new domain

modules/services/adguard.nix

@@ -106,6 +106,10 @@ in {
                 "domain" = "kopatz.ddns.net";
                 "answer" = ip;
               }
+              {
+                "domain" = "kopatz.dev";
+                "answer" = ip;
+              }
               {
                 "domain" = "kop.oasch.net";
                 "answer" = ip;

modules/services/ddclient-cloudflare.nix

@@ -0,0 +1,14 @@
+{ config, pkgs, lib, ... }: {
+  age.secrets.cloudflare-api = {
+    file = ../../secrets/cloudflare-api.age;
+  };
+  services.ddclient = {
+    enable = true;
+    domains = [ "kopatz.dev" ];
+    protocol = "cloudflare";
+    zone = "kopatz.dev";
+    ssl = true;
+    passwordFile = config.age.secrets."cloudflare-api".path;
+    usev6 = "disabled";
+  };
+}

modules/services/nginx.nix

@@ -132,6 +132,7 @@ in {
           "kopatz.ddns.net" = kopConfig;
           "kop.oasch.net" = kopConfig;
           "kop.bobin.at" = kopConfig;
+          "kopatz.dev" = kopConfig;
         };
     };
   };

secrets/adminarea.age

@@ -1,8 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 bqM3xA Ga4g0hvxrjdHgsZO+Ty2EmiEbuSWr/YY7B2lvPSMs2Y
+-> ssh-ed25519 bqM3xA 1PcCxKcMWu7nOK79jHrgPj/Ss1b8FWpyRz+zFqIHIGI
-rb7e7Im5cpgu4ybtuAV6o1YpKCjv072GLz5Rp9+jk20
+yIHKl4t6svsMSKacceSvHfuk2bvAoQCgTTkU+bGLqao
--> ssh-ed25519 DCzi1A zqOVsasJHE44AgkztL9Ax9N2TZWaz7Welk7VnV9pOwk
+-> ssh-ed25519 DCzi1A tPK69KA2d8SMVqKAHuEn4wAoNuS5qrP6WZ9+crtANxU
-cTsg8t/Ezs1GeW9am9CsE3O53HjTH2NroVcYiONBcvU
+kmZ3rcURlIdaTyaH4/ioX5KWaZZbpgp8CR9I6QyncXQ
---- bFQLNVvQHgzwhjUNqJdWNY2BOy4F8SeYrq121FU4Au0
+--- s2Y4uO4I7VnJkVRMibZi2ReUN39tujPBh7rUhmZG2u0
-ŸÃ	)$mî9Èá³Z3bÖ›ëÉŽÄÛeFJI59Œç3ØÕé‘.MÅŽK&~Ø
+Q+Å2²ûgˆÙlOÔC

0­å›I2
óÿû¾Óêä(È…X«èS±Q=—þ0¢(¸Wõé+V±¢?SëD¾`ŠXÌS˜ì%:ŒÔ,f}â¢lVHƒŸY[Ëf^j-¬Éiâ¹Ë}™*
-ÞÄ`|櫓,Júß_r{

secrets/binary-cache.age

@@ -1,8 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 DCzi1A J3I1vGqKxAesFi1z4us5N741PT1XQTHJId2ySEyLBRc
+-> ssh-ed25519 DCzi1A iDaTD/xnczwfV+bdRd4CYXuriCvvAnm/utiICt9qMGg
-LpXNCN/Jwepmpb0vcX9wKpxuhZmaikAy2UVLa/DPLAg
+2N8wVyxA04xdvSF8x9HprFv4BgjVMd0RQHP5cbQwsDo
--> ssh-ed25519 lNJElA KmftSH8+q5ACPz08PHATGlaXq8tJrxwWGuys092ZDGU
+-> ssh-ed25519 lNJElA C3UoNk3ueRYtEq7Z+xTTQPIQxBG7TKVkrYxUhRf+9AQ
-GeNEMWhfeP4Y/yd4WVpdCCnT7Qjv/jN6jPkcj1J2bdE
+MNZZKojRsDyfSS7jhtOJGraEVgR6mo0ouQ9Ai2PWjTc
---- 0jeS9BIt6KHyJ7SEMFEfzUNxWtNg1MPmBb0TeHwq7e0
+--- TKSZzQF81D3ShrcXZKTz98C0dEZIXpOQQQ5vRZXKSZQ
-
§ê^š›Ïê÷Z]-kµd\ëPû”FÍŸ(¨5ÉnÆÞ…õ·$¿—ÞïÈRÈ<52>¼¶»½¹Ý¾sµŸ‚ÜÑzÐ
ÁåL[|a‰†:þ:’wsÇ1H·
+ÔÂôõÈ(´gçÆ{¶Êã’ó^ïC’ô'wíQx4+?)½¥“Ë(šV^¶
-

secrets/cloudflare-api.age

@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 DCzi1A es6n0xP4sQ03hvUWUJ2FjRu68Xw2H64SirMyXeUR52I
+B5h4pHYbomcgi0B8gIOuoufHXAtE2tZTkqPmUPwisq8
+-> ssh-ed25519 oDXHAQ uhhGCBPYeGxhXQ7o4Ibu2i3DV6B53NANw4206mUB7g4
+zeKDRa+2R/yBERunfDXPfMw79wEDWlbR5Y7mGj6PGGE
+--- Y7KBu6POO4vD0mUPuImeozACsZskZ4Ouw2Yuzl89orM
+røÜÒJL¦|7ú¤Èñ¶í¦WÚGì*ÉâPèL'£$M<>°[’´<E28099>åàœ|½;†Ò5dÔdOFÀ—:ž§<C5BE>Ÿ‰÷OÛ¤

secrets/duckdns.age

@@ -1,11 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 oDXHAQ gbqR6JNoGpLB9glCUAnEdLjXfUD45FMAthMkx37UUic
+-> ssh-ed25519 oDXHAQ zuPOJ5Z/LspqvchDYFWlzaDY+4QZivokZ19FRaWA9TQ
-XZI8xpza74wuMsPeMQmkYCtwQaZ33PuXKBzEPgVoApU
+St33PTF5YyjamVUhALJ/yyMwUOIO7QNMNYapkhpBP8Q
--> ssh-ed25519 xfrWcQ ufWZtiUYMsPHXR5dGFBkUeXMlChDp2QzqXpYLmQthxs
+-> ssh-ed25519 xfrWcQ WjcVYbjiJXRm6+AAZLp4m3osIa1CbI0XaaSjCEkOBGA
-yALEGpBLzsvKET0Y4qyIIhDa0Ru/sv9At/H8HYC78IU
+WAqMFxcTkfib4XpqnAgY//6OOFhWUyK7n3QydDpMmHg
--> ssh-ed25519 IV3DkQ 78Hnme9NIQK6jdw+C/K6w/oeFEVoPcMZzPGN+oBW9lQ
+-> ssh-ed25519 IV3DkQ k37rMbiFtQRcmgAmkNuAYqjyI+YCAxSz6m0O4Rs+hyc
-9sLV0jWl76tIRO5k3ouIleEGAGZSI+Rjtk4ycsnPQSk
+qlzIP2e+G+UXarfhTQBnD2B67FkEqohwXUO6LjWk19Y
--> ssh-ed25519 DCzi1A 6aZVuCw15F/iUBJVs8EubOz6X1ydLSJATUKKLTnJjS4
+-> ssh-ed25519 DCzi1A 27Pay6rJAcUREOc8hlI8KAwGavwOQS4p47Oqa4Hvd0Q
-muCrYVglDqseh4ovq3d+JbugQNfnZiD4lmpCN90HNbs
+93UKW6UIG/M51THEd6RPE0FfNyROLhyU/Rp3plC6yyw
---- WAl554L+ne3tInpHkPqSUo0r3ltUjweNCWMnLNq8H+4
+--- hbmTmsRd1Cz8YpXVyqHdj3mBua/evek1tYSj9gKLWeA
-˜0©*p+¯y7œ{£zîäï—žÔ§:e¯¼|bé'!JJý«¸?Ÿ	ìP>>Þ_>³ªJ˜
+<EFBFBD>ÄzýÍS7¬¯3zK,;;Ý+jÒ…Ù=ê¼B!<å
W]¢‹)—ÏÚWp<57>û“s‹”ïÖ¦™è%8õ<38>Ô„Ø¿=(lÕ

secrets/grafana-contact-points.age

@@ -1,13 +1,13 @@
 age-encryption.org/v1
--> ssh-ed25519 oDXHAQ +mtQdocfgSjauNvXmkPAuRr+U8kXsIn3A7+coiS4dFQ
+-> ssh-ed25519 oDXHAQ TFGIBisWzfGgEDoM78KMQBo3XHAQdNUuesZZ6Aesx1o
-AcJR6s7noinnOFg9p/rKBb642H62s0ggzvG1Z4Zh9U4
+DRVTnbQ1wYarig7b47VAGp77lMEKSUd/nYnS+wZzDgg
--> ssh-ed25519 xfrWcQ dOCXVKfB2zm7cgAgo+7UZ6B+HmCJ1FiDltXzXO1pRxM
+-> ssh-ed25519 xfrWcQ t5UC+kO48Ku/0O57oa9IF3d0poJ3JVIisZcJBWkZnj4
-zAzDx/wiHyyi7Dz2SdAt9JHkHXEvr0Ma3LJq04J3oE8
+hcIQoOp1nZoPyZhCgtUOvE7lK0zkGaE7xVPYfoLXKyI
--> ssh-ed25519 IV3DkQ N9PjZJk2h3anqKBNIPWEgRl1CIGsrPALBPkhHRBZShw
+-> ssh-ed25519 IV3DkQ bE6F24RT87cs5pYC0kIeF/ElcBHrorOMt2bMW+/peCk
-5yMfK2s8iUAwdb+9feAVt94iQbUlXWd8kpt/y1TPCv4
+mRXMVDosjd1U7J/hutg3arvrDsqs8kIbCkuW+13Y7cA
--> ssh-ed25519 DCzi1A Z1dO3VKvNFlwBc+g78zavclc7+2tzIRHEc9kwnrV3Ew
+-> ssh-ed25519 DCzi1A 5RWmVwx/J/k+/rh+heDqlUABtOsMAUgXNzehV3/aGgw
-Sbc5nXnybXFUDv99ndnFAJO4lybLPK0IQkZwM+n2/dM
+U9bmROup6t+AcsDYlkyf709U407nXEkoa+MCEcAADgU
---- 8kU+q0w/FDYU06bOlpXgs2qT5etUYRrXM0DS49oiS6Y
+--- I8BPnLucIBOeKQi9S+TObvwCNMzjg6ZSreOudU8k5rE
-„ÒŠ/_1ßùö`ÍE„P9"Woéã@š¦üE>âR_t¡"áMr{ÖÒ7œÈÔ£¦_k<>.,|j}§ÿE!z½tp¸a
$å&}³øä,Ì@…ž<E280A6>’z"Œ(Öº%ž¤<C5BE>¶†’¡iÝ@²´c>“žüîõÐŦ<>±¯0ˆÁÊUã‚,r.·¿³FpÉÛeÿ¿qZ³<)dv×R9S™Q¿ºq´ì^„ÿúJ䧡ž•§f<C2A7>gÆ<67>Z~3
+Z‚=8ÙopŸvzfh™
-Ž'ÓÉbp¼ƒwϲ8—;[‘/MR[£æ
¼?h:]5}¾ZlôÓÓ¬ÂF¯”èóWT‚<54>Æ·}‘
+Ú±KtR¤B¡<Eé<10>vS„¹&W²âÝùtŸÅwNê|&ºd‡¥òçòeÏ“bÐøïÇú~
->_'Oxˆ³h^/Ø-P‹Û„aë ÿ<>s¶ýU¾šðSé$Þqädø"
+XŠºx[S·ÇLþ»š í|ýûýr^œÔµp¨ÚXŸè–#íÖ«oú­åSJ†f]ç#f<>rXO礿3Ú

secrets/matrix-registration.age

@@ -1,13 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 oDXHAQ atKuhdRrHGOxTZMSyHCUr2DsrkYCbJSeKp4+WJgqOzs
+-> ssh-ed25519 oDXHAQ r3tGPKJtMOjKeKBkBGSaxHqLr+k0QPO99wm/SyIXNDg
-eymYWsh3EzTrJjxf9hQj0uV4y5rm96kMOHpWYNrGpok
+4XubpJrSsCaduXkeYpMs0EBe0pfw1kUkr9C7z2rLiAg
--> ssh-ed25519 xfrWcQ re158GOgNwc3TtwQqYRMIGFKIL3PH+nwbHa2VG4ltGU
+-> ssh-ed25519 xfrWcQ JMJuUZZoPfpuUid3ufpkriK9mk2xhfeff5w98FBhsVc
-0Twg+bQxg14FH1bZ5MeEQXl9NALNt9kxfnaW/UZ6BeI
+zdWmtguA+fGqYiiYHVKna03VbV1lHTKjjol57Bw3jH4
--> ssh-ed25519 IV3DkQ 7an++FYt4n0VKJ5Ne454pKqoShyXu9mOcmT24Kpr2Rg
+-> ssh-ed25519 IV3DkQ RTLWsP1C5/VEWScFP02pi7cC/hqOu4heJcD79fpW9W0
-JufxZ0sWKZosVkaGn6WyvFDCPbKGqFhAVLkZN24I7iw
+PK4kwFW90HVAU/1iSyowhBg/07ZjRrHSEPpfxZqDUKw
--> ssh-ed25519 DCzi1A lJxRwc28VmsdYFELukX4ud2bqryjJR9VD82CRZZR+VA
+-> ssh-ed25519 DCzi1A jPYOQEbpTqkVQOIU0nTJFDMEgOkYRTEbLAaE/Z3sOyM
-HlAmLsHaT3HcHAuuVnm2e13mVDoQig7hmrdarub48Ug
+lB8GjtGLSahZJKmoq1MZiwfFjIzI1TnSmXSacSc9n3k
---- H/VWknmPK9GFkXYEmCSyHbW/sHD2KSnvzwovn7qAexY
+--- QV0CQ4lSRRbfDk8gEbVcrmWn5YWcujzYiW4EOyV20vk
-‹h§‰ó4ÅgèŒøJ&SÁŒã·4šüÁÀÍ2d¾¾†wÑ&†ЦµÒ†~¢)È>åœÃczIa´eõqx€Ih¬ÊŠ„?æ±a„xB$]L!
+4¦Ñ;o¯™M-¡FP~4¡ºÚ	:­}äQ‘7wAs”bö“ê5ñ0Ç&CpÔ«jÖP0gÝôÍpž;®GfËÒ<C392>¯Å}}ân
-5T]<5D>8Kõ£±…lX†@(¦¼%çq°ñn²UÇÕÚ2©km¼U>æ6
ïáÌ<C3A1>„ûCsˆyÁ	ÍöçobfñöÏû·‹™<E280B9>
-#?¹Dè‰åß Md:@hDpêЦ4éÓïà	@ñïlÎζ G#ª

secrets/restic-pw.age

@@ -1,11 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 oDXHAQ 1ylRcikeS7eUVRpy/q5M+9+32zB5pt2GDLU6+3wHWyI
+-> ssh-ed25519 oDXHAQ m+Of2fFXpmWNIcPpld+1M0SeSj9slmaNFM+uYqR5NE0
-9VSg8kOE1g3IQvBnDwLvn0C8dOw4/xuPxxrqL+fDP3Q
+a5G+NDQL9kChBEQDTfCFcFaFHiEsFjug2E80F+4nFFM
--> ssh-ed25519 xfrWcQ cUWcTsQ+Y8NaxA73EBuh1+Dv2YeTJB112nlpbI9JkA0
+-> ssh-ed25519 xfrWcQ wtNSw0azb6iJWhWpwAqELWBjt7fFgDHZxTZrbXDxTQ8
-fp+vmBxZ5O/WxlXmKPqwMISGsgBKrAU9tUNpwUJWy8w
+fGt0zSHMq51SRlcy526CTH9IlLG7a0DppYGlRePkyX4
--> ssh-ed25519 IV3DkQ z7wy/ZXA1KvuYucY1EfDRWakBmcv7D+gwjENV7E5tlQ
+-> ssh-ed25519 IV3DkQ fcsiE5BUqpEnAzZ3QHP0aZLtaoS6gSGkabT4AI4bh28
-9wovsEodoxREIHeTm7KT+OnbKxJnfrnZAdMrKu1Tf1I
+Z+pu1qcH7lvh+WLkmSrpoz258MeNxL8vdpg0uzeil8Q
--> ssh-ed25519 DCzi1A EGSWyT7CoUNR239LL9s0pumdWW/hWEAf9SwVKaVdODw
+-> ssh-ed25519 DCzi1A GBm/EjD8pKbimUaE3S9XlUeCoRZhgVAfL7D52Uy5PWM
-44DaSHhXr5UKDNtG7NIQjF2X1F708TNq9NAt2/fmnpg
+A1YWX1EUxzoiY/8rcHdoOrKKm4FKm4LZ90NuiIL4iOw
---- qAqy+kI1hpPXgVB+qcNqsOD2BSBxLtWq9ovkhS0rlCU
+--- 3iHL8TouNqGEBxIKO1zJEa0CO+omewquYlt65E2RpfI
-Ôð¥¹ú¿~m©5¡l€Ö½
zz.¹ºncöI{d%$AyCû^ÐY.+ë¾ËYè›ZZ•s(ÛØ;äWÈFoöTkÉÈôrAS\9tùS7í·
+‘üþá'(|i+ÂløŽ;íóÄâöÊ—<’N]'cÃÉ0Ë<C383>F÷ŒÎùf⥕ï'@‘F^¼½Oͨ]‘-ä'™(QEÒ<45>ýRÌ’¸+¯²%

secrets/secrets.nix

@@ -2,7 +2,7 @@ let
   kop = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFeP6qtVqE/gu72ZUZE8cdRi3INiUW9NqDR7SjXIzTw2 lukas@Kopatz-PC2";
   server = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAUA7uVKXAF2UcwaIDSJP2Te8Fi++2zkKzSPoRx1vQrI root@server";
   laptop = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDqcphdDEJhnSBkAZzQXZJDCzsyb/Tqpcf0pUADFpbd1 root@nix-laptop";
-  mini-pc = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILGsTZvAahTrszYDHn+94sLtcF8865/mpd26ZDVQklSj root@server-vm";
+  mini-pc = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILGsTZvAahTrszYDHn+94sLtcF8865/mpd26ZDVQklSj root@server-vm"; # actual used server
   mini-pc-proxmox = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP0kX32LfIOv8FDVvdp7lWesVvMGh5tj84nv7TkIR1cs root@mini-pc";
   adam-site = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAfaIaKoNStnbfjB9cSJ9+PW0BVO3Uhh1uIbZA2CszDE root@nixos";
   amd-server = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII/t25OaQF020DZdew53gMFqoeHX1+g3um02mopke2eX root@nixos";
@@ -38,4 +38,5 @@ in
   "radicale.age".publicKeys = [ mini-pc mini-pc-proxmox kop ];
   "binary-cache.age".publicKeys = [ kop amd-server ];
   "wireguard-evo-vpn.age".publicKeys = [ kop amd-server-vpn-vm ];
+  "cloudflare-api.age".publicKeys = [ kop mini-pc ];
 }

secrets/step-ca-pw.age

@@ -1,11 +1,13 @@
 age-encryption.org/v1
--> ssh-ed25519 oDXHAQ p7LQlfq0mtdnmTJOvi6QQqAg/uCKAUWjdoVOgNcqn0g
+-> ssh-ed25519 oDXHAQ YIid9iirmPoo6k+MzZolZUq+YM7+U2mfxwWzQsA/S1Q
-Ka17+MWpb/MnZrV5HIwji54GffoeZC4ZFPzhCIxlrOw
+J3HeDG58L2oZY1W8XpV6Fc/jigk4NeWUSyvYW2GdpJs
--> ssh-ed25519 xfrWcQ Tc14rVFq5eAmbTtjNkIVdpOEBce4E8JChTznb8B6HCI
+-> ssh-ed25519 xfrWcQ HC4x5Of4+tbA6N/xuLwRoK9t8fX92zZ2hEP83eK/pUQ
-izYgC0YkqgUT/l82363MjBrDoQ0R+b5LHn7B3TglOK0
++QMdeFeNPObTTryy3s/JyrJVWbAg3dHTCahlKngX4do
--> ssh-ed25519 IV3DkQ qQ8DSh8+Gmy0hV8w76hR+GiABQv+OJkigA40QycPABg
+-> ssh-ed25519 IV3DkQ mlatj+WBtKcjZW9qlGlNoaYz6K/VYu6+a97ees3mJjQ
-tZnpWcEEVLqwpRpmHo/Skbc2/78dXM5Swwv6cSbitXs
+9Gw1cwYcKfllZu02pLaiOUmMCpzKg5WO5tILNNHVkFU
--> ssh-ed25519 DCzi1A hTm67QVFyufZzbu7XZ2NxozPBVvOsN1UIi/8zBz+hiA
+-> ssh-ed25519 DCzi1A +bsxS2neqBO/uX4IusVBbfzbK/DeWS8l2setQ2qlGzw
-c0dCopDkZ0FgwHZ6b3H3uBJyVqvZGXtAU0TsZt/Zu8Y
+MwH3XyQ1DqSaWRE3u1xfteBMSglQ0AQvq7dgKOZpw4o
---- Pp0HncaouK+xj2oF56aJ+UDanDokOEzeaZif9G4obT8
+--- kPHpp8/8kHD/zbzA25DPh8E+4RfAcwSGYUYVr7NFTV4
-Çdš¬º¢*«)Ù®7å<37>pÄj¶Þˆ5Û­Ó—˜?%*$¿xoä@
+ýØ;CV—Ø
ÛÜ
+
+ëS”f-	ÿð†"`”Ý7îü‡.…<1D>)ƒº£Õô¯,«çãð…ŽIÛÕñÞ¿O÷E‹

secrets/webhook.age

@@ -1,13 +1,14 @@
 age-encryption.org/v1
--> ssh-ed25519 oDXHAQ JnlPQP9xUmPBWlHg55LW9j4BHpGIXhTy4kcpEBGrUC4
+-> ssh-ed25519 oDXHAQ YOjThOjyPh8j1zRTG8PSb/Do5NKjchlR0Z5oiYIqTVY
-1HiCgZQ/JUMTzvt4504ETWaMFKXiRJwVOkIHFNI3AUo
+ecYu7pV2y9k7i4c0UlOha1Oy00mZ0/35CzbHSaTlnNY
--> ssh-ed25519 xfrWcQ pLPHGDS8Jy8+/FyVpvqFeDTpgp9I76t9aqNut4NpMD8
+-> ssh-ed25519 xfrWcQ ppgMeDOCcqCWpYBaIwqIjnxWFcm8YASNhCd66zfJBkM
-hhXBFUZ9u4+c9MJcva4sWN5wD5LRFOzLxjlrCgxQk+k
+xqjfumnhEqpF0s+L9n0dlZK2BtcKSyZY0n1h4ogyA6E
--> ssh-ed25519 IV3DkQ nKOU6lm+OzX7x2ejhCe1nO4JFZvrROofhorfIPurdnM
+-> ssh-ed25519 IV3DkQ zPs9zEaCGed/0FlFT/J4IhJ9mK9zgfU31G8gfHA0AE8
-nELj0F7SeMFoysowosvRSEZ5VoAfVkwIjLMCUP3K64E
+JX8JSDsd4hkMX0iiqKhQf8nFhq5J8Q6QSqceKQjf8G4
--> ssh-ed25519 DCzi1A 0420GUGxNWBhhMlclQtfKk6kMpN/FpDL2tFKph8p92Y
+-> ssh-ed25519 DCzi1A v02CiKWDStJkaG3HlJ/ubQp/w39qsol0Mwu7nUY74Do
-o66Iv9MC/jTFqfjM6xAbjVOvoRDQnJ/QTNT8nwb4pdU
+xH4Ip5MhMFd+vR3ZBa2IJ7OBkDvOJc2wPbSRqEvDYi4
--> ssh-ed25519 lNJElA DcoTNBEN/IAqrq5s5X9FUXg45ipyOK1gYZZgYNN+sxc
+-> ssh-ed25519 lNJElA XXZRMJye6OkJn+ECW2OcpUaJUR+kz5lkDl7F36ff9yw
-iSyEZdguc8+p4yv2RP2iYfhVczRp5zmw6HylVuSN89g
+OfwpqFqfsJjH927zas1aqy+ZDkL6a5nkbhys6BScqOg
---- M4LiD5KtohoDUyCde9owKG1hKWIn3xS6iMrvY5sLp98
+--- Kjk4OMfBNeWo7/L1eAL+IPfaFL8xOp8ws5TOma02NKo
-@«fÛb¦’³èKÒ×(¥õA_C
+7’ˆ¢1<EFBFBD>X>(:wÌûeƒ}Ï°#FÇ5*
+Þøs»½°êÉ–¹è2ÞÎ!kä‰y`Û4ŒGÀðEPõòÓGU£(à?ÌöåÁö4àm$Á0øx|Ÿ²…œâz¨0{ó
•jví?p,IäË.Kò6B

secrets/wireguard-client.age

@@ -1,8 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 DCzi1A LulvmoZ6C2otVBZC3dzvZzT5aAi11OM390HoL65tvXg
+-> ssh-ed25519 DCzi1A zhxFqVyhUdmVvf5Wh/l07dtROYr52vjl464aWp8bbgI
-rqzbTdb2cz6dew0aRBIXVAMQL9s0U7aaE4gDE8ZT0sM
+73lXdktsZ09qD+YzFytm54woaDtLBZGhKnR0l53MmeU
--> ssh-ed25519 FOj4qg gmD0iZghlh+mbMg3fs8n9pCLwbhCHUYY5Cz/HFXHnTI
+-> ssh-ed25519 FOj4qg k5qqsKIUeJgynfctXXOPZoGCRyWmhfJhxJ7XTH2gwk4
-VCL9JgFbYkA37qMx2+VMQNa5ykOYSoXROFDZuNI9kVA
+7lPP00zZhD568yaASlRxsMDR2ORC98YmeJiSEWgearM
---- PQsF2R+ptDOl+jCWhAaJEjcv0+Y5g+guziY32lqBiGo
+--- toz9GNJXrCu59KKF7uDH5whudcVutVyWrfyucaYgbRw
-…u>ó<>MŽWÓ½.á…³ÌÁ®²ˆÊ¶–¯Yl6\›<>ã=äX±(¿‹ŽÇž<àÍ-&d5
+˜ÿrá{+çá¬Q¡'Aý¦	‘­ägõFìza!1jÏèI\BWN‹.p««ÒLŸ<4C>ÑšZØ<5A>x¥°9Ž*íÀùÔÄHþö;-½
-ï˜&ï“'T<r
ë@<à62—ìzq½

secrets/wireguard-evo-vpn.age

@@ -1,8 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 DCzi1A ik/pJSG40rFNR9Tde+Ud7RTuZwluC1za9SLrdnYyXDA
+-> ssh-ed25519 DCzi1A NKDkLZqhAQWqsWT3JaXJ1SMdoT63YOg30b/ZOC0mXSM
-aBWqRH0pdPYolWVAovT2cdhZZlRCG5ZTQfBjgj5jW60
+zKtwdrRdwwJcVQy8QjzlTONVPh8B0oYcpm98AXRbPBo
--> ssh-ed25519 Jk07yA jOO5I3Om/NvHDCd28t5OFlxJK1UwZayRro7/0pXWGBQ
+-> ssh-ed25519 Jk07yA zO9dqNhdPzIyyXJsFhXlk8qx1voY0i/glh/1dZg3enw
-/LlY7KhwzkunIvrPJ7SqLvRDF6s3JM62SWqlczg+vHE
+XyRJtCKs7Zh2CzH4wn+HHEkQHCJjpEzWzIiWhvvn+zU
---- 9SY9UJ5hw7csiD+edUptxq/pPUQDuGv70mrDtVUURw4
+--- M2/hFhh440WAVq/fZsfDmA3PDBpmw2DBPnaneFgm6Ls
-n¬Öc<EFBFBD>Ù,÷ Ü\~ë9É
€_‚š^e¶¬D̼ñ ^Ù­k]<5D>ÂAªÝÃ?`²)õaÇ
+<EFBFBD>!!ÏÚÛ_ŒÕ‚½ÀÞ,úÝz'{™)•euf¼Ozš\‹<>œw:´PTØuþv³PzŒ×u*N¢ 5 4û<34>…üôÎ/¬Üüf#û
-ô™Wó®ñƼþ¹CÑóžü#¨¶¯D

systems/amd-server-vm/configuration.nix

@@ -10,6 +10,7 @@
     ../../modules/misc/motd.nix
     ../../modules/misc/kernel.nix
     ../../modules/services/duckdns.nix
+    ../../modules/services/ddclient-cloudflare.nix
     ./disk-config.nix
     ./mail.nix
     (modulesPath + "/installer/scan/not-detected.nix")

systems/amd-server-vm/mail.nix

@@ -1,12 +1,15 @@
 { config, lib, pkgs, ... }:
 let
   # create hash -> dovecot -O pw
-  tmp_dovecot_passwords = "kopatz:{CRYPT}$2y$05$jqBkvhJ0e439J0PLhef4leOGc3GACGH83kSDCrvmAcsdz68tELkA6:5000:5000::/home/kopatz";
+  tmp_dovecot_passwords = ''
-  email-domain = "mail.detschn.net";
+  lukas:{CRYPT}$2y$05$jqBkvhJ0e439J0PLhef4leOGc3GACGH83kSDCrvmAcsdz68tELkA6:5000:5000::/home/lukas";
+  '';
+  email-domain = "kopatz.dev";
 in
 {
   # 25 = stmp -> postfix
   # 143 = imap -> dovecot
+  # 587 = submission -> postfix
   networking.firewall.allowedTCPPorts = [ 25 143 587 ];
   users = {
     users = {
@@ -28,9 +31,6 @@ in
   services.nginx.virtualHosts."${email-domain}" = {
     forceSSL = true;
     enableACME = true;
-    locations."/" = {
-      extraConfig = ''return 404;'';
-    };
   };
   services.postfix = {
     enable = true;
@@ -105,22 +105,22 @@ in
       };
     };
     virtual = ''
-      root@${email-domain} kopatz@${email-domain}
+      root@${email-domain} lukas@${email-domain}
-      mailer-daemon@${email-domain} kopatz@${email-domain}
+      mailer-daemon@${email-domain} lukas@${email-domain}
-      postmaster@${email-domain} kopatz@${email-domain}
+      postmaster@${email-domain} lukas@${email-domain}
-      nobody@${email-domain} kopatz@${email-domain}
+      nobody@${email-domain} lukas@${email-domain}
-      hostmaster@${email-domain} kopatz@${email-domain}
+      hostmaster@${email-domain} lukas@${email-domain}
-      usenet@${email-domain} kopatz@${email-domain}
+      usenet@${email-domain} lukas@${email-domain}
-      news@${email-domain} kopatz@${email-domain}
+      news@${email-domain} lukas@${email-domain}
-      webmaster@${email-domain} kopatz@${email-domain}
+      webmaster@${email-domain} lukas@${email-domain}
-      www@${email-domain} kopatz@${email-domain}
+      www@${email-domain} lukas@${email-domain}
-      ftp@${email-domain} kopatz@${email-domain}
+      ftp@${email-domain} lukas@${email-domain}
-      abuse@${email-domain} kopatz@${email-domain}
+      abuse@${email-domain} lukas@${email-domain}
-      dmarcreports@${email-domain} kopatz@${email-domain}
+      dmarcreports@${email-domain} lukas@${email-domain}
     '';
     mapFiles = {
       "virtual-map" = pkgs.writeText "postfix-virtual" ''
-        kopatz@${email-domain} ${email-domain}/kopatz/
+        lukas@${email-domain} ${email-domain}/lukas/
         test@${email-domain} ${email-domain}/test/
       '';
     };