From 244a8b01fb2b75126239f91247055be214838992 Mon Sep 17 00:00:00 2001 From: teutat3s Date: Fri, 9 Jun 2023 17:07:15 +0200 Subject: [PATCH] mnx: add openvpn connection, update secrets --- secrets/environment-secrets.age | Bin 875 -> 998 bytes secrets/mnx-bonanza-pf1.ovpn.age | Bin 0 -> 1538 bytes secrets/mnx-bonanza-pf1.p12.age | Bin 0 -> 4522 bytes secrets/secrets.nix | 2 ++ users/teutat3s/mnx.nix | 18 ++++++++++++++++++ 5 files changed, 20 insertions(+) create mode 100644 secrets/mnx-bonanza-pf1.ovpn.age create mode 100644 secrets/mnx-bonanza-pf1.p12.age diff --git a/secrets/environment-secrets.age b/secrets/environment-secrets.age index 13999bb33f8abd34003c70e381758c87b02f2675..971113bb95109a2a0ce27fb2414f9202906e076a 100644 GIT binary patch delta 930 zcmV;T16};<2IdElEPpsNZ#Q8^bvHLOGdOZ)a#3-2M_4Z}NHsz@Vs>Fscw%Q#X-RQy zN-|7oNeV$yY)&vXcTi73XjfEKa(6K@QEy>TOk_iFabih%QE6;Zc4|UMXLM>|X9_Jo zAaiqQEoEdfH8n9gAUIVqD{f~XG*57EM|EgqSY|6YO;UGac11}wS#v8*b9PHldS!A+ zHdlE;MQ2EGG&F5V3S?z7 zcTX{5Wp;T>cus3?F)MCmVkJS}H(Wnpt=3M*<- zPkKgJGD=fOS#(!OOLlieRB3;1H#221bY}`JEiE8ua(G2!I5>1mSa(h|b9Gi$W>jlN zFhyxcT17HpSvfduF>F>za5qqHO)v_rm1Oz+By(bMymAX%e2Z-;r zYwC&(7Vcp-_w8yEhHVGrE5&GMu>d5}W?UV({AVqxZZpZ|zn;ALj_7}@X6acW>>zFE z@_U&$>SbJzndYh`o^P-dd@g=-&hN6hmz`CZ1;N6 z!6jim;r*?5*4zrN?gH13d5rwRalnBuMC+s73%O2Wu%rnWPh?M*{(j2%9tLrV(V1+>+sU7N+SI3jjAZHM1SJrfqO0c66!D(A_kG>LA+)B7kRit zAe-7J;ivK3X70SIB!d776yYhSm8^l#`C*EwlNa0STD{_Qbq^nCNDB EtLmeRK>z>% delta 806 zcmWmA-HQ|j003}AG#&cDN(y>tu>+}bo0;96ua|?no!QyB-PxVloo~>bxt)*Qotc~O zn>~s%lZ1P^iXx&cu){pj5PXX2L6E*46zV}Px(v#Wq!J?(BaME4!teS6H+HTbSnj)p zt2C-?)@ii{u+9&tv=LRiGfqlsd`)+~p3!z(C&66@7`6tuY0g!|#fq4uQG!(iSZo9Z zPbPI%HrWJ}ZCb>}bu9tP)1@SF%hsTRq6k?cBm@kc5*m_2Sn()SPotO=0)%E^De~z! z7%3rWsMy3Y`vol79K`~5h(c;t&xeF0iFA%PF>6NV#xAmiH)#-I>ivQ3=>}BDuibo7 zi7H^G#HKAw%>H~Y%G9pl*tzGDR5sKnRtrXZ29~FOx2FMi-63)W%v?e@$AZln7=v4O z&WNmnWLAeXW(;Wz%`rABz45}fy~_~8QKUK=iMArmEwU+sQk*V3G}sDdc$hmpOMn=L zSH~~|Sbe$En6X8;ZuPZh8>ga>H(jaE*S&)G5!Q1uPKBxh%P;(&)L?6e!Ma;^V#`RZ zl3fOdOFgej6IL`%G&knwMQ*v13we;aJQ#FTv8&ZaS%-6on25VAQ1%i_CFk=fW<|s| z=UO>{b4;o%kST)+5)`_SR^*1G%WT&lbF3uz9*YWv+G^6Ir?%nDg)4HqQ?F^&NN3V8 zr~p11$3VGUE;(&;Rw$NxbbWRrfukrMVWY(gG#RF|JPk>TW+h&2feAq=7z2%|mA|L= zoI8K;D7qN6UvI8Gd;hay#Ruq*UAN>RGGxHkE2nn&7Tt0^fwcFzC zE;E2p2&6=!+if8s8B{u*!X#=OfEJJuon$*pPjSn6N{A+o#hngNnaN~hD8>12Ky5If znGP9}%I3fp8NqAMWM=V=dV03RsI_xFMxog!_KD;Y4KL4N1^`nw*Q$e=A_LX@p$4fa zu{JZ2YtE*4Ok4rr=H!}@c%H_GWo2+<6-rc0;WP5g8XL$b=OMU-ZzTxC03{{UVogyA zAevFk6rnbr$fWZ~v~qPeKVE?$UXDbsfY21{hZ4=Xv7J2oS!AorqDnRk3*I?I5yY}XTTh`%xW;v#8!zyVF#sBJx&q*|1n8R zGP@9i8zJh%1g6i0S*$`MipWJ?o{ek6JX9=I;zTXH44KMH1tCzzVd+@7NS&*tVmz|a zWPsS1QxKnuuwlSSfMU6H!00f_S(qyswMlU}*Wj_4)Y2@jG7A@HQsq>EDVGbGWCRk4 zL`3y~UFdeQa3PF9T9sNx%}e%5aBdciD2y_0tW)UK>!@^zLari^I^Wn|t+@2E(C;=J zpgkM7{a^_)A4?3boORZJSz=D~lFP!CNvbmxMzyfS@^|+MpM_e`Ge;fJ6KASi*fsoebDIpU>^+mg$H||+BebJjpM#q`*^oWlH;RRpv@+;GxtU7UVbOc=A zU$LL<%1CqWy3to8eqNjZ<#77r8Da{}+r0E79r^W>?Kj`G4^HUYb!yAZbW2Fo=;Et~ z9Y><0Hx@;)g~j_$kH^g|YYxllT~%9@BTiRjUDM-F+u+lSZ!P$$_2TuMqW6svi6!@; z^GB!O9DiF?7})do_^4{nk`JR#;ubWe+92k9?u9fbEONE0oPaVjZQ`-6Z zU>$6DNgfP45=u{4_(E`g_v_aM8v^*3u=5YSzm422s~tP@kOX|2Im2ENEEt}D%P;+z zgBVe>e%bU{bEbr-?CMD$`v?F0sC>_73);gvCU+iBYZ^NBWQO>YTkE5bTe9Q*W{z~=ho*k`1_oqVv+H^NN!jlXN( zq|vV&=|?wJMJ3NXHyW~Q(0|~pYn76mxm7$6B@525_zcc%<HKD>rmy zWNdIbXe%>HD@ZeBWO;E{G;3-raWXhqMo(H=YC|(VdP`DkZee#gHB2=*LPb(xGHy#a3N1b$b8~1dWn?ln zH8D9LLRNEmR6!t6L1|EII9N1yLwHJgRas3?Y&ULZY;G|)H#bT}T6i;IW?C>vV{=4O zd3OqWIdeyDOhGSEbx>zjSuis? zJ|KB_HAQPQEoX9NVRK~)ICX4fFNrQU^0<)(S>MnayU|J9!^qNV(q#rtJ|FEp!!}0-<8`mjFeN07~$n(exK0r<3liuMG5QbFt&PO(@m(L_ZjHb1I6RMj?f$N}R*i-Z z0g&~Qw(Ts|ASkAHFocOAq3&;dUC3kx=!O_rD%$5|#TD`oL7{>bgW|Fn<>8FOhBjur^`grr zF};{Y^@!=h7ZYnO5zjJ8Z`3#!!c_fy+PJX!py_A!gU7l!IuF45R|E~)%QfH^S`Scp z&&iS0QeTDiO0Lf2u8-JrZCK%o>D9_IN7*BI&3?iw z`)WKUh2y;vN0M1k@t0#F1f+w{eJcw;cUYZjI|3Jzn+~jCFdC>iuZ1LV#w_=XGb%P^ zVQBOg9;ZqApPGuw)4wk{+)KTe>gxMu&V9d01Q!nvDQFXhE$2>T7i zqi(2ncypUj(i5r#k-+L?2QaRKmCLBzL9)qOH*-;QaBG0IyJccle&fP}tHTmjwu>5Y z`Bb(wF-wZrD3D?K+6a^5rZ4Ti%_IP~CUGTfy*YBorPr_&kRp+cl8CDMN56v%I;-@} zk45f-l9GJGG8Sd=dJ%|BGNrz}94dT8nD(FRD>R_ zxqIS^v$py5+@R!ENuGs`$O!&B-^8tt_YtVrXn(>YBGo5^aY8>jc>Sxf@tp=(F{Db5 zy3^m>5)nom*u!R&Sd%4%idxL1DAn$22}1%XU4mhUjK!y3nqq{|`Q4T+e~9e(EWATW zEDu1g#@HWeo(|12XH-BzHVk(8_b_06mH2W(zNkSCsEEd+DxSJ5p^6 z)zB73Jv%AL8>O|7{5XSP36gdlEd+_C^} zq7RX#9O+l?9qM2>Xju;(iZy0URN)^0KczcwGqJ8|S01TKTXSfgYl9dpR5&*q5=E?6 z|7ETZ{X7%;FU5h!`6v9ApeyH?{t>n!4Sk4E`ypRuWag+xs9TSvOJ9pk!Yr7Gff8EB zS3g`hhhuXmYwv#u2!~3*eh+Ry$Bm($-k4hxltu%Gl+8eviIlt#6bxy@j)?( zDTBc#bF>EYOZUJ5$7m~V0hLvJeSOUSj4^ecncw3A^6PZE?Fvl?(^AjdRR@ zU|MQRRv(qUoMhFXt)6q<Fvf!*T3 zP)UP)Y0uASGX#HcI8EVZyZMu&*iAt_zohS#K?yx{d81p2jwWMJR7lp|_R2kkl!sXJ zDjxejpkFg|*U&9=c~x(r5*Uni24o&Mh?I_oyHl_n{4`N)^{s4N_a_5UOl%*gfW9e3 z$(_pa&q_ko8XHic6sT)lznA2(L*cA>$=n)o3vy? z1YnK}^^M!V?f8J6)g%`4so$nEFR%QIHMV8X)IT3}nTI;>-$2F^BSI)Mc^|_#w#*h{ zWXByTeyX+BQg9oeoxl#SwYbyRo7@3v69s0mYp>|pgI6#yZCh_Roi+LO8efO9M?G{a z;g0cPf;0^T_(YZV7a_w=*>G8p8o>Oo2_L6|)0Fa2nqxmnc&ZIgoTjOM<{#Pty{6q0 zHZ}9r#grwUmW?qso&M&@MYT-NaqdxUcMhGo45r5;6>XIZZ)0UgNJf-t8?>9tzHI8< zDL-$eUFZXr{};u&#A@jnZg*M2m$Xrp=YaTbjzk~GL+JqS-dhktb>ljz2y3uF zZYLPCw##miPp^{$FrJsv9P+4ina^seV0^SR`{L(XpONx`X_d;T+`1|b*Nz!%u2g?F z?#N;RJT34m1fRWR3te&{0`xD~{+uPw*vH zB@g^5e_DU}X}uKqx%w$TVxy14c$5g$;P1l9Sv>2%nvUJUp7R(2O35vV(V)A`vsOf~w;phNp=|18asT)?9=cCag5EV9&!XFK2nT(TxsE;tO-*aFP z?u-CLKIPTM*0%}zw^B|R8R&(Kpp@^sV#T) z`||Qlju#_8>z8jJkoc})y>w=JWD<|T`VWenH_EdIm?h=j!9@+)M(uVBp`WZ=56-0T zzkuJMw;FE8U|~bwnUaH3hV_f)O4EYlVXW(X>6*BS2$XR{$C+;k#lmK zuW_dGobF^^+&2U=lp;(aoXg7Z7V)jN?p{*#5b(OWXVt^07Py1}ZK0B0?hY?o#Rz@$ zh%V=zN%>}nJ+chJyK^g|&{u9lQiUAkBH%%TX!f| z`nKC@o1{fr(=nr;2EetHVHJq#&BH&0DC;>xws_qcs~vJF2Vi z11hv1cMbN+m#*SyXb7uvJ?6yNI?r_{d2$)}>fr<=pSl;ywsH3jX-eou<+vam3O|mh zmYItgVcfU{L>*$mYx3Yn{;geU6ux#4Hc!2{>f;&cyZ5@Rj^)L#rAWo;H8MX>#|IAv z1!9BOrx2H0Ml7;DggRX#aMY6#*`{>&nuSqk)gvF51CvK75aswq*AJn|%HZtYsneYI zG0p^bb_6fJZPI%ks#s5-H)_VCz84hig9Buy%6l&TVb>-m?HpU9I$n^uU%+%9Oq1F& zF~@0cISbK+?Sat`Y8JBF@lztdo?3H9xbjXXTDVI`aAQ<$rVC@wD+Js}V9cSs53XCKfi;z)~$ zO_Tc8*a^=d(Sr?z#%Z1Fk7q0({RlF-F=N;+JOF1HFzUu?>e9$u#8|b}YTQzHCPp35 zIo#G5S|-?k*$kOl!|Hh=G8R8Wb1aLHh}lCpSQ-700J>`zK-;u#Izufag|A%nc$dSYAndUP-f!&1v@XP5-KN5>XTSqV%8 z;h`<*AoFdAcYj7eo@A6%G<9}~EfjtT6)Nrnm8&s`XboI`E!c`wi zmCzroE$M(i=uC+U>H+lLsJP*(7bA$|?h>V(ZT^0>({m!o(BXA)iVr8c3iU^FQrDuY!>>dN{ IWmroZG{px*C;$Ke literal 0 HcmV?d00001 diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 89f4c488..c0b0aa89 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -15,6 +15,8 @@ in { "github-api-token.age".publicKeys = allKeys; "fwknoprc.age".publicKeys = allKeys; "cat-testenv.ovpn.age".publicKeys = allKeys; + "mnx-bonanza-pf1.ovpn.age".publicKeys = allKeys; + "mnx-bonanza-pf1.p12.age".publicKeys = allKeys; "docker-ci-runner-secrets.age".publicKeys = allKeys; "test-secret.age".publicKeys = [users.teutat3s-5-nfc]; } diff --git a/users/teutat3s/mnx.nix b/users/teutat3s/mnx.nix index 001fab09..9620780a 100644 --- a/users/teutat3s/mnx.nix +++ b/users/teutat3s/mnx.nix @@ -10,6 +10,17 @@ with lib; let xdg = config.home-manager.users."${psCfg.user.name}".xdg; in { config = { + age.secrets."mnx-bonanza-pf1.ovpn" = { + file = "${self}/secrets/mnx-bonanza-pf1.ovpn.age"; + mode = "600"; + owner = psCfg.user.name; + }; + age.secrets."mnx-bonanza-pf1.p12" = { + file = "${self}/secrets/mnx-bonanza-pf1.p12.age"; + mode = "600"; + owner = psCfg.user.name; + }; + environment = { systemPackages = with pkgs; [ networkmanager-fortisslvpn @@ -17,6 +28,13 @@ in { ]; }; + services.openvpn.servers = { + bonanzaVPN = { + config = ''config ${config.age.secrets."mnx-bonanza-pf1.ovpn".path}''; + autoStart = false; + }; + }; + programs._1password-gui = { enable = true; polkitPolicyOwners = ["teutat3s"];