chore: rekey mealie for real ssh host key, fix port stringification

2025-10-10 23:00:39 +02:00 · 2025-05-18 20:48:53 +02:00 · 2025-05-18 20:48:53 +02:00 · 3c38eaf072
commit 3c38eaf072
parent 4dde53ea71
12 changed files with 31 additions and 40 deletions
--- a/hosts/ward/guests/mealie.nix
+++ b/hosts/ward/guests/mealie.nix
@ -55,7 +55,7 @@ in
  nodes.ward-web-proxy = {
    services.nginx = {
      upstreams.mealie = {
-        servers."${config.wireguard.proxy-home.ipv4}:${config.services.mealie.port}" = { };
+        servers."${config.wireguard.proxy-home.ipv4}:${toString config.services.mealie.port}" = { };
        extraConfig = ''
          zone mealie 64k;
          keepalive 2;
--- a/hosts/ward/secrets/mealie/host.pub
+++ b/hosts/ward/secrets/mealie/host.pub
@ -1 +1 @@
-ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHmfHyKfCoAUflxiWZF4IBLMxLtTZexaAfwVwzFJIlqH
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIb02LgMHjS17qDc3wPjSj/7nKRfOIgh8FO2wJFOkYVo
--- a/secrets/rekeyed/ward-mealie/0e26f79cf1faf0b8aed1fda123df3d8d-telegraf-influxdb-token.age
+++ b/secrets/rekeyed/ward-mealie/0e26f79cf1faf0b8aed1fda123df3d8d-telegraf-influxdb-token.age
@ -1,8 +0,0 @@
-age-encryption.org/v1
-> ssh-ed25519 lvVD1Q YXn9WHQpMzpHXr8+kFMIdSyQ/rk3NwEukoV+qciYTTY
-yoAXvZkuiHE0KW3weO2oX51TFLY1f2ANh9pNBG6o1Rc
-> Wf6oihH1-grease
-1JCd3EhtX+OYjlmSt17OWxet/+bHlRtfDHIhMFRbTvdjt8saIRffxRYASWkg+HCR
-3cUlOR/aCG22BsI
--- /ObukYBUdzN3bdi0YFdBch219+aRwQpzoNPGcnM6oeI
-Ão‡úoF6FŠ^š§ðXÊôcNË£-ßÑ~ŽÆûŸ¶�ŽpY¾U�Z8ÎZé"ªá‡YUÞ:1bYp^U´Í”×Î¥ß„†ŽŒi?OÌ
--- a/secrets/rekeyed/ward-mealie/0e775e81155a16c48a693985ef87ce87-wireguard-proxy-home-priv-ward-mealie.age
+++ b/secrets/rekeyed/ward-mealie/0e775e81155a16c48a693985ef87ce87-wireguard-proxy-home-priv-ward-mealie.age
@ -1,8 +0,0 @@
-age-encryption.org/v1
-> ssh-ed25519 lvVD1Q XH+1hvyyrVDswacwgSVP6jSIcailJbsCdRarwlMnrzs
-+e+R58+qCvCxy64/v3c7ljVL41MIqqUIlkyi/QNmyOY
-> u}-grease y vy?+:1
-B05VV7/MovZh2CbxdJotf+f40O9c97r4XU3KV4Ke1yqqrBjapMhNl/6z/WZakK/l
-WEzGOxhRn8lXQc6Gaxa3VkQzIrPFD2ZOSxFTjscPVwFL9hunJ3+104Px
--- 3K6Z/4SOPvxVVHpHpCDlkujxGLR6empVqF/DcFcYJn8
-¯ì“ÞHÇJ5c½p(+ŒûšêiKŠ{å
¡+À&ølµéI†âÀÈ9�8WÎÓyu¶Ñ4‰Â„Ò”KéTQ÷iET£Hµþ7Õ‚
--- a/secrets/rekeyed/ward-mealie/40eee60695582040333e4fab6b3e99ab-wireguard-proxy-home-psks-ward+ward-mealie.age
+++ b/secrets/rekeyed/ward-mealie/40eee60695582040333e4fab6b3e99ab-wireguard-proxy-home-psks-ward+ward-mealie.age
@ -1,7 +0,0 @@
-age-encryption.org/v1
-> ssh-ed25519 lvVD1Q iShb88vIuWOY66+uWNmMQtezGJJSfmMwNmT0ddPQ8Fs
-zC7Lk8BgMap9E1/T2DkMLeYNSzv49qxT/lAXsOgHT/M
-> $LQ9%qm-grease ?F' B:CTB(
-l/BZ/6lu6OFFEtKQO4/i6W8W+YMg0opJSJ903Yk
--- 1nUvsKXuR/xpxmAY2WGKpk162DSm1kulcWc6YT2+SPc
-FÆ\ž«£cçbÆb(áº9[tš3föÜ*QõogcgsÏ,º§�;ál´	@@óƒ¬�–¢lÃQ]ƒ‚ˆ�n	‡‘•ùÞ-z!®?Kà
--- a/secrets/rekeyed/ward-mealie/485e1790e4fd24baa9495d837795ef02-mealie-oauth2-client-secret.age
+++ b/secrets/rekeyed/ward-mealie/485e1790e4fd24baa9495d837795ef02-mealie-oauth2-client-secret.age
--- a/secrets/rekeyed/ward-mealie/531372819fd3bcb6bf9261a86c5e0795-wireguard-proxy-home-priv-ward-mealie.age
+++ b/secrets/rekeyed/ward-mealie/531372819fd3bcb6bf9261a86c5e0795-wireguard-proxy-home-priv-ward-mealie.age
@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 Wfiv+g A0ggojYhguaoftQQtka9jafkpqbEA3Dr2p6QT1UHxHQ
+jsiiyoQSoIrIquVmAQfxeR2ZkDd+qGMmj4PaWl4Oy9U
+-> 6v%E-grease [w8 )jZ:Zr?M ;hCvp 8K)$E
+wGkRkOsc0Qx0V123Lsu1yRlTCFgDo1w0oqn9r8cQXmIA1eWUN3ERXciA
+--- Ha7OEkp4tzBrntCrXxQhJUQMea4diiFhFyCzgj6X3Bg
+*±û™©Ëç:w,3ÁùÏYÅc5ŠÜ›N;»zGé�R[“)Ç7‰ü@(—Wä#›XÊä‹%„!{óÅí§z®¹LïK(¢T‰
--- a/secrets/rekeyed/ward-mealie/78d5e2eb2bb8a805e8d94c21fd1f2022-mealie-oauth2-client-secret.age
+++ b/secrets/rekeyed/ward-mealie/78d5e2eb2bb8a805e8d94c21fd1f2022-mealie-oauth2-client-secret.age
@ -1,7 +0,0 @@
-age-encryption.org/v1
-> ssh-ed25519 lvVD1Q 1ftd4N+uIcmtSGYOerFKVH6fQavXooDt0f7BgCgzCmk
-DjCtfR88tAJQUSSQt9vTlOG5nhQ1iCnbiGcbDw/crOY
-> #fyuI5Mu-grease
-SnraD1nrsAszqx7zmuLw3i8vC+epOSHg6DIsHRY
--- /OdJQCUMgxTacJEAubG8PysIiI2yc6ECnu/3Xxn28xA
-žùf4¢¿bŠ@POˆt±ÐSYa�sáe;�ôº¸¢V¹hŽÉõ„¹CÕ�àW¹¤ßø=`“È€zrýþý9Ù‘…t°]“(K-‹`fÞ¾ö
--- a/secrets/rekeyed/ward-mealie/96cd4ed2d7a9bc87b44e240d300c302b-wireguard-proxy-home-psks-ward+ward-mealie.age
+++ b/secrets/rekeyed/ward-mealie/96cd4ed2d7a9bc87b44e240d300c302b-wireguard-proxy-home-psks-ward+ward-mealie.age
@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 Wfiv+g cVjZt2L6yUQH0NFJ97lQxhXOaAXO8CnpuJ8qfjyjtjk
+lJifSs0R3Sa1+uk3q7vRR0lQccwWK0bkP3Xk2Qdrkc0
+-> q3;V|-grease >$0Tp ]c|) X m~y
+YMO1ymu2Ber2INFxO6x8h/NOSab1m2EiPO9gL7/wZRHE8un6OTY
+--- TTO0FHyyMmKhxnnyHNKS9gBkWiQzFO41SU+DfbSl5uk
+œ~jáØÜ˜ƒ,o®ÎBSÕÂ�D¬UtEíêV�£_ËïòFM¨(û÷£¹¸4Oæ@¥=è¶¤7‰•£B¿kÄ”£çŽÿÐÎ#º®Z
--- a/secrets/rekeyed/ward-mealie/bf8d19ea9809c5f0ff71a93ce0f340d4-telegraf-influxdb-token.age
+++ b/secrets/rekeyed/ward-mealie/bf8d19ea9809c5f0ff71a93ce0f340d4-telegraf-influxdb-token.age
@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 Wfiv+g paky2x7tlRO9rpQBUA8ezwkftMHyrJp6HuACkjF1Fhw
+oj5m9TvZDfz/jkstHVKALn7pot17pXefLskJZQL7HwY
+-> >ph9-grease `>VT,D 9NDo&Lw a^1,~bn8 ]Po
+3vRFQBwJW38SZKZSfoS+Nilzmzr8J0KeMKVzqLS1O7dheR1Wa4+49baU3NyZaL11
+kPui/W0mI/ot8YOAVTKhXdQHCIj/iD25fMpU5n3dg
+--- BpN8qNQXe85SOu/UlMcCOdaimdEvmh5D8iYcpp58AJY
+à>(û,õºÿãï¿[Ñ4À�Ä‘ªèõá±rŠ0§où»–Û
$Ï5
9Ò‘ÒOŽýY0fAª6æßEè”üHÏq¹Zà+ª¢µ{Â=Âž
--- a/secrets/rekeyed/ward-mealie/d5bd707c8e906cbaf8ca7c0d0484f497-promtail-loki-basic-auth-password.age
+++ b/secrets/rekeyed/ward-mealie/d5bd707c8e906cbaf8ca7c0d0484f497-promtail-loki-basic-auth-password.age
@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 Wfiv+g 5QFMMZcDLatArsI5SRczmYfi7dJshuUK6MWrZ4gFpDE
+k5yNsO0VzsSxjDPuYNOerkKeIEKpiXRo0bdSTiIr4fA
+-> Mi9?Obo-grease lVs {
+L4DK+7e7LGYPBkLsY2fznBgt5kwwexWw2e4cmcRhscHakUVliVDJew
+--- 5c17QZWyX5RlDdd05T/hjQad+quy584ApNJhmF0Q/2U
+yž¶0´©Ï7Â¸‰�‰™Â#z.X¬NÌ9ß ‡óFIì‘v|˜Oˆ[h•LÑöC[[L~Q‡™îMr–|;D
û7íãÖ¯5±ó
--- a/secrets/rekeyed/ward-mealie/dc45f32dc1bb8bf998a5743315023e84-promtail-loki-basic-auth-password.age
+++ b/secrets/rekeyed/ward-mealie/dc45f32dc1bb8bf998a5743315023e84-promtail-loki-basic-auth-password.age
@ -1,8 +0,0 @@
-age-encryption.org/v1
-> ssh-ed25519 lvVD1Q ilziysyxRUkLfYFbS5Q0pruB+dUmuOtmd6fGjsITRS0
-n086Qtr6zcm0Ozkon6BGUggP8a1qm8XouAg31YrO12I
-> ei0^-grease 6G|p@_
-JEm5VZ+YV1hAtz++5XikLeeSySYaeuBI1glv4Np75mkYQftRRsoJczNM5FWMnBjx
-87w/3gNwFeKlpxsP0j4RavIm2XqCOvzIQb7tIJuP3EM9nrA6GgAb
--- +zULhUPkWO/20iwtnz4Y3Jf89pw4w3UiTLgRtaGnFgs
-t®:…1»uR	œ"2]ïŸÚ«"~ö,‚©q˜Þ?¾l ”8¸|õ6Þ<ž�·ÐŠHæ$)®GcìÃM0fy„ð"änPö§ï¿ÒÛ¡5¡