feat: switch to local agenix-rekey storage mode

2025-10-11 07:10:39 +02:00 · 2024-02-26 16:45:32 +01:00 · 2024-02-26 16:45:32 +01:00 · 040c2177bc
commit 040c2177bc
parent 124e1c289f
146 changed files with 794 additions and 11 deletions
--- a/secrets/rekeyed/sentinel/072242e0bcb6e86ccadaa701fb57c37f-wireguard-proxy-sentinel-psks-sentinel+sire-loki.age
+++ b/secrets/rekeyed/sentinel/072242e0bcb6e86ccadaa701fb57c37f-wireguard-proxy-sentinel-psks-sentinel+sire-loki.age
@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 yV7lcA WU3oCP3q6zkXVQEXI/uv7JB03/K+i6p4m+nUMz3L3QU
+PEbWF9XjcfQXVcuiyhodcBl/XVERCg5oJsk8TuKzrqc
+-> oTsIeb-grease uLI,`
+g1xmTjqgDqtCniefQoU7UW0gAaysREMAllZOeqX/DS3lERTgRWW0OftZoOUgSWjJ
+WOUGrwEUihKGfJEGSoz68lKubXyX15/O8fxIkA
+--- Z+IN3JlHgBF2mXJjwEX0Vdm+DqYtVkDghDUPXzsQJmk
+&Ù�¾S
¹%,3•åHuÍ¶©‹â<Åï°Àº9¡æÅ˜7®Òðˆ×Ìóðð>;úW\F]HtKÝÐ>üÆ£dfú\ÿ•È"k?kÎl±
--- a/secrets/rekeyed/sentinel/10eb891141914aa923cbc030dd687425-oauth2-client-secret.age
+++ b/secrets/rekeyed/sentinel/10eb891141914aa923cbc030dd687425-oauth2-client-secret.age
@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 yV7lcA hdAvwu5oFgWfiZEOyoaAhGV4BVmCKN/d+l3VsQmxWyM
+JFyAe/OGZBO55PeoXCFKXUovC/mJBKKZfaEg44qi2ZQ
+-> <-grease }wR4vbz BxX
+tE140Ip2c+32b7OmU6BwoG1qgbdO+mj5bv7pUTK+GIbpCHgg7bwy67G9h5jfDUZA
+k9JbKxT8Z4esuQ
+--- naqVwcLk/7rO67+TWvBImAT6qQMkMahsgZsGhHqTtyM
+õP`V—€tä`xæ¶w4oÌ{�9ý”ò•ÄiTF1éÞkñ'ç7Dh œø—…ógOdÄ\5Ð-y~{–<»ÿs� Óë7<ºÕµÜwlê°^Â‚É`»ko',â<F^»I;�[[J«p
--- a/secrets/rekeyed/sentinel/4cff83edc1d2b2ca516f8cb63fb06782-wireguard-proxy-sentinel-psks-sentinel+sire-ai.age
+++ b/secrets/rekeyed/sentinel/4cff83edc1d2b2ca516f8cb63fb06782-wireguard-proxy-sentinel-psks-sentinel+sire-ai.age
@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 yV7lcA /KC8F/lM5E8cNGSk5aDjhxYEQJDZhv4fdZmY8tOd0ic
+dLzqTpJRzwb1jmaQB7MqOcMYoh/1jpm/u8AK+lG3uMI
+-> NX-grease mWzYBZ k<&L`D_
+dn3tatoIJ8BZuGlJ
+--- Zxr1wrJSf6CGK+EpHNZyobURdv+ISrafHBRrBLhaUZU
+‰(µ&ÄÄíî7ªËQi0§#a:6Y¦£ZÕÊvéIèÒkál=Ï¢dÜð¹îKÌ
+7vw]qãÅ`â×±Ò!_“sÓâòóq~[a9à
--- a/secrets/rekeyed/sentinel/6b629abffe5002efc1803b805b260192-wireguard-proxy-sentinel-psks-sentinel+sire-paperless.age
+++ b/secrets/rekeyed/sentinel/6b629abffe5002efc1803b805b260192-wireguard-proxy-sentinel-psks-sentinel+sire-paperless.age
@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 yV7lcA oPQQLcEv6B5w1O7jYdWEMBrv9KhZoJZj3YpWyLkppjI
+sPcO37vXPmp3yuFxiBaat2w9Fu3fTQ/lDZNxI2lSMFw
+-> Aw3'S-grease dY8?$j bK`6K-
+EQBVd4DRWrHulnv0xWgwOKOV
+--- SRwjGzreYm4hPfXz6Es+fgJpdBFbWLOARH9sYaMagdA
+¸ëëñÄ53Jc2¼É¹Å_ï�ÿ9æ8Ša-¿"ùæÜþ}�C(TãÒâÐ¹ÀC�RÎµ^m§P_À5;û›20-cg…ræÿ
--- a/secrets/rekeyed/sentinel/7763ee39d674c2951bb654da9e8160e5-telegraf-influxdb-token.age
+++ b/secrets/rekeyed/sentinel/7763ee39d674c2951bb654da9e8160e5-telegraf-influxdb-token.age
@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 yV7lcA GMd3TCUZlN81Qn2ErQ7xNF4qf00EMIq1zVU7y3KBJyw
+aFerKJQyczWpqHBw8GzuPRik5l2q8Dcfayv9iWmylFI
+-> s5-grease
+6Fq/nl2o55qJXzEckhPViW+WnQlg15q3owzInp6zdapT/goGy5sfLv6V8Pbv+5vw
+ScNNUTYHqqinBeIj9q9V5nNSNXSBVwXtw3XXVtUTfxa398xgmcWTjvXj
+--- DHO4SUytzn9OmQVF5iiYDRepISCTq/t7ypoKQ6ASucA
+ŒÇ,ÔN`pÈæ¹TìJFƒ²Ÿì\uŽ¿€ÐUÚºûy£¢ÎmÏ�¢&„éhdTaõÊëæpb®^‹ÃdG\Õ%½]ÙLùÖ¶ó
--- a/secrets/rekeyed/sentinel/78c6abf1b7d6b9e66e38ab64c2b62ac9-promtail-loki-basic-auth-password.age
+++ b/secrets/rekeyed/sentinel/78c6abf1b7d6b9e66e38ab64c2b62ac9-promtail-loki-basic-auth-password.age
--- a/secrets/rekeyed/sentinel/7bbc738a6b7f036671566a0dcf16455b-wireguard-proxy-sentinel-psks-sentinel+ward.age
+++ b/secrets/rekeyed/sentinel/7bbc738a6b7f036671566a0dcf16455b-wireguard-proxy-sentinel-psks-sentinel+ward.age
@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 yV7lcA vQsqojxPobKC/GApVahRbbyNBINS8wIuu8duOrLCmQE
+Jugt2kwD/csBYt+zv1K8G4ZTby3/3FomloJTzYLPTAY
+-> '+q#4U3t-grease
+QGHRmCylzgRVGaKpEWSFt9e5Wm6Bm5ctgHEPWNKvrAlsJN12vUkt3uCtZmy500S8
+gKw/rNxTU2sUhL+qEJQuzbvpjBvepGBm6QOvh4n9vG93Yfq0+nFzS1A
+--- 1VVeULtF716DG+ZFn0YFiDx2bfvAG5fA+3V3uuIZan4
+õ[5|RÕœœ_ ˜#A–Kr�ƒhJ®Û:šµV¶›	ÞjI]m~_Nå½?„”9ÐM´6Ûâ€é�š�Ó8aD5ïé"|E
--- a/secrets/rekeyed/sentinel/7c38becedebd00300f40c49b430b6acf-wireguard-proxy-sentinel-psks-sentinel+ward-radicale.age
+++ b/secrets/rekeyed/sentinel/7c38becedebd00300f40c49b430b6acf-wireguard-proxy-sentinel-psks-sentinel+ward-radicale.age
--- a/secrets/rekeyed/sentinel/8166227a8ef4f94f7cf05db42a0fc07b-wireguard-proxy-sentinel-psks-sentinel+ward-forgejo.age
+++ b/secrets/rekeyed/sentinel/8166227a8ef4f94f7cf05db42a0fc07b-wireguard-proxy-sentinel-psks-sentinel+ward-forgejo.age
@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 yV7lcA Wzn5BN28ACpt4ukAc+jp+Gh2/perUpne0wsYy7Hz9EM
+aQ3Vof6f3SLADAVQPdXnaQ+rneVGEkLNwPjVGllXyQA
+-> Rb1-grease U<UJ;O:
+wdQcIVT17ccLJ+gsn8yDCjo4T88OXj13kUAnEtKY5YGK6Ks24VLEf62W4c0i05xU
+Agd9y32KyNoW4Zv8hjRaJNkyoMAycbX2JtcG6NHbksZza8WA
+--- RWlKrQTG7IHt5L468FW/uQgtXbX+TEAn77DIZd24QCA
+K3öuð+‡Õ~Ò÷(>ýð=HÉû;…|ö)ôEÝQåˆñ¯zŠ‚ÙŽö‚\îh´S”9	ÁC-å=ÝÍç “p»ß…›ºK«Oí´@
--- a/secrets/rekeyed/sentinel/82f41ea6b34793b71abb41561f9054bb-wireguard-proxy-sentinel-psks-sentinel+sire.age
+++ b/secrets/rekeyed/sentinel/82f41ea6b34793b71abb41561f9054bb-wireguard-proxy-sentinel-psks-sentinel+sire.age
@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 yV7lcA /Cugi4shFL+i2rA3QKca3fF9d3qkGwFulIw7j7gOjGc
+jBT0WSOh++8pZymX8Gvl87mbJcLZivs4FZ4+wmu7yMI
+-> 5d=m-grease
+TeUeyjIHnQW06IqA0OmOaclSHKRTYmzWCbjE7RFR/dOugt+aev4vZR5YkPQOQ8O9
+fUWXIb9xMvc3iHlrM/aF9C2NuNV/VHDGQXI
+--- J8/LxXwLwv9ab5+MkrSE9R/69iVSPZ8OaZwDXWieT2Q
+×LN|·Jû
?G<”gº‡ƒyI³ü[Xdt’>¨6ñð™nx}}V_.…Ž�£
¿£ôB¨¡i'Q¶×Pð\£õÚ8½Ws/òí:
--- a/secrets/rekeyed/sentinel/8ae8ae58c3031d4a1824d53213faf89f-wireguard-proxy-sentinel-psks-sentinel+sire-grafana.age
+++ b/secrets/rekeyed/sentinel/8ae8ae58c3031d4a1824d53213faf89f-wireguard-proxy-sentinel-psks-sentinel+sire-grafana.age
@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 yV7lcA Jbk3SNa2fr04SrSAwMSmXExtp0uAK5EUOwxArF6v0Do
+HcvGGAgOMmj+EnOOo7e8LYfNuTr3X7rzZALSY6Ooa6g
+-> u9i67h-grease
+pXfIGd4+kcYKAChdMByKCWzWqZ29YA79mP2uLSG/mFgmGDnVSrgMyQKMwI4HVPpU
+fdJdrCS5g+32Nj4MgH0I9gnAC50w
+--- BzTxIpEdme9Q8wayw1LS7cWzgUmltJQdRi0K2Pfrp8U
+伪�b赠槯籟﹩v褰oq吖;仧皒z1壼袰糥婒涹T0E坃噾e@F�qe鷹rh蕓5F<僎b}彆 ,皹4,
--- a/secrets/rekeyed/sentinel/8df8bc7331f1c1b2112f03dbbbfe126c-wireguard-proxy-sentinel-psks-sentinel+sire-samba.age
+++ b/secrets/rekeyed/sentinel/8df8bc7331f1c1b2112f03dbbbfe126c-wireguard-proxy-sentinel-psks-sentinel+sire-samba.age
@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> ssh-ed25519 yV7lcA PPKZ78iD3jThcf5YkIOC5hKTeDHcT77g11UZ0vc8IjE
+lgkPYZAMzhVZpUSk13rzBJTDW1pNeOyuVAkNpqJb4lg
+-> %%JlO}-grease C[7]eK3F KX &_=S \FSSf[^<
+
+--- Tww9Yj1LeH6zq/6A7TJo5i9rMUNGV0VN6Yyf44aRnpM
+ÑjD£A6%ß®Z4áäîˆ]ÁPq ¾Òa!b
+¹”iük®Kø† £¹
�atèž¨N7®-sëæ5¢³šÞþ8@b“
+‚¥.
--- a/secrets/rekeyed/sentinel/91eb5997e276d968bdb36f794e4bc903-wireguard-proxy-sentinel-psks-sentinel+zackbiene.age
+++ b/secrets/rekeyed/sentinel/91eb5997e276d968bdb36f794e4bc903-wireguard-proxy-sentinel-psks-sentinel+zackbiene.age
@ -0,0 +1,10 @@
+age-encryption.org/v1
+-> ssh-ed25519 yV7lcA 6ACSnnVp2xhzQ/QVuf/HepfEYoSpjk30q825mzwRilc
+gzAkr/xnFODD2dnn0l7vzS4w7pmZwAO23J6r0Yx9H14
+-> U-grease j _i*1$@SM jfz6.
+FqCMO4ohslThLGpAowt0DBM+UTvbn7wIgPsvrpNdrB4nY7fQHHAI417uI8K8YvQY
+/IBfSiuPiFF1TDUaV2UvHL+P2lGCMIrWvHg1wiZHPpuS1yarDdj6THomPWYkbdAb
+7qeg
+--- 1SON/pfv2UQly8bx4JlVTdj1QPLZih53h7yxAgyoddk
+¤žpß]b1rŒ=4Á?=ai�oFL¦ÕÅO
+Ü½€b›ñ¬÷bûoN5’Ëùü„gNUX¹Ý{þ2`?Ž%°|œ¤Çò»:LÂ
--- a/secrets/rekeyed/sentinel/97efc13839451420bd416550957cac86-dhparams.pem.age
+++ b/secrets/rekeyed/sentinel/97efc13839451420bd416550957cac86-dhparams.pem.age
--- a/secrets/rekeyed/sentinel/9c5009ea086f0fc2b60ce238d69a5066-wireguard-proxy-sentinel-psks-sentinel+ward-kanidm.age
+++ b/secrets/rekeyed/sentinel/9c5009ea086f0fc2b60ce238d69a5066-wireguard-proxy-sentinel-psks-sentinel+ward-kanidm.age
--- a/secrets/rekeyed/sentinel/9fffca914e5679f992e3b56020a6f961-wireguard-proxy-sentinel-priv-sentinel.age
+++ b/secrets/rekeyed/sentinel/9fffca914e5679f992e3b56020a6f961-wireguard-proxy-sentinel-priv-sentinel.age
@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 yV7lcA 6nEEWsku1isf2Z9jNOGAybP4p91o+WbGHKxbQTSpdjc
+E39nwosdA9PlmPdkST7/p/HNNpf7VKprEMjOstx/tsI
+-> _$r%K5a}-grease S%MT7D( p
+wU73rk+3RqA0uvaeS7WVUd/E5RZJhGuSTwPfr6NyyEAjOZYUmnsWkTU17uDGll1Y
+iO4C7uMfGz3CUX3KMZffBA
+--- RgJrwQySTCQmEi2ckuiJMFPClbKmh2jDwzyyFPsNPRs
+Fzþ±6‚¬_ R:ÈpÑwè�’šŠ¦¦Aß’93žÇ¡äQB*ÁføE·’µðgþÕÿ)ˆ=é¾îTaDÉQ,øW Æ¤q¤ùiàžöº
--- a/secrets/rekeyed/sentinel/adc68343fd1e82562f7f6fb8666deb22-acme-cloudflare-dns-token.age
+++ b/secrets/rekeyed/sentinel/adc68343fd1e82562f7f6fb8666deb22-acme-cloudflare-dns-token.age
@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 yV7lcA fc+QOI5z25YvEbAgFjz9lF2wEsJ0tI8I55hKtYgDpxc
+uFtFad8zWDSsCQzfBhNbidEO83ibVWcInLEqYeesYU4
+-> EF;`B|L-grease 6 oEb.>wj 1dra$|
+6/e6AOPR2yZB5bwQ0t/kGNe7ePTiG4tr0rzH
+--- qm+uzio7+nPDgk2uYChr6sUgx4hsHbBlap2qgz8bVeM
+`>ûäOfdÒ¸Â··ÁïCNÉÐ{`)e-HÍÐÌõá`n–ÚãïŠ.Ex!©v�ÅO1Jðë4î®Äú bÊQO~(§GÈg}&Y
--- a/secrets/rekeyed/sentinel/b4bc59a6e87ae971289cddcb0f9b5a4e-wireguard-proxy-sentinel-psks-sentinel+sire-influxdb.age
+++ b/secrets/rekeyed/sentinel/b4bc59a6e87ae971289cddcb0f9b5a4e-wireguard-proxy-sentinel-psks-sentinel+sire-influxdb.age
@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 yV7lcA 3PshOxU7pN4QYxAwR5VwFhfBj6A+R8paCkOxexwV6wE
+rH7Vxcp+cFV/t8YsshwxrudOyQolwTfYho7uSBikxOc
+-> "p:,-grease b/,$# i2>| !3'PhRX L2oe
+jQUqItn0yBaK/yAaU0BkWyCW6nI8VzAg2TSHWi07Cridq4Yhi6qBt2kQNQ
+--- LPc4z7U7dFToMYQE+kOiXfa7HWcJzBC2ItFTf7YopWI
+µ,¹™¦@²¦b1ß’ÁÎ^¹ºÕŽÃ�ß·ÚïN�f ‡ŽÜVÛ·^æd uš¼ƒ’ÔÊàÃBf8]aoa\RìÈ°dqa#{Ž«îßá
--- a/secrets/rekeyed/sentinel/b59ba473cc37eac73a5647e088fba0ac-wireguard-proxy-sentinel-psks-sentinel+ward-vaultwarden.age
+++ b/secrets/rekeyed/sentinel/b59ba473cc37eac73a5647e088fba0ac-wireguard-proxy-sentinel-psks-sentinel+ward-vaultwarden.age
--- a/secrets/rekeyed/sentinel/b6cdc7fa8f1a41be450c482ccf7ca316-oauth2-cookie-secret.age
+++ b/secrets/rekeyed/sentinel/b6cdc7fa8f1a41be450c482ccf7ca316-oauth2-cookie-secret.age
--- a/secrets/rekeyed/sentinel/c70615774bb77c11cce79a1cc0a6784b-wireguard-proxy-sentinel-psks-sentinel+ward-adguardhome.age
+++ b/secrets/rekeyed/sentinel/c70615774bb77c11cce79a1cc0a6784b-wireguard-proxy-sentinel-psks-sentinel+ward-adguardhome.age
@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> ssh-ed25519 yV7lcA uXCq0EzD6K29NKybPKnrZuBwya66K0nYDyuO+aWXzDk
+d2bRZihmPXJD81zJeiysATWiyux0ZW6Ur6MI1ctUVIg
+-> [Wo7<-grease ;y:B :&2;! X 9h
+Bmq/m+E1nur5hUFfgt/g63iod9mI8KnD03uC8K9vYp1i3KNrvDFhsqO+gu3/Th+G
+cafjOdiM5NaeOkTQN7azihhAlcSZi0Y1Tww6sSFWtp8
+--- 8KcDAPI1eesFKSczecMSkZSnA3GW3keyCZheibYiFPk
+ä’,öøl@ ×Û}u…6mhå¶oq8éxGtfKˆ—
+‹W†ˆ÷(àÕ ïÀLøZ¼qHÙë®�„\¸I|Ô7m<«sH˜òE“ 
--- a/secrets/rekeyed/sentinel/d5dd9875b0aa1fb3eb2b914df15704ad-initrd_host_ed25519_key.age
+++ b/secrets/rekeyed/sentinel/d5dd9875b0aa1fb3eb2b914df15704ad-initrd_host_ed25519_key.age
--- a/secrets/rekeyed/sentinel/dff3a7ca6af4b2bde64b18a2c7fdec70-loki-basic-auth-hashes.age
+++ b/secrets/rekeyed/sentinel/dff3a7ca6af4b2bde64b18a2c7fdec70-loki-basic-auth-hashes.age
--- a/secrets/rekeyed/sentinel/f9e987f9a615350e98faea68bfd1d02f-wireguard-proxy-sentinel-psks-sentinel+sire-immich.age
+++ b/secrets/rekeyed/sentinel/f9e987f9a615350e98faea68bfd1d02f-wireguard-proxy-sentinel-psks-sentinel+sire-immich.age
@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 yV7lcA jwq+aERGrSBruGupY97T9auTbE+H3g8Hw3xC+1i+bk8
+IspH8Sk7HmTFgxrFY4X/y82KMUYVNaKQprqLRc49A9w
+-> %3<-grease {Y*P~G`X ~.XJm) <M. ='5bI`T
+aTqgbtmB0/xotODD9dUsQsY+WedipQ
+--- AbTCFx67d3pS9Wqv7bAsHReYYWHtvPj2+zpeL8x8IkY
+âšIÞ‡c†ý…"YY¢@sÎÛäœGËBó“Z™8ÑÊm5”�Ts?ðÃñ›‡è�þP¶{Õ«º†ßJVíM`„�f¢O1	ÑEe7ß
--- a/secrets/rekeyed/sentinel/fbe90fea6015be22bc47a2164a0f22f0-acme-cloudflare-zone-token.age
+++ b/secrets/rekeyed/sentinel/fbe90fea6015be22bc47a2164a0f22f0-acme-cloudflare-zone-token.age
@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 yV7lcA Jyfuc44CkK9kToBaORmUOB7pBQ/snZ67BfzT0BLqOHE
+rGIwzlJZ0rpbp2Hc/RETJn1+bN4W9p4tQvYt41vvKvY
+-> 6n't6HOy-grease 2 >OU}Xj**
+H38e0Tv09rCdYAv/HwWNscxR8PeSs4QtVbDCvHMlSR6NdnTrnYjvTqCL+s1NIPcd
+6Bxb6CcWOWLHebSLSi0nlcSueg
+--- +F+FGJqygIQwDayCUZGrZ2z8kCvbu6r8PHeaoK2yXu8
+:!æM<NïU�s.î}cÌV˜ðlóÖÜ0ÈGŒ
ˆ="š\Á#ÚŸHÞ,qÜÔr.dõwˆõ¡ÒcÀ+Dá9˜ë‡žR€