From a4ab740d07706d86503b84d36addcbbbf7a4944b Mon Sep 17 00:00:00 2001 From: Mel Date: Fri, 1 May 2026 18:40:37 +0200 Subject: Re-add simple VPN and simplify module with shared users with tunnel Signed-off-by: Mel --- secrets/secrets.nix | 8 +++++--- secrets/tunnel/ingress-key.age | 21 --------------------- secrets/wg-private-key.age | 21 +++++++++++++++++++++ 3 files changed, 26 insertions(+), 24 deletions(-) delete mode 100644 secrets/tunnel/ingress-key.age create mode 100644 secrets/wg-private-key.age (limited to 'secrets') diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 7332beb..c56e2bd 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -42,15 +42,17 @@ in fourmi ] ++ allAdmins; - "vpn/ingress-key.age".publicKeys = [ + "wg-private-key.age".publicKeys = [ truite + taureau + taupe ] ++ allAdmins; - "vpn/egress-key-taureau.age".publicKeys = [ + "tunnel/egress-key-taureau.age".publicKeys = [ taureau ] ++ allAdmins; - "vpn/egress-key-taupe.age".publicKeys = [ + "tunnel/egress-key-taupe.age".publicKeys = [ taupe ] ++ allAdmins; } diff --git a/secrets/tunnel/ingress-key.age b/secrets/tunnel/ingress-key.age deleted file mode 100644 index 2e83ec2..0000000 --- a/secrets/tunnel/ingress-key.age +++ /dev/null @@ -1,21 +0,0 @@ -age-encryption.org/v1 --> ssh-ed25519 xiGqLQ p1N3PDNDTnCAkqZhUMOr9urq1VMWTEGxjFHwiDdcvmE -5NYgD3rhnkiHD26WJ9wp4GmpBjk0zr2QlPUK/uL5Mnw --> ssh-ed25519 ztr2Fw AQfk8kKe/3C4ukzkir+pbZrkmnefZY6NB21D0aqQbn0 -j6Lnoon4j9EWtCB1wTziaul3tfKAIX7QmhmPodC6QXg --> ssh-ed25519 lYrVNQ VahYJ6WbeVgKSz/FTrhVlS1pXZpNn97L9ErHaD9onAk -19sDuT8hIQmhcP8FuF03G5wH6CJYUfE181gXzPWAzrM --> ssh-ed25519 COVM9Q aLRtcxGWCoohk/yDdwOIuT67CTVUnip/KeMsgJa3RGo -Bhpi0biJRONWe/c3g5xb0vky+aRcpDGsw/6S4epaE4A --> ssh-ed25519 nsdjwQ ZEI8BxBnTZLWDflnJNUGajWhZsEzcf76mcJ5WnYmBQ0 -3paoPQPbApCxN4/4lg+BCPmfTjzSZ74tbDdPskfvaCc --> ssh-ed25519 aV3pTQ prqqDR4/NFtVW14bqOYQWo/TWA9o/53oWi9wV1cKqE8 -9OjIrwI2MV1QIogbzahvYaSMB/oB5O5obAyCAiyAoAQ --> ssh-ed25519 jWuO5g hT2kzw8vCmMYK4FUnNn+NUBeRoGHTSaw14w8gb3ET2I -eXbhCji05+0KAB74+r6ZszIy/iOYCOLsmjF9Q9XiNjQ --> ssh-ed25519 77YXTQ FiTDgl4Sc1gQya5+wzeVc16QTigKTHYwVOgK5sdVW1I -69qWGBuDiAXOM3413frPrccPXJOxBq9TZnpiCcMFbZw --> ssh-ed25519 5yNkVQ sHxSA0EI58e5bNiREh5si92aDyti0wBrtavfTkth8ik -Dg5+vGoFwLyG3Oxl6yBV6QVWQxoJl8ieuRcHAnaHZ8o ---- keoCBDjcgb4VUtjzo/YD++ZS7aVYj/iyOdgrd5+2LHE -+ø”1péÃ[ÈzÞ'yäS<|Oá”–";@ké;y£í¦³­zfÊK¿Y{À<Ò7O5XÐh%âEº‡RÆRÊ‚kžÝ$ \ No newline at end of file diff --git a/secrets/wg-private-key.age b/secrets/wg-private-key.age new file mode 100644 index 0000000..2e83ec2 --- /dev/null +++ b/secrets/wg-private-key.age @@ -0,0 +1,21 @@ +age-encryption.org/v1 +-> ssh-ed25519 xiGqLQ p1N3PDNDTnCAkqZhUMOr9urq1VMWTEGxjFHwiDdcvmE +5NYgD3rhnkiHD26WJ9wp4GmpBjk0zr2QlPUK/uL5Mnw +-> ssh-ed25519 ztr2Fw AQfk8kKe/3C4ukzkir+pbZrkmnefZY6NB21D0aqQbn0 +j6Lnoon4j9EWtCB1wTziaul3tfKAIX7QmhmPodC6QXg +-> ssh-ed25519 lYrVNQ VahYJ6WbeVgKSz/FTrhVlS1pXZpNn97L9ErHaD9onAk +19sDuT8hIQmhcP8FuF03G5wH6CJYUfE181gXzPWAzrM +-> ssh-ed25519 COVM9Q aLRtcxGWCoohk/yDdwOIuT67CTVUnip/KeMsgJa3RGo +Bhpi0biJRONWe/c3g5xb0vky+aRcpDGsw/6S4epaE4A +-> ssh-ed25519 nsdjwQ ZEI8BxBnTZLWDflnJNUGajWhZsEzcf76mcJ5WnYmBQ0 +3paoPQPbApCxN4/4lg+BCPmfTjzSZ74tbDdPskfvaCc +-> ssh-ed25519 aV3pTQ prqqDR4/NFtVW14bqOYQWo/TWA9o/53oWi9wV1cKqE8 +9OjIrwI2MV1QIogbzahvYaSMB/oB5O5obAyCAiyAoAQ +-> ssh-ed25519 jWuO5g hT2kzw8vCmMYK4FUnNn+NUBeRoGHTSaw14w8gb3ET2I +eXbhCji05+0KAB74+r6ZszIy/iOYCOLsmjF9Q9XiNjQ +-> ssh-ed25519 77YXTQ FiTDgl4Sc1gQya5+wzeVc16QTigKTHYwVOgK5sdVW1I +69qWGBuDiAXOM3413frPrccPXJOxBq9TZnpiCcMFbZw +-> ssh-ed25519 5yNkVQ sHxSA0EI58e5bNiREh5si92aDyti0wBrtavfTkth8ik +Dg5+vGoFwLyG3Oxl6yBV6QVWQxoJl8ieuRcHAnaHZ8o +--- keoCBDjcgb4VUtjzo/YD++ZS7aVYj/iyOdgrd5+2LHE ++ø”1péÃ[ÈzÞ'yäS<|Oá”–";@ké;y£í¦³­zfÊK¿Y{À<Ò7O5XÐh%âEº‡RÆRÊ‚kžÝ$ \ No newline at end of file -- cgit 1.4.1