFrEhS2IuGXnwteEnypER
-OiafhbdIh56TnTvCKuxnTJdG1JobM1c15l9FhownRjKMwVjeQb39LKvQlJAkzGOr
-eBtkGu42p8UGNpltTawKgWNOTsZNy5BYHvHvS73SXDcuwGVhhP5fbeImUgeBRUyT
-2DWoK+vethjGL+tX+NNqeKM/Xr+k8QUGq+qehB6UoiTLL4NiwujeO230b9Afsh2/
-xtzDTMueqTUVTzxA0GbIRSXCKCfDNifdJh6+ebnvizx5NarANvMNlP6sfBQ5gANf
-N20IhtgnOxQ5l5URWqK/A5vk+cpP2GGkAGoW40m31gyug9AtuguNpEVRpLHJVtRn
-DpHh5k0EMzWz7iQhYIVavLTh3AtxofLg4wp/cQEkcQg
--> OC`4fNF7-grease
-YhGHL0+BVF6h6InKVlS3
---- NXJPtlRt28CuwumxjLQI8qY6i5GSbBPbBANxLpHmsHE
-‹×€aqê802.æ–´"R=SÙÚȳ ËŽlhª@ÄK¢¨F-³ö=;ž @ìåúiÕ°+àÚr¸£àð;4wI}ÕiËÑèõ1o—™
-„¼¬ƒN¼ÂÜòG>Tõ3–Œ7
+eW1HEdCHJOSXLXpiANv58biOYbJ8gF/F6V+L89zODTcYlXuWrOzOL24i5W4IiOxW
+Xwzk3oGycVAkkSQI0adocvyBJ23U/5EW2jLzo+bT3gHl9auX4WIS4ObtHYrhGcn8
+CftTud9rZJEtWx8+NMOVKz95oywtuUSBOx9fIomOiP7BI4u1BGMjfuLFWdsdNHrN
+yQU96uzVsfG5wStri6XDQXp9/LaYUHqiZEmaN+ey/lGwB0lW4weUg2T9yp3xcu1o
+bJ/HiyneuusvwJZpzfw6WTm7YTIOVkPPYoYqJdJ+uJkpKSU/zb2zasofg8MMlF6g
+SOaHeglcyV0zxhNNhOMhXq45Nuo40V7YxMnHIQ4UT+jFFBGG/UL8rE8qYHeHB3yb
+SpsJSog40R+VI6VSunC022RDbaQy++DhYQs9BBr/I1V++0WJEANjTosKLtoxVe8y
+ZEY+BaF+tVBG5zE4Jqit6KdKj90k5NyaElkGFgGEYHFOzALahXBH19/Z0uNyuRbS
+IfCOrlofJwQSjOGBevm3d610m61UHQntCEYKz8PIHI2h8nBfnJx4ybI6mbUkyv7z
+aIBjPRxilgziOP3N4l8P3CLyiQ6aDgiKRYpTMdYN5a5N0oCmv+2ynC87yCggj3Cq
+4NmceQ5U2UJ0qHwqvaDY3kZLw5TBHgG1D1VKhSDIKsE
+-> t-grease ed
+m/VplL6lCuM
+--- guUbZNWz3SsDG3cuZYbI5NJTX+4tvj0XOPksEwY9pIM
+ÜÀ‘ü¶k[¯¤›GHoýqu²Äš¡£ÔàØÕoøÐÚ#Ñÿ(è_«¿Ÿ·™°3À†¯")Ư¥“æt"¶© ©÷Ã…ƒÎk>þ	
3y¤T£|§sÏÕ§¹¸<C2B9>pý¼ö&$Ó1±Fµ˜

secrets/invoiceplane-db-password.age

@@ -1,20 +1,21 @@
 age-encryption.org/v1
--> ssh-ed25519 8bHz7g SPo9Mhd6VsgIsbMyeZvLID6JY8tEe7t1bliDQvVo3jA
-GI/7fHbAOqZAKnKknpQ1fQY3j4yiakotvNCZyhsEe68
+-> ssh-ed25519 8bHz7g +2mCw/saM+dTnQeYzyTZFfLUSLU13DDTZL4EXXKoEEA
+rfMmMsuxTPynRwBq709BcOjEyvX4ut8RkwbHqDwp+tc
 -> ssh-rsa kFDS0A
-c5EED+7gs9TBd9c1S7OBMSsh63sgSe54W2IsVBlyYTsEsQc5YBFCIr9F1G+DAMv+
-u4JipemAcIGIRcoJPgqZvmOt0KzcckECb3n0G7veEqlHQSlDvu80NMfJgJ30Nx1v
-VlWPjAa3yVeuHWnu00ANFmwBNIJVxpFoYXI7kXP8NtRhs87Gdy01HybQgJNH31C3
-f/d0Htg7HlCsYIEYV86mSdWqFXen79RNBCnvVDz3M6YAxdxviFEYRXax3IuWpnSc
-zr76gVhvAuBcxIP4qqjRZnmfXOoxAsCC3y1CVphfYPcXka4/u8wgavzxFBs/vskv
-UBXp4WA1+HheCYu6K5CXsBs4AW1fVKg3U0wmyeXR0NdYrjNKsEkDdE5GbjUi68pA
-SAGZS15tMZtm+80OSxxVbbg2xcnkQXHXRAk6G5CIaQkc3DqgRX4niM36lFmUsULc
-KardwxAR0VaAXxzi18Mbm9dRpsktnGKrEGXSi40DfzG4Mrf+woyYHD7HRXpV7kVY
-PeHBNflYZEJW7mI6Y8lMF6INYY4Y+3SIJBMg5wapmOWIue8Pj22iHWD1CbSa+YUL
-GDF4TBEqXdiN5TaGuAj3B/IQ8dKF+pohglMqK/xBmAQ8Q7yF+Kyc0C7hMwOcc07Y
-NrfQkEhbgDLNOE61oI5je1hseu1/J/BDpfcuv82r2so
--> 0UI(-grease
-hLbbDjER9olivUGkGNf0GX1UilyxtFkJPVbaHhPlBsbri9zM1tuHhPpNwU9FaTJY
-BrA5N7Db1TK0
---- Z8g9OM5TylMaIexeEoVzfHiYyRMguw4Kb6K7zdd+m4w
-Ş—ğ}ZÉ® ›çYA~'¢õ%+º”„7èÙ¯5ê¿»¼‰I	]Iæ’)*ü½¸KóTÁÂÙ<C382>‹²iíì—an+ü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+-> &A?-grease w%ao<@7 |]inzC^
+o9QLt2ZxTsxbrKsn2zeiaGox/Q1S3hqeTeMy69lyduHY3FUaa8hVJx65SVfchmuj
+OkgL8RDvfknTupWQTuv/UcVgPe+Pp1oShvXPra5Qw5HaVrgKvsUHUGSCxtdwXJvA
+gj+o
+--- Swkx6K12J5ztpKFSR/2nqxDBvk7oQ9NIKmfeOsY9ZmQ
+;ë#´õ?
f‚j„AñŸo¤p3÷7„iešÃ¦1NýÜ<C3BD>í8ÊËýY|pÑ <20>ùç<›jäN‹.Tb˜©<CB9C> Ö?¥†

secrets/invoiceplane-db-secrets.env.age

@@ -1,20 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 8bHz7g k5u5XLcX7KSVfjpMkE8g0pt6uYNXCg19Qh49Q/uG32c
-WIaJx2KiVV1XSYu8q+S/2NRZNQuyW17uqKDe23+XnUI
+-> ssh-ed25519 8bHz7g MatTAZXopxg6y+ExWRP+qvNDA4vTIrWFHOfoWWH4YCA
+Bbjb1rNf8xsyhjZRz7CCCf7rsjqkxP2xXg9zTLVLJ/4
 -> ssh-rsa kFDS0A
-giATfPMp/95y2ItODNShZ0kfqVFHWI4Wb7x0ImgrtYJhHR/5preaIVHj1w/Eov66
-LIkGFbxfQViqiVowTwuzI/r9aBkVuWgnm/4wYmnE4p12qZ3iA/cSzcM5DXK2i0Dv
-bdeiiQkdYbWRzgG9hYgNVDLrQTxvtzCaV3cl6o/ghUYHU3KYg0d1Cx766daUV05+
-iUWD86mnJtmR+qMlyprO+51I+3VCV7H7v1aiaDgGl5Gzp6uRpiy7qk2enlJCj5ff
-W/ZNgq2SE+tIknjAR0n1RSGpuJEFHeo8N/Q3GFd7uuu/+U0KSjf54ObUuJG9v/1L
-ma1vpt6ykskoRsKAEwUMjEyCN9dnoR2zY+Vt42RXR1XO+jzsdmzrXgd8oQsI0x/G
-+uAOjiHQD9xlS6InVsCuCoPFAzkm4ZAWbx1ozKe051txyDz3FkqJ9kmuXB7wDAm+
-4Z4PFpyoCrxHtiTW+dG7gO/AKIt7Wd3paabb8nY6/9vuCYf/Rt9ec/MH69sok+CY
-UcJE7U/TLxwZS3JMNvwwsJfu3TGHCQMi0VJXku/bcy+93ohdtV+Vxec0fWWVGVVh
-0Cod0FkiziORUko6CsTHvWRmI6D0wSui3pH+Vlpbl8m5R4VEMlkkbCx76x/MOHJH
-BF2gTPmiHGrMjB0/F8yJCox6YL5B9E2Mtg+ihZBLWN4
--> :MAXu.jB-grease 4}9cAL 9w(1_Q%
-BvuZHewVhcZPk7nX8Q
---- dkGEmljTt3/Vvzv90ZOjYtqDoe+vXZY+6/u1JwAvpGI
-Ň@—ęAů’·Ś«Rĺř*ç•˝rëh•›Ł6˝Ď0´‚ós/ĹĺF›vŮLëV1ř0ŰsÓňŃ}â’KŰ5.§«4‚6_ÁţgĹřĎ·“>łBd
ác€ŻPÉç`Źl“,ÝéŤŇľ
†&dŰŁ.(Ô1®/HµX4¶%5uŮaŽ
-ÓM<EFBFBD>'—‹îxýłm
1M˝ćF¤l;ĺ<>B`\ŚÜΰxÜRĆŻâIůł
*B˙É<A)©Ć‡K~ß®BąQç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+-> =X2-grease b{%_ Ng
+814mWsk
+--- 45YQMUc9SFgUONGhMEgE+O5zHhRW3GnmoXciqaD1WJk
+丆6Ù&üˉVÒ'¨Â<C2A8><C382>꟭pº‡C³ûMÛ÷Å¢|²=7í5½Sµñ”aÖïŠôdü<64>Îi­$;ñÖño@
ž)}kI<6B>t¶'bš"„ö‘	›ÁÉ`°¥ÍpÿÏYV0QßmÑq-Mß‡vsÉÔ&L<>¥Ù›¹Å/×Ãgk#ëEOQ™"aVˆFÿž…ƒ¶Xìo{ù¢$1<>¸6y8õƒ,W|v!|HظM©DƒoNYá<02>W

secrets/restic-password.age

@@ -1,20 +1,20 @@
 age-encryption.org/v1
--> ssh-ed25519 8bHz7g Cm7Mj904CLIkeevSll7VvKpI0dufxbP1un3N/aQgIEc
-mOE0vPi/Lwpqfw2E3ZQkFJHQ9oH493QqrjCnBNgwhx4
+-> ssh-ed25519 8bHz7g XueHNai+vex9HpCVYwvDxDGp4Tu+fvW/Muy1SULia3A
+BBgU52O4Uvxp/84DVLpFFHGrJiHJEOJovfHQ9CrBaEA
 -> ssh-rsa kFDS0A
-SJtQbBdBExuEzQdLLl+bTLKk0sMVI955uOBID1YrScrs8dkDL9IGuwzWnDVy85Ny
-MpafrfregK6Ah1ma0k6FlAQ7hsNy3HY4YEZFsqC4U1aQjj1CgpuEwPuYNk7Ol1Od
-abwEDzSJf6yNBIqu3lItkHQ7DDyZF4fKEQwtkJcWqAjRKdi9Uce270RSdUdcvhcB
-5hth49ve/t6piaBckkZCp2FT0QiBj/ozjMrZQhmCMaG3RhBYJV8DZ+XXPxXMY5OM
-ZLAg/y0Uw4nZHl8GXl4heBDAwMtRmf99hB+GkniXFM7ilGpjb8TBziDZ7kPCfVIl
-mnwyGut370ZA0+FDBc2w0v/+MBm3FWMF4udbcc1piIImg6hFasbjtpG+yGP7NPKW
-w+ZZx5FJvg2lKyhOgw6u607qm+e+enXSx0DfiU8noLzCMNQjDz6kUSGrZ81J/1RV
-jagiafSTBI7uRdtNfclil/JmEOtqyQGPbI8DoH3aeP+ZgsdMEXE6tKjSTauDG+51
-Nif5PdvE9ttCdh0fsiujBuHNDeiXzjgtDcweAMONwtugc77QTtD8xOyc50aSCsv0
-wYtC36r9Ov0vLxE3o9ZAGpIHTqwquS4fa2T+qUrV3awD1E8jgePz5cfJPoka5poN
-NpgDq4x4tguOPqKqnTR0Bz6uVPp713FjRFwhXBlyoug
--> ZeLZA-grease hkzH` 3) })H|k -]KWQY
-X2iif6L7A6obBx+aXOOQiB5Xq1kKbOXgYMYkt3rZVaYTs8MBpoyZUWj5KqcRFO86
-WepOh2d2ig
---- 197qo27k+qo171895rFXXYrp0Z9TUiY8QqLT35SqKXc
-5ÈJè­dïLDdìiF_ôè‘‘§<E28098>ÿ°AY°n\°tÎ⛳±8›)þ»öÔŸÙ¸ƒÊéq˜›ÓÂ
2¦jHq)·‰R¼<52>ÛSÌüâí}Î(.ˆ¡Z7dÛH<C39B>ïØ#5<{d0¿’E]`²n<C2B2>XZR¿ê¸‹BþS;1î¿FQž¬®%$©Öµ9+¡Ã½w<>C)u
ÅX"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+-> A5wjd&-grease G !J2Yo$^y
+RFN3cZUubdwN0BUMmqEut9jfp17V8wVpZT4HImLMYkcYIjvctQde7s/AWCuhMkrz
+KGGwCFTCwT05RA
+--- h6ylBq9j8181YUEqTHEx3MC6N5KVrGVBfM0uUzLNTdk
+§I—T.¯È-GOº¹N5BW!„‚×îî†+B•Ã`8³?UÿzÁno,‡pm† Jÿ	pøôrSýv*±‡äÚŒ–˜ht®þãöEx\úæ%în)l¨qt°U<C2B0>-Fæ•C:IƒÔÆçvˆ<76>¥9ðoµ%` CN«æpùÁ¥<C381>âo—Q<Š59bˆ±U䑧x¦“ã–,<2C>

secrets/secrets.nix

@@ -14,10 +14,16 @@ let
 
   frikandel-host = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPzrEsby3KYpKRuSnTMp2Iq4ENgucQUy6SJ+906nwllS root@frikandel";
 
+  stroopwafel-host = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDl5mZ8CBVU1xG8NfcphWnmUUK5VXec7TqW5qfPeYQHi root@stroopwafel";
+
   baseKeys = [
     bbcom
   ];
 
+  stroopwafelKeys = [
+    stroopwafel-host
+  ];
+
   biolimoKeys = [
     biolimo-host
     biolimo-user
@@ -46,14 +52,14 @@ in {
 
   "droppie-ssh-root.key.age".publicKeys = droppieKeys ++ baseKeys;
 
-  "b12f-env-secrets.age".publicKeys = biolimoKeys ++ chocolatebarKeys ++ baseKeys;
+  "b12f-env-secrets.age".publicKeys = biolimoKeys ++ chocolatebarKeys ++ stroopwafelKeys ++ baseKeys;
 
-  ".fwknoprc.age".publicKeys = biolimoKeys ++ chocolatebarKeys ++ baseKeys;
+  ".fwknoprc.age".publicKeys = biolimoKeys ++ chocolatebarKeys ++ stroopwafelKeys ++ baseKeys;
 
-  "cat-test.ovpn.age".publicKeys = biolimoKeys ++ chocolatebarKeys ++ baseKeys;
+  "cat-test.ovpn.age".publicKeys = biolimoKeys ++ chocolatebarKeys ++ stroopwafelKeys ++ baseKeys;
 
-  "ehex.ovpn.age".publicKeys = biolimoKeys ++ chocolatebarKeys ++ baseKeys;
-  "ehex-vpn.creds.age".publicKeys = biolimoKeys ++ chocolatebarKeys ++ baseKeys;
+  "ehex.ovpn.age".publicKeys = biolimoKeys ++ chocolatebarKeys ++ stroopwafelKeys ++ baseKeys;
+  "ehex-vpn.creds.age".publicKeys = biolimoKeys ++ chocolatebarKeys ++ stroopwafelKeys ++ baseKeys;
 
   "firefly-secrets.env.age".publicKeys = pieKeys ++ baseKeys;
   "firefly-db-secrets.env.age".publicKeys = pieKeys ++ baseKeys;
@@ -65,6 +71,7 @@ in {
 
   "wg-private-chocolatebar.age".publicKeys = chocolatebarKeys ++ baseKeys;
   "wg-private-biolimo.age".publicKeys = biolimoKeys ++ baseKeys;
+  "wg-private-stroopwafel.age".publicKeys = stroopwafelKeys ++ baseKeys;
   "wg-private-pie.age".publicKeys = pieKeys ++ baseKeys;
   "wg-private-droppie.age".publicKeys = droppieKeys ++ baseKeys;
   "wg-private-frikandel-server.age".publicKeys = frikandelKeys ++ baseKeys;

secrets/wg-private-pie.age

@@ -1,19 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 8bHz7g FvH+VXog6FECWn8RvmPKBC5++GwX2p5DFfGN1WeRnXc
-MDAo42o0YpsSI9zPtai24KkqJNBhE8rLBzDoMQPBIC8
+-> ssh-ed25519 8bHz7g /c4x570ZPKtwcWelnoK9LeX6lYvvq3pTP5NFz7/3qy4
+i3T9G/WjClSyk73W6kRi7fbo+oCEHiyAn7BUX5ENTsA
 -> ssh-rsa kFDS0A
-KJTXv2WmPQEjD+p3hhBeFEqZQhHH3HE72LuFKUxpO8o25JiyDdQXxo+6jwG/rr0Y
-jQVCo/B3WSc0dkWvih+2iP4pogYRzbqEe03LiLyU6lxfIrpjnvQv0DKyi/iesrE8
-Y0U7Ar11WGeJWO5wdNsAiRyNk3oCA4UV7YGQwEcUUPnTo7pKDZ4zGL86W7bF0lLZ
-pGdLFVwD7CAjdw9fcAlCizJxYSbk8idA5jlY6qvWYRail2/61MjD67j24yNk7Qun
-pcVIlY8PVwhk0KVbN2jBXwNy6MegCaittOoldN5lAyTR5v4b82zTpR7KWWsw+TMM
-faH5LXsSkZp5deKP4sqC5xO5leSwBLY2wHImyOciCydDsaPhr5U5ofAiwv2A/rJ9
-McEhwM3h9+V5wyTubM9FI0/IT1O+BVEwXX+Y2pWFKpKE2TUuHcDTLcID0b4z/Opb
-OumSWNesDsuu3ie6P0LKkixv0bB9h6jkWXZ2gfUzenvyoQbQBUoYPpZQVOxMHdNx
-Ga+iz0bas4Mccnw6vXPmJp3GcAoxtwqAoawnhnNZlT1Oc0hCOj135xQeYIW91ofB
-wYE0sFJZEgY4J29rCRsZBfb0wRFUZcSEYb9UUv71yTPYV+/nDv/BQwBTP8Q3vsAi
-DnBXzcqDwNQSUkf6o3Nodm7jzGr/7xNJSADirsuhh8M
--> UZc4<6!M-grease
-YmEF8D3iV5CIak0fuSLOrmbcGUGEhZPrq4iWd22WrJP7WcALYm2UgWE
---- BRtFsnY/DnVzZzrYqCFS68vzHSUJbtmjWhF+W9TToVE
-º¡S#³™Ö:Ž<>LZ¤ëî‘o0­—ë`ŽÑ€²*Sµ¢¿U)o‰gÿc;áN"0úX)õ´‡¨lÀTýÈNIzkî=…Æ&§<>”¡=v®Ø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+-> ?:-grease tQf
+cC9CQORk4uRNsjiTcli+/g
+--- XoRZMVU6yc3iQFTFYS1HGArmy0U8UV1PrELpv49tROI
++› ¤þL
léåh2¶¦rOÆå—槭uOjT?Æù8’ÉÉž<C389>+'·¯Û9†KE8YøKuÝ¡¦bÚ/šºLä3ô~ôÊ‹ÃÊAÓ

secrets/wg-private-stroopwafel.age

@@ -0,0 +1,23 @@
+age-encryption.org/v1
+-> ssh-ed25519 icVZQw 27cZqwyvDh+mDi8CZTfasDENxPGigvzuvxMN+s8AQiQ
+DLDtZIw1Ze433Fg/VI34FX0TNDgonEh51Ed96ZAR6KU
+-> ssh-rsa kFDS0A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+-> ,>/?-grease P z,H5($i t EtR*E(1W
+S7KO/B7Lmz9ZnDRLhVp0h/R/HeWi5FBopJpgieMXLoP66Sy5gHXXYTulnSIxUbLh
+KapW/NfyY/c2Z98
+--- Ww/3y6zduaxe7CtQwi2CVxgCqRdhDhmlV/prY8908FI
+ŻŚ+ á>kxW݉˛çh/Ş+ŕjöˇ»~×>?ÜR˛owµß4$–8Đů-|<7C>^Oć<4F>S€†
+WVéü
+˘ÝŕN
+V'ću
âŽ.C¶	ě