Gleipnir/nixos-systems
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
nixos-systems/secrets/authentik.env

26 lines
5.5 KiB
Bash
Raw Permalink Normal View History

Switch authentik env file to an actual env file ini is not env.
2025-07-18 17:00:35 +00:00
AUTHENTIK_EMAIL__USERNAME=ENC[AES256_GCM,data:4PMcNtQZOCcepXOFoHQJe8A+0AdOUGQk76rI2EE=,iv:C5ATwjfF+/lkMhUPUF1u4EMmlfe0oCuagrajKVsmsbQ=,tag:PNM+kYe8rgDmOumtfvzE8A==,type:str]
AUTHENTIK_EMAIL__PASSWORD=ENC[AES256_GCM,data:761BeyOs9Ay9rb64FQAk14SqD54tcy2P,iv:D9Dn+jXKeSBWXvsyvMHcnM4NkNm1FAph/j1XAOYVG00=,tag:pDJzzlLlpNpQPAyr/IIyFQ==,type:str]
AUTHENTIK_SECRET_KEY=ENC[AES256_GCM,data:8jb7qazlI3luTrBuUWNOy/TTkiiYLW+XYqFKmFo8rgRmbfMqKwM6485U7i7GNFHSVqQEaOXc39WEZR6dZILIZ47nJDETeSnMGGgLz8T7UwU=,iv:GV+cfsX+kXED//ladyo9jg5XLOmg8l1bGTqNB7JnwfU=,tag:ddGxFUKrMSVWWjBrDP1N2w==,type:str]
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
sops_age__list_0__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiU3U5MDUrSXR0MFYxRWFQ\nZzFUbjk5S0wrL21EdFhNYk10cjlCRDMrWW0wCmpyNUgxZkprL1pOdEQ1bzhGeTNT\nWXV4azNuK2dyeXN1eGVzSG1JeFA4dTgKLS0tIElVWmtMNTh6QU51cWJKUmZEWWFm\nMFJ5VnNvRGpYN1ZKYVppb09zSnFDcnMKsfWG87OBAm0XoJd4Y4HB4k2hDLP3jgYv\nMzulqSAxURKoJaLyOLJzXveubZCyP7M3QO8VLGJegjsBZJPRV3GY1g==\n-----END AGE ENCRYPTED FILE-----\n
Add new staging server key for sops
2026-02-18 05:06:57 +00:00
sops_age__list_0__map_recipient=age1wxlwx75hfxer4trvfzad7cwdn2hhu4we50p32vpy3qvdct7t656q3pp04x
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
sops_age__list_1__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4ZmVKcGJna2NXa0JkLzRP\nR2RJZWtIUGFYaWtOSUZGaEJCdWl4eGxSYWtnCnZwNER4RTVRTTRBcDlwK2NLbTJB\nWHFCVVYyUDdqM0RmOW5CQ2ttLzBzN2MKLS0tIFBiaEdCQmRsZnJEeHRFVDRyKzdW\naHFCYUtBMDFVQmI2Z0pySHFtd01YUm8Kk6R5oqHzUWXdVlpBJkuCnHMmv+3DNimT\n2P3qIkvgl5EVfqQH0I3a6mldL3JMt6WW6aZI7DzvpSCIpSl3a7X3tQ==\n-----END AGE ENCRYPTED FILE-----\n
Add corp dev key This makes it so I can modify secrets files directly on the server I'm bringing up.
2025-09-09 12:32:58 +00:00
sops_age__list_1__map_recipient=age1x704pjnueguchkl54ly8w4w26ltys5900v7xnl7w3zlgasus09jszz45t8
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
sops_age__list_2__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxZjFZV1BvWXp1S3VRNW9a\nN1ZSbXlpTWx6dllNdGU5a3lnRFQ4VlNsL0VnClNMQXRic0RKdSszUW5HQW44eEoz\nUFNpSFhYMGh3NjREd0Z4QUFCY1NYalkKLS0tIHY2Y2kvdDcxRmF1WDROR3BxMlQy\nS0NvMDFSaTVVZnhJUkhHUldvcnVCVncK0KvVTw7FKpWrgKi5CDRglbUwZ9tMrScL\nM+UnGtZH5AmAIpf0QsErVgV2T9xQM7ydVVqY96b+L+RH/xK8h/H3ww==\n-----END AGE ENCRYPTED FILE-----\n
Add corp dev key This makes it so I can modify secrets files directly on the server I'm bringing up.
2025-09-09 12:32:58 +00:00
sops_age__list_2__map_recipient=age15y4k929zaj9fdg3vd40pa40tgvrgv9mn22xfummn5zxfmkcw5d0st6prjx
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
sops_age__list_3__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBabmdEeXFnbnQ2Q1FUOEVP\nLytMQUVHS25FTlRVZ09rTGhnTVRCRGQ1UFZnCjRiU2dvMkF2dUN0SjBwODdGVi95\nUU5RbGJHTERmTmZzYTBQRnRHZ1Mra2MKLS0tIDc2d3dpWjBIV2VENkNyS2dyNXZn\nTzhvc2NDTm92NUF1V0lMQWc4SHhhMFEKO3JnzBkxsGvA9SS8NdxHsKwMEUJeL0+K\ntjH5iXSxsvyXNga5NEMvXRfvCEn8gf8XEeKZvVHe1VJGXqJ3HKNruQ==\n-----END AGE ENCRYPTED FILE-----\n
Add dev_poweredge key For building nix binary cache
2025-12-15 18:47:41 +00:00
sops_age__list_3__map_recipient=age1q5syuyx3n255vllv6elfj72yk5mhxnk9pqawzyy4gzkzmpw3gpjqz9ujx2
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
sops_age__list_4__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaR1NSeXVjYTZSZmVqUFlo\nQVFhMFptRXYzbzkrNDk0RVl1NTNZWlJoQncwCnFSbWMwR1JlejY4dlNjQTlEVFJ3\nNmRES1JrQytGcnVFYUhTUFNvY2tWYWsKLS0tIDEzc1N3QUoyNHVoMXUvZy9PdC9m\nbmg3NGs1QU1rK05aSi9yOVVoVEI4MDQKZvSkDAVBWeAGyMZxuzzAVBYrn3xl9M5n\nYaKKd3ITDKevskMKyY2Xxmx8VdisWtZvPwWM/ZKodnNTdtlu/YcJ1Q==\n-----END AGE ENCRYPTED FILE-----\n
Update host key for corp server
2026-01-13 04:48:16 +00:00
sops_age__list_4__map_recipient=age1rqa4qvkk7s26pgj09d269t84vprdrh0jhyl75xq5zyhp9cdssq2qc8hut8
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
sops_age__list_5__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0bExuV21RNnJoWWk1T2U2\nN0hKSUVyMGkzcHNld256Qzd1YjB5SkMzZ0FVCkN4UGlHQkNuUkkyUHBRSUxiY0Jz\nMmszd3JwYW1pd2dlbWY4ZllkQ3VQQm8KLS0tIFNockl6OTNLK1VMUWNvb0hKOEls\nV0tIUWgrcDVJNUtCNS9weXR2bmF6RTgKvVrvTg1YMiC31CKfsqBbGFCNTllU4y/A\nsvlUzMomg7ekIPx+4ogLDGsVL5sHmW9ZmaXCN9bGuFAOABgVMLEBAg==\n-----END AGE ENCRYPTED FILE-----\n
WIP getting legacy-sexcore back up At this point I was able to successfully nixos-anywhere the system and SSH back in afterwards. That's progress worth keeping.
2026-01-04 17:21:22 +00:00
sops_age__list_5__map_recipient=age1yfs6d0vac45rnx3q54u52tjk5vnfsqnghaj95kmkl7fd5du3ee8qgse385
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
sops_age__list_6__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkRkFjUXFuYkxJNU9TRjkz\neFVrdEdEbHpXa29qTGRxNFozZzZmK0FuNnhFClpuMTY0b3dhUVk4S3NacWMyRVdo\nMzN3NDNibER6U2FqWTdFeGx4b1Y2RmMKLS0tIEFkYmVNMmxsazZHYWtDUjdGa2kw\nWG53QU51VkNkZ3F4ZkVjekJsTkNHUm8KYgVooT8t5h4PB3PWso2Yyfwy5QoSQe0Z\n4waZm6I4pZBAQxtYtEeCcsMb3h3noWYGlYAKKC7WNaF+3rRVV3wkHg==\n-----END AGE ENCRYPTED FILE-----\n
Add dev_poweredge key For building nix binary cache
2025-12-15 18:47:41 +00:00
sops_age__list_6__map_recipient=age1t3ryfktuhr3cysf49m9q2n8fkjf9ajjjnhztxw9hz8paxgk4lpcq065jge
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
sops_age__list_7__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1RnpIWGFQcHB1R0tHT2c5\nTlNYQnJucjh1T0tOK3E5dFBVZWV6eXM1ZFFVCnNmR0UrSmlNT2RwSTNrb3h3dnBZ\nWHJRVVk4NXRKWlVlNlJwSTlrOEZhcmcKLS0tIExsdDNXQVA0ZzVvRnZDeFV0V2Qv\nTXhaZUVxelBEbUtyOFJ4VFZuZnNoT0EKKbVFaCaKV410trMmZgmOidQeHtUaY5i2\nlmo+Hj0MR2NXRdK1mfKEfJ4FDT4BusAa80Y3w2Nd0+tutqBUrFjJhA==\n-----END AGE ENCRYPTED FILE-----\n
Re-wipe nocix-amd-legacy-sexcore again, update secrets (again)
2026-01-05 03:31:47 +00:00
sops_age__list_7__map_recipient=age167q6r28ws6wrpjwxnt4ap2fgs6d9cyvrdhzl2wflr2tnsw5xapxq36n2ec
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
sops_age__list_8__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNOXh0Rk1TaXFQY1NmcmRQ\ndFZNVXNBd3V1MW1TTStIaWYwYmkvT1V1ZzMwCnplbkxzUVE3d3pYaXYyUGNEcWxO\nR09KbzMzaVkwZUgwNVZBTEtmZThjTTgKLS0tIG5wWU5yTy9Pc05hL0t1K2RQLzZs\ncHNjcTRUZ2ZaMGRiZ2hnUXJIWk12Q2MKBofEAmD+teboZV+rENyD2nNfLh9fQhkb\nUPf2FnNW1LiaATzh2mbawQhs46rkoViCfRIIGb4F18nIO0PYvzOpBQ==\n-----END AGE ENCRYPTED FILE-----\n
sops_age__list_8__map_recipient=age1924evks66k9g6c4zcnn2ghjcxpe0fzw2y9j253xredkwqnw9p5qqjcvjqt
Get authentik working on the new corp server without podman The podman integration was pretty janky because it relied on running a pod and the NixOS integration with pods are essentially non-existent. This led to issues with the port being improperly forwarded when partially restarted. Now instead I use a flake dedicated to running authentik. This allows me to specify some of the config in the module directly and some in secrets, which is really nice. I've additionally added some changes to the listen address so that the service isn't exposed over public IP addresses.
2025-09-09 13:01:14 +00:00
sops_lastmodified=2025-09-09T12:49:14Z
sops_mac=ENC[AES256_GCM,data:l28mT7peCNM8I0g0UdH1OsFHMDAQ7YRo4GBSXMGbVfTmvIO3Qlkav/07ByBnv1HaGbSuRnMeF8zYilNLRO5JXdgUmFrt+QNXYrbFtkEd4boldVIHDDjtj5lyO6xdX/S5BL+engyE+7+DXz1UFkKBKoKqnQupzFLhWoIsFkGxbq0=,iv:IfzlXWHN0LLhVU/T79Wn8kraENMibtijWj8l7LiT4uE=,tag:RNFlpyEd+QBUFGGZC9CvDA==,type:str]
Switch authentik env file to an actual env file ini is not env.
2025-07-18 17:00:35 +00:00
sops_unencrypted_suffix=_unencrypted
sops_version=3.10.2
Reference in a new issue Copy permalink