buzzrelay, caveman: setup caveman-sieve

hosts/buzzrelay/default.nix

@@ -21,6 +21,7 @@
     secrets = {
       "buzzrelay/privKey".owner = config.services.buzzrelay.user;
       "buzzrelay/pubKey".owner = config.services.buzzrelay.user;
+      "buzzrelay/redis/password".owner = config.services.buzzrelay.user;
       "restic/password".owner = "root";
       "restic/repositories/server8".owner = "root";
     };
@@ -32,6 +33,10 @@
       hostName = "relay.fedi.buzz";
       privKeyFile = config.sops.secrets."buzzrelay/privKey".path;
       pubKeyFile = config.sops.secrets."buzzrelay/pubKey".path;
+      redis = {
+        connection = "redis://fedi.buzz:6379/";
+        passwordFile = config.sops.secrets."buzzrelay/redis/password".path;
+      };
     };
 
     nginx = {

hosts/buzzrelay/secrets.yaml

@@ -1,4 +1,6 @@
 buzzrelay:
+    redis:
+        password: ENC[AES256_GCM,data:wYPztbjCe5rBvygF9b4emHWl5GSdRO1Tnq1m7P9GgWg=,iv:34IZVSf3KlozSDAlIr8Vfsc3anRhyYAks+gTX3nax4M=,tag:vp90sXYHMh0WIYLgxQi1bQ==,type:str]
     privKey: ENC[AES256_GCM,data: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,iv:g/jQ0y1QplX3i3yt7bO3l8BFvjN6+Lut8jGMVPx2IsY=,tag:ikfdJWcr/nDK8Vcf0M+WZA==,type:str]
     pubKey: ENC[AES256_GCM,data:6FLafeSuL8wyHTKfchqaQl3teJ02dTxegqr1HQoQuJHxyagjHMPZekxzrNBojlre5KGjvtcuXoQMcDgPIfsswNmjUiMs9nCZwFQynX8UeCDL15mH489juApclAKSYJBiOnR8UwUj+Zz0YKqX6yNKxnDEoXq2Av9fVGqCM2BSBw5yQEsuQ8Q81SyhnQxikWlolnzfy+Q100VK+fEB+4gohXIZ1TFvPL98t5ooJcb11OKgqOrYf7WurrUjXNrxn3nDlkA2IE2jrLdy2o9H9gV0tugjmURMz4iRX8j3Z60vaEN+2rJBKDx5pVY9rseWkqVTBY2+wNyQ02fethxWtQ5+a3SkwucMSMwsgopYhn1Z0meWbZKC6B68DScmhV0X7ZiB3pJG9W71XCYrMb9FfE1TEbDc9Kq0eqw6xFWt9jSzFKtoAO+Z6wAfbr4ION/EzE5gTq+UIhUCmXyySrnYbL18JPsq/JDCSMCkFqXTC7jy9pWzcIdqZMDJM77aCv9bhK0Gc1mMNjsXv/cD2bld6RYmLSttVTv/Jk48gmzT2qufA0mxa4mNv5lB0rXmcrkglH1O6XAwhR+CJI0xwzsISO5CpSodQWDsQUdg0wVFsGeGQVlXDVcXDPFZTeTh0DS30cGhbyaqsU/z19gy8Ze3juuaI1CKqpS+zw9DJhsgNJ2vGvzEYyxwydoDDMA5BO29mnh0NIUosRM3f7egonA1mOAhMlQoiYyqKMIsi1w/RDN6uNmivoWEhmvj1zypObmLZOJBsazNOljVXSx+MAwYkhJxeV/jEUSLx6PISR2ZytN64YlsuqKnRPdixmW5bIdX8T251EY/wNUPmcN+eC8EcHtYeFiV1DyBSbOrhrcDw0xUskKkq46ay4Mm2Yyy2eI9vvnI7CEU6YzGiXUqKC1yTjNJEYNnMXiv5QZByah53b19K0d3xcqcG8brriNaV3V6jFS7gS5u1Ftts8p5+MHP6cwgjEVe9jglUG3WnDdDfP8CebgXmUDAmVZb+sOeA2o97t82IPepel6wiR7q5tHwZBLYPPJK37mvyJHNc1j7B6CWnjk=,iv:57uSeefhjsCXsqhIR1mOESsyCHMOxVAsmksnRQDOPcQ=,tag:9QE59kct+B+2iFLNBxkPxw==,type:str]
 restic:
@@ -29,8 +31,8 @@ sops:
             THRRMnkrWTZOU2pONytuZUVMUkVnR2cKuM2E6N7MFziBTj1E4I805xewCbpAPoEc
             hHKpdrxso5Jj3IkCD3RzbeVpS/ZTDG3z2DIvkEabN7q5DmyM8Z05rw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-08-08T22:28:00Z"
-    mac: ENC[AES256_GCM,data:cT4c7y9mIX1GSytBp9gcas7Q0JN08D+uKIZdBXWbnzxDEvKWZpMRprSn6o2RiCzrIgka9bqcaYnTCWC14S6PwEUYRq0JpYffS8hVaBISIJbS4loxgzxjkOLArJ3Xsbxxft/6cy/iCeEjDT3hNvateZ/3XUGAZ+AnKl38YIjsEM0=,iv:DkPiXMH6azpOrsdCckyerjIIffKTlzT4WplrbzpJCdw=,tag:jhnrwroeFcCOnH/Qkf6zlg==,type:str]
+    lastmodified: "2023-10-12T20:47:18Z"
+    mac: ENC[AES256_GCM,data:7jVdDUL60WP28tZo2U1SMzB78+R3ljtUAicBE4ReOa2xKXo0j3uCNXf/M8sBFcGNIJpkcSIi8Mh2nYmOAR6fmzJNo7kImBS70jxYRKd4hl2kFNy3BiynyKpopWB+TLnQgYJ1tnRxwuqCYuTOGRYhVAuaO+0WYUSpMcj6W8wTfMI=,iv:HSas86SdBfVPXntJhIygMAriYRZKRlbUpAA+388RFCs=,tag:jed9Un4i1+yOujL8NoUmLw==,type:str]
     pgp:
         - created_at: "2023-08-08T22:43:25Z"
           enc: |

hosts/caveman/default.nix

@@ -14,7 +14,12 @@
 
   networking = {
     hostName = "caveman";
-    firewall.allowedTCPPorts = [ 23 ];
+    firewall.allowedTCPPorts = [
+      # telnet
+      23
+      # redis
+      6379
+    ];
   };
 
   services.journald.extraConfig = ''
@@ -27,6 +32,8 @@
       "restic/password".owner = "root";
       "restic/repositories/server8".owner = "root";
       "redis/caveman/requirePass".mode = "0444";
+      # Must be readable for DynamicUser caveman-sieve
+      "caveman/sieve/privKey".mode = "0444";
     };
   };
 
@@ -63,6 +70,10 @@
             );
         };
       };
+      sieve = {
+        enable = true;
+        settings.priv_key_file = config.sops.secrets."caveman/sieve/privKey".path;
+      };
       butcher.enable = true;
       gatherer.enable = true;
       smokestack.enable = true;

hosts/caveman/secrets.yaml

@@ -5,6 +5,9 @@ restic:
 redis:
     caveman:
         requirePass: ENC[AES256_GCM,data:08V/ZSarIx+lpGSx5Su0A4Jveejxi83+jj1+Wcqf+nY=,iv:lm412YmiV6rVn5LGx1O5/kCGO457yohieu+UgB5b230=,tag:4cQ7mIlxJh7rGMZqmGIPMQ==,type:str]
+caveman:
+    sieve:
+        privKey: ENC[AES256_GCM,data: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,iv:QzyXJA9TdFIWnQsK0X426vnoBVn+a7jp51jzKzWXBow=,tag:vHatuf24eick+oKrEonadg==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -29,8 +32,8 @@ sops:
             Z2ZSNmsxR2lQZWpLeDdqVC9jTEJYVW8KtES5IHyQyMs4MuaGrEt724cQf935ISl2
             QE+Fpkg4Wb+8gaBA0H6bWzq0OLuaIVzgK5BEoY1YThD6kKbBxTcDww==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-10-12T20:36:22Z"
-    mac: ENC[AES256_GCM,data:iA/zgY74/ql3lMvSIhbqu5T2PFDhRjLdV25MDC9Rszyiv0wdSNGL+UGQfx86LZCtMVRxL2XovWovx7G/pDxTuh5Y8CC+TLTwKXbJyGkFBaHySOJpGZVEaybZ5sISoI7PcruvGc5y2nKQZgwEiQ+i1Gm63SgSVMBMjz/+JUj7FHU=,iv:NRjuFr2xqS5nDd2/bSGGXNqDcLyTNWwP71hiQnbgTvc=,tag:p3YkOpUr7k9bVVCyVOvOJw==,type:str]
+    lastmodified: "2023-10-15T21:57:57Z"
+    mac: ENC[AES256_GCM,data:AejSERpk1n5j3n6kedAfb2/KMbdSl26wbviZoRbJyWv0Nagx6DhUCm+okv1NhXNyAk1AMyBGxX6iSuqxV7Av74axjx8DBTcDArvipsJ5TJ6a5i7WjoTi2lRNAjpOhoSnaiDOZ7dgoQ+itbjr683pWLhA9PssyBYRoAsdfhE49Jw=,iv:ssk6/GSa+gDbwNBaOnsXCsOEtNmP0HgebgCmmV8GBC0=,tag:5Jx/HkUtW4HjzMeMTAdDRg==,type:str]
     pgp:
         - created_at: "2023-10-12T20:25:31Z"
           enc: |-

hosts/prometheus/default.nix

@@ -88,6 +88,7 @@
          targets = [
             # caveman: caveman-hunter
             "${zwNets.flpk.hosts4.caveman}:9103"
+            "${zwNets.flpk.hosts4.caveman}:9102"
             # caveman: caveman-gatherer
             "fedi.buzz"
             # buzzrelay: buzzrelay