nixos-systems/secrets/vikunja.yaml
Eli Ribble cbb8daebf9 Working nixos-anywhere directly to nocix-amd-legacy-sexcore
This was essentiall an OS wipe, adding root authorized keys, then
running nix-anywhere out of the main flake. Saves a bunch of steps which
is really nice.

I removed the data disk from the disko config in the hopes it would
solve a problem that looked like:

  ### Installing NixOS ###
  Pseudo-terminal will not be allocated because stdin is not a terminal.
  Warning: Permanently added 'nocix-amd-legacy-sexcore.gleipnir.technology' (ED25519) to the list of known hosts.
  installing the boot loader...
  mkdir: cannot create directory ‘/mnt/sys’: Structure needs cleaning
2026-01-05 01:29:00 +00:00

111 lines
8.6 KiB
YAML

auth:
local:
enabled: ENC[AES256_GCM,data:3ybUjVM=,iv:eUjVnji5Mwrsdi/a1HEXijZQhXEF3OiT89Mfrr9+Z5U=,tag:Z1oeiIWCNsTPcoBcp4nL9w==,type:bool]
openid:
enabled: ENC[AES256_GCM,data:Y7gzwA==,iv:UIPGQfBNj8r6b31Ypzhzasl3nAI4dIqqzEwMTNrGGSA=,tag:c7sHpbukU//ieXbjKqU1xQ==,type:bool]
providers:
- authurl: ENC[AES256_GCM,data:hFGfkkTNtOR+GBcK8nahChqb2iLtPX1l6cYYGXpq5swpbQicAt4KBXp358yIMH+I1PUXPQ==,iv:XEC45uExlbI+PMixwM53fdW2utNKeJESeKMrxrIWi0s=,tag:l55+YXzJIQIyVW2yjN/DCg==,type:str]
clientid: ENC[AES256_GCM,data:Sp8SQLIdrC1V+jlzynycZuz4HXu73OjQb7M9kTHNBTtj4iih1tgIEA==,iv:F+XWfWGnQLUSFHcTp96A+G5ftMAQJEtSH9NaIQhKN70=,tag:1+iVyq32ZQpBu4MCOSlaEQ==,type:str]
clientsecret: ENC[AES256_GCM,data:l3siPWTqeW84Y4h4ld9QgkEvBgVBgEM4hDnFBG2I+63nGC8NNWw/tUf5PcqPE9PGv7KVh4EUAwU0/BNtPhmVMFymEOEVMNN9fbTdAIcYoLLLwo2mB1PX0NieK2mU22TU0OyqWKfYcs40K6XAb3UkkJjPrzFVBzZpp6nFKgTVWjY=,iv:IMe+Soy66rfrHJOqFSwMEGZm3W1g9pDXBFopuPiETzA=,tag:pqjzOjc+dG3+wMKiBT2DvQ==,type:str]
name: ENC[AES256_GCM,data:iqaDfALzlGTE,iv:m85XHUrOYOEdM89T7sXF+gk4A1QHD74nu9WeZNZ+290=,tag:Sn5s9XXIjA08+8R964DQKA==,type:str]
database:
database: ENC[AES256_GCM,data:ZZ3zbNb22Q==,iv:iwnAVwa40wIhEx17fxNmYmg6qHbbR1hkJvl3j4EN68Y=,tag:fHQ484azifsFHR3cSUawkA==,type:str]
host: ENC[AES256_GCM,data:5SCqvGmK4KYJXRQQavjLpTSfmw==,iv:GsMSC2v0oynGSSgirZcutttHx94hJQqP7Tonj67w7N0=,tag:d1Z8t/WdXEMIkqP8b2vG7Q==,type:str]
type: ENC[AES256_GCM,data:w0MRoZk2mJo=,iv:eck3JFZ54g5odnyx5hH6MLD3LZWHSU4kGS4+RVcccDQ=,tag:fpJHIPr0x/fx4JzaRWEXmQ==,type:str]
user: ENC[AES256_GCM,data:CVjmBqo7uA==,iv:Bjx6tHxRw6S1yMAyiWyFgMRvZmMrTlLSolATxQAJ1bQ=,tag:v2P1pTLDfcLUsld5caCHbA==,type:str]
files:
basepath: ENC[AES256_GCM,data:tpJxGArwZyDEbdoVS+D1n0o+PcUJSA==,iv:jFob6uPVYOucqxyqgCAWmofvkwCbCnRWOd9Vv/S1Z74=,tag:OVqCRrc5nEWaDkcAqeHE0w==,type:str]
mailer:
authtype: ENC[AES256_GCM,data:TMdCWpQ=,iv:L7KTquQm4hOfWAOEbEeSelTGlkZiv5pQPtvQ4OH8+zI=,tag:11vS3rC721XzP2FIJykzng==,type:str]
enabled: ENC[AES256_GCM,data:Y9fiaw==,iv:/dJ7gxSnroifakzF7eG8bgqmVN6JCVQHgqy5Ousni/A=,tag:lBq2xrS4sdb+ILBIHChtng==,type:bool]
forcessl: ENC[AES256_GCM,data:UsoXcA==,iv:d/0dJLMZUFl1lFxGGIaBmjvksaRDGD4yyRUy/YgdUkM=,tag:ffx/sx+H/aYSJzUG9S0xUQ==,type:bool]
fromemail: ENC[AES256_GCM,data:9RHCjjJMfP3WzSXhBgcTq9C50wfgw/6sCAS1rTQ=,iv:+zs6ieYQQHlcvyHJT4Qu8fFKJqEHhC85SYc97ZoPFAU=,tag:dlLr+PTEUAL84N0yo73VGg==,type:str]
host: ENC[AES256_GCM,data:4HJjhgVYu0aNtFvAQaIgPOY+kC8/,iv:qui0Lf+MmjOH2UxM2E7FgSA9XoQpSHNtNr+UpQxbKGA=,tag:G9p5bCXIK60w6FV7I5HJYw==,type:str]
password: ENC[AES256_GCM,data:MtPy3YC3NaxD96Is+pf+Ab6BHW3HkBnX,iv:CjtthSbwcGwg+jUCwTJuhEYtZ6LMR/oR/3nNpqGRBtU=,tag:CN7EEn3pM02QxkN59ArAkA==,type:str]
port: ENC[AES256_GCM,data:cC123w==,iv:s+7Kf025Q3395YnUdXGzc9PJo4cPcTGCRy7lgd8oyrk=,tag:YC7Dr4DDWmtucZkruReM2A==,type:int]
queuelength: ENC[AES256_GCM,data:OVbU,iv:g0UrhVU+PsAP15Ob7Ha1zC9AoboN9I19yAw6GOvPsrU=,tag:dWWzt2vqna3cXDCqumju/g==,type:int]
queuetimeout: ENC[AES256_GCM,data:4B0=,iv:lVgVc9en9ok9sXBZTFBlg0H6PGFUo5MFlrxku3K4zrQ=,tag:87faf9FGgcBay7z31XaXiQ==,type:int]
skiptlsverify: ENC[AES256_GCM,data:4pmrVI8=,iv:LPGzFxHc+StiiE7ymZAIZtn7u7Qkjo5jipBBUM2UfL0=,tag:1ocvfJVNL3ld/Ra18ABofA==,type:bool]
username: ENC[AES256_GCM,data:ztArgBSBI4o9HOPIVc9n+k8az4Xm2Cwz57EN8TI=,iv:nOr2oZIW5nOMMg0FtgP+YEXISUfNqI93L/me20Euvn4=,tag:FNfoMYuIRj5y5b6FUJWmWA==,type:str]
service:
enableopenidteamusersearch: ENC[AES256_GCM,data:RiSp/A==,iv:AdSnQXhu/TBWl/p8tqsNjNCe95khihwzjGF5j9j4UKw=,tag:/9InRg0weDo+zK7agkfMCA==,type:bool]
frontendurl: ENC[AES256_GCM,data:kIyk5SRoJpGhQhu+97QpC4DwkwjT3B4rhu0y8ayVbjct,iv:x8N43NrKuIVA9IrOW3buu6c4jlSIXR4FwMeeM9/e3TA=,tag:KKBrKxK9uIWuO33DkxeJHA==,type:str]
interface: ENC[AES256_GCM,data:Cpbtlf/c,iv:B6/3k8sGfIv8D/Yf0Ak92D4Xvou5orbvPcd1f3ZR7uo=,tag:7lHdcWMI/sNqOmuuhmTbYw==,type:str]
sops:
age:
- recipient: age1fnkhk9rv7r8gh84vxnhvndk4fgh20qcj4hvnfhdpumcydl6m6vrse50lrz
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtNU9pbWpuZ1NOMEd5bW5J
aFUwV21hamp6WE1hY3MxdDJwa2gvYXpKZURRCm5UNmZ6ZjJ5anYxdDNLM2pmM0dr
a3FUZmZMSVhOS0Y4NmdVUytobDNhbjQKLS0tIFBHcW5kcHJFekxxZXlQMlkwUVFZ
TUlnUkhndUdBMWgzRGNDaE03eTJXYlEKhj4xRReiIPNf+FbuadUfziIwmMvDb9ZO
rljrLIUCIX/57wlfcR0nHcuB3y7mI7Vd5b1N7/DvqmBvUfUJHPYH2Q==
-----END AGE ENCRYPTED FILE-----
- recipient: age1x704pjnueguchkl54ly8w4w26ltys5900v7xnl7w3zlgasus09jszz45t8
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5QmdjT2tuV0kxSllyd3V5
NFd0NENDQ0VNYlpIazFudFBhejgrZm9VbjBJClIwUi9iRnl0aEhUS0t6aC9VMzFO
aEZ1ckI5UWl0dTVrYnlyV3hNNG9kVFUKLS0tIEYySVM1VUM4TTlrRFJKV3pPdHBv
YzN3UVBpTGZxTWN4RWQvcGhpeVRKOUkKSapIBU/wzfOMiK9Kl0R04waJGDqXafHV
f/u7WSC0RbBRMqoxI5hr2ki3cq3sX85sKZp3b2jcl+amvg7jKJBccA==
-----END AGE ENCRYPTED FILE-----
- recipient: age15y4k929zaj9fdg3vd40pa40tgvrgv9mn22xfummn5zxfmkcw5d0st6prjx
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4OTFIaTFBQU9UcXMrYmFM
blUzS3NXUkVER1YxZlp1S1YvT25Lb2ZGb2hZCm9tU3FvY3FTZTVzTjVQTG5HTVlJ
VXlha1A3MUZwS3RjK3pwb2ZLRXJDWkkKLS0tIGYzY2VtZHRqWlFFSUxXeFNXbGgz
MkpBa2J3dWtqOXBKc0VUc0RDQkhEUU0K/I6UUoWHRASvBZ7fOutTuRhtzRfcYp9p
ZWQMeYuPyxL+YkscjCryklvSyFqz9TYJehn0LphZ4Gmk3gJ+SWFZaA==
-----END AGE ENCRYPTED FILE-----
- recipient: age1q5syuyx3n255vllv6elfj72yk5mhxnk9pqawzyy4gzkzmpw3gpjqz9ujx2
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBVzZ0V1lmRHlMcTJzVC9L
aHVCby9tM1VyWFNSRFVFT1dRNGVDNXJ6N3hnClh4b3M1NWJBbXBmZnhjRmRnV0ky
c2N5UERXMWtuUnhza3pmUWxkNU1CU28KLS0tIFN0Q2FIRnc1UFdSZFIwZk9NQmp5
WlV5TnNpeFJxcWx0YnJlZ1pEVjc4T28KHlYN7lZ5IEmcItfBYzSLcYt/WiAFYwrn
KF5n0VTpovtjcVRih+mRLUskLBbL/SRWAatwDrmBtr6sk3CdRYis4A==
-----END AGE ENCRYPTED FILE-----
- recipient: age1ck44jqpuz3zlthquvuh7wsemrjrgfzhn462sk7rlfetwxpgy0uqs79xn2h
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5RlJ6V0ZJaUg4U3FUQUtj
cm1Hb25MR1hDZnMzbXh0LzM4Mlo3bnpzUG5NCkxBc0I1aVMwbllxbEExMEJRdjV4
bGFYNGRXeTFQOVh5M0V3L1htUXBRd1EKLS0tIFZtYTYyUEtMSHlGL0xpSXowTmlv
Y1cvL1FjNnExb1ZoMkJlNFVwNnJmeW8Kt+YcpCR0XI4XCZ+d53CQJ69tHgc0uUy5
nvMr8lAxOs19RnMrZ9n0m7GPo8hjCU/BjhOB4tPKsdqAVgIgGzMMMQ==
-----END AGE ENCRYPTED FILE-----
- recipient: age1yfs6d0vac45rnx3q54u52tjk5vnfsqnghaj95kmkl7fd5du3ee8qgse385
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDSUp5bURrcjF3Vk9sS2FV
VUhjclF1SXZyRFBlTlIxL2MwMkFkY3N0alhNCk5LUlZvSHBjd1U1M0dGc0IrSm43
MEdkVzNuOFhJQ0F6ZWlwM0JUT3FnUjAKLS0tIG96M2NYeFljL05MVmYvMmg1UGZu
N1BIRkdWR3pMU3Vhb2c0QlowQ3VLZk0Klj/kDsgAOIo17gNWeGhpS+HlTsQ1Nhvp
ZvwOIHp/M7i23P09fQD76EARpAcRaLHUsHAr+a+Q5pUlONZYy0gBtw==
-----END AGE ENCRYPTED FILE-----
- recipient: age1t3ryfktuhr3cysf49m9q2n8fkjf9ajjjnhztxw9hz8paxgk4lpcq065jge
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxa1hLU3llTlZ0NnFsck5W
ZUprSmx4dXMzNjdKZEhHZjVuL0dzZnd0dkdzClRPbE1mdUZuS3h1ejhzMXh0Sk5R
bFdRYzVPemd5WlpuNWNrTU43eWk0RzQKLS0tIG1uNnhRdlVQcGJyRWlxYzk1OUFx
RmZYVndyZlpXdW5DdUJ3V2hSL3VpUFEKVp7/dpIP3c2nojWaWnPIOSJ/8PD0rBT1
1aDkmBKbBOCMk5h/Nu9gdvQZlCKtM9JkGm8KlcSm9MAEdjMaymXyrw==
-----END AGE ENCRYPTED FILE-----
- recipient: age1n6ju8fxvkeravluu6zr40k3jtyrqc3l7tt32xn5dcdqd2ncryu8skfkauy
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5MGR5aFNOSksvRjVaNXQz
MFo3bFdOa2xQdTRYalFIQitaUWRnQzkxcVNNCnVKZlRDbGFEZi80QTQxZ0VycXJH
eGFRTnZIVUZKNlZqWGs0bUV2MmdkUFUKLS0tIFdnRkFaTHFmQUtxdVRVdzhNOU9o
VDVlUHdmRG1aMG9tbFRyOG41RkJUam8K47/98E0IUm85EF9lzbW70ID6jiZhmoQ7
UwLWWZBXLojoFtFSq8QbsDJ2QqgvW/5HOQFucJFnSDmBSFZUqlOIqA==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-09-21T21:49:00Z"
mac: ENC[AES256_GCM,data:+mUMtg2rlCz5R+xkEPhtpe0vrMiYJV1/YI1HuIwhli/4ZWUuG184ND/S2LU89tvcTsxFhfToThBIy/J68XHKor0hlU61u3LhgiIcgOa1QONZz2ulIgP9SfWjXLD2f4TYg1QHWXheaYc1Lx9Y7OJ6gLKlxzoMt30coeFa7z5/Bzk=,iv:f0iKViDgccs/Kv8P3IrfS+QSB4mKFuLz0aWGdM/xPOU=,tag:GyWD52tVbCVJxNBG2UfNAA==,type:str]
unencrypted_suffix: _unencrypted
version: 3.10.2