Migrate Lewis to this repo

2024-12-01 16:30:28 +01:00 · 2024-12-01 16:30:28 +01:00 · 52a4563192
commit 52a4563192
parent 9d96798518
13 changed files with 5873 additions and 55 deletions
--- a/secrets/lewis/colmena.yaml
+++ b/secrets/lewis/colmena.yaml
@ -0,0 +1,40 @@
+sops_nix_keys:
+    root: ENC[AES256_GCM,data:S2tVrvJU4jpkl2GmiwUO++OQuDbgt9ResyAtivEnSpRD82i+7g298ujzmFSdKNzOQSVpLuinIhXF0eJeiYF4vh55ywe321aTysg=,iv:PILjXRmdx07o3Pw7JIuq2xIZKuEZnujD7TVWZ+mIZos=,tag:8/iaTqW1vF/LXz2XSb8MkA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age189laethzry4ylnd790dmpuc4xjjuwqxruc76caj3ceqhqug4g9qs0upuvw
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWTE5PN2NuZ0psei9CR1li
+            N2NIQURZWVpXVUpKT0ZwR0hzNlZKbGRQUEM0CnJzajJkVDQwSlVEVWxLZEtCT05C
+            Q1pUblgyTG52eTNYODBTRC9ETUhsU2sKLS0tIC83cXEvTWV6N2pwcm91S2pmK1NG
+            OHEyOWhXVTM5ZE9qazdtZzVhNFpseWcK0AVMxP0DvwO0uBmgXrhxHsU+i7kWfpeR
+            nA4fHrdePwXsGXDGBgw3B7LBcl3vinYEKhINQgDTXN7DNNXurWUYWQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1w99m9klvc7m5qtmtmu3l0jx8ksdzp5c4p9rkvh5fdullfc6afemqv5py2q
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByTDg5aVhvYkdyUDIwam5m
+            Y1FVbklxekt2TmpGSFBrTzJjRlhEUUlHbnhzClRsWEQ2b3daMG9POFFuTzl0NGhv
+            ekxNeit0a0hoUWJsdWNGem5lYmVNQ00KLS0tIDZFQnVYTXFPZzlud3FWQ1c2bXNh
+            allpQmNjVHFucU5CeEZTM0I5TnVRNjgKgCM0Cu87AJvABQ+X9JD7NAukhXDpk9he
+            4x84RdRXaCPZ3t9ED3iKGjT4x95mkOPtaSEUHwNzBesFZ3mVWxbLlw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age159whjxeyw94xmkkephmtlur8e85xd9d5vnvkwkcayfv7el0neqfq863yga
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLTHhJelQxK0phRzRWQVNS
+            ZmxIZTlOUk01aHIxRHYvbHZydUZFOVhFa1VrCkxoN0pROXhEaFJXZWdSWGFQZlNp
+            WnhaRXFVbXBFeEN4TEFneFgzaEVyZU0KLS0tIEI4QW9nNmxHd2VqN3VmZkJlZTBx
+            NkJ1V1hVZmhCWTlDWjY0Y0kyU3RITkUKy4zH4fz+5GDQCGQGRaaAOrbZFq3RJead
+            vTLccZQa6+IU1EL/12onkSWklvNVaOMJJp5re6mZEdCiybYOPZmGEg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-12-01T15:13:20Z"
+    mac: ENC[AES256_GCM,data:z6CikTBFzpgHqbCTWEMdePE3DIIYivZgtqmVLglJrOq65BRYz7ED5+74lOftcUdHGsBhcgTgZKYEGvgW6r7B3AAV5RiJ1oCg+xWjfj64dyYjMf0kkO1h/4KC61qfpyd4Wj61lAFyw7jwZ5011YYZ7Ox3GxNGJP/ilZwfguAnnIY=,iv:mJ+jRqfJBs2izRR3t/ixt45R9FXD2PxknCcu4DRqK5M=,tag:m7LpFr1qesSBjnzP1Xy/Cg==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.1
--- a/secrets/lewis/nixos.yaml
+++ b/secrets/lewis/nixos.yaml
@ -0,0 +1,50 @@
+borg:
+    borgPassphrase: ENC[AES256_GCM,data:yIWgAwYj4JKAKFynYArW7dDEiVY=,iv:fADZUXEGGSgM1IPitDZX9vVErC+ub/KnCpHx1/9h4s4=,tag:UBcfpjSHiMj5FwVMr0XdBw==,type:str]
+    borgbasePrivateKey: ENC[AES256_GCM,data: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,iv:AdqojS3Ri2s2jEkOD7SfyFMlWeUn11OetLk+TlemSd4=,tag:6Fn/WpLzgNyEJDVbY4LyRA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age108fn93z2c55g9dm9cv5v4w47pykf3khz7e3dmnpv5dhchwnaau0qs20stq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjS1BaQ1RwVXZZTk9vMGpi
+            RjNIRWFIcitCVG9xL3JPNUl2N25QU0taMnpvClRGS0VxZFZYYXcrVDhURjlCQ1Bv
+            aFlIR2xXRVdyRzlRL1V5YTFFczdkQWMKLS0tIE1lMjBqNFBDd0JHQzdvT01DV2lG
+            ZXJyZVgwQ1hzVnJ2STlIUnBxbGFEV00KIR9mZ9TenQuYoi5epC9BJGLBpn8cirO0
+            d3Nch2GJpcEPwKeUjTsr1tPPKqua5GfbqrTsCdBYv8ItE1vB3qfvPg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age189laethzry4ylnd790dmpuc4xjjuwqxruc76caj3ceqhqug4g9qs0upuvw
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDbThPWGc1TXp5dnpZbVgz
+            emx3ZmlnYlM5bWtyc2I1YklmWWx1QU05VWtvCnRGTWs5aUNqZFdDU0xCSXpNM21U
+            OGZ5MEdxTXFMKzRwT0lGRHdJZmwvQ3cKLS0tIEtQOFp0VjdxMXJKUERhN003bVpl
+            YmNUd0E2M0QwcEpVa1dPVGZjb1hnR2MKK6d1LvSTa2Ku8xLO+eXxSO0nuX4bC6pp
+            JzS00ym6w/F9m6JRchSB2R2zswoIQmk/sWWB4f6llvI1+B636L1FFw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1w99m9klvc7m5qtmtmu3l0jx8ksdzp5c4p9rkvh5fdullfc6afemqv5py2q
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5c2E4V3pYTmtIOFpLbTR3
+            b3M4M1kxODhCTExqbnh3dzhYZ2NKK210OFdrCi9PV3h3T0NXaDFPUHJaWWhIY2pT
+            SGpXNElvN2pLaGp4YVIzdlhyRlowMlEKLS0tIHljQjBHbWpFbXdOU3l3aWs4b0ZH
+            WkQvZXMyNG5qZFpTUjBFTVNPMzBUZUkKyygGqHyNTxUVEfadY1PG1/GF1ouvaJmr
+            swJa95Sdvo2wsVk/47XJynSfNraOhnGd+0zlctoh9UfcB4CpHQzyww==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age159whjxeyw94xmkkephmtlur8e85xd9d5vnvkwkcayfv7el0neqfq863yga
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDOXl4QXM0Y3NyQndFSkdw
+            OXNqN21Jd0o1aVY3U2YvbXQ2c1ZhYk1UUWxRCjBSMHlzT3JNcm9VLzcxRmdONTNW
+            amg0YlpvaDBWV2ZzODl0a3FkZE5udWcKLS0tIDdvRytKeFFQZk00Q1BzbnZFalVw
+            elNYMnlOZDcrRVI2a0VTcml6UjQzcG8K9qrjkFXq7w7kmCdmUUvb9EeZ9I65dBVM
+            Yc9SvR2pcGNbCJ9JFTeU1H/UTE1quwjMDeyJH5UrOc3Jl3aJ74X61Q==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-12-01T15:24:20Z"
+    mac: ENC[AES256_GCM,data:PcDrhvYKjQj8C47DQyTb+8QnBdZYpUmVZ4QMo2OOg7esc2DeeLwxQ2oDEcbUtIGY0s8mXuIZbh1XnDnLDWc+XX/cCe6lVNqkZO7zYhrGFRVqcC/l7ebYklEcgM+/+HK+JkouUb+Mka0NOBONuoN6HAYlaDAk7GU8GZCUfn+o6/c=,iv:74GdlT7DfXeJE8+kCL6B81nczwb2on+IgxekrYtIFnc=,tag:Afffe7vOP3IL7mz44rEzEQ==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.1