From 235f903c1d4f127e437b3ac3d6bfb022853acb97 Mon Sep 17 00:00:00 2001 From: iofq Date: Sat, 7 Mar 2026 12:05:37 -0600 Subject: [PATCH] 3/20 --- .forgejo/workflows/nvim-bundle.yml | 2 +- .sops.yaml | 2 +- flake.lock | 212 ++++++++++++------ flake.nix | 1 + fleet.nix | 4 +- home-manager/home.nix | 11 +- .../shell/pi/config/agent/models.json | 14 ++ .../shared/wayland/alacritty/default.nix | 4 +- home-manager/shared/wayland/default.nix | 4 +- .../shared/wayland/hyprland/default.nix | 11 +- nixos/consensus/configuration.nix | 47 ++-- nixos/default.nix | 1 + nixos/modules/net.nix | 49 ++-- nixos/modules/system.nix | 2 +- nixos/t14/configuration.nix | 2 +- nixos/zen/configuration.nix | 143 +++++++++--- nixos/zen/hardware-configuration.nix | 75 ++++++- nixos/zen/llm.nix | 14 ++ pkgs/nvim/nvim/after/plugin/autocmd.lua | 2 +- pkgs/nvim/{test4 => test5} | 0 secrets/cf-acme.yaml | 50 ++--- secrets/forgejo-runner.yaml | 42 ++-- secrets/k8s.yaml | 42 ++-- secrets/pi.json | 16 +- secrets/restic.yaml | 42 ++-- 25 files changed, 523 insertions(+), 269 deletions(-) create mode 100644 home-manager/shared/programs/shell/pi/config/agent/models.json create mode 100644 nixos/zen/llm.nix rename pkgs/nvim/{test4 => test5} (100%) diff --git a/.forgejo/workflows/nvim-bundle.yml b/.forgejo/workflows/nvim-bundle.yml index 9b44207..738ecc0 100644 --- a/.forgejo/workflows/nvim-bundle.yml +++ b/.forgejo/workflows/nvim-bundle.yml @@ -11,7 +11,7 @@ jobs: package_name: ["nvim"] steps: - run: echo "experimental-features = nix-command flakes" >> /etc/nix/nix.conf - - run: nix-env -i nodejs + - run: nix-env -i nodejs curl - uses: actions/checkout@v4 - name: Run `nix bundle` run: | diff --git a/.sops.yaml b/.sops.yaml index bc8d29e..e7d1f4d 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -3,7 +3,7 @@ keys: - &t14 age14e2d2y8e2avzfrsyxg9dudxd36svm24t7skw6e969n0c42znlp3shffdtg - &consensus age16pdhm238k63uye3rf4cwwe7ddyzds6xj9jv4wpsfggkghyarjqtsjzkxna - &oracle1 age12tz2r7clep9e450qhr5a6ctnx29ywmu0llq8uk9kcwhpp82zsa0sk9la9h - - &zen age1nzlng9tw59rxnr86jw330s9z4x28hr394cl2qgktptf8swat23gqahgudw + - &zen age1cqgjdpyf5n9nyusvcyl83l0gmn8sx3tju45kmp5yrfgmtfy5gvusessj83 creation_rules: - path_regex: secrets/[^/]+\.*$ key_groups: diff --git a/flake.lock b/flake.lock index 6eee496..7ec09cf 100755 --- a/flake.lock +++ b/flake.lock @@ -6,7 +6,10 @@ "llm-agents", "nixpkgs" ], - "systems": "systems_3" + "systems": [ + "llm-agents", + "systems" + ] }, "locked": { "lastModified": 1771437256, @@ -22,6 +25,40 @@ "type": "github" } }, + "bun2nix": { + "inputs": { + "flake-parts": [ + "llm-agents", + "flake-parts" + ], + "import-tree": "import-tree", + "nixpkgs": [ + "llm-agents", + "nixpkgs" + ], + "systems": [ + "llm-agents", + "systems" + ], + "treefmt-nix": [ + "llm-agents", + "treefmt-nix" + ] + }, + "locked": { + "lastModified": 1770895533, + "narHash": "sha256-v3QaK9ugy9bN9RXDnjw0i2OifKmz2NnKM82agtqm/UY=", + "owner": "nix-community", + "repo": "bun2nix", + "rev": "c843f477b15f51151f8c6bcc886954699440a6e1", + "type": "github" + }, + "original": { + "owner": "nix-community", + "repo": "bun2nix", + "type": "github" + } + }, "dart": { "inputs": { "flake-utils": "flake-utils", @@ -72,12 +109,12 @@ "nixpkgs": "nixpkgs_3" }, "locked": { - "lastModified": 1771014593, - "narHash": "sha256-NrCFwn20ewJwy/SZoREs+XylerizPCYP54n9qkr31/E=", - "rev": "69b4ff80ae2bbdd1e3f02ccd76a5f2988b118ed2", - "revCount": 397, + "lastModified": 1772669230, + "narHash": "sha256-y5euTOVqJ4YlooZbpi6F/LW9PqZZ+PjNquIses9ODy4=", + "rev": "dc4d71b197a9bce053178291da2ead757cdf93bc", + "revCount": 406, "type": "tarball", - "url": "https://api.flakehub.com/f/pinned/DeterminateSystems/determinate/3.16.0/019c58b5-64dc-77f9-b913-8738b7d338cc/source.tar.gz" + "url": "https://api.flakehub.com/f/pinned/DeterminateSystems/determinate/3.17.0/019cbb55-3789-7f90-87bf-d0580468ebf6/source.tar.gz" }, "original": { "type": "tarball", @@ -87,37 +124,37 @@ "determinate-nixd-aarch64-darwin": { "flake": false, "locked": { - "narHash": "sha256-PUo0u1iNMB8eTlBNFMCW8/UAn1sGKGqsIYlXaDRhx00=", + "narHash": "sha256-4psYG30Pl0R1zAHXDHfjR39ybe/QEfcA8C5h0eEKVx8=", "type": "file", - "url": "https://install.determinate.systems/determinate-nixd/tag/v3.16.0/macOS" + "url": "https://install.determinate.systems/determinate-nixd/tag/v3.17.0/macOS" }, "original": { "type": "file", - "url": "https://install.determinate.systems/determinate-nixd/tag/v3.16.0/macOS" + "url": "https://install.determinate.systems/determinate-nixd/tag/v3.17.0/macOS" } }, "determinate-nixd-aarch64-linux": { "flake": false, "locked": { - "narHash": "sha256-jiIWiM88xkEpBQeohSxhl83fn2xoZY0nFkrW6CUAIAI=", + "narHash": "sha256-a++ZpOrqzWsBHNR2K8H3B48LoFKIvK5VfodJgXSlsFE=", "type": "file", - "url": "https://install.determinate.systems/determinate-nixd/tag/v3.16.0/aarch64-linux" + "url": "https://install.determinate.systems/determinate-nixd/tag/v3.17.0/aarch64-linux" }, "original": { "type": "file", - "url": "https://install.determinate.systems/determinate-nixd/tag/v3.16.0/aarch64-linux" + "url": "https://install.determinate.systems/determinate-nixd/tag/v3.17.0/aarch64-linux" } }, "determinate-nixd-x86_64-linux": { "flake": false, "locked": { - "narHash": "sha256-qF/NNdHwh3tAHrKIOz2FRq5Q8GcSMzJeEY/PFvGf5vo=", + "narHash": "sha256-Q+SViaRHSg0FR6x26qCpqc3n6vJZ6PHpdHWV8XZ4ih0=", "type": "file", - "url": "https://install.determinate.systems/determinate-nixd/tag/v3.16.0/x86_64-linux" + "url": "https://install.determinate.systems/determinate-nixd/tag/v3.17.0/x86_64-linux" }, "original": { "type": "file", - "url": "https://install.determinate.systems/determinate-nixd/tag/v3.16.0/x86_64-linux" + "url": "https://install.determinate.systems/determinate-nixd/tag/v3.17.0/x86_64-linux" } }, "flake-compat": { @@ -174,6 +211,27 @@ } }, "flake-parts_2": { + "inputs": { + "nixpkgs-lib": [ + "llm-agents", + "nixpkgs" + ] + }, + "locked": { + "lastModified": 1772408722, + "narHash": "sha256-rHuJtdcOjK7rAHpHphUb1iCvgkU3GpfvicLMwwnfMT0=", + "owner": "hercules-ci", + "repo": "flake-parts", + "rev": "f20dc5d9b8027381c474144ecabc9034d6a839a3", + "type": "github" + }, + "original": { + "owner": "hercules-ci", + "repo": "flake-parts", + "type": "github" + } + }, + "flake-parts_3": { "inputs": { "nixpkgs-lib": [ "neovim-nightly-overlay", @@ -181,11 +239,11 @@ ] }, "locked": { - "lastModified": 1769996383, - "narHash": "sha256-AnYjnFWgS49RlqX7LrC4uA+sCCDBj0Ry/WOJ5XWAsa0=", + "lastModified": 1772408722, + "narHash": "sha256-rHuJtdcOjK7rAHpHphUb1iCvgkU3GpfvicLMwwnfMT0=", "owner": "hercules-ci", "repo": "flake-parts", - "rev": "57928607ea566b5db3ad13af0e57e921e6b12381", + "rev": "f20dc5d9b8027381c474144ecabc9034d6a839a3", "type": "github" }, "original": { @@ -244,11 +302,11 @@ ] }, "locked": { - "lastModified": 1771269455, - "narHash": "sha256-BZ31eN5F99YH6vkc4AhzKGE+tJgJ52kl8f01K7wCs8w=", + "lastModified": 1772845525, + "narHash": "sha256-Dp5Ir2u4jJDGCgeMRviHvEQDe+U37hMxp6RSNOoMMPc=", "owner": "nix-community", "repo": "home-manager", - "rev": "5f1d42a97b19803041434f66681d5c44c9ae62e3", + "rev": "27b93804fbef1544cb07718d3f0a451f4c4cd6c0", "type": "github" }, "original": { @@ -258,6 +316,21 @@ "type": "github" } }, + "import-tree": { + "locked": { + "lastModified": 1763762820, + "narHash": "sha256-ZvYKbFib3AEwiNMLsejb/CWs/OL/srFQ8AogkebEPF0=", + "owner": "vic", + "repo": "import-tree", + "rev": "3c23749d8013ec6daa1d7255057590e9ca726646", + "type": "github" + }, + "original": { + "owner": "vic", + "repo": "import-tree", + "type": "github" + } + }, "jj-nvim": { "flake": false, "locked": { @@ -293,15 +366,18 @@ "llm-agents": { "inputs": { "blueprint": "blueprint", + "bun2nix": "bun2nix", + "flake-parts": "flake-parts_2", "nixpkgs": "nixpkgs_4", + "systems": "systems_3", "treefmt-nix": "treefmt-nix" }, "locked": { - "lastModified": 1772162957, - "narHash": "sha256-CunGzQ1e2+bTgiLnuRSiwUsdN3RaRs1xy+ofYerwNVA=", + "lastModified": 1772894523, + "narHash": "sha256-GDjaSrB39dibyzaZHfxtOJBE4M0K9ws/DcJ8cLZmEjY=", "owner": "numtide", "repo": "llm-agents.nix", - "rev": "4167f8a37504786e80d1b32c907e403fe41ccd08", + "rev": "6de17762e82217f80633609f8fa8d8031a80d82f", "type": "github" }, "original": { @@ -318,11 +394,11 @@ "spectrum": "spectrum" }, "locked": { - "lastModified": 1771365290, - "narHash": "sha256-1XJOslVyF7yzf6yd/yl1VjGLywsbtwmQh3X1LuJcLI4=", + "lastModified": 1772922713, + "narHash": "sha256-+dn2D7gNrrld3q/AapoZZ6HL8xnBS/pcV4Gye1Nfsg0=", "owner": "microvm-nix", "repo": "microvm.nix", - "rev": "789c90b164b55b4379e7a94af8b9c01489024c18", + "rev": "6207a74a1ec31d3aa628cb98eb75795a10f49dea", "type": "github" }, "original": { @@ -333,18 +409,18 @@ }, "neovim-nightly-overlay": { "inputs": { - "flake-parts": "flake-parts_2", + "flake-parts": "flake-parts_3", "neovim-src": "neovim-src", "nixpkgs": [ "nixpkgs" ] }, "locked": { - "lastModified": 1772150696, - "narHash": "sha256-0QNL7sbGgKipjr1uXr3KpaPgBWKZmM97l/T7zkWdVqI=", + "lastModified": 1772842024, + "narHash": "sha256-rP+FjAOPqvAJO+hhVSEP3lxkrP6txFgM5O9QOo9Xekc=", "owner": "nix-community", "repo": "neovim-nightly-overlay", - "rev": "de416cbd51404e64540ca4746393d1866b219bae", + "rev": "fb3e5603c475739c421d3e941c608bc20986ef18", "type": "github" }, "original": { @@ -356,11 +432,11 @@ "neovim-src": { "flake": false, "locked": { - "lastModified": 1772148728, - "narHash": "sha256-ot+6q4IoboWMfD4xW26pE8zT3e5ocfZ8XD/FzKxeEUo=", + "lastModified": 1772822087, + "narHash": "sha256-uaecQjyj20yqMHcNNAnJzTsgi3rjDfx2mh9bD9TNPks=", "owner": "neovim", "repo": "neovim", - "rev": "18c5f06c9f6068b9a26a1ed4ab0f66b91db85cd9", + "rev": "34a59e30dbe23bab59bc6b39a4b235c5b2862e60", "type": "github" }, "original": { @@ -378,12 +454,12 @@ "nixpkgs-regression": "nixpkgs-regression" }, "locked": { - "lastModified": 1771010067, - "narHash": "sha256-Itk88UC3CxjGjjAb20KI6KrM9tRoGEpbv996fXwAWGo=", - "rev": "5c670e37e884c43e1da0405075c9b9c83d316a6c", - "revCount": 24629, + "lastModified": 1772664055, + "narHash": "sha256-RtKKd4aefzHEzV9sKa8bQdZIY67GJMV0nRS1QZ2E94g=", + "rev": "3a96d5668a8df84c2c8d006a04212c17839b977f", + "revCount": 24783, "type": "tarball", - "url": "https://api.flakehub.com/f/pinned/DeterminateSystems/nix-src/3.16.0/019c589d-45e9-7337-9ff0-a8d78fecf63f/source.tar.gz" + "url": "https://api.flakehub.com/f/pinned/DeterminateSystems/nix-src/3.17.0/019cbb2e-8d12-7212-a98f-73fd1f2342a2/source.tar.gz" }, "original": { "type": "tarball", @@ -397,11 +473,11 @@ ] }, "locked": { - "lastModified": 1771130777, - "narHash": "sha256-UIKOwG0D9XVIJfNWg6+gENAvQP+7LO46eO0Jpe+ItJ0=", + "lastModified": 1772341813, + "narHash": "sha256-/PQ0ubBCMj/MVCWEI/XMStn55a8dIKsvztj4ZVLvUrQ=", "owner": "nix-community", "repo": "nix-index-database", - "rev": "efec7aaad8d43f8e5194df46a007456093c40f88", + "rev": "a2051ff239ce2e8a0148fa7a152903d9a78e854f", "type": "github" }, "original": { @@ -412,11 +488,11 @@ }, "nixos-hardware": { "locked": { - "lastModified": 1771257191, - "narHash": "sha256-H1l+zHq+ZinWH7F1IidpJ2farmbfHXjaxAm1RKWE1KI=", + "lastModified": 1771969195, + "narHash": "sha256-qwcDBtrRvJbrrnv1lf/pREQi8t2hWZxVAyeMo7/E9sw=", "owner": "NixOS", "repo": "nixos-hardware", - "rev": "66e1a090ded57a0f88e2b381a7d4daf4a5722c3f", + "rev": "41c6b421bdc301b2624486e11905c9af7b8ec68e", "type": "github" }, "original": { @@ -474,11 +550,11 @@ }, "nixpkgs-stable": { "locked": { - "lastModified": 1771208521, - "narHash": "sha256-X01Q3DgSpjeBpapoGA4rzKOn25qdKxbPnxHeMLNoHTU=", + "lastModified": 1772822230, + "narHash": "sha256-yf3iYLGbGVlIthlQIk5/4/EQDZNNEmuqKZkQssMljuw=", "owner": "nixos", "repo": "nixpkgs", - "rev": "fa56d7d6de78f5a7f997b0ea2bc6efd5868ad9e8", + "rev": "71caefce12ba78d84fe618cf61644dce01cf3a96", "type": "github" }, "original": { @@ -504,12 +580,12 @@ }, "nixpkgs_3": { "locked": { - "lastModified": 1770537093, - "narHash": "sha256-pF1quXG5wsgtyuPOHcLfYg/ft/QMr8NnX0i6tW2187s=", - "rev": "fef9403a3e4d31b0a23f0bacebbec52c248fbb51", - "revCount": 942631, + "lastModified": 1772479524, + "narHash": "sha256-u7nCaNiMjqvKpE+uZz9hE7pgXXTmm5yvdtFaqzSzUQI=", + "rev": "4215e62dc2cd3bc705b0a423b9719ff6be378a43", + "revCount": 957146, "type": "tarball", - "url": "https://api.flakehub.com/f/pinned/DeterminateSystems/nixpkgs-weekly/0.1.942631%2Brev-fef9403a3e4d31b0a23f0bacebbec52c248fbb51/019c4621-ce4f-799f-82f6-b3b29f099b09/source.tar.gz" + "url": "https://api.flakehub.com/f/pinned/DeterminateSystems/nixpkgs-weekly/0.1.957146%2Brev-4215e62dc2cd3bc705b0a423b9719ff6be378a43/019cb23c-bcc0-7c8e-9772-0f9ff50d72f3/source.tar.gz" }, "original": { "type": "tarball", @@ -518,11 +594,11 @@ }, "nixpkgs_4": { "locked": { - "lastModified": 1771423170, - "narHash": "sha256-K7Dg9TQ0mOcAtWTO/FX/FaprtWQ8BmEXTpLIaNRhEwU=", + "lastModified": 1772736753, + "narHash": "sha256-au/m3+EuBLoSzWUCb64a/MZq6QUtOV8oC0D9tY2scPQ=", "owner": "NixOS", "repo": "nixpkgs", - "rev": "bcc4a9d9533c033d806a46b37dc444f9b0da49dd", + "rev": "917fec990948658ef1ccd07cef2a1ef060786846", "type": "github" }, "original": { @@ -534,11 +610,11 @@ }, "nixpkgs_5": { "locked": { - "lastModified": 1771008912, - "narHash": "sha256-gf2AmWVTs8lEq7z/3ZAsgnZDhWIckkb+ZnAo5RzSxJg=", + "lastModified": 1772773019, + "narHash": "sha256-E1bxHxNKfDoQUuvriG71+f+s/NT0qWkImXsYZNFFfCs=", "owner": "nixos", "repo": "nixpkgs", - "rev": "a82ccc39b39b621151d6732718e3e250109076fa", + "rev": "aca4d95fce4914b3892661bcb80b8087293536c6", "type": "github" }, "original": { @@ -574,11 +650,11 @@ ] }, "locked": { - "lastModified": 1771166946, - "narHash": "sha256-UFc4lfGBr+wJmwgDGJDn1cVD6DTr0/8TdronNUiyXlU=", + "lastModified": 1772495394, + "narHash": "sha256-hmIvE/slLKEFKNEJz27IZ8BKlAaZDcjIHmkZ7GCEjfw=", "owner": "Mic92", "repo": "sops-nix", - "rev": "2d0cf89b4404529778bc82de7e42b5754e0fe4fa", + "rev": "1d9b98a29a45abe9c4d3174bd36de9f28755e3ff", "type": "github" }, "original": { @@ -656,11 +732,11 @@ ] }, "locked": { - "lastModified": 1770228511, - "narHash": "sha256-wQ6NJSuFqAEmIg2VMnLdCnUc0b7vslUohqqGGD+Fyxk=", + "lastModified": 1772660329, + "narHash": "sha256-IjU1FxYqm+VDe5qIOxoW+pISBlGvVApRjiw/Y/ttJzY=", "owner": "numtide", "repo": "treefmt-nix", - "rev": "337a4fe074be1042a35086f15481d763b8ddc0e7", + "rev": "3710e0e1218041bbad640352a0440114b1e10428", "type": "github" }, "original": { @@ -676,11 +752,11 @@ ] }, "locked": { - "lastModified": 1770228511, - "narHash": "sha256-wQ6NJSuFqAEmIg2VMnLdCnUc0b7vslUohqqGGD+Fyxk=", + "lastModified": 1772660329, + "narHash": "sha256-IjU1FxYqm+VDe5qIOxoW+pISBlGvVApRjiw/Y/ttJzY=", "owner": "numtide", "repo": "treefmt-nix", - "rev": "337a4fe074be1042a35086f15481d763b8ddc0e7", + "rev": "3710e0e1218041bbad640352a0440114b1e10428", "type": "github" }, "original": { diff --git a/flake.nix b/flake.nix index ffa64d4..a508c25 100755 --- a/flake.nix +++ b/flake.nix @@ -1,4 +1,5 @@ { + description = "Home Manager && NixOS configuration"; inputs = { nixos-hardware.url = "github:NixOS/nixos-hardware"; diff --git a/fleet.nix b/fleet.nix index 2072486..b7096be 100644 --- a/fleet.nix +++ b/fleet.nix @@ -10,9 +10,9 @@ }; }; zen = { - hostname = "192.168.1.148"; + hostname = "192.168.1.57"; sshUser = "root"; - remoteBuild = false; + remoteBuild = true; profiles.system = { user = "root"; path = inputs.deploy-rs.lib."x86_64-linux".activate.nixos self.nixosConfigurations.zen; diff --git a/home-manager/home.nix b/home-manager/home.nix index 4d45651..062fc3e 100755 --- a/home-manager/home.nix +++ b/home-manager/home.nix @@ -1,10 +1,17 @@ -{attrs, ...}: { +{ attrs, ... }: +{ programs.home-manager.enable = true; home = { inherit (attrs) username; stateVersion = "22.11"; homeDirectory = "/home/" + attrs.username; }; - imports = [./shared/programs/shell]; + imports = [ ./shared/programs/shell ]; xdg.enable = true; + + xdg.configFile."nixpkgs/config.nix".text = '' + { + allowUnfree = true; + } + ''; } diff --git a/home-manager/shared/programs/shell/pi/config/agent/models.json b/home-manager/shared/programs/shell/pi/config/agent/models.json new file mode 100644 index 0000000..e88ae31 --- /dev/null +++ b/home-manager/shared/programs/shell/pi/config/agent/models.json @@ -0,0 +1,14 @@ +{ + "providers": { + "ollama": { + "baseUrl": "http://zen:11434/v1", + "api": "openai-completions", + "apiKey": "ollama", + "models": [ + { + "id": "hf.co/unsloth/Qwen3.5-4B-GGUF:UD-Q4_K_XL" + } + ] + } + } +} diff --git a/home-manager/shared/wayland/alacritty/default.nix b/home-manager/shared/wayland/alacritty/default.nix index c145c7c..a220403 100755 --- a/home-manager/shared/wayland/alacritty/default.nix +++ b/home-manager/shared/wayland/alacritty/default.nix @@ -17,7 +17,7 @@ _: { family = "Spleen 32x64"; style = "Medium"; }; - size = 12; + size = 13; offset = { x = 0; y = 1; @@ -31,7 +31,7 @@ _: { colors = { draw_bold_text_with_bright_colors = true; primary = { - background = "#152528"; + background = "#101d20"; foreground = "#e6eaea"; }; cursor = { diff --git a/home-manager/shared/wayland/default.nix b/home-manager/shared/wayland/default.nix index f34c038..6006ca7 100644 --- a/home-manager/shared/wayland/default.nix +++ b/home-manager/shared/wayland/default.nix @@ -33,8 +33,8 @@ duskTime = "20:00-22:00"; latitude = 43.0; longitude = -89.0; - temperature.day = 6000; - temperature.night = 3500; + temperature.day = 5000; + temperature.night = 3000; }; mako.enable = true; mako.settings = { diff --git a/home-manager/shared/wayland/hyprland/default.nix b/home-manager/shared/wayland/hyprland/default.nix index f21922d..6b8339b 100644 --- a/home-manager/shared/wayland/hyprland/default.nix +++ b/home-manager/shared/wayland/hyprland/default.nix @@ -1,10 +1,11 @@ -{ pkgs, ... }: +{ pkgs, config, ... }: { wayland.windowManager.hyprland = { enable = true; systemd.enable = true; extraConfig = '' monitor=,preferred,auto-left,1 + monitor=DP-4,preferred,auto-left,1 ''; settings = { "$mod" = "SUPER"; @@ -54,6 +55,7 @@ accel_profile = "flat"; sensitivity = 0.4; touchpad = { + clickfinger_behavior = true; disable_while_typing = true; natural_scroll = true; tap_button_map = "lrm"; @@ -285,10 +287,10 @@ font-family: "Spleen 32x64", "UbuntuMono Nerd Font"; font-size: 14px; min-height: 0; + background-color: ${config.programs.alacritty.settings.colors.primary.background}; } window#waybar { - background: #152528; color: #bababd; } @@ -303,7 +305,6 @@ margin: 2px; padding-left: 8px; padding-right: 8px; - background-color: #152528; } button { @@ -318,12 +319,10 @@ #workspaces button { padding: 0 4px; - background-color: #152528; color: #666666; } #workspaces button.active { - background-color: #152528; color:#bababd; border-top: 2px solid #bababd; } @@ -342,7 +341,6 @@ #tray { padding: 2px; - background-color: #152528; border-top: 2px solid #666666; color: #bababd; } @@ -375,7 +373,6 @@ } label:focus { - background-color: #152528; } #temperature.critical { diff --git a/nixos/consensus/configuration.nix b/nixos/consensus/configuration.nix index d954ce1..c90a6cd 100644 --- a/nixos/consensus/configuration.nix +++ b/nixos/consensus/configuration.nix @@ -22,7 +22,7 @@ docker-compose tmux ]; - machine.net.openssh.ports = [2022]; + machine.net.openssh.ports = [ 2022 ]; systemd.services.k3s = { preStart = '' until ${pkgs.tailscale}/bin/tailscale status; do @@ -48,16 +48,16 @@ "--flannel-iface=tailscale0" ]; }; - immich = { - enable = true; - package = pkgs-unstable.immich; - port = 2283; - host = "localhost"; - openFirewall = true; - machine-learning.enable = true; - mediaLocation = "/rice/immich"; - accelerationDevices = null; - }; + # immich = { + # enable = false; + # package = pkgs-unstable.immich; + # port = 2283; + # host = "localhost"; + # openFirewall = true; + # machine-learning.enable = true; + # mediaLocation = "/rice/immich"; + # accelerationDevices = null; + # }; nginx = { enable = true; virtualHosts."img.10110110.xyz" = { @@ -90,16 +90,16 @@ 80 443 2022 - 2049 #nfs - 8080 #unifi - 8443 #unifi + 2049 # nfs + 8080 # unifi + 8443 # unifi 10001 10250 - 6443 #k8s - 25565 #mc - 25566 #mc - 9001 #eth - 30303 #eth + 6443 # k8s + 25565 # mc + 25566 # mc + 9001 # eth + 30303 # eth ]; allowedUDPPorts = [ 9001 @@ -116,9 +116,12 @@ extraOptions = "--dns 1.1.1.1"; }; - users.users = { - immich.extraGroups = [ "video" "render" ]; - }; + # users.users = { + # immich.extraGroups = [ + # "video" + # "render" + # ]; + # }; security.acme = { acceptTerms = true; defaults.email = "acme@10110110.xyz"; diff --git a/nixos/default.nix b/nixos/default.nix index eec6a54..887d293 100644 --- a/nixos/default.nix +++ b/nixos/default.nix @@ -49,6 +49,7 @@ in zen = inputs.nixpkgs-stable.lib.nixosSystem { pkgs = pkgs.nixos-stable; specialArgs = { + pkgs-unstable = mkPkgs system; inherit inputs system attrs; host = { hostName = "zen"; diff --git a/nixos/modules/net.nix b/nixos/modules/net.nix index 3116e92..2c68e8d 100644 --- a/nixos/modules/net.nix +++ b/nixos/modules/net.nix @@ -1,5 +1,14 @@ -{ host, pkgs, config, lib, ...}: -let cfg = config.machine.net; in { +{ + host, + pkgs, + config, + lib, + ... +}: +let + cfg = config.machine.net; +in +{ options.machine.net = { enable = lib.mkOption { type = lib.types.bool; @@ -16,7 +25,7 @@ let cfg = config.machine.net; in { }; ports = lib.mkOption { type = lib.types.listOf lib.types.int; - default = [22]; + default = [ 22 ]; }; }; tailscale = lib.mkOption { @@ -85,21 +94,25 @@ let cfg = config.machine.net; in { }; }; systemd = { - mounts = [{ - type = "nfs"; - mountConfig = { - Options = "noatime"; - }; - what = "consensus:/rice"; - where = "/mnt/rice"; - }]; - automounts = [{ - wantedBy = [ "multi-user.target" ]; - automountConfig = { - TimeoutIdleSec = "600"; - }; - where = "/mnt/rice"; - }]; + mounts = [ + { + type = "nfs"; + mountConfig = { + Options = "noatime"; + }; + what = "zen:/tank/home"; + where = "/mnt/home"; + } + ]; + automounts = [ + { + wantedBy = [ "multi-user.target" ]; + automountConfig = { + TimeoutIdleSec = "600"; + }; + where = "/mnt/home"; + } + ]; }; }; } diff --git a/nixos/modules/system.nix b/nixos/modules/system.nix index fbcee56..8932a7b 100644 --- a/nixos/modules/system.nix +++ b/nixos/modules/system.nix @@ -19,7 +19,7 @@ in }; swap = lib.mkOption { type = lib.types.bool; - default = false; + default = true; }; zram = lib.mkOption { type = lib.types.bool; diff --git a/nixos/t14/configuration.nix b/nixos/t14/configuration.nix index bc93123..2c84859 100755 --- a/nixos/t14/configuration.nix +++ b/nixos/t14/configuration.nix @@ -64,7 +64,6 @@ in extraPortals = [ pkgs.xdg-desktop-portal-gtk ]; }; programs = { - light.enable = true; hyprland.enable = true; ssh = { startAgent = true; @@ -97,6 +96,7 @@ in ]; }; ledger.enable = true; + acpilight.enable = true; enableAllFirmware = true; }; services = { diff --git a/nixos/zen/configuration.nix b/nixos/zen/configuration.nix index 15131e6..b1d5c8e 100644 --- a/nixos/zen/configuration.nix +++ b/nixos/zen/configuration.nix @@ -8,31 +8,86 @@ imports = [ ./hardware-configuration.nix ]; - sops.secrets = { - "password" = { - sopsFile = ../../secrets/k8s.yaml; - }; - forgejo-runner = { - sopsFile = ../../secrets/forgejo-runner.yaml; + boot = { + kernel.sysctl = { + "vm.swappiness" = 6; + }; + }; + sops = { + secrets = { + "password".sopsFile = ../../secrets/k8s.yaml; + forgejo-runner.sopsFile = ../../secrets/forgejo-runner.yaml; + "b2-immich/env".sopsFile = ../../secrets/restic.yaml; + "b2-immich/repo".sopsFile = ../../secrets/restic.yaml; + "b2-immich/password".sopsFile = ../../secrets/restic.yaml; + "cf-dns-key".sopsFile = ../../secrets/cf-acme.yaml; + }; + }; + services.restic.backups = { + b2-immich = { + initialize = true; + environmentFile = config.sops.secrets."b2-immich/env".path; + repositoryFile = config.sops.secrets."b2-immich/repo".path; + passwordFile = config.sops.secrets."b2-immich/password".path; + + paths = [ + "/tank/immich" + ]; + timerConfig = { + OnCalendar = "06:00"; + }; + pruneOpts = [ + "--keep-daily 31" + "--keep-monthly 6" + "--keep-yearly 1" + ]; }; }; - machine.sys.zram = false; networking = { - hostId = "81238132"; + hostId = "44238132"; firewall = { allowedTCPPorts = [ 22 - 10250 - 25565 # mc - 25566 # mc + 2049 # nfs ]; interfaces."podman+" = { allowedTCPPorts = [ 33393 ]; }; }; }; - virtualisation.podman = { - enable = true; + services = { + zfs.autoScrub.enable = true; + zfs.autoSnapshot.enable = true; + fstrim.enable = true; + nfs.server.enable = true; + # immich = { + # enable = false; + # package = pkgs-unstable.immich; + # port = 2283; + # host = "localhost"; + # openFirewall = true; + # machine-learning.enable = true; + # mediaLocation = "/rice/immich"; + # accelerationDevices = null; + # }; + # nginx = { + # enable = true; + # virtualHosts."img.10110110.xyz" = { + # forceSSL = true; + # useACMEHost = "10110110.xyz"; + # locations."/" = { + # proxyPass = "http://localhost:${toString config.services.immich.port}"; + # proxyWebsockets = true; + # recommendedProxySettings = true; + # extraConfig = '' + # client_max_body_size 50000M; + # proxy_read_timeout 600s; + # proxy_send_timeout 600s; + # send_timeout 600s; + # ''; + # }; + # }; + # }; }; services.gitea-actions-runner = { package = pkgs.forgejo-runner; @@ -40,9 +95,7 @@ enable = true; name = host.hostName; settings = { - runner = { - capacity = 3; - }; + runner.capacity = 3; cache = { enable = true; host = "host.containers.internal"; @@ -61,25 +114,45 @@ ]; }; }; - services.k3s = { - enable = true; - role = "agent"; - extraFlags = toString [ - "--flannel-iface=tailscale0" - ]; - tokenFile = config.sops.secrets."password".path; - serverAddr = "https://consensus:6443"; + # services.k3s = { + # enable = true; + # role = "agent"; + # extraFlags = toString [ + # "--flannel-iface=tailscale0" + # ]; + # tokenFile = config.sops.secrets."password".path; + # serverAddr = "https://consensus:6443"; + # }; + # systemd.services.k3s = { + # preStart = '' + # until ${pkgs.tailscale}/bin/tailscale status; do + # sleep 1 + # done + # ''; + # }; + + security.acme = { + acceptTerms = true; + defaults.email = "acme@10110110.xyz"; + certs = { + "10110110.xyz" = { + domain = "*.10110110.xyz"; + # group = config.services.nginx.group; + dnsProvider = "cloudflare"; + environmentFile = config.sops.secrets."cf-dns-key".path; + }; + }; }; - systemd.services.k3s = { - preStart = '' - until ${pkgs.tailscale}/bin/tailscale status; do - sleep 1 - done - ''; + virtualisation.podman.enable = true; + hardware = { + graphics.enable = true; + nvidia = { + modesetting.enable = true; + nvidiaSettings = true; + open = false; + package = config.boot.kernelPackages.nvidiaPackages.stable; + }; + enableRedistributableFirmware = true; + firmware = [ pkgs.linux-firmware ]; }; - services.logind.settings.Login.HandleLidSwitch = "ignore"; - services.logind.settings.Login.HandleLidSwitchExternalPower = "ignore"; - hardware.enableRedistributableFirmware = true; - hardware.firmware = [ pkgs.linux-firmware ]; - system.stateVersion = "23.11"; } diff --git a/nixos/zen/hardware-configuration.nix b/nixos/zen/hardware-configuration.nix index 1aeb903..8475e91 100644 --- a/nixos/zen/hardware-configuration.nix +++ b/nixos/zen/hardware-configuration.nix @@ -1,14 +1,69 @@ -{ lib, modulesPath, ... }: { - imports = [ (modulesPath + "/profiles/qemu-guest.nix") ]; - boot.loader.grub = { - efiSupport = true; - efiInstallAsRemovable = true; - device = "nodev"; + config, + lib, + modulesPath, + ... +}: + +{ + imports = [ + (modulesPath + "/installer/scan/not-detected.nix") + ]; + + boot = { + extraModulePackages = [ ]; + initrd = { + availableKernelModules = [ + "xhci_pci" + "ahci" + "usbhid" + "usb_storage" + "sd_mod" + ]; + kernelModules = [ + "dm-snapshot" + "nvme" + ]; + }; + kernelModules = [ "kvm-amd" ]; + loader = { + efi = { + canTouchEfiVariables = true; + }; + systemd-boot = { + enable = true; + }; + }; + supportedFilesystems = [ + "zfs" + "nfs" + ]; + zfs = { + # extraPools = [ "rice" ]; + forceImportRoot = false; + }; }; - fileSystems."/boot" = { device = "/dev/disk/by-uuid/EECE-9ACB"; fsType = "vfat"; }; - boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "xen_blkfront" "vmw_pvscsi" ]; - boot.initrd.kernelModules = [ "nvme" ]; - fileSystems."/" = { device = "/dev/sda2"; fsType = "ext4"; }; + + fileSystems = { + "/" = { + device = "/dev/mapper/nixos-root"; + fsType = "btrfs"; + }; + "/boot" = { + device = "/dev/disk/by-uuid/7A75-7368"; + fsType = "vfat"; + options = [ + "fmask=0022" + "dmask=0022" + ]; + }; + "/nix/store" = { + device = "/dev/mapper/nixos-store"; + fsType = "btrfs"; + }; + }; + nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; + hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware; + system.stateVersion = "25.11"; } diff --git a/nixos/zen/llm.nix b/nixos/zen/llm.nix new file mode 100644 index 0000000..19a282a --- /dev/null +++ b/nixos/zen/llm.nix @@ -0,0 +1,14 @@ +{ pkgs-unstable, ... }: +{ + services.llama-cpp = { + enable = true; + openFirewall = true; + host = "0.0.0.0"; + model = "/srv/models/Qwen3.5-4B-Q6_K.gguf"; + package = ( + pkgs-unstable.llama-cpp.override { + cudaSupport = true; + } + ); + }; +} diff --git a/pkgs/nvim/nvim/after/plugin/autocmd.lua b/pkgs/nvim/nvim/after/plugin/autocmd.lua index 3fc4d8b..d2ac721 100644 --- a/pkgs/nvim/nvim/after/plugin/autocmd.lua +++ b/pkgs/nvim/nvim/after/plugin/autocmd.lua @@ -59,7 +59,7 @@ cmd('FileType', { vim.hl.range(event.buf, ns, hl, { i - 1, 0 }, { i - 1, -1 }) end end - vim.keymap.set('n', 'gh', function() + vim.keymap.set('n', 'gh', function() local idx = vim.api.nvim_win_get_cursor(0)[1] local qf = vim.fn.getqflist() local filename = qf[idx].user_data.rel diff --git a/pkgs/nvim/test4 b/pkgs/nvim/test5 similarity index 100% rename from pkgs/nvim/test4 rename to pkgs/nvim/test5 diff --git a/secrets/cf-acme.yaml b/secrets/cf-acme.yaml index 7f0bbca..78f8c0c 100644 --- a/secrets/cf-acme.yaml +++ b/secrets/cf-acme.yaml @@ -1,43 +1,43 @@ -env: ENC[AES256_GCM,data:G2O7yhOE3UKukq+1zXVWAW/REdTVdBCY0WByZbC7jnxR773ST9lA8rwEL5leB8h0bTqqQh8bwI4AdFR6/r0UQyc=,iv:IaRUoGY2zfaFDofSedHjtSx0UIGoIqX6oQhbrKCE45c=,tag:MW74dIOol8PZNxyUJEbPyQ==,type:str] +cf-dns-key: ENC[AES256_GCM,data:VkWmeh1RXgC6KWpzGteK/+8meO9iLYEB3JVs3Pikps2HRNtY+WWBOFem08ri87O7tV8mAHZVP0G2l19QL0W/jmQ=,iv:DzIutT49mYmA4OUDS15jOYw5tM/jfDmG12CVGaw5u0k=,tag:sw8nS7hlICPsj7qU/ANPow==,type:str] sops: age: - recipient: age14e2d2y8e2avzfrsyxg9dudxd36svm24t7skw6e969n0c42znlp3shffdtg enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKQ3YzNU13MGFvUGliY25x - TmxIRUwzRjlPTlh5Tyt3R2Zkc3lCMFhBT2p3ClhlR3VXM3ExQS9CeDNSY1Vvb1NC - ejE3elFhSk40ejBOaHdTK2Y5cVBSdHcKLS0tIHQ3TTRnSmdLWjFEWks4bnZFNkt0 - ZHU2MkJVZUErTnJubHcxcDhxVDJwS1EKtx8pjBpjz8r8era40aUspZ8Nyg2uKBfJ - 2m0FXMUyI/4KzGXAnFxPPqdeVun+NkJ61Wv4jT9Xn6PXf35ngqJ0xw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByMGVJMlg5aTBwSE90Z04y + a05zeXBzRFgxQ2VXdklEYVQ2bnNxcitGNVJnCndVdFpVNXYxU0xYMFhzeE5SaHJn + Z0JIM200QVdLbHRuTksrZU1OOVgxTFkKLS0tIFFwcTlqZ2M3MUp5MG5Ed1V1dUJz + anhVSnQ5empkcEpyRU1GekxPQTZ2MTAKUbj8UKt6RIlYo5JbqzzcEDDqG53sORiL + xTDjVD1k+wjKXp3nrtlpOE1IDs0cYzX0l/Fh9rVQupEA3M9X35DrSA== -----END AGE ENCRYPTED FILE----- - recipient: age16pdhm238k63uye3rf4cwwe7ddyzds6xj9jv4wpsfggkghyarjqtsjzkxna enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLYzdFY3J3R3lOcUUvRXJi - K0doenVhVHk4Q2syZWNidmNXNk1BaTd5Q1I4Cm9oWWYvQ0s3T3pQMEJGYllyWUl2 - MEg2eHZZWHdTMkVwdjRMbXdPN3RPWncKLS0tIFFIL2NoQXRkbnZONjJOZGIwNVBl - aXZrNGVxRHdRR3VLbTFOS2I4czFGcWcKUzvwpiCHzQIgtX/cikMwvHoGu/8QxPbN - HIyjqxwxpBOWPvLV4xdayQAnIbVwK4TrQ2lcXVPJUs8/ZfTF7MREHQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2bXM4dmVqYkZNa2lndVB6 + L0lxNGw1QnAyN0hqYjFtRi9zMXBZTzlscUdBCk55RVhlVHFnU0ViaHd0Tm5QNm1U + UmNDcW9vZmh5N1FzemFYV1UvYzhoeWsKLS0tIGhNT2NobjA3d1o5MHpLLzBHd1p6 + RzZIZktmMGNTbWFNanBnZXdqUU5rMzgK4qJE7L4QTgjt7afxVcKMkVW6oEXAfEBf + qREmsQnOX7xK6SYGW1LJu/JSM1qOaKJHKriwboRweot3u+F8+YQkHQ== -----END AGE ENCRYPTED FILE----- - recipient: age12tz2r7clep9e450qhr5a6ctnx29ywmu0llq8uk9kcwhpp82zsa0sk9la9h enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBV1pNTE5oNmZTZlg1anpn - Q1NRUjRaVVBGaDRLYlByVEo4ZktKcnQrL240CkhXRlc1bENhWUdqVHJ5bkdyNXox - eGJ4dUNwb2M0U2o5SnQxcmxCaTJKQkUKLS0tIHRqaDdwcHVlZ21JVVh2SzQ5SHkv - d0RtZjRKN1ZhU2VCWE4rMDBvYTBwUnMKlygdEBamBOQnhDOH7nzhbSYFDyFS+3q5 - eSqIZfCWW0V1yEHbe/t4SwSLYiVZLY21DS63JZ22jrnl0v7521ntqA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArM1g0WGpTVjlRS3VjaFhC + VzE2dUZPUm0yTFJ0cktHZ2V2RVZjYUYrakVJCkJpWTJxRS9Ua2tRQ0hLUVFoU2Rq + YTBLcm9DWWcrcWZSejRsRzVzVWtDZ3cKLS0tIGdiSjZZLytTMm00eUhqdGZQZ2xV + NEVrSk5CSUVMYWpFK2hiMjJVenNtR2sKmT9WUxD2Z7b8/jp1JthrDUErZQGiddKg + kVGho/HAFf3dCbcZ0XNmOIHOhReLbJ+nGOepoJn3meRgQ0MG2ebr7Q== -----END AGE ENCRYPTED FILE----- - - recipient: age1nzlng9tw59rxnr86jw330s9z4x28hr394cl2qgktptf8swat23gqahgudw + - recipient: age1cqgjdpyf5n9nyusvcyl83l0gmn8sx3tju45kmp5yrfgmtfy5gvusessj83 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPaGZUM3hKSE1BM1JscmlS - ZGZST2g3MkZzbmRISnN3TkltK2lleHpmWHlzCmdFbnZKSXZWOFZoWFhhV0RON0tm - MENsZnprTkJka3pJZXM1cFpwNCtUclEKLS0tIFR4TUFSQkxkN296aXJyT25nK3RG - b3pxaExSTjYxbFFwYU1PNUJBbEIrSTgKzxlxMiHPdQpvciHa2fNr3/QIRrReq3mm - xDjklnlIAdYTrq2mr6rS3sZMer3aOx7A8glOTcVL2VjgyQ1/s30+uA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBucmtQYS9JeURQK0RtNEU2 + SStaMTQ4SVljUlJHT2dCTlgvaHQ0bCtNNTM4Ck90SG5lV2lYVm02cXFoT0RQWVBQ + MnQ3dmJlQXdpMDJxK25qUGtqZGJnOEkKLS0tIGFLZURUWGVrOXA1aWIvalI4cGN3 + MWNoaHpkNTNNMks4ZjgyWENQaDFOb1EKW/97k9X/YGbQH3dTivwiJkEb2C2Rlabq + Qeg3p6GARM2jDkUnH8lHXiCY8ZGbW5qBsG4t26eGKKQK0wyWMZ+/qA== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-06-02T00:02:47Z" - mac: ENC[AES256_GCM,data:l3I8KNMoZGrUUS/RzY0fAr7DkvyhynOqPW/09IfI8sKYBP+gavdf3/OpW3uwhYzuS6pRWwCaUTa0F+HELu7rBG8FwpvyBpdeAgZb1hVFtKeBuaCjXDieuxKjj27IKLx3UbHx2iRm91oB7bIMZaXYMrlYVmrs/BkgoT8vHj5j7Rc=,iv:KaB9qaUTYbnS6ix297MjIHxl+LSazZnRW0Lu2bP/kmk=,tag:bbncBMsk/qOfz0LRmrqiUQ==,type:str] + lastmodified: "2026-03-20T05:17:52Z" + mac: ENC[AES256_GCM,data:uDvbJnGkS659IcvFz8M48OGm4LiDD8ZRM3pzDFFAu+cqIDsgjUjYtf6bvsJr2kxMdqQWvqwXZkuUnYlzgtR1Q6PbMKPHHAEKg+Z6kVbKGzjr5EbftsLo1JiAGvW1UA3g6V/fOCv6tCHqwBP2Wk6MBowbafGuKBAf2w373NiXYkE=,iv:jE+q3n+DtGUoDVcflVfmZxEqv+DZXFrTwx//a5GGrE4=,tag:ILjZwzG/EzjpcazKhd368g==,type:str] unencrypted_suffix: _unencrypted - version: 3.10.2 + version: 3.12.1 diff --git a/secrets/forgejo-runner.yaml b/secrets/forgejo-runner.yaml index ece369e..6db724f 100644 --- a/secrets/forgejo-runner.yaml +++ b/secrets/forgejo-runner.yaml @@ -4,38 +4,38 @@ sops: - recipient: age14e2d2y8e2avzfrsyxg9dudxd36svm24t7skw6e969n0c42znlp3shffdtg enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGWnNRSHpLWkdMVGpDNVdF - QitwMkoyUDFVRk5STCthU0VvaENOMmhxUW13CmVCaTExQXRsTXI4UEJVM0tNSGJC - NHg1cU1FTzlrRithbFNlejU5N0p6QmMKLS0tIE81R1lxVmw0YUtQT0tLWWlFR0VR - QjlJTVZTbENqa2xNMlJzR0wwN3NwMkUKbhEnJPJu46i+Zx/cjlCMgahBwCsFWTG3 - aIlCS9tPZNHHw/BZ0qoOeXAzRsAbqQaelxTRkStnksslgzZPdfpaiA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFM0xmRkpXc3VxWTF4Si9z + SjRVVG5ZTzdvSTJFWFllZlRod3I5c2h5MUZBClE0eEZTMUU4UjdIUkNqTWxXRzN3 + bVg3bmRzSC9XNVFEdzRKUVNIbGtJelkKLS0tIHJ2TGJkTkVRV0dMZGVCYjZIQjRp + cGw1ZGg1MEF1YUNkVVZnNDJmNHoycEEKqNHygsL701KEZiG9/fJBWGqTyB1xoCYc + c+3D/F9WNcqBaiwXkt0ukiqiLDMKB8VlPlPnGaQX+mKuvSX0KCCFJw== -----END AGE ENCRYPTED FILE----- - recipient: age16pdhm238k63uye3rf4cwwe7ddyzds6xj9jv4wpsfggkghyarjqtsjzkxna enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNSDdTalFXelU5V2JWQUhr - UHhKSUxBek1HR0dEbkdyODFOWVJILzlpVVFrCmtXM20wMjkwangrS3cveWp2aE5Q - Z1FpeE43cWwyNk1DbGoxVjJzNXJHWHMKLS0tIHZMM21BRy91ZE1kU0RVTys5WStW - NGlFYlJTMXRmZ0NENXBHRVkvV2tjNEEK9PaKtAHAnlkiAtXm0AcqTSUm4ynB6WFi - XAX4I/Yv6ykAMA6FyfFXQjqPA1pqh9HjrlVimor91Puwz0omCJcgjw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiWDJYbXE5VUpGbE85NTdp + My9HUkU3eG1uWnl1VzBhWEl6ZitzRHF1eHdRCjZQeWRJd3J4RGhybjYwazZ2dG1h + SGJEY2xmbzV4ZHl2NmlDWWdvL29aK3MKLS0tIGs5RWVibzVYdW5XOFJaYVFZRnZL + bVVTSGc5QkFDZ3E5eTkvcURJUTRvK1kKtkq7v0hIzt72QxM91L62rkU8RUlxB2s6 + aNumIrYkSxcHsGgxEnUY8zhj060e9+3L5rUtXnRkMQ60xsFGoOBP/w== -----END AGE ENCRYPTED FILE----- - recipient: age12tz2r7clep9e450qhr5a6ctnx29ywmu0llq8uk9kcwhpp82zsa0sk9la9h enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGRktOaW5XSU1jbitCMjFJ - NDJTcXc5enNLQWFqWVpXbkM2dGxpb1lpN3lVClVJZWEvYTBHbm1vd3dwVTV4Y3Fn - T2JRYmlFNE5hMDB4cmJwNUs0RlFKQVEKLS0tIHM3cEpwUFZIbmEvZnkxbW5BQ1E4 - dDVpbFVoVGprWHF4K0lJSnVOY01TcUUKWzrAsKsGMVWqds0BuYjXxo7In1RSlmQP - C2BpEutA3uQ8GrNEM5N0r1Nauy3x+e0n+j0/LS7hzSaj0HQLTKUR6w== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3L1MwaFIrU1RwbUM2d2du + bFFDYjFDK1A2ODZsYi9BaElJT0wzYnoxdW00CmNZNURzbnhkVXRsaDBCdXNVUUJS + ck4zdWF3L0lHKzdiSDRyUnErUm9QazgKLS0tIEpwcG82NG9MbEordVA2UUV6ZGNE + c0hQNkNZZ3gzRHo5YjkxUFJsWDMyemMKBhwfTb4daTl/kPC4wbQk9WwgT1VZW+JM + DsWIE5cldZmE9jYGT0hAHRgrMBJiz/AHjgxrcvyzGfaBC6pLoTlmIQ== -----END AGE ENCRYPTED FILE----- - - recipient: age1nzlng9tw59rxnr86jw330s9z4x28hr394cl2qgktptf8swat23gqahgudw + - recipient: age1cqgjdpyf5n9nyusvcyl83l0gmn8sx3tju45kmp5yrfgmtfy5gvusessj83 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2NUJyamdFdHh1YS9BZjN1 - bWlvWVpjRGFnUXhoSGNHSDRLRFN0NWJvY1ZjCmFOL0RHY1JXbk1hQVF4dEp2anNu - ajRaWFJ0RVVRZ0NGT1NFeVBVQzd2d1kKLS0tIC93d3NvdWZtMXRVWHNHcE8xT1Ew - bzliRFhSUUpVZ3RJZTNnVlQxdmlaMUEKmPkrlHyc/bXfHKE0qbFEXX2/w4rgiRSB - bbk+uwK1IhoZnqvPhwWxiHTlvSgYCJmxzYzP+f+qO/rl+hkAaePg0Q== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxVjF4MzBUZlBMVVVCUmtq + U0trZjBMTnUrMjE0RjMrWnVmWFRuRTV3MEMwCjJBWWJlVUlEdERUbmsvM2ZtQXEz + SVI3eFgxTjMwbmg0WUFucGppS3VzUmMKLS0tIGN5UnpEbENlZnZ6a1ZValpaSXRS + ZzRvNVg1UTVsNStxNGJrcm85Znlua1UKaJl5E3ke2AqdL/y2yQTdshYEDaUb9o7B + 5a6ID6cZLjXtjhYs62bzWDyuRxCg5thZRS7jE1+5CyN/rI4vvuxq4A== -----END AGE ENCRYPTED FILE----- lastmodified: "2025-09-27T18:30:16Z" mac: ENC[AES256_GCM,data:nOs0CUT0DD5dphyPTN8ev8WTdflFmNScg3UIPvXtlhGE3nJdPRW/MjraUEd5gQZ4qrwkgo99fsD1Uv6HiWBQbg59TqDNQOwhXU3SYto/zVX9Y1LGwvGurMymiQNbhHjzn+VN1tXdwyTbvhUnRSwz2a6uu1sl9m3VNfRbMewuQnM=,iv:FtMd7i5V9eRcuK9HhjiKETx/SWs5+MijVExUB/mxHjE=,tag:H+USoPhnzWzTNl7um39Pfw==,type:str] diff --git a/secrets/k8s.yaml b/secrets/k8s.yaml index c8f28b7..7e49d54 100644 --- a/secrets/k8s.yaml +++ b/secrets/k8s.yaml @@ -4,38 +4,38 @@ sops: - recipient: age14e2d2y8e2avzfrsyxg9dudxd36svm24t7skw6e969n0c42znlp3shffdtg enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBidk5Qak9TZGxxbEhOa2c5 - Vk5walNpc2lsL0RieHBUQ1NzUzFJdXI1NVVrCk1JRkN6ZjJKTWh2T0lWUWxyZjB2 - K0RGM003aThuWnZxcmhENGFjYUhGWXcKLS0tIC9QQU9BRE1LZU1TbElHQ2dFRXB1 - M0xGL1ZwcDEvV3lYQU5XN3hoN0w1elUKnmnIHsA1wNdXhF32O6RymrTiabnI78Ho - Gg3LFTTj8DxZP/OZwOR+djW7xjwzw8NHWbxc1gT3YiYTWiP7DRepnw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3UUNJRVorWWJ1K1pFWXNW + TUZvSEpnQk9PU05CdGlBSmdGQlI2Ri84ZlU4CmpUZUI0TmtxZ0xEdlY0ZTl1Tyt6 + QnVrRXdNQ0NRaVIyRVBOaTlCZnRqMjAKLS0tIGFqLzVYU2w0SG1oZFdmd1lxV1c5 + YWFmbjNPZ1VMcUE3YW9RSEoyVnYzR2MKlvwWLtgKL9R0D34c006H++pPR7BFjZp5 + HbaMk9ld9FNR20aqF0EHP9tRqdaAr5kzIsDRN1P31DQUwphuj2WIOg== -----END AGE ENCRYPTED FILE----- - recipient: age16pdhm238k63uye3rf4cwwe7ddyzds6xj9jv4wpsfggkghyarjqtsjzkxna enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtNVZaWWs1WjdxanYvRmt5 - OUE4SHd2REE3RGZNTEt6UmFVSVYrZThkSUdnCktrZWk4QTV5dkdBTFlGQ2tsdTJJ - eEpTQ0FEbkVRZ0pEdysvWnVLVUJxVm8KLS0tIDRxZEgvNFk1WENGTGdUZEdmU0tr - NGxUK2thclU0cHd4cS8rYW1kQm9WT1kKX7oKMJWC3G4o2ZFlyxzl/dCEi+uUTFI1 - XStgutdWvyMQ2nmJbQlhnN12qTt6VDj36QXVH3175U47KaJNOGvdZA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXTVdCTVNBdVhEL0VBQnVu + bmFoeWZJV1gxTW9DRmVLTWJuVFk2ekR2U2pRCjZVUEN4UU1QYllrcHpLNzhHQWI5 + elAxdFhoNys1ZG1paU1aZ1QvMzV3cUUKLS0tIHlzQWlXYUljUVNkcFp2YlE1cnR6 + cDJjSUVqWEFmSExpbUdqd2tQQkFqRGsKNj6fe+49wf6cR3ZayXe8ADwMw3CtCxRc + C+usr7O9dk0xqgfTSxTXve8fNX2ouDnsMoZ51PV0U1cgf3+qK9m/gg== -----END AGE ENCRYPTED FILE----- - recipient: age12tz2r7clep9e450qhr5a6ctnx29ywmu0llq8uk9kcwhpp82zsa0sk9la9h enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtclF0TityOStDWFZsMzA3 - Qit2d3g4VC9kRWpqd016ZXM1OW11WVhKQUh3CkhZTFhmaklWYlBwSXhuOUo0SUdl - NTVsVVNtTXNmRStBVXI1VzlYTFgwSlUKLS0tIHhPeWFsUmtkZFVvZDRxVkE5UXN3 - STR3MUphNlBHcFNrS01NOUQ2b2lXV2MK1AxEIpS5+clX5EoMbQoyufLg/+Rh+NHz - /Oe/xM4IqrKAlFn2vHXw0DxDxj16ReucUBRsp8haixZiGr1pMVgHvw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTNGJBWGlqTGxwRkV6c0M2 + b0lCbTF1Y3dhTVFhVmpTc1l4b0lCYUhINW1NCjNqR3J4Y2ZGRHBMVTh1dm92dFND + RmNwSDJJcEV4TlIvMGlKbUZBaklJcUEKLS0tIGI3ZUVDVWpvS2h0RVh1K0VqSkpa + dkFzZGh6ajBzblZRaDV1c0d2OVRlaFkKGpSvVse+3KtESzdkks/Ohco/2ON2e0cs + xXhe4OHjRKFR7RkAoPGwzAZKiIpn7h4SnkZDwjvI46mINDXQbjYmJg== -----END AGE ENCRYPTED FILE----- - - recipient: age1nzlng9tw59rxnr86jw330s9z4x28hr394cl2qgktptf8swat23gqahgudw + - recipient: age1cqgjdpyf5n9nyusvcyl83l0gmn8sx3tju45kmp5yrfgmtfy5gvusessj83 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVNzJacDVvTnB6VFNmL0dW - NzRmSHRpeVVVZnBJZXJOZXUrb2hWQjhDZ3pVCk1QbnpPZTFxdEFaSW0zMmtwWTBm - VXZsN3E5Nk9GYnF6WUUyMElVclRpZ00KLS0tIEZJWkNVbllvS0ZTVWY5ZnpUSlpU - NzUxTHZhL2Y4YXpvR29JUW9aOFRKemMK+fPgPXc1eGfVsJU7gyo7OwLVcpm3PE7K - x2GFKtrw84aNE4CMxKvx3dRUoIphj2vw45cLOriJRpnig9xnMQIbCg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRKzlUUnQrcEM3YkFzOTV3 + ZzlKTG5ydXlEUnhxeXR4NTZJSXVkUW9EWWprCjVsRDFtNVZtU2ZWWTJWdUFLR3NM + d3htTkU1REpUYU9BcktYcFFpa2pycE0KLS0tIHh5N3ZUSy9OSzhycnhwMkltM0p0 + cjNUcGM4NzRoMmhzZmk5RXVwZmVZejQK8fhhp5v1pEiSXuFfyVEjBwlD8gPhWjC6 + bNpfSQmfRdRkO+Vu/7C7+ei7s8S0+XZuaN4S7dD7fvl6/Xzm3D7zRA== -----END AGE ENCRYPTED FILE----- lastmodified: "2026-01-11T20:07:38Z" mac: ENC[AES256_GCM,data:JNF6aQfUQy1a+L2BbMAjSCfnntUaUlWcyfP9kgXpwrxcVK/qEbXxHPb+NDOliWvOPp4cMDjVphBgyQtjNTzTRfkMeMqtpKEIOkYUpo9dN69uHrws6rGq+tDCn50UZOgKirA3ojvrqEZvUKS8QgsRN7l0XK4RJjgTATBJQfNjGRY=,iv:vEAJJJEF/rPSDAfcxp1FbhnP78I3Uuk+GarWpHSGCUs=,tag:BIz3mYMVjmugWtKEg9WXiw==,type:str] diff --git a/secrets/pi.json b/secrets/pi.json index 4a19892..46c54d2 100644 --- a/secrets/pi.json +++ b/secrets/pi.json @@ -7,24 +7,24 @@ "age": [ { "recipient": "age14e2d2y8e2avzfrsyxg9dudxd36svm24t7skw6e969n0c42znlp3shffdtg", - "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSNFhWZTRlQUZ6YXVNZzNE\nRFVrTW1NU2d2SXZHZTJVd3ZSb2hKcDd3RmdZCmR4WG83emVYa1QxSlJSYnJTVnYw\nSXhjV2ZIQVlIbWs3bDZRaXlaeXpqK1EKLS0tIHR5NkFFenJqK1ZQa0RBMWNuQi94\neVFMaGlwdlRDa0ZHbTZxeWZLSHY1SkEKazWsoA+aF3g3ZelooeuqeQA53/N1eu71\nYWo7Zmzv7KbrRJXzNUEiByjMV2sDsHJyELO8CAKr7193cyY4UzTViQ==\n-----END AGE ENCRYPTED FILE-----\n" + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKVnlsWmJuSE1pOGI5cWE3\ndTJmZnNlY1dwZzg5MWVtL1d6M2hpd1VZL1VRCktvbm51Y2trc0JpQ1Nnd3lsWHBY\nVnlmWFFRTWkxV2pIcG9kbmlHTHQ4R2sKLS0tIFdCclVoR3RiV1MvTUJ3VUZtZk4y\naVN3ZnZBMzNoWGNFTGwwNVI3ekVLNGcKRmVz4g8e/AeX1Ra+WwAEwwp6RG8Ap78N\nLgOW4QSoxDnqjggxokOr9h5tvjZMjFMhc/ZFe49O42/tBj2Tz5qPzg==\n-----END AGE ENCRYPTED FILE-----\n" }, { "recipient": "age16pdhm238k63uye3rf4cwwe7ddyzds6xj9jv4wpsfggkghyarjqtsjzkxna", - "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUN2RWUzczbk5NYzc5bXI2\nQU5YcFlMWU1UV0NoTzhla3hIakd6ZUlmamlvCmZDWG91dHhWNVRpaUJPeFlqcVFO\nRVgreEhwajZMVE9nNTZpN2NtVjhkaU0KLS0tIElxZGtNR3lXbmxORTN0TTBBRGsx\ndllmOE94NHM3b1kyUVpueUlrM1JMTE0Ku4gXUodVqqxf/joVQqjA5RmYPWwNNCsC\niXNJZdUJLzh9xpaTTHLkEXFyxWmZ6gKCjoavLxLf03ReuJOJ5iBnFQ==\n-----END AGE ENCRYPTED FILE-----\n" + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCTUorSHZMZ0RkM3I3Syt6\nWHQ1NzhKNEJubnRydHVGUUt6YmxHOGZpL213CjIwWGx0NzArR0IyVncvaGg4RlZP\nWUlsUS9NUUIraVd6RCtNY3h6QUxqQWMKLS0tIC9hYmR2eTNlUGMrd0EvMFJrREhR\nVXlSMXFFMFYvcjgzOUJ6djRlbVRtRGcK+pEm+ibYOyKPOpFs/4hRaXVoJB2KH6mS\nWK1U3w+H57Ws7MnUsg3ESeOEjvaH0viGd1iEpHGK4BNTMYsOgS34CA==\n-----END AGE ENCRYPTED FILE-----\n" }, { "recipient": "age12tz2r7clep9e450qhr5a6ctnx29ywmu0llq8uk9kcwhpp82zsa0sk9la9h", - "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4M1FPaEoreE1yckhzZVpS\nVjJSNnlTQS9TNUVEWXIwaVJEWXNPYXFpV1RBCkhURHZ3dENGSXA4SU9LU3g1Y2cx\nWnhRRnpDSTZsYTJkNkpvNUpFZ2FhYWMKLS0tIHJma1ZhdHc4Qlhkbzl2VHFvcDE3\nQnlucHlmYWFhQmF4Sm1RaTk0WU91VmMKMlATZR0OXeJpvbVYBEsnOjq6hzr63MeM\n/esyDm57ZJ7Eqcuev+VjXaWNZZEuW+PQW9Ybct6NtEC6jH36m9za5w==\n-----END AGE ENCRYPTED FILE-----\n" + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWL1JhL0xUSlFNM1k1M21m\nSW1QUUVGT2RLZGRCMEk2QkdqM3VTc2tXTWljClJ6R0d4YVZlVDlsZ05kSjU4S1lM\nSWZzS3NidDZZNUFhemdwM3hZVlhyaWsKLS0tIEEyVTladHRlR1oxWTRnV0kxcEZu\nWkZodnBpc2RMdk1hRXA2ajczUE5vTDAKn4jcQf+/wqzn0syQooEj21AovUTB66U0\nCO4JXN8rWdjJamy5juixDWieIWoCbJzV/xJqMUi5L3rTSlxebW9yJQ==\n-----END AGE ENCRYPTED FILE-----\n" }, { - "recipient": "age1nzlng9tw59rxnr86jw330s9z4x28hr394cl2qgktptf8swat23gqahgudw", - "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlYXpxWmhqT3cySWx0ZDJv\nZUFkUzFmMjYwME9xb2UvMHBPNVZmZUVuc3hRCmFucldiMEJEelIvSVFZNmtERUVW\nOXBoK2VrcktzdytsTEZWTUkydXFkQzAKLS0tIFlQMmViSk1saUY3b3FScGRpYlFT\nTlg3Y2ovSTZMRkd6eXlTLzJYcmdMK2cKw6snshtmgbY3Inv4TCSYz28hwmG+W6qH\nPo6dl9h99tJRfG69VeOF+SMt/14N6I/fLqHn0e0mr3i34XV9EQx4DQ==\n-----END AGE ENCRYPTED FILE-----\n" + "recipient": "age1cqgjdpyf5n9nyusvcyl83l0gmn8sx3tju45kmp5yrfgmtfy5gvusessj83", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtTURiY1VsaTVYZUlKSUU2\nTnBacE1lVnhua1lZbkgvMTF0ZHhyM3V1clhJCjMxazhhY1Bab3pkRVNrQWZUMG96\nSkU5bXVKb0htdUJRcy96bFJTdGJybEkKLS0tIGZwZHNvbkVlYjlidUpaQ245WDhJ\ndXJGNXp3UWpiTGdmeWsvbHdBdHEveTAKEuZTunhoCWvR1hmBlatrruoX6ako/TsY\nCgXCYEw1KLOL+FKOX2jOGmTZ+jhxmUqstj3yIEVpVaGZqjHUcSsgsw==\n-----END AGE ENCRYPTED FILE-----\n" } ], - "lastmodified": "2026-02-27T07:28:25Z", - "mac": "ENC[AES256_GCM,data:QQpZUzMpnZFsNevQuEf+r4FXlCLFVAoXBfkxOYT8aOhWFLYVFm4W1wvkBnOn4UBtYa/mVadXkejzjfS2kLLt59nPx2gOjePGWCOuxzaSuipAZDP45bNsZpuMT8/KG+BOBjgSbhR6yyRAk6EFglJ5G5i15m3vag493kXxtYNs89A=,iv:m1SeK2OO6c33vJm6a7hGYRLTbszDqaY2CpLdXuHDqx0=,tag:ngNn/36Zzn2omb/091ZxBw==,type:str]", + "lastmodified": "2026-03-08T22:16:33Z", + "mac": "ENC[AES256_GCM,data:+3Y6ie/hbbu8eQEe6pA9aC/wj4vOrduJsrHUf4LZh+LXGarCj/VyspegrPvJRR2UZIGRDuNTxIfzfcufT4bKQdqjutO0++O8hh2EEoSvPzZQ2LEeVww8/rk0A7kkxctneBXDffU+Qyf/CNXozPLaSUv8cZXRBUTrfFaa0HVKWcQ=,iv:VcMZUfPS2KzlsWTkKhYCvc2NRlycz6yGNHCfGRKwlwA=,tag:i4a/R36/ZgOH+/QWwi+wxA==,type:str]", "unencrypted_suffix": "_unencrypted", - "version": "3.11.0" + "version": "3.12.1" } } diff --git a/secrets/restic.yaml b/secrets/restic.yaml index 110f5ab..ada9747 100644 --- a/secrets/restic.yaml +++ b/secrets/restic.yaml @@ -22,38 +22,38 @@ sops: - recipient: age14e2d2y8e2avzfrsyxg9dudxd36svm24t7skw6e969n0c42znlp3shffdtg enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1V3hSa0VVY1hLLzNEZkJw - OEp0THhMM3VMOWMxOGMxZjV6UVdJMTMrZzFZCnlrL0sveTBqL08zSUJDeVZLUVNO - WUgzZGhYdytRZ1FVa2N3Vmd4aEFnS00KLS0tIFJHMStGQ29pMWFGUno5aEg0REU5 - N1J1c3JLT2h1R25ZWVVoY3g3bzF4M00KW4YOac1MZEVvtlovVcEvVOGqnghq5JDF - V0uBNdqtYEyIBVCQI0gXebtNmtxkfg06PI4JdGiUkoUKW+ztIk4TsQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWNGZLR2gvcUplN0RZa1hu + UjlqVk5uS0Zab1dvTFlIMUFYWC9RR3d3YUV3CmdySXhUTENtdlRIMmlHbzJwQ0ty + NDM1STdOLzgvNERLZ3VPTDlIYkUwWEEKLS0tIEhqeTFGbXRhZGxQMkRlNGtCVHdU + RWZoNXVaQTgyb0xaQ1dOU2g0ajlvclUKWq8tL0XJSo8eemt+e3fYV3JykvKXDBq7 + 1BVzXzFgYpigPRY6JwPSLVkQpXuRyML3INEBU2uFo+C4BjYHzKnpVQ== -----END AGE ENCRYPTED FILE----- - recipient: age16pdhm238k63uye3rf4cwwe7ddyzds6xj9jv4wpsfggkghyarjqtsjzkxna enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuV1FBTGpKc1d5cjhRdUUy - MG8yQ3BqTTlsemhzWFBQTFR3UXV4SEFOaUhnCmE5ajdYaTRsN1BrY2JMYnBGUTZJ - VnFvS0gvU05mT1hzb1A4NU5xOXFMbGMKLS0tIGdOZDE5SVJXNkFhYmVUbVZ0UkNK - R2Y3NUdlay9LZmtHVCtSQm83bHBJWlEKCzXphy/+kQXUDIkhYDZ8oaQlenP3yfFe - RmPZ2/asS8Ol0xkJui54i9Qqvu+18VISJVHGqcaYw+YrQnCGRPP92w== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGRG1oS0hYYzJXa2xid3N5 + TlNKZ0xnYVV5RGFsMm5LT3dzVm9OSmtJTldvCjBoeVBaNXY5emRUZHM2RU9mYU90 + cmhOSWoyQmlTa2ZucXpvM28zVW1GVjAKLS0tIDRGN016TzdReHcwRE85T0l1aUVo + Y0p0YUlDTVRFY3lYa0gyYlpOaGxpNncKRkM/M75QPAWntvZWKv1FvgzHAfPlh7X3 + aX3sL05hEFHnHn2W5d+FNZuXpb+wO7pLqh+UW025cWZVGVO+Y+M21w== -----END AGE ENCRYPTED FILE----- - recipient: age12tz2r7clep9e450qhr5a6ctnx29ywmu0llq8uk9kcwhpp82zsa0sk9la9h enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRRzBPdGp2d0k0RzFWNE94 - dWRlVDRlTDMyclNMMnQ4UE5sSTNsRzdMbm1vCjZFZnEzbStzU1lyQ2xGOU5DK3No - RU5jTGJra0NuQWhxakVQMDZMRSsxcG8KLS0tIE9xOThadmRISWRLb2tmeGZqWkRW - RFRxbzdKa0MwRDlqOC9ITjBkSDV1Z00KI0Iq7DnOBGNmvx3RZvwdG4KYcKKgUQbB - myqlctokOU3cKkGLVdVn+dYUsYqU814oIAuwiqQmD7OydIqfhbSQVQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCRXpBbzZiT1ptRzgwZklR + RS90SSs2bVM3R1pNRitET09VWUY2Yjh0WjBNCm5qZEhnQWtZY09xTnRmK0xhMzVQ + TkppcDVJL1kxamNpd2hmYUZzcWdudmMKLS0tIEtQL2E0WnlSRmNZZlpZajJkVmJr + cTI1RmF4dDF1VWhEVHVuNzNCd0ptcEEKkhBXkFIzOspJobsIKglWjwCEUNNjuNec + 9wx0Bj3Bf3ld2wIIuTaJ6v9zTWbAJCM49FYROcFTJRtN0Qp+HbdTJw== -----END AGE ENCRYPTED FILE----- - - recipient: age1nzlng9tw59rxnr86jw330s9z4x28hr394cl2qgktptf8swat23gqahgudw + - recipient: age1cqgjdpyf5n9nyusvcyl83l0gmn8sx3tju45kmp5yrfgmtfy5gvusessj83 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRMEZML0xZRHFQdXJXVm1x - elFhWnorOTB4RXFES0VCZG1KZVBMeCtMd3lzCmJFZnpZT3BUeEVVaUJEeXc5djN0 - N3d0ZzJ0UHNFM0hpTS85T014VUwyY2MKLS0tIGVremFqNGh2YkNCWkNYQnNiRy93 - WS9RVW1VcXRXVjlaeE9ZNHhzaFdabWcKUbNHbMPw4O+sDjWk8ziRPoTRzzBF07ul - TRVXuiIAzfAXcf4Z9P5fyY0saPJhBijaurzdTD0JUP5LZh8jreWJRg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4Si9UNTRENzNGYnJ6R0dJ + Y2dOU1FLQWNXZHJNOEFjenptMk0rbUIzWHpRCmJ1OG9uTjA4bm1SMjhyQW83OTQz + YlYxV0IwQXV5b2J1d3lIckpXaWpBUFUKLS0tIFNHL2FJenI2NUtqSXY0NzZqcElw + ZjhNbmE4WVNJdUNzMzlOZ2dVVW5naVUKzhseAwIS25vYBUkNg5q9N18FKaej5s/P + XOgcd+CTLU115QcGCA7pPy+RlcjmGNDQA4CY+qDNGODkq7TnzFgYUw== -----END AGE ENCRYPTED FILE----- lastmodified: "2025-09-27T20:37:26Z" mac: ENC[AES256_GCM,data:30D/RyuIjhaJkRa4kBb3JK3FOGbbGL0aKAOlPgyNhpPyp7OWY1eYo2uoQSVa6lnjRgCV+YbmquXF6iNzUgWbzUWs6UuOfN+hIb/PKydBgITgVLp1bOfUQs8l2X2feYJ/QatBwr6VMgbBdrshppctSdypc9cTNv5r6sod0QwfpHA=,iv:uhwGM/bru/Z3UqnmOUHImhQkNm97zad+aH+VNXKy9m0=,tag:Zpdgcp2lPBNP4FjlTeXtKw==,type:str]