pub-solar/infra
6
1
Fork 3
Code Issues 20 Pull requests 9 Actions Packages Projects 1 Releases Wiki Activity
infra/secrets/secrets.nix

73 lines
4 KiB
Nix
Raw Normal View History

Merge pull request 'feature/pub-solar-website' (#20) from feature/pub-solar-website into main Reviewed-on: https://git.pub.solar/pub-solar/infra-new/pulls/20
2023-10-28 14:45:30 +00:00
let
# set ssh public keys here for your system and user
axeman-1 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMNeQYLFauAbzDyIbKC86NUh9yZfiyBm/BtIdkcpZnSU axeman@tuxnix";
fix: address review comments
2023-10-28 16:18:06 +00:00
b12f-bbcom = "ssh-rsa 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 hello@benjaminbaedorf.com";
Merge pull request 'feature/pub-solar-website' (#20) from feature/pub-solar-website into main Reviewed-on: https://git.pub.solar/pub-solar/infra-new/pulls/20
2023-10-28 14:45:30 +00:00
hensoko-1 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEbaQdxp7Flz6ttELe63rn+Nt9g43qJOLih6VCMP4gPb";
hensoko-2 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAqkqMYgncrnczcW/0PY+Z+FmNXXpgw6D9JWTTwiainy";
teutat3s-1 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHcU6KPy4b1MQXd6EJhcYwbJu7E+0IrBZF/IP6T7gbMf teutat3s@dumpyourvms";
nachtigall-host = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP7G0ufi+MNvaAZLDgpieHrABPGN7e/kD5kMFwSk4ABj root@nachtigall";
secrets: add drone, forgejo-actions-runner secrets and rekey
2023-11-06 20:28:37 +00:00
flora-6-host = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGP1InpTBN4AlF/4V8HHumAMLJzeO8DpzjUv9Co/+J09 root@flora-6";
Merge pull request 'feature/pub-solar-website' (#20) from feature/pub-solar-website into main Reviewed-on: https://git.pub.solar/pub-solar/infra-new/pulls/20
2023-10-28 14:45:30 +00:00
baseKeys = [
axeman-1
fix: address review comments
2023-10-28 16:18:06 +00:00
b12f-bbcom
Merge pull request 'feature/pub-solar-website' (#20) from feature/pub-solar-website into main Reviewed-on: https://git.pub.solar/pub-solar/infra-new/pulls/20
2023-10-28 14:45:30 +00:00
hensoko-1
hensoko-2
teutat3s-1
];
nachtigallKeys = [
nachtigall-host
];
secrets: add drone, forgejo-actions-runner secrets and rekey
2023-11-06 20:28:37 +00:00
flora6Keys = [
flora-6-host
];
Merge pull request 'feature/pub-solar-website' (#20) from feature/pub-solar-website into main Reviewed-on: https://git.pub.solar/pub-solar/infra-new/pulls/20
2023-10-28 14:45:30 +00:00
in {
feat: add declarative root ssh key on nachtigall
2023-11-05 18:35:37 +00:00
# ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBB5XaH02a6+TchnyQED2VwaltPgeFCbildbE2h6nF5e root@nachtigall
"nachtigall-root-ssh-key.age".publicKeys = nachtigallKeys ++ baseKeys;
Merge pull request 'feature/pub-solar-website' (#20) from feature/pub-solar-website into main Reviewed-on: https://git.pub.solar/pub-solar/infra-new/pulls/20
2023-10-28 14:45:30 +00:00
"mastodon-secret-key-base.age".publicKeys = nachtigallKeys ++ baseKeys;
"mastodon-otp-secret.age".publicKeys = nachtigallKeys ++ baseKeys;
"mastodon-vapid-private-key.age".publicKeys = nachtigallKeys ++ baseKeys;
"mastodon-vapid-public-key.age".publicKeys = nachtigallKeys ++ baseKeys;
"mastodon-smtp-password.age".publicKeys = nachtigallKeys ++ baseKeys;
"mastodon-extra-env-secrets.age".publicKeys = nachtigallKeys ++ baseKeys;
feat: add keycloak secrets and virtualhost
2023-10-28 19:28:01 +00:00
"keycloak-database-password.age".publicKeys = nachtigallKeys ++ baseKeys;
feat: add forgejo
2023-10-28 19:46:18 +00:00
secrets: add drone, forgejo-actions-runner secrets and rekey
2023-11-06 20:28:37 +00:00
"forgejo-actions-runner-token.age".publicKeys = flora6Keys ++ baseKeys;
feat: add forgejo
2023-10-28 19:46:18 +00:00
"forgejo-database-password.age".publicKeys = nachtigallKeys ++ baseKeys;
"forgejo-mailer-password.age".publicKeys = nachtigallKeys ++ baseKeys;
nachtigall: Configure matrix-synapse with telegram integration
2023-10-28 00:21:34 +00:00
"matrix-mautrix-telegram-env-file.age".publicKeys = nachtigallKeys ++ baseKeys;
"matrix-synapse-signing-key.age".publicKeys = nachtigallKeys ++ baseKeys;
"matrix-synapse-secret-config.yaml.age".publicKeys = nachtigallKeys ++ baseKeys;
feat: add nextcloud secrets
2023-10-28 16:53:02 +00:00
"nextcloud-secrets.age".publicKeys = nachtigallKeys ++ baseKeys;
fix: small nextcloud fixes * Add admin pass * Increase max post size * Fix secret owner
2023-10-29 13:12:10 +00:00
"nextcloud-admin-pass.age".publicKeys = nachtigallKeys ++ baseKeys;
fix: add searx secret key
2023-10-29 14:38:44 +00:00
"searx-environment.age".publicKeys = nachtigallKeys ++ baseKeys;
feat: droppie backups for all nachtigall services
2023-11-05 21:54:09 +00:00
"restic-repo-droppie.age".publicKeys = nachtigallKeys ++ baseKeys;
feat: backups to hetzner storagebox
2023-11-18 21:28:12 +00:00
"restic-repo-storagebox.age".publicKeys = nachtigallKeys ++ baseKeys;
secrets: add drone, forgejo-actions-runner secrets and rekey
2023-11-06 20:28:37 +00:00
"drone-db-secrets.age".publicKeys = flora6Keys ++ baseKeys;
"drone-secrets.age".publicKeys = flora6Keys ++ baseKeys;
feat: add mediawiki Co-authored-by: @teutat3s <teutates@mailbox.org>
2023-10-30 00:22:34 +00:00
"mediawiki-database-password.age".publicKeys = nachtigallKeys ++ baseKeys;
"mediawiki-admin-password.age".publicKeys = nachtigallKeys ++ baseKeys;
"mediawiki-oidc-client-secret.age".publicKeys = nachtigallKeys ++ baseKeys;
"mediawiki-secret-key.age".publicKeys = nachtigallKeys ++ baseKeys;
nachtigall: Deploy coturn and configure matrix to use it
2023-11-19 16:22:09 +00:00
"coturn-static-auth-secret.age".publicKeys = nachtigallKeys ++ baseKeys;
feat(flora-6): init grafana + prometheus on grafana.pub.solar
2023-12-03 13:19:30 +00:00
"grafana-admin-password.age".publicKeys = flora6Keys ++ baseKeys;
"grafana-keycloak-client-secret.age".publicKeys = flora6Keys ++ baseKeys;
"grafana-smtp-password.age".publicKeys = flora6Keys ++ baseKeys;
feat(prometheus): add node-exporter to nachtigall, protect endpoint https://nachtigall.pub.solar/metrics with TLS and basic auth
2023-12-06 18:11:45 +00:00
feat(prometheus): add job to scrape nachtigall.pub.solar
2023-12-06 18:51:27 +00:00
"nachtigall-metrics-nginx-basic-auth.age".publicKeys = nachtigallKeys ++ baseKeys;
feat(nachtigall): send logs to loki, https+basic auth Use caddy as reverse proxy for loki on flora-6, add basic auth Add promtail to nachtigall, push logs to flora-6
2023-12-13 18:18:56 +00:00
"nachtigall-metrics-prometheus-basic-auth-password.age".publicKeys = flora6Keys ++ nachtigallKeys ++ baseKeys;
Merge pull request 'feature/pub-solar-website' (#20) from feature/pub-solar-website into main Reviewed-on: https://git.pub.solar/pub-solar/infra-new/pulls/20
2023-10-28 14:45:30 +00:00
}
Reference in a new issue Copy permalink