nixos-systems/secrets/secrets.yaml
Eli Ribble cbb8daebf9 Working nixos-anywhere directly to nocix-amd-legacy-sexcore
This was essentiall an OS wipe, adding root authorized keys, then
running nix-anywhere out of the main flake. Saves a bunch of steps which
is really nice.

I removed the data disk from the disko config in the hopes it would
solve a problem that looked like:

  ### Installing NixOS ###
  Pseudo-terminal will not be allocated because stdin is not a terminal.
  Warning: Permanently added 'nocix-amd-legacy-sexcore.gleipnir.technology' (ED25519) to the list of known hosts.
  installing the boot loader...
  mkdir: cannot create directory ‘/mnt/sys’: Structure needs cleaning
2026-01-05 01:29:00 +00:00

83 lines
5.6 KiB
YAML

borgbackup:
keyID: ENC[AES256_GCM,data:WQzb9Fzn7wzKTtZLnvvl5IQ0GTln90V/5w==,iv:petvSSRA+Ycim1VaN+I3SCM11PSBnd+5YKbfNXHqMsU=,tag:GOwli6+Dk4zayjRGoODsvQ==,type:str]
keyName: ENC[AES256_GCM,data:Jx0l9xyim/AepETj,iv:RYM2vNz7zg/9Y9F7EoWxtoHhKMMFJE0f+koaFWkQYh0=,tag:F7drLX1n8W1WslfWTpQs/g==,type:str]
applicationKey: ENC[AES256_GCM,data:B1d87ZJ8q48B2SwfYe6ILM08FkiqDyn/+mJhUSEyBw==,iv:3f5DUMqltbQc+LG3PpoTBhctiFG0QE6a12KD/ewafYo=,tag:p31d0Qyzr4TDY9W6bORpFw==,type:str]
authentik-backup-pgpass: ENC[AES256_GCM,data:tYHAgbrXM6xy41I5jfiPM4Pkt3lqN2RdBLf1CaltTNT8Cw8p1Rh+xoihhLdm3DHbwzy/NWcTD5hXXV1iAyqcvTd1Cr2gNMsh5tD096z2kpS8p2ZfZnOCzgNZkIu8C6pq826qqf3ZrMyqX7A/qwkoa1GtALXi5sUgL7qZAGqPeCKwdVYV7Q==,iv:94bHTSrmOqoi3SkZnhS7TNwQR29cSm4FdADO6DTGZo8=,tag:WS2vGTUxqJMOov0lvc/STw==,type:str]
sops:
age:
- recipient: age1fnkhk9rv7r8gh84vxnhvndk4fgh20qcj4hvnfhdpumcydl6m6vrse50lrz
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5UEVJcWQxSUZRQ1Q2bmM2
YXlyUmN3UGhVeDVSbzFlY2s1R0ZjK2lVMGdjCk9ORXV5MWNUNmtDa2RWMEYzc1A5
djN2Mm45dFZvaWpGVVlYeWdhZVF5T2MKLS0tIDJrSWhBN3VaZ1VNSitKejJHWjRJ
UTdNTGlYUmFFQ0RzZ3pGM2cvaGhxN1kKQ0W+ptLGoUSE9Wr7QnIKIEULjKkn+BWe
id6cdAJnQpayXHDsQ3vdeffTv22FvdxO5Rlv0lUs5uI3L3Nqwm5mFg==
-----END AGE ENCRYPTED FILE-----
- recipient: age1x704pjnueguchkl54ly8w4w26ltys5900v7xnl7w3zlgasus09jszz45t8
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5WjFEYzJBRFdod2VZSkth
a1lObVhVM1NuTmFJOFc1TzZIZXBha2RyUldjCmhFYkE0NEIxTG05RkM3WktSaHNh
dWQyTzZxMy9sZE9rQVdkNlR0a29ZdkUKLS0tIGV4Yk83V0tUMDJCYS9HbDR5VE1t
TEVjL3RaQ25PUGlKSTZmcEJoNjliS1kKGq+Dc2+ilM6Sir97j9zXvmIePPONiFZk
YyQVfq4ePZrqRUiWNH/IBN7helFVj68pSAzlVLZhsdq8nS+HLm6ncQ==
-----END AGE ENCRYPTED FILE-----
- recipient: age15y4k929zaj9fdg3vd40pa40tgvrgv9mn22xfummn5zxfmkcw5d0st6prjx
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBodUdqd1RidnNKWkFaL2o2
Z2Rka3RmN2EzUTJNREp5V20rUG9jSnVpL1Y0ClVJVFRkUG5xeEtJbWFUckVGNHFO
Sml3R2ltdGNsOThVM3BZRDRCcE12OEEKLS0tIEpnN1oybUJYZE4yZW5JSUJKcUJV
Vm5MZ3U2UjV5YmlyUUIyYnp4U1lRdXcKNB0xBwO/KwwXwvzbJSWVAKShVB+TCLe+
BIExovL44Wr3U2I7M4T9v45PZB3JMFD+V4JhPh4crQU/4+ebWzTj7w==
-----END AGE ENCRYPTED FILE-----
- recipient: age1q5syuyx3n255vllv6elfj72yk5mhxnk9pqawzyy4gzkzmpw3gpjqz9ujx2
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBL3R0Vlo3YU5GQjNLc2Vs
c2g5VFp2aCtId0RqRGdjVmhaWVJGb1Y2eFh3CmFyUG5ic1I1N3hmMFVmK1R2ZXhT
RnAzUzNZOXRvdzdOejFvdlEzc3NBRGcKLS0tIFhIZTBJSmtWQTEvQkxDaGFDTGll
T3BSeFdhbGdYK3JlbUIxZ2JRdnNjMzgKCSYJVf0wc4x85dYweoFg8PR+VnSntCtD
iq6fkbwITZz9k/aawRpV5k7+WPIKEJ78TayjXsg1QeyKvU/KeuuT7Q==
-----END AGE ENCRYPTED FILE-----
- recipient: age1ck44jqpuz3zlthquvuh7wsemrjrgfzhn462sk7rlfetwxpgy0uqs79xn2h
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnUlRWdzdxV2R6M1BOdWxo
L0lIa29kejU5cm9KVFhYY3NWK01tUXdadVQ4CnpvbVJvSWlOWnhsYVNwQm55b1pN
TE9FOHBSRStZTDVvZkJLL2J6d1RPWDgKLS0tICsxblJsdGVjbFpGOFQrd1Zzc2gv
akxVYk0rcFNaOHBTUjZDWFpIS1ZyVGcKB3jZiD+micxIWSjrpOOLcoezeopV89wG
gRv7ANhBEFLX2Do4hIuJA7kTIX//hJ2FBgjRNQlqbKLjB55rUTdGUw==
-----END AGE ENCRYPTED FILE-----
- recipient: age1yfs6d0vac45rnx3q54u52tjk5vnfsqnghaj95kmkl7fd5du3ee8qgse385
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaaHMrLytUSEREQThxMWx1
L1lROTh0LzdHL2h4ek83QjFlczQ2ajJmcENjCmF2QzBZckVwdytMWUE1NmFnMmF6
VUtwN2FCMFdBV2h0a0JYZC96U1J3NXcKLS0tIHg1Y2kvcTl1Zm1kUUUzc2dzb1My
TzhoaUtGNy9sYjEwblZDM2xJdWVCTVkKux67f3ijlU4invAdP0+P21DOZ18uPBu6
m1Fv/RtcW4NbqADfubZzlLclYn5/cQWaYkyQUw9rwwRCn0J9IE5bNw==
-----END AGE ENCRYPTED FILE-----
- recipient: age1t3ryfktuhr3cysf49m9q2n8fkjf9ajjjnhztxw9hz8paxgk4lpcq065jge
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvLzBXamwxbmx3WldEK3py
SUMxNTFyNU5BSkFEWHd0Y2JyaEtMTDUyeWxvCk1QNjUzVzZwaVpscm1aZTRQSlpj
S0ZBUGJXNmNTaUJZUFVWVHFaaHB0U0EKLS0tIHNIbm5uVzVRR0FTV1NXU1dobjBC
OHNEVlYwWmxUZHRvY3VrNWZ2bjF5Vm8KMsUp6k3OCmV1i6y5oiijXP996u4Vii8s
9oo/jdt1Ot8nlwYqgeGxU4o7KgU32mP4OvDItxCgfY6Qh9x56EKVdw==
-----END AGE ENCRYPTED FILE-----
- recipient: age1n6ju8fxvkeravluu6zr40k3jtyrqc3l7tt32xn5dcdqd2ncryu8skfkauy
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrU1BWUlZzYTV5ODRNSEJw
d1daNytqdUF5M0ZHNlZCWXFncWkyV0M4OHdJCndOOWR6d3RuOE9tWXdzWlFDaHFW
QzY3MVA5Z013V2FpOEZwL3RFRmxSeW8KLS0tIDkzYjNuVGdIVDV3MkxteDZUcXk2
VWF3SkQzUHJ3REJ5VWExbE1Xbmk2WFUKp9zKM3bk5xy51tZOPqvPYVNWqwlAFnT9
U03C1eV3PCjp8undJo9L6xoPCuk9S3pk+wt28uvsRs9u+I45zzNX1g==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-08-18T20:23:25Z"
mac: ENC[AES256_GCM,data:79biMFI/sn/n73B32VUSNw193XHGOID6pwN+84iqnSSG+3GnEE/uVnjYhe6Hw63xXy9fdWeKbsX7CuPnOqw5gs3RH6Jxz0489bGqtssGD4SU6EbdricYhBZHvKWxbgTBrhUFNasQsTXnbE3Espb6SmrVUOCt7uUcOJiQBrqipTA=,iv:qQfwW9ut0XfnG/L7jdnPXLBu8spNMBhAjXXm5/kzHgc=,tag:D8jb7ExtYfDQkC7Wy0GGwg==,type:str]
unencrypted_suffix: _unencrypted
version: 3.10.2