baz

.gitignore

@@ -1,3 +1,5 @@
+result
+
 # Created by https://www.toptal.com/developers/gitignore/api/linux,windows,macos,vim,direnv
 # Edit at https://www.toptal.com/developers/gitignore?templates=linux,windows,macos,vim,direnv,nix
 

secrets/grafana_admin_password.age

@@ -0,0 +1,17 @@
+age-encryption.org/v1
+-> ssh-ed25519 uH+n1w F0dXYkVQl4OHE/uqzecvcT/l1iZkre6SRrcRUdepWjk
+qkcNCTunrQsCvLNS9eApcWhx1uLpMF5GW6ZEoIX8KO0
+-> ssh-ed25519 EvLbWw gwDhePU1s103sRh8QnvRe9hUc2WabyD07s16WwqvdXg
+VdaL7kJlgX/4xXkrh56IOJYNF96RYkeF8gCvxy2MvDI
+-> ssh-ed25519 dM+fLQ nG9argTfh6IK0k/kkQR0vVbq1kDkLMtmqx/naEt962Q
+PAB4idJ9VsTIM3l6Kd79pf41+/dr4pvYhwK5ivQm/ig
+-> ssh-ed25519 jxWM2Q +xyZZfCnDFpgdHIwJ6AHPvY4wpFWsn2X1npS/gm7dX4
+0yM0Lb/r1ZzIt+NPktRB2nLEEYyxiIsqvI6L1biTjXA
+-> ssh-ed25519 /yCUCg ERxCrJW5XMwdhIyNXZcZaPhwdBeEefQpOGDXTpvMXHk
+r7hizzua8sO8ZYxph8az8Mrly56GaAmHuTSaPfQOg88
+-> ssh-ed25519 FGp51g 4aH+NNyJSaeQUN+fnHQaGrb4lhPpIovrUmP30Po7BxM
+PgO1S13fIK6lAF4xK+f9HHv1mWaUEy37KNR662ltFKQ
+-> ssh-ed25519 alMFaA q2hGtM/3TUP9UHTmFHrCZx8/xWVCjHrLrF656KqLpH0
+WsSDexTEKVop3lJlzbtlHBuvUdRfdO66ioDXdIMrXSQ
+--- BQtprCgGHGAzi7Vn4Xg6TuyhFOOFe+wdyqaaiUNVtbc
+<EFBFBD>üÊe	¸ŠL)ü,Í÷2—!Ü‹HÛUƒ
ðúŽ>l^à4KÒ[Â-E™­ºMI.Íê<C38D>õØe1rúÚg

secrets/grafana_secret_key.age

@@ -0,0 +1,17 @@
+age-encryption.org/v1
+-> ssh-ed25519 uH+n1w 94gh7QC7DaVLH5wSmAi6N2b0hoUL+Kmjkq8COJTNPUM
+k69HGr8czlxPRr5NYA8PFnL0lnD/Kcmn8SGjpPPhhDo
+-> ssh-ed25519 EvLbWw 38FPJGhR6MvAOhOhlR98twybUBWGtgrK9rsv4eojADE
+VDLUJ4ZqdN1oXKA86R8GEWSGm1faOApRpYambq7x/9Q
+-> ssh-ed25519 dM+fLQ tKN7S0P8ElCy0z2K1IODTrQlx/TFIBXiHp/2NkhITA4
+azb6mwz88ZqFItrpTqQs+zlwu2KWRa0jQFh5yElnkfE
+-> ssh-ed25519 jxWM2Q ZDK0Mj7de/K8yqX8WGqaiAb4rZA+X1njybIIPhzGc2Q
+FyLxkVJF2X+5uXlrcs4jsRQsrYUB/vgdE+JnTPK3nZM
+-> ssh-ed25519 /yCUCg Ab0KxtKf7B+toBwj/WADiCyyViHZdJuklnA4o4CkqWw
+rByyM2l+cxuL51VpA0+TavhaLPtYkwAU8nKxTJi+thk
+-> ssh-ed25519 FGp51g 8t6IBQDzTlRTqGqOUys2EoUL84G1cJviTaP3bLcAsT8
+IQ8DWOuibBerLFF/ySTxYkHrP8XSMkH0de8cProbOJU
+-> ssh-ed25519 alMFaA w3yR4ct9I+bYE+pg8VEjC7PwfA0W8dYc8lAdkVbS924
+uPOoOdtwqUyzXdBspRqR6Q5pDYt9awdhFGJxPtMyoUM
+--- aoySP/f7E5udD+VvXzZZGkaLBFo84fo+iK94eddA0/c
+ÒK
à´ù’(ö°U¹Ø“³]3)Ž^
õòV<C3B2>Üoã½@ngsºU²®p‘Ît'ö|™˜<E284A2>˜È¨2æÞê°];›wh0PPRtwIÏTøj<>ùˆ%òY´‚Ð

secrets/matrix_signing_key.age

@@ -0,0 +1,17 @@
+age-encryption.org/v1
+-> ssh-ed25519 uH+n1w x3o/RgAapZI61UmYLpH3dcMRk8YXqp5oIQngvUXqtk0
+HHYvUwmeIqy44wQRmcQMPRnrsCxtQmm5hMM2hkHor9w
+-> ssh-ed25519 EvLbWw 3b873iCOgDyRmmFUE4DVvSCxQAWeymrC227nCemL8Dg
+ieXGhB/jwwkOBqkojLMEiG9dZ1F7t67yVCohRdwNUUA
+-> ssh-ed25519 dM+fLQ 5nTLh+e0lUupYzs21zqTndNcPAOzBW24oaW4CH6HCEI
+kO/VeF/B2bC4oBfK33nHb8qe3Ky1e9O3BsTghI2X+A0
+-> ssh-ed25519 jxWM2Q dnQGTtLB7GNL2dhKLGBt49h7qKaZ3hmTi89ErkA4pxQ
+d9buWLv+Qtr4Pz72JYnuM5HsonEpMB5usZrPeaquEo8
+-> ssh-ed25519 /yCUCg duFR2YmHexHh/JUlPHOmiK6Dpk6AHp2fgfr7jGOZzmE
+KkUtXyStKZflXUoCY+m79QWF4n/oYoQ2GQB/aZg6Zo0
+-> ssh-ed25519 FGp51g 5+2pW1SZUhDQUK7T3ayCOLykY0MLXQ+xmpDbK/xG3XM
+6dZuQdj7k0QCNzqjlmVtxBdh7agD3yAaDjFYYvsunAQ
+-> ssh-ed25519 alMFaA jeu85oh+h0CqyXV7k2/Lg7/Wb2GbzIuNkNvwJsu36WM
+qQK3z5l0RdiX1vfhlqIjcrH12UH1y7PNe9LVPwyTB5E
+--- jrWFFkJ9YIPPt8hi3J19/5WEEzMH6MdyKxCpoFbcqh4
+ä+Z–4ä<34>›h:ŠÈboƒ&Ð7¿àÀ>Ì7	R^òôÛþ=Ý

secrets/secrets.nix

@@ -17,7 +17,10 @@ let
   _matrix = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM7AZkepRXoY+DJeSLOU+GR60S62p6+0X/PDeEUZ0yHx root@matrix";
 in
 {
+  "matrix_signing_key.age".publicKeys = users ++ [ _matrix ];
   "matrix_registration_shared_secret.age".publicKeys = users ++ [ _matrix ];
   "pushover_app_token.age".publicKeys = users ++ [ _matrix ];
   "pushover_user_key.age".publicKeys = users ++ [ _matrix ];
+  "grafana_admin_password.age".publicKeys = users ++ [ _matrix ];
+  "grafana_secret_key.age".publicKeys = users ++ [ _matrix ];
 }

services/draupnir.nix

@@ -14,3 +14,4 @@
     secrets.accessToken = config.age.secrets.draupnir_access_token.path;
   };
 }
+

services/synapse.nix

@@ -10,7 +10,8 @@ in
       settings = {
         server_name = domain;
         public_baseurl = "https://matrix.${domain}:443/";
-        #signing_key_path = config.age.secrets.signing_key.path; # "/var/lib/matrix-synapse/homeserver.signing.key"
+        # "/var/lib/matrix-synapse/homeserver.signing.key"
+        #signing_key_path = config.age.secrets.signing_key.path;
         database = {
           name = "psycopg2";
           args = {