From 7f1be2f8417b21c372952799949735f1cae044af Mon Sep 17 00:00:00 2001 From: oddlama Date: Sun, 12 Jan 2025 16:33:40 +0100 Subject: [PATCH] feat(sausebiene): rekey for hostkey --- hosts/sausebiene/net.nix | 2 +- hosts/sausebiene/secrets/host.pub | 2 +- ...fae7553f-promtail-loki-basic-auth-password.age | 8 -------- ...rd-proxy-sentinel-psks-sausebiene+sentinel.age | 7 +++++++ ...3377af69-promtail-loki-basic-auth-password.age | 8 ++++++++ ...7e79b312efcbf20391-telegraf-influxdb-token.age | 7 ------- ...ea12cd0cd00aa130d3-initrd_host_ed25519_key.age | Bin 734 -> 0 bytes ...6-wireguard-proxy-sentinel-priv-sausebiene.age | 8 -------- ...5b43ff5346409c0398-telegraf-influxdb-token.age | 7 +++++++ ...b18012d7ee41c42af1-initrd_host_ed25519_key.age | 8 ++++++++ ...rd-proxy-sentinel-psks-sausebiene+sentinel.age | Bin 393 -> 0 bytes ...f-wireguard-proxy-sentinel-priv-sausebiene.age | 7 +++++++ 12 files changed, 39 insertions(+), 25 deletions(-) delete mode 100644 secrets/rekeyed/sausebiene/02083da3c2e6819322181878fae7553f-promtail-loki-basic-auth-password.age create mode 100644 secrets/rekeyed/sausebiene/34864ef8aacb6e6353bdfba82d09d1d8-wireguard-proxy-sentinel-psks-sausebiene+sentinel.age create mode 100644 secrets/rekeyed/sausebiene/3cdab872b440e17c0eaecc593377af69-promtail-loki-basic-auth-password.age delete mode 100644 secrets/rekeyed/sausebiene/6990ed2f05dd917e79b312efcbf20391-telegraf-influxdb-token.age delete mode 100644 secrets/rekeyed/sausebiene/a136cf730d84d1ea12cd0cd00aa130d3-initrd_host_ed25519_key.age delete mode 100644 secrets/rekeyed/sausebiene/a724df7b1d5ca71e006c0d36be3eceb6-wireguard-proxy-sentinel-priv-sausebiene.age create mode 100644 secrets/rekeyed/sausebiene/a8d47755584aba5b43ff5346409c0398-telegraf-influxdb-token.age create mode 100644 secrets/rekeyed/sausebiene/ad206793369835b18012d7ee41c42af1-initrd_host_ed25519_key.age delete mode 100644 secrets/rekeyed/sausebiene/db0265df112bb3c06ef6a0361b96c96e-wireguard-proxy-sentinel-psks-sausebiene+sentinel.age create mode 100644 secrets/rekeyed/sausebiene/ddbb8b51177f6ab5921645a30e3f50df-wireguard-proxy-sentinel-priv-sausebiene.age diff --git a/hosts/sausebiene/net.nix b/hosts/sausebiene/net.nix index a2548ec..b215b61 100644 --- a/hosts/sausebiene/net.nix +++ b/hosts/sausebiene/net.nix @@ -23,7 +23,7 @@ systemd.network.networks = { "10-lan" = { - address = [ "192.168.1.6/24" ]; + address = [ "192.168.1.17/24" ]; gateway = [ globals.net.home-lan.vlans.services.hosts.ward.ipv4 ]; matchConfig.MACAddress = config.repo.secrets.local.networking.interfaces.lan.mac; networkConfig = { diff --git a/hosts/sausebiene/secrets/host.pub b/hosts/sausebiene/secrets/host.pub index e071795..e0788b4 100644 --- a/hosts/sausebiene/secrets/host.pub +++ b/hosts/sausebiene/secrets/host.pub @@ -1 +1 @@ -ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDOZ2/shbByexe15RqevukRr/ZYhGvo3H7aWeqwEwbRJ +ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIC+ziFZSELVG9MmbkMDE9xwKHlm4lnr2uHtVNXk+rTu diff --git a/secrets/rekeyed/sausebiene/02083da3c2e6819322181878fae7553f-promtail-loki-basic-auth-password.age b/secrets/rekeyed/sausebiene/02083da3c2e6819322181878fae7553f-promtail-loki-basic-auth-password.age deleted file mode 100644 index 084e705..0000000 --- a/secrets/rekeyed/sausebiene/02083da3c2e6819322181878fae7553f-promtail-loki-basic-auth-password.age +++ /dev/null @@ -1,8 +0,0 @@ -age-encryption.org/v1 --> ssh-ed25519 iNceIg YmdgTOgrnPGvk90h8pM+OjfowQzhVo9v5lcCcmnZLQ0 -0CHP+GdcH7Eq2Wu9yp4SCn0bgjY7tKgLbTBHN0i2KdU --> K3s5a#V_-grease @ ==f A9yR{~ -M+nuDvAN9JDn6EJWJBSujNTgtC+fU+wfwBaw098p5gx5m8aTm+iVAXayx3GeTw2J -AUPIG8TiIj6T0L4KyvNO03zuDYc0aYQXCgJ2wHsheWr/kQ ---- x0kUxYcAenQjbH97L4g11cjO6DW3iWhmTez4wQvoW9I - ^e VE7uYsJz2oO,60F@D d2@*iU@0NVnUkhvE \ No newline at end of file diff --git a/secrets/rekeyed/sausebiene/34864ef8aacb6e6353bdfba82d09d1d8-wireguard-proxy-sentinel-psks-sausebiene+sentinel.age b/secrets/rekeyed/sausebiene/34864ef8aacb6e6353bdfba82d09d1d8-wireguard-proxy-sentinel-psks-sausebiene+sentinel.age new file mode 100644 index 0000000..690554b --- /dev/null +++ b/secrets/rekeyed/sausebiene/34864ef8aacb6e6353bdfba82d09d1d8-wireguard-proxy-sentinel-psks-sausebiene+sentinel.age @@ -0,0 +1,7 @@ +age-encryption.org/v1 +-> ssh-ed25519 lOtryw w1iYfdtWut59MAfBBPuvFt4dO+ESWN3TJBpVZ8aEWWY +HMcpeizp/s38w6Gc1lww51B2SIRnqow2TrssPK7+0Rg +-> ,J\-grease 9#8Z F/xcB#; bX$ z/ +0uWc4Xf0m+BXvFlUDirseOsYmdrX3A/cdh07qAs +--- 3TRrD3GWIzIOxbISgTHBT9+ko1SMA5HMPK1kmt3UzoU + Soԧzq]tGWB% 47/K3?lM>>` ssh-ed25519 lOtryw aT/nXWhbjH9MI8TPh7ssbJD2ROFgu88TAUAOS2WDxHY +4pt8KmP6os7i5bLQiQoWUXDDUM17LJQn0RMDG66yBv0 +-> F,g{i-grease ?%#)@ zA"s2 nw-2mc*( +dA +--- JezLFhE4AcS1E8TcDlKZNSNncwC8AzEbWPxBM9a1BYs +_dD6C31/$cUK۩bsb8H9Te度P%lw_7R +э' 3 \ No newline at end of file diff --git a/secrets/rekeyed/sausebiene/6990ed2f05dd917e79b312efcbf20391-telegraf-influxdb-token.age b/secrets/rekeyed/sausebiene/6990ed2f05dd917e79b312efcbf20391-telegraf-influxdb-token.age deleted file mode 100644 index 3450cf2..0000000 --- a/secrets/rekeyed/sausebiene/6990ed2f05dd917e79b312efcbf20391-telegraf-influxdb-token.age +++ /dev/null @@ -1,7 +0,0 @@ -age-encryption.org/v1 --> ssh-ed25519 iNceIg g14O67KT+fiVFUsYTqwJdNPCNbp8qutFuNgJOvIOmnY -z+jDxlC7+nfhPyEgtjeplFN7uLSjkWRaVxyQ2qbC2uU --> p}-grease M^( -72hYQ0ZXayKtOOIg9m2NUc15Y8d0LeD0wfoCmo6bJ0Xn+A ---- eLXnULfh27jeqWR1XV640jyegcG6NMDJvkXZeiCoTuQ -YÎcHW1ҭ4.Z5>Eޔ=qYi vʁlKĔpj[I=8%Nà \ No newline at end of file diff --git a/secrets/rekeyed/sausebiene/a136cf730d84d1ea12cd0cd00aa130d3-initrd_host_ed25519_key.age b/secrets/rekeyed/sausebiene/a136cf730d84d1ea12cd0cd00aa130d3-initrd_host_ed25519_key.age deleted file mode 100644 index 8207f0d2e9a81bb57180dff56add5b94b711eaec..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 734 zcmV<40wMijXJsvAZewzJaCB*JZZ2K5|NNzNCcS3kjY(rRaWp-v`Rd8fyctSI4IWJLiQBev+Hc@I>V|Ya? zNLE8KR!lK4?xUpsz6XgYf!N>XTdAuC5z3Tt|0bWcPpYHUe0Hfu3!GBrhUa6&mU zV`wi?NJ?aRGcsXtW_T}UHaR&>3N0-yAT?w$MJsSGazkxIc~y97P-8P|R&zmbLNaMo zM^1A&X?jsZLuGL*HB(n}3IhXnJ~H+6N#$4*Hljzgr(tlCQ>v$w)`gA2tu(aPDDF;8 zB?*P@O9R>Z&dBc7LSWw}ya;h_qo7x-bor}WRD~yzl6A_-q4S;j?)i{A0Xh=5+qscJ zJ3Q$B_zCE^ZiZo-R%j>`ZkjJL0c?AkBR`3b!T}sl!{lm;W!X+p7chJ32*I4Xye{n| zDZiiU_7yt>rX6x}7fsl2J@mUyqJLpdI6F!yKVl zpd_p-q(p%j+^;rYx~hjvN-Fs)W)!9Vm0%n8ADhg}Wz1~>&7T50C1Kt_qGP0A5d1}! zrT#e>sleqDyf23&G7+C&F^QAIC!6w>uV9PI$@-NW^-|02ZUm_X;72M$@QK6D_T~0S Q_~jqTnjwoIYbwyhje~ ssh-ed25519 iNceIg yx0E7V8G3fg0xkW85OFIthHYmzSb+UtvIHYuwJY5dlo -9cg6P5noJZgJDSlF+qptsSaundGj/LHxvoKR7a3/EiY --> Q[f8ce2C-grease Gk.1J~ a~*? [&:FR2xK -XGoWkCzzyoLy39XWXz1avKY ---- fzl38diZoESS+4+Tali0WMZv5vut+PW9qp796IVUW18 -&.u^TP[A&RH fgNۦH]>Q\xǷ tN!@ -P \ No newline at end of file diff --git a/secrets/rekeyed/sausebiene/a8d47755584aba5b43ff5346409c0398-telegraf-influxdb-token.age b/secrets/rekeyed/sausebiene/a8d47755584aba5b43ff5346409c0398-telegraf-influxdb-token.age new file mode 100644 index 0000000..869fb77 --- /dev/null +++ b/secrets/rekeyed/sausebiene/a8d47755584aba5b43ff5346409c0398-telegraf-influxdb-token.age @@ -0,0 +1,7 @@ +age-encryption.org/v1 +-> ssh-ed25519 lOtryw Ca03hL7k4AtTfrDQmUb/g3Sr1yi56jk8eYD+4XOz6g8 +GFYSiZ24vLsiK5qCVvKF28kWxWWhuno3+OIRTp3h7kY +-> Mrcg#(J-grease cFl0 >I gLKrt +aLXwsplsL40EqXV66Pk0V8rehw +--- 5HFB3WTo33gngrI1hMj4f7ktprlLCEVXZKkjhW/ReSg +jA>jW,ʸOΕ I%Xi\.h/Aa?bnY =1zKšBJ.9sv \ No newline at end of file diff --git a/secrets/rekeyed/sausebiene/ad206793369835b18012d7ee41c42af1-initrd_host_ed25519_key.age b/secrets/rekeyed/sausebiene/ad206793369835b18012d7ee41c42af1-initrd_host_ed25519_key.age new file mode 100644 index 0000000..8726840 --- /dev/null +++ b/secrets/rekeyed/sausebiene/ad206793369835b18012d7ee41c42af1-initrd_host_ed25519_key.age @@ -0,0 +1,8 @@ +age-encryption.org/v1 +-> ssh-ed25519 lOtryw /A1dsOKjndYa/t1/LwhsFCToaScX5ZteViRmepMmeSs +7SCvSxmRzw1jbKp8P1aky3zsg+bWBIQI7eq/nI9ZrvM +-> 424'-grease 72cu]< I / +rZaO0zYGx6Mkkm20o74jEnuRng +--- GwTzHpKa38XPKJ3Ciz2fDjN7BWXuEQrJG9KtPJsD7jQ +x+8ݹQ 7'%im9m=mtw݈D:5}^2ˋP@${.7Vov)ҒJR0 tkq*O=\#(^lM߳VHNXq9e:Ӟ`y6kC>lwQ.kb$idHat+ĉ:='+4HX}Yr? Od \S-dkOُ h \˘?A"Oǣ%&h2Π;,ݏk!l8'/A+F7鷦"F^H"Bۉd_vPhm(;6SӛUGC=unCq;c^3\, G>@~}4'!e~'(E/R +qIPxe \ No newline at end of file diff --git a/secrets/rekeyed/sausebiene/db0265df112bb3c06ef6a0361b96c96e-wireguard-proxy-sentinel-psks-sausebiene+sentinel.age b/secrets/rekeyed/sausebiene/db0265df112bb3c06ef6a0361b96c96e-wireguard-proxy-sentinel-psks-sausebiene+sentinel.age deleted file mode 100644 index f14300e8448c4dfdd6299c838fb3801603245863..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 393 zcmWm7y^qpR003}ZJGdFwMhA_g*Dq*+!K9@?dns+Xqt_?78~X7mkJ8e<2b2=mOU}Vb zhnsG6aQ0l?z2P**+0BJS9i7nl`v-o03>lb(xXPDkksT~>%&vKgc}5d5Wnd&U8hndJ zRtSxlPNAu}$9^o%92*G(1D1*fa&qFaQWmY3bxld_hV6ikXi)r-5=h$>9?J4$1vPHI zfvA?pNyi|hYY4^|C8^U>gc(l$Z^fgw%ETD@1k%rG>+ETN*zVAXN}C>ARxO2>tza9J z0!b26E5{>q)SvrJqS}@%9H!Bn!vnRih#;uzwOlh~&rUNj6mzQ6tdc>M02curP0b+) zHY4|BIKYlHt)jfp3sWWG2I$?GVi<;Ah8wO|kHd-LtCJ}QTn`lp1F4@bs;rTL-1qCp?rgjdZ{K|Qy1VszpI$tCa`&wE_a6>9j_v>e diff --git a/secrets/rekeyed/sausebiene/ddbb8b51177f6ab5921645a30e3f50df-wireguard-proxy-sentinel-priv-sausebiene.age b/secrets/rekeyed/sausebiene/ddbb8b51177f6ab5921645a30e3f50df-wireguard-proxy-sentinel-priv-sausebiene.age new file mode 100644 index 0000000..2955c36 --- /dev/null +++ b/secrets/rekeyed/sausebiene/ddbb8b51177f6ab5921645a30e3f50df-wireguard-proxy-sentinel-priv-sausebiene.age @@ -0,0 +1,7 @@ +age-encryption.org/v1 +-> ssh-ed25519 lOtryw 4pz2uwU94ttWbvcVLG8h6o76B5uIAVP3E9SDtzHUumA +spuEeTgU3vudaS+HTjyNfZPYIaOuv3z/CLKoYMy+GiI +-> j-grease , \3 Yq!<2i +FzJ0b/2/1pCPyy/GjQ5E1eOKkS8PrdCUAQVV +--- 1HYTaKU8uzFyL2tqpGehK0cNJMpYiSEGLj7GDcZo9OQ +RqE y_8~E:]a Aή8fz֧ݥœ4愎wݑFPbEF&޼ \ No newline at end of file