manage lewis with nix

move docker swarm ansible to this repo
move thecloud ansible to this repo
support data disks in terraform

secrets/lewis_user_ed25519.age

@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> ssh-ed25519 aqswPA eCaomN/OCSet7JteG5GE1xArpi+zLdVjD415HRSa1hE
+lgBm3ZCSzQlSOxLtLR6NW33TQcWgmU0nIMzZXpaTdsQ
+--- z8b1blOyH3Ne62B4YO0UcwgGorWXHtguz453oHYUEV0
+ð
+"<22>ß]ËÞókéõR•»qÑ—+Œñ‚f*Œ/Ö#	Ü¢,ÁU,5ÔЈūQ9ÍKÃÆ>‰<²%/P–@%ä#;0¼+Te
§Šñ?ó”´º "½ÎSÊð
+)bYZ†úÌ}-ëÜ™7UÞ%®:Ûë¼i
+2ßú;íTÙ1ªû¤¿‰j…¸œNóëý´Ë#sY¸ÒòÔ‘ˆ¼dêR檸þ«Š}†W?‘ÆØ ÈZ¯0ô*ïäU¯Q”drÆ
ɪ£Ûuù¦Õ]Û<>$÷E#¹=çhAð³¬
kô³ã”+Z"¡…sÉ‘_Ÿ¥5%(
˪W€1GÆ€dÒ°Îwø!W¹pÒÈ¿J2ù_.
+x%ÒŸGï«/í»'ÇPd¬åW¦I<›ÛS—î/ ³ÕϽÃ{ëc¶–òÞ3ó›“ïâÜ	¼˜5/E6`(袆(	çðÇqpJ,÷ ÜÉ?&†÷½‘.8è×m¢žúiçÓA‚¦{-`¢=§GÏ<47>3濾Jzòuºa'Õk+•™“r×™RJHÃðOìâ”ò¯a½9§ÿf•ÓÌjüäT

secrets/secrets.nix

@@ -21,9 +21,20 @@ let
         "atlas_user_ed25519.age"
       ];
     };
+    lewis = {
+      publicKeys = [
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL5lZjsqS6C50WO8p08TY7Fg8rqQH04EkpDTxCRGtR7a pim@x260"
+      ];
+      encryptedFiles = [
+        "lewis_host_ed25519.age"
+        "lewis_user_ed25519.age"
+      ];
+    };
   };
-in lib.attrsets.mergeAttrsList (builtins.map ({ publicKeys, encryptedFiles }:
+in
+lib.attrsets.mergeAttrsList (builtins.map
+  ({ publicKeys, encryptedFiles }:
   lib.attrsets.mergeAttrsList (builtins.map
     (encryptedFile: { "${encryptedFile}" = { inherit publicKeys; }; })
-    encryptedFiles)) (lib.attrsets.attrValues secrets))
-
+    encryptedFiles))
+  (lib.attrsets.attrValues secrets))