fix secrets

secrets/duckdns.age

@@ -1,10 +1,10 @@
 age-encryption.org/v1
--> ssh-ed25519 su0Eyw abgbb/Gl03Gkn8FXt8OWvsQZIIkmp+9OJYJBARfuMHE
+-> ssh-ed25519 su0Eyw o68gGsP73GV1X0O9fxC10Ch+tKkRozMVhbdCjqxAnRE
-C6btapYsEstmrPfOSzApBxo88PCVG0ECbJJ9ATvHwSo
+UaH+SsHwD7soVZHRxqddtdeYoeN5Hzr09mf3z3qdITk
--> ssh-ed25519 IV3DkQ r1h8O7eotpWQ7R2MC/EgWsndd+V+YNJs6SEQqxY4DHk
+-> ssh-ed25519 IV3DkQ bzmylmwHbXJrEvKBM9Be+FiLJ+hydiTN/5Gb44pgDEc
-FRuoj1KMLoHYGYk+78cgQbtH6QN0LQX69LzS72zTeLA
+aAXgH117bwJcBybdA3uNhtixGIPoQOi0xQw7YbPl0Lg
--> ssh-ed25519 DCzi1A S5japvaVIvNF8gB8d6lDMniYvWDhPXKxdHIypoYQiho
+-> ssh-ed25519 DCzi1A 9pbmJ3NzrcuZ94eFhDLFegBEm+ET3JZA0/kPKxILmUk
-us1sOKs3YwTQZEbgh3YgN6GgRDP7Na3KGdzTSqzENrA
++ODpabvMmupX9yQEWcfkzdLdPd7LoHgK0Hcs9ZREk1I
---- Nq1cKNge2TngWd41zf1sTneHozmQzGrFQ6y6qtXzRDs
+--- JIMYZ0nutcLGf9CrevH36atF1McYWmDzP6eqqT7MTk0
-9<EFBFBD>1
+<ñ ¯ÉÆO·J´α»ç-<1A>”ƽ@Pð}ùqEùdR
-<EFBFBD>ºU ¤6¤®eد0n×¹‰çvª›¢[ðªfZ½ž(~½sY'™SG‰±fí€
û¯cÐ$ùŠÆ#yÚÓDk
+Å'¢@ÐXÁì»ÑŽÙolÒ¹Ôˆ/hd}ãO9lYÔ¸ˆ´è.

secrets/kavita.age

@@ -1,9 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 su0Eyw rnsgxSg5JfkNdPR+aLkzFQPOlI4u6P4V8OC1wfnngUY
+-> ssh-ed25519 su0Eyw C6QMmoLtpPWGId5dnaTKTD5dpez2WkOP5g0olCIgxg0
-2r0/8va4Oe+QhHqjqVB6/TJJhr7rd1H20MNTniPruOw
+UJaXBsU8bJqFZtvxbZnqeSPCh0CU0YR0Pi8D6rAmgAw
--> ssh-ed25519 IV3DkQ /P32hgm1UOgA9bICEce7grbf7FF5o25Lth8Pk7BEyiY
+-> ssh-ed25519 IV3DkQ qpcnzcdgJQ3GS5oJp1q7t5yE9T9t/F0NGECWOyupnB0
-/7fPDRjB4gz914tqwpnIBL5JiUQPJ7ZbpEz+Mgol5X4
+N5ZxGE0NFn+GiTefBpuAglBo8//i0Bhk3slmUlFlDNo
--> ssh-ed25519 DCzi1A 1UvTKf9muY2w9Fh841QmDe6B0q6754K7PMCyc9waGGc
+-> ssh-ed25519 DCzi1A DHqvq17DpFm5GFLxM7N52MIEZHlp4E6DeLyJALEHPSs
-COlVeGacNRs7Pu1zJ+OppGCe9zrU36jvj2eEOpJFh0w
+n7A5YETPfpmmxa6nPBwy+v4NpTQHbmwItruNL9+pUkk
---- D4G8PgZQJAhCMUtHuGzAc4BdQatgTagjFbZJhuU11lM
+--- 7KZGB7b5P0AZyDoUdVS2nMG4+3FAO48Fyt2PeHDNwC8
-a©Ü1z_p-ËÂÙZîõ<1E>]†Œ÷P
+õr	h+ÐÜâýHS"ØÀë‚ÇUöâøˆŽˆÂ«þüe8Ïfª¾À},¤æ‰¼á'u•*¾ªø }à•U$þ…ÏŸ”á.Àµz8GË,©Z×±9¸~#$nUÍ‚,v5ÅÝË7NY£3kàÆÚpå«î1õ”?

secrets/paperless.age

@@ -1,9 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 su0Eyw IJckEJYxrvloHDQdVvbiP6fYWrS/xfuaMAeRyj0dFV4
+-> ssh-ed25519 su0Eyw p70ChNpm3kt/8rv5PuWmdD6rZhn8GvlTp+Zt8smlAUw
-PmV7VRNBH/Iosid4iwcpfXrql6I+C8nwE28Fxg5f0/Q
+y7lTWfvpzAtSJ9KJtslhZL4E7eAkVtLthECqWiaWDd4
--> ssh-ed25519 IV3DkQ f0iJsNmpp5u2nLZ0HR0EQ6e2jx+CmQhBzc5h6WOIqig
+-> ssh-ed25519 IV3DkQ HLAXcTBhn9ZnXeWSNTLjMrVAlqvOBSB7Qlq1vARVaV4
-MBchVvruWoY7E1f3Ygr5ECESThh8jIzbM8F4G57RCSE
+X951Ke7yCfy9apjaAUSZX0hhX4sFV2IWjbDxixHUYE0
--> ssh-ed25519 DCzi1A rbazzLlsA0uPTAkJQdY5xzsS+3H1J7yamqYQf+56zjY
+-> ssh-ed25519 DCzi1A XuIY4DLwkgY1ErbT3D7f/XEKTrfmywU26WoAiowcdSU
-GEaO8Ol2+F2/JOym8QOt0y5LbO+ZgtSlEj5NnGeRp8I
+rDuYnccPFARdQTIlY1qgyUVMkhaLFBXNQ8WwcwnAP/A
---- vMgCDGoVicI4R8UlGQcFktPc5fsNHmJZ5HX+Uf2ggwk
+--- FQIhF+LuZ5/+c7T9DkiURH2d5IL9Ijwfgitsa/vUFWE
-|NŒI1j”°ÜÒÿ„—òHûs,g<>U€¤€[©Ž²".7ËC³ò± KHÏlûÌÖ& PÝBׄßêØžr'k¥š©_:dÖ5Û"ã†9“^‹3
+…L«J¼)‰èð¥¯ÌÄRÍ-Œ3œlVˆFLùì¼C€[r¥v ¾›náµ…I¾Eƒã<C692>@¯	;/á8–Hð…L'<27>—R1ÓÞ²¶w< Éï.<2E>iœ{Ñå±¼ù

secrets/restic-s3.age

@@ -1,10 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 su0Eyw V+07TRO3WYLUNMz38i2Fkpk1k7zBKpxLlybm+f0S6E8
+-> ssh-ed25519 su0Eyw ixfqFQTk8nZJxYR+p3ekBgYpfEzp8lPCOpSFz9xFwhI
-roRenLBDPXSgPLJNHhyQTcp4hXkwFfzJ2/FNqbSgWHU
+MY8stjHQHG11Hk5zCec6YCWRRG48d6+pgiSJxKJgyXk
--> ssh-ed25519 IV3DkQ 2Rf8H/BHCMj3wxUYLxDjTl9AAxNTiw2Uw4PlrpW3iTA
+-> ssh-ed25519 IV3DkQ uZqemVuJNWOfRfHFwYSym0ENGt8p+e/aPTBNefi4kiM
-l8CjI/jKZSWffmxf+/N0/Y7sZF48RUDzkilc6fe/EXQ
+zPiGpUerZ5h6WlvLpIKfUCiqeH5HAV7W2AuNBYfbaRo
--> ssh-ed25519 DCzi1A yFjC6OYvwj4uOmgeZObUBQh9bz81G3eJr9HVWL+HBDI
+-> ssh-ed25519 DCzi1A zmB9/BqL9e8Swi4+KdTogyHneLQvLjeYIC73+JkSDTo
-njH3qJRpWUfpvktKpjpe3ox7+3DthkpHzb5HruAU1KM
+HqtXqVzzTwMM+Dw5XgRgZ0oP12fGIiw7ECM21fh7phs
---- lWu7jwVi9ywuj/rsGMcA6n0en84HVfFBe1PzNd5aFh0
+--- JWAg0bAFaKPKaJf1CEowiqgSCcISuk0mfbiWIIh9jC4
-ñø׋ÝæÀ…ƒÄS	ŸÎ¸H,\§('%8'ÿ‡Õ«Úa[ðÔQ,
+G¦•I¸
Å«À}EOÑ.¬!‡<>)_ˆJ I1… ZÓiýFp<46>*FHü%“ó”‘kCROÈËhЊ™e¹†g¦rÅ®”·y®5¨<35>P:#T|Óþ­ìµ{\qÔÝV<C39D>¥YÙ3ñXÄ<58>=Í›$•#ØrŽ#h1äõ)±Œ.ù3ÕìÜÔ¹
-çs:©$Ä®­Ÿ°Qβýò¥œ_^&²Hî]7 uyäyñß[C€<43>GœY†–jG<6A>ST²DL<44>ŠuŠ)²\¢“hfý{ûC<C3BB>O†H:Â<><C382>Ↄ9Žª(<28>

secrets/secrets.nix

@@ -1,9 +1,10 @@
 let
   kop = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFeP6qtVqE/gu72ZUZE8cdRi3INiUW9NqDR7SjXIzTw2 lukas@Kopatz-PC2";
   server = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAUA7uVKXAF2UcwaIDSJP2Te8Fi++2zkKzSPoRx1vQrI root@server";
+  laptop = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDqcphdDEJhnSBkAZzQXZJDCzsyb/Tqpcf0pUADFpbd1 root@nix-laptop";
   mini-pc = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKla9+Gj2i9Ax7cIdnTM6zsmze3g1N/qCPqhga0P+toU root@mini-pc";
   users = [ kop ];
-  systems = [ mini-pc server ];
+  systems = [ mini-pc server laptop ];
 in
 {
   "github-runner-token.age".publicKeys = [ mini-pc server kop ];
@@ -16,7 +17,7 @@ in
   "restic-s3.age".publicKeys = [ mini-pc server kop ];
   "restic-gdrive.age".publicKeys = [ mini-pc server kop ];
   "wireguard-private.age".publicKeys = [ mini-pc server kop ];
-  "wireguard-client.age".publicKeys = [ kop ];
+  "wireguard-client.age".publicKeys = [ kop laptop ];
   "coturn-secret.age".publicKeys = [ mini-pc server kop ];
   "matrix-registration.age".publicKeys = [ mini-pc server kop ];
   "paperless.age".publicKeys = [ mini-pc server kop ];

secrets/wireguard-private.age

@@ -1,9 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 su0Eyw 9mpUnyWpauqdSlrjHZb2uyTG5U7wyWesQz0WfNms1nc
+-> ssh-ed25519 su0Eyw /r64m356E4kG8YDaHQaWoA71sTKJHZthRE7+0Cac+HA
-652z/tIinaCwhBQitxSLWMl1n9FCEaRKC6F/h9c4rzk
+gY6BCSJEQHihmP7KgDCe/EXMpDY5fNEfj5+5VTHE/0o
--> ssh-ed25519 IV3DkQ esDKdA6+78STpPx2kCRbRCjJ7w5+YCRwR9G5IHusRl8
+-> ssh-ed25519 IV3DkQ 4Fykka5lWq0r4W9p9xATS5POGT6y2eNm6bbTtGAPaTg
-cFc2EJE+gfY7YJzindI+3Q7Eum/D02GetqjHjaZUQzk
+9+2mqpgrn8sh4urj441TGRdhYFjRV/q1V+acxeXvoM4
--> ssh-ed25519 DCzi1A meR8aXi4kq1xxSdGvieMZ0tcrgT4Ifo2fRoR6v7wP1U
+-> ssh-ed25519 DCzi1A nmHtpGA/d3JF5MkY2YY0ik70GPQCY/cNRyq+OW+/73M
-rULzoIdJyh/MwDXGfI9Nh3nPfqdUBoQHV7s15cYpKsw
+JvUlKZXq7sZ4bnWU0WlZgp+2LC11CVGRQ0ucUHnhnwc
---- 6cTo396+lzrd+YrQnEU3GvW6gPLo4rVaukpx48QdGGY
+--- 9h3SMFjxRMQhWZ0OAY/EIW9oRLDfHkQtsH2nmiuxLmQ
-ˆšœØäÈhдfF¼¥š8Fö~õ˜¼0ò^|™Éu«_aãIvy!ýeVCdj2º™v?+*úß8€‡g0¸›½F©CZróŽ‡7K¤
+‰<EFBFBD>*·_ïÜ=9¨Ñ™Ùå7£rgekœù¬Qåj‚½ßl€3ÙÓ@’†Y	’v<E28099>toTzg5<67>àÈsOJÛüPþ¬÷—w%°Ü›ÅD

systems/laptop/configuration.nix

@@ -10,7 +10,7 @@
 	#<home-manager/nixos>
     ];
 
-  age.identityPaths = [ /home/kopatz/.ssh/id_ed25519 ];
+  age.identityPaths = [ /home/kopatz/.ssh/id_ed25519 "/etc/ssh/ssh_host_ed25519_key" ];
   mainUser.layout = "at";
   mainUser.variant = "";
   # Bootloader.