feat(sausebiene): rekey for hostkey

2025-10-10 23:00:39 +02:00 · 2025-01-12 16:33:40 +01:00 · 2025-01-12 16:33:40 +01:00 · 7f1be2f841
commit 7f1be2f841
parent cb7dbab162
12 changed files with 39 additions and 25 deletions
--- a/hosts/sausebiene/net.nix
+++ b/hosts/sausebiene/net.nix
@ -23,7 +23,7 @@

  systemd.network.networks = {
    "10-lan" = {
-      address = [ "192.168.1.6/24" ];
+      address = [ "192.168.1.17/24" ];
      gateway = [ globals.net.home-lan.vlans.services.hosts.ward.ipv4 ];
      matchConfig.MACAddress = config.repo.secrets.local.networking.interfaces.lan.mac;
      networkConfig = {
--- a/hosts/sausebiene/secrets/host.pub
+++ b/hosts/sausebiene/secrets/host.pub
@ -1 +1 @@
-ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDOZ2/shbByexe15RqevukRr/ZYhGvo3H7aWeqwEwbRJ
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIC+ziFZSELVG9MmbkMDE9xwKHlm4lnr2uHtVNXk+rTu
--- a/secrets/rekeyed/sausebiene/02083da3c2e6819322181878fae7553f-promtail-loki-basic-auth-password.age
+++ b/secrets/rekeyed/sausebiene/02083da3c2e6819322181878fae7553f-promtail-loki-basic-auth-password.age
@ -1,8 +0,0 @@
-age-encryption.org/v1
-> ssh-ed25519 iNceIg YmdgTOgrnPGvk90h8pM+OjfowQzhVo9v5lcCcmnZLQ0
-0CHP+GdcH7Eq2Wu9yp4SCn0bgjY7tKgLbTBHN0i2KdU
-> K3s5a#V_-grease @ ==f A9yR{~
-M+nuDvAN9JDn6EJWJBSujNTgtC+fU+wfwBaw098p5gx5m8aTm+iVAXayx3GeTw2J
-AUPIG8TiIj6T0L4KyvNO03zuDYc0aYQXCgJ2wHsheWr/kQ
--- x0kUxYcAenQjbH97L4g11cjO6DW3iWhmTez4wQvoW9I
-¼Ô	^ŸùešÕ
ËVþ�Eö7¢„uYâsJz2˜o®ÝÄOÑ,É60F@D’¯Êdù2@Ó*iU@¶û0Nç²Vè–nÙUôµíÜkhî¤vE
--- a/secrets/rekeyed/sausebiene/34864ef8aacb6e6353bdfba82d09d1d8-wireguard-proxy-sentinel-psks-sausebiene+sentinel.age
+++ b/secrets/rekeyed/sausebiene/34864ef8aacb6e6353bdfba82d09d1d8-wireguard-proxy-sentinel-psks-sausebiene+sentinel.age
@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 lOtryw w1iYfdtWut59MAfBBPuvFt4dO+ESWN3TJBpVZ8aEWWY
+HMcpeizp/s38w6Gc1lww51B2SIRnqow2TrssPK7+0Rg
+-> ,J\-grease 9#8Z F/xcB#; bX$ z/
+0uWc4Xf0m+BXvFlUDirseOsYmdrX3A/cdh07qAs
+--- 3TRrD3GWIzIOxbISgTHBT9+ko1SMA5HMPK1kmt3UzoU
+SÝÐoÔ§zq²]ú˜¸t¬GWB%ŠåÌ¸®’àÿüÂïÙ4³7/íñK÷¯3©?lM>¿ÓÔÔ÷>`Õá<¾ãbì¡mlƒ©’ú÷N
--- a/secrets/rekeyed/sausebiene/3cdab872b440e17c0eaecc593377af69-promtail-loki-basic-auth-password.age
+++ b/secrets/rekeyed/sausebiene/3cdab872b440e17c0eaecc593377af69-promtail-loki-basic-auth-password.age
@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 lOtryw aT/nXWhbjH9MI8TPh7ssbJD2ROFgu88TAUAOS2WDxHY
+4pt8KmP6os7i5bLQiQoWUXDDUM17LJQn0RMDG66yBv0
+-> F,g{i-grease ?%#)@ zA"s2 nw-2mc*(
+dA
+--- JezLFhE4AcS1E8TcDlKZNSNncwC8AzEbWPxBM9a1BYs
+‘‹û÷ÖÏÕéä£_�Åd¿DŒ6C3á©1/$cà‰UKÛ©bsb™8H9TÈ¾eåº¦P¼øú’%úl»w•_Å7Rãäò
+Ñ�'ýì	Ñ3Ž
--- a/secrets/rekeyed/sausebiene/6990ed2f05dd917e79b312efcbf20391-telegraf-influxdb-token.age
+++ b/secrets/rekeyed/sausebiene/6990ed2f05dd917e79b312efcbf20391-telegraf-influxdb-token.age
@ -1,7 +0,0 @@
-age-encryption.org/v1
-> ssh-ed25519 iNceIg g14O67KT+fiVFUsYTqwJdNPCNbp8qutFuNgJOvIOmnY
-z+jDxlC7+nfhPyEgtjeplFN7uLSjkWRaVxyQ2qbC2uU
-> p}-grease M^(
-72hYQ0ZXayKtOOIg9m2NUc15Y8d0LeD0wfoCmo6bJ0Xn+A
--- eLXnULfh27jeqWR1XV640jyegcG6NMDJvkXZeiCoTuQ
-YëÍÏçÃŽ¾cHé±W1Ò4.™Z‘óç5¶–—‰ê>EŽÞ”=qç�Y”i÷vÊ�žl˜™KÂùãÄ”µ¦˜åpjè[I¤³=8%ÏNÃ 
--- a/secrets/rekeyed/sausebiene/a136cf730d84d1ea12cd0cd00aa130d3-initrd_host_ed25519_key.age
+++ b/secrets/rekeyed/sausebiene/a136cf730d84d1ea12cd0cd00aa130d3-initrd_host_ed25519_key.age
--- a/secrets/rekeyed/sausebiene/a724df7b1d5ca71e006c0d36be3eceb6-wireguard-proxy-sentinel-priv-sausebiene.age
+++ b/secrets/rekeyed/sausebiene/a724df7b1d5ca71e006c0d36be3eceb6-wireguard-proxy-sentinel-priv-sausebiene.age
@ -1,8 +0,0 @@
-age-encryption.org/v1
-> ssh-ed25519 iNceIg yx0E7V8G3fg0xkW85OFIthHYmzSb+UtvIHYuwJY5dlo
-9cg6P5noJZgJDSlF+qptsSaundGj/LHxvoKR7a3/EiY
-> Q[f8ce2C-grease Gk.1J~ a~*? [&:FR2xK
-XGoWkCzzyoLy39XWXz1avKY
--- fzl38diZoESS+4+Tali0WMZv5vut+PW9qp796IVUW18
-&®¼ÑÐ.�òuÚä^†TŽP[A &àRéH–fgßNÏÛ¦Høœ‹œÐ]ÊÁ>ªQíà¿\½xªÇ·üº‚÷÷õÁt€N!Ž@
-P
--- a/secrets/rekeyed/sausebiene/a8d47755584aba5b43ff5346409c0398-telegraf-influxdb-token.age
+++ b/secrets/rekeyed/sausebiene/a8d47755584aba5b43ff5346409c0398-telegraf-influxdb-token.age
@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 lOtryw Ca03hL7k4AtTfrDQmUb/g3Sr1yi56jk8eYD+4XOz6g8
+GFYSiZ24vLsiK5qCVvKF28kWxWWhuno3+OIRTp3h7kY
+-> Mrcg#(J-grease cFl0 >I gLKrt
+aLXwsplsL40EqXV66Pk0V8rehw
+--- 5HFB3WTo33gngrI1hMj4f7ktprlLCEVXZKkjhW/ReSg
+j¸A>¬éß³´jÖÌW,•Ê¸—OŽëÎ•Ió%X²…£ƒiã•\.¬Íh/AaŽ?b‰Üná÷ñY=É1¦ðzKöëÅ¡BJ¸.Í9sv
--- a/secrets/rekeyed/sausebiene/ad206793369835b18012d7ee41c42af1-initrd_host_ed25519_key.age
+++ b/secrets/rekeyed/sausebiene/ad206793369835b18012d7ee41c42af1-initrd_host_ed25519_key.age
@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 lOtryw /A1dsOKjndYa/t1/LwhsFCToaScX5ZteViRmepMmeSs
+7SCvSxmRzw1jbKp8P1aky3zsg+bWBIQI7eq/nI9ZrvM
+-> 424'-grease 72cu]< I /
+rZaO0zYGx6Mkkm20o74jEnuRng
+--- GwTzHpKa38XPKJ3Ciz2fDjN7BWXuEQrJG9KtPJsD7jQ
+x+õ8æÕÝ¹ÈQú–£—7'¨�%im9�m²=¢‡mêœt½‡wóÝˆô«èD:ò5}^¾Ü2Ë‹P@Š${ä.7ÄV¢›ov³)Ò’JR0
ÅÍÁt²kìÕq¾©*ƒOÏ=\#�°(^lçM¿ß³èVHNŸ¶XÂ�q9þe:Óž�ô`y¼6¯ïk»CÐ>ºlwÛQœÝåàúÎ.²káb$¸Éi¿ÖÆd¸æîÌHatƒ�+Ä‰“¦:='´+4ÑH»ŠÈX}µûØÔµÁô�Yr?†áÉˆOd	\SÙÛ-Ídkèœ‡×Oâ×Ù�	¢h—ý\±Ë˜É?A²“‡"O¤ïÇ£ŒÌí%&h2“îáŒÎ ;à,Ý�¡k!¯l¸8'’/üºá‰Aê+ƒ�¾F7é·¦™Ü"€÷ÆF^¶àHåŠ"ŒBíÅðúÛ‰ÌdÂ_¼vPhm(ƒ;6ÎS¯�ÅáÓ›UGàß‰ñ€šCƒÜ=ïunCq¡®¥ƒ;‰c�^3µ\·, GâöÊÖ>õ@™½~}ò4šÄ'µ’î!Áe¥~«É'ÿ¤–±Ü(E/«¬R
+¢£ñqIš²®P¹†ïxÔðe¿
--- a/secrets/rekeyed/sausebiene/db0265df112bb3c06ef6a0361b96c96e-wireguard-proxy-sentinel-psks-sausebiene+sentinel.age
+++ b/secrets/rekeyed/sausebiene/db0265df112bb3c06ef6a0361b96c96e-wireguard-proxy-sentinel-psks-sausebiene+sentinel.age
--- a/secrets/rekeyed/sausebiene/ddbb8b51177f6ab5921645a30e3f50df-wireguard-proxy-sentinel-priv-sausebiene.age
+++ b/secrets/rekeyed/sausebiene/ddbb8b51177f6ab5921645a30e3f50df-wireguard-proxy-sentinel-priv-sausebiene.age
@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 lOtryw 4pz2uwU94ttWbvcVLG8h6o76B5uIAVP3E9SDtzHUumA
+spuEeTgU3vudaS+HTjyNfZPYIaOuv3z/CLKoYMy+GiI
+-> j-grease , \3 Yq!<2i
+FzJ0b/2/1pCPyy/GjQ5E1eOKkS8PrdCUAQVV
+--- 1HYTaKU8uzFyL2tqpGehK0cNJMpYiSEGLj7GDcZo9OQ
+RqÀ‚EyŽ·áç_8Ëâø~Eþú°¢:]aÁÆžŠÝAÁÎ®Ñ8fzÖ§Ý¥Âœà4ÜÍæ„ŽwÃÀ�‘Ý‘‚FPb¹�áE…Fï&Þ¼