From 0e47ac0f5975635b9766e676a316537b273bde83 Mon Sep 17 00:00:00 2001 From: Emelie Date: Wed, 20 Oct 2021 13:45:35 +0200 Subject: [PATCH] push encrypted secrets --- .gitignore | 1 - .../grondahl/data/secrets/acme_anarkafem_dev | Bin 0 -> 120 bytes config/hosts/grondahl/data/secrets/restic_pass | Bin 0 -> 367 bytes config/hosts/grondahl/data/secrets/secrets.nix | Bin 0 -> 635 bytes config/hosts/grondahl/data/secrets/ssh_key | Bin 0 -> 421 bytes config/hosts/grondahl/data/secrets/ssh_key.pub | Bin 0 -> 115 bytes .../grondahl/data/secrets/synapse_macaroon_secret | Bin 0 -> 367 bytes .../secrets/synapse_registration_shared_secret | Bin 0 -> 367 bytes .../grondahl/data/secrets/turn_shared_secret | Bin 0 -> 367 bytes config/hosts/rudiger/data/secrets/nc_admin_pass | Bin 0 -> 95 bytes config/hosts/rudiger/data/secrets/redis_pass | Bin 0 -> 111 bytes config/hosts/rudiger/data/secrets/restic_pass | Bin 0 -> 367 bytes config/hosts/rudiger/data/secrets/secrets.nix | Bin 0 -> 370 bytes config/hosts/rudiger/data/secrets/ssh_key | Bin 0 -> 421 bytes config/hosts/rudiger/data/secrets/ssh_key.pub | Bin 0 -> 115 bytes .../hosts/wind/data/secrets/acme_graven_dev.env | Bin 0 -> 117 bytes config/hosts/wind/data/secrets/restic_pass | Bin 0 -> 367 bytes config/hosts/wind/data/secrets/secrets.nix | Bin 0 -> 814 bytes config/hosts/wind/data/secrets/ssh_key | Bin 0 -> 421 bytes config/hosts/wind/data/secrets/ssh_key.pub | Bin 0 -> 115 bytes .../wind/data/secrets/synapse_macaroon_secret | Bin 0 -> 367 bytes .../secrets/synapse_registration_shared_secret | Bin 0 -> 367 bytes config/hosts/wind/data/secrets/ttrss_email_pass | Bin 0 -> 87 bytes config/hosts/wind/data/secrets/turn_shared_secret | Bin 0 -> 367 bytes config/hosts/wind/data/secrets/vaultwarden_env | Bin 0 -> 216 bytes 25 files changed, 1 deletion(-) create mode 100644 config/hosts/grondahl/data/secrets/acme_anarkafem_dev create mode 100644 config/hosts/grondahl/data/secrets/restic_pass create mode 100644 config/hosts/grondahl/data/secrets/secrets.nix create mode 100644 config/hosts/grondahl/data/secrets/ssh_key create mode 100644 config/hosts/grondahl/data/secrets/ssh_key.pub create mode 100644 config/hosts/grondahl/data/secrets/synapse_macaroon_secret create mode 100644 config/hosts/grondahl/data/secrets/synapse_registration_shared_secret create mode 100644 config/hosts/grondahl/data/secrets/turn_shared_secret create mode 100644 config/hosts/rudiger/data/secrets/nc_admin_pass create mode 100644 config/hosts/rudiger/data/secrets/redis_pass create mode 100644 config/hosts/rudiger/data/secrets/restic_pass create mode 100644 config/hosts/rudiger/data/secrets/secrets.nix create mode 100644 config/hosts/rudiger/data/secrets/ssh_key create mode 100644 config/hosts/rudiger/data/secrets/ssh_key.pub create mode 100644 config/hosts/wind/data/secrets/acme_graven_dev.env create mode 100644 config/hosts/wind/data/secrets/restic_pass create mode 100644 config/hosts/wind/data/secrets/secrets.nix create mode 100644 config/hosts/wind/data/secrets/ssh_key create mode 100644 config/hosts/wind/data/secrets/ssh_key.pub create mode 100644 config/hosts/wind/data/secrets/synapse_macaroon_secret create mode 100644 config/hosts/wind/data/secrets/synapse_registration_shared_secret create mode 100644 config/hosts/wind/data/secrets/ttrss_email_pass create mode 100644 config/hosts/wind/data/secrets/turn_shared_secret create mode 100644 config/hosts/wind/data/secrets/vaultwarden_env diff --git a/.gitignore b/.gitignore index 3bc6559..c4a847d 100644 --- a/.gitignore +++ b/.gitignore @@ -1,2 +1 @@ -**/secrets/ /result diff --git a/config/hosts/grondahl/data/secrets/acme_anarkafem_dev b/config/hosts/grondahl/data/secrets/acme_anarkafem_dev new file mode 100644 index 0000000000000000000000000000000000000000..5e08a249ae5a2dcd4d20c2399a7f0ac31b5dc9f6 GIT binary patch literal 120 zcmV-;0EhnoM@dveQdv+`0LSe8oj(~xYR#jRV$VWK)aq@_6pVoYJL=N_5}NLy!z<|v zG&toAb!h-zQC~s4x4%$A)}0CM$pWrd{I6--bjU|}`T6&zC6*R35$Jr!DIBi?L(vZV aEsr!HJHxL+ZB@gyHZf36?6BtVphdtJ#yMXA literal 0 HcmV?d00001 diff --git a/config/hosts/grondahl/data/secrets/restic_pass b/config/hosts/grondahl/data/secrets/restic_pass new file mode 100644 index 0000000000000000000000000000000000000000..fe10faf1bd9d53fba1f8c22a0b5a53037b80896a GIT binary patch literal 367 zcmV-#0g(OxM@dveQdv+`046D4Tk^wd)BmEhY42-@{FaulQXudbw;Lp0uf=2Dx2jKA zx}{}%ywk^FMZ5VO7Nlh7P`ljEov>Hgrv^4Pz?YpY7gE_xcCf)k`Y3$cI`8D7x#Whp za~r@AMh^pq=r{}hMWpvvEMSnnY2F8YAN?3TT54@`dfm)5%TQEph@-jlW$cGf0bY@7 zCs)9OrEa3rkYlalVK9Lr&-2SW1`VYbDYs#%MIfQO# z*wTKdde9-In)fkx5;dFdLF<26VDQ#lJ~^}jR_H#5S7s9H=O7oDML*q?RxQ(+ zxy<6iKAi*|#MDY9#RRvITjJfp)pAwAB|VY=SmpYs&$F}g-tXzN_OPUoZWO9kwIwyC NG0)+hlM@dveQdv+`0Q|sj`4%1q-<}8wPsdb;i63O+r9V=wSa>cfw38?U6V&vA zodqcRW4(9&_sn(fI{5`jP3C+6)s|MFL@ z!7E2J6pYr%)K7ozcNAuD7!*7B5PtMx@=DZ;g$I@qI8$b-Bk3~;e`*Uox+61>E-y9= ze0yzQr;A$#2)opfDpW|h8qTw$*mQIsizNwKc7yn_O7rLJMyd(K0_y_`Ru(PrIdp|-jpXFQwy$2^^|n2ts>w^g8D58Q%DB2 zz2ZxtH+Q+n3;RNVH|0TapF#hi2-ctjdy1lv6O_3)-YFHOqrAr0mxPYo7^S4v(q_R% z1m933)yWtuuY>I=y?>#3?1w)3IeGKkeY)_Mo5N$DZX=BYZu=B??M3tj+$iI1iWTX+ zNl!t2QXV#!Lw;UQjv~yX#*unZYlyDIGMD#g7##_KDwq=V2%b}oeP#{Aa4=w;H_nT| V4EUG}f^!qhoOL->ZNZg87EEXCFVFx0 literal 0 HcmV?d00001 diff --git a/config/hosts/grondahl/data/secrets/ssh_key b/config/hosts/grondahl/data/secrets/ssh_key new file mode 100644 index 0000000000000000000000000000000000000000..cd6509788a7ef4e9c0fd19d2f7a0dbbf7baa585d GIT binary patch literal 421 zcmV;W0b2e5M@dveQdv+`0ACeYt7)n+gjA*+7$$f}opr7~M4$x}yk*2m+L9gsi%O_6 zhokbRCSYMO(w(^!^9#ARbScp|A&%^20)LE5h8>!n(8D-pUeqg5a9#ffaoS^&w@}X9#U3?Xt`jz$GQ1->wFO20-a*in|5e46acY6J5xR z{f9LN!v@WN7hHHlQdiP+3X9pb@4}(W|KxjT<}6RE*QGviLV}29a?Jx+4QS7y_kD$) zh(3Leu@5?*tU_h=zW7s_olT!N@3~yeJDg?&ZkpqN1V~kMQx44U%ztQBK7SzKd0(;% zwc>q%=4c{1N|e9a8RY^z-;^JH`BndLIY3$FOKwoJYmj*+r P=?%W?Y+yH&K-`abexk*U literal 0 HcmV?d00001 diff --git a/config/hosts/grondahl/data/secrets/ssh_key.pub b/config/hosts/grondahl/data/secrets/ssh_key.pub new file mode 100644 index 0000000000000000000000000000000000000000..51f1904e1dbe20e383b77c0e53d5caffe6ec2122 GIT binary patch literal 115 zcmV-(0F3_tM@dveQdv+`0BIpBg;yrof?f&jpHBJf>}D@by8=fg>4cxv+KsfRCbq}_ z6Hl@l)M-(q&qIJI%2qD;T-=Kj^aZ*Ak7wcd8j-XC^(7I*ZcDVHH1x2xkRuThAbM_0 VZ_d|gUe|%1p}XniXt)(HRiEG_Hwyp& literal 0 HcmV?d00001 diff --git a/config/hosts/grondahl/data/secrets/synapse_macaroon_secret b/config/hosts/grondahl/data/secrets/synapse_macaroon_secret new file mode 100644 index 0000000000000000000000000000000000000000..0292100a8c26f3da21d395e4e29b04856c439ab1 GIT binary patch literal 367 zcmV-#0g(OxM@dveQdv+`0JWMzbjMLc#c&&Wo2NC|fsGc|e`}q5!B$oA;kavGI8{E% zl_4vDZa$9hK#t+2!R_T+FHR`A?Bb1L)SFAvv1e0%t3Er+a?$Y)JBorEspmE=g#{9o zu{@_?F4I$rcC&-qlu?04%WQfv=-e@XH|RANV}=kF z-1f}?@+%g_mjjl`pxqyS`*W3d`)>%foR%K%5wcuhyKr65?H? za#TM1flD^izv<_Zy}SKxP=quNB|N>NnK9ZBrw59iv%3wb82(t1Q}tie>T(`R71o}+ NgHHC*i4bx-^q~6|xc&eD literal 0 HcmV?d00001 diff --git a/config/hosts/grondahl/data/secrets/synapse_registration_shared_secret b/config/hosts/grondahl/data/secrets/synapse_registration_shared_secret new file mode 100644 index 0000000000000000000000000000000000000000..a832563734218e17660fe54250910c0aed38ce52 GIT binary patch literal 367 zcmV-#0g(OxM@dveQdv+`0E2^1cvuELwMriXoBujtfWH8WB1@B3Ai<4Bb*L-L(dr(!f-WUrlln%e2(Yg>?{nQqEx0k7Igr|R4xMGe)b&Mha zZ4$0z1u8Q|ac%{HtA~!@_w;lY3FxdQOAKK81GiO@`HIgO{G4Tm`S(`E4b3?UQm-Z( zEASq$zdAjX{m)Xbx_KJ*Q=v2fmxz``h7^Y{2hIhyH%lDKh#+uqoH_u}Aip;ZpG+qZ zftsoF!kZe?Hm|BDCNEpM{@J-qaL2U*qIX7(n8@GW4sy!CbiGKp9uvG!$eOp?4%F%0 ztu(Tbz5@4wF31~CVZWlZ<(l%#jigO>dI&vM5{5BbNhG)d8l)SwGXD6X6@G{dez9s9 Nt#VHD4LaT&Yg$#}t~mez literal 0 HcmV?d00001 diff --git a/config/hosts/grondahl/data/secrets/turn_shared_secret b/config/hosts/grondahl/data/secrets/turn_shared_secret new file mode 100644 index 0000000000000000000000000000000000000000..20a137bc41786ffc7ef05feadbaac2cf72ffa044 GIT binary patch literal 367 zcmV-#0g(OxM@dveQdv+`07tx(+;0t!Tq$lND`CdezaW*i^oE14Ohy1UuN2Mkv-Zrp z&1N5P-@rS>iIJk(wc^(sSlwzyjw&^6MUKL7vsdLN_xOVgjQsr)$l>FPuE!X6Tu_6j1 N@N+}NTR4|#IGvCVvF88) literal 0 HcmV?d00001 diff --git a/config/hosts/rudiger/data/secrets/nc_admin_pass b/config/hosts/rudiger/data/secrets/nc_admin_pass new file mode 100644 index 0000000000000000000000000000000000000000..8ccd6d99be0f97b0b2c2973a45105c00b7231c2f GIT binary patch literal 95 zcmV-l0HFT>M@dveQdv+`07JC{Rc6jso+{}52EQaZxnH?HpWBdU-RXcARn(d*lP9@A zpGuxk4u&YADE<;+M|=y6#do0|o=TstYQmQ1GC008y#S7>umj<}z!BbPf1D`Cmrq*$n;ef_@E+m z79r9)7HkCx$MSxL!-r?A#8F%OHM+n;xW&QvKD5W>%9~0KvngepNebcn4+w4ryGV0I RL6mlX;}4s#MKXMKuEoI}GdKVM literal 0 HcmV?d00001 diff --git a/config/hosts/rudiger/data/secrets/restic_pass b/config/hosts/rudiger/data/secrets/restic_pass new file mode 100644 index 0000000000000000000000000000000000000000..fc6039c5c34b84fa5a6eac1f9a03446846e4278e GIT binary patch literal 367 zcmV-#0g(OxM@dveQdv+`05N^i9?hT=5f(hnJBMmMrNy*oB?Inz52qbOKk<|D+rH#n zMx-a)vrHE~*+AnyMtWJ85yUjA?9u7bN9YC5_~k{r{Tm9UeIrYUZ_G%P2M?u3qKIW9 z$GdA+4`(;1@WKb{f`H$LAy!M>wFzO&N;R+TUA~k|yq3*bq5z%csFYXXgCZLc-4>;l zQ1s_`gH|LBjLJ{A_qb+9)vLGHI3EH?M7Q|kMPhKRF0;~McZG8_3L>TdJWUl=FffdWXH7JQxP5L3y85R zQ;7C)dQ@?%8ns?wmzKQJza-pl{nZqw!a;3WZQmAV$@5En8okSfg2FR|qq_k)+msjT Nze{kD_zGKq8$!rGx2ymF literal 0 HcmV?d00001 diff --git a/config/hosts/rudiger/data/secrets/secrets.nix b/config/hosts/rudiger/data/secrets/secrets.nix new file mode 100644 index 0000000000000000000000000000000000000000..a8fc39f77ee5e4e7a4382ce78be5c867670b8470 GIT binary patch literal 370 zcmV-&0ge6uM@dveQdv+`0NEw0n++cRf984OcO2B#4Z;AMn8NINC7Fkvp*%!a+tmYf zi~W`MJMsIixA{Mrqq4?2pVsYBR&;-cvDCpaOZqyai5{zow=Y^zhF}qSrJ7oX9%HL- z!^h^wz1SnLWc8=(M{EAcEd3U}P-$&k986bFj3a}NH(V_@ zX}=yjlCo4Kfzre$8%f}rN8LUx5C_XNPhp6w{A!3myk~P_ce5RhxA{GFy?@j>4c1cV zjEKy!n!3n9*#I%VnLv_K8Gs5l_%mOy!C9wIAk2D4<(p-5BSTTst!ICW zBE)=f)%HwK&`1YdUVaX$O8#(XK+ZuH&AwE8{?{fVKw~ue2yfZZvylSxab2>9RTFr? z(plr<-LWl1MxQuRE|Uqn|qyB z(?Ug0W&nY36O5I5X<84A4}>>-zHm-E)$d?i3@m>kDgCvyqpsO2xpSGFvHcaiZrIYx PzRJT51w<9SHbdUeY+%x{ literal 0 HcmV?d00001 diff --git a/config/hosts/rudiger/data/secrets/ssh_key.pub b/config/hosts/rudiger/data/secrets/ssh_key.pub new file mode 100644 index 0000000000000000000000000000000000000000..c6525f49c7b08f1ff8471c0225590a49d7a98205 GIT binary patch literal 115 zcmV-(0F3_tM@dveQdv+`0FlZ3+4-yAX%bF#tW9%erkPH!Z=t9s>_CWMni*d^V>^)f z!mqz{oYKR~g_oT|)aFerIa2kQJQcU!7_@pnRuz}G{$rp!Pl1|Mcztj#yZ+mcrUM|n ViXBu9K2uA(^JSTC^2gp>U__~rII#c# literal 0 HcmV?d00001 diff --git a/config/hosts/wind/data/secrets/acme_graven_dev.env b/config/hosts/wind/data/secrets/acme_graven_dev.env new file mode 100644 index 0000000000000000000000000000000000000000..cd4a5e26fb592967a6c54cfbb405f6d7c203eb6e GIT binary patch literal 117 zcmV-*0E+(rM@dveQdv+`06`EGqSsoQfxi2}`l*=dm3P5Jh0t=IxLlw;Ai2@GVQ6#) z%jtv&SsZ^%wZA64Y-mdz5==jJ_UD1=sK-+ELGBRp_jI4+}nh+34rnZ4V^&(=|Phb)Y9wni>flQKo=-!cTH z6b{R|suGXZ;SrjfX!bGI6G6AOLH8 zL2Ff!DO>&702Jvle51don_k4zQ~ydIX};7fI9G0#aC#l-X>sc}9!zl*^SJM-$HN{H zdHxh+rGSZ)xj5Wsmde@PQ&M2GS*E@Sa(?|Q4{TUT_8?qB<0Xi~}46DBqWDSwQh NvjWdeg+Tkje*b*`wcr2% literal 0 HcmV?d00001 diff --git a/config/hosts/wind/data/secrets/secrets.nix b/config/hosts/wind/data/secrets/secrets.nix new file mode 100644 index 0000000000000000000000000000000000000000..c27234a517c7f3a6cbd7ed8304eca051b4fbf918 GIT binary patch literal 814 zcmV+}1JV2dM@dveQdv+`04b|^^vrnU)qAUC4oLPi@ls`Q$k8lBSZV*!6<5K0Ku?4T zGn@w4HzO29K7ZTz$#HAqvt@bs?;fyO$zFF)NkU$r+AmQ9l$g95UeR0Nra=>tC7+Jz zLM-V(I^NfUTsVXucTO&-QlY4C*bRFojzcl?J|FS!7F6P*Wxz28rlh+mM7YM7m8NDT zn?z?2pOthdCt^uhZHKso3*PbR)mg9lL)GjhREta@jjC3i{2!14h^KU+(vEq-_a%q6 z812Jgtuif?RBb|Cp~~4^*42{9fGDyu_cLw@yB%t8rqlWB7~$=v3gUO zn-?}6oxm|P@+~>4Vezk>0BQiwiw-}*ccEr1hDNfYz5)YClurX>yDEkLS~?X;3f3O% zxyn@_?98fNO*6E8Lb40Pyn&IYI@Oqa?&}L(9km)%eSd%f8lt*z?HB0^fE>R-OOOm} zEdP-GNv&eF1ZdYLh-~31Pf8C1(%COM4ImNYA^~ItF_J~r7bYc6Lj7M z$p7BLXqvyB1Pf6J_``WB>n=Bq6;4XUUQjgt6h|pBMHkh~y55R@;#47$*BZ#jGt}4u zU(S`9unsHdg<;hHzPDW`CQ4L&E#VH@Ic!*#S=%mMqZeWl7GbD5=|Y#~&zV(w2Me*E zPib4}79_k#1tJ3tWeOa>%&^ zX(V{fvY1f7fqWi(Q8^mL%>?eKc&Frgdl10-zKno>78u-yrexnHX#kLo9fFgC`GF11f7I_^&2gKpxy}GOj5(RN8 zdj%l3z?cPqmhI=v)|LYK<$XbYh00PJQ{g3&WLFA=v9w~)eIjozYqfn!BC0z#xJ&P* sjNwXWfS)Qb5!%$GpKev3k&ezG-%^55K1ME~m?3Tx;0=ierpGs`^d2^Rs{jB1 literal 0 HcmV?d00001 diff --git a/config/hosts/wind/data/secrets/ssh_key b/config/hosts/wind/data/secrets/ssh_key new file mode 100644 index 0000000000000000000000000000000000000000..6dd0719e0a2e01d535cfb2b09f4283ff2e5be8b2 GIT binary patch literal 421 zcmV;W0b2e5M@dveQdv+`0Q5Oyr)!zAng#EBdXbx^?&SqlvSmh)sB_e8aTyrMz3tyP zM`rDf)pH`h?fuQoeRA6D|9K3+s}~UzRTMcIeBX|gl!DvJgtv|Qk``ZBq2ddPq6-nG zLa07c?yW?Lp5~UxpDzsKgi=ftR_qBw5mnf{F_yT~F7Sq!2tcO03gQ!LN4dp->Zz z>&+Y-y_*LwsA;8J53KcI{NfSAY`VxuC#;s7-0-!&{c!hAhaWs#^{Z8!ZDsiK{NATU zC@NkCY%xe~w1Og%xk{(Kyh;B^58a529*T+bW^FYx92NYP(iIpk^lQoDl`;Cl4D@XY zr_%2hQqD@z2e}l}(i21nDHCF?Zrk}0aXPb|vmg1!9Qh@TGT@5AJO%xoHE`K>Otfwp z!xr0aXtMC;eJxno)wjEC+=}e5OCAe<61z1Zg~S0)_?ns#dbwkB2h$^)-$LZcZ~_N` P*H5*VUVO}HKCYjpAWYP` literal 0 HcmV?d00001 diff --git a/config/hosts/wind/data/secrets/ssh_key.pub b/config/hosts/wind/data/secrets/ssh_key.pub new file mode 100644 index 0000000000000000000000000000000000000000..54b1d0ba842c0031de57ecff3ecabfdbedde5899 GIT binary patch literal 115 zcmV-(0F3_tM@dveQdv+`0IksxY7@(rx%1xa@mc?L*?PVK|M@q5A50;l*_kBMz`zWr zesf-Bln4@dO)`iei}jc4lcZ(WqJu0A?qof@iV1?|VBQccKFEv?W-SmL!LT7z-9J>p Ve^S}A7;sEiCaul4CpSP^jGSMeHK+gp literal 0 HcmV?d00001 diff --git a/config/hosts/wind/data/secrets/synapse_macaroon_secret b/config/hosts/wind/data/secrets/synapse_macaroon_secret new file mode 100644 index 0000000000000000000000000000000000000000..5f43acd0099bf461e4fa02b9999d661ca4d13810 GIT binary patch literal 367 zcmV-#0g(OxM@dveQdv+`09Jt)z)xb!(^%^-;5!)gX3Y!h%E>Bn0`p(~hlR5aA?HRY zTCl$w8Qmi8y+%*Q$qCEYXMy$W_7Z&~q+ly|rK1$vpa2Ck&=MVP9@Q9g z;v*})z{*CF|uo;1Tw z)IjeAbmP1Nh2Z3nDjXaj1(7{UO(J98W7W+mDqbnv4Co(?0Bg;tKOFgovjxx9QUN@h-nR)NEU4Wim#Y6Ula`#)=2r+F7B9rhyVEZ}J{^#199@&B}<3tNuV% z_zg;!B@j^g)Ca9bh9iHU^@kRWZ&Zr@<9CsHU9$^I5bge77@$V@5S@xh48?t9L^YYF zMtkcPF}FIEKQ*JLfU3N`6@p;6XgutRP;q>~rB^ShpaCy?YdkvT_wL{_y&B|6Pe1G+ z0d_H9Xf^pcVj!3=Ec&N24yHShe*A0teI0x+iSV;*=4`M|0V=t zHa!Vp2dQn+u~pImu5**+MZ1t^#Y}8Se5ZI#fa@&QE literal 0 HcmV?d00001 diff --git a/config/hosts/wind/data/secrets/vaultwarden_env b/config/hosts/wind/data/secrets/vaultwarden_env new file mode 100644 index 0000000000000000000000000000000000000000..bc75158da97f8f04d7b1d522a0a86fd46fb09a90 GIT binary patch literal 216 zcmV;}04M(dM@dveQdv+`0GGg!@(wr3r}Kl2tN^;TAR-xR`OkP8A@v)tlx(8m86tJQ z(RAw`NEi?|W?Y~6YyBS6F;@UATf|(#;SZ%k>l#$=7JCxtO$VU_