feat: stroopwafel

flake.nix

@@ -104,6 +104,10 @@
             sshUser = "b12f";
           };
 
+          stroopwafel = {
+            sshUser = "b12f";
+          };
+
           droppie = {
             hostname = "droppie.b12f.io";
             sshUser = "yule";

hosts/default.nix

@@ -2,6 +2,24 @@
 {
   flake = {
     nixosConfigurations = {
+      stroopwafel = self.nixos-flake.lib.mkLinuxSystem {
+        nixpkgs.hostPlatform = "x86_64-linux";
+        imports = [
+          self.nixosModules.base
+          ./stroopwafel
+          self.nixosModules.b12f
+          self.nixosModules.audio
+          self.nixosModules.bluetooth
+          self.nixosModules.desktop-extended
+          self.nixosModules.docker
+          self.nixosModules.graphical
+          self.nixosModules.nextcloud
+          self.nixosModules.office
+          self.nixosModules.printing
+          # self.nixosModules.wireguard-client
+        ];
+      };
+
       biolimo = self.nixos-flake.lib.mkLinuxSystem {
         nixpkgs.hostPlatform = "x86_64-linux";
         imports = [

hosts/frikandel/wireguard.nix

@@ -91,6 +91,15 @@
             "fd00:b12f:acab:1312:acab:6::/96"
           ];
 
+          persistentKeepalive = 25;
+        }
+        { # stroopwafel
+          publicKey = "5iNRg13utOJ30pX2Z8SjwPNUFwfH2zonlbeYW2mKFkU=";
+          allowedIPs = [
+            "10.0.1.8/32"
+            "fd00:b12f:acab:1312:acab:8::/96"
+          ];
+
           persistentKeepalive = 25;
         }
       ];

hosts/pie/wireguard.nix

@@ -74,6 +74,15 @@
             "fd00:b12f:acab:1312:acab:6::/96"
           ];
 
+          persistentKeepalive = 25;
+        }
+        { # stroopwafel
+          publicKey = "5iNRg13utOJ30pX2Z8SjwPNUFwfH2zonlbeYW2mKFkU=";
+          allowedIPs = [
+            "10.0.1.8/32"
+            "fd00:b12f:acab:1312:acab:8::/96"
+          ];
+
           persistentKeepalive = 25;
         }
       ];

hosts/stroopwafel/.config/sway/config.d/autostart.conf

@@ -0,0 +1,6 @@
+# Autostart applications
+#
+# Example:
+# exec swayidle
+
+exec keepassxc

hosts/stroopwafel/.config/sway/config.d/custom-keybindings.conf

@@ -0,0 +1,19 @@
+# Touchpad controls
+#bindsym XF86TouchpadToggle exec $HOME/Workspace/ben/toggletouchpad.sh # toggle touchpad
+
+# Screen brightness controls
+bindsym XF86MonBrightnessUp exec "brightnessctl -d intel_backlight set +10%; notify-send $(brightnessctl -d intel_backlight i | awk '/Current/ {print $4}')"
+bindsym XF86MonBrightnessDown exec "brightnessctl -d intel_backlight set 10%-; notify-send $(brightnessctl -d intel_backlight i | awk '/Current/ {    print $4}')"
+
+# Keyboard backlight brightness controls
+bindsym XF86KbdBrightnessDown exec "brightnessctl -d smc::kbd_backlight set 10%-; notify-send $(brightnessctl -d smc::kbd_backlight i | awk '/Current/ {    print $4}')"
+bindsym XF86KbdBrightnessUp exec "brightnessctl -d smc::kbd_backlight set +10%; notify-send $(brightnessctl -d smc::kbd_backlight i | awk '/Current/ {    print $4}')"
+
+# Pulse Audio controls
+bindsym XF86AudioRaiseVolume exec pactl set-sink-volume @DEFAULT_SINK@ +5%; exec pactl set-sink-mute @DEFAULT_SINK@ 0 && notify-send 'Vol. up' #increase sound volume
+bindsym XF86AudioLowerVolume exec pactl set-sink-volume @DEFAULT_SINK@ -5%; exec pactl set-sink-mute @DEFAULT_SINK@ 0 && notify-send 'Vol. down' #decrease sound volume
+bindsym XF86AudioMute exec pactl set-sink-mute @DEFAULT_SINK@ toggle && notify-send 'Mute sound' # mute sound
+# Media player controls
+bindsym XF86AudioPlay exec "playerctl play-pause; notify-send 'Play/Pause'"
+bindsym XF86AudioNext exec "playerctl next; notify-send 'Next'"
+bindsym XF86AudioPrev exec "playerctl previous; notify-send 'Prev.'"

hosts/stroopwafel/.config/sway/config.d/input-defaults.conf

@@ -0,0 +1,9 @@
+input "1739:0:Synaptics_TM3288-011" {
+  dwt enabled
+  tap enabled
+  middle_emulation enabled
+}
+input * {
+  xkb_layout us(intl),de
+  xkb_options ctrl:nocaps
+}

hosts/stroopwafel/.config/sway/config.d/screens.conf

@@ -0,0 +1,20 @@
+set $internal eDP-1
+set $middle "Hewlett Packard HP E231 3CQ4290S5J"
+set $standup "Hewlett Packard HP E231 3CQ4251F33"
+
+output $internal {
+  scale 1
+  pos 1080 1080
+}
+
+output $middle {
+  scale 1
+
+  pos 1080 0
+}
+
+output $standup {
+  scale 1
+  transform 90
+  pos 0 0
+}

hosts/stroopwafel/configuration.nix

@@ -0,0 +1,42 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+with lib; let
+  psCfg = config.pub-solar;
+  xdg = config.home-manager.users."${psCfg.user.name}".xdg;
+in {
+  # Use the systemd-boot EFI boot loader.
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+  boot.plymouth.enable = true;
+
+  pub-solar.core.disk-encryption-active = false;
+
+  pub-solar.core.hibernation.enable = false;
+  pub-solar.core.hibernation.resumeDevice = "/dev/dm-0";
+  pub-solar.core.hibernation.resumeOffset = 15296512;
+  pub-solar.terminal-life.full = true;
+
+  # https://nixos.wiki/wiki/ZFS#declarative_mounting_of_ZFS_datasets
+  systemd.services.zfs-mount.enable = false;
+
+  home-manager.users."${psCfg.user.name}" = {
+    xdg.configFile = {
+      "sway/config.d/10-screens.conf".source = ./.config/sway/config.d/screens.conf;
+      "sway/config.d/10-autostart.conf".source = ./.config/sway/config.d/autostart.conf;
+      "sway/config.d/10-input-defaults.conf".source = ./.config/sway/config.d/input-defaults.conf;
+      "sway/config.d/10-custom-keybindings.conf".source = ./.config/sway/config.d/custom-keybindings.conf;
+    };
+  };
+
+  # This value determines the NixOS release from which the default
+  # settings for stateful data, like file locations and database versions
+  # on your system were taken. It‘s perfectly fine and recommended to leave
+  # this value at the release version of the first install of this system.
+  # Before changing this value read the documentation for this option
+  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
+  system.stateVersion = "20.09"; # Did you read the comment?
+}

hosts/stroopwafel/default.nix

@@ -0,0 +1,9 @@
+{ ... }: {
+  imports = [
+    ./configuration.nix
+    ./hardware-configuration.nix
+
+    ./networking.nix
+    ./persistence.nix
+  ];
+}

hosts/stroopwafel/hardware-configuration.nix

@@ -0,0 +1,57 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports =
+    [ (modulesPath + "/installer/scan/not-detected.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "usb_storage" "sd_mod" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-amd" ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" =
+    { device = "rpool/local/root";
+      fsType = "zfs";
+    };
+
+  fileSystems."/boot" =
+    { device = "/dev/disk/by-uuid/13B8-529E";
+      fsType = "vfat";
+    };
+
+  fileSystems."/nix" =
+    { device = "rpool/local/nix";
+      fsType = "zfs";
+    };
+
+  fileSystems."/home" =
+    { device = "rpool/safe/home";
+      fsType = "zfs";
+    };
+
+  fileSystems."/persist" =
+    { device = "rpool/safe/persist";
+      fsType = "zfs";
+    };
+
+  swapDevices =
+    [ { device = "/dev/zvol/rpool/swap"; }
+    ];
+
+  powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.interfaces.enp6s0f3u1u4.useDHCP = lib.mkDefault true;
+  networking.interfaces.enp6s0f4u1u4.useDHCP = lib.mkDefault true;
+  # networking.interfaces.wlp2s0.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}

hosts/stroopwafel/networking.nix

@@ -0,0 +1,23 @@
+{
+  flake,
+  config,
+  pkgs,
+  lib,
+  ...
+}: {
+  networking.hostId = "acab9998";
+  networking.hostName = "stroopwafel";
+  networking.networkmanager.wifi.backend = "wpa_supplicant";
+
+  services.openssh.openFirewall = true;
+
+  age.secrets.wg-private-key.file = "${flake.self}/secrets/wg-private-stroopwafel.age";
+
+  # pub-solar.wireguard-client = {
+  #   ownIPs = [
+  #     "10.0.1.8/32"
+  #     "fd00:b12f:acab:1312:acab:8::/96"
+  #   ];
+  #   wireguardPrivateKeyFile = "/run/agenix/wg-private-key";
+  # };
+}

hosts/stroopwafel/persistence.nix

@@ -0,0 +1,29 @@
+{ ... }:
+{
+  environment.etc."NetworkManager/system-connections" = {
+    source = "/persist/etc/NetworkManager/system-connections/";
+  };
+
+  systemd.tmpfiles.rules = [
+    "L /var/lib/bluetooth - - - - /persist/var/lib/bluetooth"
+  ];
+
+  services.openssh = {
+    enable = true;
+    hostKeys = [
+      {
+        path = "/persist/etc/ssh/ssh_host_ed25519_key";
+        type = "ed25519";
+      }
+      {
+        path = "/persist/etc/ssh/ssh_host_rsa_key";
+        type = "rsa";
+        bits = 4096;
+      }
+    ];
+  };
+
+  # boot.initrd.postDeviceCommands = lib.mkAfter ''
+  #   zfs rollback -r rpool/local/root@blank
+  # '';
+}

hosts/stroopwafel/step-roots.pem

@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

secrets/dyndns.key.age

@@ -1,20 +1,20 @@
 age-encryption.org/v1
--> ssh-ed25519 8bHz7g GloMoc3qIJq8coOIqGLIWtAwSZMu/tJdLDLt155o+RA
+-> ssh-ed25519 8bHz7g eH2r8tjJDeICUju0I7YYvBoAzobNpED8hDnlwt2lllo
-XKt0Hw50VXh3YYYbKEqpVAAo4aj6X+24mX8saH6nu1w
+I8Dkg5aarZ29V9TyXg4S3bSwNETx6kUb43mNkf1hv0k
 -> ssh-rsa kFDS0A
-dG8ZmFNRKsg0sihla32+amA5mlD/tzPgauOtsH64wAvQjPz+aBr7xL8l5usR+nMV
+N95+/cFDfdjSwsxR+Bmt5LCV0qYKjJpo/PI1siFqVcvtwRaGK/r3qKdVeITybTGi
-BldXVlaYfipevHmWGE48vvNheAbBLNZ/0iIfJpV8EDdcUZd7v8Ijgp5f4zns2nRS
+n/WqKFFble7gVVB54FauVI1irCGoxhhIFLV9dwLAhmKzKxRHDGAHdrT4NZYa+1iQ
-CGHQRGtcxD1OtPl0Rg5/zF/0vBnmsIUyig/NHmrRaWF08WZBZhMgIcnoRXpUlcnj
+KXiYNwifA/eyyJF60ryHycZiiyzI6UPoUtteJlqH7MlnYRsZXIBfgAfxgQs2WrTL
-AlrW9ElfSTKRsOT2F4AbVcKBrbagSjzJ9ZrIJ/D4gxW8bE6pYkHd5sflXbL4TsRY
+/xQ+t3im7fKfAIkmVKftRdi59scNhuFCLRDTXdL7Vt34KWoiTaihPUa+EyAPoaWm
-4G3kBKC41Co5Z6byv4gaT+y0AfX7/Q6f1lvaqOOAbBzt18TaEZYDoe270L53Wfzy
+/SjEa1Bb+TMPaUI1zRVeV9V4q0FrONVuGkEnF1v5PjfPlJKrBdEtAqDvbTfG0xE4
-VPlnM41vo+EsGsKhzTaWLTmBaawSWRhxZScHygZhu+SgIFLEDpU2kOY8XlKp6yuv
+9Og1ZqhajKiyYSoDKoMGHSDElkGpnLaSCRzeb4EvsOOuLbqQIg8yi7WOEYKJzKMC
-82jyEW+ts9069hGvmzrt5yr+HLMzlhEOPfGYqrDgbmuJsq0E4PQPkQOLeGROxaUs
+eKPayOuLvS3vufD2zbETzesEie69SUNRwLOFCeKLSbAxIbSFCASEDukEnlD7bCoJ
-zceCwfg4HUFDRHVa8KBy1HjovjkLzl/auvJaUUre5RTGLp7QWYX5rqiME7AndgfV
+IJf0vjDKnwq48mHkxaKgR22jGJG8HwAOYt/Ks4d/yzwTbuPoCDCDkQy/QOlP4uin
-joxVMJY0tkrvollNI3xXmfU2xeuK4Jm7Jw54lJ13KaYk1QqC1sMNCo7cuEUIw8Ic
+zKJ9VZZ7sh91EK2ilq0vmegJIVWKFbySSHmiRKfilTeAr8j+5NZqfrg+gTglJzho
-N3aAU6KRX1ltZ3IIo+vJYVQO34UWNa9Xf6uGFTzX9HzpUYEkHbv90Gx4ck+2sYvi
+8ZSpC5iGbPMRkLjN3by+aAFKCOX2Yi7PDphiphEytxN3umNpM7u0hS9JaIDPfTdz
-3dBfz1koiFyTfOT094zqDuecH0MsmWExtefBDvU7gcU
+whucKO/5MbbgPIuzU1WPThRrD0TQfdDAIBNeqSAEx8c
--> |0I<)A4-grease
+-> Lb=*1hD-grease d@o1
-g/FEYilOi+UwM+E98Rvpav2jqeLUlVeDAo4PVWHNhjIbas8iJV6eKwwJMNfuEJ5D
+Smur/e9l/SztFWSieAOMMaCeMroN4GynvkA1a/aVrpaBPA9F1BVtt92wDikJUDsN
-wdh+HTDijoUzaYTPgYqcKg
+Gk4GzGbS2kU
---- N46xNnGnaWTUqGo6Q7R0VNqgPpUEu0D2VDgOnPZhgiw
+--- eKJmYqlAspTO8kjTazwPyjAmwBigSw2y8+YINjqUWrM
-zÁæ¤p¸ŠÕÕaf&èù€H~pÊÊrn·OŸk„÷øàü͵CÉÝ`ÿÞlùæºe¸ÎÆÓ‘ۨǾ"†Æ¦˜æî……&L41š‡ã)‹y%†Åü:;35ÎÀ‘樋ܛ
+”ÜË ÛWV6µʳý
WR7Ò^ëp—ƒ{ÀüßO˜Õ²M&±Ífš®}v<>)u¡ò4〠àhv£Ç¥<C387>¸.ð+;(Yׇy<03>sÕVyô®œÒ™BÛäVŒa<C592>#

secrets/firefly-cron-secrets.env.age

@@ -1,19 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 8bHz7g gXgsQ6NkoJOl/wCYabj/qGDDA0YMzH8Zrt6GDCztHUc
+-> ssh-ed25519 8bHz7g 9R2dpxgakL2swKyFxYtsXWVtV1HgZvMofecnU+rJuRY
-1NdpzPbw1TVr37OfZtqRN+PQkID7+T5QKBzE44k0oOs
+RZN8JwFpsvN+piLui34/zK/eKDBmxnsf7PsLMpTMVwU
 -> ssh-rsa kFDS0A
-XW10XZsiDkvaWMLi4G5ZXQRN9iyAJjY9C11H5FadmEalm5KVfXBznEB4B21riU0E
+GyXkkPGFxwhmzEiw2T5VIhStwq81DDeQ3s0/aRlpvkWODQ+Bp1PCcxIQDwgYxU1h
-RlRM8tBSJWSMztUIEElt+X4C7W4NMn67ZhxnP8Aeqkfx8u88YRGdw0cHW12I81nv
+PPlXWczpaq3HmJ0xUaldFz6t40mEMJNQ0hfKT85pq+J1w5xq56SeCwCm0kLJV3/7
-FRd3TOpcNAGDMEzX6o+SfvQyFiATmz2AQ5X3prURsQAB8v78rVZ9cF+AY02ceO0y
+JcjBi5mlvRUFJtwH0DrCUrQttuTEyuxrTcmNCR95Lcq87rTpyg25KCvVoqfgsIbJ
-1ZN2EQs2hL+SOdgmW4qCsVp8Q+/92T11DdlE4qvWe8dl1GMYsbpJTjhJl1nsvQBh
+Ps3c+MX84VF3vpnLHWBwQTG/Gh8zD+D//0TeHkMi71gTeUKcGGSEYV1Nx52c3Uxn
-obYMHgUiY2edrsStgK3ihi+Et3ibtUib5XYrPw6VzphO4P6afrmlUBzPUN9p9fYE
+zSUYaeHCqo57DQREZS+eTcvc4OTOJF7w8BDXTa0IjLtGOBdFLxKC7dXlz058szKT
-ySlG6rTkp4jDj1zcmtiAiKpQD2SwZ/dJCZL6b1sWsHzOktYa16aNB2OLsWtOlSYm
+FzZtu5YRhP13wNfLslvVoDm1IXcy3ryaFcNjklxU39uhk2ugMNzq6NuyEuEML2ey
-GknAFi814HA4QrbWfWOgZlfCerZHBZnWh8gC6M86x7DR9VDN5tF+HQCWM/IhwgKj
+rf7GgQlDfLaIeeFXYbsZZCa4494w86fDQPUImU8g7BXO54P+NfyUkFZhyV2nAW+A
-j055t9PK4POhZzrD0ZjbRJZwmGtIq8/S6bsgIyGAAhH3Ie76zL4e0e9gI99YwMXn
+LPpIO1bSUc9xKf/WGsvvHwuwulxAgsJFHrieIYAQXGStMvosaQMKfX0cird7avVb
-EftgbTOYQ8zBSoASxMPl3PYCtg8Q7bTqcDuLzVQ3JhIq8K6p7T+797mRw2uNSisi
+VSJse7uojL5oHF9n3XyJD44+Jf7N5nQ67m/USN1WTNnarIdp7HjIXITQFTSJ4PkF
-vUiLnxvOxT2dyAeaDaRUEsPnxx33SHoTTuoZHz8gdSGU1Y+tDeOps/QprVfy+0mG
+TYB6Gwsb72j8rEatx7zVFeJ/sa1YyBLMc3EPKz5VS4YPP7zHL4Msklo4slkMkNX2
-V2PWGjci30iN3NpZbv/EuOMMjwwl0iFzji8N50plfuo
+fksdOnL+nPkkVoO9XPjdyaWrvZvQjKtCOA3bdZ4UrIk
--> o#R-grease .V $]$5c3( JcnS v@X
+-> u9Y-grease V-v7W X&wU:A^
-xrpywd9RbU3pbX+ZNUmp8+FASc8RQjaewO9pnQNaCZc4hujhllw
+3TF3rDKGzJy328+0Ozkhzv64NctG3ywtL+IW/SXVb4X6sKM4IJqV5DhHtQ
---- JcL1P3WGCeePUgXoEdtlaTakrSkh7zs2zRM8G9f1bUY
+--- ve3h0dNmfSTs3Lz26aG3+xuAeZ3/UztowFa0ZDdFCEQ
-śZśŁmsÝ{+T}»	Ţr‹™·É#ÍĘR[™ăU˘K拇ř“Gýc¸Ć q&k.+Vd€^~©’Ž8¤Żb4±úz:f<><17>ä`Ď
+Í”ÄNŸó)–ë4 v‘|<#ÚÁ·um°fyD=ÿÊ–œôÎ8v\¯5œ-H‰i& -#2£‚l;̬H)Ÿ!K³O’sÕ0HGRK)qç€ùÁ

secrets/hosting-de-acme-secrets.age

@@ -1,22 +1,21 @@
 age-encryption.org/v1
--> ssh-ed25519 8bHz7g 0fwjxxgvY3S/2oKgc+RxTWA9AuA7oS1MnMAqG0AZ2x4
+-> ssh-ed25519 8bHz7g nvVfc+YJceOunIoHDJS0CLcqIMXAH56bGaKMQtI2K3c
-LReuCNO8r5UMlipXheXT1SLQKlwGMC8Gpu8VtAUI3/4
+L6Yb122zyzOJzptdgYMDddb0QFFs4WPlJoSKihDsPQ8
--> ssh-ed25519 n71/yQ fiv1s9XA/ATrK/s8OkenXCCp3mUhn8gzp3I3S8h7BG4
+-> ssh-ed25519 n71/yQ FdYL1Qf9AqSenPKxHLc3/vuXLeemJrnVkS0QytRupxY
-XhzPW7aFm41nzr7ZaBSzS2qfQoVttgODXUqPaF+FvPY
+xhRI+SNcsAbvJVDuJN0nJBWR1R10WdZU3fXnmo/qqV4
 -> ssh-rsa kFDS0A
-gLhS2ce3jBP1UbJJt9dJ/4SmkNiL7LBuUik8Zq1WflxHlMqrRslb56Uuc4BJHTlp
+eW1HEdCHJOSXLXpiANv58biOYbJ8gF/F6V+L89zODTcYlXuWrOzOL24i5W4IiOxW
-KGt2zrzRRNEdSJgzJfK+AT1AHCza++C96ZZsxfhDexL/Gx7Lm6Bwp+D/XR9KYxEn
+Xwzk3oGycVAkkSQI0adocvyBJ23U/5EW2jLzo+bT3gHl9auX4WIS4ObtHYrhGcn8
-UF511OWWjoCbDWldUQr17y5cbiG4z+VlMMOuKox8RWHymG0ABe+kZEOg1GBZ/bLj
+CftTud9rZJEtWx8+NMOVKz95oywtuUSBOx9fIomOiP7BI4u1BGMjfuLFWdsdNHrN
-tUwgxdK/uGGI2/AJIs4tiiemiNo2cMup7fe+wBPqq1b/TcxxTGHfWuJopp3ISl5G
+yQU96uzVsfG5wStri6XDQXp9/LaYUHqiZEmaN+ey/lGwB0lW4weUg2T9yp3xcu1o
-Ov7o7/HVCyemFSlBQTF1K3t68rw4a0ZkMcX86RpEtbiRFrEhS2IuGXnwteEnypER
+bJ/HiyneuusvwJZpzfw6WTm7YTIOVkPPYoYqJdJ+uJkpKSU/zb2zasofg8MMlF6g
-OiafhbdIh56TnTvCKuxnTJdG1JobM1c15l9FhownRjKMwVjeQb39LKvQlJAkzGOr
+SOaHeglcyV0zxhNNhOMhXq45Nuo40V7YxMnHIQ4UT+jFFBGG/UL8rE8qYHeHB3yb
-eBtkGu42p8UGNpltTawKgWNOTsZNy5BYHvHvS73SXDcuwGVhhP5fbeImUgeBRUyT
+SpsJSog40R+VI6VSunC022RDbaQy++DhYQs9BBr/I1V++0WJEANjTosKLtoxVe8y
-2DWoK+vethjGL+tX+NNqeKM/Xr+k8QUGq+qehB6UoiTLL4NiwujeO230b9Afsh2/
+ZEY+BaF+tVBG5zE4Jqit6KdKj90k5NyaElkGFgGEYHFOzALahXBH19/Z0uNyuRbS
-xtzDTMueqTUVTzxA0GbIRSXCKCfDNifdJh6+ebnvizx5NarANvMNlP6sfBQ5gANf
+IfCOrlofJwQSjOGBevm3d610m61UHQntCEYKz8PIHI2h8nBfnJx4ybI6mbUkyv7z
-N20IhtgnOxQ5l5URWqK/A5vk+cpP2GGkAGoW40m31gyug9AtuguNpEVRpLHJVtRn
+aIBjPRxilgziOP3N4l8P3CLyiQ6aDgiKRYpTMdYN5a5N0oCmv+2ynC87yCggj3Cq
-DpHh5k0EMzWz7iQhYIVavLTh3AtxofLg4wp/cQEkcQg
+4NmceQ5U2UJ0qHwqvaDY3kZLw5TBHgG1D1VKhSDIKsE
--> OC`4fNF7-grease
+-> t-grease ed
-YhGHL0+BVF6h6InKVlS3
+m/VplL6lCuM
---- NXJPtlRt28CuwumxjLQI8qY6i5GSbBPbBANxLpHmsHE
+--- guUbZNWz3SsDG3cuZYbI5NJTX+4tvj0XOPksEwY9pIM
-‹×€aqê802.æ–´"R=SÙÚȳ ËŽlhª@ÄK¢¨F-³ö=;ž @ìåúiÕ°+àÚr¸£àð;4wI}ÕiËÑèõ1o—™
+ÜÀ‘ü¶k[¯¤›GHoýqu²Äš¡£ÔàØÕoøÐÚ#Ñÿ(è_«¿Ÿ·™°3À†¯")Ư¥“æt"¶© ©÷Ã…ƒÎk>þ	
3y¤T£|§sÏÕ§¹¸<C2B9>pý¼ö&$Ó1±Fµ˜
-„¼¬ƒN¼ÂÜòG>Tõ3–Œ7

secrets/invoiceplane-db-password.age

@@ -1,20 +1,21 @@
 age-encryption.org/v1
--> ssh-ed25519 8bHz7g SPo9Mhd6VsgIsbMyeZvLID6JY8tEe7t1bliDQvVo3jA
+-> ssh-ed25519 8bHz7g +2mCw/saM+dTnQeYzyTZFfLUSLU13DDTZL4EXXKoEEA
-GI/7fHbAOqZAKnKknpQ1fQY3j4yiakotvNCZyhsEe68
+rfMmMsuxTPynRwBq709BcOjEyvX4ut8RkwbHqDwp+tc
 -> ssh-rsa kFDS0A
-c5EED+7gs9TBd9c1S7OBMSsh63sgSe54W2IsVBlyYTsEsQc5YBFCIr9F1G+DAMv+
+C3QceW5kypTMf3u+ueFvuXA1NZ3HoCcsnIiIQyEOgURyRoJGDojGOSgT3V7Otrq1
-u4JipemAcIGIRcoJPgqZvmOt0KzcckECb3n0G7veEqlHQSlDvu80NMfJgJ30Nx1v
+lK0VRLFEgJBEse1EAiuXtNldtVdgR5c5QwmCOnRpKp10LTBZDYGMT2LFsi4HdXnv
-VlWPjAa3yVeuHWnu00ANFmwBNIJVxpFoYXI7kXP8NtRhs87Gdy01HybQgJNH31C3
+nP3DY3OI2Qu5CPmcjkBgL99WlKlE76siyq3ZeNJGSBh01PxMgted2qPPPO5qqPcE
-f/d0Htg7HlCsYIEYV86mSdWqFXen79RNBCnvVDz3M6YAxdxviFEYRXax3IuWpnSc
+LXVVV0sw4MF7RQgDMnMn8pubbVUi3qfi2RcdWVslR9LIVZr2Yq0oZ35yebLcoFp5
-zr76gVhvAuBcxIP4qqjRZnmfXOoxAsCC3y1CVphfYPcXka4/u8wgavzxFBs/vskv
+WmZbQKGmVq4r4kKY4gsjbgdIFPlIIeDhEad/2YJRWSt8JsFFVtzNFfDvXu1L1gVP
-UBXp4WA1+HheCYu6K5CXsBs4AW1fVKg3U0wmyeXR0NdYrjNKsEkDdE5GbjUi68pA
+7+B8iuwI/PYSS8dWjOCWTd6bc7uL6cOO0fYPefadcE1b5XngU+xrxvFJkW3qcXAm
-SAGZS15tMZtm+80OSxxVbbg2xcnkQXHXRAk6G5CIaQkc3DqgRX4niM36lFmUsULc
+vTR0JUcRg/PDY1/oK1tF3fLlslJ97MFL3mvQxdMX8GSdoeqoeT8rEYYgExo69tf8
-KardwxAR0VaAXxzi18Mbm9dRpsktnGKrEGXSi40DfzG4Mrf+woyYHD7HRXpV7kVY
+TYSBy1tb6Kax36ZCw6Hm4cRqqwq5/2xUV4ScskLEocUIDsHHck0K/jF+VIUPlzux
-PeHBNflYZEJW7mI6Y8lMF6INYY4Y+3SIJBMg5wapmOWIue8Pj22iHWD1CbSa+YUL
+XmKo9qYQge1i+GnxumKyFyhd7MnUZGgjVGJRX1pmg65RzQQXwTt1jOAHKlKVpPhr
-GDF4TBEqXdiN5TaGuAj3B/IQ8dKF+pohglMqK/xBmAQ8Q7yF+Kyc0C7hMwOcc07Y
+QjAifxU7Rl1y0w2YWtV5LMWTqVICQHcDCuKaMAlWJYk59K2vh0WEnuvyZOcscCxH
-NrfQkEhbgDLNOE61oI5je1hseu1/J/BDpfcuv82r2so
+JosqD4G0+5drLqMUUuAxCkjW9zNx8cCjntro2vHceBk
--> 0UI(-grease
+-> &A?-grease w%ao<@7 |]inzC^
-hLbbDjER9olivUGkGNf0GX1UilyxtFkJPVbaHhPlBsbri9zM1tuHhPpNwU9FaTJY
+o9QLt2ZxTsxbrKsn2zeiaGox/Q1S3hqeTeMy69lyduHY3FUaa8hVJx65SVfchmuj
-BrA5N7Db1TK0
+OkgL8RDvfknTupWQTuv/UcVgPe+Pp1oShvXPra5Qw5HaVrgKvsUHUGSCxtdwXJvA
---- Z8g9OM5TylMaIexeEoVzfHiYyRMguw4Kb6K7zdd+m4w
+gj+o
-Ş—ğ}ZÉ® ›çYA~'¢õ%+º”„7èÙ¯5ê¿»¼‰I	]Iæ’)*ü½¸KóTÁÂÙ<C382>‹²iíì—an+ü
+--- Swkx6K12J5ztpKFSR/2nqxDBvk7oQ9NIKmfeOsY9ZmQ
+;ë#´õ?
f‚j„AñŸo¤p3÷7„iešÃ¦1NýÜ<C3BD>í8ÊËýY|pÑ <20>ùç<›jäN‹.Tb˜©<CB9C> Ö?¥†

secrets/invoiceplane-db-secrets.env.age

@@ -1,20 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 8bHz7g k5u5XLcX7KSVfjpMkE8g0pt6uYNXCg19Qh49Q/uG32c
+-> ssh-ed25519 8bHz7g MatTAZXopxg6y+ExWRP+qvNDA4vTIrWFHOfoWWH4YCA
-WIaJx2KiVV1XSYu8q+S/2NRZNQuyW17uqKDe23+XnUI
+Bbjb1rNf8xsyhjZRz7CCCf7rsjqkxP2xXg9zTLVLJ/4
 -> ssh-rsa kFDS0A
-giATfPMp/95y2ItODNShZ0kfqVFHWI4Wb7x0ImgrtYJhHR/5preaIVHj1w/Eov66
+J4InAOtFt3o/AwEKi2FE3OI/rEB+31icnqQhpfQz1WIGJ3d85bt9WRyATYxnzc9v
-LIkGFbxfQViqiVowTwuzI/r9aBkVuWgnm/4wYmnE4p12qZ3iA/cSzcM5DXK2i0Dv
+4FL7wN2XVd8V90YcIjnfUnaJhF2QkEN6Eu6B/nMNTXijgLvfkX4yJ6cO+1tJSfvQ
-bdeiiQkdYbWRzgG9hYgNVDLrQTxvtzCaV3cl6o/ghUYHU3KYg0d1Cx766daUV05+
+aliz+W58m2QbKaGlzolNuXu/JpBxknectJuLfzWgtogiiQ9MKZtN2eSqJ8SIikpj
-iUWD86mnJtmR+qMlyprO+51I+3VCV7H7v1aiaDgGl5Gzp6uRpiy7qk2enlJCj5ff
+RPXMMXJGLO5aa3VBK88xdJskLX0D4f0pd12hIb5rYw2YfJ/JKLYrndHZWpRSIzhR
-W/ZNgq2SE+tIknjAR0n1RSGpuJEFHeo8N/Q3GFd7uuu/+U0KSjf54ObUuJG9v/1L
+38eF5YHCLcLRLnbj1pUFkrmJMbJcz391v43A4r8i+ko9DBZsDrZCtrJHHQjFsJuX
-ma1vpt6ykskoRsKAEwUMjEyCN9dnoR2zY+Vt42RXR1XO+jzsdmzrXgd8oQsI0x/G
+cGj1orqyILbBRNNcG2FY7s67jyCLUZjG1WzpqgBZVWeN94HJ7DrRodEbFjHPED7r
-+uAOjiHQD9xlS6InVsCuCoPFAzkm4ZAWbx1ozKe051txyDz3FkqJ9kmuXB7wDAm+
+BhhU++vw26IN76IUQ67vGGEMt8kKORsWm0iSFNEdpt/IU56D41/fXAoQmM0utHGD
-4Z4PFpyoCrxHtiTW+dG7gO/AKIt7Wd3paabb8nY6/9vuCYf/Rt9ec/MH69sok+CY
+rpiXMDQIV7STsiMhhBE5lUPTISqQAzhRb1vwQyj1Zx/qnx9hyj5m6K7F6z4loJV3
-UcJE7U/TLxwZS3JMNvwwsJfu3TGHCQMi0VJXku/bcy+93ohdtV+Vxec0fWWVGVVh
+gyDtUX9WT5uYQShXDI0lqTF9aidYqVMSnIT7PkenXyImYyO6z/x/VijDo1+dObyA
-0Cod0FkiziORUko6CsTHvWRmI6D0wSui3pH+Vlpbl8m5R4VEMlkkbCx76x/MOHJH
+orGVF6eWCuTfE/ZuOkLWQS6/NWH5ynzLQ9pnaflurdt1EC04pSVarUxQgRBF1Gdc
-BF2gTPmiHGrMjB0/F8yJCox6YL5B9E2Mtg+ihZBLWN4
+KZux5UA57/1IFMY/eGFRwNZ9FGtPKC5Apv78oE5Piek
--> :MAXu.jB-grease 4}9cAL 9w(1_Q%
+-> =X2-grease b{%_ Ng
-BvuZHewVhcZPk7nX8Q
+814mWsk
---- dkGEmljTt3/Vvzv90ZOjYtqDoe+vXZY+6/u1JwAvpGI
+--- 45YQMUc9SFgUONGhMEgE+O5zHhRW3GnmoXciqaD1WJk
-Ň@—ęAů’·Ś«Rĺř*ç•˝rëh•›Ł6˝Ď0´‚ós/ĹĺF›vŮLëV1ř0ŰsÓňŃ}â’KŰ5.§«4‚6_ÁţgĹřĎ·“>łBd
ác€ŻPÉç`Źl“,ÝéŤŇľ
†&dŰŁ.(Ô1®/HµX4¶%5uŮaŽ
+丆6Ù&üˉVÒ'¨Â<C2A8><C382>꟭pº‡C³ûMÛ÷Å¢|²=7í5½Sµñ”aÖïŠôdü<64>Îi­$;ñÖño@
ž)}kI<6B>t¶'bš"„ö‘	›ÁÉ`°¥ÍpÿÏYV0QßmÑq-Mß‡vsÉÔ&L<>¥Ù›¹Å/×Ãgk#ëEOQ™"aVˆFÿž…ƒ¶Xìo{ù¢$1<>¸6y8õƒ,W|v!|HظM©DƒoNYá<02>W
-ÓM<EFBFBD>'—‹îxýłm
1M˝ćF¤l;ĺ<>B`\ŚÜΰxÜRĆŻâIůł
*B˙É<A)©Ć‡K~ß®BąQç

secrets/restic-password.age

@@ -1,20 +1,20 @@
 age-encryption.org/v1
--> ssh-ed25519 8bHz7g Cm7Mj904CLIkeevSll7VvKpI0dufxbP1un3N/aQgIEc
+-> ssh-ed25519 8bHz7g XueHNai+vex9HpCVYwvDxDGp4Tu+fvW/Muy1SULia3A
-mOE0vPi/Lwpqfw2E3ZQkFJHQ9oH493QqrjCnBNgwhx4
+BBgU52O4Uvxp/84DVLpFFHGrJiHJEOJovfHQ9CrBaEA
 -> ssh-rsa kFDS0A
-SJtQbBdBExuEzQdLLl+bTLKk0sMVI955uOBID1YrScrs8dkDL9IGuwzWnDVy85Ny
+Vxzv5z3RQ7Vm1psLRHzsd5D3K0MC5Zjlrljg6SK/ndznt9B5B4+ICw50wX053bID
-MpafrfregK6Ah1ma0k6FlAQ7hsNy3HY4YEZFsqC4U1aQjj1CgpuEwPuYNk7Ol1Od
+81Vw9XfO0j1n1r+n8asobOebkCdRp/ZxUAJdEwQCa52WuWRiXOU16cT+y6W6GSLq
-abwEDzSJf6yNBIqu3lItkHQ7DDyZF4fKEQwtkJcWqAjRKdi9Uce270RSdUdcvhcB
++rMzMmLNBRjyin/4mnBrItwlXG3RcHc0+3JXtqL0L/ZFR8e9A2jBHG9DohAWtLfQ
-5hth49ve/t6piaBckkZCp2FT0QiBj/ozjMrZQhmCMaG3RhBYJV8DZ+XXPxXMY5OM
+OMBxkj0ejqlAFs826Jfo/1qqX90U6JcfutvtXB5C4s0Y/XMpOM9HPCVpJoLGcpLP
-ZLAg/y0Uw4nZHl8GXl4heBDAwMtRmf99hB+GkniXFM7ilGpjb8TBziDZ7kPCfVIl
+Jmr2Nx8b/n8W/9C78NvcKUS2KuiSk4VG7o3p6Hfik2xli6kPQ8qc/1wb41lvdyK4
-mnwyGut370ZA0+FDBc2w0v/+MBm3FWMF4udbcc1piIImg6hFasbjtpG+yGP7NPKW
+lPLlpesG1AOwUNuy0hh8o0dQNdbaH7cqLOf7c8zF12GgWxv2nV4rB4cpBOaLtn5b
-w+ZZx5FJvg2lKyhOgw6u607qm+e+enXSx0DfiU8noLzCMNQjDz6kUSGrZ81J/1RV
+b9K3+QRVxvwt7UwrlybMM2ONZQMq14w8vXnwUy6AvK5jO0WijfIFz+rZdDQYwDkE
-jagiafSTBI7uRdtNfclil/JmEOtqyQGPbI8DoH3aeP+ZgsdMEXE6tKjSTauDG+51
+PGF3eJHS1z58iP9PCD68537glQcTwhLwGWEV6yKyTkeIsXRJWr5OpDhpqBQf6pP/
-Nif5PdvE9ttCdh0fsiujBuHNDeiXzjgtDcweAMONwtugc77QTtD8xOyc50aSCsv0
+p+B90SaDFZtttI666aUcTzSJF6lojqICssaYjfgtPq2zyNZ53ObTWPGSgD4zCXWC
-wYtC36r9Ov0vLxE3o9ZAGpIHTqwquS4fa2T+qUrV3awD1E8jgePz5cfJPoka5poN
++wexFpX1aDOtdc3ZA3uJZ7jWI3fIy8GhJYtOpO2bBAl9Eb1OFVLcnUrAczxX4B5j
-NpgDq4x4tguOPqKqnTR0Bz6uVPp713FjRFwhXBlyoug
+hdzOQLqD6ANun9MKaz6P9f/DY/7LCQWAF6DARImL2N0
--> ZeLZA-grease hkzH` 3) })H|k -]KWQY
+-> A5wjd&-grease G !J2Yo$^y
-X2iif6L7A6obBx+aXOOQiB5Xq1kKbOXgYMYkt3rZVaYTs8MBpoyZUWj5KqcRFO86
+RFN3cZUubdwN0BUMmqEut9jfp17V8wVpZT4HImLMYkcYIjvctQde7s/AWCuhMkrz
-WepOh2d2ig
+KGGwCFTCwT05RA
---- 197qo27k+qo171895rFXXYrp0Z9TUiY8QqLT35SqKXc
+--- h6ylBq9j8181YUEqTHEx3MC6N5KVrGVBfM0uUzLNTdk
-5ÈJè­dïLDdìiF_ôè‘‘§<E28098>ÿ°AY°n\°tÎ⛳±8›)þ»öÔŸÙ¸ƒÊéq˜›ÓÂ
2¦jHq)·‰R¼<52>ÛSÌüâí}Î(.ˆ¡Z7dÛH<C39B>ïØ#5<{d0¿’E]`²n<C2B2>XZR¿ê¸‹BþS;1î¿FQž¬®%$©Öµ9+¡Ã½w<>C)u
ÅX"
+§I—T.¯È-GOº¹N5BW!„‚×îî†+B•Ã`8³?UÿzÁno,‡pm† Jÿ	pøôrSýv*±‡äÚŒ–˜ht®þãöEx\úæ%în)l¨qt°U<C2B0>-Fæ•C:IƒÔÆçvˆ<76>¥9ðoµ%` CN«æpùÁ¥<C381>âo—Q<Š59bˆ±U䑧x¦“ã–,<2C>

secrets/secrets.nix

@@ -14,10 +14,16 @@ let
 
   frikandel-host = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPzrEsby3KYpKRuSnTMp2Iq4ENgucQUy6SJ+906nwllS root@frikandel";
 
+  stroopwafel-host = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDl5mZ8CBVU1xG8NfcphWnmUUK5VXec7TqW5qfPeYQHi root@stroopwafel";
+
   baseKeys = [
     bbcom
   ];
 
+  stroopwafelKeys = [
+    stroopwafel-host
+  ];
+
   biolimoKeys = [
     biolimo-host
     biolimo-user
@@ -46,14 +52,14 @@ in {
 
   "droppie-ssh-root.key.age".publicKeys = droppieKeys ++ baseKeys;
 
-  "b12f-env-secrets.age".publicKeys = biolimoKeys ++ chocolatebarKeys ++ baseKeys;
+  "b12f-env-secrets.age".publicKeys = biolimoKeys ++ chocolatebarKeys ++ stroopwafelKeys ++ baseKeys;
 
-  ".fwknoprc.age".publicKeys = biolimoKeys ++ chocolatebarKeys ++ baseKeys;
+  ".fwknoprc.age".publicKeys = biolimoKeys ++ chocolatebarKeys ++ stroopwafelKeys ++ baseKeys;
 
-  "cat-test.ovpn.age".publicKeys = biolimoKeys ++ chocolatebarKeys ++ baseKeys;
+  "cat-test.ovpn.age".publicKeys = biolimoKeys ++ chocolatebarKeys ++ stroopwafelKeys ++ baseKeys;
 
-  "ehex.ovpn.age".publicKeys = biolimoKeys ++ chocolatebarKeys ++ baseKeys;
+  "ehex.ovpn.age".publicKeys = biolimoKeys ++ chocolatebarKeys ++ stroopwafelKeys ++ baseKeys;
-  "ehex-vpn.creds.age".publicKeys = biolimoKeys ++ chocolatebarKeys ++ baseKeys;
+  "ehex-vpn.creds.age".publicKeys = biolimoKeys ++ chocolatebarKeys ++ stroopwafelKeys ++ baseKeys;
 
   "firefly-secrets.env.age".publicKeys = pieKeys ++ baseKeys;
   "firefly-db-secrets.env.age".publicKeys = pieKeys ++ baseKeys;
@@ -65,6 +71,7 @@ in {
 
   "wg-private-chocolatebar.age".publicKeys = chocolatebarKeys ++ baseKeys;
   "wg-private-biolimo.age".publicKeys = biolimoKeys ++ baseKeys;
+  "wg-private-stroopwafel.age".publicKeys = stroopwafelKeys ++ baseKeys;
   "wg-private-pie.age".publicKeys = pieKeys ++ baseKeys;
   "wg-private-droppie.age".publicKeys = droppieKeys ++ baseKeys;
   "wg-private-frikandel-server.age".publicKeys = frikandelKeys ++ baseKeys;

secrets/wg-private-pie.age

@@ -1,19 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 8bHz7g FvH+VXog6FECWn8RvmPKBC5++GwX2p5DFfGN1WeRnXc
+-> ssh-ed25519 8bHz7g /c4x570ZPKtwcWelnoK9LeX6lYvvq3pTP5NFz7/3qy4
-MDAo42o0YpsSI9zPtai24KkqJNBhE8rLBzDoMQPBIC8
+i3T9G/WjClSyk73W6kRi7fbo+oCEHiyAn7BUX5ENTsA
 -> ssh-rsa kFDS0A
-KJTXv2WmPQEjD+p3hhBeFEqZQhHH3HE72LuFKUxpO8o25JiyDdQXxo+6jwG/rr0Y
+ksNmFtiynYUGV/uI8iDvAVrQNoVeAC5gC7M/zvMjUWsVdA9h4haaHSGT2ER3WRyr
-jQVCo/B3WSc0dkWvih+2iP4pogYRzbqEe03LiLyU6lxfIrpjnvQv0DKyi/iesrE8
+dj+au9GgrPZyO/bWMaDM0MZ1WhENyWh+a6pqMI85Rr2Hti9e6k0WOvxVtjU4g8Af
-Y0U7Ar11WGeJWO5wdNsAiRyNk3oCA4UV7YGQwEcUUPnTo7pKDZ4zGL86W7bF0lLZ
+9aO77sGF9aX+aVT8LHO/KsFsQnD3q4tapLgIz6oCT4zVyBQzQVcyloOMA6nNNRku
-pGdLFVwD7CAjdw9fcAlCizJxYSbk8idA5jlY6qvWYRail2/61MjD67j24yNk7Qun
+tk8EUctGt2x0oyJ2wkFS87zGycF2YYEUBesvwov+MXN+XoFPDpiiC9o+vlw05JNU
-pcVIlY8PVwhk0KVbN2jBXwNy6MegCaittOoldN5lAyTR5v4b82zTpR7KWWsw+TMM
+bec2T5qoNeZbU8rlLdk38esli5z2arzd99fjX/wDxOPg2eSjZTSkQtp6ZGoaxvzz
-faH5LXsSkZp5deKP4sqC5xO5leSwBLY2wHImyOciCydDsaPhr5U5ofAiwv2A/rJ9
+FKGeDDX3JGXdlmjxuMYLkgKyLS4Svup4xTMqhWjB/DEDZ0PAkcDsezBxuDdFkQMx
-McEhwM3h9+V5wyTubM9FI0/IT1O+BVEwXX+Y2pWFKpKE2TUuHcDTLcID0b4z/Opb
+OdOT2Vy7kslKwBxNI+ugsZXD01JxcdmTLy56RL2/FJumBHx5mXoIyZvgMiQCFqI+
-OumSWNesDsuu3ie6P0LKkixv0bB9h6jkWXZ2gfUzenvyoQbQBUoYPpZQVOxMHdNx
+vf5R+s2Bh4zoy/RjmkINPTcBS89uDQV1x+YFFmOrrWBHrbse05ea2ngFGo/4G5UN
-Ga+iz0bas4Mccnw6vXPmJp3GcAoxtwqAoawnhnNZlT1Oc0hCOj135xQeYIW91ofB
+tYKTpAvJ2XxyzzKVG7BgCpM0K5oS0i/Iz6HjSnpNl4O8OSwukgiVGDU0hn19DEx1
-wYE0sFJZEgY4J29rCRsZBfb0wRFUZcSEYb9UUv71yTPYV+/nDv/BQwBTP8Q3vsAi
+oYtK0Aa9MtOPPAA+qyP5EaVAkHN/m/UXdKw85tvMdOMEjAEDDd+eMCElMpBqzJod
-DnBXzcqDwNQSUkf6o3Nodm7jzGr/7xNJSADirsuhh8M
+wvppI/c5tgTl26vmkgnkKxJxCuET3Qof4fRUfaYduqY
--> UZc4<6!M-grease
+-> ?:-grease tQf
-YmEF8D3iV5CIak0fuSLOrmbcGUGEhZPrq4iWd22WrJP7WcALYm2UgWE
+cC9CQORk4uRNsjiTcli+/g
---- BRtFsnY/DnVzZzrYqCFS68vzHSUJbtmjWhF+W9TToVE
+--- XoRZMVU6yc3iQFTFYS1HGArmy0U8UV1PrELpv49tROI
-º¡S#³™Ö:Ž<>LZ¤ëî‘o0­—ë`ŽÑ€²*Sµ¢¿U)o‰gÿc;áN"0úX)õ´‡¨lÀTýÈNIzkî=…Æ&§<>”¡=v®Ø
++› ¤þL
léåh2¶¦rOÆå—槭uOjT?Æù8’ÉÉž<C389>+'·¯Û9†KE8YøKuÝ¡¦bÚ/šºLä3ô~ôÊ‹ÃÊAÓ

secrets/wg-private-stroopwafel.age

@@ -0,0 +1,23 @@
+age-encryption.org/v1
+-> ssh-ed25519 icVZQw 27cZqwyvDh+mDi8CZTfasDENxPGigvzuvxMN+s8AQiQ
+DLDtZIw1Ze433Fg/VI34FX0TNDgonEh51Ed96ZAR6KU
+-> ssh-rsa kFDS0A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+-> ,>/?-grease P z,H5($i t EtR*E(1W
+S7KO/B7Lmz9ZnDRLhVp0h/R/HeWi5FBopJpgieMXLoP66Sy5gHXXYTulnSIxUbLh
+KapW/NfyY/c2Z98
+--- Ww/3y6zduaxe7CtQwi2CVxgCqRdhDhmlV/prY8908FI
+ŻŚ+ á>kxW݉˛çh/Ş+ŕjöˇ»~×>?ÜR˛owµß4$–8Đů-|<7C>^Oć<4F>S€†
+WVéü
+˘ÝŕN
+V'ću
âŽ.C¶	ě