Gleipnir/nixos-systems
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
nixos-systems/secrets/cloudreve.env

24 lines
5.1 KiB
Bash
Raw Permalink Normal View History

Add cloudreve license key
2025-07-19 00:19:24 +00:00
CR_LICENSE_KEY=ENC[AES256_GCM,data:TLb8iQFNLA88iLe8td0Oggd+bbNzqgxMCpP9ulMw4+B0t9l5vdKks1Vyx2hxV2Hg4BuYkoW6IW1njoWtT9gCrCAd8pGTJ7+x,iv:ywD8DlNGOA+caY0BnmgPm1r+cnjSRwZ5ZabKXrGtmxo=,tag:8ua/itSi75qjpU6Pl+6jig==,type:str]
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
sops_age__list_0__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPb3lEMTRrY050aXVFM0pz\nK0FqVmVSN2xiUFIxbmc1WS94WWFYZGRIV2pRCkF6eENKMDhpQ09EMDVvNTdmTTl3\nZmltTEp3Y2RoalhVWGpTZEwxa0ZhOWMKLS0tIERXVFIwY3BUMXFsUmg3b2RkdGN3\nekFHZlFwMUhFWWFYenZVYXU0U1A1Y1UKzawmWGzhnM+wa9GTFs8bdzTGKN7lwYc8\n+hd9TcPytYqbJHTEO6RX0BNDkNI8Op2YcJC6Iw/LFL3Qa7gElfC60w==\n-----END AGE ENCRYPTED FILE-----\n
Add new staging server key for sops
2026-02-18 05:06:57 +00:00
sops_age__list_0__map_recipient=age1wxlwx75hfxer4trvfzad7cwdn2hhu4we50p32vpy3qvdct7t656q3pp04x
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
sops_age__list_1__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpd3pld0xNVUhBUVNaaFR5\nZlg2UUFDUTBaY1BQMWs2ZW9YZDgvM0R4WjFrCnVqNXgrakpRQk5BTjBuakFiL0FS\nVDg4Mm9aSkkzemc2U2hmNVdJbjdQYUEKLS0tIDFFWE4xbGEwb3pmbUh0bFBYZFVK\ncjRhMUhYM2w0eDNjZkRvSmtONEthTFkK/ZrWtvCfeWJL1ICsgRCAyIIDwJt6erxR\nwoG65wJ8EIWbE+dOyPdQzCf2UOSCwHIJ6v+OPpfghZ/3vQcSHTucjg==\n-----END AGE ENCRYPTED FILE-----\n
Add corp dev key This makes it so I can modify secrets files directly on the server I'm bringing up.
2025-09-09 12:32:58 +00:00
sops_age__list_1__map_recipient=age1x704pjnueguchkl54ly8w4w26ltys5900v7xnl7w3zlgasus09jszz45t8
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
sops_age__list_2__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3K3VnMHhEZXN5eUtkMlNh\nbnZxNndoZ1oxd2VTU0k1MWVMYmRDV1VmdjBjCnhzL0hFc2xHbThTaVlRVDRnbldQ\nSENCQVo5U0w3MUxuKzk3UTJiTnhWUnMKLS0tIEV3UmJQT3B6MW4xUHRoSEdYcjhs\nL1EyemZVN2RvbkRKeDFLUlYwRjJLQ1EKxhGhKk2cekLTho8SxqijIcjVDYacks2V\nlp7Cm1kIVYoNYYMf/XGSq3UjpWvpDY9+4KdfFtY0Ii8L4IUGTYHHqg==\n-----END AGE ENCRYPTED FILE-----\n
Add corp dev key This makes it so I can modify secrets files directly on the server I'm bringing up.
2025-09-09 12:32:58 +00:00
sops_age__list_2__map_recipient=age15y4k929zaj9fdg3vd40pa40tgvrgv9mn22xfummn5zxfmkcw5d0st6prjx
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
sops_age__list_3__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4RzRId091OWtoNDA0MmJh\nQ1BVQWFOMURCa2VLcEEwM3VQdVViWHpRTndBCkdibGdFQzFEc2hGWUZaZ2JMM0RE\na1pFOEloM0VGK3MyRW1hcjBzY3kwK2MKLS0tIE9udHlhLzh4NUZOV09oR0VNM1Mv\nN2doc3UwYk1ud0NweUtPYkgrbjVaUDAKQJ/oi2oEzG59gOcdyGy61LhNKAVbr0iS\n/hIbVez+UhxF2kLQc4pXA8qbytuC6NU83Ap4sNnCd7crIyDSbgJstg==\n-----END AGE ENCRYPTED FILE-----\n
Add dev_poweredge key For building nix binary cache
2025-12-15 18:47:41 +00:00
sops_age__list_3__map_recipient=age1q5syuyx3n255vllv6elfj72yk5mhxnk9pqawzyy4gzkzmpw3gpjqz9ujx2
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
sops_age__list_4__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwOWliTTF3V3BrQUJNUURt\nMVZZWHVOTTVKKzJhSGNuOWUxKzB2bHg3aHpRCmR3QzVyUzVXSHNJcEZqdnNpRDJ4\nM28xbTQ3Mlo2Nkk2QXcxNXVoQmc5OHMKLS0tIFd2c3BCaXdTMVJMcDYxMmR3eHRX\nRytMNVA4MWxLR09DUk5LanhRa3FUdHMKGJ6X1KgEOLSYhQNNpy6J40YdxZhcJFQY\naTVgi+pvlj2Dgr1JdZT3d5DaIaS5CfSvyHH0VlohbIg8in8qitTScQ==\n-----END AGE ENCRYPTED FILE-----\n
Update host key for corp server
2026-01-13 04:48:16 +00:00
sops_age__list_4__map_recipient=age1rqa4qvkk7s26pgj09d269t84vprdrh0jhyl75xq5zyhp9cdssq2qc8hut8
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
sops_age__list_5__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYTXM0M0paZGpwTFRMOHMw\nQUoxeXgzSXZEdm5MOGYvaVB5bUJ4d3gybmhrCnd5N1ZqcWJrQ2Ura1RSeHUxKzFP\nWEpoZzRLeHhONHNpK3BDemFWekZXclkKLS0tIEF5ZXFvNXRKYXVuelFHUCtoeGtT\nTk9ubUk2SHNXdzVNTTFWMVhPU1F0WkEKkoFEpV1eT6NB1qoY2dhEsHhPrnYK+Q7K\nEEYcnCIoU0vNhjd7+OJvFLKH3Bqh4lExlY13c3dH7mYEQCJa8D2K3Q==\n-----END AGE ENCRYPTED FILE-----\n
WIP getting legacy-sexcore back up At this point I was able to successfully nixos-anywhere the system and SSH back in afterwards. That's progress worth keeping.
2026-01-04 17:21:22 +00:00
sops_age__list_5__map_recipient=age1yfs6d0vac45rnx3q54u52tjk5vnfsqnghaj95kmkl7fd5du3ee8qgse385
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
sops_age__list_6__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwOUlBam1XY1VWTElIbUNx\nS3FwOXJJcW9Vc1Q0c3pvdkZDWGZ1V3RnMFh3CmhDbk4yWE5VVG1ZRWhSWnNPbTVB\nSGc3Wk5kQmRZVzNEdzJVK2ZnT2txRVkKLS0tIDBVUjRWS1RwNHlSYTZMZDJnZ09i\nbVcvbVE4Q0dPd2lyUVU2OWdZaFNEa0EKAuAZDzgJBI/MCh6RXlEAcEaMwuzpo+pM\nx4Noq2YNoprqEP2dIYPEbdSLGtD4nxYpCMDaTyyZB0RGORVBENi5Gw==\n-----END AGE ENCRYPTED FILE-----\n
Add dev_poweredge key For building nix binary cache
2025-12-15 18:47:41 +00:00
sops_age__list_6__map_recipient=age1t3ryfktuhr3cysf49m9q2n8fkjf9ajjjnhztxw9hz8paxgk4lpcq065jge
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
sops_age__list_7__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBdUZCUW9POWx5V3N0dzRy\ncG5IV3c1OEpoRU40bGdOcnN5Q1dWS0pXYVZzCkxWd2R4a1hlYTd4dS9Lak5pYVpq\nNEFnQ09VM2RLWEtxM3FWanJTdjRNRDgKLS0tIEp4VUwxR0M0WDFRVU5FOWRaOEJE\nQXc2U2ZGVFZ4M0RuQ1pTT3RtU3JmYTAK7xC3aL1scsiXIg1TTFctnzhBEsg2bY6t\niuPk8Fjiooscr1WBDsTXjQYzpzNms5O5TR3JpqRLwebYUFlXhUdOnw==\n-----END AGE ENCRYPTED FILE-----\n
Re-wipe nocix-amd-legacy-sexcore again, update secrets (again)
2026-01-05 03:31:47 +00:00
sops_age__list_7__map_recipient=age167q6r28ws6wrpjwxnt4ap2fgs6d9cyvrdhzl2wflr2tnsw5xapxq36n2ec
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
sops_age__list_8__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzODZ1YjZtRXVqcmc1MW5H\ndmVFMzNGT2RhMktHUWJHZ25CRWV5QlVzVGdnCmphWlcrU2ZQSWh6YzdBYTU4T3F5\nSU5IOWYybnE2aXdKb0lwVktxbVhWYU0KLS0tIHVORDNsb3dHaldtU0t1MzkzcWZN\nSTc0VmpJNm9wN3RNaFhxMjgzTERUcUkK6wjA8iAtQ3YBjGzXELvWkEcigtjGFLDP\naI8Yb0KbxCYOZgl/3CT9Y4BmwIK4K+MeolgOa/6B8R5HERuegI7xOw==\n-----END AGE ENCRYPTED FILE-----\n
sops_age__list_8__map_recipient=age1924evks66k9g6c4zcnn2ghjcxpe0fzw2y9j253xredkwqnw9p5qqjcvjqt
Get cloudreve working on new corp with local database This was a huge hassle. I really wanted to see it working under a non-root user since it writes files, but that ended up being impossible because of several bugs in podman's rootless integration with NixOS. I've kept pieces of the logic around and commented out in case I can fix it in the future as it would be more secure. I also tried to connect to Postgres over the unix domain socket, but the problem here is that the container is built to run as root and I'd need to do some elaborate mapping of the root user inside the container, the non-root user outside the container, and the Postgres auth scheme. This would be great stuff to sort out, but I'm out of time now to work on it.
2025-09-09 19:47:22 +00:00
sops_lastmodified=2025-09-09T19:12:50Z
sops_mac=ENC[AES256_GCM,data:YiXYB4ZgQiqWhF+XUuu6kMW1kvf4FzBOdJiwuxaww9gFS3FMztReJYNYqHuVYQyGPQZgexVRgwGqf8kZ/aSsn8mSf4Wpx9zdI69bS9+mlJUN0ndQKQhP/wiO5TP4bmJxB0W8sq62V3nCWG82tdG6jTCNrpS2y3L4U4H+tg7uD+4=,iv:le11XPbNeaNY89a6hDmx7kyQWD1BhicHaUKT43qLOEs=,tag:QFDSWFDhE7ZESI4UnDUXRQ==,type:str]
Add cloudreve secrets
2025-07-19 00:04:38 +00:00
sops_unencrypted_suffix=_unencrypted
sops_version=3.10.2
Reference in a new issue Copy permalink