mob next [ci-skip] [ci skip] [skip ci]

lastFile:flake.nix

flake.lock

@@ -581,6 +581,30 @@
         "type": "github"
       }
     },
+    "openwrt-imagebuilder": {
+      "inputs": {
+        "flake-parts": [
+          "flake-parts"
+        ],
+        "nixpkgs": [
+          "nixpkgs"
+        ],
+        "systems": "systems_4"
+      },
+      "locked": {
+        "lastModified": 1777544882,
+        "narHash": "sha256-QqrZLvCSg4w2jmLGXs/4KJVXZeogxIeuX0Hw4o5qWwU=",
+        "owner": "astro",
+        "repo": "nix-openwrt-imagebuilder",
+        "rev": "149d0e41bc9ed257290c87a8fdb18c4071e37e07",
+        "type": "github"
+      },
+      "original": {
+        "owner": "astro",
+        "repo": "nix-openwrt-imagebuilder",
+        "type": "github"
+      }
+    },
     "paisano": {
       "inputs": {
         "call-flake": "call-flake",
@@ -661,6 +685,7 @@
         "import-tree": "import-tree",
         "liminix": "liminix",
         "nixpkgs": "nixpkgs_2",
+        "openwrt-imagebuilder": "openwrt-imagebuilder",
         "plasma-manager": "plasma-manager",
         "treefmt-nix": "treefmt-nix"
       }
@@ -779,16 +804,16 @@
     },
     "systems_2": {
       "locked": {
-        "lastModified": 1681028828,
-        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "lastModified": 1680978846,
+        "narHash": "sha256-Gtqg8b/v49BFDpDetjclCYXm8mAnTrUzR0JnE2nv5aw=",
         "owner": "nix-systems",
-        "repo": "default",
-        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "repo": "x86_64-linux",
+        "rev": "2ecfcac5e15790ba6ce360ceccddb15ad16d08a8",
         "type": "github"
       },
       "original": {
         "owner": "nix-systems",
-        "repo": "default",
+        "repo": "x86_64-linux",
         "type": "github"
       }
     },
@@ -807,6 +832,21 @@
         "type": "github"
       }
     },
+    "systems_4": {
+      "locked": {
+        "lastModified": 1680978846,
+        "narHash": "sha256-Gtqg8b/v49BFDpDetjclCYXm8mAnTrUzR0JnE2nv5aw=",
+        "owner": "nix-systems",
+        "repo": "x86_64-linux",
+        "rev": "2ecfcac5e15790ba6ce360ceccddb15ad16d08a8",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "x86_64-linux",
+        "type": "github"
+      }
+    },
     "treefmt-nix": {
       "inputs": {
         "nixpkgs": [

flake.nix

@@ -26,6 +26,11 @@
     };
     import-tree.url = "github:vic/import-tree";
     nixpkgs.url = "github:nixos/nixpkgs/nixpkgs-unstable";
+    openwrt-imagebuilder = {
+      inputs.nixpkgs.follows = "nixpkgs";
+      inputs.flake-parts.follows = "flake-parts";
+      url = "github:astro/nix-openwrt-imagebuilder";
+    };
     treefmt-nix = {
       url = "github:numtide/treefmt-nix";
       inputs.nixpkgs.follows = "nixpkgs";
@@ -79,6 +84,37 @@
             packages.think-be = pkgs.think-backend-gtcm;
             packages.file-uploader = pkgs.gtcm-file-uploader;
           };
+
+        flake.packages.x86_64-linux.myrouter =
+          let
+            pkgs = inputs.nixpkgs.legacyPackages.x86_64-linux;
+            profiles = inputs.openwrt-imagebuilder.lib.profiles { inherit pkgs; };
+            config = profiles.identifyProfile "glinet_gl-mt6000" // {
+              # add package to include in the image, ie. packages that you don't
+              # want to install manually later
+              packages = [
+                "tcpdump"
+                "relayd"
+                "luci-proto-relay"
+              ];
+
+              disabledServices = [ ];
+
+              # include files in the images.
+              # to set UCI configuration, create a uci-defauts scripts as per
+              # official OpenWRT ImageBuilder recommendation.
+              files = pkgs.runCommand "image-files" { } ''
+                mkdir -p $out/etc/uci-defaults
+                cat > $out/etc/uci-defaults/99-custom <<EOF
+                uci -q batch << EOI
+                set system.@system[0].hostname='flint'
+                commit
+                EOI
+                EOF
+              '';
+            };
+          in
+          inputs.openwrt-imagebuilder.lib.build config;
       }
     );
 }

routers/default.nix

@@ -5,5 +5,9 @@
       device = (import "${inputs.liminix}/devices/gl-ar750");
       liminix-config = import ./white-house/configuration.nix { inherit inputs; };
     };
+    whitehouse-router-2 = import "${inputs.liminix}/default.nix" {
+      device = (import "${inputs.liminix}/devices/gl-ar750");
+      liminix-config = import ./white-house-2/configuration.nix { inherit inputs; };
+    };
   };
 }

routers/white-house-2/configuration.nix

@@ -0,0 +1,82 @@
+{ inputs }:
+{
+  config,
+  pkgs,
+  modulesPath,
+  lib,
+  ...
+}:
+let
+  secrets = {
+    firewallRules = { };
+  }
+  // (import ./secrets.nix);
+  wirelessConfig = {
+    country_code = "TH";
+    inherit (secrets) wpa_passphrase;
+    wmm_enabled = 1;
+  };
+  svc = config.system.service;
+in
+{
+  imports = [
+    "${inputs.liminix}/modules/wlan.nix"
+    "${inputs.liminix}/modules/ssh"
+    "${modulesPath}/profiles/wap.nix"
+  ];
+
+  hostname = "whitehouse2";
+  boot = {
+    tftp = {
+      freeSpaceBytes = 3 * 1024 * 1024;
+      serverip = "${secrets.lan.prefix}.149";
+      ipaddr = "${secrets.lan.prefix}.252";
+    };
+  };
+
+  services.sshd = svc.ssh.build {
+    authorizedKeys.root = secrets.root.openssh.authorizedKeys.keys;
+  };
+
+  users.root = secrets.root;
+
+  profile.wap = {
+    interfaces = with config.hardware.networkInterfaces; [
+      wan
+      lan
+      wlan
+      wlan5
+    ];
+
+    wireless.networks = {
+      "${secrets.ssid}" = {
+        interface = config.hardware.networkInterfaces.wlan;
+        hw_mode = "g";
+        channel = "6";
+        ieee80211n = 1;
+      }
+      // wirelessConfig;
+      "${secrets.ssid}-5" = rec {
+        interface = config.hardware.networkInterfaces.wlan5;
+        hw_mode = "a";
+        channel = 36;
+        ht_capab = "[HT40+]";
+        vht_oper_chwidth = 1;
+        vht_oper_centr_freq_seg0_idx = channel + 6;
+        ieee80211n = 1;
+        ieee80211ac = 1;
+      }
+      // wirelessConfig;
+    };
+  };
+
+  system.service.network.forward.enableIPv4 = false;
+  system.service.network.forward.enableIPv6 = false;
+
+  defaultProfile.packages = with pkgs; [
+    busybox
+    iw
+    nftables
+  ];
+
+}

routers/white-house-2/secrets.nix

@@ -0,0 +1,16 @@
+{
+  wpa_passphrase = "";
+  ssid = "GL-AR750";
+  root = {
+    openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEcZ/p1Ofa9liwIzPWzNtONhJ7+FUWd2lCz33r81t8+w kurogeek@kurogeek"
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAB/raxJR8gASmquP63weHelbi+da2WBJR1DgzHPNz/f"
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDuhpzDHBPvn8nv8RH1MRomDOaXyP4GziQm7r3MZ1Syk"
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAmgyEGuY/r7SDlJgrzYmQqpcWS5W+fCzRi3OS59ne4W openpgp:0xFF687387"
+    ];
+  };
+
+  lan = {
+    prefix = "192.168.1";
+  };
+}

vars/per-machine/canopus/zerotier/zerotier-identity-secret/secret

@@ -1,50 +1,50 @@
 {
-	"data": "ENC[AES256_GCM,data:5X2+BueQs5VLZKhyHwDAkf5Uz+ylNa2eb7J2iZlRfhLVobCb8nFEROXRuVc+V/r5hXIwYrn4Gmk/Q11RG4mGGpK71LQZvRXLB4eMun3ax55j0Wl8vi2l9zxUqgG2owMPwsVoTcqZl5NNE1rkMtwKxVNMsobjFEQV6lqxls+I9e5FluL/X8I0sJAChLt9UJPyiHHtQ1qAb80WLaI9WLx2s72/awG15orD+fUUnZ0dTPFmW1F3HbyZ5uksjox+whCiWIicVJWtYUKFyofDWrF9cSlu1aqOaOyT1yoT+3HhgOpQWNbHpw6EOLmk7Lj9xErNL7DxKCbfzOmN1UZ6ODYQTQhUVQg1w50nEWKU96p0,iv:mWHihTKJbzimjcYtckXc/RCTowhvKA6EXSRd8xgrvzg=,tag:5K+AvYMpxOZCt0EASf6bxQ==,type:str]",
+	"data": "ENC[AES256_GCM,data:k6CQPhcl/x3TJOOX0J2ksqqlRlkAjWxnHBt1eTzu30jQT81vaYShaiY9boITObspXDvpJA/847xrwOE5g8IcDmsl+V6of+PqByP3Gugc6rAxifA5oaSy3ZPwF5Vn8EH8Mgwuzt1+UsVrdfjBaEuQBrzjgaBuJYA4r7D+/B3Bma2JVWDNXqoncMXPBVe4HKGVczed8DQWhzbiQHBKkvsbZoXvB13TbtjR++ekD2/FEvfvDJtSw493lYCFNihoCoijbANjpH4Oc5e72OdvbnujzjdSIbRHp48CSZ8Z0QBUs7xML3Z9IHVwmmyWn/kXAwakb0ioucBcNMq+w39lO8o9LKnyf9Dum6a4M9M17JDj,iv:/CawcukHiC1s/AfKYmsvhHyrdarXdjvPS3UVRyEQOY4=,tag:xwKW7NQwV/VPCdIdoxkXgA==,type:str]",
 	"sops": {
 		"age": [
 			{
 				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwVUdPNWg5MlAxbmRkR0Fk\ncEJOektOT2VLdm5Vd2t2ZUNEbXlPMDlmRmhZCloyZ2t0L0pUWVFSb3FTeXM3R2JR\na0NzMEY4eEV6d0tQbkFsK004VStQUjAKLS0tIFE4Um5QV0s4aEdQSW1yVjlodVM3\ncGt5RnRRY1Zsc3FGQWxEUlJLQ3hXc1kKHZYs/Mc5ocJC43r8HhmqMN8/WTQgSEuB\nWHX+fncG8wbR4+veTp3XaGfPsCZp8ni1ux3kTjA10ohuxOwkYuO2LQ==\n-----END AGE ENCRYPTED FILE-----\n"
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjSzZOYkp0OVI3b0twcFVH\nV2ljUEMxTENOT0loand2MEl0ZEpGWDlJSlhnCk5IWGM2NXNCSDc1TzBDL0t3dC9u\nZXdjSlhiVENXS1pHV002NzJUYzZiTGsKLS0tIFRFWXFpUHY5aktVclNXeWlsNitP\nVm14bTZ2QlBlaCtsZzlWS2o3UGNDc2sK897OCxf0fa51iEtxJZiKZXrFzoIbzRC7\nGjRrlyLb1lhhnU0nCuYzjP0GvTMZl2GcQDB2MnL02xWoHBLJU3vARg==\n-----END AGE ENCRYPTED FILE-----\n"
 			},
 			{
 				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVcWV2STZ5N0FTREhqT2VG\nbURld1RmNXhkWXYyYW1mZ2R6T1JpM1phUUFJCjYyUGR3SVRzbVBVWm5LYWRsRnBS\nT2pqZThrNW5IMHpTWlNUbEtxZFlHQWsKLS0tIHFZd1NHTXRSUldCNEJ5WnQ0VTVm\nSEVxMWpDK0FxelVUT2hBNnUrQWMvbVUKX95SmJesgFTUcQXjiOpO/cc7slVLj7ca\nunixYko0TDaunwzs+nBdGgIcIyxFB55J8HIsUWO5iq87647Kmt8iAA==\n-----END AGE ENCRYPTED FILE-----\n"
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5cGI2U2M0b2gvSGNnMDdz\nbkVNVTZtQmkwUG1NRkpQeWMrV0d6ZGxjQVMwCnZrRWMxbEhPb3dmSVBwV1EyWDBM\ncFQvazh3QjVrZ3VYK2p1ZWNCbk9NWkkKLS0tIGdTeHNHeG1IYXROakVXM3B6SDlv\nNFB4MFE0Sm93NlIrbWZGYnBKbUhpMjgKbkLnb5p1b49+iy1G9jIj3gXQ7vVvBERu\nnooclT5vRYeUsDmneLReL06x18GGgpjqBLMc3N6vnsRPldt2UbH6sw==\n-----END AGE ENCRYPTED FILE-----\n"
 			},
 			{
 				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHRPdjRIZk1K\nSUZlenl2Ykw0YWM2d3YyRURHYmtyMXJLdmJ0TndOZmt0R2MgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQp0a3VjQkNRaW5mQVprZ0FZN2U4TXFr\nc0xmSkc4RCtFVUI0ZHBkZ1BDSlhnCi0tLSBjYUNUSG8xMW1oT05PVGhtM1QwbE44\nZWNLTkhDZEJ6NDA1czE1Qk1Bem9zCuyDbuN+4c+Kluj/ZtyhKJ63O9NrI0g/s2IV\nsoaEye/OhzvC882doy2sdzxeewoWfm5Ts6XLP2BuI5YDVoCfX00=\n-----END AGE ENCRYPTED FILE-----\n"
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJICtkbERCNHZ6\nc3RyanRtYkFWL0NWaXFiVlZEWUFVQW5jZjB2aVY4Q3Q0VlUgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpzaTlTaWNoQ09Ha1pua01XeGRXNVJ1\nNkx6MDZHL1hSOHhsNVIwakx3MXowCi0tLSBxWWFFSm1YakpabXNwQkRoZFNLSWFU\nT2ZTT2krT3M3TURyNlBtN1hIV3kwCsrqG4Svt5YmGR+gSdzVB2eTr/MJpm2wa4xw\n5JIvnpNTjoD6ndkz9o4s76I9l0iQiJN06QfJFPOctttymrEENmc=\n-----END AGE ENCRYPTED FILE-----\n"
 			},
 			{
 				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGFUdmlTZ3hB\ndCtFT2hlcGZISndMUjJLbGpuY0xRVUxDN3hCRWY4MG9SZzggQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpOT0x1d2MvVTJxYVo4aVlmRTh0VWM5\nTWtqamg2blFuR3VXc0FQREhpcHVZCi0tLSBaNGU3dHlncFowbEFEZmZyL0Ntc05a\nOTFscWZzaHhXTGhSdmxoakZLQVkwCpbgdnU4cvnr8IPXqILa6ouU2QLNqOrSZQI3\n3dH4fDylpDEcovl79d32vAspVQrXwNASjsZmISi25PgyrYOvBoI=\n-----END AGE ENCRYPTED FILE-----\n"
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFNLSmZBZUEx\nSGF6WGNUamtQNVRWRmE1Z1FqYzk4NCtXMjhtbFZWUDFwQWcgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZworY2NnbVdxbG8zVytyalBWVmpuRWhu\nWk1xM1EralBlekRhTVd2a292Unk4Ci0tLSBQSWlsVSt1QXBMZmlTUERHS1FoQUFy\nYTBJTTN0WjkxZW5kczA4UjFleExZCiOOPYI5T3en6WbNXWJHb6trFUmOpHG6g1jB\nYmeCzifwmbq0Ye5vnJ2GW2UZra9ZEEeTwM3QcfLMEBUPQKxx8BA=\n-----END AGE ENCRYPTED FILE-----\n"
 			},
 			{
 				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEpocEF6dUg4\nVVdadnRoSWk3d3J1S1IycER5WFI2c28wYXFyQk1JbVBGeVEgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpEUlRSQUV0K255dlhVUDZUaE5ZZjhS\nVDMySmhKL0JxZ0pLVG1nOVJ4UWJJCi0tLSBnd1RLOEg1clBwODY3ZXZFWkExTWhi\na2FLaXdEemJibitYVVJoVlE3UWFFCorfHTd5t/600kcG4IhPlP6KXxt2SSOHQAXe\nq8pRnvyirHj09PZSQyVMGrdQ56H8F3QrIbEiB1/VnqUpsAmcDvw=\n-----END AGE ENCRYPTED FILE-----\n"
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHNsYTJJUnk0\nOUxlNEdjbmhzUmlsNkdqK2JudjI2TnlQbWNraHhQMWg0QVkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpIbTRLOEhyUFdWdXFUemNvV1NlQ3dV\nMUdKNEFVaDI4ZnJYUlZlWnZYT0RJCi0tLSA0Yjl6bTkvYWxIYjVkek1ubnl5Z1lj\nWGVCczNGUWJzR3R6RXpqTFBkVzVBCt+xEUTtydr8xfaTJejs4yIvUEuiKB2qsR7B\nQuZb4cyiDlDlhG1xr9s/EeGnQuy4wNrPJQo0yX70UtDWa+2Ylc8=\n-----END AGE ENCRYPTED FILE-----\n"
 			},
 			{
 				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXTUZNSkJzQ2xOU3hBc3Uy\nQ2ZzMnJIVURPN0d2NUhlNlFoUm1DdEpYV2tVCnFYM1VWTFNDR01mWitDejI0MEVE\nTkdjNVlVRERNV0N1RytHNGRXTDRhanMKLS0tIGVjaXlTcTUwdFlYQ2hXTFg5dTRF\nMGpKaUlqTmxEUTFwY1FMSUZuVGJDTmMKJ1V25M5GCt0GRig7PVUmWAYy/uiPPCSs\nvoW5UTj4ax4f6Yf/CiJ8EBodDbR89B+dIDVxy7pFWZoO9tMJCH9Lvw==\n-----END AGE ENCRYPTED FILE-----\n"
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoSlpKajRkWTV5dTR5c1Zk\nQ3NWenFUdXAvRG40bjErOXJqd2pDNHozNERVCkpQdURLRG50UmZ0VnZVYm5wWEc2\nWTFWaWFta01CQk1BdzU5R2N0NWF4bkEKLS0tIHRYQnZFY1BjTWtQZFNVNWNUM1VF\nYm1uV3NHbmFiR3VTQW1JZlp5cU1VQlEKLKPS55MdbV6ZWget0J2VJvCNdvDok9vU\n+Elhj11BfHRt3pZDPrhqoj7aZV0Sf+BKBQh5PsXIWoU4gvBIyJFtXg==\n-----END AGE ENCRYPTED FILE-----\n"
 			},
 			{
 				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMK1pBbGk4M0NwT1ZoODFF\nMlNPeXVYdWFncDZYMXlxNHFDWi9neEhCZFVnClhHSEZkNFN4OENRMVR4aEQ1dkpa\nUFhCcXY0ZUw4ZmdDTW1pOVdPb2x6UUEKLS0tIFNBRjN2dkdyQU80SWIwR2NWaHZr\nSy9jRStKVGlya255UzdPd1lSN1A5ZDgKxjIKUDUi8Fy/ZyWeRZAYuAocHeoTtJwl\njy+9tP/dg4aZdh6eu8zPZAojKvtKV8padxllr2+YNlX/SrE0CG13dw==\n-----END AGE ENCRYPTED FILE-----\n"
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpa0Vmd0lVSWkybExEVi9u\nRWRoL2N4R01CSm1MQmRuSXVXUTdlbUFlTUVrCnNwbThxRm9UK0JXcmt3M0NJeXFX\nblZWeWlGK1Q4T0drWTZ2dG9FaElzZ0kKLS0tIER4TmpMMFVTU0lzNTk2N21DT041\nVExmWWRkZXNaZTNnQ09VRGJPUHN3elUKOOn1PaAraeVXeHEzMfa7aC9xOqIaBNQv\n4vqQGD9owQwosJ2Be0sLcG7NhBmDKMcksZ2h8EYRLgZDlpc31FsMHw==\n-----END AGE ENCRYPTED FILE-----\n"
 			},
 			{
 				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzWkxRVWhLTXNVR3VsSVI0\nZkNoUDh2OWFDMkJyRkVqaCtjVWt5bXJDWkZVClhCUHNSZzAxTnE0aW92UkYrcEFD\nS0RSK1pHRXhlWEFxeHQvRzl6OWJiZUUKLS0tIGNYZWltZG0wdzBTdkRxRmhiSHJS\nWmppcllHUFdyZndhZk8wWExGL2NNRFUKCLYLbE06Cbx/lV2FO6KZ/4xI0LxewujW\n18SM2KCRGsiIzqt6e3uuThfjBqsZHFaDWAueUljDPoCLSvjSnpXjiA==\n-----END AGE ENCRYPTED FILE-----\n"
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSYWxTZ2FiY1QxbVpqOWdU\nZlUrbXJicUVjckpVaHBySnYzaVBjTlA5R0ZVCk9QTEUrYkpLRElMa2wwRjdkTmxq\nUk5zL0ViR2lMNE81dkZQa3N0TDljVncKLS0tIHFJZHhNMTVTKzFuU212WHBORWtl\nZEtlV28yUEtuekVONWRNZU8yUmd5K2MKsO6Qb6+ZaqOwIyiFlqCK4/4+HC28Q6OT\nSopQKIX3pnemYzn1RGL+js+YVQYCRXPTar3ag/m3r9wACVPe41OKYQ==\n-----END AGE ENCRYPTED FILE-----\n"
 			},
 			{
 				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtWk5BdzdySnJLRWQrK0xp\nUzlQUmtFOGJNUmM2TUgyS2czUHlWTVA1b1dBCkdnWWdLRGRNdXRQR3hrVm0rK3lY\nV05ZMGtGdU1Ga1YzUmF6M2twcHYvWWcKLS0tIEtJbFRNQVdtYXhRcVdCa3d0RUR2\nbEI4ZWdmY1NRcmtFcEZwWGxSOHNoS00KhnmsR7jN0Zl453re1tqv7+GHfJt08uKv\nzX0jCVdJKDRwN6qD2TePxNXnwjMHsvDudzT6uUJIuGWPfu84K3/Q7A==\n-----END AGE ENCRYPTED FILE-----\n"
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaVjdhNkdXOFZuSDFGTzlO\nL1pSdVV0Vm5JUG11eE52QjdUODA3d2p3TUFNCnVUdStQMFRnVVNidVh2ZEhiWmNw\nTEt2emV3MWIxR2N0dVQ0UVJIeVZkY1EKLS0tIHFTUFErSGk4VVJ5cnhDeTdicHpL\nVnlKajdxbDZUMGFqcll3UVRYMmJwV00KurVxNUqO/t7u8734Z3/gzzURqPFxDpIH\nJVGr3dTW7ILmlGVsxpBNKJddJF82n3AnPKYdelPnzcgxRbwvWccZgQ==\n-----END AGE ENCRYPTED FILE-----\n"
 			},
 			{
 				"recipient": "age1w6fg9v57jesdv0ectnhynmy5vqdpf6hgyhnn5rejyj2xgghrud4q0jfcta",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwZ21PWUM3WFhPTWdGczBp\nK0Z0dG5WZmEyTW1NdUxnSVZHREZHZmVOUGt3CkpER2d4eklPQTVYWllTc2tnV2pN\nazg0NnovZXdMeU5rcGRSWVlpQ1RTKzAKLS0tIEZ3anRkOUFpcDcwSmVUTHVwTlRj\nL3l1S3ErcUtsSWVRdTR5MU9Eb1BKZ1UKeyWJah4yb3+MqrO1Pphcwm9ORVPfycsv\nLAFeRvqQD3k0g8mdvX7aZWD5Nb9np09clp4ac1p0oIkIYeAUXm4xBw==\n-----END AGE ENCRYPTED FILE-----\n"
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBta0dRcC9RTTA5SkFGbld0\nNEFDdm5iV3VFa3FNNVhweHVhTFFRekEzYlNvCk9jSDc3dFRmQyttcEp2UytBaklE\nT1padCsvS0Z0V0ljc2ttSmcyYk9tbkUKLS0tIE5qQmlMMWRGQ0RDcWxUNmRwd3Z6\nRkdUV1VSYk5BenZISysvckpielBEM0kKTgzderOYm+nT5QMJGGKDq1wJmxI2SVGT\nAAWbDaVfuZYJKD97XxZRvn+tJfCSQlZwERYzKgpctn/iuIKhj4CWww==\n-----END AGE ENCRYPTED FILE-----\n"
 			}
 		],
-		"lastmodified": "2026-05-04T07:13:25Z",
-		"mac": "ENC[AES256_GCM,data:l7HvHqFzExEgYXf5oxpLpKI4VwtO+rYY2z9KJElzw2wynxxIyMxV3gWWCoyGkukpFXsXtYmr4TyAV5szV+6lKmCxump8uS2e1EMG9ulW9w+6l41lOL35IAhjJYgg9dCzIiqr9BIDY1fmrCPev7uL9UFZGQsXaXiEtylfyRe852A=,iv:z2SxTOSIT5ha1WjWbk7DlmBIDF9rQcjFWAcpDYyD33I=,tag:vcBi/BhBYqj+0x2+H1wobg==,type:str]",
+		"lastmodified": "2026-05-06T08:47:51Z",
+		"mac": "ENC[AES256_GCM,data:JIi2QWteWz2xhd3trCnkg1rtM0r+tQFZg7TNJ3RNXCa0MrXPbZfOi2fE1jb71t2mz/mOnnnaai9FxFOA1FuVuXMiG2vDdc5hn/bp5R8Fyl1KvcbNGFCxuNb0Nvs/KXhNy3NvmahEbdzav6kFTCeZHTVTQ6AlW6PHFgw+S7A2o2M=,iv:2fkeSucu76Kz/S7RcAqYVafPdoIYYlHoqQdfHgpVhWk=,tag:c9tUL47jkGg4NAP7Ul54Gw==,type:str]",
 		"version": "3.12.2"
 	}
 }

vars/per-machine/canopus/zerotier/zerotier-ip/value

@@ -1 +1 @@
-fd95:3ea2:f773:bac2:cd99:9395:3ea2:f773
+fdf7:d53f:344b:8562:2599:93c9:8a1b:72f4

vars/per-machine/canopus/zerotier/zerotier-network-id/value

@@ -1 +0,0 @@
-953ea2f773bac2cd