Compare commits
7 Commits
f826b90c8e
...
mob/invent
| Author | SHA1 | Date | |
|---|---|---|---|
| e29d19d5f2 | |||
| cfc967fac9 | |||
| f3d282b763 | |||
| a37a0cc7d1 | |||
| a629fa123a | |||
| d3c7baf551 | |||
| 162ba62cb2 |
27
flake.lock
generated
27
flake.lock
generated
@@ -121,6 +121,26 @@
|
||||
"type": "github"
|
||||
}
|
||||
},
|
||||
"home-manager": {
|
||||
"inputs": {
|
||||
"nixpkgs": [
|
||||
"nixpkgs"
|
||||
]
|
||||
},
|
||||
"locked": {
|
||||
"lastModified": 1768068402,
|
||||
"narHash": "sha256-bAXnnJZKJiF7Xr6eNW6+PhBf1lg2P1aFUO9+xgWkXfA=",
|
||||
"owner": "nix-community",
|
||||
"repo": "home-manager",
|
||||
"rev": "8bc5473b6bc2b6e1529a9c4040411e1199c43b4c",
|
||||
"type": "github"
|
||||
},
|
||||
"original": {
|
||||
"owner": "nix-community",
|
||||
"repo": "home-manager",
|
||||
"type": "github"
|
||||
}
|
||||
},
|
||||
"import-tree": {
|
||||
"locked": {
|
||||
"lastModified": 1752730890,
|
||||
@@ -205,11 +225,11 @@
|
||||
},
|
||||
"nixpkgs": {
|
||||
"locked": {
|
||||
"lastModified": 1761656231,
|
||||
"narHash": "sha256-krgZxGAIIIKFJS+UB0l8do3sYUDWJc75M72tepmVMzE=",
|
||||
"lastModified": 1768395095,
|
||||
"narHash": "sha256-ZhuYJbwbZT32QA95tSkXd9zXHcdZj90EzHpEXBMabaw=",
|
||||
"owner": "nixos",
|
||||
"repo": "nixpkgs",
|
||||
"rev": "d7f52a7a640bc54c7bb414cca603835bf8dd4b10",
|
||||
"rev": "13868c071cc73a5e9f610c47d7bb08e5da64fdd5",
|
||||
"type": "github"
|
||||
},
|
||||
"original": {
|
||||
@@ -224,6 +244,7 @@
|
||||
"clan-core": "clan-core",
|
||||
"devshell": "devshell",
|
||||
"flake-parts": "flake-parts",
|
||||
"home-manager": "home-manager",
|
||||
"import-tree": "import-tree",
|
||||
"liminix": "liminix",
|
||||
"nixpkgs": "nixpkgs",
|
||||
|
||||
@@ -15,6 +15,10 @@
|
||||
inputs.nixpkgs-lib.follows = "nixpkgs";
|
||||
url = "github:hercules-ci/flake-parts";
|
||||
};
|
||||
home-manager = {
|
||||
inputs.nixpkgs.follows = "nixpkgs";
|
||||
url = "github:nix-community/home-manager";
|
||||
};
|
||||
import-tree.url = "github:vic/import-tree";
|
||||
nixpkgs.url = "github:nixos/nixpkgs/nixpkgs-unstable";
|
||||
treefmt-nix = {
|
||||
@@ -41,6 +45,8 @@
|
||||
./fmt.nix
|
||||
./shell.nix
|
||||
|
||||
./overlays
|
||||
./modules/nixos
|
||||
./machines
|
||||
./routers
|
||||
./inventories
|
||||
|
||||
@@ -1,4 +1,5 @@
|
||||
{
|
||||
imports = [ ./personal-computer.nix ];
|
||||
clan = {
|
||||
inventory = {
|
||||
|
||||
@@ -11,6 +12,7 @@
|
||||
b4l = [
|
||||
"rigel"
|
||||
"neptune"
|
||||
"rana"
|
||||
];
|
||||
phonebox = [
|
||||
"neptune"
|
||||
@@ -160,13 +162,6 @@
|
||||
};
|
||||
roles.default.machines.b4l = { };
|
||||
};
|
||||
pingvin = {
|
||||
module = {
|
||||
name = "pingvin";
|
||||
input = "self";
|
||||
};
|
||||
roles.default.machines.b4l = { };
|
||||
};
|
||||
paperless = {
|
||||
module = {
|
||||
name = "paperless";
|
||||
@@ -232,7 +227,7 @@
|
||||
ftdi-sd-spi = { };
|
||||
go-go-gadget = { };
|
||||
hacking-the-kindle = { };
|
||||
islands = { };
|
||||
islands = PUBLIC;
|
||||
kt = { };
|
||||
legba = { };
|
||||
llb = PUBLIC;
|
||||
@@ -242,7 +237,7 @@
|
||||
navi = { };
|
||||
notmuch-memoryhole = PUBLIC;
|
||||
pms5003 = { };
|
||||
thinc = { };
|
||||
thinc = PUBLIC;
|
||||
toad = { };
|
||||
yggdrasil-erlang = { };
|
||||
};
|
||||
|
||||
37
inventories/personal-computer.nix
Normal file
37
inventories/personal-computer.nix
Normal file
@@ -0,0 +1,37 @@
|
||||
{
|
||||
clan.inventory = {
|
||||
tags = {
|
||||
kde-desktop = [ "rana" ];
|
||||
personal-computer = [ "rana" ];
|
||||
};
|
||||
|
||||
instances = {
|
||||
emmie-home = {
|
||||
module = {
|
||||
name = "home-user";
|
||||
input = "self";
|
||||
};
|
||||
roles.default.settings = {
|
||||
username = "emmie";
|
||||
kbLayout = "us,th";
|
||||
kbOptions = "grp:win_space_toggle,grp:alt_shift_toggle";
|
||||
};
|
||||
roles.default.machines."rana" = { };
|
||||
};
|
||||
personal-computer = {
|
||||
module = {
|
||||
name = "personal-computer";
|
||||
input = "self";
|
||||
};
|
||||
roles.default.tags."personal-computer" = { };
|
||||
};
|
||||
kde = {
|
||||
module = {
|
||||
name = "kde";
|
||||
input = "clan-core";
|
||||
};
|
||||
roles.default.tags."kde-desktop" = { };
|
||||
};
|
||||
};
|
||||
};
|
||||
}
|
||||
@@ -20,6 +20,9 @@
|
||||
},
|
||||
"buna": {
|
||||
"installedAt": 1765343708
|
||||
},
|
||||
"rana": {
|
||||
"installedAt": 1768294839
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -19,7 +19,7 @@ in
|
||||
|
||||
services.nextcloud = {
|
||||
hostName = ncDomain;
|
||||
package = pkgs.nextcloud31;
|
||||
package = pkgs.nextcloud32;
|
||||
|
||||
settings = {
|
||||
|
||||
|
||||
@@ -1,45 +0,0 @@
|
||||
{
|
||||
pkgs,
|
||||
config,
|
||||
...
|
||||
}:
|
||||
let
|
||||
serviceName = "${config.networking.hostName}-pingvin";
|
||||
domain-name = "${
|
||||
config.clan.core.vars.generators."${serviceName}".files.subdomain.value
|
||||
}.${config.networking.fqdn}";
|
||||
in
|
||||
{
|
||||
clan.core.vars.generators."${serviceName}" = {
|
||||
files = {
|
||||
subdomain.secret = false;
|
||||
};
|
||||
prompts = {
|
||||
subdomain = {
|
||||
persist = true;
|
||||
type = "line";
|
||||
description = "Sub-domain for Pingvin. Default:(share)";
|
||||
};
|
||||
};
|
||||
|
||||
runtimeInputs = [
|
||||
pkgs.xkcdpass
|
||||
pkgs.coreutils
|
||||
];
|
||||
|
||||
script = ''
|
||||
prompt_domain=$(cat "$prompts"/subdomain)
|
||||
if [[ -n "''${prompt_domain-}" ]]; then
|
||||
echo $prompt_domain | tr -d "\n" > "$out"/subdomain
|
||||
else
|
||||
echo -n "share" > "$out"/subdomain
|
||||
fi
|
||||
'';
|
||||
};
|
||||
|
||||
services.pingvin-share = {
|
||||
nginx.enable = true;
|
||||
https = true;
|
||||
hostname = domain-name;
|
||||
};
|
||||
}
|
||||
@@ -1,4 +1,8 @@
|
||||
{ inputs, self, ... }:
|
||||
{
|
||||
inputs,
|
||||
self,
|
||||
...
|
||||
}:
|
||||
{
|
||||
imports = [
|
||||
inputs.clan-core.flakeModules.default
|
||||
|
||||
12
machines/rana/configuration.nix
Normal file
12
machines/rana/configuration.nix
Normal file
@@ -0,0 +1,12 @@
|
||||
{ self, ... }:
|
||||
{
|
||||
imports = [
|
||||
self.nixosModules.common
|
||||
];
|
||||
|
||||
nixpkgs.hostPlatform = {
|
||||
system = "x86_64-linux";
|
||||
};
|
||||
system.stateVersion = "25.11";
|
||||
clan.core.sops.defaultGroups = [ "admins" ];
|
||||
}
|
||||
90
machines/rana/disko.nix
Normal file
90
machines/rana/disko.nix
Normal file
@@ -0,0 +1,90 @@
|
||||
{ ... }:
|
||||
let
|
||||
hashDisk = disk: "os-${builtins.substring 0 5 (builtins.hashString "sha256" disk)}";
|
||||
os = "/dev/disk/by-id/nvme-SAMSUNG_MZVL81T0HFLB-00BLL_S7XKNF0Y966645";
|
||||
in
|
||||
{
|
||||
|
||||
boot.loader = {
|
||||
systemd-boot = {
|
||||
enable = true;
|
||||
};
|
||||
efi = {
|
||||
canTouchEfiVariables = true;
|
||||
};
|
||||
};
|
||||
|
||||
disko.devices = {
|
||||
disk = {
|
||||
"os-${hashDisk os}" = {
|
||||
type = "disk";
|
||||
device = os;
|
||||
content = {
|
||||
type = "gpt";
|
||||
partitions = {
|
||||
ESP = {
|
||||
size = "1G";
|
||||
type = "EF00";
|
||||
content = {
|
||||
type = "filesystem";
|
||||
format = "vfat";
|
||||
mountpoint = "/boot";
|
||||
mountOptions = [ "nofail" ];
|
||||
};
|
||||
};
|
||||
system = {
|
||||
size = "100%";
|
||||
content = {
|
||||
type = "zfs";
|
||||
pool = "zroot";
|
||||
};
|
||||
};
|
||||
swap = {
|
||||
size = "16G";
|
||||
content = {
|
||||
type = "swap";
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
zpool = {
|
||||
zroot = {
|
||||
type = "zpool";
|
||||
rootFsOptions = {
|
||||
mountpoint = "none";
|
||||
compression = "lz4";
|
||||
acltype = "posixacl";
|
||||
xattr = "sa";
|
||||
"com.sun:auto-snapshot" = "true";
|
||||
};
|
||||
options.ashift = "12";
|
||||
datasets = {
|
||||
"root" = {
|
||||
type = "zfs_fs";
|
||||
options.mountpoint = "none";
|
||||
};
|
||||
"root/nixos" = {
|
||||
type = "zfs_fs";
|
||||
options.mountpoint = "/";
|
||||
mountpoint = "/";
|
||||
};
|
||||
"root/home" = {
|
||||
type = "zfs_fs";
|
||||
options.mountpoint = "/home";
|
||||
mountpoint = "/home";
|
||||
};
|
||||
"root/tmp" = {
|
||||
type = "zfs_fs";
|
||||
mountpoint = "/tmp";
|
||||
options = {
|
||||
mountpoint = "/tmp";
|
||||
sync = "disabled";
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
}
|
||||
5395
machines/rana/facter.json
Normal file
5395
machines/rana/facter.json
Normal file
File diff suppressed because it is too large
Load Diff
@@ -1,4 +1,9 @@
|
||||
{ config, ... }:
|
||||
{
|
||||
inputs,
|
||||
config,
|
||||
pkgs,
|
||||
...
|
||||
}:
|
||||
{
|
||||
imports = [
|
||||
(import ../../lib/auto-accept-zerotier-members.nix {
|
||||
@@ -8,8 +13,54 @@
|
||||
"2bd36db8cc" # kurogeek-thinkpad
|
||||
];
|
||||
})
|
||||
|
||||
inputs.self.nixosModules.inventree
|
||||
];
|
||||
|
||||
nixpkgs.overlays = [
|
||||
inputs.self.overlays.default
|
||||
];
|
||||
|
||||
clan.core.vars.generators.inventree = {
|
||||
files = {
|
||||
secret-key = {
|
||||
owner = "inventree";
|
||||
group = "inventree";
|
||||
secret = true;
|
||||
};
|
||||
oidc-key = {
|
||||
owner = "inventree";
|
||||
group = "inventree";
|
||||
secret = true;
|
||||
};
|
||||
admin-password = {
|
||||
owner = "inventree";
|
||||
group = "inventree";
|
||||
secret = true;
|
||||
};
|
||||
};
|
||||
runtimeInputs = [
|
||||
pkgs.pwgen
|
||||
pkgs.xkcdpass
|
||||
];
|
||||
script = ''
|
||||
pwgen -s 32 1 > $out/secret-key
|
||||
pwgen -s 32 1 > $out/oidc-key
|
||||
xkcdpass --numwords 4 --delimiter - --count 1 | tr -d "\n" > "$out"/admin-password
|
||||
'';
|
||||
};
|
||||
|
||||
networking.firewall.allowedTCPPorts = [ 80 ];
|
||||
|
||||
services.inventree = {
|
||||
enable = true;
|
||||
hostName = "rigel.local";
|
||||
config.site_url = "http://${config.services.inventree.hostName}";
|
||||
secretKeyFile = config.clan.core.vars.generators.inventree.files.secret-key.path;
|
||||
config.oidc_private_key_file = config.clan.core.vars.generators.inventree.files.oidc-key.path;
|
||||
config.adminPasswordFile = config.clan.core.vars.generators.inventree.files.admin-password.path;
|
||||
};
|
||||
|
||||
system.stateVersion = "25.11";
|
||||
clan.core.sops.defaultGroups = [ "admins" ];
|
||||
clan.core.networking.targetHost = "root@[${config.clan.core.vars.generators.zerotier.files.zerotier-ip.value}]";
|
||||
|
||||
@@ -3,9 +3,11 @@
|
||||
_class = "clan.service";
|
||||
manifest.name = "actual-budget";
|
||||
manifest.description = "A local-first personal finance app ";
|
||||
manifest.readme = "A local-first personal finance app";
|
||||
manifest.categories = [ "System" ];
|
||||
|
||||
roles.default = {
|
||||
description = "A default server role.";
|
||||
|
||||
perInstance.nixosModule =
|
||||
{
|
||||
|
||||
@@ -3,9 +3,11 @@
|
||||
_class = "clan.service";
|
||||
manifest.name = "git-daemon";
|
||||
manifest.description = "a really simple server for git repositories";
|
||||
manifest.readme = "a really simple server for git repositories";
|
||||
manifest.categories = [ "System" ];
|
||||
|
||||
roles.default = {
|
||||
description = "a default server role";
|
||||
interface =
|
||||
{ lib, ... }:
|
||||
{
|
||||
|
||||
@@ -3,9 +3,11 @@
|
||||
_class = "clan.service";
|
||||
manifest.name = "grafana";
|
||||
manifest.description = "Platform for data analytics and monitoring";
|
||||
manifest.readme = "Platform for data analytics and monitoring";
|
||||
manifest.categories = [ "System" ];
|
||||
|
||||
roles.default = {
|
||||
description = "A default server role";
|
||||
|
||||
perInstance.nixosModule =
|
||||
{
|
||||
|
||||
6
modules/clan/home-profiles/flake-module.nix
Normal file
6
modules/clan/home-profiles/flake-module.nix
Normal file
@@ -0,0 +1,6 @@
|
||||
{ lib, ... }:
|
||||
{
|
||||
clan.modules = {
|
||||
home-user = lib.modules.importApply ./home-user { };
|
||||
};
|
||||
}
|
||||
64
modules/clan/home-profiles/home-user/default.nix
Normal file
64
modules/clan/home-profiles/home-user/default.nix
Normal file
@@ -0,0 +1,64 @@
|
||||
{ ... }:
|
||||
{
|
||||
_class = "clan.service";
|
||||
manifest.name = "common-user-home-manager";
|
||||
manifest.description = "General users' home-manager profile generator";
|
||||
manifest.readme = "General users' home-manager profile generator";
|
||||
manifest.categories = [ "System" ];
|
||||
|
||||
roles.default = {
|
||||
description = "a default role for the user";
|
||||
interface =
|
||||
{ lib, ... }:
|
||||
{
|
||||
options = {
|
||||
username = lib.mkOption {
|
||||
type = lib.types.str;
|
||||
};
|
||||
kbLayout = lib.mkOption {
|
||||
type = lib.types.str;
|
||||
default = "us";
|
||||
};
|
||||
kbOptions = lib.mkOption {
|
||||
type = lib.types.str;
|
||||
default = "grp:win_space_toggle";
|
||||
};
|
||||
};
|
||||
};
|
||||
perInstance =
|
||||
{ settings, ... }:
|
||||
{
|
||||
nixosModule =
|
||||
{ inputs, ... }:
|
||||
let
|
||||
username = settings.username;
|
||||
in
|
||||
{
|
||||
imports = [ inputs.home-manager.nixosModules.home-manager ];
|
||||
|
||||
users.users.${username} = {
|
||||
initialPassword = "";
|
||||
isNormalUser = true;
|
||||
extraGroups = [
|
||||
"audio"
|
||||
"video"
|
||||
"networkmanager"
|
||||
];
|
||||
};
|
||||
|
||||
services.xserver = {
|
||||
enable = true;
|
||||
xkb.layout = settings.kbLayout;
|
||||
xkb.options = settings.kbOptions;
|
||||
};
|
||||
|
||||
home-manager.useGlobalPkgs = true;
|
||||
home-manager.useUserPackages = true;
|
||||
home-manager.users.${username} = ./home.nix;
|
||||
home-manager.extraSpecialArgs = {
|
||||
inherit inputs username;
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
}
|
||||
24
modules/clan/home-profiles/home-user/home.nix
Normal file
24
modules/clan/home-profiles/home-user/home.nix
Normal file
@@ -0,0 +1,24 @@
|
||||
{
|
||||
osConfig,
|
||||
pkgs,
|
||||
lib,
|
||||
username,
|
||||
...
|
||||
}:
|
||||
{
|
||||
home = {
|
||||
inherit username;
|
||||
homeDirectory = lib.mkForce "/home/${username}";
|
||||
stateVersion = osConfig.system.stateVersion;
|
||||
packages = with pkgs; [
|
||||
libreoffice
|
||||
element-desktop
|
||||
brave
|
||||
firefox
|
||||
keepassxc
|
||||
vlc
|
||||
thunderbird
|
||||
];
|
||||
};
|
||||
programs.home-manager.enable = true;
|
||||
}
|
||||
@@ -3,9 +3,11 @@
|
||||
_class = "clan.service";
|
||||
manifest.name = "jukebox";
|
||||
manifest.description = "mpd server, library on removable disks";
|
||||
manifest.readme = "mpd server, library on removable disks";
|
||||
manifest.categories = [ "System" ];
|
||||
|
||||
roles.default = {
|
||||
description = "a default server role";
|
||||
interface =
|
||||
{ lib, ... }:
|
||||
{
|
||||
@@ -111,19 +113,22 @@
|
||||
|
||||
services.mpd = {
|
||||
enable = true;
|
||||
musicDirectory = settings.baseDir;
|
||||
network.listenAddress = "any";
|
||||
extraConfig = ''
|
||||
audio_output {
|
||||
type "pulse"
|
||||
name "jukebox"
|
||||
server "localhost"
|
||||
}
|
||||
'';
|
||||
openFirewall = true;
|
||||
settings = {
|
||||
bind_to_address = "any";
|
||||
music_directory = settings.baseDir;
|
||||
audio_output = [
|
||||
{
|
||||
type = "pulse";
|
||||
name = "jukebox";
|
||||
server = "localhost";
|
||||
}
|
||||
];
|
||||
};
|
||||
};
|
||||
|
||||
networking.firewall.interfaces = lib.genAttrs settings.binds (_: {
|
||||
allowedTCPPorts = [ config.services.mpd.network.port ];
|
||||
allowedTCPPorts = [ config.services.mpd.settings.port ];
|
||||
});
|
||||
|
||||
environment.systemPackages = [ pkgs.mpc ];
|
||||
|
||||
@@ -3,9 +3,11 @@
|
||||
_class = "clan.service";
|
||||
manifest.name = "nextcloud";
|
||||
manifest.description = "Nextcloud server, a safe home for all your data";
|
||||
manifest.readme = "Nextcloud server, a safe home for all your data";
|
||||
manifest.categories = [ "System" ];
|
||||
|
||||
roles.default = {
|
||||
description = "a default server role";
|
||||
|
||||
perInstance.nixosModule =
|
||||
{
|
||||
|
||||
@@ -3,9 +3,11 @@
|
||||
_class = "clan.service";
|
||||
manifest.name = "paperless";
|
||||
manifest.description = "A community-supported supercharged document management system: scan, index and archive all your documents";
|
||||
manifest.readme = "A community-supported supercharged document management system: scan, index and archive all your documents";
|
||||
manifest.categories = [ "System" ];
|
||||
|
||||
roles.default = {
|
||||
description = "a default server role";
|
||||
|
||||
perInstance.nixosModule =
|
||||
{
|
||||
|
||||
8
modules/clan/personal-computer/automatic-timezone.nix
Normal file
8
modules/clan/personal-computer/automatic-timezone.nix
Normal file
@@ -0,0 +1,8 @@
|
||||
{ lib, ... }:
|
||||
{
|
||||
services.automatic-timezoned.enable = true;
|
||||
services.geoclue2 = {
|
||||
enableDemoAgent = lib.mkForce true;
|
||||
geoProviderUrl = "https://beacondb.net/v1/geolocate";
|
||||
};
|
||||
}
|
||||
21
modules/clan/personal-computer/default.nix
Normal file
21
modules/clan/personal-computer/default.nix
Normal file
@@ -0,0 +1,21 @@
|
||||
{ ... }:
|
||||
{
|
||||
_class = "clan.service";
|
||||
manifest.name = "personal-computer";
|
||||
manifest.description = "A service for configuring personal computer such as printing, automatic-timezone, etc.";
|
||||
manifest.readme = "A service for configuring personal computer such as printing, automatic-timezone, etc.";
|
||||
manifest.categories = [ "System" ];
|
||||
|
||||
roles.default = {
|
||||
description = "an only one default role";
|
||||
perInstance.nixosModule =
|
||||
{ inputs, lib, ... }:
|
||||
{
|
||||
imports = [
|
||||
(inputs.import-tree.initFilter (
|
||||
p: !lib.hasSuffix "default.nix" p && !lib.hasSuffix "flake-module.nix" p
|
||||
) ./.)
|
||||
];
|
||||
};
|
||||
};
|
||||
}
|
||||
4
modules/clan/personal-computer/desktop-environment.nix
Normal file
4
modules/clan/personal-computer/desktop-environment.nix
Normal file
@@ -0,0 +1,4 @@
|
||||
{ config, ... }:
|
||||
{
|
||||
security.pam.services."sddm".kwallet.enable = config.services.desktopManager.plasma6.enable;
|
||||
}
|
||||
6
modules/clan/personal-computer/flake-module.nix
Normal file
6
modules/clan/personal-computer/flake-module.nix
Normal file
@@ -0,0 +1,6 @@
|
||||
{ lib, ... }:
|
||||
{
|
||||
clan.modules = {
|
||||
personal-computer = lib.modules.importApply ./default.nix { };
|
||||
};
|
||||
}
|
||||
11
modules/clan/personal-computer/libinput.nix
Normal file
11
modules/clan/personal-computer/libinput.nix
Normal file
@@ -0,0 +1,11 @@
|
||||
{
|
||||
services = {
|
||||
libinput = {
|
||||
enable = true;
|
||||
touchpad = {
|
||||
disableWhileTyping = true;
|
||||
naturalScrolling = true;
|
||||
};
|
||||
};
|
||||
};
|
||||
}
|
||||
62
modules/clan/personal-computer/printing.nix
Normal file
62
modules/clan/personal-computer/printing.nix
Normal file
@@ -0,0 +1,62 @@
|
||||
{
|
||||
pkgs,
|
||||
lib,
|
||||
config,
|
||||
...
|
||||
}:
|
||||
let
|
||||
allowManageGroups = [
|
||||
"root"
|
||||
"wheel"
|
||||
"lpadmin"
|
||||
];
|
||||
polkitAllowGroups = builtins.concatStringsSep "||" (
|
||||
builtins.map (group: ''subject.isInGroup("${group}")'') allowManageGroups
|
||||
);
|
||||
|
||||
printerMember = lib.map (user: user.name) (
|
||||
lib.attrsets.attrsToList (
|
||||
lib.attrsets.filterAttrs (name: value: value.isNormalUser) config.users.users
|
||||
)
|
||||
);
|
||||
|
||||
in
|
||||
{
|
||||
services.printing = {
|
||||
enable = true;
|
||||
drivers = [
|
||||
pkgs.brlaser
|
||||
pkgs.gutenprint
|
||||
];
|
||||
|
||||
extraFilesConf = ''
|
||||
SystemGroup ${builtins.concatStringsSep " " allowManageGroups}
|
||||
'';
|
||||
};
|
||||
|
||||
security.polkit = {
|
||||
enable = true;
|
||||
|
||||
extraConfig = ''
|
||||
polkit.addRule(function(action, subject) {
|
||||
var actionMatchs = (
|
||||
action.id.indexOf('org.opensuse.cupspkhelper.mechanism.') === 0
|
||||
);
|
||||
if (actionMatchs) {
|
||||
if (${polkitAllowGroups}) {
|
||||
return polkit.Result.YES
|
||||
}
|
||||
}
|
||||
});
|
||||
'';
|
||||
};
|
||||
|
||||
hardware.sane = {
|
||||
enable = true;
|
||||
};
|
||||
|
||||
users.groups.lpadmin.members = printerMember;
|
||||
users.groups.lp.members = printerMember;
|
||||
users.groups.scanner.members = printerMember;
|
||||
|
||||
}
|
||||
11
modules/clan/personal-computer/users.nix
Normal file
11
modules/clan/personal-computer/users.nix
Normal file
@@ -0,0 +1,11 @@
|
||||
{ lib, ... }:
|
||||
{
|
||||
users.mutableUsers = lib.mkForce true;
|
||||
security.polkit.extraConfig = ''
|
||||
polkit.addRule(function(action, subject) {
|
||||
if ((action.id == "org.freedesktop.accounts.change-own-password")) {
|
||||
return polkit.Result.AUTH_SELF;
|
||||
}
|
||||
});
|
||||
'';
|
||||
}
|
||||
4
modules/clan/personal-computer/wireless.nix
Normal file
4
modules/clan/personal-computer/wireless.nix
Normal file
@@ -0,0 +1,4 @@
|
||||
{
|
||||
networking.networkmanager.enable = true;
|
||||
hardware.bluetooth.enable = true;
|
||||
}
|
||||
@@ -5,10 +5,12 @@
|
||||
{
|
||||
_class = "clan.service";
|
||||
manifest.name = "phonebox";
|
||||
manifest.description = "";
|
||||
manifest.description = "A peer to peer phone relay network built on top of yggdrasil.";
|
||||
manifest.readme = "A peer to peer phone relay network built on top of yggdrasil.";
|
||||
manifest.categories = [ "System" ];
|
||||
|
||||
roles.default = {
|
||||
description = "a default server role";
|
||||
interface =
|
||||
{ lib, ... }:
|
||||
{
|
||||
|
||||
@@ -1,23 +0,0 @@
|
||||
{ ... }:
|
||||
{
|
||||
_class = "clan.service";
|
||||
manifest.name = "pingvin";
|
||||
manifest.description = "A self-hosted file sharing platform that combines lightness and beauty, perfect for seamless and efficient file sharing.";
|
||||
manifest.categories = [ "System" ];
|
||||
|
||||
roles.default = {
|
||||
|
||||
perInstance.nixosModule =
|
||||
{
|
||||
config,
|
||||
...
|
||||
}:
|
||||
{
|
||||
services.pingvin-share = {
|
||||
enable = true;
|
||||
};
|
||||
|
||||
clan.core.state.pingvin-share.folders = [ config.services.pingvin-share.dataDir ];
|
||||
};
|
||||
};
|
||||
}
|
||||
@@ -1,19 +0,0 @@
|
||||
{ lib, ... }:
|
||||
let
|
||||
module = lib.modules.importApply ./default.nix { };
|
||||
in
|
||||
{
|
||||
clan.modules = {
|
||||
pingvin = module;
|
||||
};
|
||||
|
||||
perSystem =
|
||||
{ ... }:
|
||||
{
|
||||
clan.nixosTests.service-pingvin = {
|
||||
imports = [ ./tests/vm/default.nix ];
|
||||
|
||||
clan.modules."@clan/pingvin" = module;
|
||||
};
|
||||
};
|
||||
}
|
||||
@@ -1,42 +0,0 @@
|
||||
{
|
||||
...
|
||||
}:
|
||||
{
|
||||
name = "service-pingvin";
|
||||
|
||||
clan = {
|
||||
directory = ./.;
|
||||
inventory = {
|
||||
machines.server = { };
|
||||
|
||||
instances = {
|
||||
pingvin-test = {
|
||||
module.name = "@clan/pingvin";
|
||||
module.input = "self";
|
||||
roles.default.machines."server".settings = { };
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
nodes = {
|
||||
server = {
|
||||
services.pingvin-share = {
|
||||
hostname = "share.localhost";
|
||||
frontend.port = 3000;
|
||||
backend.port = 8000;
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
testScript = ''
|
||||
start_all()
|
||||
|
||||
server.wait_for_unit("pingvin-share-frontend")
|
||||
|
||||
server.succeed("systemctl status pingvin-share-frontend")
|
||||
server.wait_for_open_port(3000)
|
||||
server.wait_for_open_port(8000)
|
||||
server.succeed("curl -H \"Host: share.localhost\" http://127.0.0.1:3000 ")
|
||||
'';
|
||||
}
|
||||
@@ -3,9 +3,11 @@
|
||||
_class = "clan.service";
|
||||
manifest.name = "pocket-id";
|
||||
manifest.description = "A simple and easy-to-use OIDC provider that allows users to authenticate with their passkeys to your services.";
|
||||
manifest.readme = "A simple and easy-to-use OIDC provider that allows users to authenticate with their passkeys to your services.";
|
||||
manifest.categories = [ "System" ];
|
||||
|
||||
roles.default = {
|
||||
description = "a default server role";
|
||||
|
||||
perInstance.nixosModule =
|
||||
{
|
||||
|
||||
@@ -3,9 +3,11 @@
|
||||
_class = "clan.service";
|
||||
manifest.name = "pulse-stream";
|
||||
manifest.description = "stream audio to attached speakers";
|
||||
manifest.readme = "stream audio to attached speakers";
|
||||
manifest.categories = [ "System" ];
|
||||
|
||||
roles.default = {
|
||||
description = "a default role";
|
||||
interface =
|
||||
{ lib, ... }:
|
||||
{
|
||||
|
||||
@@ -3,9 +3,11 @@
|
||||
_class = "clan.service";
|
||||
manifest.name = "stirling-pdf";
|
||||
manifest.description = "Your locally hosted one-stop-shop for all your PDF needs.";
|
||||
manifest.readme = "Your locally hosted one-stop-shop for all your PDF needs.";
|
||||
manifest.categories = [ "System" ];
|
||||
|
||||
roles.default = {
|
||||
description = "a default server role";
|
||||
perInstance.nixosModule =
|
||||
{
|
||||
lib,
|
||||
|
||||
@@ -3,9 +3,11 @@
|
||||
_class = "clan.service";
|
||||
manifest.name = "Victoria Metrics";
|
||||
manifest.description = "VictoriaMetrics: fast, cost-effective monitoring solution and time series database";
|
||||
manifest.readme = "VictoriaMetrics: fast, cost-effective monitoring solution and time series database";
|
||||
manifest.categories = [ "System" ];
|
||||
|
||||
roles.default = {
|
||||
description = "a default server role";
|
||||
perInstance.nixosModule =
|
||||
{
|
||||
config,
|
||||
|
||||
@@ -3,9 +3,11 @@
|
||||
_class = "clan.service";
|
||||
manifest.name = "vikunja";
|
||||
manifest.description = "The to-do app to organize your life.";
|
||||
manifest.readme = "The to-do app to organize your life.";
|
||||
manifest.categories = [ "System" ];
|
||||
|
||||
roles.default = {
|
||||
description = "a default server role";
|
||||
perInstance.nixosModule =
|
||||
{
|
||||
lib,
|
||||
|
||||
@@ -3,9 +3,11 @@
|
||||
_class = "clan.service";
|
||||
manifest.name = "yggdrasil";
|
||||
manifest.description = "An in scalable routing as an encrypted IPv6 overlay network";
|
||||
manifest.readme = "An in scalable routing as an encrypted IPv6 overlay network";
|
||||
manifest.categories = [ "System" ];
|
||||
|
||||
roles.default = {
|
||||
description = "a default peer role";
|
||||
perInstance.nixosModule =
|
||||
{
|
||||
lib,
|
||||
|
||||
5
modules/nixos/default.nix
Normal file
5
modules/nixos/default.nix
Normal file
@@ -0,0 +1,5 @@
|
||||
{
|
||||
flake.nixosModules = {
|
||||
inventree = import ../nixos/inventree;
|
||||
};
|
||||
}
|
||||
386
modules/nixos/inventree/default.nix
Normal file
386
modules/nixos/inventree/default.nix
Normal file
@@ -0,0 +1,386 @@
|
||||
{
|
||||
lib,
|
||||
config,
|
||||
pkgs,
|
||||
...
|
||||
}:
|
||||
let
|
||||
inherit (lib)
|
||||
mkEnableOption
|
||||
mkOption
|
||||
types
|
||||
mkIf
|
||||
;
|
||||
|
||||
configFormat = pkgs.formats.json { };
|
||||
cfg = config.services.inventree;
|
||||
pkg = cfg.package;
|
||||
configFile = "${cfg.dataDir}/config.json";
|
||||
|
||||
inventree-invoke = pkgs.writeShellApplication {
|
||||
name = "inventree-invoke";
|
||||
text = ''
|
||||
export INVENTREE_CONFIG_FILE=${configFile}
|
||||
export INVENTREE_SECRET_KEY_FILE=${cfg.secretKeyFile}
|
||||
export PYTHONPATH=${pkg.pythonPath}
|
||||
|
||||
exec -a "$0" ${pkgs.python3Packages.invoke}/bin/invoke -r ${cfg.package}/opt/inventree "$@"
|
||||
'';
|
||||
};
|
||||
in
|
||||
{
|
||||
options.services.inventree = {
|
||||
enable = mkEnableOption "InvenTree parts manager";
|
||||
|
||||
package = lib.mkOption {
|
||||
type = types.package;
|
||||
default = pkgs.inventree;
|
||||
description = ''
|
||||
InvenTree package to use
|
||||
'';
|
||||
};
|
||||
|
||||
hostName = mkOption {
|
||||
type = types.str;
|
||||
description = "FQDN for the InvenTree instance.";
|
||||
};
|
||||
|
||||
dataDir = mkOption {
|
||||
type = types.path;
|
||||
default = "/var/lib/inventree";
|
||||
example = "/var/lib/inventree";
|
||||
description = ''
|
||||
The default path for all inventree data.
|
||||
'';
|
||||
};
|
||||
|
||||
secretKeyFile = mkOption {
|
||||
type = types.path;
|
||||
default = "${cfg.dataDir}/secret_key.txt";
|
||||
description = ''
|
||||
Path to a file containing the secret key
|
||||
'';
|
||||
};
|
||||
|
||||
config = mkOption {
|
||||
type = types.submodule ({
|
||||
freeformType = configFormat.type;
|
||||
options = {
|
||||
adminUser = mkOption {
|
||||
type = types.str;
|
||||
default = "admin";
|
||||
};
|
||||
adminPasswordFile = mkOption {
|
||||
type = types.path;
|
||||
description = "Path to password file for user `admin`";
|
||||
};
|
||||
site_url = mkOption {
|
||||
type = types.str;
|
||||
default = "https://${cfg.hostName}";
|
||||
};
|
||||
static_root = mkOption {
|
||||
type = types.path;
|
||||
default = "${cfg.dataDir}/static";
|
||||
description = ''
|
||||
Static file storage
|
||||
'';
|
||||
};
|
||||
media_root = mkOption {
|
||||
type = types.path;
|
||||
default = "${cfg.dataDir}/media_root";
|
||||
description = "Media root directory";
|
||||
};
|
||||
backup_dir = mkOption {
|
||||
type = types.path;
|
||||
default = "${cfg.dataDir}/backups";
|
||||
description = "Backup directory";
|
||||
};
|
||||
oidc_private_key_file = mkOption {
|
||||
type = types.path;
|
||||
default = "${cfg.dataDir}/oidc.key";
|
||||
};
|
||||
};
|
||||
});
|
||||
default = { };
|
||||
description = ''
|
||||
Config options, see https://docs.inventree.org/en/stable/start/config/
|
||||
for details
|
||||
'';
|
||||
};
|
||||
|
||||
serverStartTimeout = mkOption {
|
||||
type = types.str;
|
||||
default = "10min";
|
||||
description = ''
|
||||
TimeoutStartSec for the server systemd service.
|
||||
See https://www.freedesktop.org/software/systemd/man/latest/systemd.service.html#TimeoutStartSec=
|
||||
for more details
|
||||
'';
|
||||
};
|
||||
|
||||
serverStopTimeout = mkOption {
|
||||
type = types.str;
|
||||
default = "5min";
|
||||
description = ''
|
||||
TimeoutStopSec for the server systemd service.
|
||||
See https://www.freedesktop.org/software/systemd/man/latest/systemd.service.html#TimeoutStopSec=
|
||||
for more details
|
||||
'';
|
||||
};
|
||||
|
||||
};
|
||||
|
||||
config = mkIf cfg.enable {
|
||||
environment.systemPackages = [ inventree-invoke ];
|
||||
|
||||
systemd.tmpfiles.rules = (
|
||||
map (dir: "d ${dir} 0755 inventree inventree") [
|
||||
"${cfg.dataDir}"
|
||||
"${cfg.dataDir}/static"
|
||||
"${cfg.dataDir}/media_root"
|
||||
"${cfg.dataDir}/backups"
|
||||
]
|
||||
);
|
||||
|
||||
services.inventree.config = {
|
||||
plugins_enabled = false;
|
||||
plugin_file = "${cfg.dataDir}/plugins.txt";
|
||||
plugin_dir = "${cfg.dataDir}/plugins";
|
||||
database = {
|
||||
ENGINE = "postgresql";
|
||||
NAME = "inventree";
|
||||
HOST = "/run/postgresql";
|
||||
};
|
||||
};
|
||||
|
||||
services.postgresql = {
|
||||
enable = true;
|
||||
ensureDatabases = [ "inventree" ];
|
||||
ensureUsers = [
|
||||
{
|
||||
name = "inventree";
|
||||
ensureDBOwnership = true;
|
||||
}
|
||||
];
|
||||
};
|
||||
|
||||
users.users.inventree = {
|
||||
group = "inventree";
|
||||
isSystemUser = true;
|
||||
description = "InvenTree daemon user";
|
||||
};
|
||||
|
||||
users.groups.inventree = { };
|
||||
|
||||
services.nginx.enable = true;
|
||||
|
||||
services.nginx.virtualHosts.${cfg.hostName} = {
|
||||
locations =
|
||||
let
|
||||
unixPath = config.systemd.sockets.inventree-gunicorn.socketConfig.ListenStream;
|
||||
in
|
||||
{
|
||||
"/" = {
|
||||
extraConfig = ''
|
||||
client_max_body_size 100M;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
'';
|
||||
proxyPass = "http://unix:${unixPath}";
|
||||
};
|
||||
"/static/" = {
|
||||
alias = "${cfg.config.static_root}/";
|
||||
extraConfig = ''
|
||||
expires 30d;
|
||||
'';
|
||||
};
|
||||
"/media/" = {
|
||||
alias = "${cfg.config.media_root}/";
|
||||
extraConfig = ''
|
||||
auth_request /auth;
|
||||
'';
|
||||
};
|
||||
"/auth" = {
|
||||
extraConfig = ''
|
||||
internal;
|
||||
'';
|
||||
proxyPass = "http://unix:${unixPath}:/auth/";
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
systemd.targets.inventree = {
|
||||
description = "Target for all InvenTree services";
|
||||
wantedBy = [ "multi-user.target" ];
|
||||
wants = [ "network-online.target" ];
|
||||
after = [ "network-online.target" ];
|
||||
};
|
||||
|
||||
systemd.services.inventree-config = {
|
||||
description = "Inventree config generation";
|
||||
wantedBy = [ "inventree.target" ];
|
||||
partOf = [ "inventree.target" ];
|
||||
before = [
|
||||
"inventree-static.service"
|
||||
"inventree-gunicorn.service"
|
||||
"inventree-qcluster.service"
|
||||
];
|
||||
serviceConfig = {
|
||||
# User = "root";
|
||||
# Group = "root";
|
||||
User = "inventree";
|
||||
Group = "inventree";
|
||||
Type = "oneshot";
|
||||
RemainAfterExit = true;
|
||||
PrivateTmp = true;
|
||||
};
|
||||
environment = {
|
||||
INVENTREE_CONFIG_FILE = configFile;
|
||||
INVENTREE_SECRET_KEY_FILE = cfg.secretKeyFile;
|
||||
INVENTREE_AUTO_UPDATE = "1";
|
||||
INVENTREE_PLUGINS_ENABLED = "1";
|
||||
INVENTREE_PLUGIN_NOINSTALL = "1";
|
||||
INVENTREE_STATIC_ROOT = cfg.config.static_root;
|
||||
INVENTREE_MEDIA_ROOT = cfg.config.media_root;
|
||||
INVENTREE_BACKUP_DIR = cfg.config.backup_dir;
|
||||
INVENTREE_OIDC_PRIVATE_KEY_FILE = cfg.config.oidc_private_key_file;
|
||||
INVENTREE_DB_ENGINE = cfg.config.database.ENGINE;
|
||||
INVENTREE_DB_NAME = cfg.config.database.NAME;
|
||||
INVENTREE_DB_HOST = cfg.config.database.HOST;
|
||||
INVENTREE_DB_USER = "inventree";
|
||||
INVENTREE_ADMIN_USER = cfg.config.adminUser;
|
||||
INVENTREE_ADMIN_PASSWORD_FILE = cfg.config.adminPasswordFile;
|
||||
|
||||
INVENTREE_SITE_URL = cfg.config.site_url;
|
||||
|
||||
PYTHONPATH = pkg.pythonPath;
|
||||
};
|
||||
script = ''
|
||||
set -euo pipefail
|
||||
|
||||
umask u=rwx,g=,o=
|
||||
|
||||
# chown inventree:inventree ${configFile}
|
||||
|
||||
${pkg}/opt/inventree/src/backend/InvenTree/manage.py migrate
|
||||
'';
|
||||
};
|
||||
|
||||
systemd.services.inventree-static = {
|
||||
description = "InvenTree static migration";
|
||||
wantedBy = [ "inventree.target" ];
|
||||
partOf = [ "inventree.target" ];
|
||||
before = [ "inventree-gunicorn.service" ];
|
||||
environment = {
|
||||
INVENTREE_CONFIG_FILE = configFile;
|
||||
INVENTREE_SECRET_KEY_FILE = cfg.secretKeyFile;
|
||||
INVENTREE_AUTO_UPDATE = "1";
|
||||
INVENTREE_PLUGINS_ENABLED = "1";
|
||||
INVENTREE_PLUGIN_NOINSTALL = "1";
|
||||
INVENTREE_STATIC_ROOT = cfg.config.static_root;
|
||||
INVENTREE_MEDIA_ROOT = cfg.config.media_root;
|
||||
INVENTREE_BACKUP_DIR = cfg.config.backup_dir;
|
||||
INVENTREE_OIDC_PRIVATE_KEY_FILE = cfg.config.oidc_private_key_file;
|
||||
INVENTREE_DB_ENGINE = cfg.config.database.ENGINE;
|
||||
INVENTREE_DB_NAME = cfg.config.database.NAME;
|
||||
INVENTREE_DB_HOST = cfg.config.database.HOST;
|
||||
INVENTREE_DB_USER = "inventree";
|
||||
INVENTREE_ADMIN_USER = cfg.config.adminUser;
|
||||
INVENTREE_ADMIN_PASSWORD_FILE = cfg.config.adminPasswordFile;
|
||||
INVENTREE_SITE_URL = cfg.config.site_url;
|
||||
|
||||
PYTHONPATH = pkg.pythonPath;
|
||||
};
|
||||
serviceConfig = {
|
||||
User = "inventree";
|
||||
Group = "inventree";
|
||||
StateDirectory = "inventree";
|
||||
#RuntimeDirectory = "inventree";
|
||||
PrivateTmp = true;
|
||||
ExecStart = ''
|
||||
${pkg}/opt/inventree/src/backend/InvenTree/manage.py collectstatic --no-input
|
||||
'';
|
||||
};
|
||||
};
|
||||
|
||||
systemd.services.inventree-gunicorn = {
|
||||
description = "InvenTree Gunicorn server";
|
||||
requiredBy = [ "inventree.target" ];
|
||||
partOf = [ "inventree.target" ];
|
||||
#wantedBy = [ "inventree.target" ];
|
||||
environment = {
|
||||
INVENTREE_CONFIG_FILE = configFile;
|
||||
INVENTREE_SECRET_KEY_FILE = cfg.secretKeyFile;
|
||||
INVENTREE_AUTO_UPDATE = "1";
|
||||
INVENTREE_PLUGINS_ENABLED = "1";
|
||||
INVENTREE_PLUGIN_NOINSTALL = "1";
|
||||
INVENTREE_STATIC_ROOT = cfg.config.static_root;
|
||||
INVENTREE_MEDIA_ROOT = cfg.config.media_root;
|
||||
INVENTREE_BACKUP_DIR = cfg.config.backup_dir;
|
||||
INVENTREE_OIDC_PRIVATE_KEY_FILE = cfg.config.oidc_private_key_file;
|
||||
INVENTREE_DB_ENGINE = cfg.config.database.ENGINE;
|
||||
INVENTREE_DB_NAME = cfg.config.database.NAME;
|
||||
INVENTREE_DB_HOST = cfg.config.database.HOST;
|
||||
INVENTREE_DB_USER = "inventree";
|
||||
INVENTREE_ADMIN_USER = cfg.config.adminUser;
|
||||
INVENTREE_ADMIN_PASSWORD_FILE = cfg.config.adminPasswordFile;
|
||||
INVENTREE_SITE_URL = cfg.config.site_url;
|
||||
|
||||
PYTHONPATH = pkg.pythonPath;
|
||||
};
|
||||
serviceConfig = {
|
||||
User = "inventree";
|
||||
Group = "inventree";
|
||||
StateDirectory = "inventree";
|
||||
#RuntimeDirectory = "inventree";
|
||||
PrivateTmp = true;
|
||||
ExecStart = ''
|
||||
${pkg.gunicorn}/bin/gunicorn InvenTree.wsgi \
|
||||
--pythonpath ${pkg}/opt/inventree/src/backend/InvenTree
|
||||
'';
|
||||
};
|
||||
};
|
||||
|
||||
systemd.sockets.inventree-gunicorn = {
|
||||
wantedBy = [ "sockets.target" ];
|
||||
partOf = [ "inventree.target" ];
|
||||
socketConfig.ListenStream = "/run/inventree/gunicorn.socket";
|
||||
};
|
||||
|
||||
systemd.services.inventree-qcluster = {
|
||||
description = "InvenTree qcluster server";
|
||||
requiredBy = [ "inventree.target" ];
|
||||
wantedBy = [ "inventree.target" ];
|
||||
partOf = [ "inventree.target" ];
|
||||
environment = {
|
||||
INVENTREE_CONFIG_FILE = configFile;
|
||||
INVENTREE_SECRET_KEY_FILE = cfg.secretKeyFile;
|
||||
INVENTREE_AUTO_UPDATE = "1";
|
||||
INVENTREE_PLUGINS_ENABLED = "0";
|
||||
INVENTREE_PLUGIN_NOINSTALL = "1";
|
||||
INVENTREE_STATIC_ROOT = cfg.config.static_root;
|
||||
INVENTREE_MEDIA_ROOT = cfg.config.media_root;
|
||||
INVENTREE_BACKUP_DIR = cfg.config.backup_dir;
|
||||
INVENTREE_OIDC_PRIVATE_KEY_FILE = cfg.config.oidc_private_key_file;
|
||||
INVENTREE_DB_ENGINE = cfg.config.database.ENGINE;
|
||||
INVENTREE_DB_NAME = cfg.config.database.NAME;
|
||||
INVENTREE_DB_HOST = cfg.config.database.HOST;
|
||||
INVENTREE_DB_USER = "inventree";
|
||||
INVENTREE_ADMIN_USER = cfg.config.adminUser;
|
||||
INVENTREE_ADMIN_PASSWORD_FILE = cfg.config.adminPasswordFile;
|
||||
INVENTREE_SITE_URL = cfg.config.site_url;
|
||||
|
||||
PYTHONPATH = pkg.pythonPath;
|
||||
};
|
||||
serviceConfig = {
|
||||
User = "inventree";
|
||||
Group = "inventree";
|
||||
StateDirectory = "inventree";
|
||||
#RuntimeDirectory = "inventree";
|
||||
PrivateTmp = true;
|
||||
ExecStart = ''
|
||||
${pkg}/opt/inventree/src/backend/InvenTree/manage.py qcluster
|
||||
'';
|
||||
};
|
||||
};
|
||||
};
|
||||
}
|
||||
@@ -57,7 +57,7 @@ in
|
||||
dataDir = lib.mkOption {
|
||||
type = lib.types.path;
|
||||
default = "/var/lib/think-backend.greaterchiangmai.com";
|
||||
description = ''A place where to store states'';
|
||||
description = "A place where to store states";
|
||||
};
|
||||
|
||||
user = lib.mkOption {
|
||||
@@ -263,6 +263,7 @@ in
|
||||
# migrate & seed db
|
||||
${lib.getExe php} artisan key:generate --force
|
||||
${lib.getExe php} artisan migrate --force
|
||||
${lib.getExe php} artisan storage:link
|
||||
${lib.getExe php} artisan config:cache
|
||||
'';
|
||||
};
|
||||
@@ -270,8 +271,8 @@ in
|
||||
systemd.tmpfiles.rules = [
|
||||
"d ${cfg.dataDir} 0710 ${cfg.user} ${cfg.group} - -"
|
||||
"d ${cfg.dataDir}/cache 0700 ${cfg.user} ${cfg.group} - -"
|
||||
"d ${cfg.dataDir}/public 0750 ${cfg.user} ${cfg.group} - -"
|
||||
"d ${cfg.dataDir}/public/uploads 0750 ${cfg.user} ${cfg.group} - -"
|
||||
"d ${cfg.dataDir}/public 0755 ${cfg.user} ${cfg.group} - -"
|
||||
"d ${cfg.dataDir}/public/uploads 0755 ${cfg.user} ${cfg.group} - -"
|
||||
"d ${cfg.dataDir}/storage 0700 ${cfg.user} ${cfg.group} - -"
|
||||
"d ${cfg.dataDir}/storage/app 0700 ${cfg.user} ${cfg.group} - -"
|
||||
"d ${cfg.dataDir}/storage/fonts 0700 ${cfg.user} ${cfg.group} - -"
|
||||
@@ -304,6 +305,16 @@ in
|
||||
index = "index.php";
|
||||
tryFiles = "$uri $uri/ /index.php?$query_string";
|
||||
};
|
||||
"/uploads" = {
|
||||
root = "${cfg.dataDir}/public/uploads";
|
||||
index = "index.php index.html";
|
||||
tryFiles = "$uri $uri/ /index.php";
|
||||
};
|
||||
"/storage" = {
|
||||
root = "${cfg.dataDir}/public/storage";
|
||||
index = "index.php index.html";
|
||||
tryFiles = "$uri $uri/ /index.php";
|
||||
};
|
||||
"~ \\.php$".extraConfig = ''
|
||||
fastcgi_pass unix:${config.services.phpfpm.pools."think-backend-gtcm".socket};
|
||||
'';
|
||||
|
||||
@@ -33,7 +33,7 @@ in
|
||||
dataDir = lib.mkOption {
|
||||
type = lib.types.path;
|
||||
default = "/var/lib/think.greaterchiangmai.com";
|
||||
description = ''A place where to store states'';
|
||||
description = "A place where to store states";
|
||||
};
|
||||
|
||||
user = lib.mkOption {
|
||||
@@ -228,6 +228,7 @@ in
|
||||
# migrate & seed db
|
||||
${lib.getExe php} artisan key:generate --force
|
||||
${lib.getExe php} artisan migrate --force
|
||||
${lib.getExe php} artisan storage:link
|
||||
${lib.getExe php} artisan config:cache
|
||||
'';
|
||||
};
|
||||
@@ -267,7 +268,16 @@ in
|
||||
index = "index.php";
|
||||
tryFiles = "$uri $uri/ /index.php?$query_string";
|
||||
};
|
||||
|
||||
"/uploads" = {
|
||||
root = "${cfg.dataDir}/public/uploads";
|
||||
index = "index.php index.html";
|
||||
tryFiles = "$uri $uri/ /index.php";
|
||||
};
|
||||
"/storage" = {
|
||||
root = "${cfg.dataDir}/public/storage";
|
||||
index = "index.php index.html";
|
||||
tryFiles = "$uri $uri/ /index.php";
|
||||
};
|
||||
"~ \\.php$".extraConfig = ''
|
||||
fastcgi_pass unix:${config.services.phpfpm.pools."think-gtcm".socket};
|
||||
'';
|
||||
|
||||
@@ -1,6 +1,8 @@
|
||||
{ ... }:
|
||||
{ inputs,... }:
|
||||
{
|
||||
flake.overlays = {
|
||||
packagesOverlay = import ../pkgs/overlay.nix;
|
||||
default = final: prev: import (../pkgs/overlay.nix) inputs final prev;
|
||||
};
|
||||
|
||||
}
|
||||
|
||||
145
pkgs/inventree/default.nix
Normal file
145
pkgs/inventree/default.nix
Normal file
@@ -0,0 +1,145 @@
|
||||
{
|
||||
stdenvNoCC,
|
||||
python3,
|
||||
fetchFromGitHub,
|
||||
fetchYarnDeps,
|
||||
yarnConfigHook,
|
||||
nodejs,
|
||||
}:
|
||||
let
|
||||
version = "unstable-2025-05-09";
|
||||
|
||||
src = fetchFromGitHub {
|
||||
owner = "inventree";
|
||||
repo = "InvenTree";
|
||||
rev = "e0acfaa762da0dd7b2822b567202210ca8b7dbd3";
|
||||
hash = "sha256-K+cqErDUmgPO7625P3jp7+7BOYEfyJ1nElae6RlJvvI=";
|
||||
};
|
||||
|
||||
frontend = stdenvNoCC.mkDerivation {
|
||||
name = "inventree-frontend";
|
||||
inherit version src;
|
||||
|
||||
yarnOfflineCache = fetchYarnDeps {
|
||||
yarnLock = "${src}/src/frontend/yarn.lock";
|
||||
hash = "sha256-KpWuYCrkGN+4UnwV1STEbTL0FWcLZ7Wq8a8ST55OpGM=";
|
||||
};
|
||||
|
||||
nativeBuildInputs = [
|
||||
yarnConfigHook
|
||||
nodejs
|
||||
];
|
||||
|
||||
patchPhase = ''
|
||||
runHook prePatch
|
||||
cd src/frontend
|
||||
runHook postPatch
|
||||
'';
|
||||
|
||||
buildPhase = ''
|
||||
echo "Running lingui"
|
||||
./node_modules/.bin/lingui compile --typescript
|
||||
echo building lib
|
||||
./node_modules/.bin/tsc --p ./tsconfig.lib.json
|
||||
./node_modules/.bin/vite --config vite.lib.config.ts build
|
||||
echo "Running tsc"
|
||||
./node_modules/.bin/tsc
|
||||
echo "Running vite"
|
||||
./node_modules/.bin/vite build --emptyOutDir --outDir $out
|
||||
'';
|
||||
};
|
||||
|
||||
in
|
||||
python3.pkgs.buildPythonApplication rec {
|
||||
pname = "InvenTree";
|
||||
inherit version src;
|
||||
|
||||
format = "other";
|
||||
|
||||
dependencies = with python3.pkgs; [
|
||||
coreapi
|
||||
cryptography
|
||||
distutils
|
||||
dj-rest-auth
|
||||
django_4
|
||||
django-allauth
|
||||
django-allauth.optional-dependencies.openid
|
||||
django-allauth.optional-dependencies.mfa
|
||||
django-allauth.optional-dependencies.socialaccount
|
||||
django-cleanup
|
||||
django-cors-headers
|
||||
django-dbbackup
|
||||
django-error-report-2
|
||||
django-filter
|
||||
django-flags
|
||||
django-formtools
|
||||
django-ical
|
||||
django-js-asset
|
||||
django-maintenance-mode
|
||||
django-markdownify
|
||||
django-money
|
||||
django-mptt
|
||||
django-redis
|
||||
django-oauth-toolkit
|
||||
django-otp
|
||||
django-q-sentry
|
||||
django-q2
|
||||
django-redis
|
||||
django-sesame
|
||||
django-sql-utils
|
||||
django-structlog
|
||||
django-stdimage
|
||||
django-taggit
|
||||
django-user-sessions
|
||||
django-weasyprint
|
||||
djangorestframework
|
||||
djangorestframework-simplejwt
|
||||
djangorestframework-simplejwt.optional-dependencies.crypto
|
||||
django-xforwardedfor-middleware
|
||||
drf-spectacular
|
||||
dulwich
|
||||
feedparser
|
||||
gunicorn
|
||||
pdf2image
|
||||
pillow
|
||||
pint
|
||||
pip-licenses
|
||||
pypdf
|
||||
python-barcode
|
||||
python-barcode.optional-dependencies.images
|
||||
python-dotenv
|
||||
pyyaml
|
||||
qrcode
|
||||
qrcode.optional-dependencies.pil
|
||||
rapidfuzz
|
||||
sentry-sdk
|
||||
tablib
|
||||
tablib.optional-dependencies.xls
|
||||
tablib.optional-dependencies.xlsx
|
||||
tablib.optional-dependencies.yaml
|
||||
weasyprint
|
||||
whitenoise
|
||||
|
||||
psycopg2
|
||||
fido2
|
||||
];
|
||||
|
||||
nativeCheckInputs = with python3.pkgs; [ django-slowtests ];
|
||||
|
||||
installPhase = ''
|
||||
mkdir -p $out/opt/inventree
|
||||
cp -r . $out/opt/inventree
|
||||
|
||||
echo "Installing frontend"
|
||||
|
||||
mkdir -p $out/opt/inventree/src/backend/InvenTree/web/static/web
|
||||
cp -r ${frontend}/* $out/opt/inventree/src/backend/InvenTree/web/static/web/
|
||||
cp -r ${frontend}/.* $out/opt/inventree/src/backend/InvenTree/web/static/web/
|
||||
'';
|
||||
|
||||
passthru = {
|
||||
pythonPath = python3.pkgs.makePythonPath dependencies;
|
||||
gunicorn = python3.pkgs.gunicorn;
|
||||
inherit frontend;
|
||||
};
|
||||
}
|
||||
@@ -2,4 +2,28 @@ final: prev: {
|
||||
think-gtcm = final.callPackage ./think-gtcm.nix { };
|
||||
think-backend-gtcm = final.callPackage ./think-backend-gtcm.nix { php = final.php83; };
|
||||
gtcm-file-uploader = final.callPackage ./gtcm-file-uploader.nix { };
|
||||
|
||||
pythonPackagesExtensions = prev.pythonPackagesExtensions ++ [
|
||||
(py-final: py-prev: {
|
||||
django-dbbackup = py-final.callPackage ./python/django-dbbackup { };
|
||||
django-error-report-2 = py-final.callPackage ./python/django-error-report-2 { };
|
||||
django-flags = py-final.callPackage ./python/django-flags { };
|
||||
django-ical = py-final.callPackage ./python/django-ical { };
|
||||
django-markdownify = py-final.callPackage ./python/django-markdownify { };
|
||||
django-money = py-final.callPackage ./python/django-money { };
|
||||
django-q-sentry = py-final.callPackage ./python/django-q-sentry { };
|
||||
django-recurrence = py-final.callPackage ./python/django-recurrence { };
|
||||
django-slowtests = py-final.callPackage ./python/django-slowtests { };
|
||||
django-structlog = py-final.callPackage ./python/django-structlog { };
|
||||
django-stdimage = py-final.callPackage ./python/django-stdimage { };
|
||||
django-user-sessions = py-final.callPackage ./python/django-user-sessions { };
|
||||
django-weasyprint = py-final.callPackage ./python/django-weasyprint { };
|
||||
django-xforwardedfor-middleware = py-final.callPackage ./python/django-xforwardedfor-middleware { };
|
||||
pip-licenses = py-final.callPackage ./python/pip-licenses { };
|
||||
py-moneyed = py-final.callPackage ./python/py-moneyed { };
|
||||
pytest-pycodestyle = py-final.callPackage ./python/pytest-codestyle { };
|
||||
sentry-sdk = py-final.callPackage ./python/sentry-sdk { };
|
||||
})
|
||||
];
|
||||
inventree = final.callPackage ./inventree { python3 = final.python312; };
|
||||
}
|
||||
|
||||
42
pkgs/python/django-dbbackup/default.nix
Normal file
42
pkgs/python/django-dbbackup/default.nix
Normal file
@@ -0,0 +1,42 @@
|
||||
{
|
||||
lib,
|
||||
buildPythonPackage,
|
||||
fetchFromGitHub,
|
||||
setuptools,
|
||||
wheel,
|
||||
django_4,
|
||||
pytz,
|
||||
}:
|
||||
|
||||
buildPythonPackage rec {
|
||||
pname = "django-dbbackup";
|
||||
version = "4.2.1";
|
||||
pyproject = true;
|
||||
|
||||
src = fetchFromGitHub {
|
||||
owner = "jazzband";
|
||||
repo = "django-dbbackup";
|
||||
rev = version;
|
||||
hash = "sha256-GD+f9mbImGPQ6MOUK3ftHqiGv7TT39jNQsFvd0dnnWU=";
|
||||
};
|
||||
|
||||
build-system = [
|
||||
setuptools
|
||||
wheel
|
||||
];
|
||||
|
||||
dependencies = [
|
||||
django_4
|
||||
pytz
|
||||
];
|
||||
|
||||
pythonImportsCheck = [ "dbbackup" ];
|
||||
|
||||
meta = {
|
||||
description = "Management commands to help backup and restore your project database and media files";
|
||||
homepage = "https://github.com/jazzband/django-dbbackup";
|
||||
license = lib.licenses.bsd3;
|
||||
maintainers = with lib.maintainers; [ ];
|
||||
mainProgram = "django-dbbackup";
|
||||
};
|
||||
}
|
||||
37
pkgs/python/django-error-report-2/default.nix
Normal file
37
pkgs/python/django-error-report-2/default.nix
Normal file
@@ -0,0 +1,37 @@
|
||||
{
|
||||
lib,
|
||||
buildPythonPackage,
|
||||
fetchFromGitHub,
|
||||
setuptools,
|
||||
wheel,
|
||||
django,
|
||||
}:
|
||||
|
||||
buildPythonPackage rec {
|
||||
pname = "django-error-report-2";
|
||||
version = "0.4.2";
|
||||
pyproject = true;
|
||||
|
||||
src = fetchFromGitHub {
|
||||
owner = "matmair";
|
||||
repo = "django-error-report-2";
|
||||
rev = version;
|
||||
hash = "sha256-ZCaslqgruJxM8345/jSlZGruM+27H9hvwL0wtPkUzc0=";
|
||||
};
|
||||
|
||||
build-system = [
|
||||
setuptools
|
||||
wheel
|
||||
];
|
||||
|
||||
dependencies = [ django ];
|
||||
|
||||
pythonImportsCheck = [ "error_report" ];
|
||||
|
||||
meta = {
|
||||
description = "Log/View Django server errors";
|
||||
homepage = "https://github.com/matmair/django-error-report-2";
|
||||
license = lib.licenses.mit;
|
||||
maintainers = with lib.maintainers; [ ];
|
||||
};
|
||||
}
|
||||
37
pkgs/python/django-flags/default.nix
Normal file
37
pkgs/python/django-flags/default.nix
Normal file
@@ -0,0 +1,37 @@
|
||||
{
|
||||
lib,
|
||||
buildPythonPackage,
|
||||
fetchFromGitHub,
|
||||
setuptools,
|
||||
wheel,
|
||||
django,
|
||||
}:
|
||||
|
||||
buildPythonPackage rec {
|
||||
pname = "django-flags";
|
||||
version = "5.0.13";
|
||||
pyproject = true;
|
||||
|
||||
src = fetchFromGitHub {
|
||||
owner = "cfpb";
|
||||
repo = "django-flags";
|
||||
rev = version;
|
||||
hash = "sha256-WPMfFYoP6WaVzZmVtqAz4LlY761aCRyPhd5npc8bOOI=";
|
||||
};
|
||||
|
||||
build-system = [
|
||||
setuptools
|
||||
wheel
|
||||
];
|
||||
|
||||
dependencies = [ django ];
|
||||
|
||||
pythonImportsCheck = [ "flags" ];
|
||||
|
||||
meta = {
|
||||
description = "Feature flags for Django projects";
|
||||
homepage = "https://github.com/cfpb/django-flags";
|
||||
license = lib.licenses.cc0;
|
||||
maintainers = with lib.maintainers; [ ];
|
||||
};
|
||||
}
|
||||
46
pkgs/python/django-ical/default.nix
Normal file
46
pkgs/python/django-ical/default.nix
Normal file
@@ -0,0 +1,46 @@
|
||||
{
|
||||
lib,
|
||||
buildPythonPackage,
|
||||
fetchFromGitHub,
|
||||
setuptools,
|
||||
setuptools-scm,
|
||||
wheel,
|
||||
django,
|
||||
django-recurrence,
|
||||
icalendar,
|
||||
}:
|
||||
|
||||
buildPythonPackage rec {
|
||||
pname = "django-ical";
|
||||
version = "1.9.2";
|
||||
pyproject = true;
|
||||
|
||||
src = fetchFromGitHub {
|
||||
owner = "jazzband";
|
||||
repo = "django-ical";
|
||||
rev = version;
|
||||
hash = "sha256-DUe0loayGcUS7MTyLn+g0KBxbIY7VsaoQNHGSMbMI3U=";
|
||||
};
|
||||
|
||||
build-system = [
|
||||
setuptools
|
||||
setuptools-scm
|
||||
wheel
|
||||
];
|
||||
|
||||
dependencies = [
|
||||
django
|
||||
django-recurrence
|
||||
icalendar
|
||||
];
|
||||
|
||||
pythonImportsCheck = [ "django_ical" ];
|
||||
|
||||
meta = {
|
||||
description = "ICal feeds for Django based on Django's syndication feed framework";
|
||||
homepage = "https://github.com/jazzband/django-ical";
|
||||
changelog = "https://github.com/jazzband/django-ical/blob/${src.rev}/CHANGES.rst";
|
||||
license = lib.licenses.mit;
|
||||
maintainers = with lib.maintainers; [ ];
|
||||
};
|
||||
}
|
||||
39
pkgs/python/django-markdownify/default.nix
Normal file
39
pkgs/python/django-markdownify/default.nix
Normal file
@@ -0,0 +1,39 @@
|
||||
{
|
||||
lib,
|
||||
buildPythonPackage,
|
||||
fetchFromGitHub,
|
||||
setuptools,
|
||||
bleach,
|
||||
django,
|
||||
markdown,
|
||||
}:
|
||||
|
||||
buildPythonPackage rec {
|
||||
pname = "django-markdownify";
|
||||
version = "0.9.5";
|
||||
pyproject = true;
|
||||
|
||||
src = fetchFromGitHub {
|
||||
owner = "erwinmatijsen";
|
||||
repo = "django-markdownify";
|
||||
rev = version;
|
||||
hash = "sha256-KYU8p8NRD4EIS/KhOk9nvmXCf0RWEc+IFZ57YtsDSWE=";
|
||||
};
|
||||
|
||||
build-system = [ setuptools ];
|
||||
|
||||
dependencies = [
|
||||
bleach
|
||||
django
|
||||
markdown
|
||||
];
|
||||
|
||||
pythonImportsCheck = [ "markdownify" ];
|
||||
|
||||
meta = {
|
||||
description = "Markdown template filter for Django";
|
||||
homepage = "https://github.com/erwinmatijsen/django-markdownify";
|
||||
license = lib.licenses.mit;
|
||||
maintainers = with lib.maintainers; [ ];
|
||||
};
|
||||
}
|
||||
41
pkgs/python/django-money/default.nix
Normal file
41
pkgs/python/django-money/default.nix
Normal file
@@ -0,0 +1,41 @@
|
||||
{
|
||||
lib,
|
||||
buildPythonPackage,
|
||||
fetchFromGitHub,
|
||||
setuptools,
|
||||
wheel,
|
||||
django,
|
||||
py-moneyed,
|
||||
}:
|
||||
|
||||
buildPythonPackage rec {
|
||||
pname = "django-money";
|
||||
version = "3.2";
|
||||
pyproject = true;
|
||||
|
||||
src = fetchFromGitHub {
|
||||
owner = "django-money";
|
||||
repo = "django-money";
|
||||
rev = version;
|
||||
hash = "sha256-eL26NsreUqtMJ26TmvmB53EJI4Sjs7qjFDnnt4N0vdI=";
|
||||
};
|
||||
|
||||
build-system = [
|
||||
setuptools
|
||||
wheel
|
||||
];
|
||||
|
||||
dependencies = [
|
||||
django
|
||||
py-moneyed
|
||||
];
|
||||
|
||||
pythonImportsCheck = [ "djmoney" ];
|
||||
|
||||
meta = {
|
||||
description = "Money fields for Django forms and models";
|
||||
homepage = "https://github.com/django-money/django-money";
|
||||
license = lib.licenses.bsd3;
|
||||
maintainers = with lib.maintainers; [ ];
|
||||
};
|
||||
}
|
||||
37
pkgs/python/django-q-sentry/default.nix
Normal file
37
pkgs/python/django-q-sentry/default.nix
Normal file
@@ -0,0 +1,37 @@
|
||||
{
|
||||
lib,
|
||||
buildPythonPackage,
|
||||
fetchFromGitHub,
|
||||
poetry-core,
|
||||
setuptools,
|
||||
sentry-sdk,
|
||||
}:
|
||||
|
||||
buildPythonPackage rec {
|
||||
pname = "django-q-sentry";
|
||||
version = "0.1.6";
|
||||
pyproject = true;
|
||||
|
||||
src = fetchFromGitHub {
|
||||
owner = "danielwelch";
|
||||
repo = "django-q-sentry";
|
||||
rev = "d3a43a90c82734244d5ebf3295652223053f1354";
|
||||
hash = "sha256-3C7A+X18c7p19HWD/uPRtAMf29VjmrfXXh2z5PPOREY=";
|
||||
};
|
||||
|
||||
build-system = [
|
||||
poetry-core
|
||||
setuptools
|
||||
];
|
||||
|
||||
dependencies = [ sentry-sdk ];
|
||||
|
||||
pythonImportsCheck = [ "django_q_sentry" ];
|
||||
|
||||
meta = {
|
||||
description = "Bringing Sentry error tracking to Django Q";
|
||||
homepage = "https://github.com/danielwelch/django-q-sentry";
|
||||
license = lib.licenses.mit;
|
||||
maintainers = with lib.maintainers; [ ];
|
||||
};
|
||||
}
|
||||
56
pkgs/python/django-recurrence/default.nix
Normal file
56
pkgs/python/django-recurrence/default.nix
Normal file
@@ -0,0 +1,56 @@
|
||||
{
|
||||
lib,
|
||||
buildPythonPackage,
|
||||
fetchFromGitHub,
|
||||
pdm-backend,
|
||||
django,
|
||||
flake8,
|
||||
pytest,
|
||||
pytest-cov,
|
||||
pytest-django,
|
||||
pytest-sugar,
|
||||
python-dateutil,
|
||||
sphinx,
|
||||
sphinx-rtd-theme,
|
||||
tox,
|
||||
}:
|
||||
|
||||
buildPythonPackage rec {
|
||||
pname = "django-recurrence";
|
||||
version = "1.12.1";
|
||||
pyproject = true;
|
||||
|
||||
src = fetchFromGitHub {
|
||||
owner = "jazzband";
|
||||
repo = "django-recurrence";
|
||||
rev = version;
|
||||
hash = "sha256-Q33zyMa1wI13RNLxynGAJHlagahpnFHCmZbHp0aPC/w=";
|
||||
};
|
||||
|
||||
build-system = [ pdm-backend ];
|
||||
|
||||
dependencies = [
|
||||
django
|
||||
flake8
|
||||
pytest
|
||||
pytest-cov
|
||||
pytest-django
|
||||
pytest-sugar
|
||||
python-dateutil
|
||||
sphinx
|
||||
sphinx-rtd-theme
|
||||
tox
|
||||
];
|
||||
|
||||
pythonRelaxDeps = true;
|
||||
|
||||
pythonImportsCheck = [ "recurrence" ];
|
||||
|
||||
meta = {
|
||||
description = "Utility for working with recurring dates in Django";
|
||||
homepage = "https://github.com/django-recurrence/django-recurrence";
|
||||
changelog = "https://github.com/django-recurrence/django-recurrence/blob/${src.rev}/CHANGES.rst";
|
||||
license = lib.licenses.bsd3;
|
||||
maintainers = with lib.maintainers; [ ];
|
||||
};
|
||||
}
|
||||
38
pkgs/python/django-slowtests/default.nix
Normal file
38
pkgs/python/django-slowtests/default.nix
Normal file
@@ -0,0 +1,38 @@
|
||||
{
|
||||
lib,
|
||||
buildPythonPackage,
|
||||
fetchFromGitHub,
|
||||
setuptools,
|
||||
wheel,
|
||||
django_4,
|
||||
}:
|
||||
|
||||
buildPythonPackage rec {
|
||||
pname = "django-slowtests";
|
||||
version = "1.1.1";
|
||||
pyproject = true;
|
||||
|
||||
src = fetchFromGitHub {
|
||||
owner = "realpython";
|
||||
repo = "django-slow-tests";
|
||||
rev = version;
|
||||
hash = "sha256-gW9AZiMpXJp1m2X1cbm6GdZ9cH+TFqjNLQJFmsvGjB0=";
|
||||
};
|
||||
|
||||
build-system = [
|
||||
setuptools
|
||||
wheel
|
||||
];
|
||||
|
||||
dependencies = [ django_4 ];
|
||||
|
||||
pythonImportsCheck = [ "django_slowtests" ];
|
||||
|
||||
meta = {
|
||||
description = "Locate your slowest tests";
|
||||
homepage = "https://github.com/realpython/django-slow-tests";
|
||||
changelog = "https://github.com/realpython/django-slow-tests/blob/${src.rev}/CHANGELOG.rst";
|
||||
license = lib.licenses.mit;
|
||||
maintainers = with lib.maintainers; [ ];
|
||||
};
|
||||
}
|
||||
51
pkgs/python/django-stdimage/default.nix
Normal file
51
pkgs/python/django-stdimage/default.nix
Normal file
@@ -0,0 +1,51 @@
|
||||
{
|
||||
lib,
|
||||
buildPythonPackage,
|
||||
fetchFromGitHub,
|
||||
setuptools,
|
||||
setuptools-scm,
|
||||
wheel,
|
||||
django,
|
||||
pillow,
|
||||
gettext,
|
||||
}:
|
||||
|
||||
buildPythonPackage rec {
|
||||
pname = "django-stdimage";
|
||||
version = "6.0.2";
|
||||
pyproject = true;
|
||||
|
||||
src = fetchFromGitHub {
|
||||
owner = "codingjoe";
|
||||
repo = "django-stdimage";
|
||||
rev = version;
|
||||
hash = "sha256-uwVU3Huc5fitAweShJjcMW//GBeIpJcxqKKLGo/EdIs=";
|
||||
};
|
||||
|
||||
build-system = [
|
||||
setuptools
|
||||
setuptools-scm
|
||||
wheel
|
||||
];
|
||||
|
||||
dependencies = [
|
||||
django
|
||||
pillow
|
||||
];
|
||||
|
||||
nativeBuildInputs = [ gettext ];
|
||||
|
||||
preBuild = ''
|
||||
echo "bla bla"
|
||||
echo $PATH
|
||||
'';
|
||||
|
||||
pythonImportsCheck = [ "stdimage" ];
|
||||
|
||||
meta = {
|
||||
description = "";
|
||||
homepage = "https://github.com/codingjoe/django-stdimage";
|
||||
license = lib.licenses.mit;
|
||||
maintainers = with lib.maintainers; [ ];
|
||||
};
|
||||
}
|
||||
48
pkgs/python/django-structlog/default.nix
Normal file
48
pkgs/python/django-structlog/default.nix
Normal file
@@ -0,0 +1,48 @@
|
||||
{
|
||||
lib,
|
||||
buildPythonPackage,
|
||||
fetchFromGitHub,
|
||||
setuptools,
|
||||
asgiref,
|
||||
django,
|
||||
django-ipware,
|
||||
structlog,
|
||||
celery,
|
||||
django-extensions,
|
||||
}:
|
||||
|
||||
buildPythonPackage rec {
|
||||
pname = "django-structlog";
|
||||
version = "9.1.1";
|
||||
pyproject = true;
|
||||
|
||||
src = fetchFromGitHub {
|
||||
owner = "jrobichaud";
|
||||
repo = "django-structlog";
|
||||
rev = version;
|
||||
hash = "sha256-SEigOdlXZtfLAgRgGkv/eDNDAiiHd7YthRJ/H6e1v5U=";
|
||||
};
|
||||
|
||||
build-system = [ setuptools ];
|
||||
|
||||
dependencies = [
|
||||
asgiref
|
||||
django
|
||||
django-ipware
|
||||
structlog
|
||||
];
|
||||
|
||||
optional-dependencies = {
|
||||
celery = [ celery ];
|
||||
commands = [ django-extensions ];
|
||||
};
|
||||
|
||||
pythonImportsCheck = [ "django_structlog" ];
|
||||
|
||||
meta = {
|
||||
description = "";
|
||||
homepage = "https://github.com/jrobichaud/django-structlog";
|
||||
license = lib.licenses.mit;
|
||||
maintainers = with lib.maintainers; [ ];
|
||||
};
|
||||
}
|
||||
39
pkgs/python/django-user-sessions/default.nix
Normal file
39
pkgs/python/django-user-sessions/default.nix
Normal file
@@ -0,0 +1,39 @@
|
||||
{
|
||||
lib,
|
||||
buildPythonPackage,
|
||||
fetchFromGitHub,
|
||||
setuptools,
|
||||
setuptools-scm,
|
||||
wheel,
|
||||
django,
|
||||
}:
|
||||
|
||||
buildPythonPackage rec {
|
||||
pname = "django-user-sessions";
|
||||
version = "2.0.0";
|
||||
pyproject = true;
|
||||
|
||||
src = fetchFromGitHub {
|
||||
owner = "jazzband";
|
||||
repo = "django-user-sessions";
|
||||
rev = version;
|
||||
hash = "sha256-Wexy6G2pZ8LTnqtJkBZIePV7qhQW8gu/mKiQfZtgf/o=";
|
||||
};
|
||||
|
||||
build-system = [
|
||||
setuptools
|
||||
setuptools-scm
|
||||
wheel
|
||||
];
|
||||
|
||||
dependencies = [ django ];
|
||||
|
||||
pythonImportsCheck = [ "user_sessions" ];
|
||||
|
||||
meta = {
|
||||
description = "Extend Django sessions with a foreign key back to the user, allowing enumerating all user's sessions";
|
||||
homepage = "http://github.com/jazzband/django-user-sessions";
|
||||
license = lib.licenses.mit;
|
||||
maintainers = with lib.maintainers; [ ];
|
||||
};
|
||||
}
|
||||
38
pkgs/python/django-weasyprint/default.nix
Normal file
38
pkgs/python/django-weasyprint/default.nix
Normal file
@@ -0,0 +1,38 @@
|
||||
{
|
||||
lib,
|
||||
buildPythonPackage,
|
||||
fetchFromGitHub,
|
||||
setuptools,
|
||||
django,
|
||||
weasyprint,
|
||||
}:
|
||||
|
||||
buildPythonPackage rec {
|
||||
pname = "django-weasyprint";
|
||||
version = "2.4.0";
|
||||
pyproject = true;
|
||||
|
||||
src = fetchFromGitHub {
|
||||
owner = "fdemmer";
|
||||
repo = "django-weasyprint";
|
||||
rev = "v${version}";
|
||||
hash = "sha256-eSh1p+5MyYb6GIEgSdlFxPzVCenlkwSCTkTzgKjezIg=";
|
||||
};
|
||||
|
||||
build-system = [ setuptools ];
|
||||
|
||||
dependencies = [
|
||||
django
|
||||
weasyprint
|
||||
];
|
||||
|
||||
pythonImportsCheck = [ "django_weasyprint" ];
|
||||
|
||||
meta = {
|
||||
description = "A Django class-based view generating PDF resposes using WeasyPrint";
|
||||
homepage = "https://github.com/fdemmer/django-weasyprint";
|
||||
changelog = "https://github.com/fdemmer/django-weasyprint/blob/${src.rev}/CHANGELOG.md";
|
||||
license = lib.licenses.asl20;
|
||||
maintainers = with lib.maintainers; [ ];
|
||||
};
|
||||
}
|
||||
37
pkgs/python/django-xforwardedfor-middleware/default.nix
Normal file
37
pkgs/python/django-xforwardedfor-middleware/default.nix
Normal file
@@ -0,0 +1,37 @@
|
||||
{
|
||||
lib,
|
||||
buildPythonPackage,
|
||||
fetchFromGitHub,
|
||||
setuptools,
|
||||
wheel,
|
||||
django,
|
||||
}:
|
||||
|
||||
buildPythonPackage rec {
|
||||
pname = "django-xforwardedfor-middleware";
|
||||
version = "2.0";
|
||||
pyproject = true;
|
||||
|
||||
src = fetchFromGitHub {
|
||||
owner = "allo-";
|
||||
repo = "django-xforwardedfor-middleware";
|
||||
rev = "v${version}";
|
||||
hash = "sha256-dDXSb17kXOSeIgY6wid1QFHhUjrapasWgCEb/El51eA=";
|
||||
};
|
||||
|
||||
build-system = [
|
||||
setuptools
|
||||
wheel
|
||||
];
|
||||
|
||||
dependencies = [ django ];
|
||||
|
||||
pythonImportsCheck = [ "x_forwarded_for" ];
|
||||
|
||||
meta = {
|
||||
description = "Use the X-Forwarded-For header to get the real ip of a request";
|
||||
homepage = "https://github.com/allo-/django-xforwardedfor-middleware";
|
||||
license = lib.licenses.publicDomain;
|
||||
maintainers = with lib.maintainers; [ ];
|
||||
};
|
||||
}
|
||||
74
pkgs/python/pip-licenses/default.nix
Normal file
74
pkgs/python/pip-licenses/default.nix
Normal file
@@ -0,0 +1,74 @@
|
||||
{
|
||||
lib,
|
||||
buildPythonPackage,
|
||||
fetchFromGitHub,
|
||||
setuptools,
|
||||
setuptools-scm,
|
||||
wheel,
|
||||
prettytable,
|
||||
tomli,
|
||||
autopep8,
|
||||
black,
|
||||
docutils,
|
||||
isort,
|
||||
mypy,
|
||||
pip-tools,
|
||||
pypandoc,
|
||||
pytest-cov,
|
||||
pytest-pycodestyle,
|
||||
pytest-runner,
|
||||
tomli-w,
|
||||
twine,
|
||||
}:
|
||||
|
||||
buildPythonPackage rec {
|
||||
pname = "pip-licenses";
|
||||
version = "5.0.0";
|
||||
pyproject = true;
|
||||
|
||||
src = fetchFromGitHub {
|
||||
owner = "raimon49";
|
||||
repo = "pip-licenses";
|
||||
rev = "v-${version}";
|
||||
hash = "sha256-6xw6BCuXSzNcwkpHaEFC5UPpubPUwhx/pg6vZq2er7A=";
|
||||
};
|
||||
|
||||
build-system = [
|
||||
setuptools
|
||||
setuptools-scm
|
||||
wheel
|
||||
];
|
||||
|
||||
dependencies = [
|
||||
prettytable
|
||||
tomli
|
||||
];
|
||||
|
||||
optional-dependencies = {
|
||||
dev = [
|
||||
autopep8
|
||||
black
|
||||
docutils
|
||||
isort
|
||||
mypy
|
||||
pip-tools
|
||||
pypandoc
|
||||
pytest-cov
|
||||
pytest-pycodestyle
|
||||
pytest-runner
|
||||
tomli-w
|
||||
twine
|
||||
wheel
|
||||
];
|
||||
};
|
||||
|
||||
pythonImportsCheck = [ "piplicenses" ];
|
||||
|
||||
meta = {
|
||||
description = "Dump the license list of packages installed with pip";
|
||||
homepage = "https://github.com/raimon49/pip-licenses";
|
||||
changelog = "https://github.com/raimon49/pip-licenses/blob/${src.rev}/CHANGELOG.md";
|
||||
license = lib.licenses.mit;
|
||||
maintainers = with lib.maintainers; [ ];
|
||||
};
|
||||
}
|
||||
42
pkgs/python/py-moneyed/default.nix
Normal file
42
pkgs/python/py-moneyed/default.nix
Normal file
@@ -0,0 +1,42 @@
|
||||
{
|
||||
lib,
|
||||
buildPythonPackage,
|
||||
fetchFromGitHub,
|
||||
setuptools,
|
||||
wheel,
|
||||
babel,
|
||||
typing-extensions,
|
||||
}:
|
||||
|
||||
buildPythonPackage rec {
|
||||
pname = "py-moneyed";
|
||||
version = "3.0";
|
||||
pyproject = true;
|
||||
|
||||
src = fetchFromGitHub {
|
||||
owner = "py-moneyed";
|
||||
repo = "py-moneyed";
|
||||
rev = "v${version}";
|
||||
hash = "sha256-k0ZbLwog6TYxKDLZV7eH1Br8buMPfpOkgp+pMN/qdB8=";
|
||||
};
|
||||
|
||||
build-system = [
|
||||
setuptools
|
||||
wheel
|
||||
];
|
||||
|
||||
dependencies = [
|
||||
babel
|
||||
typing-extensions
|
||||
];
|
||||
|
||||
pythonImportsCheck = [ "moneyed" ];
|
||||
|
||||
meta = {
|
||||
description = "Provides Currency and Money classes for use in your Python code";
|
||||
homepage = "http://github.com/py-moneyed/py-moneyed";
|
||||
changelog = "https://github.com/py-moneyed/py-moneyed/blob/${src.rev}/CHANGES.rst";
|
||||
license = lib.licenses.bsd3;
|
||||
maintainers = with lib.maintainers; [ ];
|
||||
};
|
||||
}
|
||||
43
pkgs/python/sentry-sdk/default.nix
Normal file
43
pkgs/python/sentry-sdk/default.nix
Normal file
@@ -0,0 +1,43 @@
|
||||
{
|
||||
lib,
|
||||
buildPythonPackage,
|
||||
fetchFromGitHub,
|
||||
setuptools,
|
||||
wheel,
|
||||
certifi,
|
||||
urllib3,
|
||||
}:
|
||||
|
||||
buildPythonPackage rec {
|
||||
pname = "sentry-sdk";
|
||||
version = "2.26.1";
|
||||
pyproject = true;
|
||||
|
||||
src = fetchFromGitHub {
|
||||
owner = "getsentry";
|
||||
repo = "sentry-python";
|
||||
rev = version;
|
||||
hash = "sha256-Wl8yq2X9GuPcqaS93hkKXs2cDzz282Xceaai4NjbVZY=";
|
||||
fetchSubmodules = true;
|
||||
};
|
||||
|
||||
build-system = [
|
||||
setuptools
|
||||
wheel
|
||||
];
|
||||
|
||||
dependencies = [
|
||||
certifi
|
||||
urllib3
|
||||
];
|
||||
|
||||
pythonImportsCheck = [ "sentry_sdk" ];
|
||||
|
||||
meta = {
|
||||
description = "The official Python SDK for Sentry.io";
|
||||
homepage = "https://github.com/getsentry/sentry-python";
|
||||
changelog = "https://github.com/getsentry/sentry-python/blob/${src.rev}/CHANGELOG.md";
|
||||
license = lib.licenses.mit;
|
||||
maintainers = with lib.maintainers; [ ];
|
||||
};
|
||||
}
|
||||
@@ -21,12 +21,16 @@ php.buildComposerProject2 (finalAttrs: {
|
||||
runHook preInstall
|
||||
mkdir -p $out
|
||||
cp -R * $out
|
||||
|
||||
rm -rf $out/storage
|
||||
|
||||
ln -s ${dataDir}/.env $out/.env
|
||||
ln -s ${dataDir}/storage $out/storage
|
||||
ln -s ${dataDir}/public/storage $out/public/storage
|
||||
ln -s ${dataDir}/public/uploads $out/public/uploads
|
||||
runHook postInstall
|
||||
'';
|
||||
|
||||
composerStrictValidation = false;
|
||||
vendorHash = "sha256-eXm1x3E9KHWojaT2RU4inMdZqQVcWdLCKlvzhOlIZrc=";
|
||||
vendorHash = "sha256-wGfbprSDULBje1s5y3+ZiU/nCwYGDEULobZzyzGZ9bQ=";
|
||||
})
|
||||
|
||||
@@ -21,12 +21,16 @@ php.buildComposerProject2 (finalAttrs: {
|
||||
runHook preInstall
|
||||
mkdir -p $out
|
||||
cp -R * $out
|
||||
|
||||
rm -rf $out/storage
|
||||
|
||||
ln -s ${dataDir}/.env $out/.env
|
||||
ln -s ${dataDir}/storage $out/storage
|
||||
ln -s ${dataDir}/public/storage $out/public/storage
|
||||
ln -s ${dataDir}/public/uploads $out/public/uploads
|
||||
runHook postInstall
|
||||
'';
|
||||
|
||||
composerStrictValidation = false;
|
||||
vendorHash = "sha256-QV3hR3U3GwCqrCRxfkazmJwDpO1vFyMfA6YqUb4bjMI=";
|
||||
vendorHash = "sha256-b8+AKUmjQiOdV8UC9GYfJzAHFs9+FRSH91YsxKt0rDA=";
|
||||
})
|
||||
|
||||
6
sops/machines/rana/key.json
Executable file
6
sops/machines/rana/key.json
Executable file
@@ -0,0 +1,6 @@
|
||||
[
|
||||
{
|
||||
"publickey": "age14l00770djurg4uycw5988nklpeha2wxy35t5jx7x8yp2d6uv7y6s47nskp",
|
||||
"type": "age"
|
||||
}
|
||||
]
|
||||
1
sops/secrets/rana-age.key/groups/admins
Symbolic link
1
sops/secrets/rana-age.key/groups/admins
Symbolic link
@@ -0,0 +1 @@
|
||||
../../../groups/admins
|
||||
46
sops/secrets/rana-age.key/secret
Normal file
46
sops/secrets/rana-age.key/secret
Normal file
@@ -0,0 +1,46 @@
|
||||
{
|
||||
"data": "ENC[AES256_GCM,data:xkoZtvAxTFuTOtBu8Pc7X2aVgOdjFwSFHLuX92DuSLxBX3NW+YP0Qo/0y3dyVjwR/nPHj6N7LjSqHMC2aZLgcR1kYJchyjZ8ISw=,iv:CGJD7bDqMVbp1KxDswK3iizmV8vZiVcBUP5vUc7qqDA=,tag:K967EvYAzD6eOGwSQ4dTew==,type:str]",
|
||||
"sops": {
|
||||
"age": [
|
||||
{
|
||||
"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUUHhPbEROVjkwVFh6TE0r\nUW1KN1U4eTEzN0JQcUJFWjdvT2V2WnpUMlU4ClM0NWJmRzg3aVFRSFgzcllTOE1r\nV3lGVlJ5WkRMYm9xb0xoWGladlpYbVkKLS0tIFpoT0oxMG8reW1rRmdwcmp1NXpv\nb1VJZXZPZzB1dEJxWlJ5SEYwdWpObkUKqDFSxFQ9HSGWMF8K7v8K5BFAub0lbQ3Y\nNHDIy7mZjFinebrjhPzHxlzhdguoSRSDPfaKbnaIUdKY2cwvQC1zrA==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyYVBlclRXWGJqcTZuMXNJ\nREJOcEgxc1lJQ2o4TmVlbnU3NkNwMGtjc1NJCktNS0VrbTlndENSaTBtYVRYVUVL\nSFljU2F0V0YwdlFLSHJkeW9IaDRwQjgKLS0tIFRNUFMrWEw1VGhWOEwrQ05EWHQ5\nTUVDcnRpeEtqVHh0QnhyWExGUWp5c2MKs3BRqjoXwok/BRIyIKGXYNTJbE+FIvbX\n40N4B/ZM3DhsAb2+zl/iaogycDx3HvlspljaWy0emzGJYLLBWBonxg==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEViaTZla0Fy\nS3FnZjQ4ZkxuWFJuM1JnU2JrRXYzWlVRZVJ0ZHVwMHR6eTAgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpyZEtIMnNqREpuUk1rd2hWd280ZWFz\nb3c4TlUybzlOTmVOZW55Zi9ia20wCi0tLSB1NVNnbkk0V0lPNVQvcVpUQUNBdXVv\nSkRNRDh6bE1zVm5QdjhtWklhQUZJCjfd9Ce0sS3qEcF0oTfgA70StwrW6t0kyClE\nvGXH1b6caO6GuDqHlTCWtK8wXhPNmMvaHzuKIxRwcTlMjE0LsE8=\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHZDTGpUWllm\nSGFlb2R4YXVDTldQOUpFMlRhMlBqZEZ1NUJLR3oxc3VDVUkgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpkMGYzZGFNWlFpY09waFpOUE03TEdJ\nV0VEL2ZBeld5ZlZpTzZITWpDVWFzCi0tLSBSdGpPRzg5R1N1cDhxTWNldUlVOThj\nSy9Jc1BMMnRlWkN3RFlrTUZ0Rks0CvGs24pzjvolDKBG9qh0gRmzSvTHEftC98Ts\n7bKL/7kYENcsvHsRjJk7e2q85b/3NT9ft6O8cG1Poqh32Tka9gM=\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGlOQS8yQUtx\nTUtUK1V4azcybm1GZk44MTJZa2F0alRwamJtL3RwblVYUzQgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwo1YXR0SE5XcS9yNFZzZXE2dHNKZFNh\ndC9WaHZTM1I2U1gwNVpiR3U4dG9NCi0tLSB3RG95Mlp3TCtvcHVJTFdnVS9DZVov\nMmU4Sjl4U3V6K3YrYkFOUnlIaTVzCtNFHyDhSOIXGiACkxPD9jV0glmRNqtJGZvf\nphqY7zOPd5OQQNDM5QQdp/P7DDl1CT4QjUPu84TgmFKO4HX7WFI=\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNNi9WYXVHZ3V1OHJFTzZh\nK3A5aU5yRi8yR2J5aVBlRTV1NW5IREsrSEdZCjFLQUpJWjhTY0FjV24zV3R1VCtk\neldBeU9Fd1FqYnVqYU4rQlNmVUp3TVEKLS0tIFM5WkdlZVJCNWJLWmRtZGE2WVFV\nZ0kwOGthcUxrMlhrM0tseURVTThYbHcK5ouDof7sD7XlbJquDOkv4BxT2DMmok+n\nzfGnlTy0KK/eptfV0CQrGD/QVMVyZpGrecnLDNZOeI7dJT++u5cMyA==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmTktaWVYzVk4wZ1dHeGlQ\nRkUwVGZvUitPdXQ2dlpoT0xsWjNPZmNYYVdnCkdjVmZPankyQm1QU0o0WU9tei9y\nTDhkNC81SW5GMU4xSXhUTkU2c3VSeVUKLS0tIERSUithQU8zZXZyWkU4MS82OHUv\nYThTQ3VNMUIyV3c3SXZNWUpWU2hFUDgKH1/7Xup8vISgDxJlmatxuAKdjRV3fA1f\nOI+zJCtR94wJvGALufqt5zPEkTkT47Z+ZijoNp6sAxQCCAiNLKO5LA==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWQVd4cWtKSkhrN01JNzJp\nb3p5dXFxaTJ0ZGdCcmNCTEhOWVpMNm9XY0hJClMzV0dRSnlKNnc3aEpSRnQ4YUNY\nWFBBcjkwVzlEOE1XdUdrMkM1US81aWcKLS0tIDF4U3RCYTNBb1dSdnJHL2E4b0RF\nWjJSVnBReEFBWFZQRktZNkFWUEkyWEkKsepkOgBIbIxNRU1118q+pQb4U6sVUsxi\nKZHu270Xd254fSqUUZ0nfYG8tk5jzzZ9W5Rpb27gA3gGYQ5r5h4zNQ==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvSzdyMmJzam5FM0MvRjg3\neTQveHZNaTBXdzJIdklQeEZuUkRVOXNQWWlnCmYvV3pJQWZFNytMOUpFa0o0UjhT\nSWdzanBoK3lhTnpCcENvajJkdW5sa1EKLS0tIHduV0NjQzE4T1VadDcySkFFVWYv\nanNNQjdpalIvNmtGZ2N1aTlzeC9ZcFUKvSsgRyL5u5+Ly42Ua+zDIaJ6O3GOyjZf\nIH6c4edkafCk1nUc2Tr9mBWGp51MX4VV/mLxAVse25u9YztTgcDlnQ==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
}
|
||||
],
|
||||
"lastmodified": "2026-01-12T10:53:54Z",
|
||||
"mac": "ENC[AES256_GCM,data:Bl5dFPtFausLeGxCVbDuaUf8pj5K6JDUPkAqdDT8yOPYWXj88gPjDCt7AIuux9GCUJut6DrrfDs9cpIM9YwBA08EnWthBtjTWvE9qBcLfrCkGxHJ5O4Sff28AJiHq4XBZK4Y85RvjgMxeMX6c9g6taEk/B0QqG5xkvFiMuuwIRw=,iv:W+8iDE+jzCqlIYmLu4dhUsij4czfJceneNdJyRCLmso=,tag:SiyGeJqUh2BZedjmIVtjWQ==,type:str]",
|
||||
"version": "3.11.0"
|
||||
}
|
||||
}
|
||||
1
sops/secrets/rana-age.key/users/kurogeek
Symbolic link
1
sops/secrets/rana-age.key/users/kurogeek
Symbolic link
@@ -0,0 +1 @@
|
||||
../../../users/kurogeek
|
||||
1
vars/per-machine/rana/openssh/ssh.id_ed25519.pub/value
Normal file
1
vars/per-machine/rana/openssh/ssh.id_ed25519.pub/value
Normal file
@@ -0,0 +1 @@
|
||||
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJxekSBcL5byOOEs2sq91Vas7BvggjQ65O28E3mflwUs
|
||||
1
vars/per-machine/rana/openssh/ssh.id_ed25519/groups/admins
Symbolic link
1
vars/per-machine/rana/openssh/ssh.id_ed25519/groups/admins
Symbolic link
@@ -0,0 +1 @@
|
||||
../../../../../../sops/groups/admins
|
||||
1
vars/per-machine/rana/openssh/ssh.id_ed25519/machines/rana
Symbolic link
1
vars/per-machine/rana/openssh/ssh.id_ed25519/machines/rana
Symbolic link
@@ -0,0 +1 @@
|
||||
../../../../../../sops/machines/rana
|
||||
50
vars/per-machine/rana/openssh/ssh.id_ed25519/secret
Normal file
50
vars/per-machine/rana/openssh/ssh.id_ed25519/secret
Normal file
@@ -0,0 +1,50 @@
|
||||
{
|
||||
"data": "ENC[AES256_GCM,data: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,iv:Y51HhH//qu5zpfRFFnTIKnCzpYr0utKpEiGqv1cCCnw=,tag:X6FYr+k4spNzbhfcBXnAjQ==,type:str]",
|
||||
"sops": {
|
||||
"age": [
|
||||
{
|
||||
"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1dGEyRzEzYnlnVnNlOWMy\nYWtGUitzbDA4andyaEhFNGlrOW0rMWdDcldzClJwV2YzNjdUTFRXNzFsMlY4VHRR\nL2lYNlM2Uk9WT1NhTTkrbzh1cFMzOGcKLS0tIFVjWDcwQ0g0NVNKUXhHSmpKTUVW\nYUxtU0hHNmM0ak8vRDRwWGpsWFgxRE0KZYr6b3CPX6u4TF6t//YzkguOLaXxOAQd\nxkCygAnAJCITH0hHz8TyspNg7dR+J7E10Px6QC+6YjpTtmpZmbZl1Q==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age14l00770djurg4uycw5988nklpeha2wxy35t5jx7x8yp2d6uv7y6s47nskp",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaZUl6Tnh1Wm9jT0lFRVM1\nYi8wbmNNazZRY2Q1TW05ZHFRNndXaUNQT1ZrCjg2MnNGY2VrODNmb2tyVTRKVzhB\nRGpIaWNNcFc3dzl1RmM0TzhRV1JydDgKLS0tIEFGaDNDOS95VWxhS20xK2U4b0oz\nTFd0eDNkU1kwQzUwTnhzdEdXQkMvN1UKXmH5Hq2tIFfedG8PALnO+IbFjeYDBTmO\nf9aysra8Ait4TpWBNTCXbdf8KyqOQytV1spzsPBjVVTkNPwWaAwidA==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBudFh6NlY0R2hNVEpIS29u\nTTlNdkkvQkRkekFKR3FGTCtjTXdHd3ptU3pVCmxiS2F0Z05DeDZIdkgxRDdpTUZz\nMk5OZEtjdEt5ckR6MmlRYTVKQU4zUEUKLS0tIGNsVXNNbWhoUHBteXErUUVVdUdF\nczR3L2dJcFptNnd6YUd3SXdFZXpZZW8KZtn+WIHD1H4qFZFK8idcS7hFgrnqaKiE\nt7ZpN4PyDH7mqH6rkW3Mn8o9ZsfvX9gV2HmgSkj8CITRLu7HfKGrog==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHZTcTh6L2Nm\nUGNOck05Z2dibkVPUEhKYWk5aTZlSGlvTldYUmJoMXhmZ2sgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpnaUxBT1Z3ZHpTVzZKa3gwaDVvUlkr\nd1BiNW1vLytrZk54RFBHTEN1T3BNCi0tLSBHcHROSEFMOXZrcFRWNytxZGhNNm9Z\nRkxsQTdad2o3TzlzaHZuTDIvNW5BCjPnOg2RuHG5tAO/TpLjcIJ1spSujPEiQifn\nefk620zbb5nI6MAhWDX5BHNgHPCxDHJMo1mDgX63v+IXyx4DG6E=\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGcvUGd6Zjcw\nRDcyV2MrK3JoSUtKMHR2ZnUwcm9iR3QvcDNLODRzTnBXVXMgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpRdmRVZ2RtaHQzdnMrMkxLaHZyeTN4\nNTZ2OUpuNTFOeldnN0dZZ2RXZlFNCi0tLSBWZTBoTis2OCtOV2VUNzlUVnFURXEx\nU1RqQUQ0VW9MY0lEQ3FCdkVNZmtFCjwNPG3+79L13syxN+Ip9dMUN8qTOw4K7Isk\nRhlh38jv4j0jV7dGSjczBhnzh7nbskqCtqZ9mGa/vLx1fiDsBsc=\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG83a0JhZDlm\ndU1Dc3gvV2lXSDEwUDdpWkNQdmxpUXFmdEVQaTRhbmd6RW8gQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwp4SnNydWY5cWR1WlNJR3JqNnl2NGE5\nWGpNU1BUT1Axa0NNN3lqNlZrQVhRCi0tLSAwcXZjRjlKK3BFZ3FpU25nQTlRakRN\nSU84dDcrVVlmSS9Zc0VWNDE4K2F3Cvq4zmsqOwoypsjf3BO9MfjdNGxxU2tkgsPx\nuRwQHEJhT5W8x5pnSEi/CzA6bnFvlvP6mk6pxCJUERPZGVgHYAA=\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArRGwrS1RhUGpKOTJ3clU2\nc3hLbENPSnRpdnVyMjJYVm1YZ2FUazNCeFRFCjFZZmpuZnR5a2ZMdEhqSW5zcUhU\nR1lzYitNaWUxZndiZ05ZQUFBSFhGS0kKLS0tIHFOcEdnVlE5M0VXYnl0aEtiOXpT\nZURBZkFPSitHcjNnQmlQVElnbDNLK3MK4ujldBhvw2+3fKhilUJxTkASe3CyruKH\n6NKTCqG1lAf1j+4HqN51C1knOom5F0Qcc/lXWMbtgZA2N/pAjoz0XQ==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvU0hvUi9GdlcvZk9rVFNG\nblA3dmJZNnhrektydlBMeVhUZ3hZL0p3K0JNCkIyd3NhRnF1ZVlYVmFERHJsNEVI\ndm1uWEU4Y0J2dG55cmdNM3pvUTNQcEUKLS0tIDlyWXFDSzVpOXBxY3hhV3orZ3Ry\naG5FNkRhQTVBaDJ6cUdTSENPdmYwK0UKZROa124CV2j0rF4FkdJYDbzcbNFfLI0i\n3mLA6ugNwao145Cd/iFn4g1hHBJ2taWBmOLcjk9aa/NwekLclJrqQw==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtc0VHTS9rejZnbFhaNVZ1\nckFMWmZPaFRoczlEVncxQVQ5MHliTWl5T1hFCm16UU92NEczUFZZa2cyenhBZGV3\nQTVmY2d4QXRQN09jdFB1bkd4VDMyMncKLS0tIGtZQ0Q1bHMxZXhSTzJZSnRDUEpM\nWEtid1BKcmUvMW9odkRFWnVNOSt6VGMKapQACZKpzcgNTXEZSGLN1zYXi43gH928\nG9AhUv7RtCaIPmHByjFBhxemh8zdvM0jfxRllpxYwlEWWjw3ebC26w==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3WFpZR0Jlb0ZqdXJOSUxh\na0tHNGt1M1MwSWoyWEhqK3N4cXl1Z1RzOFZRCjBQMWRvQkhJMXBkNnlTeVZNU2g0\nMGk3cmt4dnJmWFZRc2Y2cU9SWEQraTAKLS0tIEhpWXRselhPZ0l2TWlNMTUyR3ZU\nam9tZEdvdFg0aUxlVlV5VGZjY1dXdmcKmim8Cq93FQPaT3I2mGQ6qX542Zowzzt3\nJ/PF2IuzlXNiO93DLP8Th7jyo1EV8/yu2ak8R+yOWPSJpArLYWrGIw==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
}
|
||||
],
|
||||
"lastmodified": "2026-01-12T10:53:54Z",
|
||||
"mac": "ENC[AES256_GCM,data:4yVGgr5CBueGSJTumk3vJ9AGTRbSLgP5PwA7xlPyg4aZB+kdqTFC6aPRvj6oJgHTgLW2GPk9Phd3ECS/eo2OwePUA41669S6WDZx+S+5XY8bFmN2CSWFGLC4RdAfTv69YxuheA9FZf2yKUuNuC4eXWFRnOB0+pjnNOWTQ+a3E6s=,iv:N6JLVDXG5yI7ufgeiFGOCV+pjn5WXyAl8naVnpBtqvQ=,tag:nKwkTLCSig6Eq6UU+ZgDLw==,type:str]",
|
||||
"version": "3.11.0"
|
||||
}
|
||||
}
|
||||
1
vars/per-machine/rana/openssh/ssh.id_ed25519/users/kurogeek
Symbolic link
1
vars/per-machine/rana/openssh/ssh.id_ed25519/users/kurogeek
Symbolic link
@@ -0,0 +1 @@
|
||||
../../../../../../sops/users/kurogeek
|
||||
1
vars/per-machine/rana/root-password/password-hash/groups/admins
Symbolic link
1
vars/per-machine/rana/root-password/password-hash/groups/admins
Symbolic link
@@ -0,0 +1 @@
|
||||
../../../../../../sops/groups/admins
|
||||
1
vars/per-machine/rana/root-password/password-hash/machines/rana
Symbolic link
1
vars/per-machine/rana/root-password/password-hash/machines/rana
Symbolic link
@@ -0,0 +1 @@
|
||||
../../../../../../sops/machines/rana
|
||||
50
vars/per-machine/rana/root-password/password-hash/secret
Normal file
50
vars/per-machine/rana/root-password/password-hash/secret
Normal file
@@ -0,0 +1,50 @@
|
||||
{
|
||||
"data": "ENC[AES256_GCM,data:i8C3sIwqpPXfoNnDt/ZKKqVMgDJNAFzvZeI+UeP2SAMQD9JbRnjzMJhDXd9Z8PNvx7g0y8M7qh/zubpfmme3fG81HZcn0gliuLqdpjPErpF5G2o2AQy52Y5IXYPAaicpsnpFzhSMnfMcZQ==,iv:BulJeE9R6EEDkrxMcHyIjnvN5CJlbYI18s7sYLSVW7c=,tag:1s/xo7ZvPgq9qmUqmTRTNw==,type:str]",
|
||||
"sops": {
|
||||
"age": [
|
||||
{
|
||||
"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhejdGaGYvNC94REUrajkv\nUjMxN25Da25lQ1o3ZHFueXBlTzBPUkVIVlRrCnp3Y3BxanRKSDNNT2NtdkNFMDZl\nSk04Y3VwM3hUZXBBT0ZzQ2hwTUlxNEkKLS0tIEExVU9xREU5d1FQd3ovdFAzNDlV\na0VlVmhILzN2bTlIeFpGa3B4RWhWbjAK2hnF26x18ETtSlP3u0AaEZZ+BH/iVQ/o\nnwpa/cxOeYsdXb/2oBBXLMtrHnuEX8bPfAks1EvUm4ekN2tTpGpJ+Q==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age14l00770djurg4uycw5988nklpeha2wxy35t5jx7x8yp2d6uv7y6s47nskp",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpNHVPUW5JcDErNHpZK09q\nZDQzTWdjZWhBWjY0WXpkWnJlL0NlYzVYb2pnClZ2Um1qQzhwUFcxcHIzeFB1am5p\nNWpjdUVueERSV1VjRFFBQk93TEJHNDgKLS0tIDIyS2hWM3BjNmtkNmRxQXdieVZq\nam9xV1BzdjU4YXdVaDVNR3R1dmpDdGcKTWuulM9VO868v3r9iumbjjxM2TMJPERw\n3tnjbAmO0Rwg45HZD/xd7atiHCZvzxNH4Z/TBV92PAnHg9fZXeh6Rg==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlUDlDSEQxZjJGbFBDTVZj\nYkZXajQ0L1R2MGJSbXhkY1N1a2ZJUjhnK0hrCk9HU0llRmxhN3JvUVB3MGNTZG1S\nRUZmOWR4S2EwOS9Vdm01cm1xYm9YQWsKLS0tIHAxY2VuZG9QMEhQYUxLa296VGw3\nVzZ4aDRmcGQ3MmpjellOK2tOWmQ4TzAKyvDTMDjyjeA2Emdv4wo5RJsx9l/J2iDD\nfu6gm+FD0BXga8G8pAgSClUJY/BP7PGMx43r3Jm+hPJQH2UTAcLy8w==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHdZcUJTeFEv\nd1ByTnJvbW40b1YrR21MNHI5OVpncXh4d1BWaHo5Ymc4QzggQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpadTA1eDJUN0FOUXZVTEx0UGREQVpW\nVUN5RldWb0hQdktQU3hveVc3ei84Ci0tLSBXVUJvRHM1UXZYK2tNbllOQXcyNGtz\nL2wxUGJuOElKbmpTdnp1RXgyaGlJCoubZA2ZvTe35fyE9/AxNtoX+Tf9USaodHHl\n5Syjjm0kLMSQmutB5/zpfzKBTn/Y2cNqBjf6bRODzm3LKXP51F4=\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDNZLzdJSFZ6\nUGo1Z3VVaWxORjhJRHBVak4ydS9BNE9xTTZVQnV5SlhpMlEgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwplZWppMlJYTC9TSDdwTmE2bDdtdTV4\nZDM0WFo1bmZqSlBIOEw0OWwveFJFCi0tLSA1VDBRQ3MyNDdJRWNhUFc5RTM1Q0d6\nNEViYzlNTGVqZHFxOFFneG9WNDVJChqQvH/C16Fs/St/H6Td/zdNMydMoi6Zxx3q\nUX3FNV1O3OS1L85+WM1hzVoxGM1Fiap+2Bn3YV4HUnM8m4iyrUI=\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIG9qaVBNUy9W\nUHBEaW5EYW5wMnBYMXd5S0RlLzJVemdZdnpvL2VveEwzU1UgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwplSU9rMUNhUlpLUGNiS0VFdklOR1l2\nRUZJWUxGb3VRN3BOZVRtZzFGeXZZCi0tLSB3dUs1YVc3NEp5cU5WZVpBYk1QL0g5\nMWZrYUN6Z3lBcU5EWmw2eklYMXNvCqi2vKIzq4Rqe/B/fb0KdFFi1VyhTOfAwZ5j\nxeEgcCo3cXK/x5QB6SWS03rJ4JurizhEyyupU7H4PvmXotJVcxQ=\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1dHc1dDJkUklBb3VWY3BJ\nN3hSZnBOYnlhTXNPSC8vWEtTR1B2azV6NDFvCnpIbmV3bXpwTFRrNFg5SW9nZ0tV\nK1dDaWNvemJwbDRJWlJlTTZET0hqbHcKLS0tIHlmdkVYdkNScEFQOVNSbnU0TW5U\nVE54U2lqSXdCSkpQeEh2VmppRjR1cncK7JrYpimS2/93ueWyTvH9HdIXuAabOby3\ntq7V3PeAYJnxzqeNtQa5rASnpGOTYO84ETC8EF3InZg9rI2gkl33qg==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGby9VWDAzNkVHV3pRK0NB\nU1h4VUxwVlVkdGtWYXpzVXAwT0hMaEd1QVJrCnUwOVlCM3A5ek1sM09VTWJiSkFp\nK3IzenhzekFGYzRTRjdtb3k3a1BTcmsKLS0tIFRkVS81bGNhTEJDME5LWlhSUHJZ\nWEV2aTRYT0J3dm9BNnB4NitUZTI5dm8KvmlWtCHAfoOQvQa6PAy2FvX7ZkWauCqq\nyjDxZuyMK33ZvhwVt8MtwwJUeGpHJ6gFjrcUvavlmv77KQAv+RZy5Q==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvRFNweG5tWjBVc2ovTjN3\nSmdSbXBhMGUwbGVVQ1U4bUo3MEw0MVhyblZnCjQyN09TcmJIM25qMnNrbFBkMkJ2\naFhhNzZnN1BLWUFLT3VyaTFVYUU5Z28KLS0tIFNUSDZXUjVkaSt5QWEzMWxHdkky\nU2VGZ0tHUENsQkhUekpib2hGdkNZakUKsv/+PApCsND8s8NNz7onON6zBxUqd6WF\nrNypiNkN1Ww8mw4vvmN7fRHxU2wXUQwU141ycne5/3Ao25HQF/wicA==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZNXNVT3ZiSHg3NGFBZWNF\naVdPTmhwU2hPcTZCcnBrM0xMcmo3SUhsZmc4CkhJMmdMZGFVZUpkNnA1WWtSQ3Vv\nbkUzQTJaSEFFNVlIcVFHK1dxVnBnQ0kKLS0tIDlvbjI5YlJDU3pReFE4Rlg5bklY\nWlkrZ1pqRjRaaVhhUGx3aEczYVFPSXcKZOULJ7oKQNj7nTVv6VRt7o9MofDG7TbN\nFV0S4raYatjNgPBMx4JCaer10PzbC/6IQBl0PZcK1/o+Hkug2deQKA==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
}
|
||||
],
|
||||
"lastmodified": "2026-01-12T10:53:55Z",
|
||||
"mac": "ENC[AES256_GCM,data:LdJISLehuhnxYXc+xQszdx+xSoQK1zH7+Db5Y4M222Fac8jcEdykYzgPzCqzEvpDmT4zdDnoPnpHE2uk5MSLFr7g9++jeWRADCrvR42uOfWLoqBhKOxsaD7lbMw9sc+jQvk++gcnmucapNMPmxUQiMhGkjOPtGUNUYXmYo7poKI=,iv:+KRLeF69msX9k8koVAI69G6HytWqfzIUqo6XRN6UYGA=,tag:WH2P5CkZD9pVC5O+vztYQg==,type:str]",
|
||||
"version": "3.11.0"
|
||||
}
|
||||
}
|
||||
1
vars/per-machine/rana/root-password/password-hash/users/kurogeek
Symbolic link
1
vars/per-machine/rana/root-password/password-hash/users/kurogeek
Symbolic link
@@ -0,0 +1 @@
|
||||
../../../../../../sops/users/kurogeek
|
||||
1
vars/per-machine/rana/root-password/password/groups/admins
Symbolic link
1
vars/per-machine/rana/root-password/password/groups/admins
Symbolic link
@@ -0,0 +1 @@
|
||||
../../../../../../sops/groups/admins
|
||||
46
vars/per-machine/rana/root-password/password/secret
Normal file
46
vars/per-machine/rana/root-password/password/secret
Normal file
@@ -0,0 +1,46 @@
|
||||
{
|
||||
"data": "ENC[AES256_GCM,data:hhcuc36SLu09Zl/orPiHrAfz47WqRE9NU+VVh7o6b+03nMrt,iv:ggDVEut8nHXRcL2FID+RQGUsqM7u9Kcp4R0DgZ/Vdyg=,tag:x9qf7SCtoZgQjH2Xt/xVmw==,type:str]",
|
||||
"sops": {
|
||||
"age": [
|
||||
{
|
||||
"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHdm9obzJpK3YyeEhPZ01E\neDdWT0NkUFBjOFI5alMxY09XemMxWWFaZWpNCkF2YURuUnVTd2NoSW9hMHZJNzlM\nY01vSDZObjBXSVJCak9RNlR0b2x2blUKLS0tIEtDREcrdHpLNzNxbU9kVU04Z0dR\nZDhRbHBjVFg1cm9FTkpSb2R6L3VWc0UK8pNs1SgBGlKr3VOSmt4h8s4JkO/FRD64\nl7+HiCCl06B+ACBEZh7y6B1NMA6kD5em9plzzb8l2KbsVD60sany/Q==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmRCtxdlJWUTlwV05zbXl1\nYit4QzA0djVpeDJIbXd6SnpCVCtKUStqVGdFCnlxWjZ6aU0vNnhoOTJOMHZLVG1C\nVEhDZ3dyUmZwQm53NGdtYmZiZ1BIR1UKLS0tIExuRS84a3JuR2l3ZWE1SEIyMXhZ\nUWwyUENzM0VRQlhmK2VVT0UyY212emcKg1nBSq6I0XVf/qNmNLRsKKgEpz5Z1KkS\nSORG00uh7EXcnVdFPmLf3DEsPUnoNfXoHDgXOBEOP8kRwUEciazTBQ==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDE0cksvdjhl\nbGo1Q25kRmNjaXhXMFNGNFNLc2Z0T1dWZlc5enNZTkNlMlkgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpyOEVZTUxUajNpeCtqcEpyc1ZZRWxj\nSW41c0dZTWFYODJDQVpGZlVnaXlnCi0tLSBiUlZNemhRMlExazlQREFYOGsxQ2c2\nam93cVl5akRSSHlJZ2JGa1Bmc1FNCqPKgV0nM9IUgpKa2wWrZyn7Z56QrNrT4L+8\nHqPToWF24itWig7ohHckoc+KlHMCLn6DHWbON8zS5uwH05j9lLM=\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGNpdGN0MUg0\nSi81RFlXOStRM3UyM1YwMDNPZ2h6U0gzc1N1M3J2NWVTM0EgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwoxRkNvYi94aS9QN1pzMVhSTituQTlK\neEFrZXdkMGZ4d0xDVmFOUyt2Zkk0Ci0tLSBLWVJlMFhKM1V6YW9DSEQrNjF3QU1K\ncSt4VDFUOFh2RlpmN2llTEhHVHdrCqam34rliA2MYqnsuOiCE2Qf6G0XDYV8+Y4g\nC7MZzhdr+DJ5L8EuovI8/mAkmwhMQO1DRsu32w+thCsfo9YASmU=\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGdNQzBrQkNr\nR3phTGZkTGg1V3EzTjhzOVNpSENuRGxOcGFjQVE5TDdpU00gQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpscmlUU005OU9FZHI5Q1VoREJvU05y\nTFJ3MFRGUDF2QzRCbFFFeUdzTnVrCi0tLSB5NDVQQzM4RnliSXdHRC9KS2hiYUV1\nbHE4aHozUTlNWi9reFM1NWN4bm9vCjP9hdbQLRnHOcTWbF/epfLuxf4P5lS5mEL+\nGDO9vOZzgdDVlrvuMGA2d38TOBW1mpR7fosz7N5YYE3gHmcj6hY=\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3Zm1HR3VKenlyTTdtVnlL\nSW16NExJRG8zd0Uxc3VlN1NBeEplMUFpTGwwCnpCOCtSQUpmVnZocmpQYlNEd0tV\nelNUM3NXL0NyaXI2WG5hQVBOQ0duZlkKLS0tIFZhNlhCKzVlTC92UzJRN2JodlZV\naTZCUmNrQUhmaWJDNm5sQkhvcGtMU1UK3zBLa5XmFPImosmxB+wjT+xoibQn2cO9\ntmposaSKgnkyvMO7z8tZHqADG3Uw+BQYwOJMTHOEw5Ers0edP9cBHw==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMaVlsSlRKZ3ZyQ0hDVllC\nVWFtcENqRUttSTZYQSt2UjA0RUJPTUhJWGhJClBoZUVPSSt0SlFRazY5YWxiZG5Y\nWGdkZ0RwME8xbFNUcUpmQnVrN0RnVVEKLS0tIGxKRkYxbGJCSU1KVzJPemhqTUUr\ncm05S084ckxaRkRKVjlQVHp4NktpZTAKjUCtoHgdtcFuKK++Rc11065nghUMVCJc\n6hnsIo/oJ1fUHE+IfXpjOQ4eazSh0ggLwPYnRCUiqV0OvXAIgwzMTg==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLa2thS1loc3Azd0RISjRB\nQ1Q3MFM4UnN0WisxaU4rOHJzcHVFMFFqSEZrCnpYTUltb29yOThUNXRodkpwZVQx\nb0FncERWTVhtZGM0NUVKR1d4U1RVMFkKLS0tIG5FSnZOL1pGYmZ0a0NWN01HRmR6\nbFdHUklrSjJnRWw3TFdRdHM2N1lQZjAKEN0qllgzMDcqrJd/oDL4f6pxFnKYTQ8r\nrz1Aa+wF9nasW7bkgv7NCxAn9yVldmKOc16cDDoqKfwnpmnugxgiEw==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMMGVZUklDRC9jSlpwZXZ6\nQWVoaXVnSGhVY3EzQ0xjVXF2eDhLYllKSlRNCllXbTdqRk94R2k5UFllODZ6RG10\nMDVCRGp2WVhxVjA5UWZWVE10YTJiLzQKLS0tIDk0QkoxR2l0clgyemo2ZlZ1WmtU\nMGoxTW5kbFdic2dhRmZ0MDFBd0RIQ0UKJtDsYSmRizimNjNDuUJlTmqEM4rIKjIQ\nVz9n54qNYMuk2lIqeDdxbWVoeSC7AS+hEeiQRn0TK6Uy8sewM+l6QA==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
}
|
||||
],
|
||||
"lastmodified": "2026-01-12T10:53:54Z",
|
||||
"mac": "ENC[AES256_GCM,data:oxUamNJ+iLQXKEHpBivMdpuWkKi+L9CsR+hhJDVdbHLsGuDtJrJB8wmItoB7CusgQJCtOnRBCcK79PXFlOOhlXIjm98XdfJgl0em1hQS0mGwxudo3dJ//AZI7thKE3/Ys3+OuFqXDZHgUPcuZVLCLMuiKVBIftyLrVtCaMQsPIE=,iv:nQxcOgWVsbvnbTegZy+pv3pIN4+dQdJYd59n7FFRAdg=,tag:MlF5nfs5EpFAvTPER+Y7aA==,type:str]",
|
||||
"version": "3.11.0"
|
||||
}
|
||||
}
|
||||
1
vars/per-machine/rana/root-password/password/users/kurogeek
Symbolic link
1
vars/per-machine/rana/root-password/password/users/kurogeek
Symbolic link
@@ -0,0 +1 @@
|
||||
../../../../../../sops/users/kurogeek
|
||||
1
vars/per-machine/rana/state-version/version/value
Normal file
1
vars/per-machine/rana/state-version/version/value
Normal file
@@ -0,0 +1 @@
|
||||
25.11
|
||||
1
vars/per-machine/rana/tor_tor/hostname/groups/admins
Symbolic link
1
vars/per-machine/rana/tor_tor/hostname/groups/admins
Symbolic link
@@ -0,0 +1 @@
|
||||
../../../../../../sops/groups/admins
|
||||
1
vars/per-machine/rana/tor_tor/hostname/machines/rana
Symbolic link
1
vars/per-machine/rana/tor_tor/hostname/machines/rana
Symbolic link
@@ -0,0 +1 @@
|
||||
../../../../../../sops/machines/rana
|
||||
50
vars/per-machine/rana/tor_tor/hostname/secret
Normal file
50
vars/per-machine/rana/tor_tor/hostname/secret
Normal file
@@ -0,0 +1,50 @@
|
||||
{
|
||||
"data": "ENC[AES256_GCM,data:TzVLzHDkqdn0WGLJAksBmvz+ZeiYIodD3gBb+NI7O7yvWdRQwFQZ+nG/xa3cni2JpBWqdb+VNuHl+C3pluCV,iv:lY00qkX42DceadABPdVGh/vns9f39MMvTzRRjG+YpnI=,tag:aoC+9425KQ0qWt3trqQP0g==,type:str]",
|
||||
"sops": {
|
||||
"age": [
|
||||
{
|
||||
"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6YTlDV25qQ1J0MXRvNU5I\nSC9RenRXTGZwVVRDc2JoTjFKU2x4Q2xpekRVClNiTkEwNkhKalFKUlNYRllneUh3\nMysxSENGN081N3E2NmZZRUpGRDFJMm8KLS0tIEtxSzdqTW9WcFNvcVpPWURYZFVD\nMmVwNWU4ZVF5RlJrKzVGQ3RhaHZkYWsKZISNjCQm+6NETaJmc/yMer53WZdA0Wv4\nPR2fi7Acw150TOjdcpDq/FbtC581ZXu5HU7RmyKSrW5EcnEjkgFsuw==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age14l00770djurg4uycw5988nklpeha2wxy35t5jx7x8yp2d6uv7y6s47nskp",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBya05pN2VYUlNMOVRLRFhT\nY2NhNnpabDdZZ0RvN00vR1ZPKzlNUlFYK3pNCnM3dXB0TGl2aGFEckM0OUUrTHpG\nMDZkREJsUTdWVU1zRE1UWXZvOEo1WkEKLS0tIFh3cTJMT1lRMWp0Njk1aFVOS2g3\nUDNQZXNtZ3hGSXJQb1pNeWtvM0R0bFEKq9kSfkcRyDxaxE6PAr3jD0z3BpejytzV\nWV9ACZGllQhuLc4y4Kr0eTbVk6r3WPh1/Bmke8/94dawNuCk/k+gVA==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjZWZrMVZaQmJDRnNDcWFr\nUFZrUW9ZRnBra0w3SnlzVGNqbmZrNTBxTWdrCnNJYVZDWjRLbEpZRkQzSytGMWRN\nbVNOU1JDZW9jTzVjemtUOVJVbmN5eWMKLS0tIE0yT1UrN2J5TnFQeStVTEVSK3lQ\nSXNkWFp2djhNTUpCQTBUZXJaWll5SkkK3eGMiLFDKWkGX5FVcGDEvI+8fgOO/x51\nafw5F7V3uR+ebJhxtyjua46HdPGaEhNDolZCR4WokdIqtsHhBWQMjw==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDdlRmxDaW11\nejRzQVdtc0dSN3BEaVcxdnFNbWlpMUt3b3hDVU1IMStTbkEgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpZWVFjUGkxZ3Z2RGRlOUNtQW1BZGZn\ncFRBcklhYXRFQmdpSERnWnBISG93Ci0tLSByZnQ2My9PY2g3Z2Z3cEVEQWFKWFpa\nQlJ2MGV1amhZWGJyWnl6cFIzK3VnCmEnVWZ+XV4NJKh+7u7fD5yjqcendqYkQYIj\nlsOMusnNKEuKf3042WgG8a+s4V2/QELkXmxqIKebFeGB9pZuNUg=\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDFrTjZrQWNz\neXcxMVB1ODA1d0kwblVBY2RqT0M0cUw2UklPL2FFeXh4UmcgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwoyZ3NoTW5EWVpSZFo0dlUwcnZheWJE\nb1czUU9GdzJiV1JiTVQ3S2tnaTBJCi0tLSBiYytybDVaSFdTNGs4Lzg0Slp4b0lF\nM3QzZ3ZBdGVESFM3WUtqNW9LQUk4Cu8sY4GX1SSJfSql8Ewa3ZQFWBYI9+JFxJmc\nT61ZmHZCe+zhILeiDQgSbvpVMUV+tvJS5adknFCMnzUb2AvbWlY=\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIE1ZUmJRWEJW\ndWFoc2x1bjU3OHhBZ3hBc2dvOVVFNGdwM2REM3hBelV5VUkgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpjc3FlRU9LeU5CcTVLUjVGS1o4QzE4\nbDI3SytLUDUzaDVYQURNVjRoWklFCi0tLSA2NFM2MWkySGkxRTZ6Q0R6VWoyclZK\nT25WdnlyMmVjc2pBQVNkeVdtb1BZCpelSmgjukzHMWtb8KH6xr5IcnMFbLqcda2E\nG32pKZ4Y9ibXJfqa3WL5mbm/O/TVJ0nOsag/DjXUVm3H6CVzgDg=\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEWFo4Mm1SbzdveW9DQ3Bn\nNkEvMXp5UDhjc0ozQWhYa0JOWG90a3AxUUFRCjY0QmRRU3Nwa1BUTldHVWd2RHYw\nNUwxenQ4STNVU3RqeEdQWUh0enVUKzQKLS0tIHh0MWYvS1dPczBLZFgvUkdhcmNa\nbEN3MGN3VnhReG1pVXVwelhZSTBMUDgK3NkdjDiLJwsxK72Vy21pP77B6FaVw3UV\nTBhg/mlHZfzj4tmjtJ0YMRbzVdLJBdnpUmxx89MPLBs9psXX/c2DDQ==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVTE1xQTFpcExZaGZPVDdm\nT1ZlZktWRGtNUUk5VTd5MlFFNGF0N3poRDAwCmEzZ1pFTzY5bHltakovOG5CVENN\nb1hGN09pbGgyNG12bWpWSVJlMFRBaUkKLS0tIENScHhCTWVjQUxWZXI3OU5tV3F0\nTmIwQjMyRE5aNVppMzAzdDBOUG9jQmMK2E+3mhX1n4Lyp1c9TK7DjuggBUZxCBqd\nbRQXHz+APekrqM1fz1WaxcFxdUFuOFm6vXq46BxWnV2inUc2TqzUPw==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyMUN6a1FPME1QMGpYWWk1\nTVhDdUlBK1lZdDc4NjhFcjduak5xMk83Tnh3CjM3MURuN2ZHbURCWTc5Q1MzeU4w\nSUxwL0RZNTBpQjU1RTJmZmNRaFB6QlUKLS0tIE1zVXVVZ3VZcC9LTlJyZko2Sm4z\nakhZd0wvdDR3SWJyeGViam1rTnU4dFUKyCPFRNUaY/xaSet4UMVuiDxcxaZlFPa0\nnmZBb7RrijB2Huhq9wktGBYUF0k7Lc4q7ZL8VwMRsuc4SfjCWqLwMw==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmbmNVYXhlbE5pUktMVXEv\nYlpaVTNHYTJkTy9LNjJBbzdXNmkrZE9Bb2o0CjBhQW84Rlh1WjBFVDVaSUVLZndS\nRlJHRldxWTNQODcyS0ZiQ25ickd5aEkKLS0tIGQxQ3l4TTFRQzk3M1FGSXE1RXBv\nUWJTc2huVXh3ellUc0FtZFh4RG95WXcKZi8hCJ/T+gQHSVJiVBltVgTvq5i/JOql\nKPyA7C2T2jTabi0RFFeux+FnbOfjc9gATZ6nEbpuh1RBYTjCSt1KyQ==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
}
|
||||
],
|
||||
"lastmodified": "2026-01-12T10:53:57Z",
|
||||
"mac": "ENC[AES256_GCM,data:HKSbSEeuew8iKJaJJA9SPmBD2JITc9j/JVsNl+EnHLIT+ccIT7/s5eMe6YXBS4DTxDV7WyKy7tP2ynWaiIo4RmUEkvi3TwY1kCfJ+VjpY3pheVFsJ2J0bjkPW3t8eFiMuTS8mUQlipkQjVtzeNn+WtW+pBmDS1tXwwUhwAP2XjE=,iv:JTSwcTrQAQIyM1EN7rXefAbGjkOhlSCRQ9L3WvDQDC0=,tag:BAo+jREHjKLrGoJrU1GS4g==,type:str]",
|
||||
"version": "3.11.0"
|
||||
}
|
||||
}
|
||||
1
vars/per-machine/rana/tor_tor/hostname/users/kurogeek
Symbolic link
1
vars/per-machine/rana/tor_tor/hostname/users/kurogeek
Symbolic link
@@ -0,0 +1 @@
|
||||
../../../../../../sops/users/kurogeek
|
||||
@@ -0,0 +1 @@
|
||||
../../../../../../sops/groups/admins
|
||||
@@ -0,0 +1 @@
|
||||
../../../../../../sops/machines/rana
|
||||
50
vars/per-machine/rana/tor_tor/hs_ed25519_secret_key/secret
Normal file
50
vars/per-machine/rana/tor_tor/hs_ed25519_secret_key/secret
Normal file
@@ -0,0 +1,50 @@
|
||||
{
|
||||
"data": "ENC[AES256_GCM,data:57R0rt4GIDxJYQqtAJODglyySiAtRh8UMuSSvmhb9kP91jmHGAAOGpEvfZMUDnTX2l/lWuHJE0rF0QhL4XX9ANJarRXyivte6fJ4KGB9ThhJQOh9/q9hc1nuaa4MFpn1,iv:YaqEBVVLTo/7Fwnj4mJYR7EUbaPN+gvO+iCJRN0w9xU=,tag:EcLuLdIpL8g51PWghGZFhA==,type:str]",
|
||||
"sops": {
|
||||
"age": [
|
||||
{
|
||||
"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzek1qTmlGeDNHN21HK3U0\nZ1djQVBJUVZ5RUVYVE43cU5VZ0wzSU01eUNnCnNrd3ZMTWtsZnRNYzFyVWVGYm15\nbjlUYmNqZzI2TGU5L210Vkd4V2ErazQKLS0tIDh0UWc0bkpKNlFXaWJ1Ni9HT05L\nZHAxcDl2TTlvOTZQL1BTTHZxK0dXMjQKKhXcdE0g67jSY0Zb3WLx4cdVxI4+1Pcu\nHbanf/yzPfjwpAqAy8Xo1TVUzuy6CmgSx6vW5Ww0/YbbXoP3zQ812g==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age14l00770djurg4uycw5988nklpeha2wxy35t5jx7x8yp2d6uv7y6s47nskp",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3RWhDbXRRdnFoMk8xRWVn\nYWI0Qy9wSHNoaHdHdXFIQ3VTeGE1UWI4Ums4Cm90ait1VEhiOFZmeGRZTUVXZUxq\nOWhjOUdVdVVhU2dBbEdESnZjSGlhdEUKLS0tIGV4S3ZXLyszblErVExQTmxFNmdl\nRmtNSGxma1BOOUpoTmJpenBrOE5GR0kKCO5wjXfFjRltMU4xFcZhh6V+dB4/vo+e\nl7Zsws7JfxI7bFCdXBhaDiU9NzMbv2zYK50E0+PyjFTBisqKaF87XQ==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwV2xxT0lWRkZCWDFnekM5\nZ201RUtieUs0bGhTMnJXUnRPbVNPdXV4V0drCkYxM2hZOGNFVitkd2did1dZNUNl\nZzkxR1dFVkFYVUNRamFNYVFBOFU0ZFEKLS0tIEdtS3hWeHh1MjR0bTFyVFhmZmho\nb2IxY2gwbHR2RXFodFZGTUxwS05JWTgK1vftYCAKRpsw8y99NOwNOHpD5YD2LgHC\nPTVSiJXwtEGmccAK3JtdKIvBY4Pj9izo/FDymRKhmsOMS02sF6IJuQ==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFI5c1dzWFFl\nSk1MdERsaG83NUtzTVVJK2RjOWRGM1NUUldSWE1PMEdsVDQgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpQeWh4T2JLdkZxZ21NWkZLcnNTeHpI\nSkpITkI2Q0JWR2dHY1psVWtCSE1ZCi0tLSB5VXlKYWRoSDlmOE5JZEx2QlJ6dzRo\ncm93SkNxMWQxaGJHcCtQbFRWZ1RrCnMTWbuWZl2CER0eVHtMNxMTnwpUqkDDB6km\nvL+ojGoyWtByvTZJJ8YcVs0mBL5QybFV7LUHmTvDyaQtj6AHs1g=\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGhhZGt4Y0dM\nLzNBVkRWK2dMNTErVW5WZW9OaXNLUFUvRVludFlINnhEMGcgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpNUnZFWWFrZnhyYnc5YXVINXd0UmxG\nTWxidENCUHE0QzBrWkQzWlViWWxvCi0tLSB0ekRsTEJrbzZxdHpMTERSUGtGbDEy\nY3VrN2RwZWY4cVBEdVZNdytXSEt3Cqb4HstAzCG+qTAu7odfLuk/3DeSr7fQ+nbb\nUDyIopz6KhJ7Q2JP0TxA5odkioA5nDXGV2adKUbQMOlBvWx6UU8=\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFdqKzJsOG5o\nRzRFWndlSkhOVDdqWUVXVUpEY2VjNGFnR0pEQlVkdHpTR1UgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpZNmxkbW9HSHJBWHpuVGNPU0V6czRj\ncVRwMjVXQ1U0OUNiK0w2c2FmZVRRCi0tLSAvaXExNm9oL1dDaGZ2SWswN3N1RUdO\naFprU1ZscWMyK2hBOXdvS0tUT3FRCli/j9d/Qvu4EkQBaHnHgPWfglrfEKInuyef\n2zpR4NX2DeAUtfDymaGdsBbtzdZsRQRc0a8rK21ngfbfewDb7QQ=\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0ZmtXY3pJWHM2SFJueWkv\nSjNoRlJuc1I2V0I4d0Zrc3FVYWxJQzkzSFVjCnRWaVJqSGNFYWlyRGR4T09BNGt4\naHlRVXBhUm50c05QVlJDTWRyZlhVU3cKLS0tIENRaW9ucklkcWhiYkozdWRZWTlS\nbGI0UHREaGxnWWs1bFh5WTM2VVdvMlEK/bTMmQWeHBzQm5fSKR3/+GLpDDQT2orZ\nuLwhKcOi05/5im0jMij7WrfpWkbQ4eHgjsScUTeRRv1CRxzvBrUp8A==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1cG10RklUckVOajRhbW1J\nVkJmeGY3ckhGZzYrWHBpQkNZdDRiK0M5cTBjCmhrZkFPbmFJZ3ZCUWNwMGhGWitj\nU1Z5cFNuL2hheGhvSFU4MzNsbVN2a0EKLS0tIHJ4SFBFNXIwaFBOeVlmUGMxS1Fv\nQWErc0lmRnRrdk1LdVBqUkRtTk5SdUEKBr09MFwPJm7Hwi2jUCNyXH9c/ps67J2O\nHsNbQRzYSa7hxW9dC7h6XDSP3ys0VVHqcKxV5uul8M+OtHx7v9wncw==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJN0FNd0R3N0xCdCtjTHN5\nMEd5S2FSR3VUUXZNNk5aTmorZkNxWkszYkFJCnlnZWdXSnRDamt4czFxUXpackUz\ncnM3UkgzOEVGQWw3NGQxVEMrVm5vdG8KLS0tIHExeWNTOGU0VlBnb1lVaHVXOUJ2\nV2FLMHhxOEFraWFSVEVWcitiOHF1L0UKWHs5mUD8sNHxHohmkzwCwaSGsAXnbE7J\n+zFy8PZBYPs/b5jIK7RBYM1rQMnu3Mko/2n11pN9iYpwPe8hZn6ADQ==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkcXZ6U1JMZXc0bnl1aENE\naDAxUHdyTURRTkZvdGJmMExkV0gzZEJyM0RrCkRNd2JXRVZoamdwa2RJTUdNOEtn\ndzN1WHFmS1hzUitLT2tuOVQ2Y3RFMk0KLS0tIE9iTFYxSXpiNGJ4SmNiMFh2QnRN\nYWJxNitYSk1kZDNxSjYrM0JYU0JSa00K+R8551LeE26QHmYuCTse8d5kUVXiUuMK\nRhDysOpiiio0j3OS+DdhCqgiJLzjfCRTL9kR+Kao3SX9zub4WSCgGQ==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
}
|
||||
],
|
||||
"lastmodified": "2026-01-12T10:53:57Z",
|
||||
"mac": "ENC[AES256_GCM,data:rzOB9Younj9bapsIldRyytaiaXGsL2enpDSt6UkTPZS8b5mEh86Gx4pnrN0PXwrSdBidC1/nRsxH/PaDjV2ByCwu0UblETWUW57sLSMs3w8IHalpUU+HWHx/DBoFgpuV+vAZl4Dk8Q0k8oPxWKnqvOlY2DmL18V3lJGugz1CmCI=,iv:zWvCmYaDQzaC0TOXYNc9tVkACXTL0EEQAiUdJ7iRR2I=,tag:cEdRJHA3697r/YnLggNpmg==,type:str]",
|
||||
"version": "3.11.0"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1 @@
|
||||
../../../../../../sops/users/kurogeek
|
||||
@@ -0,0 +1 @@
|
||||
../../../../../../sops/groups/admins
|
||||
@@ -0,0 +1 @@
|
||||
../../../../../../sops/machines/rana
|
||||
@@ -0,0 +1,50 @@
|
||||
{
|
||||
"data": "ENC[AES256_GCM,data:yUOVTbLI7vWM1K4pnC+bqK3K0TBj/nC/v9bh/QUBnoIaHrC8YtiVpEYqUOohkxc8DghoYHNcDrR26Qulr3SI85+t9krBJ6B2JkxTNBNKL0cpttE49OH+/maWPRw7Lf8YznX9sBFAd6p7bRYDaIBu0HP9R3exsqYwmd+FnyaKhSssdji+PCAydeQBSbLhTHYSAGKJtNw9UrfM3igzImemvBZXV8qa57nf3Qi67a/d6gbdjaV6fwVPuI0z6pUd45T+kXI7hOChASyNxTQEbQavzM58MuPpIToy68Peu4efiiBMrUmYgaTXQw8Av6+C+1dGgZqyXKxHEeYR8YuWWCCCJpJBWb4K2dVIBZDGQJeq,iv:+PASIqOP9Kl9nCjqzafM7FMlrdWuAM02ouiUPU5/sog=,tag:mpgdImbYgzia9io/vkWonQ==,type:str]",
|
||||
"sops": {
|
||||
"age": [
|
||||
{
|
||||
"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjam5Ia0J3Yjl1bGNyUUhx\nZFplK3JPb3ZaMEZqd3JsTlRhNXVUZktCTTNzCndoL2U4Q1BJem0reWZRNElwTGp4\nQ2d6eWk4eHZEN01nMUFqR3ZxRFhlOFkKLS0tIEVkUUNmQXBsVWFJWEJWc01UUHhL\nWWlGYmY4VTlKbm1jWG4rSWoxbU02ZWMKa2m8hH3nxWb1oiV+Ts2KJgtEBAAMv5gk\nN+2vFxndrfseu28kTKKMiAh56P0pfdiF/GS0WIdP4tigTby4FgE21Q==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age14l00770djurg4uycw5988nklpeha2wxy35t5jx7x8yp2d6uv7y6s47nskp",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqdmlYdEJWOE91RWxqYTBO\nNGVzMGpjS2c4dG9SQVl2M201U1N1K01wTGxvCjQ1QVM3QlJiNGx0YTFaTHptL1hv\nc0lqMUJtNmJWbm9NVlNudFNZTUZ2R00KLS0tIGRxYzhHOWlFWExybTkrTkZORk5i\nZ1pEQ0tzblRmZ1MyZjVsbk9LZ2xmK1UKyHViPWllmDqKNoNpnyvUhJXGKOkDPO6H\nFBcLgokBal7Qb/2uRZ5LAYGZP1RleVANZYmx1dtRBmyLOGcjoA9jyw==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3SDk0YUNVZ3htQkxrM0Z2\nK2Y4dTJqY1RBRDRycldTTTBLU3FJV3BWb1c4CmczNE1WNkRyaTMva1BJZm1jMkIz\nS2ZudWRJTXJ4VlIxd0xQcHhISm9wTnMKLS0tIFpFUHE4MDdoNWx1Ty9JS01rNmtj\nSTFaaU1sdGJpV1EwQmFBelhoTGw3MncKk8fHdw1hhJ4s3/p9X6/K3RBL0o/0/Vlo\nXnWiowpLI6oR+EHKZ2wQPVIwYPqEr5RiavupNBVdJQfJwO2k1Gk+2Q==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEF1ZmhOUlhX\ncU5seXJyTzJYbzFVYjNERlZJSDcrOHA0QUc3UENTT0t5RU0gQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQowQzVOc3Z0YWlHMzZRQlU2c1VSQURH\nRDJ1ejMwbW5MUVdSOW9FR2YrR2h3Ci0tLSBxNWRaM05BQVlvR1RUbWk1TjB5YjFL\nZ3JCS1JCaGFMV0g3alJLZkNMWnBvCo+PJk9XFaKbl5qsxVBCqPt4FIOgvgMinmAE\nha9wnYuIOseXxA2f9XJ78C/4OuDlcXhLpq6N9nYHe9BaJ6DgNzw=\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFRWQXVBS2Iz\nNEVrRmxHRmc2b2llNzVvTVRxZjB5Q0h2WlgzVi9HendjaGMgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpmd2Z5T1Y4VnZnN2ZnV3lDdURPaHRs\nZk5jWmF3Nk5qNHhpcEpwN2dtZ2JnCi0tLSBNa0RvNWdOc0JqSENTV2dGY3lkTndD\ncjdKOFczVFlOYWNRSDVwem1xQ3M4Cr6kGSazPYHLFFkAkepxpZ+hlA4vuZCzTl2q\npuoaAsqxDyFrywxCQTXALRr3bZoq7URuWEZQQryPUg6KWpz32aU=\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGI0aHBlRmd0\nSEMyWmRvSkl0RFREeGw3bW1DMnQ0RWZTQ3MvUmdER3dYeWsgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpTaXNjQUxUalkrNUIwenBrZnJzR1hD\nU1VwYkduWHRCUFExOFZsTXp5Q2V3Ci0tLSBteTdwYXpvSWQ1RUVrV1drMTVOSXRS\neHh6V2NSUUpBc1U4Qy92eXZseS8wCj9ILLyLzFDZcHfaLUB6H39/FKIHNp3hF3Ov\nxre6zPI7kuSqVuxnstzmyVakBUlHSyMSWhd4RPme0w67RPr17PY=\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBneHZoNHhNb1JHdjVnS1pM\nK05GYWJ1K1RCK290TzJ4b0dMWlNSY0QzMmdJCng4VnZDcHpoUkVBeFlFZ3Eydmp3\nU0JHZStmTWppejBvOWxNOHAybHFrMkkKLS0tIHdWWkFhOVpVeTJRNVNiS2hPU3hm\nM3EzeklYMXZkQnFMK3cwNFRCSlRHaDgKK1k/C0v+u0iezcRo1JPt+2Edx0uyohXV\nKKXqG4zgksh6Cbw0si6pKawgxafjzjrYJwo96jNz1YDBfDLpAUC6xg==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtQU9IbHpXUWlOTE9NYmNW\nUFRYTUQwcnp4QTl0MDBMVFI3Y3duWkxUQ3hBCkkvVnBRV3ZQam9CUnpmTmJ1NFh6\nRi9zRHlNMHo0Y21wRHZOMW5UcDBTQ2cKLS0tIGNYMUQ4VWp3RytCaDhwbUpudElL\nU2NQWVlvZno4V29iOGliczhmLzdzYm8KNzGmyLLVO3A0H940KntObPdBGw/lZA1t\nF9bV1txctvZf+QHfbgUdFwuF4MORVjo0fCRRjjw5kqNUHosStHTynw==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRY1FIMVFjZmg1V1RBblNM\nVlhlTWJlS0ZzS3J4MW1BNGNrWGRkemJVMkRBCk5HRktxaVk2d1ExYzNGMWR4ak5N\nR2lrQlVBcEVjUGRVNGJnSlJSSkdEcmsKLS0tIHVRbmlrbUFwUWQ1ZUx2VHNmYWpV\nM3czbXRZWW1GQ0VJSUhlSUhkeExjelUKymIxMBBlD67h4u518h0/7sarJtNowkD/\nE9ThbqRkCWt/JxGEykQnl4WYWlNX45N/vT1llEeVJmd9oOncHBY+qQ==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3aHljai9FK1YrWmdTelEw\nTkhQT1hpbkRDYkE3SzdxbDVYQWxkMndWZGlJCm1reGVuMytaYkhPSUdUNHpZR2ZW\nK2tFSEp4THhqRG5SOUwxOFZDSU5kbWcKLS0tIEhhVUlCQTZnOVRPU2xkQk5obGph\nb0dBMldUNlI5cmpDZlV4UTR0eDdmN2sKjvTgRnn6afEdL1mHbWbJwfR/AKWhJ/rC\nbSPW5q5rtqbVYq1gpufPUZK+/KUzhhaT+YfhEZrYMYpknbzdArqQ3Q==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
}
|
||||
],
|
||||
"lastmodified": "2026-01-15T02:33:50Z",
|
||||
"mac": "ENC[AES256_GCM,data:Wb1zaCFrFFy4+REhmA8OSRETqQLLAzKZyVomsvUCxHihTJ08reMpbg9oreN9FoMcRMmB2TgtnLGnZ4I2ogvnytzbdTNfknmmoT0JWJCxKRV2XdR61UXRJeUT2v6wm528aZmKrqt2QhArec7+h04zWD8WGUQsYHFrq0Ho2OFDO8A=,iv:r1nmy5OvuThlcz+nJc9wg4Lnl3PjP34FreK+y+f6Bjw=,tag:qxhUn7PFykKoB710u0vB5g==,type:str]",
|
||||
"version": "3.11.0"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1 @@
|
||||
../../../../../../sops/users/kurogeek
|
||||
1
vars/per-machine/rana/zerotier/zerotier-ip/value
Normal file
1
vars/per-machine/rana/zerotier/zerotier-ip/value
Normal file
@@ -0,0 +1 @@
|
||||
fd79:fada:fbe9:8c5d:d899:93c1:e7fc:2733
|
||||
1
vars/per-machine/rigel/inventree/admin-password/groups/admins
Symbolic link
1
vars/per-machine/rigel/inventree/admin-password/groups/admins
Symbolic link
@@ -0,0 +1 @@
|
||||
../../../../../../sops/groups/admins
|
||||
1
vars/per-machine/rigel/inventree/admin-password/machines/rigel
Symbolic link
1
vars/per-machine/rigel/inventree/admin-password/machines/rigel
Symbolic link
@@ -0,0 +1 @@
|
||||
../../../../../../sops/machines/rigel
|
||||
47
vars/per-machine/rigel/inventree/admin-password/secret
Normal file
47
vars/per-machine/rigel/inventree/admin-password/secret
Normal file
@@ -0,0 +1,47 @@
|
||||
{
|
||||
"data": "ENC[AES256_GCM,data:zvgWIdH7rcqvo2iK2iAKUm/Y86Bw3MIEfR1ORnk=,iv:mZh5NQtqcvo1mqMloplYUyOIqqTevabrD3184d+HCWU=,tag:0Eg89dJfqHVC+AuQpwvcWQ==,type:str]",
|
||||
"sops": {
|
||||
"age": [
|
||||
{
|
||||
"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTN0UyR25hYmlQUklFZ0tL\nYkVaSWNXTmY3dlhxNEVHU2JMRWlaVDRWUHdNCnpMU3Z6NWN2M1hZUVJWcnZTSXZn\nNjFmR2o0TURnUlZuYzFRaFAwN2N4eEkKLS0tIGtuR2xtYllzTlFsTGFHZFBlQlU0\nMHRaQm9mM3Z2MjFjY21xR3ozRDU0MEkKGx/4vViXoCSGsTfspDHKDKa/z4+OqSXA\n3O6Lty/Z7fcIzQ620/o78FymLvckry4WcbNv91ygD757xEMPs2w/DQ==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDaHBHZk9BcU5lQ2lBL1Zl\nZUx0UEpvUGtrME9KM3l4SkNrKzBDeklGOFg0CmIvYUhvVVYzV3VseCtxZXNPUEwz\nUHVBMFJ5RGN5M2hIWFcvVmYreHJUbUkKLS0tIDkvcTRndlBBZEpFeThjdGtzby9J\nWUk2Y0kwV0NHbmIzVDhFRWpuZzlwdkUKeRxby++AnjmG0z5gIoCKl8agSX2DM79E\nuwC28eA4rmq8AkXya5HmBNkC190BKVukNgUrf1WADNhIiqNWbRhwWA==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFZzZjU4cjM5\nakM3WEt5eDU4bnUvbFZsVnN5ajJtR1dNRS9mVUJmVUgvbHcgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQptNE1LVWZsd09aNjhLcURCUXU1VC9R\nQ0JiN211ZEJrZThPRW96UUZaVWhzCi0tLSBoUjRFY0tmNzRhUVlrdE8rWXV2UTFQ\nSG90OTNDUWMwc2xjd0NOWXluQU5nCg+k/2HOJLSlO/EljnXeUIKagzrv2wzGSilZ\nFh+NKEf5yzhGfuizhT68GgLTy91LklHz1MXdFN5OWxcaHUQDPWg=\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGpEU21KOHVR\nYWJBeHlLS0ZQeXdnN1BvUWx0TlVkRkwyRmN4QUJPRW5tMnMgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpGQU9PbzV5d3VVaFFPMm5WeGNQeERI\nZDMyeDVTdzdabXAxb01GdkpnbnNrCi0tLSBTc0llSmFqLzBSMVZwVnlEZWRXdXBu\nazNDN3dlTUFidklqSVdTME8zbXZZChqfY7W5yfXWDfXtbTq37zLMiCAETwdubf0w\nP6XXbk2PMQnBSpC0DtZrzH2h/6blg67v12MR8WV30az92hBwCgs=\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIDM1cWs3VlBx\nelpBYjE2S05KR1hWK0gvOVZzQWRyamJraHN1TkdSVzZCeTAgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpMclRWemRpZzdqdU54WERJZ3kydXdq\nanB1RWxZNVk1WkRXc1NqMHFFSC9RCi0tLSBibDlFVm9pTlhuTFIxN2pZY1UyRVc0\nVlRrZWhRTS8rSllLaklFNFZkSkprCjtoODS+/3/9Az764qn6ICxfMUIj26QBv37U\nqKFKEKWtd3nXR1El2eZGIUNZ2bNr6iZ3uYLztN8QvQvBrDhCMxo=\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQN3ZqSTIzT0xLdGRJUGJ3\nY0hjV0l6bndYMk9OSVdwQk1WWXpHR0EwNmpRCjM5VHBlOVNzTWVoQzgyL3FjdGJS\nMDcrVmxGZklkeFVMaUhNUmg2bFR4MlUKLS0tIEZ2cnFVejFabVVPbHh0L3B1alkr\nOHJLSTloeTlVV2VhdzQ0MENHRlF5UFUKsN0LowCStW63TUitkdT25o1evdiGXnYq\nXZyjm9d1D9Q3YqA8nTkEUS9j0/VV0v3WMbwwa7Q7BbLa5aStbOgH8A==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3VzVnb2VoZG1iTytRY3lC\namNuYk1pTXpuanpBQlhRSUhoWElJVkxrbHlVCkI5OE1oT1RSQlBDWDFiNC9zdWVV\nSmJOU1FPMHpKY1QzZnFwRzNyM3NLZFUKLS0tIGpBcnFqaUM1b3BIanJvVUxXcHZR\nSXIxREtHVzErQjh0ZGprQm5JR0U1Rk0K+SUWUIeq9YzJy+2UK/5jn1XyAxMcA+Be\nStAdKZrT0N2z/XT7oPm4Yd1oyv49dvZMAEPGlBz3/m3pSA0FOzyiDA==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDeTlDMDU0QjRUSXkzbnVU\nN08yYzU4L0ZLYWRvaWt2aHhUTXNqc2pJN2lBCnNFRGRGUFZacjNuaXFuMU5Qd1Ba\nSHVIU2R4NllhZjNXRytML3pBMXRWVTQKLS0tIHJDaHdyemV5OVBIcGhUQUoyZVZV\nRWhhM1RINUFQQTVaczZhS01IVm9oSDgKdRcoZHYIG4vUJ9G+a3M+EEcEZO/zew4n\nLR5/l5TsvVF4CO5FO0Pc01kPXaL6xVE637fXzfaD1J+RAqB6f0VSbA==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
},
|
||||
{
|
||||
"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl",
|
||||
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzZjl1ZS9kZ25rMnd5SGRx\nZ3Ruc0pmSTR0SDZicWx4aHJGakQ0ajV3cjBVCmlMVzJlZ2N3N2t6cUdMREtwKzNH\nMVVjdjFGL05KYmxJYlhHZEQ3ZHpvTWMKLS0tIG5DUEprNndBVHBGU09KWEh4K2FD\nV0MvQ2xsNjY4UVdFOWIwRVBrdEw4RzAKhgsSbnhQiJwVS1VvlG/sDxy0RAqvcA0k\nntYQYkMfBM58pB07/nWhkh6jKL9BD9skRo4BjhgNQ6TMHg66QCz/7Q==\n-----END AGE ENCRYPTED FILE-----\n"
|
||||
}
|
||||
],
|
||||
"lastmodified": "2025-10-10T06:29:46Z",
|
||||
"mac": "ENC[AES256_GCM,data:0XzwEMtc++XgiAq3aC2rM/aTXWSFO9ZgZOd8bLbAk5wlcTCx4dgDya5p1Ym4Cn/WqE671Hdx3JJdXdLGhhoqb4uFwxymdh1bTuDJ7PaXBWczXpQAFGhbMoejpRtpWgfA49BPafx2XSKrge68gi+gAw9E8XELWIENFavufFqxgys=,iv:FyYyhpujre4D6zbM2FTjCsdNbusqPtz9JIQs1SCbojg=,tag:SextpN5OAhIntRrHHUJFhg==,type:str]",
|
||||
"unencrypted_suffix": "_unencrypted",
|
||||
"version": "3.10.2"
|
||||
}
|
||||
}
|
||||
1
vars/per-machine/rigel/inventree/admin-password/users/kurogeek
Symbolic link
1
vars/per-machine/rigel/inventree/admin-password/users/kurogeek
Symbolic link
@@ -0,0 +1 @@
|
||||
../../../../../../sops/users/kurogeek
|
||||
1
vars/per-machine/rigel/inventree/oidc-key/groups/admins
Symbolic link
1
vars/per-machine/rigel/inventree/oidc-key/groups/admins
Symbolic link
@@ -0,0 +1 @@
|
||||
../../../../../../sops/groups/admins
|
||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user