chore: generate immich secrets

config/users.nix

@@ -43,8 +43,8 @@
       unifi = uidGid 968;
       plugdev.gid = 967;
       tss = uidGid 966;
-      # firefly-iii = uidGid 965;
+      immich = uidGid 965;
-      # firefly-pico = uidGid 964;
+      redis-immich = uidGid 964;
       avahi = uidGid 963;
       ente = uidGid 962;
       minio = uidGid 961;

hosts/sire/guests/immich.nix

@@ -40,6 +40,7 @@ in
     }
   ];
 
+  fileSystems."/storage".neededForBoot = true;
   environment.persistence."/storage".directories = [
     {
       directory = "/var/lib/immich";

secrets/generated/sire-immich/promtail-loki-basic-auth-password.age

@@ -0,0 +1,12 @@
+age-encryption.org/v1
+-> X25519 GihvqYu6GH0tQPjc6Z8hg1HBE5px+cLbFPOEYRmKy3M
+PRjaJ6a4xwME8lp3+tGRex9A6HNoL5fyQaea1EbfKC4
+-> piv-p256 xqSe8Q AvMY4hFxNd6R69b7k7PFC5Z3+gjSexzEq7vF4KygZ5eQ
+jZEEJBFiGc7JClhBx2ggBugYkAWRpJJrxddTd+HRxjo
+-> #/E-grease !4VzL *&VJ+ ?i! LUP>1_Z%
+7H63/iGgBLY12g9J4Es6AwwIqft1/iQXyVuErXdK7gEQEPsE59koX5f7/MeMhdsd
+RfkPAbZoSG4XT1Q0IPoefZHoR7WAFDAME+jM03cGxHofUfG6jLmBVLir
+--- vSwV44jSlbYEN7HlNsKNdHx2RwnRMh6fDjWfUmVsk5I
+_%²|‚'³ˆ6Ïþ¥
+CmâÝ�¾í©¼ã°ÈiCw£ÍÀY3—~‘·»¹IoûDs9Û
+*r-ý!CwÚh€£š8f°ºb¨yšm

secrets/rekeyed/sentinel/be49300f44ca08eb81e3865253b4c4d7-wireguard-proxy-sentinel-psks-sentinel+sire-immich.age

@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 yV7lcA awWtS+CQB252be2XM3V0QwWkCeWgoa1dKFcz5sYoI04
+dIFlddOGC5BMvAu18Fu0+wZl7wt/ibrLUEbRuBG31Bw
+-> @-grease r<}]J8a _t@B b
+idF3TwJ6jb1/uUNWh66GWk7JrYz8j/KNHUMK/2GeDKluPQ6hSuCVhVuWc8pW2NVk
+s7ygyldLqL9kq4eGxWO7q3Q
+--- rqnX1+1i3keyPvwuVLoloC9GcGQuXkKVxa1giZiO/PY
+™DÄLŽFÇþÁT¹�$ºÝ´�öÒR‘%œ22ô­Š$趺:ϨÑjñaÌ€µH†ÔY2YŽ¨ô-v›��!N¾’ÿ2ÛÄuù'.

secrets/rekeyed/sire-immich/6055cb73daacbb7a0841103ca454174a-immich-oauth2-client-secret.age

@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 U8ytLQ veKTrJX4Srbh92lE3hPO4NTpeNzP/NuUmfZHWIAcTEU
+jW3uyW7qos8LSsAyQ56gZa5NBCJVUqZVu8KZHe0v0iE
+-> sVVZ{H-grease ~J3,Ud i+P
+wb4kp+Ii
+--- PJ20pWfjTwBwh2Dr+q6Gob16aGbH61ilptbCzQn0jEQ
+;˜VvK¬â_œs‚÷õ
«�qå“àP0=QbóX¤õ��ö¬s.É.i]vüÒùAï�Žè¦í->m©ŸF“ÉSxT|;{vUÇìµjfs

secrets/rekeyed/sire-immich/6d6412638f56d57f4ca694913136adfb-wireguard-proxy-sentinel-psks-sentinel+sire-immich.age

@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 U8ytLQ kjGqE0PbVbxIqRS4RdHdmhNFr8Sv3jDfFPdjnnlVj0Q
+lz5h6PSyLBXMTUTdS4uzBiPi3yNXdhsxvYw5TT3i8Uc
+-> ?~Rt$#-grease uWLiw,w> ZfFM;)
+guaxvIRwfg
+--- UFQfXS855+dhnxARJ4M5W0qHdsgTjkfgRu0yjd/tBYU
+ÑxÆ( Z¸‰TVÛJ<K"?(Y?¯TWga.°Ä¼áÝ*ŸÙ÷d6 TQ™Ö�<éŒ^ŒG,gσŸÕB¾+ŽU¦-te¤

secrets/rekeyed/sire-immich/6d800e1415841a524ca00a4bc0886b28-promtail-loki-basic-auth-password.age

@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 U8ytLQ 1x2w+U7iZ59hW1cymklltoWgBoo9Iao1YnsP0dYsJyE
+8Yax1Uq2UZCEPysMfcu/mvkO0cLdnTFJ+lLTglZEhD0
+-> Mo>ig-grease
+gyxTtneFjCxPTo53gPgqBMm/dUTNqw7SSGXZ9wFTK3I
+--- 2kvAlqhkxaAZcY0qewhgWahfiafgZSKZm7T3x8O5wxI
+û,ÂC¤¶c-œz#ð5#,¾úUVÀ¶­ev®;NŒó"¶¦Õ¢ÌÝɬÈ
i±\(¥ê)[îÍÐR\Èò7@†¾véܲ¯Æ¾NϹΎ­{©4

secrets/rekeyed/sire-immich/b50e7c654824daae359bcf87642131de-wireguard-proxy-home-priv-sire-immich.age

@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 U8ytLQ QRKqBGrzPBO8uDJtAjIpOVcir6L5beNr0wS3iVXQFiY
+YjTxSInhMSU0yogxBupf2311z5OXeNrSSkQpU4d34OM
+-> o3E-grease ~ E<I*AS 1> Y+:|pOC
+/8vpx1EmpwyfX3vwNpjAMMFCoRuoP3w1RLWAgqj5J1tIb48O0Wc
+--- EIeRKimHpArrdLioRUJ2rEa6uBOiAolXK1J1Sej37WE
+9¥CõKÚ•OíÐù´uŽ¯1ŒGú1ï†Fü/0¹b=Lß0dsAèjSØ€¡Þ|^ö1E�ͪËà�ÁCöõî(±9Sc:Ì

secrets/rekeyed/sire-immich/bbbf9beb0367145565e8795b2f8e8b23-wireguard-proxy-home-psks-sire-immich+ward.age

@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 U8ytLQ odwIDreVyKb1UHckjz1/1PKET4rluHdxFVJ2naBOKhM
+PJyoiRA65kd2272oq3Irup5gBq9sWDMgkIbkPbIa+IU
+-> HDe/yru:-grease ee~+
+g5uaAbBGEy/dJPeFuKdCqdvlIbcxeoVQMQ/y7hwgJQI68DOwpdAggi12cMYt+mlM
+yNE2Lb6p4xO8BRF0
+--- Xl6hjCyuuxnKdBNe3/x6jqvDsoaHDBYIzO8nV0DRuVs
+í¥f¤ÚÛÿ01VázµçVsæitúÁ%áœ}HùÓ
ìòåÛ�=«ó¸èFá¾›:
_�Ùwy±)v²”ª0Plý"%-y¼ëbQ줜K

secrets/rekeyed/ward/bc09f082763a638b6e2dcb17e82d1b7c-wireguard-proxy-home-psks-sire-immich+ward.age

@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> ssh-ed25519 iNceIg jC4JmDgyhutHIQg9kfoEn/C5R6l118w3RW3ppVOtRi4
+D1zkyvS8+IO3t/BggWam1mo2bvzQcMVopOUB3eFGrxM
+-> ;.:-grease HVQl{t+
+IP5NM/luB+vedA
+--- SugCM5n+hANuScBLJ2pZ0l5ik8a1ACYO0/SIliajeBA
+:…‰Ê¨Ÿ„�Û!'—�òN£®·"	7Åhn®bƒÑý¿ý¬öŒ¡$Úò
+
+ßµÃùí±R`Ò¯ŽÜÖçϵõ=XÅ>ô]Æ>‡¯Ïk×ê�

secrets/wireguard/proxy-home/keys/sire-immich.age

@@ -0,0 +1,11 @@
+age-encryption.org/v1
+-> X25519 EbAPkTomUvk7duJOZy0vtiep2ov7tPCOXBtCBGruY38
+xm6XG7L7+Na4nyjXEp/BlY4/Cf9yGomOAoaj75Y/zLg
+-> piv-p256 xqSe8Q A64s9mvyNfCm2XWhc+mI9lzBdyD5nhRHYaBu1G7TzqdN
+tjqdcSVvUQX0Hc0p1SCGoI6el6AWyWSvGYuTox3GslU
+-> Gy{L#JuN-grease qCkq, kA (+?`
+u7i5f5qLVdHPy21vzOIqQPiK5jQwbl4SQ8/jfqxs3D8nxoIqj7PQ4rpLarLo0smP
+UMUMff5pBRZpN6mVXWeJW5VxdXUMGx98G7us+Rgai+anVCyxYkKp
+--- 8/tlk+rcWrVD/vzQzcBGpHT5L7uo5Q+KIBI0YzppWfU
+z¾-ÔúJw»„ÂqGÖ÷r'íy!Í,Î"§W€1€¤ÅÈ–ÆqT>úô6èk
+m±oP_?FN’~^(ϵΟ²Ãþ¥ÐíÉ

secrets/wireguard/proxy-sentinel/psks/sentinel+sire-immich.age

@@ -0,0 +1,10 @@
+age-encryption.org/v1
+-> X25519 +fa7tfimWvXNAa4vnShHvYwO7aseyO2IYtqi5DIwWCc
+jUyJfsqbVZG95WoCsq59GT4vS61JjJehG+TMzy1CEFA
+-> piv-p256 xqSe8Q Ag64pSfYYHPUmZyeL1Hur1mgX10z1Ci2JhcDusLxc6U9
+v+9PcZg2sV4CHACnaLnLNJlnMSq92bhl2KJFVhgnnsM
+-> R-grease
+94PUru0qH9kfqbanR3nvKVOSlweUc+VmHC/EO7MC4QRlxpfH1xKyg2TrWHRTBRNi
+y65fz17jxBKveuum2MjyHPl+/ixW0uoBLqMdNpKq
+--- aKTF1hJ+E+Oylec8BWeMa5mxBR6KtWeeivfUyv6kWH0
+�úürvrWÄ;�åZJæ¾¼ §×Ö��ÍÃDÓKkŸM¹ô•pûŒÄ‘i®
o[o%E¶>´¨sÊ1Ç<w¥°ŸPpyö