init

2025-04-21 18:32:39 +03:00 · 2025-04-21 18:32:39 +03:00 · b6cdc78668
commit b6cdc78668
210 changed files with 9929 additions and 0 deletions
--- a/s0melapt0p-nix/system/sops/defaults.nix
+++ b/s0melapt0p-nix/system/sops/defaults.nix
@ -0,0 +1,8 @@
+{
+    ...
+}: {
+    sops = {
+        defaultSopsFile = ./.sops.yaml;
+        defaultSopsFormat = "yaml";
+    };
+}
--- a/s0melapt0p-nix/system/sops/secrets.nix
+++ b/s0melapt0p-nix/system/sops/secrets.nix
@ -0,0 +1,22 @@
+{
+    ...
+}: {
+    sops = {
+        secrets = {
+            sshKey = {
+                format = "yaml";
+                sopsFile = ./secrets/sshKey.yaml;
+            };
+            sshKey_pub = {
+                format = "yaml";
+                sopsFile = ./secrets/sshKey_pub.yaml;
+            };
+            passwd = {
+                neededForUsers = true;
+                format = "yaml";
+                sopsFile = ./secrets/passwd.yaml;
+            };
+            
+        };
+    };
+}
--- a/s0melapt0p-nix/system/sops/secrets/passwd.yaml
+++ b/s0melapt0p-nix/system/sops/secrets/passwd.yaml
@ -0,0 +1,30 @@
+passwd: ENC[AES256_GCM,data:RVG5xA+HBSuCdlKfufH4W47c41bS509opilnXeElqMu8nJuFuwVsnWTmXFX5VvRLfwHWVED2rRk0MHsJHihscMPeFfTQkX3l,iv:NoyFvCYBcBmf7PFAJFblu+D53Rl/edINAYrwHz+P5ec=,tag:ceClZyTgYmjR3XvPNFlAnw==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1u3vp87cq74mw56echraqtstgpgtn3hqkl8lxsd8qjn0ezvmyuvdse6z2em
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzclhDSmVScy9XTzJ6aUM2
+            cXFraXV6VFdzVkx1ekJtM3JwSzdvTm05aGlzCmZNTWNyN3VKdlhSTU02aFlXSTFX
+            SWpQczRpMGxBRlVOd0kyMnpjSHFTTTgKLS0tIEo1M05CZzFKcEF6WGwvSzg5N09v
+            UjJMaXZKNVJtK0c3enFoUnlBRFdvVlkKdPT562h1h21zdVsjbYCJNDq1m3vDw7mT
+            5wiWVXfzdRNUR1UcPGk0YTfWPO0yS7Sf7wNoCFttMaIWRKM5MbDaxA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1kua3y9ek92kz9qds4ssjgvk9w0pd7qv9w7tskq2e3rtytw5wdquqvqr6qy
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxKzZHeldhQkJhcU9oYWVp
+            VTdQcGU5RWpHT2E5QjhUWSsvbVE2UUd3YWg0CmFWejJwa1I0M1l3a01tZ2U3RjRQ
+            Y1J1WWFBSTZHNm03eU9hbWJ4dzlKVjAKLS0tIGZvbG5xaVF2aWVXN1dWM0svTGtk
+            NHlQdGI4NzZVenMwbDZTZTVNUVF2ZlEK479N7LHDMa/Cg31WI4pTpdy4aSPNVSrv
+            fuAZlELqsWpoTatYIl/jsm1CbxbTIggUlSAtO0KbfVjPugF0ol9kDw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-01-24T18:46:09Z"
+    mac: ENC[AES256_GCM,data:5EjKk8hgPRdUIGOwdSnioKj+8lKcPqJvTFpjDdA4Qxze/HZzFMc03mIapnRsbTdKSTz9t1aVHUlj/J/ls72+uMoOxsEGux7xfT+rT0uX5BMoqXY+z6D0cjsmV+R2+H1IjNDv7zEUpyG7YYrOU/X44nwGF4V7A2hd5t0pF/BkL1s=,iv:hARXj8bKU/Kl7t9kKMozow8cCPst42avMdvzF/Nl7Tc=,tag:/hZCommlkxSzuuy1HFY3PQ==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.3
--- a/s0melapt0p-nix/system/sops/secrets/sshKey.yaml
+++ b/s0melapt0p-nix/system/sops/secrets/sshKey.yaml
@ -0,0 +1,30 @@
+sshKey: ENC[AES256_GCM,data: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,iv:AbFcghPKmQIhBtt4l77gz4aRmyehdw0EOGnVLR0lN88=,tag:TFg+QwWR8L07DA4shcVRHg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1u3vp87cq74mw56echraqtstgpgtn3hqkl8lxsd8qjn0ezvmyuvdse6z2em
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5eVVZNEpFbWpkM09IV21X
+            ajNKZ1l0TlpyazdubjlYdDVYVjR1T1lBZ2owCjlrNGZBV0VldnhzVGQ4eGY1UDFk
+            UHBxMWFhbEZTN3NWUDU0Uk1BbHRrZ2MKLS0tIC94YjFjRTNBVlVOeEJIRmtMV3pU
+            TzY3TFA5NzVsRUIzb0E2bjJLYkVXNkEKmIjm4pfuDkneeC8S+myNx7lRUy9Ujd67
+            TzgtrZ8VJz0J3SajM/41OJ76+mfyQ0dXEWU1zxJNFN9v7OTPu7bJ5A==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1kua3y9ek92kz9qds4ssjgvk9w0pd7qv9w7tskq2e3rtytw5wdquqvqr6qy
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVT29SMEVSTm5TWlBhS3hz
+            QjdTd3o4UGxiYldNYlNHOEcrOVJyZ2hQSFFJClhmQ2xvTFRnNnplV3F6UFhIanJP
+            TFJEcUJGOHZycUxzWDVzdCtzdnkwUlkKLS0tIGVVRHh6YTY2ai8ySWRyMjFCbG9V
+            NGxqNVhUQXJGVUt1S1loK2RBc1E4R2sKPeP+A/SKcKJYNjMd+45pvTxYlLsGtJWU
+            0bVNN6RgG1toD9MK2I63C2J3fje/HcvIwF2KTXT+6V5/QSYuua6//A==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-01-24T16:23:47Z"
+    mac: ENC[AES256_GCM,data:frYagxOItf4yJx5BeelPjj/eICIaeQRz/Pz6D+tuGo1N7UKPr9Rh8ReTiRTjtCBCV38yU8fjS97uMYm4h8kC1Ca0udbKzItwl9I3rTT8uAJDbA0mImJ2DaTWo2SoHw3b/DnKQYgJ2cwf2+CEJqSe6PtY0lsl4IewcWmqKiqOdZU=,iv:9R95bXnA56LlmNlTY7VNHCJix33SSFoXi131Lp495pI=,tag:qiUvTQigFa/qXTJjmd9FvQ==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.3
--- a/s0melapt0p-nix/system/sops/secrets/sshKey_pub.yaml
+++ b/s0melapt0p-nix/system/sops/secrets/sshKey_pub.yaml
@ -0,0 +1,30 @@
+sshKey_pub: ENC[AES256_GCM,data:HgoZiHFZx2PQEPWtIANdBLllD7OXDYMNDCJteEb/GXZX3DFrxxPfUQEfP3kbDREpOFrkJ5GblJQT2rgxwuB3u9eYnaLyjYtun/eDnSGb+K3M6Nj2yWrMhrf6dIhj3VoB9bAhEn4=,iv:orirqwujM3jEtmjfmALsaFnmv+KS765GyPNKUZPhSFs=,tag:4JLQZ8jkU/wb0OIIUiZ0bQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1u3vp87cq74mw56echraqtstgpgtn3hqkl8lxsd8qjn0ezvmyuvdse6z2em
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqM212a2VNK1psSWFQcXBU
+            Zm5NU3FTa2hjSFBaQUc2bHNQZERVdkg4bzMwCklJUmRET29sZlVjcVp3Q3FHVmcz
+            QzlPTUd3RU0rclgwN21rdFVrWXByOTAKLS0tIGJKSnBaczVDR2FNVXc4MkFWWWJi
+            Z0xjZkEyOEFiRnVNbG8rZXA2TlZCNTgK5/Lk+FDjZQuU9C2+c2yaJpBk372CjEgD
+            79WXvN3rz3RTDQ42tIuAp5jnRn78J33iN3LxjeU114tNBPkezgxNCQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1kua3y9ek92kz9qds4ssjgvk9w0pd7qv9w7tskq2e3rtytw5wdquqvqr6qy
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMN3hiSmlEYnFvRDFndVQ0
+            UHNLUHdaU1JkVktSb3dXdDFxMlJTaXhDSFVvCnFoR3kxeVNMbmpkT0R6Rm5aV1J5
+            MEZlWnM0QWx1V20zQXRNMDd5Y3ZJWTQKLS0tIDBYb1dNVTFraTVsdHhaeUM4SUdk
+            L1pKbnRVdGNBV3pRTDlzQjlneHlwZGcK2vlZIuX/TeB4Lh61qlvEH6uaAB/ONVt/
+            3ngxrV+R+WHU+a8JNZEAuHH6rARexX8WXzKB3YyI8e5j9pHJiTNh/A==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-01-24T19:10:53Z"
+    mac: ENC[AES256_GCM,data:PMHV8WE082M9+APgYnsG/ZPXFKapMNpm+EKLp9Al7SCb5BBC5XZVDOUvOa1CwGzukDcaC3CIGa2tiC0WSVPe4TivaiHjyRKUz6UWPg2fX1tuQpOqrIaF5pIVSi4FJA9oBrwI+fuxDEdRi5LmsFtfwW2TefdGUgXl5+yU1E0Sur4=,iv:NjuL252O3moLHSjFi0dMEJj0c+rDOIfWR82F2/i9CYY=,tag:R819dGXLa+/zb8WsVdBWIQ==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.3