Gleipnir/nixos-systems
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
nixos-systems/secrets/authentik.env

24 lines
5 KiB
Bash
Raw Normal View History

Switch authentik env file to an actual env file ini is not env.
2025-07-18 17:00:35 +00:00
AUTHENTIK_EMAIL__USERNAME=ENC[AES256_GCM,data:4PMcNtQZOCcepXOFoHQJe8A+0AdOUGQk76rI2EE=,iv:C5ATwjfF+/lkMhUPUF1u4EMmlfe0oCuagrajKVsmsbQ=,tag:PNM+kYe8rgDmOumtfvzE8A==,type:str]
AUTHENTIK_EMAIL__PASSWORD=ENC[AES256_GCM,data:761BeyOs9Ay9rb64FQAk14SqD54tcy2P,iv:D9Dn+jXKeSBWXvsyvMHcnM4NkNm1FAph/j1XAOYVG00=,tag:pDJzzlLlpNpQPAyr/IIyFQ==,type:str]
AUTHENTIK_SECRET_KEY=ENC[AES256_GCM,data:8jb7qazlI3luTrBuUWNOy/TTkiiYLW+XYqFKmFo8rgRmbfMqKwM6485U7i7GNFHSVqQEaOXc39WEZR6dZILIZ47nJDETeSnMGGgLz8T7UwU=,iv:GV+cfsX+kXED//ladyo9jg5XLOmg8l1bGTqNB7JnwfU=,tag:ddGxFUKrMSVWWjBrDP1N2w==,type:str]
Update host key for corp server
2026-01-13 04:48:16 +00:00
sops_age__list_0__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzVm5nK2UvTkZpVEdQeTZa\nNEY1YmxDcS9JYzdRekxUUXk0VXJLOGRhZUcwCnlOS3ZBcGtUUkptdUJ3MWVwOTQ1\nUWVxb05hZngvT0dRMjl4UU5TTkJjbDQKLS0tICtBNEt0dG1GOEJ2MEJJMEJTR1o1\nTkRuSDRlUG9VNWVUTEN4OFcwS1NBK00K6Krt6SJfa3on8RJ9+m/JZKnPV5/9tv1H\nRrdwqKaAdXJ6IzvjGdP4ps77iy/XQLbh5M9w2RUU2/8u4ChlIk7P1g==\n-----END AGE ENCRYPTED FILE-----\n
Add corp dev key This makes it so I can modify secrets files directly on the server I'm bringing up.
2025-09-09 12:32:58 +00:00
sops_age__list_0__map_recipient=age1fnkhk9rv7r8gh84vxnhvndk4fgh20qcj4hvnfhdpumcydl6m6vrse50lrz
Update host key for corp server
2026-01-13 04:48:16 +00:00
sops_age__list_1__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOcEtaNXpwTUdYWElkU0xY\ndTUvZzN5RDlDckM3SEpVdHdaYmhkNE8vMTJrClBSVmpNbUJPeVRJT2FPb2pCSDEr\nT2FFUXM3WTYrNEphUkY5anRxbEFFeFUKLS0tIGQrdlNZaStBV1FkWmZyelZtV3RK\nanVYY0IrNm1kYjhRc1RJSS8xWnZXeTgKVEattpGZ9wwgRutf6Vmjtcq/97/nvWIJ\nieeWHYqh5gJ50j+16pHtMsHhssiJwWutmfx+6VvoIcONqva6IMx/iw==\n-----END AGE ENCRYPTED FILE-----\n
Add corp dev key This makes it so I can modify secrets files directly on the server I'm bringing up.
2025-09-09 12:32:58 +00:00
sops_age__list_1__map_recipient=age1x704pjnueguchkl54ly8w4w26ltys5900v7xnl7w3zlgasus09jszz45t8
Update host key for corp server
2026-01-13 04:48:16 +00:00
sops_age__list_2__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWTDR4aVd0UDFPMWhHcmI0\nUXhXVXVrWWRSY3hvQjZGMVg2Yzh2R21EcWlzCnFaUFdxRUZKaHdZZllQemhpN1pI\nY1czclZ0eXJ5SVN2dGZVN3NIc01WWXMKLS0tIG9zZDM1UUlpTEFoZzVLZVlkekVY\namtUYUlGc2MwS01rVW1SOTltQmxPKzgKqeN1jIo3GBLhqDGE5iSteI5v4PTZ4Xel\nnj/1yGt062PhN1x8XbmsuaBYCueF2zD9gsaHcrWSoVXYZ6tv/2jGEQ==\n-----END AGE ENCRYPTED FILE-----\n
Add corp dev key This makes it so I can modify secrets files directly on the server I'm bringing up.
2025-09-09 12:32:58 +00:00
sops_age__list_2__map_recipient=age15y4k929zaj9fdg3vd40pa40tgvrgv9mn22xfummn5zxfmkcw5d0st6prjx
Update host key for corp server
2026-01-13 04:48:16 +00:00
sops_age__list_3__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIQnM5V3J1QitPYTlJWWxO\nM3FDbU8yWmZuRnVmT2h2cnJLMUZiQjVDSG1JCnZuWExIcjl1Sk53ZkdXcHRzV1hq\naXRpcVJaWGh1clpiTUZOWnZUR3FMa0EKLS0tIGo4bVJTc21acTZ0RWFUZU5vRXdF\nKzFnRi9RTXkwSWw2N05NM2hTN2dDRzgKrFPhhWnV7wHaPXLxYtYgLFUlu0k47Z9B\nhryWbnnr0iC/5ZpGR/ggWkQqw2E2KLKY9vTY1c3Ji1x+Z9SWx0Utpw==\n-----END AGE ENCRYPTED FILE-----\n
Add dev_poweredge key For building nix binary cache
2025-12-15 18:47:41 +00:00
sops_age__list_3__map_recipient=age1q5syuyx3n255vllv6elfj72yk5mhxnk9pqawzyy4gzkzmpw3gpjqz9ujx2
Update host key for corp server
2026-01-13 04:48:16 +00:00
sops_age__list_4__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOeUdPTWsyVjB5eWFpRmdn\nOVRxYWJ5OUNzWE9DbS9KdXp2Ui95OVh0djJVCnhyc1NjdERwWjZnSnkyeEI2V3dX\nRHNDY2lwTTB2YUtnczdZanp1T2QweFEKLS0tIEJvVGdOSFdKYmJsdWpQdTFkdytu\nWU5YNVgyZm9ubFFiZ0RwbWhoazZxamcKBTRwpU2C/MJE2kAU3YR7TnGMIr5WkFS4\nvbYsRxG+o4uw49iTT/hQqQeExEzOLrt3UjYUgBPuKelBpqUw9TcGug==\n-----END AGE ENCRYPTED FILE-----\n
sops_age__list_4__map_recipient=age1rqa4qvkk7s26pgj09d269t84vprdrh0jhyl75xq5zyhp9cdssq2qc8hut8
sops_age__list_5__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtRWZLYnJzMjlOWHJFREdi\nbGxxUi9wOERUMHg3U05OV1p2dlFuajhQOXl3CkwvZXBnVmppN0NxN3RlY1RKTGp1\nN3lNbElaZHJBZHFOaTI1QnJNY0o2NVkKLS0tIDFydlNUejJuK2FwcFR0OTJPSjJB\nNmQ1K21OUGV2aW1Ibi9LUmtzV0c4ZkEKoxFUbw3qf9d4DQ2AffDI6orEJmCuAC6d\n2708Fjo72n0UQGAkVtu8cwFl5qo1EB3bwr16vzdMwTNZIYCYXbWNlw==\n-----END AGE ENCRYPTED FILE-----\n
WIP getting legacy-sexcore back up At this point I was able to successfully nixos-anywhere the system and SSH back in afterwards. That's progress worth keeping.
2026-01-04 17:21:22 +00:00
sops_age__list_5__map_recipient=age1yfs6d0vac45rnx3q54u52tjk5vnfsqnghaj95kmkl7fd5du3ee8qgse385
Update host key for corp server
2026-01-13 04:48:16 +00:00
sops_age__list_6__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1UndXdXpEaERHSXQ2QUtm\nMHJ2MEhGaWdMcG1jc2xYTTBhM1pmcEhrRERFCnE2ZjNwbnVyWWd0TmdDQ1dPUmph\nUTZ6U1dCbW44UTVhVTNHYXFpRHh1Q3cKLS0tIDZYRGtnZ0JjejBUcDdPNFducGw4\naGErcHVMVHd4R1lteTA4S3VUbUN5eFUKOEY+oHFljsV8FrfExjFanRoyJTJ+/N34\nG7nLjw1HEKR96yZKTif01gXJT1eKPw8+JLOmZDodx/skB72s+UuEGw==\n-----END AGE ENCRYPTED FILE-----\n
Add dev_poweredge key For building nix binary cache
2025-12-15 18:47:41 +00:00
sops_age__list_6__map_recipient=age1t3ryfktuhr3cysf49m9q2n8fkjf9ajjjnhztxw9hz8paxgk4lpcq065jge
Update host key for corp server
2026-01-13 04:48:16 +00:00
sops_age__list_7__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5UkpValZVRUNMdzBYM25M\nYzRMQW5VMnFmNzZ0ZGx4SWowM3lxTllBSFRzCm0xMStZczlUdHdyc0hUaGJFdW9Y\nSmx0ZlZjUUZvOHBHUnpTeTdQVXhOTVkKLS0tIGwxdmVDdWhPL2drdTIwcHVwSUlj\nRlluZXVJTkhPOXRZMmMzSE5DYk9uM0kKwBJ5Sp999U5wHNOJtOmMhWa1MVR4vqUU\nNI1Tho6HTGJkkIfk1uF6o4K3BQ7nKE8CFdC3fXylaaLtfIzbW6yjdQ==\n-----END AGE ENCRYPTED FILE-----\n
Re-wipe nocix-amd-legacy-sexcore again, update secrets (again)
2026-01-05 03:31:47 +00:00
sops_age__list_7__map_recipient=age167q6r28ws6wrpjwxnt4ap2fgs6d9cyvrdhzl2wflr2tnsw5xapxq36n2ec
Get authentik working on the new corp server without podman The podman integration was pretty janky because it relied on running a pod and the NixOS integration with pods are essentially non-existent. This led to issues with the port being improperly forwarded when partially restarted. Now instead I use a flake dedicated to running authentik. This allows me to specify some of the config in the module directly and some in secrets, which is really nice. I've additionally added some changes to the listen address so that the service isn't exposed over public IP addresses.
2025-09-09 13:01:14 +00:00
sops_lastmodified=2025-09-09T12:49:14Z
sops_mac=ENC[AES256_GCM,data:l28mT7peCNM8I0g0UdH1OsFHMDAQ7YRo4GBSXMGbVfTmvIO3Qlkav/07ByBnv1HaGbSuRnMeF8zYilNLRO5JXdgUmFrt+QNXYrbFtkEd4boldVIHDDjtj5lyO6xdX/S5BL+engyE+7+DXz1UFkKBKoKqnQupzFLhWoIsFkGxbq0=,iv:IfzlXWHN0LLhVU/T79Wn8kraENMibtijWj8l7LiT4uE=,tag:RNFlpyEd+QBUFGGZC9CvDA==,type:str]
Switch authentik env file to an actual env file ini is not env.
2025-07-18 17:00:35 +00:00
sops_unencrypted_suffix=_unencrypted
sops_version=3.10.2
Reference in a new issue Copy permalink