high availability caddy

this was a fucking nightmare.
setting up the s3 storage plugin was painful, since caddy plugins are not nicely supported by the nix build yet.
rip.
oh well, i got it working.

and it WORKS

newinfra/nix/secrets/minio_env_file.age

@@ -1,8 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 qM6TYg 5dnvDdUqtCoJo4RYNTpIw4ckH0um6E50ZcOs08ZZLig
-6hwjJMNit300VZhBeID7kdV8NJBbZg/3bq8vHO8R9i8
--> ssh-ed25519 XzACZQ g+vhR2tRcQHZ/8Ud0oDxA0a+d1+dyNMVi21GbNRXrx0
-6kYx9RQYfuqvEfm3qpSp9oKXktJccqQoYEvI+SEhEqg
---- 1Z17ztzvaWForsjjcF72J0/bdSmZCqEuScxEQ22V6xo
-GÑ}ÜÅ7ô[EÛÉSÝŒ¥aO®O²N¦òlTGN¶_Ï
-!ãû¼H@•ÆѬƒM©¡6š^$Û²o@™Ú…u›M–Y;(8‚ÿ++Ï<>å­ºMƒ€l÷—Q¢aþmµG•‚|<7C>ÔYÖÍ
+-> ssh-ed25519 qM6TYg Jtt9cLPGha9Qs5gEuKSwU3E1bNMhrjlHtnj/I3dKqW0
+0iDfPorED8lq0Rc5LVDNWID7l2F+AnmeEr7Yik/OC44
+-> ssh-ed25519 XzACZQ Q9WpNGn/k35J0/LzGAlcf1ktN2/VG3nZdpfMbJXAnWw
+bl2Pasbxmb6LNbWiZrEVBQ99gYYC5Md6kdvIt4VAf7k
+--- +B0f8ilJGkB7Qj+BdzeKfW6HRl9yzMd+iT4sOAmJI5Y
+<EFBFBD>\ÒÖñÈ<C3B1>'ËZtbJ7úAL££²â›£&Á•‹ØC+LM¹nhІŠ]Rº·;	Ô†JHK»O¯7å B’»¤“¡ß\(ÓQmÎ’åËU>r³4"Šà¥èXh¹ó…Ð<C390>ãIñd§cE6G_oN©

newinfra/nix/secrets/secrets.nix

@@ -11,6 +11,7 @@ in
   "hugochat_db_password.age".publicKeys = [ vps1 ];
   "minio_env_file.age".publicKeys = [ vps1 vps3 ];
   "garage_secrets.age".publicKeys = [ vps1 vps3 vps4 vps5 ];
+  "caddy_s3_key_secret.age".publicKeys = [ vps1 vps3 vps4 vps5 ];
   "wg_private_vps1.age".publicKeys = [ vps1 ];
   "wg_private_vps3.age".publicKeys = [ vps3 ];
   "wg_private_vps4.age".publicKeys = [ vps4 ];

newinfra/nix/secrets/wg_private_vps1.age

@@ -1,5 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 qM6TYg Q5X+l2POBANoYyo8HNMy89MLtpodzzN9prnQY71mSTE
-X3MJesW3kfHCfCyvaWm22mOI8vSgP7JWlLugCXtiy+U
---- ZH3UZFDfQwZ+DIF3yFADfBKEv2K6k9DTCh5wLVnyaTs
-‡‹ÙiÔ,ÿ¯±ª<C2B1>‘1æF¸Äßfë	[_+­õ[
!¢>)ep'ÆYøAïÂWgã ªÇ<­ê^¢Ê=ô(Bˆ®ú)~e±G”
+-> ssh-ed25519 qM6TYg xCaglRQkcl1+kGIVjPEn+NlnrBUvcWLSH7MMPLXK9kU
+78t/Z81+NaXQMW30EQH8WMhed6Lm77+atPTkBQbDMd0
+--- AsnraeejCWHj1iRI/1btRXI6tqdnBW4S+twfx35eNEI
+³6Â1ŒŽKqH\vé<17>lW¢IX{éåK;€#ÞS—â&ãg^.ÍÊKQþ8”a7V˜œ:<3A><>e)9åïÐŒ!ëÞèO

newinfra/nix/secrets/wg_private_vps3.age

@@ -1,5 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 XzACZQ nsIkJQw/lrrXChkpFc87upQ4pbGefolI36wqMOWZGAE
-t49QoSdb2azGQlDBX5AyWMxCOt+ETpT7erp4WU5p2rQ
---- 4UbCHfpAfwiuRYsiN3HgdhbSLFBG05DxGCw55XT1IGg
-YÈ	ìŸÔÆŽ ÆŒ­¿½Æòþ˜€2ô×ÖôRsÝ	À‰ìQÈ4d…
IÑ.KpPFthù©ô±£–Á“a„
½É<C2BD>ÃõRX›
+-> ssh-ed25519 XzACZQ PAqPA1RpuXwjKCsn838qwsuRmuh8ES7BPiyCIFdhMmA
+QIAC+dfBMSZwzHwcQpO1IyDPKwTvr/iG35PkrFOyzwE
+--- zNejM9ypNWH1Bg1J1V4UCqMIyVP+gIV/mmgBaCfFCKk
+y<EFBFBD><1F><>2y<>v0<>W<EFBFBD><19>}q<><71>Ymh<6D><68><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Z<EFBFBD>{B|<7C>t7,@<40>6B_<42>V8<56>0i<30><69>a<EFBFBD>z9<11><><EFBFBD>@<40><><EFBFBD>j<EFBFBD><0F>)<29><>

newinfra/nix/secrets/wg_private_vps4.age

@@ -1,5 +1,6 @@
 age-encryption.org/v1
--> ssh-ed25519 51bcvA 9dYzUZSs/ilKHHRiuMgT6GEbtyBwWHAl8ycBcsvTQz0
-iq0ozCU1p1sekOH4qbxKxWezY2pyVM6LjhUuNpmTQx0
---- wjCRFJISrIrpgosh7ZBNM1qR78BPmhVBBwFpaQc10oA
-a~ÊueŠ<0E>?'iIl
ŸŸËC"âwÀ:Í\áR)	(.ŠÕ¥%*>†âp™Éýó’õ"Žu­ †Ÿy4’s<E28099>Ññ>”2¦¿—
+-> ssh-ed25519 51bcvA mJYJJnaKusYBpSL5qAokXISlrXkBZ0QPKZVPkiyKSnk
+IAsX5+UPxhap7ehB9za8Q9aEfeA0Ypd4Tw7XiU4f2eM
+--- VBlmFpr+g83UfZ4rftOkNzKL/ZxSxAi7/tBl4TMaln4
+mäľ’A†W˙Ďýť§ĺŁc€NWň·Ý-ü
—ÚŘäF6Ȇy…T=~<7E>ť–·k‚ަg%€˛Uš	;D­Ý˛Ëiľ‰
ŻĐ&[jÂ+®_
+Ç