diff --git a/flake.nix b/flake.nix index 904b08d..510479c 100644 --- a/flake.nix +++ b/flake.nix @@ -308,6 +308,12 @@ group = "root"; mode = "0444"; }; + forgejo-runner-token-snowden-env = { + file = ./secrets/forgejo-runner-token-snowden-env.age; + owner = "root"; + group = "root"; + mode = "0444"; + }; }; } ./hosts/forgejo-runner diff --git a/secrets/forgejo-runner-token-snowden-env.age b/secrets/forgejo-runner-token-snowden-env.age index 07ec4ac..e3e4909 100644 --- a/secrets/forgejo-runner-token-snowden-env.age +++ b/secrets/forgejo-runner-token-snowden-env.age @@ -1,19 +1,23 @@ age-encryption.org/v1 --> ssh-ed25519 uH+n1w +KvGqAaNROyE3bbbjwH5UlsC8EEuJsVkvCx58ac+sE4 -E+ZptaFcETE4hYPeHeLTN6Nv15dURwEyvpnkTAZC3y0 --> ssh-ed25519 EvLbWw 7SaKZybSLPBWWR5c7x+77I+3o2VSoAWXEkM402guJzw -i/2BmlC/w4AwQ9FXRPkUF4IqWjDrQIYupNtwa5FTr48 --> ssh-ed25519 dM+fLQ ihhDunwhNoIzkgFu+GlyFXmpFnh7CPUdbqHZG1GrBk0 -2kuiVHb5xR2dZR2K3hnxEE27W8ZTULKSg7jI7Tq1AR0 --> ssh-ed25519 jxWM2Q v6m2gYWR59bnMT0+5bJ6is0n1v+erNJIIdReaxzdYiI -IYL86COa5MQG9hFGadaMbr7tphadgsckYvchf3B1rVU --> ssh-ed25519 /yCUCg z1FrBS/4kUxxOQl1BWcSQczVhrQ3r/zswGhR1MIBNWo -8Ivi+R3gThGkSQe4QmyFIurExpRZCyDjwVNKSYe/fDo --> ssh-ed25519 FGp51g afHNk8lS2oJWDa5YmokpE+kD30eeSZfGb8VFc0r/H2A -pDaCkHvgFeNn3X/wDPe3yAPRV+L/g64dXEEpN+85h10 --> ssh-ed25519 b5OiTQ I9iDVd4KcKpH+nwFNeyGSMIegsux2rDzuB+LnIYCBgk -BbptMjkV3HIisjidsfPBYLU1J1vna2QpWPiR+hkiBe0 --> ssh-ed25519 HaNCag BUbf27o6Ph2p78kpaZO7CsCtpd6wxcBIGk4kUidsrzE -VoFu53x9AGdLDFei5C6D3Oa9UKBEdfxNh+5Nc3gGANw ---- yCHltWgEm8iJbqSTj4sd6MEkUc/KCSQCOvCqWoYgxl8 -vSZ#FY fʋʤp%I熥ESj8NMdm5NdD RВ`d\7컒 \ No newline at end of file +-> ssh-ed25519 uH+n1w 4tK3FMRdPKHv44P532Rz/tcX6q8miYJrgcVB3cxz23w +uXs62N4xtDVr+H1fkZG60vUU84HYdR1kexnIHqtgkdo +-> ssh-ed25519 EvLbWw thiH3XUShIvuJer+juwSO12cNaFOUOyIXhX5SXL1bEU +eMGzE/yPqXOpicH8ltvsgcAKqYcuiYFB/plw36IUjFg +-> ssh-ed25519 dM+fLQ 5U0VVjoa1twnM0E4avwxSiwkEEDqoxRm1lWUUwACtkk +ffCOUuLOkV5ggtoagr0JARDe+pULoxMaJdArJPKVi/Y +-> ssh-ed25519 jxWM2Q ojc8Y/RBIFTDHDjcRw1qDSifpWTIFQYC0Ql1dn6abxM +diQxGCvmWBbFIjhKjPGZvrQyBgWA3INNhVoKcvG6bAc +-> ssh-ed25519 /yCUCg JqVEwPtSOTzSVmOST9sC5NPO0HEvxXe/RpOBIGWsgAw +bAbq4R+5wZWB6cDmsjFtIYwoyqcwEf9UQSFmOhSKqD8 +-> ssh-ed25519 FGp51g oqnuxzMu0HlPwzXLwBAf6us1NwhF77LETuWBAQEQDE8 +I1stznwLmISvL1G+62HAQBAux1zIYV8dEp+jz5KjH7o +-> ssh-ed25519 b5OiTQ /NOtrSFwwJfH96h1PlJRWY31z1bB+P7FIZlDVHhQESw +T8cxnwSROdciAFuMVrfX95IaKWxVVJMWWxZNJVlatAI +-> ssh-ed25519 HaNCag BAO4uDUuZzqnH0PFB23AA/eMWNMZ0cjKqYsNgamVLVA +4FVo/AGOIsdwf4QIxZi9MG+vSGy5YFvFvteqeq8tOD4 +-> ssh-ed25519 cToZIA /FUBnZiOVbZHi0ODkUdABrQUW9HMEH7KYA/PLNJloEU +wKZnt/U+f/4SxKxKol2nmK9x92NF4VK9hB18rTBs/MY +--- m7Kd/PyobnOIdz7O0yh+E9fRdQmxbf3PAPlH3+0X6Mg +Uv :EXJl[$ + + p3hYVǃ}x#4'S ) nڣ0z{O \ No newline at end of file diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 42f11a6..91c10ac 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -66,7 +66,7 @@ in "caldav-export-config.age".publicKeys = xengi ++ [ _www ]; "radicale_htpasswd.age".publicKeys = xengi ++ [ _dav ]; "forgejo-internal-token.age".publicKeys = xengi ++ kaythxbye ++ [ _git ]; - "forgejo-runner-token-snowden-env.age".publicKeys = xengi ++ kaythxbye ++ [ _git ]; + "forgejo-runner-token-snowden-env.age".publicKeys = xengi ++ kaythxbye ++ [ _git _runner ]; "forgejo-runner-token-snowden.age".publicKeys = xengi ++ kaythxbye ++ [ _git _runner ]; "forgejo-secret-key.age".publicKeys = xengi ++ kaythxbye ++ [ _git ]; "forgejo-oauth2-jwt-secret.age".publicKeys = xengi ++ kaythxbye ++ [ _git ];