dynamic dns updates

nix/modules/caddy-base/default.nix

@@ -4,6 +4,7 @@ let
     plugins = [
       "github.com/noratrieb-mirrors/certmagic-s3@v1.1.3"
       "github.com/sagikazarmark/caddy-fs-s3@v0.10.0"
+      "github.com/caddy-dns/rfc2136@v1.0.0"
     ];
     hash = "sha256-m5RHlrheqzoGqKQxixq+xTd2hlnCTets9zCT7aFka8g=";
   };

nix/modules/caddy/default.nix

@@ -19,6 +19,17 @@
         insecure true
       }
 
+      acme_dns rfc2136 {
+        key_name "test"
+        key_alg "hmac-sha256"
+        key ""
+        server "dns1.local:53"
+      }
+
+      tls {
+        dns_challenge_override_domain "nilstrieb.dev"
+      }
+
       servers {
         metrics
       }

nix/modules/dns/default.nix

@@ -1,6 +1,12 @@
-{ pkgs, lib, networkingConfig, ... }:
+{ pkgs, lib, networkingConfig, config, ... }:
 let metricsPort = 9433; in
 {
+  age.secrets.knot_dns_rfc2136_key_config = {
+    file =
+      ../../secrets/knot_dns_rfc2136_key_config.age;
+    owner = "knot";
+  };
+
   # get the package for the debugging tools
   environment.systemPackages = with pkgs; [ knot-dns ];
 
@@ -21,12 +27,25 @@ let metricsPort = 9433; in
 
   services.knot = {
     enable = true;
+    keyFiles = [ config.age.secrets.knot_dns_rfc2136_key_config.path ];
     settingsFile = pkgs.writeTextFile {
       name = "knot.conf";
       text = ''
         server:
             listen: 0.0.0.0@53
             listen: ::@53
+        
+        key:
+          - id: rfc2136-update
+            algorithm: hmac-sha256
+            secret: QRpeYCJLokRWyzT/tWrxaly5Seb5yTkE6/Ub66edWds=
+        
+        acl:
+          - id: update_acl
+            address: 10.0.0.0/24
+            key: rfc2136-update
+            action: update
+            update-type: [TXT]
 
         zone:
           - domain: noratrieb.dev
@@ -35,6 +54,7 @@ let metricsPort = 9433; in
           - domain: nilstrieb.dev
             storage: /var/lib/knot/zones/
             file: ${import ./nilstrieb.dev.nix { inherit pkgs lib networkingConfig; }}
+            acl: update_acl
         log:
           - target: syslog
             any: info

nix/modules/dns/noratrieb.dev.nix

@@ -54,6 +54,9 @@ let
         ns1 = dns1;
         ns2 = dns2;
 
+        # --- ACME setup for caddy
+        _acme-challenge.CNAME = [ (cname "_acme-challenge.nilstrieb.dev.") ];
+
         # --- website stuff
         blog = vps1;
         www = vps1;

nix/secrets/docker_registry_password.age

@@ -1,5 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 qM6TYg 0u8KWoP0daJZA97H5KkNCSn839ObF87VYU4AChP2XVw
-PqtYdZR3xokf7iIQ9khrz2pt7n6FipWn5y3bmzDfdEM
---- 3tTg1eoL9exHUTtn3Uww7xWecgmzf5EyyQEZ//Bbjic
-’|˜H¦ôLXñ
Zºõ'v2"ÕóÈ<‘K#9ÿ$TÔûÇ	Ó_Ì«
æ}^aoÜ4¤
+-> ssh-ed25519 qM6TYg N7lS400e/5mSV3BlhnzThydz/c3DIIOHLNQodTErR08
+vMqHXmSloSrWCxeD4QCH30GSqg1AI+6Dy16atFLNxjs
+--- aJ6lQv9jnJHyocy+Kz4jPCtpiIewxoooR0Zsm7CS/pY
+éj9ò†ÇKy€È°0*ÃœbÉÉ¿Y£0ûÅÅþ<C385>I3v +¶D"*/g`Šo™#Š³âصñ

nix/secrets/forgejo_s3_key_secret.age

@@ -1,5 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 qM6TYg z5yLpu5zJ9m7Ukl3nEHZND8Ot2cYnADJidYjELzfr0k
-qy1n6TSeWniRFXLc1Zkpvz1+pmjFaMga0BeSE1q6RSk
---- fe6vqb3f0bRvXlQG4JglZ0h/At5kUPIM+VkRh91BCtY
-†Ã"Ô.O†ë
J‰±º7ÄçªÝ6ÛàÜ~Ô¥SõñHÈø»ó-’4¡0’ýÍ[vA¶D‡ÐÜ=‰´²^T°ýy"@A¤‰@÷,§¼ÝáéüPÛÝ|¶q!ØŠM
+-> ssh-ed25519 qM6TYg Ln9ZxoEmhHUMbU4PufH8OYVzEnvFEm+b/SlBfitqEhw
+M0n0qe7L9peTLylt0uoTR4gQBcCxfSIm7FAR0mPeG5E
+--- BzrHhLTDQ49g2GTkJdmLpdhRBp1rfdekcW+A26jzKys
+G6à?ÑU'réy¸†ÃÉ@b<0B>$ÏMçZŸ`ñ÷@äÂëkv£]Ÿ6Þ_°ÛŸNÜæÙ‚ø
$ò!ám“ìVk€<6B>gA‰]ÿyW°,¾ë´ød'ª ;Ȧ핒ÅÜŽˆ

nix/secrets/garage_secrets.age

@@ -1,13 +1,14 @@
 age-encryption.org/v1
--> ssh-ed25519 qM6TYg jJSJ3eWbmwKqaqaH0nCAfJh6zG0wQ8NHYLch6MjVFiM
-nzMK9xuag1meleJVM6aNGK3Uj+LDiklWtAbEsEVaZrE
--> ssh-ed25519 91VHug lgN/V9/OYL6qvoDo54bMwkRjgJx72ER4rwCyBLE7JBI
-KyqOc40/5iNubbk3vuF6e5qypscUNWGXSO+TvnE60Ug
--> ssh-ed25519 XzACZQ MH28c1eBXCHnnmWeEiKbB7qnqIWb11ciYZopRwK1lzw
-kHr78ot/c9JS7L+uWk5XhCwZ8y41cEkCfjiv5ITHXpI
--> ssh-ed25519 51bcvA JbXk+iiHx+TkrosjfP28iGjQQ3lNFlo6L7ebmOmOJzs
-KQH6qVfm+48U6TzaomwPQJP3Xs8JCX1JDuVNu6+djUM
--> ssh-ed25519 vT7ExA W/tG8Jk982TcvMP+ZVY1Jgtk/0ykGlKT471OloV68G8
-9/ieFx+uf+zLUKfWtIYUiEyHHkwYLOhX8FtZP6oup/Y
---- Nr1pkXNHv0+lBg4J3QnK4f5kM3ZOWjwTCwjUYNMRABk
-é•UsIó	lNdLðÀò¥Ð^üÉÉq/P•D\Úé˜î%µÞýs4¡GCÌþϺքag¼¢÷¡|-ˆfŸ+,‹è²|vpj…]à„.ŽL“Êö=Œ¦ù<C2A6>UÊßä‹À_?§bG&Ywëí¨ò|f~4qRšõ*¢Lx¦$Ú‹³Y–P­rEÿáÁÕN,˜jW¦Ž„zÉà«#KÉò@̧ó·#7¶"&™Îž=®äGx ÷N¦.„n‰O7ôc}fczT
+-> ssh-ed25519 qM6TYg Nl4yCNn9+FiX2uBliOH052tOjnTj4DcFzaIDjD2MVTY
+aU848NDVI6MN5JPm9FRha+HJySIEyRRcNaiiBRnxJLY
+-> ssh-ed25519 91VHug HfzLsV+15VwIFXz9mYc3dNdlFnb2MdqOMIV3DkxnJmQ
+Fr2LDl/Z5Tn9FspwZynbCvK9Let8VWGAr00lf3Uhj14
+-> ssh-ed25519 XzACZQ GWXW5myuKkabbJwdW3OsHl08KBo0wu3dJXXo13xYjR4
+SYu+6yj0om9BHFoJH8wsDPEbQCQy/oAp1jRW9wX6Ys0
+-> ssh-ed25519 51bcvA nenOCUH5VZ2j/u1fv7mD/2hZufU6KWY46UZwzINXSSo
+GbQOiKQ6ko7RpuYvmtUnf5wzNrKpR/FHkrYHhRzURDw
+-> ssh-ed25519 vT7ExA 8/Cn92m/Qtoo78VSNEYNrC4HqoIKxLyvT7A0R0CpE0U
+rehfI6pEM0nAv9AQAFa3g/PTd4uvc8zwWLAVAgoq3NA
+--- fHz+V2yXufeCvWNZ4Eu+vAdPYBoDYyuUlXcrTo8O/88
+r›º¾À´u^+Ä=ú$!1
+¡rFç-Nà™ïöHræ³+ü°2äz>äFÔiw`ˬó öÖ0ðëÎ2íŒ4(3
ÿÑÍÕ«HÌ÷³=¹ay$tÔV†ÂßÉ‚É|H×å ØIÕ	“ådæ2´_`åä‹
	<19>dÜðr?P›³M‹Îý	æ…bØ´Ä%qhùo‚Çë"áß—™lzs;r{…XÿuEãn)'!äýò»V ”°·°ÓZÖ˜ÓêÜŒ—™¡uÓ

nix/secrets/generic_backup_password.age

@@ -1,13 +1,13 @@
 age-encryption.org/v1
--> ssh-ed25519 qM6TYg WSRKNimMa2qdIrTxZIsnybHi+gzOweCGmCx2D3DPciU
-e6MO1QIL5FI0ATaR8hBUeE2ayLoyP4P7d5eO7liMBHg
--> ssh-ed25519 91VHug JZjoc5tcVSQjIpbVGVca4P2s80Rb7NTIEKPhlXx9wQ4
-QWqufjXwphL4Kes5Ky2tWozdusA5AJwqgzT5JWCQbvQ
--> ssh-ed25519 XzACZQ ek1dpX4Lqf6hd13B0dX06tTTmNRhZswxV3W1gBLKkXk
-LQMnAxrr3ZfUc3Brn39BzIdyBe8Jma8LSML+eaBuKJE
--> ssh-ed25519 51bcvA zA9GHEGOXETl9zX0yoHHB9B5On06KlEcYRba8eKGKEo
-yPTcsFhDLiSLpWoZX0b7dNzZmBaLTUY8PSMVFCUzlRA
--> ssh-ed25519 vT7ExA N7U+hiTEzwKvglQ0At36e/p0TTA7xVRb7UvuX/4Bbjs
-acP9zBODifOsHVmM7COfBX+tkxZIPnQCUR0TskHacQ8
---- tOLU9ascA2rI4R0oIg/0vsn2dEC1LBLFN6TFRcyrcvI
-{ÏÄ‘<C384>‹q.忳U×ÙŽcO¹Å)¨ì|Â¥ü,+^]¥Ÿë?­©PÄ»$3mº4©Ç¦|…cõø)ó.R6@r‘]ˆ½´
+-> ssh-ed25519 qM6TYg Kmd5m9hb9QXzbbrLWC3SLcUfy/B8bEWdJMQ1iMe5MQ8
+A4ZoS84dtX+DMOzPXOMBb402q3o6LBExOda+Rm4hbO0
+-> ssh-ed25519 91VHug rXXXRgZI91mIlLAclodKDk3V14pDyRCv5kg1RCB7AH8
+CzC46ry6tCYkDX4jTW08j7Itqjb0raz2nlmU5/7zLCc
+-> ssh-ed25519 XzACZQ KbzLsMTNqcjJ2I+Bx5moRC74Z/QKHrbFVovC5hhm8DY
+aAGFH0KBdM+nm4HyZ0X7MPc3+fBbcQrQAcvrK0F7LNM
+-> ssh-ed25519 51bcvA qv9cje7I7Sxje9xV0DghaxSxyovB37O3B1Bt6sHp/Bk
+2zEnhhy6dIOWMdbQE54xtQKfZjR2vTH+Z4son1/gYr8
+-> ssh-ed25519 vT7ExA voN3ZvXhhqv4V9FpVTd2ViydPgxvjpQpeUcH6jljen4
+sLjK4aWqGSlxxeMKPrIZCjw4tsz95C1R498bFZgBMVk
+--- Kfk+aieCFtZiKPE8toWEZwZw06sELpx1FiJCVDyLGcc
+éÈuøÜMú?Cš¬†ìÒóô0Z©&Œß‡ÊrSÓÖgµ™W«‹áp´8ã¦{*6§‚ÿ›Ày•¤§q“‘›¯‚õð%‡øÎ

nix/secrets/immich_secrets.age

@@ -1,5 +1,6 @@
 age-encryption.org/v1
--> ssh-ed25519 yMKb8Q szKG8gw88EAiUx26fzY/pYMVb7Vb91FZC1FEQTYRZDY
-0jBl8757lsXnxWE90iZLJcO5VUXz+E2+7m/ZfNq87J0
---- huOResyzGVCip/Sdoyvid3TxFI01wiXNaHdZ/oGI5Zg
-*c‘ÚlH¢àxôAhã5H(d‘çŸUé'ònÒ˜;M.Vx}‘À•"Öf· ø«§³9Š¼fß~JvÍ9–
+-> ssh-ed25519 yMKb8Q lRux6HhczttLaNglBB4xdx7B4GUhs50ucnyYYYlNLzo
+nxSaMiEcscZ62uEA3N4ssHN0Vc/fw0wRsGzUXHk5vyA
+--- FpSXOah6uQRaHLOxdGNFF9Pud9NsjYDLhiXzqg5/Sao
+ëóxÞ	l×l w¦¹Ž\v¦S-Ñ!V”ý›]å·õÛðõýé}gëÉ΃[>e®;¢n0›n!‘œ;L
+·+

nix/secrets/killua_env.age

@@ -1,5 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 qM6TYg mMvnBUGVS8d0di+drDXo7mws4Uz5T+nZmQY9uUpKfQ8
-rea2peORLvRF6qYtGKFnylyEdnV0NTc6QO3xSgp/y1I
---- xyeBOfVq3hwyckUma5LWOU9cWHzg/XY2f8T/0Vc+njk
-G6kN0!èUm<55>Ÿõù[rïH<C3AF>§ÿæꟉät}׊X'ÂyqÛL³ûbE…ª“Y®°ý:ÚÍn NHnHàƒÝ°Üöù'¬¼<C2AC>¿ÁãÛWœ|©3…Òøz{Ù¢ºà×
™É'äµN&M`#²Ø
+-> ssh-ed25519 qM6TYg w8lK7Dhc3CzenrzJTI32uTNgXVyBUKJf7F1xGG6AV2Q
+wBlK8pbH1M0NBeAFjwLyyuOKT2jk+o1BwjkQPNc9pvY
+--- 5hl/tchAPOurJ+fDLDB5/l/MuqrSTjV2Pnhc1Dy7Uhk
+a.þAæ»òÈhUŠwq<77><.äd‘Öz<C396>œ¼XÁÐœ&;ⶸÇò9ÛÂۻͮc:zÃ<òòb>`¾ËÖùDøÖ
ÕXìLøòʳöhý\Y ÃÁ•Ç<E280A2>•»'çø°ôU^ø—š+›^¡ø3k5Õt4

nix/secrets/knot_dns_rfc2136_key_envvar.age

@@ -0,0 +1,13 @@
+age-encryption.org/v1
+-> ssh-ed25519 qM6TYg QQMDIquZuxMKwx2hl2ST9BMXa61DBdC/cMUutcRIRHw
+l7oENezyJwfJHrgNUtFMfOF08BhAYWQOjW8v7VPN/aE
+-> ssh-ed25519 91VHug wQBzeFG2xixYU5L8/d81n5FkZMqO3uCSF60Xi80mvnU
+nPAgKpJj7WDJ4tbKGnlWAhvAUOyLIyOY3aPofKM0LfY
+-> ssh-ed25519 XzACZQ HYj1Omcc8WYq6s9l5hVrjjibg1LFHnkYkXiPolGewws
+uhrQ6nmP5fMApIJzUzwXcnlILdPvmlG4QhG1laW6alk
+-> ssh-ed25519 51bcvA e2Xng7rC2SkYiDn5BRTIDBxn7vN/F95hI+okWL9TymI
+7TJrZQlJsnGMu5jaFQllI1E/+ZGHZjGmaUpuNZSAPDI
+-> ssh-ed25519 vT7ExA PSM21ZGF9T9g6rxnsCv3rAio1f5KckTHgivfclDjFFs
+rq3M2R/LHYki4nQ68iFoLXH8VVmWyBDD6yv6y4tt5qQ
+--- KqTQhyl3ef04vDQ8eu1IvTsEaSMYtQxxBAcIO+WYPr4
+Â$Jk–¾#_“¼ø¼Frë"çà‘B}~¾åœP«@ì.÷›ëŸeÜ…¢ŸYS’L;ÎÐPŠz
&0ÑDiKÿJ´^ÿ:à¨Oc'’—+âá

nix/secrets/minio_env_file.age

@@ -1,7 +1,8 @@
 age-encryption.org/v1
--> ssh-ed25519 qM6TYg OO4FC/zdYJPzw8ujHG66sX2ShWSrWfCKRj1z9FYOwyU
-84DDDS2TPxxoGxxaj4WLJN6zZfVIH7m1xC1mRMMzBaM
--> ssh-ed25519 XzACZQ YydvMTzqlr24U79p1vCZ0DIB1DmLNxp/kLptb5WtmCI
-KaJ0zuNwVsYr0pLRB2MJIix22xTdujqspFPISU3Q9EU
---- TzKmJkMsYD2ZS7LJw9qdVRsBeoxMPQjOyovIoopesMI
-˜ƒœŒ×ÎøÔS ´•âúp+²r‚ÔG<C394>F	¶"
ë1Ñ9ÈßÄæ,’kVñKÐЪ¤¯é<C2AF>†S¬
ühŠ<1A>nhy·ldšFX+£×ÒÔ”dˆ;<°fLí~¹Dg‚-'C„‰ÔB
+-> ssh-ed25519 qM6TYg sx4kKW1m2RrcVkyxDMdDgh5jcwfrRDAFYa0EJBZKFnI
+WPbchNFC7tTqC4DrIw7hUZSNNxE64kkXZdXB6/VFhj4
+-> ssh-ed25519 XzACZQ GXDgzIGU4X6/oOr5hcI7SoorcowGPJHx/0X2+gj+Sk0
+NATuZ7IZ0QwM9/GtaYdLXjBs6X0enhpVgWvGVpyqOO0
+--- xMESjwLO7fJhwd0HnYzypoh3s6YRx86vSdXovvSBoHg
+9Iü{¶Ö<C2B6>µÊ¼Ø<C2BC>Zòd©«„{æYr©X­öB=
+lƒˆé]£êÓHÜ´ÕÍð¸`lâñR‚äΙRw
8Q—íúi4ô*tê³#Í‚ÆšmÈŸ+6h¡S&æVŽá¼™';J™0]É ¿=¡

nix/secrets/secrets.nix

@@ -33,6 +33,8 @@ in
   "does_it_build_private_key.age".publicKeys = [ vps4 ];
   "immich_secrets.age".publicKeys = [ minipc ];
   "paperless_env.age".publicKeys = [ minipc ];
+  "knot_dns_rfc2136_key_config.age".publicKeys = [ dns1 dns2 ];
+  "knot_dns_rfc2136_key_envvar.age".publicKeys = [ vps1 vps2 vps3 vps4 vps5 ];
   "wg_private_dns1.age".publicKeys = [ dns1 ];
   "wg_private_dns2.age".publicKeys = [ dns2 ];
   "wg_private_vps1.age".publicKeys = [ vps1 ];

nix/secrets/wg_private_dns1.age

@@ -1,5 +1,6 @@
 age-encryption.org/v1
--> ssh-ed25519 LZU5Eg OKL541Y7HQSCBtUqWQVdIxZK9HiWeaPyAWwkcj/bsgs
-PviTqNl4VLbQtErGDpXFEJSeRf59Mx0v3qcznEZ1tTo
---- yRq8T7TGu/yBKFx2r+t8gbohrUHDkyXdvsB3n5csgpY
-kMõQl?N'!œñ¦.LlL¹±BoDæ§Y‹<59>ï¼:¯¹Ö_¹‚Vù“cèàžðtì¬ci= ã3ärKv¹<1D>MÛfîDuúÑ
+-> ssh-ed25519 LZU5Eg YCaoZYLxmyrcSVXaTqDeC25n7lwuGlTDfWPNxg9etn0
+xSVH1o+ITY39M7X8FNpj5liEW/20HTq0ZRxsoo3U8JQ
+--- i8MfM8cVg0SJnNqUYeTQ+dY2FZ6yEhIGkiHgxBzTDYE
+
+Fã0e<EFBFBD>Ò<EFBFBD>ŠYØ
-{sóh]‚ƬfAp»ùûûB^ú£1ûäÄeð0!ä¾3šþÍÜs™§ÄÙ"·új@æþ=²rµ¯Rsí‚(+˜"

nix/secrets/wg_private_minipc.age

@@ -1,5 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 yMKb8Q 8ESNEQZaTfjWl4qGZJV/GPN+tFozDmiZZtXCctRD8yE
-w2+Pjzmotz2X0O8ehb3TTOLk9YCk8hqRqNKfNNnLQIw
---- pfmBROvSCK/41HS44uMmwU5izVCyHrRirYjL/WBAhZQ
-m í<>*QÀØv"­›<>¢+˜…JQ®ñÔÄ€ý'òPø´hD·¡>G’¹ð Jû]§
êÀÄ Ÿø‡×LÝ©¯ù¹¼	ÁN÷žÌ¤Û€
+-> ssh-ed25519 yMKb8Q QdFcYSyIYFlrx1vOfnWaFzULi8AxYIpH1HXLRZzs+iE
+3JG+l7U6AXmWe/H9J1B3dFjD+GCNRM4wsNWR0CHU0PM
+--- UXqL/EG0JYwnV4Owi0Gy4BnpW7QkgiF4z2P9Qskfq4w
+@
+ŁţqűŻČĐÍ,‘YLłŃ3ü)×eq¶ąŮaK@]Ż˙e»ŕ‰xˇCĎ
+tţňÎv-G!Í}Šš±çJŇÁ i<14>Č$=
*‚Ş

nix/secrets/wg_private_vps2.age

@@ -1,5 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 91VHug nuqwTTdoNOLWvbQAIhl9WguvArxG0jNfkFn3qM8VyjE
-NvhMCreuxdWHezfH8cF4wXjO8ZbG7yQC8+sVnWFghFM
---- OGewUdFWzL1PzHGBHB7ulJVi5eX6UXKLFUyfbvGErmY
-Ê‹Ì.\†—ŅدiÒ›ÎóÒ~`êQ–,¿§W;m´‚<C2B4>­pQóTY
TÅz?]¯£T-sÃ4)ÑZPý,6ŸH5bìÔ„7—ƒh
+-> ssh-ed25519 91VHug MzqFl7ZTH4laSYXRYPbIiXadl/bqVXPHRM7wD5aLhy8
+Ng19G3jaJJr1s33i0kCHxIUQeTmoISTN+VQQD3rB33I
+--- JkYGUYo6Ys48HI9UpXGardgf+k+DC71dxLiXqxMmFEQ
+C<15>‘æqÎ
C<11>!<21>nÐ ý½Æˆ,ýbæA«8"ºMeNÑŒnÀÍM[(üÖ¡¶Xͤ×X+•á~ãØ“„ýS¾nßKXõÄià8¿†>

nix/secrets/wg_private_vps4.age

@@ -1,5 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 51bcvA jfwnJ0gZN/FeF0krZ/ERWq/eqKBGwANBwea3xCJLeHw
-x8ccoxcT8Yn99d6aWzZ667jUjE4dHPfz3ZIg9qG4xe0
---- H0b14xAs2FTADz89JQx2eOSmAgN3Rs5A2o316xzISwc
-ø’@ï¥Î}`Í &9Úæ¶WjWSõEáãHÄ@„ð—ˆV<CB86>Ë’x
[…’±Üá?¢öéU´u.ƒ½Ø~ìÄø–J*Òô7‘¼Ò·<
+-> ssh-ed25519 51bcvA soCOaoBhsAvjaw29hw6Q9JkrLGbfQEwgszOIl38+CB8
+uj17MiT/crUT+LXF9TEylo131FV1cKQbNXQNWCI1djw
+--- MAVo3X1mO0iUC0mEo4wbbDbK19hKxB/zEcfqfR4Bxsw
+2ü}[üI,s‚W/ä8®˜ªöKDŸÎkŠjz‚H¬,(ny¦ß”8uóÚq.^PrͪßCý—ð¤MÔ`)ì1§ fœyô,XüOÒ¡

nix/secrets/wg_private_vps5.age

@@ -1,5 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 vT7ExA 5Yp0GcAOQbgRlxiIBgDt2O5NK0zoEN3PdUQOFsKtSXc
-653+sJWsCeQpu6agZn85RU6GOrpMJY+TbzqRLbYvnaw
---- SYT84Omvncdv4tQYH7Put8sXqqA3LBR4/DuVyVCVbNg
-øöòv_Ab¿‹ÓL"fªÉR6<52>W<EFBFBD>›¡6Áhep¸¿¬–KÉêeðg–,EÑâà¨;`Šñ"ýG
xu¿þV<C3BE>í©B^ø+kíç6¾äç
+-> ssh-ed25519 vT7ExA Z8248Zxd0dGjx/YtU3cVKwuKMDRaHQpo6d21bwSOWz0
+/7PxJCz7yfuGuBWioDQMizW9+tL7Ku7JEB2h6aG4vmE
+--- xEBearw/OGRugS23zBrNGj5zKY/bNsot+UQOcCEATWA
+ƒœ!«pÕ%~¢)6-Hy*îeÀŸ¡Ÿ»
º âgã	¨‡pÒXÑ·‹Ó–k÷Ý Ùˆ¿èmé4bÖùn”ŸÀÙÁª¬êx6d‹íe

nix/secrets/widetom_bot_token.age

@@ -1,5 +1,6 @@
 age-encryption.org/v1
--> ssh-ed25519 qM6TYg qE/RX7sfudkaWg+9A1jRP84PnGCC8f7y2Ai308kN+zg
-LnySP1Ywe33ECGtFx3Un0+QcxH/IscCHao49nbuEvm8
---- DYF2tyroJ1KnECqhUvzLyox9wULA/eEH5SdENW2fPVc
-)nˆCzL‚ËbŸ!šP[õò>jl(9Â<39>ÊÓèP@‡{îÂ÷½”;a#”B<E2809D>ÉÝq#0¡<30>+]óõ-‹µ–MÀ\5²‘{ÿƒ)‘laW–kù³RCE›tcÖ3¿²ë
+-> ssh-ed25519 qM6TYg XJWJcqVabkHFOrbsNTS6+jc/pQ1a4D8lZkObT8BZwiE
+DgFVt1+01MNlPm898/qnC0wGbs6eEsLcHpyANA5tpsA
+--- VhhquCcml82lpKjXLecBoCz/2CHNl2S9htU2iIWfvyY
+~‚<>'t/!Fb†[k"õýy¦føiª¢Ü¨ŸL½ÑGêêg!ËFqZ¡aA<61>3
+úiý¡E`vÕ8Õ÷<Í1Fýmp
x~õ¦)gc¹«7R¾³×ð¿µ&%U'XäDD