enable smartd monitoring, increase upload limit, rekey

modules/nix/settings.nix

@@ -12,18 +12,23 @@ in {
   };
 
   config = mkIf cfg.enable {
-    nix.optimise.automatic = cfg.optimise;
+    systemd.services.nix-daemon.serviceConfig.OOMScoreAdjust =
-    nix.settings.experimental-features = [ "nix-command" "flakes" ];
+      lib.mkDefault 250;
-    nix.registry.nixpkgs.flake = pkgsVersion;
+
-    nix.gc = {
+    nix = {
-      automatic = true;
+      optimise.automatic = cfg.optimise;
-      dates = "weekly";
+      settings.experimental-features = [ "nix-command" "flakes" ];
-      options = "--delete-older-than 30d";
+      registry.nixpkgs.flake = pkgsVersion;
+      gc = {
+        automatic = true;
+        dates = "weekly";
+        options = "--delete-older-than 30d";
+      };
+      extraOptions = ''
+        min-free = ${toString (100 * 1024 * 1024)}
+        max-free = ${toString (1024 * 1024 * 1024)}
+      '';
     };
-    nix.extraOptions = ''
-      min-free = ${toString (100 * 1024 * 1024)}
-      max-free = ${toString (1024 * 1024 * 1024)}
-    '';
     #nix.nixPath = [ "nixpkgs=flake:nixpkgs" ];
     nixpkgs.config.allowUnfree = true;
     ##home-manager.users.${config.mainUser.name}.home.sessionVariables = {

modules/services/default.nix

@@ -2,23 +2,24 @@
 {
   imports = [
     ./acme.nix
-    ./caldav.nix
-    ./opensnitch.nix
-    ./github-runner.nix
-    ./adguard.nix
-    ./dnsmasq.nix
-    ./games
-    ./gitolite.nix
-    ./ente.nix
-    ./kubernetes.nix
-    ./kavita.nix
-    ./nginx.nix
-    ./fileshelter.nix
-    ./wireguard.nix
-    ./kop-monitor.nix
-    ./kop-fileshare.nix
     ./adam-site.nix
+    ./adguard.nix
+    ./caldav.nix
+    ./dnsmasq.nix
+    ./ente.nix
+    ./fileshelter.nix
+    ./games
+    ./github-runner.nix
+    ./gitolite.nix
+    ./kavita.nix
+    ./kop-fileshare.nix
+    ./kop-monitor.nix
+    ./kubernetes.nix
+    ./nginx.nix
+    ./opensnitch.nix
     ./plausible.nix
+    ./smartd.nix
     ./syncthing.nix
+    ./wireguard.nix
   ];
 }

modules/services/kavita.nix

@@ -110,7 +110,8 @@ in {
           ${mangal} inline -S Manganato --query "Terror_man" --manga first --download
           ${mangal} inline -S Manganato --query "I_Stole_the_Number_One_Ranker" --manga first --download
           ${mangal} inline -S Manganato --query "hidan_no_aria" --manga first --download
-          ${mangal} inline -S AsuraScans --query "the_max_level" --manga first --download
+          ${mangal} inline -S AsuraScans --query "the_max_level_hero" --manga first --download
+          ${mangal} inline -S Manganato --query "Parallel_City" --manga first --download
         '';
         serviceConfig = {
           PrivateTmp = true;

modules/services/nginx.nix

@@ -59,7 +59,7 @@ in {
             "/stash" = {
               basicAuthFile = config.age.secrets.stash-auth.path;
               extraConfig = ''
-                client_max_body_size    5000M;
+                client_max_body_size    20000M;
                 proxy_redirect          off;
                 proxy_set_header        Host $host;
                 proxy_set_header        X-Real-IP $remote_addr;

modules/services/smartd.nix

@@ -0,0 +1,44 @@
+{ config, pkgs, inputs, system, lib, ... }:
+let
+  notifyScript = pkgs.writeScript "smartd-notify.sh" ''
+    #!${pkgs.runtimeShell}
+    source ${config.age.secrets.webhook-smartd.path}
+    MSG=$(
+      ${pkgs.coreutils}/bin/cat <<EOF
+    Problem detected with disk: $SMARTD_DEVICESTRING
+    Warning message from smartd is:
+
+    $SMARTD_FULLMESSAGE
+    EOF
+    )
+    JSON=$(${pkgs.jq}/bin/jq -n --arg msg "$MSG" '{content: $msg}')
+    ${pkgs.curl}/bin/curl --request POST \
+    	--url "$WEBHOOK_URL" \
+    	--header 'Content-Type: application/json' \
+    	--data "$JSON"
+  '';
+  cfg = config.custom.services.smartd;
+in {
+
+  options.custom.services.smartd = {
+    enable = lib.mkEnableOption "Enables smartd monitoring";
+  };
+  config = lib.mkIf cfg.enable {
+    age.secrets.webhook-smartd = { 
+      file = ../../secrets/webhook.age;
+      mode = "444";
+    };
+
+    services.smartd = {
+      enable = true;
+      autodetect = true;
+      notifications = {
+        x11.enable = false;
+        wall.enable = false;
+        mail.enable = false;
+      };
+      defaults.autodetected =
+        "-a -o on -s (S/../.././02|L/../../7/04) -m <nomailer> -M exec ${notifyScript} -M test";
+    };
+  };
+}

pkgs/mangal/default.nix

@@ -12,8 +12,8 @@ buildGoModule rec {
   src = fetchFromGitHub {
     owner = "Kropatz";
     repo = pname;
-    rev = "ed061400fbadb0ecceb4f9ae0a39da42475b709d";
+    rev = "ebbbc83ce87f124cc819ef440e40f1c93a5f2ecd";
-    hash = "sha256-778jdPJC8wzrwawbuTPbS5vCOAR76G+1WvbMpQ7jpNw=";
+    hash = "sha256-++fJhHbEKNg3XaCPrYzUmMpF44IM3C1W69ZsTTSqX2g=";
   };
 
   vendorHash = "sha256-FOi36EmbggxkJ1/wtBO9Vrr716z3dwDevSokFKWwGzY=";

secrets/duckdns.age

@@ -1,12 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 oDXHAQ MYpdCG0zLQb4gMMtefpozExZtYwQ76dzr/ihEP5HiAU
+-> ssh-ed25519 oDXHAQ KTTFsKXQfHVY+ZhdsNfC6kUnuEdNSlz9Z+TiisCLFkY
-jiiqWsDcEWHJRA1cGlstdbTM6N8y3kDM8Rx6PWYTH0c
+UEpAdS9bPcPjsAYzfxbN6ir5BqV07RWuOupaPU+7IPY
--> ssh-ed25519 xfrWcQ k5mGfz1oY2TRsOuCA6VXH7W1nEJlkxGgcgQ3xgKyBCU
+-> ssh-ed25519 xfrWcQ mC3yi/OAqQH0epKWQqXBJUDgu8hQ/bJtOyi0qz6dkB0
-j4wVkbV2qagGQymSXRJJGfUYuwf0Rn/DRZgxkLR1y1Q
+SrIKQABaoCouhsix3smMayrhM/2OJppTKenazJlah+I
--> ssh-ed25519 IV3DkQ 7dpHUynNdZpktntsGd2oTv5+30o8t3mUFWnutB0omWc
+-> ssh-ed25519 IV3DkQ 7wZ3eoFc7TqIyGG4GHqanEkwqTTWDNUubgxIGfYm2jE
-c4XxxS1+ZpJqGmjLOW5Xi70DpY1T/9SAnt4Fs5/1RCQ
+O7Us7B146qYwxE1oFU6VqL6XJ3AclFnSvgr3wBPXG1k
--> ssh-ed25519 DCzi1A KBIJpSeVZtbujtLdP2fSjVis1DF/PdiKdzYRXuSWzVA
+-> ssh-ed25519 DCzi1A CIIjo9BNl/H2ZCRRhgw0dT6tasW/shVi6w/g9DFOamY
-Jr6kB1eJlr1IgcJj6wThm+yPxyFmqLb/6xb2nmrceDU
+bislSvJ2UN521HDg9U7yHIXbi8KpV61XHuVk4qhgeH0
---- 6eIZactoXlgq/FVUuqPMyVxjXer9eXyNhMMmvfhnvF4
+--- Lh5SYKYZcCOEq66jW3H3uawATD+aNewkGWR2ePo+BLI
-èÕ•xV#¬2HC)¨í“ú±¹%ŒÂ7H¯r
+äÅKŽ–ScÎÆm;ѽ9I\@ЙÛðËhVéi†ÓÒXE×Õ9ž%nT¶”G×=åðY°ëY“,=uL±u”.L¥Î¹Ýu
-¦ê‡U¸ˆàq:@ÛÆ°ÅEXh‚ÚЗÔ{©ãˆxa¤q'nk

secrets/github-runner-pw.age

@@ -1,11 +1,12 @@
 age-encryption.org/v1
--> ssh-ed25519 oDXHAQ JS7roTe8m4VejCS3nqP2292m82GDhM0U4SCpesfjDw4
+-> ssh-ed25519 oDXHAQ kMAByOKgWC2oTQkaubpmBBGP87GrY4/1jTn1OpEspi0
-/RaBXs+cF1XuqqLNxJNAUX27F7BlfJprZ8a4TWpFiOk
+aCsXmxooueb4NpbJ7qANkzczwG85K0iAMJE57QtHT1k
--> ssh-ed25519 xfrWcQ hnbpQY6jZ9H1WYqUs/KuRts9dk3UZOMfljy2zVA6lzA
+-> ssh-ed25519 xfrWcQ N/S2HphlENnOkoMMKQliOhnti+Rg+sRa1oerrRru3R0
-3r2lBcpXU6RJQrP0otUTD2AU5yipeLOJ9XWXO6QQg10
+UrBV2ovRaAVqlQmpjf7bACcF2apy0u1oluZ9Z62YkHA
--> ssh-ed25519 IV3DkQ LiIYTXR1VK0cI7C+KwvX6rSa/vodxDoXTxWlswxHNWM
+-> ssh-ed25519 IV3DkQ VtXX4lTyQR3ktYlfqkAeCufDtWWW/CjgnaOX0/UGeFU
-A1ZDFMQxuhb1SRQc2qtsXnH5pp48wNM8DHYwg/dwzo0
+0bH3YijjGWRaFQ8I/PwupAZ333MvPKQcghuCc6+qndE
--> ssh-ed25519 DCzi1A BR7ab5iNCbjc/LvvaOSw9ZLcWo024edlgiXge688NBw
+-> ssh-ed25519 DCzi1A a7X1kOvA1X7rFXatX4msDHNnGBhxqd5GPMlI2k9juXs
-TjQh/eq3v7hBy3KmDnz68lFd9hRmalBLTLT8ATac/FY
+YC6J3AQbhCwhi7h/X1RQgb0vrprXLAoAfVdLCwoSjiQ
---- T7Cjd9cmYNYdl1iIeKBI7HgG4bZ9OX3em/wvHaZ0lpA
+--- koN20eQkT5Bpi6kLiIa4eVkN3+vl/RA91zm2PSg0ldw
-*»¡`iøu¾û‘6šýð&hç0*ÂÅ 'eZNútÑ˨{ùÚæm’¡_fõ£‹+¬o	s–PT€›r( ?þÏ~¯ez¨'†ä›Vˆ|&43žˆ­±J'u‚7I·»k›!\µó ®RÉñ›
+<19>J÷†¶¡î?”"¯Œì)wnî^’+ÓF<C393>@]˜
+i›

secrets/matrix-registration.age

@@ -1,13 +1,12 @@
 age-encryption.org/v1
--> ssh-ed25519 oDXHAQ fBX5T49EJAUK7dCANM91vXzRO+VXQknI7ayeZNk2LV4
+-> ssh-ed25519 oDXHAQ LZnNv6OdgvEdrogYC1yQiFdu8OpI0RnX0F7esNimB30
-E8tZ+cGclHoQAq81rhIiFNNGvT2uy9Z6UfKthE+2gqA
+cWlVnYK4IxCQtA0FHeA4AmAY5EzdkshY3VV58zydFcQ
--> ssh-ed25519 xfrWcQ NMbZGSkY6/yGLRF7JS5dU/kKYVvIpL0UXDoacaqNyjE
+-> ssh-ed25519 xfrWcQ hLs4PfX/g/hQaAeGlkQWxbWlk+Y6f+JzwsPFTpYYhHs
-vqOMR+Ud3syclJofwDPZkzIZJJoyX/2qbp3wu+sssbU
+DdLSEuFxdAEX2hyM+DTKl7GxzJd6ZwlOZI7KD+lxcek
--> ssh-ed25519 IV3DkQ nUbVOu7ff8nv/XODyMsLnrdoTvV28elfeEdsRFdVLQk
+-> ssh-ed25519 IV3DkQ PwXrK5LB0YzBDrSAo1SYtxUEslAnuPBncQbnaniE8i0
-PuiMJvwNse6HBNZVs9u5UpQs5N5pE6Q4TUFCovXXZMk
+6VZg/BTxiDACoFPy7uNIjydeauiktIAnvU2cHdMc+Yo
--> ssh-ed25519 DCzi1A CmKvFWalJbkzC+CE8nC/bFuL2Pi8Fgy9apb+BtSK/Hc
+-> ssh-ed25519 DCzi1A 4PRejuLL3Lk4GcV2Jxrp/7XYt3nJv9jwmVa+2pzVuFE
-X06AaeTTSP6M90a1fRbu2zuIf49XuxxPvRNls+Rx0Lc
+J4Nh0lPN8pELXQ0PHbM/uyfNhbm0JrcTc4IrsX/7lr8
---- wKfObEsamnSkQ4EBzThGxTvsHhXkw/5L83yKJIrgSvQ
+--- sNlrWTi0hCVj8woT52fTlj3fjl+RlVxfU12bg3dZ0co
-#&
‘«_o+Ã}8F Ò‹V:ˆLüM8{"»Ñ¯*°';f¼Æß±L
+O=?khCRM]SÉ¿áN¸CLTãR±/ð½ ´Œ:a1
œµðiy£€o©ì¦„0+U|²Ý"y:7„bðwH^jÿr:¯ˆBÀÐõ¤ i€0BÀ`[XNê`­Zø<5A> BÍÞ½q-e•ñ
-w,’«$*ÜÐ3V¾Rø§žæ§òlá8i¸!‰ÍÈKY.ÌÄÕÃK—›÷Ô®)Cx6
+ŠTºÎ?¹*OWÜIÈ.ž<>pZÃË<1C>”¸âáýhÿD%Ô–ëoŸJÆ.í%t…Z&baB\׉µ2ýzxU~Ïsq&–MAoi¥
-*öå­òí<>‚:ÊjÖûm^ª¼H#Ïì!VgÊnw׊Áxàçõg2°Ï]HÆi2+ª™¡<E284A2>ñ™•R*wÇ

secrets/nextcloud-admin.age

@@ -1,11 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 oDXHAQ fXHB5hLI9sET0Rc8lJThV5j2JmA63LObUPQBt/vc+RI
+-> ssh-ed25519 oDXHAQ RXCzzID/JwHJWJ+dNI0h2EUum/JaNfasDVQcJtM0ejg
-E1U7sRa0TpAof0WyJ5sBSFGzRkIu0SL4PNSkqAbYz8A
+VwajpdL/Jf5msT1YiNEfOuumcrNNEpqiLFDLUA6Oc8o
--> ssh-ed25519 xfrWcQ 9BGmBObA+CgnHAnzeI73f8A9ckeE8q5ePLhrRm1GSlo
+-> ssh-ed25519 xfrWcQ 6keCDcLkT+CTHzU8bLEDgLV0SvB6Dxje3yelkR0ipzo
-Y3VYXUGZue7MXSEGcaKdv9+HLTSxqWQn1hF4P+6GYxg
+YDsEJ+hH9pFcmH0K8rY3H0G69n8pUul8Ga4OH1i+Xvc
--> ssh-ed25519 IV3DkQ LXwU7NB/ayZI18XNfe7U9kcfRqUkX93dvJFik6D/DGk
+-> ssh-ed25519 IV3DkQ +ZYvrVB4zr/3qkmOE8LM+NNkuwvsXYj1/0S4Wu9iQS8
-nGR0ZFlSPFZpfb6V4zcRsgXcrlcqJtCanHtXCVodBeY
+va3vbt69s9T/UZ15UOdfuxlvAs1C3nMzynaqZzp4vZE
--> ssh-ed25519 DCzi1A FyYNnl0gS6QtnKCNigBodzbY88z1KQWCnX4ghU23im8
+-> ssh-ed25519 DCzi1A mwaJICkeBEi5UBosbHCiXTqjSUN2Lq9lUkTqKetXvSk
-38zIk+7Vnho8dbqO10LaPqvN4eNxBoPJvzn90z5J0ww
+VwieNZ0asL2W49XQfboJJMh6ZEZ/KVghW8K/vS0WMTM
---- p81MUS7mwH72TH/SkcvKhsPjK+ZHF2bMhuSyXdgELak
+--- qXLby/6NBNzXc3GyckAR/PxxG0oj2+MMQvTE3QaZibM
-\WÆPúýÌ‹ºÉÑÅ‹QBáÎJÁŒ¬Ô»Y\_KÞÒ×ÇÝô¢ÃT¢½ÉFãÜ/à§#†"4$y¯#æÑÚKäÜðŒ&äÑ͇)JmˆÕ"ìf©ñ
+ŠãñZ
g*Ì¡$.ŽÀámÏ8S°ÚÌ&9»AŒ
±Ví`qbµ,éW¬•Éîºw·’ø"R"³±çŸóŸÁª®N"SÐYÙåjŽ•ôÅpîIŽ¬

secrets/plausible-admin.age

@@ -1,8 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 bqM3xA OXbI4U7+w3NjG5eJKiSu1B/tk4TYCkF/uT8yikuMgxc
+-> ssh-ed25519 bqM3xA 1a6orkPmKeoDTOCt7lQptYH0/xs8xmaZ0Ypj9V2unnM
-L0Ib9e0VT7VM7FeJGdsZMSiUrastAVbezp8gx0DumlQ
+eC8xde1MzItMTVpXRi3E2UWDb00qfqPrzppD3P+QAOk
--> ssh-ed25519 DCzi1A qS32ujkMmq+SKb3yQgtpa6hkv06nlLXTSLysPEyDlkM
+-> ssh-ed25519 DCzi1A 794GChvGjZAuky4TMtrETHEmXlU9hKH1orMGIZKAeXY
-Nyw3JSe0nY20pku/T2wH3ev6U16rUNi1hOYLrJ569TM
+bnCI2krZFbQGKo1QsuTUMaZrptySEwhFomUGTbsFayg
---- 8Utd0TThR3dlnBQiwZDl7SvCxD0aKpobakweyQEu5II
+--- uqxWg3hKE13fDU4QOelLf5zl2lvUBOSWu4pOKzkZCbY
-]Ù©XG
+™ðþÁ¼Ð¤õ¹Œc‹Pù¡îö)¤ï—¿ó^ªûfš:Æ/Ë«¬
-Xâ>³u

secrets/restic-pw.age

@@ -1,12 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 oDXHAQ bCdTSCV6rBWSRZRM2Pkyw65B6XHNaE0ApGZ+9UTz5ko
+-> ssh-ed25519 oDXHAQ MeblW5bvjNPWwGJfdZ8Miwrht79BUbHw0Jy0up1N4hw
-+301nQus+FP6u2hA0WAjfqUuYjSp9nU+LkoxEAKE20g
+4egfGFBxHU1FSk3LSNRR9A/pANR6nJ1CBLth/GzfwXQ
--> ssh-ed25519 xfrWcQ 9HqCTMDwCWLMWmJDpR9b8yDtG954dVXFaDptjtFdCyw
+-> ssh-ed25519 xfrWcQ ocBSkSDvN/RUnlnvJD4xB6C+a7RZUVWSpQzJDFL1WGc
-bgNBTtiI/BrZ7fCP/fYcMJfQ6GdQDKR0KueezZp4h8Y
+n+90x0g0SJennwiFIthCpWeb9EFPmvopg16+tH1O98o
--> ssh-ed25519 IV3DkQ 4MS0ryEQmYsI8RPumMlbHT3mf8q9ghts2O9BweSJA1w
+-> ssh-ed25519 IV3DkQ CUmoMjOf+LwLQyi2yYiZUuMFjt6JhyGPVmICaZR+Ql0
-gIHoHJE4clbLEpTwY5j5kcqw/ZM6ZDGY3s2/m01/mE4
+7DHpXnG7+f2SZDhI+7kLoDLMxPWPuyRKuvNrFyrjFhk
--> ssh-ed25519 DCzi1A W8IIOPopRIc19tHye2WoPXSa2SgvcXd29Xlybj/H5QI
+-> ssh-ed25519 DCzi1A ZiGuuA3LOUyO7/7tWGczEfu633myZBQoZWqf5GySTh8
-sDniYKIfudgMlV0C/eR32b4FUOb+YEKC158Nq1+XW/o
+qRZ/kc8o7dRW+vg2b1hl6rNouW6iObDKymglwePUkMk
---- KBBcuTa6W9FyFl9I7M3pokd6Pd+owUAUmzxr9N+vRcw
+--- s5II1ux/XZVfBGxBvKCsaD5jFiFrkzKIeQ+7fa57owA
-<1D>‰W‰Ï5ïÝ7V4
+‰	Xë½ë^ÿÎ÷êÔ7YRÿ!jÅ‹3)2G±Ú¹ZiÖ…²‹u¯n¤¥Ééb?“¤ù™t@€Á‡þŠz«¿ã”fÜ!ë
Ú¦©Õ”	°¶<C2B0>…ñHn
-£z‘ÂÈïØ~w0ÖÝò.¡ÛR¿–›¹ÿ}“k6TzòŒ{Àž»´Cï2ŒÿѪ'*ú:Óe5†ž©;p‹TAw

secrets/restic-s3.age

@@ -1,11 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 oDXHAQ nUi7y8LS4in+TRKsFjuuoV0PMys5yac1CVeER1pS+Xo
+-> ssh-ed25519 oDXHAQ XOzDNsdpRfXTbFAMh827HC8fpfbZlh3hLucRdC3BUkc
-ccg0QK2ceiS4WaHL+eLgqQVPubWOrSzt6+fmqSuW5nU
+PpB9oNTwrMetQ0la8Jgamms2MB9jvu9026lsgmgMahk
--> ssh-ed25519 xfrWcQ Oorl6EfcWwvyvFdy0f5DYXnmNVP281L3ekMVCzSsTkg
+-> ssh-ed25519 xfrWcQ LEjVX7bulslggbRPYHZ9NSF8keYkftMCj9axmnAtWTY
-FKYOWsTlXMhhwt8j+p9820fOG8ta87eNP8D/xmKOuZ4
+Z/DVUfeHL8kc3RyK2wOxVL+KJ4Kl8k5w87aDcFq1IpQ
--> ssh-ed25519 IV3DkQ 5TFbxZFziJXpqp4+8gKaRay+yexcFyuvtlKsGU2EPQA
+-> ssh-ed25519 IV3DkQ TmMbexUGnFUk1bago4Jij9o8NSYnh1DH/V4bZTLmYV4
-tOxTJWyv29OKcVGpShE+azvgXvvx118lc/n7063pwBQ
+nTh6jPMDNHa5ColIpaYEqrp6IwN5hbAhKz8R6zbLUZw
--> ssh-ed25519 DCzi1A NeMQp162PDxljqB5cROa6c884oH2CS9cb+VTzw44qQI
+-> ssh-ed25519 DCzi1A DlB+qSeuF/GbE+pjdLQv4cDxxf4ryihE0afur4qGWCw
-KRaE3g7F8CfdwvQyh2Oenq8BovoqbSe3ydzLSpZoMfw
+JCiIrF0KsQ2LzbKGuBuEg9Exk2Uq3KJm5L2c6d2Aj7w
---- CyUjL5upG69cWorYHcDLaDuf6ciDBkr1Ns/J3gSHNcw
+--- +CnD1rfpAvIzKfq1FBG4dUP9wmOWX/hG32Bco8xergg
-ýICAí–7¤<37>ã‘™Y‡èUÕ¤Èm/B ¼GËô"&¨^ç@έ¯<C2AD>P/Þë]yÔ”ü ÍTí/<2F>ܦ.q›}ò‚JUëiä]/3PÌ1(
+ˆ¤šÛKÂáXHòÌcï,½rJW›dq†¸þ/[FTOd™GÓ‹ébJJÀe°!†ä2-œ\]{®ùZÕ’f¾¦ª[+èÖs ¦¿ª%ÂkÏæ0›½Ú¤r¬3é9éÑ…nÇìï‚±p<C2B1> ¢9·ÁzÆ*!wðT¥<15>*([

secrets/secrets.nix

@@ -5,6 +5,7 @@ let
   mini-pc = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILGsTZvAahTrszYDHn+94sLtcF8865/mpd26ZDVQklSj root@server-vm";
   mini-pc-proxmox = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP0kX32LfIOv8FDVvdp7lWesVvMGh5tj84nv7TkIR1cs root@mini-pc";
   adam-site = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAfaIaKoNStnbfjB9cSJ9+PW0BVO3Uhh1uIbZA2CszDE root@nixos";
+  amd-server = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII/t25OaQF020DZdew53gMFqoeHX1+g3um02mopke2eX root@nixos";
   users = [ kop ];
   systems = [ mini-pc mini-pc-proxmox server laptop ];
 in
@@ -28,7 +29,7 @@ in
   "step-ca-key.age".publicKeys = [ mini-pc mini-pc-proxmox server kop ];
   "grafana-contact-points.age".publicKeys = [ mini-pc mini-pc-proxmox server kop ];
   "fileshelter-conf.age".publicKeys = [ mini-pc mini-pc-proxmox server kop ];
-  "webhook.age".publicKeys = [ mini-pc mini-pc-proxmox server kop ];
+  "webhook.age".publicKeys = [ mini-pc mini-pc-proxmox server kop amd-server ];
   "stash-auth.age".publicKeys = [ mini-pc mini-pc-proxmox server kop ];
   "plausible-admin.age".publicKeys = [ adam-site kop ];
   "plausible-keybase.age".publicKeys = [ adam-site kop ];

secrets/step-ca-pw.age

@@ -1,11 +1,12 @@
 age-encryption.org/v1
--> ssh-ed25519 oDXHAQ L8RbnVX5rl8T6esRa9icyYuYjyqO1+NRPQtS8GdrwTk
+-> ssh-ed25519 oDXHAQ 2ymfFXvSKnGRgK3lYGpGjKSo2aHoc8pWRzyfr4wvAm0
-DhrclVhBTnBQmqkErXwhXN19jcgCWPmOAdKOAo8WQKs
+vr5pxY9w5wtzgv/UeQZLD7GWnrMtx/CYcdm9QKJqcBc
--> ssh-ed25519 xfrWcQ r0NyjJ63Ary6rW8fTfOJEioCgeA63USQjlYug4R7+VQ
+-> ssh-ed25519 xfrWcQ fGCZ2z1IjkVbX7wvoHeXJdZ4BEnpSs+y7dirgWkWU0U
-SCzuV64fSfACUjMsn8SFn1wNNN4iaEej/6QVnJuOSVQ
+IhvYJJxfW7+v4rDZ7vCuNN/Wxihi3Q/svjnDkZqb/dQ
--> ssh-ed25519 IV3DkQ q2NjfeA7twQvW5uV2FQQQKEHKwv7OyQNjhyRY7YYTnw
+-> ssh-ed25519 IV3DkQ 4oGxySHQjh8m0vUawi/wCTQXsvabLzV0z+KKLADkpDo
-CW7RgadfeiApJGEBfW15SlQBLuQdZT+8HswmoS78Gio
+PydLpD7UwO6+r2JisXwSdJqIKcheRCBUGbeAhbrkKsc
--> ssh-ed25519 DCzi1A ZqeBvfOmcrSckdQ8gA4yuOSgVCBfENC7MRM2tcC/pT4
+-> ssh-ed25519 DCzi1A dObjGBaWBiC8VFbFtKnicT9PB66fI69F2ZGpdyTl+20
-6bmUiD9b/eA00J1H/N6RKEaX4ewm6cM74qDTcBaftx8
+6yv8Jaee08k6KF2WJUPYYqtoe9JItZUvcjqEdYrxpDY
---- mdS5mRZRE3Otc89527fOYllyFM2TmlOWdDRbkjrrZ+M
+--- 5hzUeFAdm5Tag8G0OAtSCyE4d2uq0ZaBsLyF53oGuuo
-MþN·ô<EFBFBD>$æE<ÒüºÞ^5–Â"ãÙ‡ï6r¥Ê9^±“U»75²£)<29>‘<EFBFBD>ôê±õÊž­,QÞJÀg¡~]¬OÄ
+[×<>K
+¢ÃåÇ쟵˜…µ×ézˆÉ[

secrets/wireguard-private.age

@@ -1,12 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 oDXHAQ ycMrply5zXpS2iEZ9WlqMzh+TJrxKlajkloyEesNPAE
+-> ssh-ed25519 oDXHAQ UN2WuFkB+D68fbdzOC0g6x1qPQnVg++ab1zQpULSWjk
-9E7h1h8m0b1O264V6XdQnvbDS9QdKGg5RL+a9mROkr8
+eCezJvnuZYERwVsl3r0nsEF43Y+Jm48NWJzhMjgxZ/I
--> ssh-ed25519 xfrWcQ tuUCexB9PelrmSscKj03mJNIudr9ufvNZ5eDPKMdXh0
+-> ssh-ed25519 xfrWcQ MjbZTZcj3ldyD7CwAvWkj0GuiL0HL3vx/wV0y9/IYy4
-m8oM1uUT6t4w46X6tcwLH42ArDP2jWA2V37tEXAPwiY
+u3RvnnYKHyAT6INoGcpT26sL+EhLe4rZ3/mOSpkXFTA
--> ssh-ed25519 IV3DkQ czqea5pCSja7n/3fMtAoeIz9J+3y4yIzIhuA/gJg9yw
+-> ssh-ed25519 IV3DkQ ftYKp8MC6n26hGxiT3QjVXptmvBQTKyi6oX0UJrbfFI
-5y5yAyEYyWT7sdnzVaNHnLM5SRFcZi3w/rcBTkJuYx4
+lL/C4ufi2vD/B+uLyGr8OLBx6TuF/KVvnkjRVSzGtcw
--> ssh-ed25519 DCzi1A LyDvQ5eUvoEywd/brvNjieQEPR0vqhLcuAWOOdNCpFc
+-> ssh-ed25519 DCzi1A 9jKX67gvYP89v3u7Ir37EMDDXrTQTBzZOuObHrXxhG0
-IUiKZKf9adTo2PgBZcCjwtH4noKN/MNSa8Rnff+XpJs
+KjB0/6x/9XgXiRNfPi1YZ7KtrvwZP3QIKluj1D7VDJY
---- aL1YI8NF550QgpFeXzWCR2DziD7u+eytLZZnvju8I6c
+--- dECyVdvzWEG1gBOC4YHSq3dK94vaImUSI5M5dXThx44
-	Ì"ñ`Í{ÈÑF}*NsÙÝ‚.˜îî
+œÚ»…„øw±sq ÀÂB–_xI£ì ¬QÒ{ãÊ1ïtä{`CP¸¹¥NšõCŒqŸÇüQ½ºk:öŸ“?¬‚Ë}1w]/ðUE0<11>8U
-\”,Ú8—aûpÍ”Ÿn¡ìn

systems/amd-server/configuration.nix

@@ -27,6 +27,9 @@
       ssd.enable = true;
       wooting.enable = true;
     };
+    services = {
+      smartd.enable = true;
+    };
     graphical = {
       audio.enable = true;
       sddm.enable = true;