diff --git a/secrets.nix b/secrets.nix index b484763..b801a00 100644 --- a/secrets.nix +++ b/secrets.nix @@ -3,23 +3,19 @@ let users = [tbarnouin]; grafana = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDQxvO9vdd2f9aV4F3LEQrrTJaLwLvSLbLtjB9qNxc4z root@grafana"; - onlyoffice = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQoPAt9+8vdvqrp4AKL2Yn6nMJYfW7UhfW7eacZ4I2s root@onlyoffice"; + onlyoffice = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGbnzv2/Or4XdQXLDjIbr7oIDTQEvgSMTX4aiNCQk4tC root@onlyoffice"; postgresql = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJW7qA7j1sICuu1RAfs9ifR9dmOlHq45tKu1ga7CKaob root@pgsql"; forgejo = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILMf3Cc/S0p/LFcW+RLMEqpxOOv8q/HrKO4I9joHmRxl root@forgejo"; systems = [grafana onlyoffice postgresql forgejo]; in { "secrets/initialPassword.age".publicKeys = users ++ systems; - "services/grafana/secrets/grafana-db.age".publicKeys = [tbarnouin grafana]; "services/grafana/secrets/grafana-oauth_secret.age".publicKeys = [tbarnouin grafana]; "services/grafana/secrets/kuma-token.age".publicKeys = [tbarnouin grafana]; - "services/onlyoffice/secrets/office-dbpass.age".publicKeys = [tbarnouin onlyoffice]; "services/onlyoffice/secrets/office-jwtpass.age".publicKeys = [tbarnouin onlyoffice]; - "services/forgejo/secrets/forgejoDBPass.age".publicKeys = [tbarnouin forgejo]; - "services/postgresql/secrets/nextcloudDBPass.age".publicKeys = [tbarnouin postgresql]; "services/postgresql/secrets/giteaDBPass.age".publicKeys = [tbarnouin postgresql]; "services/postgresql/secrets/authentikDBPass.age".publicKeys = [tbarnouin postgresql]; diff --git a/secrets/initialPassword.age b/secrets/initialPassword.age index c65fc44..4dd2382 100644 --- a/secrets/initialPassword.age +++ b/secrets/initialPassword.age @@ -1,19 +1,13 @@ -----BEGIN AGE ENCRYPTED FILE----- -YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBiZ3Yw -azY4YjhIelVwdFVodkhRRUppM2ltNUl2OWlsL3VhdFhmSk1vc0JVCmR2WlM0b2ov -ekFPYzh1SDhQVklHNE9xZGdwbEpxQk1qaHl6OTZkaVV2SUUKLT4gc3NoLWVkMjU1 -MTkgd25FVXB3IHNxQ1RWNTRCaWdwTkRVS0FYaDQ0aDFaOGZDbzlkNUZrYzdZRVdY -QXpyanMKeXUzeWdSUG5hQ050YVJuNHhCNWVLRm5ocXBOZTNScWdvdndEMWVTQytn -OAotPiBzc2gtZWQyNTUxOSAxQ3FvOGcgbE5GVHREdmFDQXBVdGlTNzhwZVhZaEN0 -VDI2M0V4VUwzdEpVSGxoRHZVOAowVmVDSGd6RWdtR2NYYmJXOXUvYmtGUnozNFRq -eG9TUEJTRnkwcUxXK09FCi0+IHNzaC1lZDI1NTE5IHNpbmd2USArc0JnMWpXUzhV -WXVaK0RZVStVa1FZMFk0K1lRbTVhMHJ4bWRZdkRpcWprCmVZQjhaWEpSZmxGd0pT -TWZKMG0xOW00WEI5K1NCVVBjZ2ZzNCtNYWduK3cKLT4gc3NoLWVkMjU1MTkgeHFt -eWpBIGNBbkdWcWY4Tkt4OU1tcW9PTTlhRHJGMVNpSG9Nckw2aDJEOFpKNTNNQjAK -cDQwcE5tVnpCakdxT2xuUnovOGNlRkdjZXZqcU5PcHdWeWF4eXFLdnBvVQotPiBw -YlcwbCpSNC1ncmVhc2UgKiRrPiBcXFAKNVRJT1RFdUpSRWRlWG5VSUJXMmtpa1pV -RFlncjhsSTN4dWx5ZnpKK3VDMDFoNVd3c2lEWHc3NFFKS0huSUNZVAplLzZvUGpJ -UVpPSVJkd04wUnA3L1FxYTBQOUEzTVEKLS0tIHQ4cUYrc2hDVnA0bGNtd3Q5Tnlp -RU50ejdZeVZQRE5UWnNSaS9zVHJLcG8K759bKzQ8cPAGH/QQAyc7Eea+woEtxuSk -gR20Q2qpZIANT98tX3PdljrdX4aBIRMEOaUl6t0= +YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBIZzc3 +NEpKbjZKaHNJTkUwbUVVWkRNYzRVZ1g3aHFWbmw0RjByQy9DNUY0ClBraUZmM29P +dW9RZXNhUVZQajQ0VVZzN3E2ZjlQa2hIN2QrOG4vamVhUTAKLT4gc3NoLWVkMjU1 +MTkgTVRPMXBnIFBFbFVLNFBSdmQxeWhkWFcyRkdidUJDMHVhcWtuM0RNYU9MN25G +bWtqaGMKM1dDYTJjY3lwQlRGSU1nSERxWkYzck1JU21kaDBvelgyMUhXd2NabzFJ +QQotPiBzc2gtZWQyNTUxOSB3bkVVcHcgN3NVYnF3blJYdk9NMlpFeHBkSWpmL3hX +SVlZakZ0VG5SZjJzODNKZ2UzRQpXeWhBWm1GU2czTzhZN3hvQXErQ2xzWlBrdGM3 +bjFmQXRTQzJTNzlXeUFRCi0+ICZEazJMXy1ncmVhc2Ugb0Qga15CMW83OGAKSEk5 +ek9EV09TMm4vUGJEWDgwRnY4b0I3Z3ZxQk5GS0x5eEgyNFUvS2h3Ci0tLSA0RHBw +WXNxTGtDUHlVQ2ZHWk5WeGtuTTVseDFHeWxBcFZzNFRwUWptZHRvClgW5JGwRhTf +X5W+zQOJKbaiChYCtdqrPnEd4tRJMnMtm19UIUnR7asWmDdl8LU7DvodK4UA -----END AGE ENCRYPTED FILE----- diff --git a/services/forgejo/secrets/forgejoDBPass.age b/services/forgejo/secrets/forgejoDBPass.age index 03dc4d3..a38d066 100644 --- a/services/forgejo/secrets/forgejoDBPass.age +++ b/services/forgejo/secrets/forgejoDBPass.age @@ -1,11 +1,13 @@ -----BEGIN AGE ENCRYPTED FILE----- -YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyB5Ym9U -UkI2cFM0YzFhTlphSm96WjNmOFVKdjErQi93TlJibWUra3cwZGxjCkFPWUpYY3ZS -cm9sWktuczJ0Sno4UnB6WENHUE5GYkY5aXFYdExVZ2laRUEKLT4gc3NoLWVkMjU1 -MTkgeHFteWpBIGd5OFJUQm1QK0tOeE0xaXFzL3kwL3dPQXhSZkdmN3lKaEtjSmE2 -T1pSaGMKcGt0ekdaOWhzSnpmcklYeGF2cmNQZFdaNTJuVUkwN05CVWpiWXFPQm1G -ZwotPiBQbV4tZ3JlYXNlIG8kJyRTVyBpR1s2YyogQWd2fiJAWlAgbVZEClF0SFhQ -Y0ZWUW9sWFFCN2x3RHFmcXRIUWRnOCttRTZiaHcrTFZleWc0OTgKLS0tIFEvWEVz -bFF3WU5vKzVDWXB5bFcrTWRyY2JDeFh2cldNWU5qbi9UWGhETGMKtQED46zzEcts -dT6uqqfUBIVMuYpqYSq9Q4ZHeH1C7Dk+8OgRC1kr9hfyDkk= +YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBaeXE2 +ZWQ1VFdHZnVaL2ZMc0R0aGRRcC8rVlozdUxyRkpkV0NYbnJmY0JzCmdIS1dzdlYz +ZW5Wd25FREZHdjJBUkdMOHVlTUNQNWNNZG5HWE1HNE5lOFkKLT4gc3NoLWVkMjU1 +MTkgeHFteWpBIFJ4Z1hkUC9QT2ZiMjJMRVQxQ2ZoS016V0FLdHVaWkduYzFlK09V +YjhsaU0KRzB5L2hpRnJyUGZOVVd3ZFkycHRsVVdqME9sNHdiemRUeHBjb0NSbFo3 +NAotPiArdE8iIy1ncmVhc2UgekhEID5Sbl8gUydFIE86IltpCktRUm85QXltM3VJ +NjJ2M2hyZVVjL2V6R2s3N2dUNXErVVpLT3pSY1pVeTNydlYyMFNNWktnZmhVM3Fy +eSswOUgKdEVxcjk5S25BQnYrUG1JR01GSjNpc2FqTUtPT0JtV1hOV1B2dFV0WDI0 +dzNBeXZKZXZBTWNUV2l2SVQ5YWcKLS0tIFAvK09oWjduaDJiUkVGTXdETm5uaEVa +K3JOejBhRlJ1UE91S0ZoOXBSazQKn5G3rTSmRTYc8Z9R2pjuAWFnJ/CuNblQKgK/ +XjUtInmR6DDQpEvZaiuWXTM= -----END AGE ENCRYPTED FILE----- diff --git a/services/grafana/secrets/grafana-db.age b/services/grafana/secrets/grafana-db.age index 24a42be..c2cfcf2 100644 --- a/services/grafana/secrets/grafana-db.age +++ b/services/grafana/secrets/grafana-db.age @@ -1,11 +1,12 @@ -----BEGIN AGE ENCRYPTED FILE----- -YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBleE5y -cHlnU2NwcE1UcDFycjVMUExSZlFxd3I5MUZqN3hSNzlQWkFxSnlnCjFKNDVFY0lt -dlVEcmFybWc1WG03b3ZLUFVxYXlrRDlxVWJUL2dFNHN1TFUKLT4gc3NoLWVkMjU1 -MTkgd25FVXB3IE1SaXRwV2UxbisvaUd2Q3lIQ0UxYnUwVUZwNnpDWVlSQk9FbHFi -c1BqRWsKR0NTSklHa1cwbkwvdzdaaEVwL1FjQkt4cFpUQ1hBck9JYktEdk9lU0tH -SQotPiBjKydHb1ssXi1ncmVhc2UKNm5CTWhoeHZGaCtaQ3o2TGUydWlXU2EzaFN5 -bWJad3dRdzlXNFRxYzJPckRoelFRSUcrUFJOTUJMQytSZUE0bAoKLS0tIFBiWG9t -QmF4MlR5aDFuLzM4cFBLZDhOT3NwVzhxSmF5Y0tGOTNodmJSYzAKa1S6NPf1JQpX -CXzC8wfQeL1UNUmpcGHryeQ6+5rSQP+WpBWAeAxZidlKMBzjUw== +YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBVTWdl +dnhPSGdhZzVUenFmaXYzbGlOUkhqZlMwRTNXVm42ZXB6YTNvMHpnCnZYcHlOVFFP +Qm1KMk02TE1YOVRweDIrR0RxbU5DOHlRUWVxc1RGaXVObkUKLT4gc3NoLWVkMjU1 +MTkgd25FVXB3ICs5bkhiU3ZzWHdrWE45a2pJRlhYRzBsSWJQQUk4cHExU2ZSeG92 +T0xVbFkKT2FOQVJ0bkF5aXFDUXR3NTJMRjdBdFgyNGUzNDJpSE9xSkdjLzkyNWNP +RQotPiBLYnJtUHNNOy1ncmVhc2UgfXN2JGFJVCB9aGtBXFhHMSBFZjcxWGknMAp0 +d1FPZnhaSmIwb1lZT3BDV2RFcFBOdXdFbXRXZ1Z6NXpkcnB2QjA4MjNrMEJHNTBX +RjZ3SGZrTVg4ZXJWZG1jCmh2U3F1a1NmdzFWRQotLS0gVndEVzltTm1oeWJyU2RD +d0JHajZYelpNRk4rMzEyK3J5K3dWSHFkdHNPVQoDlFf05gno+UFqjBNaUkWkcTru +4w0knxnS8kgIkMoklOtaA8Zp+wPiA5D2wgpz -----END AGE ENCRYPTED FILE----- diff --git a/services/grafana/secrets/grafana-oauth_secret.age b/services/grafana/secrets/grafana-oauth_secret.age index ccad1bf..a5df31e 100644 --- a/services/grafana/secrets/grafana-oauth_secret.age +++ b/services/grafana/secrets/grafana-oauth_secret.age @@ -1,15 +1,13 @@ -----BEGIN AGE ENCRYPTED FILE----- -YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyA4aGNT -Tk1ZRGg5UGthd0hJdDgxR0dhNEVMZ2FQbnBxUjR3R1l0R0hqbUVzCnRYT3kwT2N0 -a250TkJydWROTmlQT1QvemtyZEdjL2ljU29PUXBldGdSdlUKLT4gc3NoLWVkMjU1 -MTkgd25FVXB3IHNWM1doQm9xR3NFelkwMXVieE02SEVndWhKMW0yM3YvL1JmaE13 -T0FWMjAKOWV1QVREdGNHM2R0K3NGbUx6dUtVS0JxUTJ1MExwWjdMazQ5ZEE1ODJy -UQotPiAudjcudzBpKS1ncmVhc2UgVy8gRDYtUFRiSiwgLFIxIFMoQCJ5RTsKbFpm -ekVpY1pQakRZRkNKWWdwUWZMVjVZNTJadXhJVkxBSzNjSXkwV0lyQnNUVlFkRlAz -aVJSdU4vaC80cWViawp2T2JlRVZ3cWQzV2szeXJselJJNU9iVHRmRXNidTMwbUI2 -Vlh4OHdRSGJqNjNnCi0tLSBibEc1d01CU0k0dXhpOWJkeUVZVGxmUG55RWY1ZEU2 -R0FldzlraU00eS9BCkXBFDJvNYa+OCBGOsjH/oBcUSb4X46OW8KzLoDffueXy+49 -YTp503kumUz8ySsjfShC+vBlQ6q+ViSEFUpYsmyg30xBevEB2BXSgYxFie+iIW0L -TWiAaqghao8+1x2vvhQjQoQwfn/bkXjmhvSTiA3sWU11D8qBmMTeXmZe1VV5kXUV -FG8fmB2HVnq5wGv1priTT7nxg9IcN7quovWuaIdz +YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyB3YTc2 +dFJoTkttVnYwNW0rY2pDWmVXV25aQTNvR2tKY3pZVmlvZlVrWkhNCkFXZkxrMXAz +dVhrVXhVMnJOZ2ZlTE1LS1ZyckJuMHB0a2NjNDVIZFJGNlUKLT4gc3NoLWVkMjU1 +MTkgd25FVXB3IEZVT1dYZHprQXJpR3JjVzRWcVQ1WHcyTkxkZHNqM2syWkNzOHpQ +OUx1VW8KVWlzSVhPZnhZcmJEMzFabytQY0MwbWNQenJRcUxvV2w5aW9LV3Fickh1 +MAotPiBHTCcvQy1ncmVhc2UgTV1zNgpZNWswWE5DdEZXVVBzeFR3R2taZFpHakxS +MEppblllczc3bWt0NmJzZDZrZTlYblJIWDQKLS0tIFJHWWVQL3VvTHF1OVBITXFH +WVlhcUlrRldLQWNUZVJIOGY5OUtIZzlmdFkKHUb1KkIRJuEKk430LNP8gNQpDtlo +ifMWwhBcrDDOUxQSpEow42sgbIbCpvHt+gMgMCz2sLbdBnEUfCAIuG2SRZF3sfvD +JxY8/0mtK0upF+7jb3oCeGN9ah+gGoHEwKjRnBP6zFHG+yRMNQEiqO5h07JGEtrV +junjkEC11HAgybtC+gzr7Visx91cyK52ZIsNdg0AI9wM6EGUIX3quC3zGpw= -----END AGE ENCRYPTED FILE----- diff --git a/services/grafana/secrets/kuma-token.age b/services/grafana/secrets/kuma-token.age index 3d0fdfb..9b3ca80 100644 --- a/services/grafana/secrets/kuma-token.age +++ b/services/grafana/secrets/kuma-token.age @@ -1,12 +1,11 @@ -----BEGIN AGE ENCRYPTED FILE----- -YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBsanl6 -c3Q1S0NUeFVYT203dURzdndmVUJZTVJleVVOR2FhUUZNeHdWS2tJCnFzYnNOWHRt -ajZIWk8rd2F0UURFSmlqN0pPdkRRM3VtK3lUS1ZuNC9aQ28KLT4gc3NoLWVkMjU1 -MTkgd25FVXB3IFFqd2p4Sm9VK1NBMitiZ0lZZHJQSkx1L1JQTUUza25OdGE0Z1Fw -ajhqUTgKT0lza3hkMFFVcHNDbXJleFE1ckJ4VUpnVW5IK09VR2hiVytqWlFRWkpX -dwotPiA7WVw2eGt0LWdyZWFzZSA+WGduRShlCnh1cm00MzFycmtiY3RZUW11eTd2 -eU9heGxmRWtzQTQzN0xxYVJWaDJmN2NyWi9BYUhjQ2IrSi9lb25xaDFzWDcKCi0t -LSA1aEJJSStybWRSM1ZDak1QZ2lsSkwwWkFldytTeVBYVHJSazlqYWs1Umx3CiDT -JCsuR25vFwFSZIvHqaKQWOIP6u1lYzqMZGaGfwtH8+I00DngmiQj+y0TsuPuer+n -5cAB+0e6c/iZCLzzxreBHIT2KixDHqhpG+Px +YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyB1OE5Y +T3FiL3VKNG1HRDZHcHpDMGtvaDR1V25tT1dOYXRRM0VEUjYyb3c4CkRkSE95dkpp +SnVROXcyZGNmTkZUNjFtQnF5dDRRc2syaWoydGk0V0FBRWcKLT4gc3NoLWVkMjU1 +MTkgd25FVXB3IG5yMjlBYThRMkdYZjVIWVhIbXk3UjNMTmtKTktkQTlVaEdqZDEw +d0NYUzgKbEo4bnVpOEFlT05PdWo2bGFlVTMzVmJOODFpTzErWDYvRm5tNk4wbm1G +WQotPiA5NHEtZ3JlYXNlIFlHI3NaIFNBfDIgKzBARwoxL1BNNzNQWkU1elZqVDhr +NEJURHI2TQotLS0gWFBJUXpmRU95S1p1eDR0cC9Pajc2aUZJL0JFbU5XWDZpU2Va +SGcvaHJDVQr9/6z8OCUSXg88ib9iqQAGp7ozAaslowdoONR/gSUelziKvaCEP/Cc +1GQOMJy8W2Q/oBwAavq+qi4QKTSYXQ5dDmkip8fBU+Df14euww== -----END AGE ENCRYPTED FILE----- diff --git a/services/onlyoffice/secrets/office-dbpass.age b/services/onlyoffice/secrets/office-dbpass.age index 8771073..37dd633 100644 --- a/services/onlyoffice/secrets/office-dbpass.age +++ b/services/onlyoffice/secrets/office-dbpass.age @@ -1,13 +1,10 @@ -----BEGIN AGE ENCRYPTED FILE----- -YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyA0ZU05 -YjBuZU5CMnNDK3lKQ3UzQjh2ZzdqeGZsbXprQnNjcGNqVUdSQm1nClZyQVZna0Zy -Y1VuVDVQbUVUamRuQUNZV05QUnFOMnZMT0xYTG9FTnU2RVUKLT4gc3NoLWVkMjU1 -MTkgMUNxbzhnIHhlVU1hd3RKV1dnV1l0YUFNWWVXUXVNeHFuVWQzZFhHR3VOS0Y0 -a1JnRjgKemQzdHIrQXJ3bHM5TXpRdllsQm90UTVkL0U2YnFJNWNLeGZPb2hydmpj -NAotPiBQP1QsQXlHTS1ncmVhc2UgP0NGJ1diPAo2Ykg0U2JHcUdvQUd6UEZTc3hZ -MUg4TE82dm00cDJxWW9aeTJqaEt4TTJxTTVzV2xGdldYcHNOMlpsTUZQaTN5CkRX -WndaTU9WaWY5eWV5dlFxZEFVdm80ZjU5Q3hENlN3c2pXMFg3NTMxZVcvRU5DRmFF -RGQKLS0tIEUrR2t0a1R6UnBwZXNnejdHTHFMR01jeDBxa0xhajRyaTE4bTVhWktI -Z00KW9aDokoHTH0L7fgOEfdGMJM6+C5pSB0g7hEbKfyEeAcjnV3py5vPJ4NBMSmQ -L9IC +YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBxVVZD +ZUFVVTZESHNCb01Kc0pPb3dKOXZKR0RYS0ZQcXhvQ2RzbXNKRGpJCjFaV3AyQUY2 +OTB1L0JrZTlFMy9keElTS01IVS92YWRBSVRuKzFFL2pSVU0KLT4gc3NoLWVkMjU1 +MTkgSXpNcXdRIGI4U202VWRydGhVSzhJUFpLeDJZZkVoeFIzZFRQRjhYcWcybkhr +ZWM4MFkKSXpzT3E2OXRJVjc3V05XaUxCNW1aQm5kKzlrYzhWRUxoWndCaTRqa2Q4 +MAotPiBWLWdyZWFzZSAyOGsxIFI2R3EgIT0ueSBDd2o9NGp9CkZBCi0tLSBWRlc4 +RFFYOEkvUmY3TUFSa0lmZ3kvMG9IdGxUakhvMWhPWjhzOXhERmZrCkil25ySWO1w +BYB6Wt5MfsL7I5Izfdfpw0lqniC5r/4oh+lDQUcvsi1vQx+BRe8= -----END AGE ENCRYPTED FILE----- diff --git a/services/onlyoffice/secrets/office-jwtpass.age b/services/onlyoffice/secrets/office-jwtpass.age index 97213f6..822f259 100644 --- a/services/onlyoffice/secrets/office-jwtpass.age +++ b/services/onlyoffice/secrets/office-jwtpass.age @@ -1,13 +1,11 @@ -----BEGIN AGE ENCRYPTED FILE----- -YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBnN0Vj -b0ExRnhraHNFM1RSQnE3U0hKN2xrSExPSHladEdnbUhXejhaMVY4CmVLYS9QNXhX -Q1RSNGlIL3hyeTVuZk5sNmM1ZkdZWSs5ZWVTWEZDRDFzNmsKLT4gc3NoLWVkMjU1 -MTkgMUNxbzhnIE5lbEhxQ2lZQU91T0o2WXRGa2ZQRlhSRFRqcUZ1RlFwcmtidU1P -MFo1ajAKa29BQkJ4SnhOTTQ1RE1teXJjRVIxM1dsQjFWZDRsV21BTTRoSFpYdmpu -cwotPiBaeUo4LWdyZWFzZSBVej1GPiB8X0FAZTV2CkNvM2xRODlYLzdMTDJ4RTJn -N2pNNU1LQVFuVWR3Ri9mSG84ekVGWU5DMHpnSXl5QVNiajdZMTFSa0ZxaVJjOW0K -VUtiQlByT0kxUVZKblNMR0FlSFVFMXM0UXBFT29jWG5EY1BOcG1lVktoOUtiSFJM -aHJrCi0tLSAyMHRHKzVKMG1BRGRaSC90L25QV0JpM3Y1M0ZodUFLMUREN1pwSTFP -OWNJCivhTOgVNqIaSKNWxTaSaGqMp90gFTpf6u8Vln0NvHiTl0wGwpgfMZyomvrq -K9wzN8k= +YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyAvVWNp +a1BjZG8vWC81SlhUT09SSERWUGtzNGtFYzYwbjJYTEZZL1VZKzFZCjA5djJNQ0tJ +SEIvSjVCaDVaK1FvUG8yNW4rd0N4cTdTLy9PT0p3WFd5bUUKLT4gc3NoLWVkMjU1 +MTkgSXpNcXdRIFp1TmhSSlRKdkFSeUN6YnJwV2pXWVFyZTBkWWZNOG8vbDFrenlu +QWF3VGcKUmNMbUVkbnpwQ3M5bnJTSjdGYWZiSldncWtwU3BZenZ2OWZ2YStrTHlh +SQotPiAwRS1ncmVhc2UgT2lrPQo3YVREamovMVhQSSttUXNiNkVZMW83alFDaDRv +N1JzOXg2b1dTNWxja2oyYlNaSS8KLS0tIFQzc1Bqdmt4Zkc4NVZBOHM5b1NNL0dC +L1lRTjA2enE3NlFDRkN3cmV0MjQKEI287XlTGhe+gTmysPhQXPNALUj3QzDnmznB +dnY2NmBArjrXnanMONycttWH2hwz1Q== -----END AGE ENCRYPTED FILE----- diff --git a/services/postgresql/default.nix b/services/postgresql/default.nix index b6fa00c..f0c1ada 100644 --- a/services/postgresql/default.nix +++ b/services/postgresql/default.nix @@ -27,10 +27,6 @@ in { file = ./secrets/grafanaDBPass.age; owner = "postgres"; }; - onlyofficeDBPass = { - file = ./secrets/onlyofficeDBPass.age; - owner = "postgres"; - }; }; services.postgresql = { enable = true; @@ -73,7 +69,6 @@ in { giteaDBPass = config.age.secrets.giteaDBPass.path; authentikDBPass = config.age.secrets.authentikDBPass.path; grafanaDBPass = config.age.secrets.grafanaDBPass.path; - onlyofficeDBPass = config.age.secrets.onlyofficeDBPass.path; in '' $PSQL -tA <<'EOF' DO $$ diff --git a/services/postgresql/secrets/authentikDBPass.age b/services/postgresql/secrets/authentikDBPass.age index 18f5d4a..d1988ed 100644 --- a/services/postgresql/secrets/authentikDBPass.age +++ b/services/postgresql/secrets/authentikDBPass.age @@ -1,12 +1,11 @@ -----BEGIN AGE ENCRYPTED FILE----- -YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyB3dHpP -blVaTnJyZkFOSGJrVVFCMGVwdEZEYVVWYzJndHRlRFYvUDhVZUVvCmFFTTMyeVp2 -cVorNjZpR0luWWxrbjl2UC8raEhEYVhEUlFRaUZuaERwL1EKLT4gc3NoLWVkMjU1 -MTkgc2luZ3ZRIERscGlya1JWNU40OTNqUlczbE14U2hsellvT0xzNHl0ZytEUjNz -Z0ZkVkkKSTRUUXlPVHBYUnR6a0k5ZmZRZFYwc09LWHFlQjZyb0lxTTNsbjZ1OFpD -UQotPiB5XHxHSSIyLWdyZWFzZQpLc2FJRWxNQkFKdk5NeVFseTdnSjBXWkM3eEhx -Mm5wZXliSGdnTWZZMWN1RHJ6cE9RWGZ6TW10SlZiV0xobVNmCmZEQ3ZnMHZtV05W -Sm5QZnNnNzVvWURRNUZxbDFpL0lsZ1EKLS0tIHZQWmt3WkoxelpLbGZnSXltYmI2 -U0lhVzQ1aEtlZC9iT2tIck5JQlVQdk0Kar6nxkvmKdWEhzvrkqd/GPX95gsVH2n8 -CxnO1h5XWNP/xnLPvJakHfO3fsZSRwkZ +YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBDODRK +d2pTZktDczVpSjBYdWNSVFdUL1k2TVlmMzlJRnAxQ0dhcXV3elhjCkd2V3BXVWMw +YUdtYTFzUGZyaU05R0dPWGNHYVR2TWYvbUtSdSt4TUlVQ00KLT4gc3NoLWVkMjU1 +MTkgc2luZ3ZRIDZ5L3I2ZmErNjNuYnh5QTRwNkNVVGhLSE9JMjZROFU0ZnMrelQw +WUJmQ1UKL2Y1T3pER2ZIdUloTTl1dU13RWRKL2tQangycTBzWHJ5dVByYVNuNVdY +WQotPiBrRTwnPigtZ3JlYXNlCit3QldhZUhmZ2kzS3VHK1pweGRxQ1V1eFA2eEtu +bmJWRzZqdjY0SUNlZFNaVG92dXRnCi0tLSBIb0JVbk42aVowT1p4cEtVbUJneFRP +dmNlZTdBcm9OZUVuOUxIbUc2VUZNCsahsNPPKDASJc0LKL+vxvXC81q3fBoSz9c3 +Vxw9grzRH+aWXhKY+cxrOl6WOXTjCQ== -----END AGE ENCRYPTED FILE----- diff --git a/services/postgresql/secrets/giteaDBPass.age b/services/postgresql/secrets/giteaDBPass.age index 614b510..15a2368 100644 --- a/services/postgresql/secrets/giteaDBPass.age +++ b/services/postgresql/secrets/giteaDBPass.age @@ -1,10 +1,11 @@ -----BEGIN AGE ENCRYPTED FILE----- -YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBBQVlo -bTBqR0NjNm8yY01CSStNVktDSTE3aFY4TGg0QXd6VG9aWU8xWndZCkpFSlUyNDNK -QVovcklYdkEvMUNRVUNucVh0cmpESVJpRkFHWEFXM1Z0dGsKLT4gc3NoLWVkMjU1 -MTkgc2luZ3ZRIHM1Y1g4ODVZRHRQVldHczJVWnpFNG1hQmxpYWlyT0ZkM0Q0YVk4 -bW83UjgKd0dsaEhZWjNoYnl0aHN6RWliYTNjVEl4a3V4SHI3RUUvVTJnRlNiVkpj -dwotPiA2Xi1ncmVhc2UgRFVEdUNdekggSSk7OgpKUQotLS0galRKU0lxUUUrRlRq -amhabEJrRDV5SkRxemVuSHYwWWJhcDFqa2VhRWJJdwozi1FuY7z0h74uhkX81rQ7 -37JZ+zWjC9J+9Lb0C1Hj+glDFBXq75rtTsPvDw== +YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyAxUGZT +Y1JMSE5MNTlmR3N2ZXJQV2xoK3BTNWZJa21uVjhac0VQOTd2YVZnClJqbnNEWFln +NTZncyttV0RBU2NBbkRrME1mNjluaFkrQ3pMTWhBR2VPTEUKLT4gc3NoLWVkMjU1 +MTkgc2luZ3ZRIEZBVytVcWZ2QVRmQm1BblZ1UEgxWVRwTFgxU1BJRFRiUUdGa2Ny +bnJJMmcKRms5bUtDdHUvS1BzTFViOTJ5RnhuQ212aWFWSHFXdm9uYVZjcU9sWHlz +awotPiBRLWdyZWFzZSBkP1RWKHxtCi9LQWdLV0hwRTFhQzhSb2Y5Z2QzY2xWd1ZS +dFhoZGFRbnNIS2loeUZDVUZpd3VsTllLc0xva1ExYVpXRHY4ZwotLS0gbVd5NWZq +NDkvY3JUbkMyS1o0U0hiMkMxUjdFTTBqWGZDT3ZpUnNYQThUOAqBMtKcCEvvDrTm +Rz3S4csriN1X6gGEOURKVmKDXO5P8O7yMGzRjl8MkpSOIw== -----END AGE ENCRYPTED FILE----- diff --git a/services/postgresql/secrets/grafanaDBPass.age b/services/postgresql/secrets/grafanaDBPass.age index bc72bd5..c709ae5 100644 --- a/services/postgresql/secrets/grafanaDBPass.age +++ b/services/postgresql/secrets/grafanaDBPass.age @@ -1,13 +1,12 @@ -----BEGIN AGE ENCRYPTED FILE----- -YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBERjRK -dENEVGVseGRIbGp0b0F6VkpmZUoxaGljSm5vS2VKTGZ4SUoweTBNCkNTbXh3MXBl -bUhCaHR3UUs1V0gyUStVMzZibS9JUW1TWFhwN3p1QlViYncKLT4gc3NoLWVkMjU1 -MTkgc2luZ3ZRIExpZjVkaFZKdEhWeFJ4eW5FajN3L2ZCMXhLbzVFeU1WamNtNjVn -c29SWG8KY1ZhWU9SN3haQ24vNjIxTk5jeUZ4K1d0eFZvZVBLTHh0bUVVelVWU202 -dwotPiBlXm4kLWdyZWFzZQp6YUVQM3JXUkNqakpzUjlyZXd1dEh5ZDBKeEh3WWJM -VEUzVHFZV0J6NDdJS0VHSE1FRnorVEg1TXhWamdEajM5CkNaZzdSczM2VzZNVHZr -ZUkxeHdMNHk1dkZqay9kM1NwUm1hdzhNSDVocmtKaDZwUWFPeUNERktSYzhHeVY4 -K0oKCi0tLSBWTm4vOXVJQ1o5Vk44RFR4Y0g1OXBweUErU0g4eU5WUjhJdy9xTzRQ -dFRjCpfCx3hMg/WwhmJYF6RdWtZXlXZlIRruJFe6vZT8fp2MMDtzLldmoKbTSzT4 -360= +YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyAvQ0pw +RTJFR2wvT0ZoeHlwVXpkZldkVDhaMlJjUCswM1NMQVZDdWltWW5nCkVnT0xmK2lk +L3d1Y0VRK3hYbXVBQjFCd25jUWkxTlZtcEd3SEF4REFyYnMKLT4gc3NoLWVkMjU1 +MTkgc2luZ3ZRIFFrVnFRaW5mT2JPQjgxMjE4V3ZQL2xtS2k4VklZeE5neThzQ2dk +Q1kxRFEKaXFkYTJkMVp5QkF2SDdrUS9TOUU5THBuc3o2R3RuOXViYU5GQnMyR0tN +VQotPiBdV0EtNHBfLWdyZWFzZQpuL3VYc3M3aUJoTDdMdVZXRnY4Ym45T1k5aDB5 +Q3NGa0lVa3Q3VXA4aCtyV2h2YkRzMnp5R2JFU3ZITGZxR0I5CkpGblUwQ0JhV0lU +WDZxUlR1NFpoZlM2MTMzVEc4M2NpdTFkMGZLUFBDY0VYUFJxOVMzZllua2sKLS0t +IElRZ2FnQ3RmYWRzall2MWZwVkZwdkNPN3NCeXFRdFhRZlo2a0RRWG45bG8K2Z1Q +p/H9Vagg8ADTr4ol6fn7m41/tyD2tbzTKyCx0vKb57KUQZ/MQr0qfehWaA== -----END AGE ENCRYPTED FILE----- diff --git a/services/postgresql/secrets/nextcloudDBPass.age b/services/postgresql/secrets/nextcloudDBPass.age index 85c9cae..a9834b6 100644 --- a/services/postgresql/secrets/nextcloudDBPass.age +++ b/services/postgresql/secrets/nextcloudDBPass.age @@ -1,10 +1,12 @@ -----BEGIN AGE ENCRYPTED FILE----- -YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBIM2J0 -QXdiM2NKTVVybWZYbzBreWgrYkp5aU1YaDVIMmRPWUVQYnkwNFFBCms1bEdoV2ph -Y2lWSUdBN0dISlFaWkthanNhSjhweXNyTS8zbmNhNUpMVW8KLT4gc3NoLWVkMjU1 -MTkgc2luZ3ZRIEkxcTRidzFMSm0rbFVJWXdkVm5QS2JHUE55SGNFay9tRnIyNDFO -TE12VjAKSlJ1bktObkJnbkhZNUNjS2w1R3BwWU4zRGFvamxMdllzMUViK0xWNG1r -VQotPiAyTHQyTi1ncmVhc2UgKmAKdk40MjlsS09LV2N0NkZYalBIaTd4eFloCi0t -LSBZRnhlYVp5VVZxQW9vbnNyOXJMR21vMCt2TUs5NHNCM3Z2bmNqamo3UDMwCjiW -trqEyRPACZ2V293CH0SMkUUTQEhZpdumP5+y0aNXoMOa3jDgd1ilXsMjqNBpgA== +YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBxaU02 +T0swYkQ2S2cxblRuM2ZHZ0F4WmMzNDd5ZHJLcVF5SjJiYWhJS1NNCm9pcTRCWHJL +RWVUTEJTalEwOHh0aDlJZHF5S0NWN01zY3hMVG91SHk4NWcKLT4gc3NoLWVkMjU1 +MTkgc2luZ3ZRIHdoL0F2MHY4VWxTWDR1c1c4bTh2eHVQU0FoWDFwdHhsZE16Wms4 +UXFFaXMKSFZhTi9TRUh3akNvNStlQ0w2T1FnRTdOWFhZaXh6RGYrQ0NlUkdyejAv +UQotPiAlJilLPy1ncmVhc2UgUWB3RApyZVFkR1Y0SXdFSUxzUzAvZVZuWEthODY3 +Y3dVbVFWMGR3ZURqZXdsSzE4KzVNdzFlS2dRcW5maG5MQ3Y4SEdZCnlLMUlKWG1Q +eFpLTUtRCi0tLSBsU1pRemZQZmhDK21SbVRvQW9NSFlCdG9YR0ttRlM2NXUzTjM0 +ajRBc05zCo0JQrIpSdXQTgcTULp18sAFF1aGwlgthv6lSetqlQLeusaEuVnR/rf2 +G3ecxNZ2TA== -----END AGE ENCRYPTED FILE----- diff --git a/services/postgresql/secrets/onlyofficeDBPass.age b/services/postgresql/secrets/onlyofficeDBPass.age index 1044663..02e602c 100644 --- a/services/postgresql/secrets/onlyofficeDBPass.age +++ b/services/postgresql/secrets/onlyofficeDBPass.age @@ -1,10 +1,12 @@ -----BEGIN AGE ENCRYPTED FILE----- -YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBXelky -K1d1QjFIdHI3RnZNbkJYcXo2blZ5SWJsWm14dmIxZTFURjUwbkdZCjJVeHhIWGtR -NlRzeXptVTQwS1pPTkFTbWxKWFNZM0dPZHNJT09ZVTVTYXMKLT4gc3NoLWVkMjU1 -MTkgc2luZ3ZRIHdzdkJnbUh4UitvM2FFR2FKMXBPS1VoOFVpK1ZNU1ZsRDU2VTJq -cWhIanMKWHkvK00rOGllMVRSbGhVTHowUHg5UW9GNFJESEVTQU1ubzkvbVBkbnlD -OAotPiBUVy1ncmVhc2UKc3JQVmRkZzN2OUVNcGRBVno3NjN2ellseE1tYQotLS0g -cm5vSVpvRHBxQVdtRW92Y0pwK3hXRGVRUVVWc2xJbkhVQ0Q3WlRaQlVMdwrgzUZZ -5k0xOf24D9oWHZEIl4lhnsQwLQtqucbh/0YWOK+JHSKauqpFTOldUqE8bsE= +YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyA4eHFK +NjVmQ3VNMkljRlRtUGthelM0dkZPVTFpQ1M3ZDczdUZneE5wdzFzClcvUkJNSWEw +MnIxNmZHN0lLaTBPemgyZHZ0aGRRVXhYMFc0MEJnU2k2dHcKLT4gc3NoLWVkMjU1 +MTkgc2luZ3ZRIGFqYVFWWVRSUWQ5eDZDczZUUStpeGdHMDhidEQzQ0RlVUQ3VUtF +ZHUvaTAKejNOY2s4cTRlR3NLQUw3VlpGUGN0cUlGOHZ0UDJ6dXQ5b0hUYjBBUEgr +NAotPiBxLWdyZWFzZSBESjFsS3EgajtwSGotCjRsRmVKOTlveG96aEFvM1FBaW9l +d0swT3VXQi9saHRuUzdtemlQVlROR05KT3c5TUpUSUhycEhOLzVSMWd2bFkKdkhj +N1UvT3dWUVZRK2syMDhpK04yQnRNK3NXeDA1dUE5SGcrM1NrRgotLS0gN0FGQTRs +aHZyQzNRSjlsV3o3R2EwRGxXV29IU3FVbWdDdFBDZ29DcU9UOAqI+4PESny5uNem +Idc5C5BHpvwJKrvVMKxhwnboH/oziNJL1KxpQSBOFMh3Zqdu -----END AGE ENCRYPTED FILE-----