From 37d87ae1dc25e492563b8a55fb7c3dcb79f86580 Mon Sep 17 00:00:00 2001
From: "Ricardo (XenGi) Band" <email@ricardo.band>
Date: Fri, 21 Aug 2026 22:27:53 +0200
Subject: [PATCH] update ssh keys

---
 hosts/www/openssh.nix                 |   4 ++--
 secrets/id_ed25519_www-production.age | Bin 0 -> 1194 bytes
 secrets/id_ed25519_www-staging.age    | Bin 0 -> 1194 bytes
 secrets/secrets.nix                   |   2 ++
 4 files changed, 4 insertions(+), 2 deletions(-)
 create mode 100644 secrets/id_ed25519_www-production.age
 create mode 100644 secrets/id_ed25519_www-staging.age

diff --git a/hosts/www/openssh.nix b/hosts/www/openssh.nix
index 288b5d3..a16c870 100644
--- a/hosts/www/openssh.nix
+++ b/hosts/www/openssh.nix
@@ -8,8 +8,8 @@
       isSystemUser = true;
       group = "deploy";
       openssh.authorizedKeys.keys = [
-        "command=\"${pkgs.rsync}/bin/rsync --server -vlogDtpre.iLsfxCIvu . /srv/http/www/\",restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM35LG+xuDaoHQ2bYD4eRc3P6Cl3JVYntoP5Gu9R+mZC deploy@www.berlin.ccc.de production"
-        "command=\"${pkgs.rsync}/bin/rsync --server -vlogDtpre.iLsfxCIvu . /srv/http/www-staging/\",restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKjjLtnGf7w5D/ON+P2HpMZ5HA2fWp5YSQMGMuu5CjUt deploy@www.berlin.ccc.de staging"
+        "command=\"${pkgs.rsync}/bin/rsync --server -vlogDtpre.iLsfxCIvu . /srv/http/www/\",restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPTUmrD0RMS0atfreGYjobnxBhppqo5XDEOUkLgUMWpD deploy@www.berlin.ccc.de production"
+        "command=\"${pkgs.rsync}/bin/rsync --server -vlogDtpre.iLsfxCIvu . /srv/http/www-staging/\",restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIenjEIMaOclgb+vg/LZf2P/eF9J1MaAHpSlYpmtKToB deploy@www.berlin.ccc.de staging"
       ];
     };
     groups.deploy = { };
diff --git a/secrets/id_ed25519_www-production.age b/secrets/id_ed25519_www-production.age
new file mode 100644
index 0000000000000000000000000000000000000000..d0388d24fb1c0933b30894afe9944da078f5d970
GIT binary patch
literal 1194
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCSH_0Y~UELZRiDfcza
zF)l66(>4vsEGhRY@^`8z4t3QJ_tbYTv<&u2uP6=*&D8b{jpQ;YNHj~UswnexE~)en
z%FD_za&plQ3JfrbaP<jybtw!oD$2_($uKf9cSN_%wah0eyj-CuAhF!U#n~u5Fe4~f
zKcLj9BD**+yD-<e#4kPEDAL8kGsP_;H@hOhHJ>ZdEVHz%$}-)#FtNlb(;&6V$h*+P
z->0OcD8R!bx7gJzC@91{#3C&`qZr+`6kqK$pFjntGH36cQcKg+`~ahT$I!@}z`#(m
zwB%%y2m}AH9M3Y}sLa4pHw(|w5JxV9N&~}8laR`wsEmSQzqAzBGM^BaVE=UQ(4xSC
z%rr|Q|Dx1zZSSmf$8vPrvMR!TjRF;lGD93qjC}*W+)GQd)3XBgs|*YMLM_eA96j_4
z9E-d&1IqpLE%cMivwXR{0~4LK%S)0{EwaPIit_@J(%q6RgB{IEBPs%OvnpK@y-Q2{
zD!jF|4KZxfuXGM|PFHaCuT0G>3(5Bn3-<OZ56dY__OjH^^~g0Z&NR<7$qy|qaWZl)
zjSBWObmcP5w+soWs;Y7=2{-bJ%61JmObkseN%qxuHZ}|@PRlaMEDUf8&k3(6@I?2U
zn|pz&VY)&=ijzTTieFJ^eu%$&fJ?q<u6v1jVt_%3d1`2;Ymi%xzG;MOlBaP}o&lGm
zw|A+dYd~p5gj>FaW1yeAk!4A+WmRQ*RE0rSWO1sSNoh``VToCAu_KqRuC79$YmP;6
zR=IOPRIW*yacE_Rg^9LNNs42!ca~|YNs&cpVU@3Iig8J0S|Ha7&jodF-W@cw*}Tjz
z^;P7XI|n0t>WtXlRI}+EuS>GN?dvVn(YXA#U1g}Ngl3hn?ZnjbPtmj2+uPauF<7;*
zy65eQWv%+lE~;6ied(o(%&M)6-4gzasvdi<&GusYQt`ri*_UB|j~;z+?T%c}T&DT9
z%?gfo=Hls5%Qb^LFQgqh|C-^~o{!UyZd(wRR&ZeR34uaOpS#~q?wY<KrfdV(f_W!I
z(hr^fkR86BDPXQ=YZmXXDNbv`C8Wf!-kTBautl^qy5_e+&8!aZ*~~n5TG>B-E)=?4
zF=5*3F4o}di3%d?RibB|<p244;l8zhUTT}jZ>&?E*vqEdXTQb0cE{7pQ8QkorR(Jv
zx%>28;gOi&XyZC5+wHPTXvOOOLf?;XZ=Ts3|2<NEsjtCp%b)zedJjn+%L$*%65jHm
zRegr=(e4A5^BL!eXdc}1tAEn6iG^2}*DT4IaD+*<r@`3U<&F&JMY}C&OLnyEK6531
z(s#$|x5>}WJn3Q9FbWZUdgraXwCnDTPoA9)obM#w_vW-&zU8g2s_*tJEtb_wYhGhH
zvFexn#M-4l|1%aV-E6++Gt+I$HMh!xCBls_DsMiUy|;l$y;m`YZNkmsjt<Yp?LEh5
M99dU5i#^W{0P_{kV*mgE

literal 0
HcmV?d00001

diff --git a/secrets/id_ed25519_www-staging.age b/secrets/id_ed25519_www-staging.age
new file mode 100644
index 0000000000000000000000000000000000000000..fd9096da13b84e7f15980b580be836565e58b022
GIT binary patch
literal 1194
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCSH_0Y~UELSM=OvxzB
zNHg~gDGd$CE+~sMGEaBWcXDzmFp6+0$xci(s?09T^-fIAcI67l&(AWANcJo&sVdaY
z&T;dN@GOinEDH?}H_c7=$q&i%4=fG}tIG6GPDi)Rwah0eyj;OVJ2<=8I4rn0Gt5!H
z)IG}3qcqeoy(p>3GbJ@8%T>G3DA+qQ!_X-`ESt-s)Fd@Kzs$(cxyZxOvmnz_KO;HF
zqC7AxyE3ZG!>~BbCnH=x!_v*N1jDuzU+pxXKn49$^K|`;A~Vxm?bNVhw{pi6b8~kW
zuTrl-&-Bd5piq+vQ*B=_chB5(S1#j<+)(HARM+yXlBg`>R0Hp*0R4dUO8rV#lS)5h
z^Ypw*?*aqusEqV<3v|C_RfPK*1u8@Z1{H;eI|uqEmt|`k`xu&em}WT#l$2+h`)3B`
zxaauhrj!}@dF6XK6?0{WXPc!s6&m_vc)R5#dj#hhCi(b=mwS{HmIoGwlp2@h=ah$-
z6}W^L_@djUU+Em`oUTxqXjod{n^bO^?BZ|kot+*Q8sbvmYM2?3Y?7Ddmz+_Rn&cZ9
zYGCN%?#ks6UJ@Fat?d>VuAQCi=k4v4ml7D{<l*9(=4TRSkd>4k66&AlmY<ptl#Oni
zn|pz&VY)(UlygavSx9n4WrSyPU{-KxwyA}wc0h1WUb&l_U%q2VaY=4^X}DR6doou=
zVSbozMX-~zi@CF#L7q#7nSq60a!9^$Nn%!(zE5(fepqRyseY!bUpkkruC78(TBM1#
zyR(z0ON6<fYiNmksEI|EU!I4DTV`2hVq&<vU#fF)L2`D8rwP|Qc5D9!%T@h$%XLqD
zT3?;n)XF@k=Y;chi6;$Kcc0y_Ub6S6%N)(JdmTbNTYf~`$=0-J-E-pMG4^a8y&F9z
zKY#e=TjYQ39q*=#1y84cs$Y8Bt1F0UX_&;N$=`48{x!W%`Nsw6>h{euT23lIW2z7o
zm6&+s*WvRH2~80uh24RTIf+8Pr=xD{xF&t|2TSaX>`3$I%9r{ISN~0}_W3BT7d<h=
zU;f~)J+=2zwoA-0a`|;@^462{u82tLs&YNb%Suoz;bN|7Z@+VS`khsJN_T~ryUs-~
z(Qmx+Z1KCI(~(bqp6K5pu}O%5d0xkoryGy0FG>1i9R8X2>I|7YiN3!D3u7If5}dw$
zPq@Rd;>pGbQH=Ue-YFaS{(rzO7RxQW-}kAGS5N(pGctxz4nO$Zr+F#42Uq3YI?%V^
zf|%m9C`-n>@2=Z^bTUoR6%pBf+wZ+uFw5Mz@tnyM{=YraRduOKRqxDBP5Df3o`mWd
z*EX6do$6tI%W;S+cjx<%Y1t(^-!%P;&Jzedsp-$l;U~Y*a#_dL+zp14wU!H<eCamD
zGGP5--DhzZ>nBL>|NJVgbLWDBURS@|AHMGFo~qd&gIwDhUM&+^pcJ&W)i%8;raN$h
L(XoB<o*o?lCEU*4

literal 0
HcmV?d00001

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 91c10ac..f343c2c 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -63,6 +63,8 @@ in
     _dav
   ];
   "www-staging-htpasswd.age".publicKeys = xengi ++ [ _www ];
+  "id_ed25519_www-staging.age".publicKeys = xengi;
+  "id_ed25519_www-production.age".publicKeys = xengi;
   "caldav-export-config.age".publicKeys = xengi ++ [ _www ];
   "radicale_htpasswd.age".publicKeys = xengi ++ [ _dav ];
   "forgejo-internal-token.age".publicKeys = xengi ++ kaythxbye ++ [ _git ];