nix/hive.nix

@@ -319,8 +319,6 @@
       ./modules/postgres
       ./modules/immich
       ./modules/tailscale
-      ./modules/paperless
-      ./modules/caddy-base
     ];
 
     system.stateVersion = "25.05";

nix/modules/caddy-base/default.nix

@@ -1,49 +0,0 @@
-{ pkgs, ... }:
-let
-  caddy = pkgs.caddy.withPlugins {
-    plugins = [
-      "github.com/noratrieb-mirrors/certmagic-s3@v1.1.3"
-      "github.com/sagikazarmark/caddy-fs-s3@v0.10.0"
-    ];
-    hash = "sha256-m5RHlrheqzoGqKQxixq+xTd2hlnCTets9zCT7aFka8g=";
-  };
-in
-{
-  environment.systemPackages = [ pkgs.caddy ];
-
-  networking.firewall.interfaces.wg0.allowedTCPPorts = [ 9010 ]; # metrics
-
-  networking.firewall = {
-    allowedTCPPorts = [
-      80 # HTTP
-      443 # HTTPS
-    ];
-    allowedUDPPorts = [
-      443 # HTTP/3 via QUIC
-    ];
-  };
-
-  services.caddy = {
-    enable = true;
-    package = caddy;
-    logFormat = ''
-      output stdout
-      format json
-    '';
-    globalConfig = ''
-      auto_https disable_redirects
-
-      servers {
-        metrics
-      }
-    '';
-    virtualHosts = {
-      ":9010" = {
-        logFormat = "output discard";
-        extraConfig = ''
-          metrics /metrics
-        '';
-      };
-    };
-  };
-}

nix/modules/caddy/default.nix

@@ -1,11 +1,40 @@
-{ pkgs, config, lib, name, ... }: {
-  imports = [ ../caddy-base ];
+{ pkgs, config, lib, name, ... }:
+
+let
+  caddy = pkgs.caddy.withPlugins {
+    plugins = [
+      "github.com/noratrieb-mirrors/certmagic-s3@v1.1.3"
+      "github.com/sagikazarmark/caddy-fs-s3@v0.10.0"
+    ];
+    hash = "sha256-m5RHlrheqzoGqKQxixq+xTd2hlnCTets9zCT7aFka8g=";
+  };
+in
+{
+  environment.systemPackages = [ caddy ];
+
+  networking.firewall.interfaces.wg0.allowedTCPPorts = [ 9010 ]; # metrics
+
+  networking.firewall = {
+    allowedTCPPorts = [
+      80 # HTTP
+      443 # HTTPS
+    ];
+    allowedUDPPorts = [
+      443 # HTTP/3 via QUIC
+    ];
+  };
 
   age.secrets.caddy_s3_key_secret.file = ../../secrets/caddy_s3_key_secret.age;
 
   systemd.services.caddy.serviceConfig.EnvironmentFile = [ config.age.secrets.caddy_s3_key_secret.path ];
   systemd.services.caddy.after = [ "garage.service" ]; # the cert store depends on garage
   services.caddy = {
+    enable = true;
+    package = caddy;
+    logFormat = ''
+      output stdout
+      format json
+    '';
     globalConfig = ''
       email tls@noratrieb.dev
       auto_https disable_redirects
@@ -30,6 +59,12 @@
           respond "This is an HTTPS-only server, silly you. Go to https:// instead." 418
         '';
       };
+      ":9010" = {
+        logFormat = "output discard";
+        extraConfig = ''
+          metrics /metrics
+        '';
+      };
       "${name}.infra.noratrieb.dev" = {
         logFormat = "";
         extraConfig = ''

nix/modules/dns/nilstrieb.dev.nix

@@ -18,7 +18,7 @@ let
     vps1 // {
       TTL = hour1;
       SOA = {
-        nameServer = "ns.nilstrieb.dev.";
+        nameServer = "ns1.nilstrieb.dev.";
         adminEmail = "void@nilstrieb.dev";
         serial = 2024072601;
       };
@@ -34,7 +34,6 @@ let
       ];
 
       subdomains = {
-        ns = dns1;
         ns1 = dns1;
         ns2 = dns2;
 

nix/modules/dns/noratrieb.dev.nix

@@ -14,10 +14,6 @@ let
         A = lib.lists.flatten (map (host: if builtins.hasAttr "A" host then host.A else [ ]) hosts);
         AAAA = lib.lists.flatten (map (host: if builtins.hasAttr "AAAA" host then host.AAAA else [ ]) hosts);
       };
-
-      minipc = {
-        A = [ (a "100.100.2.1") ]; # tailscale IP
-      };
     in
     with hostsToDns;
     # vps{1,3,4} contains root noratrieb.dev
@@ -93,12 +89,6 @@ let
         grafana = vps3;
         infra.subdomains = hostsToDns;
 
-        # --- internal stuff
-        internal.subdomains = {
-          immich = minipc;
-          paperless = minipc;
-        };
-
         # --- other verification
         _discord.TXT = [ "dh=e0f7e99c70c4ce17f7afcce3be8bfda9cd363843" ];
         _atproto.TXT = [ "did=did:plc:pqyzoyxk7gfcbxk65mjyncyl" ];

nix/modules/paperless/default.nix

@@ -1,24 +0,0 @@
-{ config, ... }:
-let nasDir = "/mnt/nas/HEY/_Nora/paperless"; in {
-  age.secrets.paperless_env.file = ../../secrets/paperless_env.age;
-
-  services.paperless = {
-    enable = true;
-    consumptionDir = "${nasDir}/consume";
-    address = "0.0.0.0";
-    port = 8010;
-    environmentFile = config.age.secrets.paperless_env.path;
-    settings = {
-      PAPERLESS_TIME_ZONE = "Europe/Zurich";
-      PAPERLESS_ADMIN_USER = "nora";
-      PAPERLESS_OCR_LANGUAGE = "deu+eng";
-    };
-    exporter = {
-      enable = true;
-      directory = "${nasDir}/export_minipc";
-      onCalendar = "02:25:00";
-    };
-  };
-
-  networking.firewall.allowedTCPPorts = [ 8010 ];
-}

nix/secrets/docker_registry_password.age

@@ -1,5 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 qM6TYg 0u8KWoP0daJZA97H5KkNCSn839ObF87VYU4AChP2XVw
-PqtYdZR3xokf7iIQ9khrz2pt7n6FipWn5y3bmzDfdEM
---- 3tTg1eoL9exHUTtn3Uww7xWecgmzf5EyyQEZ//Bbjic
-’|˜H¦ôLXñ
Zºõ'v2"ÕóÈ<‘K#9ÿ$TÔûÇ	Ó_Ì«
æ}^aoÜ4¤
+-> ssh-ed25519 qM6TYg I4FIet5K6KGjWaCvKbhK7UV4LFJthRpRVDO/FoARzxw
+F/KQtQI78KlLe1jT84oxdg4UG8QuG8xAVAutzVM+kJw
+--- TEgDiZeZQL2K8Nq/xqUKrkPKSXyO5NgRbx8SkfGl62o
+(L× *‡2þ¿ëÊÚƒjö¥E‹D*
ȹÅ^䥶IJs<C2B2>´<EFBFBD>yð:…7
o†Reâ

nix/secrets/forgejo_s3_key_secret.age

@@ -1,5 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 qM6TYg z5yLpu5zJ9m7Ukl3nEHZND8Ot2cYnADJidYjELzfr0k
-qy1n6TSeWniRFXLc1Zkpvz1+pmjFaMga0BeSE1q6RSk
---- fe6vqb3f0bRvXlQG4JglZ0h/At5kUPIM+VkRh91BCtY
-†Ã"Ô.O†ë
J‰±º7ÄçªÝ6ÛàÜ~Ô¥SõñHÈø»ó-’4¡0’ýÍ[vA¶D‡ÐÜ=‰´²^T°ýy"@A¤‰@÷,§¼ÝáéüPÛÝ|¶q!ØŠM
+-> ssh-ed25519 qM6TYg pA28Ib4AvSxoAZuGE7ZDW7CpA1GQkYm77WKNahcUFEE
+HjzZ2b/iVig4reIgU3z0O1El+tct50LS5fp+SiQB+Pk
+--- ExFpE2FxaqSuuSMtQTU+kzVz4rI2SriLKhcy0JHZXPo
+KÀ¦îÐz)`Q=¥­ýgXŒµgì èµ}<7D>|ÿ
øªR—!Ùw›D6ˆÖï¿é?^4ÜùHγMV]¸`7L0TŒÏ6ã1×ûNãøŒd<>1\¬Ø×¥C~Ï<>êF±¶Š«ü›

nix/secrets/generic_backup_password.age

@@ -1,13 +1,13 @@
 age-encryption.org/v1
--> ssh-ed25519 qM6TYg WSRKNimMa2qdIrTxZIsnybHi+gzOweCGmCx2D3DPciU
-e6MO1QIL5FI0ATaR8hBUeE2ayLoyP4P7d5eO7liMBHg
--> ssh-ed25519 91VHug JZjoc5tcVSQjIpbVGVca4P2s80Rb7NTIEKPhlXx9wQ4
-QWqufjXwphL4Kes5Ky2tWozdusA5AJwqgzT5JWCQbvQ
--> ssh-ed25519 XzACZQ ek1dpX4Lqf6hd13B0dX06tTTmNRhZswxV3W1gBLKkXk
-LQMnAxrr3ZfUc3Brn39BzIdyBe8Jma8LSML+eaBuKJE
--> ssh-ed25519 51bcvA zA9GHEGOXETl9zX0yoHHB9B5On06KlEcYRba8eKGKEo
-yPTcsFhDLiSLpWoZX0b7dNzZmBaLTUY8PSMVFCUzlRA
--> ssh-ed25519 vT7ExA N7U+hiTEzwKvglQ0At36e/p0TTA7xVRb7UvuX/4Bbjs
-acP9zBODifOsHVmM7COfBX+tkxZIPnQCUR0TskHacQ8
---- tOLU9ascA2rI4R0oIg/0vsn2dEC1LBLFN6TFRcyrcvI
-{ÏÄ‘<C384>‹q.忳U×ÙŽcO¹Å)¨ì|Â¥ü,+^]¥Ÿë?­©PÄ»$3mº4©Ç¦|…cõø)ó.R6@r‘]ˆ½´
+-> ssh-ed25519 qM6TYg AcP/Za8jdEONeSNcC2fm0rZg1VOMvqCreXdpd/iDKDY
+dgBlpFUcvP/n86idjIWuKsx7jX6xEWQJKY+pdGG8XVY
+-> ssh-ed25519 91VHug R4SIqnNLIoIVGIR0XnUsh3RCz+20M3pWoQGJta4y2CM
+s4O6GBECMUQpUX7yhx9CrNgedDn6yomCg8Bkke+4vu8
+-> ssh-ed25519 XzACZQ OVHPNsSR5IfrAslyKuIMAZakz+k12GUGNYsGc7e5WQ4
+IQKyRtlh7lkwIdH79IYCYod93+qAqap6rGL/VJ04Mdo
+-> ssh-ed25519 51bcvA NYivGhQwqPbjLY+Bb08ow38Rb1SBfbEotPwdDr/v7gE
+VRT0QUnImc0unH4DoEg07+PhQ0a3IsJRrJIcgDzBtjU
+-> ssh-ed25519 vT7ExA 6gW6MAGGmz7wqrE1cNgAJqhLyLBDnAkh3IFB/EJf7Us
+nhE8i7G/n/CnLTOUYsprFFjWCA+v/CmOpYRB8dAAjaE
+--- WvW+S65yf7YP+UsQH7VY1CSRqIFyNQAMBzVDCKcgk28
+²±¬wBÑ<EFBFBD>*çN¿%uz>¦Î9`?T7…­LÈìÈ?)Ñ:<3A>ÅgâºÕ0é°ô7Þµ
‚LËbxµ…aÕñÞ·$‡­?±ä

nix/secrets/grafana_admin_password.age

@@ -1,6 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 XzACZQ jIs+NClvISjvJSkJlkkGX5ZJzFge/1Nj2Wi4en/viRw
-H1sfzg7cCWmCVg9GpFF5QNVVJjllxbmt7wBETRfM8hw
---- hOo2vi9EjLwAa8PQzJGdzUZ/VIzfhM7TnPsQ+OYJzcY
-%¾f>8ëá¤ÅÃðÐÀuwª[	žl*´V(u”2‘ó)e&•äú’XÎ)
-ƼåQÑ"ÂX|iOÕôÓ,'Û<16>;æä<C3A6>ItʽoÚZËÕ<C38B>kÕàÓE)ÐÉIÈ —0v/»ë?
+-> ssh-ed25519 XzACZQ 3nDPKBmskuTAvsJAqjRdIWyRBmz4r6sPAKkgUu4DWV4
+VHlijfVCMdwh7VruZkldVzEZoNLanXxq/yDzmiZFIao
+--- glAFu4uwb5Jk3cSyOCBWJr4BfJVAi9HxzWkvTVm1dZA
+<EFBFBD>ƫs
<0A>ȷ<EFBFBD>ocp"<22><><EFBFBD>H<EFBFBD><48>഻`<60>3<EFBFBD><33><EFBFBD>M<EFBFBD><4D><EFBFBD>r<EFBFBD><72>P<EFBFBD>avEP#<23>9"b}%<25><>
<0A>w<><77><EFBFBD><11>Bo<42><6F>i<EFBFBD>l<EFBFBD>Q@X<>C~y"<22><>zP4SԊ<53><D48A>Xh}P<03>æ<EFBFBD>ڡ9<DAA1><39><EFBFBD>

nix/secrets/immich_secrets.age

@@ -1,5 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 yMKb8Q szKG8gw88EAiUx26fzY/pYMVb7Vb91FZC1FEQTYRZDY
-0jBl8757lsXnxWE90iZLJcO5VUXz+E2+7m/ZfNq87J0
---- huOResyzGVCip/Sdoyvid3TxFI01wiXNaHdZ/oGI5Zg
-*c‘ÚlH¢àxôAhã5H(d‘çŸUé'ònÒ˜;M.Vx}‘À•"Öf· ø«§³9Š¼fß~JvÍ9–
+-> ssh-ed25519 yMKb8Q wDQ9QOIpJMfsxGr63x9PozZEVfy1M0XvW9MvIjBjlSo
+eAbDN8ZB52vcC1zEXKqjWUYb+vvIJVQ+f9CZmk1Jcos
+--- ZRGd4IncBO5g0BIoezzfvCxNMAVP3cgmsF8Co06u+fc
+Ui¨,ž•¥Wÿb%dõ9º:˜dŽ¤Úq¹¦È{û
À®€Å½Lš[M<>£	,Ýd™š§8{6

nix/secrets/killua_env.age

@@ -1,5 +1,6 @@
 age-encryption.org/v1
--> ssh-ed25519 qM6TYg mMvnBUGVS8d0di+drDXo7mws4Uz5T+nZmQY9uUpKfQ8
-rea2peORLvRF6qYtGKFnylyEdnV0NTc6QO3xSgp/y1I
---- xyeBOfVq3hwyckUma5LWOU9cWHzg/XY2f8T/0Vc+njk
-G6kN0!èUm<55>Ÿõù[rïH<C3AF>§ÿæꟉät}׊X'ÂyqÛL³ûbE…ª“Y®°ý:ÚÍn NHnHàƒÝ°Üöù'¬¼<C2AC>¿ÁãÛWœ|©3…Òøz{Ù¢ºà×
™É'äµN&M`#²Ø
+-> ssh-ed25519 qM6TYg 4XizqcJTul2c4nKebIgHNBlX1wfNM6ZdJIi+uD4STCI
+wLKLC8dfC1jVWNLQR2pmJM3+yvlILUkn6be+x/l1Se4
+--- kgeOkLbbLqXAK8urZUOVhqPKn4AWulo4hGbOkgr+fOU
+þþ§¨BøòáSæXN<LÃå㵆|sÏ®à;Ã<>Évî|»¿p`9ª"ˆèh€ÂUÕiçn8¤ûÅêdêŸUÕY¬¸àèžÇ«œoPuVë¦àJg‚Ô7áH)#ÌG
+ä«Â¿îu

nix/secrets/minio_env_file.age

@@ -1,7 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 qM6TYg OO4FC/zdYJPzw8ujHG66sX2ShWSrWfCKRj1z9FYOwyU
-84DDDS2TPxxoGxxaj4WLJN6zZfVIH7m1xC1mRMMzBaM
--> ssh-ed25519 XzACZQ YydvMTzqlr24U79p1vCZ0DIB1DmLNxp/kLptb5WtmCI
-KaJ0zuNwVsYr0pLRB2MJIix22xTdujqspFPISU3Q9EU
---- TzKmJkMsYD2ZS7LJw9qdVRsBeoxMPQjOyovIoopesMI
-˜ƒœŒ×ÎøÔS ´•âúp+²r‚ÔG<C394>F	¶"
ë1Ñ9ÈßÄæ,’kVñKÐЪ¤¯é<C2AF>†S¬
ühŠ<1A>nhy·ldšFX+£×ÒÔ”dˆ;<°fLí~¹Dg‚-'C„‰ÔB
+-> ssh-ed25519 qM6TYg bv3MPWeJTJj/lrwKDBAv4T+OrRdD3ViwX8HLCmCKghE
+MGP87vT3Rmf+aqhMMXyZIs4OeMkS+uc+je6Zkod0hrY
+-> ssh-ed25519 XzACZQ cUkJyWCO6HkdxCqSnv9onmEUhEQY+Pj4seR/lH8KSAg
+qTUgF/iT2IoJf7UOleaayWbkJbn5dgSVHKctKWnqfIw
+--- BOvXie+k6OIewLDVF+Rx2YzkpytshqkFGCL/uYgljNQ
+…}ËpˆŽSS  íy*Sp*>ŸÝ–Å
¹uí¯:0bŸŽ:=)
t…¶ÍS\HNœbòµ9_m‰ØÙ<C398>‘jµÚ{<7B>‹)˜º(­<»3&Ó˜`ÑR<>	õ¸[«{aÜ“Øô!Àòó

nix/secrets/openolat_db_password.age

@@ -1,7 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 qM6TYg anB4Ljud6na0zsnFkNjgBcicE6kFUg0y2xTlohEUggI
-gUTv83/Mktm8CyXdKEf1eu7NpWJd/hmiGzKs91WyPCc
---- zxoGip/R/tIH30MATCWht9P9oUxU//L/jnf6T/DwKEI
-UĎÍŚ5ś¦f—śqˇ{¤ĂÎ!„ł´%ĺZóŔEŠűó;í¦
-xČ»é‰vËn´’k†Ź ŤľtéÄP\-ť1PŰşŔB}gMn{3ĄÄňo<C588>ąż *]łÚ¦Ä0<C384>—zŐU5Č2Ůß<C5AE>±Ęý@yär®UţgAé ŕ-4ă¬Ń)Fĺ
-Ć>"­ČUĄb‚
+-> ssh-ed25519 qM6TYg 7Nt/x/IT9ofXjrRRV7coT6nrrCSOCkqUqflm1oXLXTk
+BafDaEiVpuT3SDVXvuD31WIKe0QlvAGoyn4MzUm9LfQ
+--- BsY9/meRTzX5oCBD+w9f+2TO/TdPD936xOjgtQMWuag
+RN|å-ò
+–[¯6Š‡ùq
+rú7ìˆÎd% 襡¬[3K`‹I{Š!™u5™¨‹èƃnÇè<C387>ÓºMvo÷dÿò§z A…Ì~á‹åâ“ûò<18>ó–Ç<E28093>Tƒ	QñåóG¸h?N¯“w/YBëQn•_ñ`¦ÜÕÃÍ_‘€,¿ýZ‰€ƒšF”VÆ8yw‹

nix/secrets/registry_s3_key_secret.age

@@ -1,6 +1,6 @@
 age-encryption.org/v1
--> ssh-ed25519 qM6TYg wkP6wv0rewclikCkz1XjByNu8dWtQgk23SW++uoNmy4
-Pqd1t5ITKxwLmBZxQZqQ1jHn5o+atN2L5Kdk02SZiDQ
---- vcfVaVUg2W8jTf+BrDYg5TKccjk0I6iA7bJEovIvsVQ
-–	EcbMf§%sÔчºß¶—Ëù<C38B>:¨©º˜Õ¼^zòm7Ž¹C”ËnêŸD;Ûá¦3}ñšZѼáP<06>’Æ5%
£¸B¹„ì1­CŽu`³?`4÷¬z¥õŒ­}my)¶^Ÿœâ¤…Ü<E280A6>8Ü;¯4vÒnÊáTÿ‡I,SŒ}x}Çû阘RC†c¦º"¥Ið<49>z•h
-ª;"²(?^¶aŒF»oO’“0zýcÝÊ•3
+-> ssh-ed25519 qM6TYg /73Z7R1RE4lfUfVSeJqZjbGA5yjygfrxKi5iuMMxrno
+tsbPaW/x9HFT/tG+5F3n/3SsuhmswVIfHVLNRAzdiP0
+--- jHapfTz6oq7gdrgBn+XNQdMZ67DbrFPBY6KKzb+wfjE
+œÅÇU1ör(RßMN8<14>ÑOlè$ùüÔDN¦u±ÿ³·ØÆðŒ´¿3ê¨Jo<4A>în‚ÜBOc%ÿATµ~RV##–[‡‘íù;3*½¶±Þ6˜/Ð5gD€]ƒö˜2À¿žñÿŽÿñ¢%Õfü)fxv
“
+¼›]Ìé¥höî<C3B6>†…:ßd¥{_O½~Ñ2Œ‘t¤iŒz28¡Ï ÒW>ÐêBT(aõ%<25>—ŠŒ•™¢Í‰l`é³\õ

nix/secrets/secrets.nix

@@ -32,7 +32,6 @@ in
   "website_s3_key_write.age".publicKeys = [ vps1 ]; # only used by Noratrieb/website GHA
   "does_it_build_private_key.age".publicKeys = [ vps4 ];
   "immich_secrets.age".publicKeys = [ minipc ];
-  "paperless_env.age".publicKeys = [ minipc ];
   "wg_private_dns1.age".publicKeys = [ dns1 ];
   "wg_private_dns2.age".publicKeys = [ dns2 ];
   "wg_private_vps1.age".publicKeys = [ vps1 ];

nix/secrets/wg_private_dns1.age

@@ -1,5 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 LZU5Eg OKL541Y7HQSCBtUqWQVdIxZK9HiWeaPyAWwkcj/bsgs
-PviTqNl4VLbQtErGDpXFEJSeRf59Mx0v3qcznEZ1tTo
---- yRq8T7TGu/yBKFx2r+t8gbohrUHDkyXdvsB3n5csgpY
-kMõQl?N'!œñ¦.LlL¹±BoDæ§Y‹<59>ï¼:¯¹Ö_¹‚Vù“cèàžðtì¬ci= ã3ärKv¹<1D>MÛfîDuúÑ
+-> ssh-ed25519 LZU5Eg 3Bde2BfrG8qdngKCIg4xeXnkqqdrtcAZfW0REYwkmWc
+0Js204/ZpkBK9mDZwhYOY1IGW8yA5L/iMAmrZR1r940
+--- V7Xj3KkcueKzPhl6wjk12zRrEmFPMpUcQd799p0Dqr4
+Ö~”TO80
}	ó‰¥ÕQ.<2E><0B>…{°„q6ÑÚQuˆù׆ú%NÒ6­¢ÐŒÁaÛ|”—41Ö€åZòÕ€Ò;DözÏ*»^©ÉôÑ»

nix/secrets/wg_private_dns2.age

@@ -1,5 +1,6 @@
 age-encryption.org/v1
--> ssh-ed25519 5bWSnQ KNg5E8fLL/rDMbRGQDujv/NaSUVGY/HmxFgIVK7vox4
-bH+Gywr/dDW3UPfQpLpWg9sVZq+LfE2aDs29chCpaDk
---- mYTYZH2KoiKyxtfrxgIomqaaCyfnLVNwXkUzp+cDl7c
-ç«Q}ðBö¿.Š$bðŽqú¸ {4ù;5-;†²3ôJybleú÷ÌžÜdÞo¾³#i‡(ý{ï²Jè­<C3A8>–¾­ÒyÇ•<>>˨]Ô
+-> ssh-ed25519 5bWSnQ V/5bLxQqdZEF9tgSPGgm7nEpnyNGScgSVfjS3KOvxA0
+oKHKz5IIZNdsWhBCTCqvHVLAJGC+LEC7RuMgQHI9Wkk
+--- 71jtq96kfCYsB8UGSccc2F6qWtj7DO658MeVWSD+L64
+U”XĄd2ŮC<C5AE>¬lEV~FgŮđiíďčöpŢă%áN6ů
+ŮÖt%͢Ż{LZş@˛ÂB9$ŕ{Żg&PŮBHQ¸Ű<C2B8>%4

nix/secrets/wg_private_minipc.age

@@ -1,5 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 yMKb8Q 8ESNEQZaTfjWl4qGZJV/GPN+tFozDmiZZtXCctRD8yE
-w2+Pjzmotz2X0O8ehb3TTOLk9YCk8hqRqNKfNNnLQIw
---- pfmBROvSCK/41HS44uMmwU5izVCyHrRirYjL/WBAhZQ
-m í<>*QÀØv"­›<>¢+˜…JQ®ñÔÄ€ý'òPø´hD·¡>G’¹ð Jû]§
êÀÄ Ÿø‡×LÝ©¯ù¹¼	ÁN÷žÌ¤Û€
+-> ssh-ed25519 yMKb8Q o1qLnZBL+o8wrQYM6bo01DsCKVmA/NCzLe84aO4NSlI
+iEnVZGcr4wyMN5b5f9Qzt1lmycZVe+km/8ApNvq6ME4
+--- MiV3GRLz1rEy283zGsbTtrAbQgmdW0pobJE83BmPrmU
+<EFBFBD>¶ƒéƒG^÷ì%L˜ûj,´¶sC€ÖIC&@Ö>#¢t<C2A2>$.2ÏÿRñ+p.‹µ4ðù
¡•ªkÃeüÍÇ^+”sCg–õn-šz©{

nix/secrets/wg_private_vps2.age

@@ -1,5 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 91VHug nuqwTTdoNOLWvbQAIhl9WguvArxG0jNfkFn3qM8VyjE
-NvhMCreuxdWHezfH8cF4wXjO8ZbG7yQC8+sVnWFghFM
---- OGewUdFWzL1PzHGBHB7ulJVi5eX6UXKLFUyfbvGErmY
-Ê‹Ì.\†—ŅدiÒ›ÎóÒ~`êQ–,¿§W;m´‚<C2B4>­pQóTY
TÅz?]¯£T-sÃ4)ÑZPý,6ŸH5bìÔ„7—ƒh
+-> ssh-ed25519 91VHug 2cqCCA9Di37CBwXKIg2nRfgX90fqVQbIDlvbys7uSCQ
+IKMUR81lUusM+BqXSMiuCEyfeAfup0ljLCZ09GVjv0M
+--- oisBggLksra17ZbAQcWuIX3iOo2hE+De/mtXpmDDXGQ
+ÕÚ—‰<EFBFBD>¾7•¹¼È<1E>¯úf-1·|H8×ÄéB‘U¬]ãÄjéŽÂq2ÿ
I6÷Û–7³yBL°4ijÈäõã"d_¡+Û%ô]×U

nix/secrets/wg_private_vps4.age

@@ -1,5 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 51bcvA jfwnJ0gZN/FeF0krZ/ERWq/eqKBGwANBwea3xCJLeHw
-x8ccoxcT8Yn99d6aWzZ667jUjE4dHPfz3ZIg9qG4xe0
---- H0b14xAs2FTADz89JQx2eOSmAgN3Rs5A2o316xzISwc
-ø’@ï¥Î}`Í &9Úæ¶WjWSõEáãHÄ@„ð—ˆV<CB86>Ë’x
[…’±Üá?¢öéU´u.ƒ½Ø~ìÄø–J*Òô7‘¼Ò·<
+-> ssh-ed25519 51bcvA CkaPksfSDKWRMaL4FV7vI4VZ2c8Fd2RlyRW8DEkOkgM
+NrvBSSPDrwNL+YKgBTHqQuLhKgGy1+/H51JTsA70Dww
+--- 6qkEageKcIweJ7wWcqb2HZp9zJNTyLcoQ+Gv/+O6CJA
+(¦©,¸Ê<08><>›zfßðD8¸Ÿ)Šü]¥Î|P+Úáaƒƒ‰
ñ{n·•ƒ$ ¸Añ<41>x"•ù¢]綤©è…Kî‹æÕð