modules/cluster: add ceph

.sops.yaml

@@ -107,6 +107,7 @@ creation_rules:
       - *riscbert
       - *scrape
       - *sdrweb
+      - *server8
       - *server9
       - *server10
       - *spaceapi

config/ceph.yaml

@@ -0,0 +1,580 @@
+ceph:
+    monKeyring: ENC[AES256_GCM,data:yL2XY64t9qzVXNbqkmVA47X/uMu/nbCGZLek6U8YFZyVj8jFtGnjlR+dx9nT1jcf9Io/Ha8qSNKRse9xOhimVheyTfU2Yhxgc7/a/mizEWyqVx4=,iv:KRsJ/fGm/dj9UpD4bTDtOyD+jPChOtjvLHox8El7+kY=,tag:o0ZcqJMuezVldSBpS7fYtA==,type:str]
+    adminKeyring: ENC[AES256_GCM,data:laAVu9pZAEN9kx9jw5KRJYYCmWKhVajO7FBYaHrRe3PERQX4Nf9bigslHYwVXJLSvhhpvFl25Wk9eSGAImWlYdsduMVpeex6mROuaTZXutuBxZ3pyaXBDjR4WDvaD08hoO3amtZrMoiZ8j4n1Jz5mz/tHyS6L47sPd8v7d/8CZhrNpb6llPdtJMIzrBBjOeb0jxl//3GJz9bcxQzDR2ojVQIUF00hg==,iv:8QErXkqoY+mUdHYmxrpixzh3yXD171p3WHWzUbrcYeg=,tag:BDzZx2RtD9iRK5BB0XrkXA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJc0RTOTV0R1I1cnN1cGo1
+            bFg3enFPVFpldjVGNjVpdVBMQXRWMFBzdEdzClNxb1dMMklyMWtVN2NkblQ2K083
+            TnRCcXk1VWZyT2xGYUNISjZDaURHQ0EKLS0tIGNVWjZtK29iM1B3L1g0Mi80amdV
+            WWxCTTZoSkJOSjE2em9vSGhkRVQ5MlEKWRIvf0uyP3CgCoEKs0Mlsd2VpCZ2EYWY
+            mn00FNX12veYQItzmqX7YVk3igiyW00Qx6b9L9AUM4s/EANHzfbwgQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1y7lxpxskqclwqluft2ct2c3u8weehus6t8evwk7cdnpakxzgcquspn827x
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3ajVYZ05jWDdlL1F0dWda
+            NjArb0Q5UUNhRHJaSFJ1ZjBIQitXTlJYN1VzCm0vMnN4L3I2WnBwa0tEMlZhaVBH
+            YlF6anVIMjZjMlZrMDVSZnF4aUp1YVkKLS0tIFlTOStERm5DQ1M0aU5FOFg0WVl3
+            TmJEdmpWS1NNTVBHVjhRWi96Nk9BaEUKQcMP6O46yIE9IndeUcytrmFlj0N89PS0
+            MF73D6nqA+kGMeSk5NK16lu8GM2ah+xOuN5zn36E/daYFEzso6t4NQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1hfzpctkk5tz0ddc86ul9t0nf8c37jtngawepvgxk5rxlvv938vusx4kuc6
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBET0o2bTZKTE5DNWQvYksy
+            UjdyNk5hZXhNdmc5d1RWRzYvSlBLei9ueEVVCmNxZGhwZVkxUzlacUFwUnR3VS9a
+            TkpuamdKMnYvR3YxSmsrYnkvTVBqUE0KLS0tICtNV1pJdStQTUdQcjRGeFFyNFAx
+            UmQ3Z1pSZEdTSHUxRXpsZWFGWjc1VzAK5vz6K9lJsP4TPWkyT8klllC2Z1Tzujom
+            K5a2ePYymsSKuK2DeusFW94gFoMISXGQkjJuQn4pvUwFTzmm9u5HEw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1lccjvj9z8de4hfrdeumm9eu7awef4d9jygv3w7zdash3fhv6e53quy53wz
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArR3pVUkkxbnpWSi80K0d1
+            aFlIMWh4dmw2Sm0zcnpldCt1UW1OZVdwNXpVCklmOS9ZWFl5VFF5ZnZGdnh1aHpN
+            bmZsTDJmcFVLY0dEQVZBZlNTd3ZsTEEKLS0tIEdVSEtGREVGTmtwelcrYkRScGtE
+            aUJ1SFVUNmtOaU51WWNmRXNMVFVaT1UKX6hSJTGoSaBfBomKvAz0EfKqLovwkBG4
+            3ejcIO60f59uvMLizMZUr6j7SCS3WNBex3uauVaEJJadVVctkYni4g==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1dj0d0339f4law7qvuzcv2fs6sf8why63s3l8tja0f8vsj7wefcds9drvte
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxNk1XTHlMOEJCN09zM3Rl
+            VnJlQklIemFDNGpvSUJCQ3FpZmNtZnV1dDNNCnkrL0thSUlZaVRrOUw0V0hXdndL
+            NGwwVEwvVjBhRjFyalhrT1NVcDUwN1EKLS0tIEFNZU85Vm1WRlZIT0VaUWNRU01Z
+            VkVnSStFcGdIZjVEM3hCN0Y1MDJ2VmMKFfcSn3cKnBtYl657+G6R2mxABQVogUQL
+            EIOP2RzyzYcQ0e/cyYMmLJigu8JxaIKiFq/LPd+OVtAps8N2x07aWQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1j2euh5qt4a7cvx0t93uj4n9t8y8tkv9h3nefszc6g2q7t7gvngxswhrve0
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwU1pJY1hPQTVHVUorcnpC
+            UDU2Rnpnd3Z2Y3lSZFNmYnJxMklzZUU3K0c4Cjg5Vk5pRUlLV1hZbXlNc0NKTnYy
+            Z0hFdWZCVkdYb0pRaXF2Z2wxUEdZT2sKLS0tIFpNNFp0dm9SN0g4WXVLWG5QckJ1
+            aGd5NVFjK29Zd1QwR295c2I2L25XQ3cK4scPpkT15nMmMxIzRO/4JdMR7WffY6+O
+            9HMWokJoe7IWG9Mb4A9vITVOwzlgbxwe7KIj6ztCaLarEozw7lx0VQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age18h6vmfduhmj28wxdgur8wugn7scm5vwvwkj5sr4f7nl0czr2zvaqscsdsv
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEWitiNXVmYUJaS3QzNVNt
+            c3RBTy84T0w0VDBqNVY1MldYSXUwaEo0aWhnClRRQ3hHUTdCLzhNdENZTEdrUS9w
+            elVqdU8ydTBjdVp5NGt3OXlaZzMrMGcKLS0tIHZMajZqMXlIblJRVFhscTU0K3NM
+            Z2l4MmRJLzdIbW12M1F0RW9nTmpXQlkKj4ZyO3L9ShRV3aIZhvd7ZyJBJW4ev7WW
+            S5aqc3ykvwsjW1jUVmYtKG8gHqx4FEfFsEnVdqHWQW7zVPQX7NrWpg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1hg0mmua5y82ct7l6q9gpc8w940ce5seqcjhm4dgx7tlzvflznyas7v3hf4
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtRUhJYjZOU1hyYjJ3NmJl
+            T0JRUy94ZmR1NVV1ZHpETVpoN3daeVVjM2dBCkt4WGc1NzZIQm9VWFc4UjV4RXNE
+            elZqakYrSHU5aTk4UkNSZjNRaWVhQmcKLS0tIEp5TStpMWNBZHFEbXRrVkVUV0Rk
+            dnFDa1dhQmkvalFLRTJuMHg0V0gyQXMKHjh3bo+/gi2k9lnMXoamq0gvgDawirjj
+            0SgV9rha8RZaGy6JbW++AYIgpnVfc4NHXazpKKiGXiPt5qH/EGqSVw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1qe8wvy8kdmfdxh505apkqnnquqgtvykd6x6qlxmzqp93cv6wjy4qlu5mpj
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCZFpFSXBNL3JISzUwT2c1
+            elh2T1NhdFNzc2gwd1QrQ3lyYVNMSFUxaEFjClRIcE8zeXZhVTFBYVRJdnd0dWk3
+            R3ord0pyQ0xXbExxekFDWTZLaWpXS3cKLS0tIElzZmhoZ211RjFrc3ExQkVnTWlv
+            TXQ1OUs5eXQxdmxTdEMzaFFKRE83aDAKOhjfwTJTyQxgHpdkFXzRRgffgjeTvTrf
+            3wTWT0VVwim/MvNqyCcnecGBrO9MVX0t8gYxt3TmKhWot6AiqgXkLA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1726t33dl7pv3xrxxlafj2sexh7c0jm8pza84yu6l3wpz3fw5dauqxlass3
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwRkd6eU0wY2srWEhZODFp
+            QmJqb1VkZ052cTNISjNLY0sxS21IL3J6aG1nCkFSN3lZd2ZtRG5tYUNmczVJTHdh
+            NXNmRzVnaXRzeFo0ekE3MTJ5UFhoTEEKLS0tIHZqMVdpZkYvQmlwNXYrcExqREx6
+            bjVpem5Ib1JyMEIxb0N5djhRZ3AzOHcKjRNmVhQFjfXF8AHLv74jd+PnEa03lLWi
+            qauXxWOzaTtg93aap5M7gS8bchmJohBHYTlls74KkZgi+1ypwoUBhQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1av4ww0zzyas0egzwkpdaj4crwz3vwnhpq0nfez2zad4me38zss7sjz5kw2
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkWEtrTTArOTZ2VnBCNkYz
+            bmIwZDErM3BETFV1dHVxL3hwdXRseG9zdmpNCm1ocFpUK3lHa09iTDZNZkFQdEth
+            SnU2dWdWNkFFUHNhVU01WWh4MnM1MkkKLS0tIHBmMTZnMnZoK2ZBaklsb09GTWxM
+            QzJsUDNpV2F5dER6NzR4QjFTNVFDd1EKMzqx+QmdqTyau5wzLUmi1xt0Y8tqj227
+            y/yTJLUYEsAj2x7OOZWJVJaHW/FW04P805MxOW5BXofjHEesY4P9YQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age17rrjtdgzzwgjatyqqv27pftx42t8xhksls46jc3f78juzw4g04vsd7lr7e
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0aHZxbEtscDREWUlhNVlS
+            MFRoMkdSVGZJWHIvTWxOa1J4M055bTc2UTBNCkhDamFHSm9JODZmWE5ZN0dhMTZj
+            YlZibkVHT29NNDVkZEREdE8ydUIxMlkKLS0tIHExTkVwVllVQzBmRE5rYTBmaXVY
+            TUFIZGNqZEoxQzRvWEZtTUhRQmtIVFkKYxRyd/zSz5+pRmNGcwSKd8zaGQHg6uSU
+            mDhMeauxFQ/gbxCYK+/gKfabM9BTaLE3SlcNIkAhsuXJwE2G3lIyRw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1lkr5rkf3z0976g8snmznf755gnexhjkwpzsw8xxwyesqmneawa4qgsqx77
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoekljYWY0NWJOcisycTVj
+            VHAvNldUdHJmTGdsOGNlRjhRN2xscU9XOUM0CmlvUkg2RThhZTJkK2wwN3YrMkxW
+            cm5IcjFaSisvWkNSOUhRUUQ1bG5yclkKLS0tIC83Mjg0NWt4ZWRNT2dSS1c1cjZu
+            dnQ1YklpQzdDNkV3UkUyeWNUSDNhOHcK2oWZB/yDTS3s9V1+94Ln9EuifwQ2DZes
+            ZDKO785AMpIzxBlENLL6fjGRsciPAPywXuxeVDRbfvYFUy+d5T4N1g==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age12n5k6c4rxp4mjnexw9uw83yp34sallt44kldupfmxr2xkppj8a8sdsmv8h
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0SFpxWUNIanhFREh3eUx5
+            Q2lNb1Bhb3NSOS9RcExPWWtaaGlKVlArMWh3CnFYcmIzL0t4bDBua3NTVjhDMSsx
+            ZkF2QlNVdzBJaVdxQXo5MmsvSXZWMmsKLS0tIEI3bmp6dkJFUUFhbjJVZGkycDZh
+            TGRKRDZBY2NjeFZpVlFvcjlLVFdRMHcKU4rtWLFJrtr/TTLxeGnHosGw+AcCfVS+
+            A8NzNyjfxW7zetKHPJ25WPe2KdgHgjVQHTeBMj1ov+JJroWYi49jeg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1zqpep2vgfqeyvtj2jpxczfgrpjffwda429rnuztfp0vpqsrqdq8s8f4yua
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWQmdZd3RNd0ZkUS9kVmRF
+            UEFPWXdrQXJONkgvNFZmVWRTV2w3TjVGa0UwCmd0YWMvYTJsSWU1eGNjVzdRMGhX
+            S3NSQXhtOFZlTC8vd1U3MzdwdGpmNUUKLS0tIFR0RHl2QjlKUjd2U2JCaTJ0dVNB
+            azdlOGxNcGtkajNJSmdtbERKSmF4VzAKLEzjjAXD+Lo8re8ad4T5W8GGbAkx2CV6
+            TfXzNaVTLvd6F1SF795OH7QBoWvtwcZ/R27hJ7+kCN5tRW3BV5xVAg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1kk0thtx6mg5cs0gqm4ylc4r8w6klq660s3j04w7m8w0w084yrpcqh3tqwf
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6cHR1WVhLbjJSYmdpK3Ix
+            TGxkUlYvYk9yOUo5TUE5d2FFa2JKRklPRDBjCi9TRE5JajROeGVOQnpQaEJKRFpK
+            MUVSd1hGSTltQWdvc0ZNbDE2SGxnU00KLS0tIDRvRFY5QVFrdS9hZzFLb2ZXNnd4
+            UHZyV21YYitvOGUvYzV3aUlsMG5sMkEKP4wAOBvI/rOlQgk4lu47Lkeo1pFHEaVh
+            gstBiFsxvIF85VJLBKZJ8TCDIo+oGEjQ7yPcJ780l058oX7kwGoo/w==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1yahhqn2620300n20k68az5lr2u42wdgtjwysgqyr99a4cj52ay0qjw02pl
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsZDQ4dXMxYW42ckwzUElK
+            YmYyUTdacDdIaldvcmdyYlNyTG1nL1NhRnk4Ck9WSUFGY3VZTFVIc2tpR3VpM2Zz
+            OTFFNlpyMTJ4M29kZHZobDdWd0tjalUKLS0tIGdwdFluWVNYRmd5R2dTTWV0QXhz
+            M3FsVmp4NzZoMWZUejNCNVV6dGtNUE0KiagMg3brVB7PgAhLv2BRgjaNCPkCjE16
+            F5U/ooB1N4nKk4ZZMpPxQWV3sisgotrDV1DSFHkoKGl7aedIxEA3lw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1jt5pj0c0fvmzg7quaucq4n2rzcx9ajzstp8ruwc8ewjpay5vqfqsdjaal8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUQjh6MXBhaEJlWlNlTzBY
+            YlN0Ym0rcnhwbDhRSG01RnptN2N5NytuSW1vCnJwZFF5RFpWTjMyUzdwcjltNS9r
+            TDlmNFh6YU9EdktyRmhwcU91U1grRzQKLS0tIDk4NlI4RGw1K3VnZ3NjKzUxOGEw
+            UHg5cjVyQ1REdmFKTUdSdndUOFZ2cncK+J0JrI70J/gQMiQjVJNH5vVA2iVnrOWj
+            81hGV2W9YWAQ3F9MIdRe2eoqzHKLHNkCRfmvSX+JHzJtwPjdmTjScA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1px8sjpcmnz27ayczzu883n0p5ad34vnzj6rl9y2eyye546v0m3dqfqx459
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlbFpmakQxbGt2eUcraGZK
+            OUM1WVhGbi9WZVVRbkFHUnpTdkNnSXB0L0hBCm9ENDFyQ1pxdlBTY1ZiZzJvRFVq
+            bm5QZDgzdjltT09sVUhxOEVVRGhwZUEKLS0tIDFzQ0ZjeUhoempDdVBvdU0vQ0pm
+            K1BpL3JFaHZTVE1LV3g1SGVTOXVqdVEKEttNtYhaQpl3fwhAKSLcML1PcCcuoJiG
+            Rg9yTebNOYm+mHHiv+/xUhJiBCebnBx4xgrXRJeQHYJeGlofQ94dRg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1tnq862ekxepjkes6efr282uj9gtcsqru04s5k0l2enq5djxyt5as0k0c2a
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYTEUzdkJCazlSSjFpb2Zr
+            VWhJeGF3Q05BZ3RkOUx5eXQ0RmRaVWdyNXhZCnVOL2ZVVlV6WDJneTdpR3ZhTVFl
+            NW51OVdia2ZObUtNTmttNG1VQ25uRU0KLS0tIG9ObG5sNnAwRFF3YnMvZXh4dWlx
+            MlZSQUhnWE9PZVBJMHRyWTlMaTdIVHMKZk3KPtaP2ucY+8p0S0ktcBsrUEVwbJtN
+            Qkh/9mBeA7O00riqWZSnFYvbRuIARIWw0CUbHafwOTlaBxWK5EpQrA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age15nj7xkv7nrewxam4cd0uw6glxeh9xmq46lu4zdnq23trqch4pufqm9phq6
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUbVhzMHRSUElHK3JrSVZS
+            Q1Jhb1YzbXhnMm5ROVZ5Y2NVQmV1ZWxMcG1nCkd2T3BsUjQ2aENsQTh1UyttRy9D
+            c09MdUpaSU1RTlJ3ME1TMWQwNU1FMFkKLS0tIHVLVTFTSUIybFR3b28zbkZQNzAx
+            ZVFBTytiVlU1amJUdFZnS3NzWE1hbDAKrXp+TsNwAFIgD3Xk9O2KebADIEQr8Gxf
+            dbPQmoK88XYbfmRuLcYsn+cGgKlLaMfR4u/BxHYDj7wzZRt3bdMbyg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1cm0cjk2764s4pv5g7e67as34g9xtcltex96ga87wckndw62wqqlsvkscqc
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkU3I4OHFjSFF1RXJVdWky
+            Z2p4OVhMSk5taGRkY1RiaXlwSlFxNmJIbFV3CkJOT1pZUUtBaE5pR041MUFPd05P
+            MFRUc3E3ampiQTdhSW55Q0x0dllYZ0kKLS0tIFBsOUlvaW8xbDdYZkJUSVJIYlBR
+            MldwMHowdnVnQ292dmJaaitGUEh5Wm8KyKh3y1cq5XAi4+4Hj5shut1t3ac53E6V
+            4iHbiALKm8Rqs371w6K5852H6zNoLASvWx/qBb/j2bk29n2+MbR7Yw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1aw9s4kcd6ys64ddzzfya9ajzln2tv8pm9uvz6d85v0r6eq4dudqq5vts86
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuT2xONE43bWxtYWRFdnhi
+            cUtKM1JMQ2tjWjVUcE9XL3E5ckpjRjdCTWdFCjNkT2ZBVWI4S3kzUG03Q0VjKzdR
+            VlZaWU84WlczbG5WQVZhSWZyeFNlMk0KLS0tIFR1YlFjQ0RSTC9VMklUUmVsMjJ5
+            azNwc0lWTWk4OW5FZzhZaHVzdWdDVE0Khe/FMxu6nNuJ9ge6Vc/xHve4yE658U6e
+            9IjgRcaadtQq7kE+uZndHDVWs/L2b0UJA/9FU7iXNTAcq3tx4GhgyA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1jr5mc4ekmjf4uk2ue4xcuy0yl202phlu2t6c544qfj45ahzag56s4d0kzj
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZYlJuZ0dTblVlYm9rK0FJ
+            WktVL3EzNmtSSjc3WnFQV1NPRUdXZG5GWFJjCmw1N1hXajBySXB3TVBkalJHcHVS
+            UUVpb1pIVWNKeUtJWEhvcmlKOGU5OEUKLS0tIHpqQWY2T2M0Q2pqS1lwRUxvMFR3
+            cVhKTk9rS3FoUjI5N0N2YVc0S1NKT00KxSplVpSHY3EcQADlxI6PunTpo1COw0PL
+            1KvtyEdYOelYDgXRf/Up08dg/a4A6UPwn0b1TsEHAikiHEbjhYXm7w==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1dcpd6u4psq3hehjyjrt3s7kzmnvxd20vsc8urjcdv6anr5v7ky2sq9rhtt
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmc1pPcy9XNDdJSEZodkNR
+            dTBBRnNDNWo3TVcyOU05LzBGQWZsdTdrV3dvCkpMZU1rVC9MUzRkVlRWTUppWU5y
+            SUdwcW81NWNBZHh0eTRudmROWmNvN2cKLS0tIGE1Rm4xMC82TjJCc05NNjdqZTZK
+            cGU0Nm1xT1I3RXloMUtCczhBcnVDajgKbB0oUrO9UPrwuCNk2JVeHnv19n4fEGWm
+            0O6RKZyonRX03aUd5T9SQwuxG1CH5sFbyjRi4q8OU5K6+xR1vzeXGA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age15vmz2evhnkn26fyt4vqvgztfrsr2s8qavd2m6zfjmkh84q2g75csnc5kr6
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhUlEwTEtaMkVlMTV1TDZq
+            UmNiRDQ4c0crM2pVSm5LazluazZCeHlNa2dRCkdDMHZkUFdGTUZLZnRTNnlTSkE2
+            bXBTUWVRSCtuQ3BqSDF6alQ0SEZDLzQKLS0tIFRjalZ0VVU4N2JDM1VMMXRnY0VX
+            TDZ4Vi91T0Y4emdyZG1Mb1kxVCtza28K3BE9H+G5oGntLTAzPONdUhuIdqttfDyr
+            X0Kq+p6OoPLHcr0apareenF+b04q11KcuY987HmgiAk40oBGMWSflA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1xjvep7hsnfefgxvuwall8nq0486qu8yknhzwhf0cskw5xlpm8qws9txc56
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEZFREK2MwbmsyTENRcEJr
+            UGxPMHQxYVhKcE5oTlY5LzFiMG1kN05tcXlZClJFQjJyMHpmeE1FNkJ0ekYvVVk0
+            cm00Sys2YmhCOTg2MDFNSW54NW5CQmsKLS0tIHpTbGYrRW94anZpL0Z3akR4V3hH
+            eVdGekgwajRzNms1Rmh5SGV2VmdHUkkKxFhkSYnCDl4M83zwD6aF57B23GrYZITY
+            UseOE9meva2wfuheJUG/GRZsVEGNHhZKyMlIM/t9ZPo5Ze+3h4kG5g==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1cqeh03zq0hvz5l78r678q93ey5mlw49lqy4whvgqxgenudth7g6skee6kh
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPVGplanlhYndVbG1RS1F5
+            OFBHdmFsWDRKTVYwVitBbmYyRHdadmxGVTFvCnppYzdHeWdnZnFhblphNitQYTVC
+            K0ZERi9rVFJGeVhZeS8ya1FlcDUzWTgKLS0tIGIvbjBodkw0NXlnZHE3VVg0L0hr
+            aVM2LzNyaWFQYWpwT0M2VjRJWU54K2cKj/Lh9JDfg616mtRyJYwOSQxzdCE+YS1h
+            6BLN3mb/B7lY12tWHm3SlNIrjplhI5ZPPGCQp8pdZm4i9jzTvGgOag==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age18yxgwpakrkzq8ca2enayf79py25se3d8dsed2q523869re30jcaqx6rjln
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQK0s1UVJBVVRTdTB1R3o2
+            RkVXMHVhaTVNdmlRRXQrbHNzazdaRWFLQmlnCmVCY1VZZ3NJN2NHNFhpa3FXVEkx
+            UzNLSTk4OHFxUWtZc1RrZVVyTVMzeXMKLS0tIFc4aWJvUFlGQytCN1l1N1BlWXNI
+            YXJoeGZOL29rUHNCMDdEK1dGWWJGd00KpKEP+/W02UoL2vQMxRxXjjsh+aBpqrWR
+            HeleWjy6tz7mMaEtUgOuSE/YGExSzvF33oX0DiKVFI9dCkOvayVFYA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age14aq8fscrwkgmu5yv86vj7p7kmxclzs6dp7fpvdhvrnmce83ztphqc4mr9q
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1OHRaR25pSE1rcWxKVWRK
+            em1jRkNzU0lJcE1Pc3grM3A5UHhHVU1PbUhRCjc0WDNXQzBoZmVNVlg5dm9xdElE
+            UkUrYzg5LzVXWGg0N0tIMTZ1ZUlOa3cKLS0tIGErU01jOGRpZlRyeUNzMnBiVllT
+            MXZKbStHZU1kQmd3aUpaZVVkTUY3U0UKdVj+VpmxZ3fRp7gLbfslYmoMOH2tXK6E
+            sKqMrGBb+3GWVrg5x/l8ZYTObnUrrjOeLWEHp3pND1Ga86YnzSufqw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age13xhxqulvswuckmpkmy2fgeqd5jx0ar8e2hst33leljt69r6hsvnsrdw63k
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArem9lcGNjVDBpWVdFUGxS
+            NHNSMUNwYllKMFZaRngxR0txUlpyZXhiaVFRCnF5WWliZkdvTXJaWHJmNzBOamZD
+            T0I3ZnhpeTZaYnkreFlYMWk4cDc1RzAKLS0tIDVmNnZQTllneS9mdEhjOFdmMFY3
+            aEM2QTRLOENqeVRUZjRGa1JheGpGaDgKdE/bdferxAy2UnfZTQBLHZZSSLX8K/pL
+            xGOXzQ8K70/e/F6UyTInPVWCsxFYJqENQEvWz+PBUEhVrz+4+R5w/Q==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1xcj6peyaf5xvj2673vl9j0z7supwtw7hzuk782zk7gt69k2ykytqe65mg5
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6YU1kTGIxL3RkVUZpWnhL
+            cGFpb2RoZ0xvYUdibUk0a2VwWldoL1FqWW5JCld2RTVhU3NlTGhPaTZuWDVOZ053
+            Y2wyVWRJUldXZDZkUmtieGlPUlp5Tk0KLS0tIGVITHI3SXZ2VEh4SjhOeS9ENE5M
+            Q2JWU1NpSXNTM2UrR0dSc0tya1lxTmMK55D9JVQbacUdd4EdIcER5O/28QBCAmBD
+            Z9iSTSdDAHIFHvs8r2IsskKK7YbAMDUD0oOl9v0Js/Uyt9AQRxC41g==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age12hdk2stter0cjexxwx3sqn9wx3vmptkxszvx7knq9zgm9uqzjs7suvkcqu
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1ZnJIZFZtZUlMUGx1RGMx
+            V3R1cFpkd293L3QvNXJzT09ycDJIdHBhbXh3CmwzRU5xenRrODNyeWlWMnNicmVB
+            MTJsMHdJRWhEcmg1SmNmemt0V2tUS1kKLS0tIGFTWGdFZlQ3SVBYK1dkNWF4REVo
+            aWdMcUExa0NMWXErNHlvSXRQekVYYnMKcmZxAnktjHUMphddo6bzHSnFhODtyNWl
+            9yl+W9NTAr/2VIzu+oa7HkWr05MN0c6qT00n8tYjdCr6PZM6DRL+mw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1lga6hjmxa95fmtdn3frlmy64ej3hyswxrcuz25qvw0kfsxkqeugs8gjw8q
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMVGZHUlloYXd1RXlqQklC
+            RnpiSzRKSG9VcUcyeU05bU1GanFsNTE1b2swClpCVmpVMkJXQ1dlRW5MLytrU0Yy
+            MW1aNHRNK2hTNFNURHVTZVFzWHpFaWsKLS0tIFR4WkVUS3dRbytxSXlYQjdpV0Q0
+            MDVwL0orYUJzVEpVaTZzMmEwVkR2b3cK4ErvQ1VAXf77m+VSQIjn06GHFjJYQGqO
+            JFH8KobzRykLWZEKXZo+FT27YqglRowWEBclQJ+77ciGHSW93+DSLQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age148d87gqw59lmst5jv3vynhsu3tv4t4sj49s4lktvnplfcrjq2y5sjcwsu8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYbWQ1ci9FckVxc0UrYmZ6
+            Y0orUmRxZlk5NHZ6R1hTNUhGclA4SDZmU1RJCjA4UEc1cG1YWUJsRXRueDlLaXBy
+            ZXBJSitMNE9CVVgyTTBhWjRoWDNMcHcKLS0tIEloSUVSVWVhTm4za3F2eStHS1lH
+            K2lGYk52NWJ2Um5KeXQvYk9DWFZwL1kKdn/QyL1Defmq2+073eFNHUIuxt7biV6c
+            RL+A1n8DlR0SduY4Z81YYdAw+lldQJZVGOW0DfAHYEfs70Gc15mzfQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1p60rg45qrzpv2hcfzxl8d8k9afkk7dtrhr98cngeyuhlega83ynssmtx5k
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIZk9nUEZ1d3J6MXpKb2Zk
+            K0VSU1BiLy9qTVdjR1JtTXU4eUFzaFJ6RDFZCllkOUU1Y2hFbFdFQTRkVXl4eTg2
+            SFV3OFBETG1EejFYTENwNVkyOHNNakkKLS0tIDZYOERNQmdyd1RmMFdiL1BpR3R2
+            Z3FsbDVGR0hOYXJUY29FZnZZZGpWdmcK+6mfH1dbNW0eoqq6H5RfG3J0GLk2y6Y0
+            1aF70OEZQpnIEV/WGddT3RkeSyv3vObQhuSAsBlGeyPeNbZ+tmgldQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1makkpv2t74lxmw0nk6m89nespva7j700pmt83pl5a4ldtj2k8fzqakw8h7
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwY2pkVFMyOFVkMVh4UVU4
+            U1NnYTFxREs0eitCQmFYdXgwN1RnMkJzbzJrCktFME5Bc0hHZ1RHWkxMNVFDNFdC
+            V2xKaTNlMFBNNFZPTTNKMW1qdnk0Y28KLS0tIHJjalVUZWd1ZFFmalhvVXdFS3Ji
+            SHZYREVzY2dFdDNVUDJHb1lxMmErTFEKxr9zBJQzDkonHxvvoWwCn0zc909BdDPb
+            cErBHJifta6yYo1gC6RFw3dU6mcVJhWUoHTwfasN/bOgaUKgpem9Ng==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age12jcu0jtw7m96evxnd0vu6lvsm8uswslrdhxd2u655vjrwhljmqdsptry37
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2a2Y5U2t0a1cvb3lTelJp
+            MS9nbWF3VEVoZG1zYzFaUEFDa04zTVFKeUFzCmJZTElKUjZ5WDhHajJnenJKUE5U
+            UzBWQS9DVUt0eldpZTR4MkFMejU4VVUKLS0tIEN3UTZ6OEY0b3YxL0Q2U2JydkZD
+            TXQ2M053VjVrYmZSVE12UjNCWmw4ZXMK4dzqrEpfiNfcDvo9bXx24YbZyF2IFzAl
+            govLi3Jhwzdv1k9VGJO0LF+a8sHFz9TDUSnwnCT5CaEftJ27j+m4hw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age15vrlmtckjf4j242juw7l5e0s6eunn67ejr9acaztnl3tmvwpufrsevntva
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5bXZRUzZsMC85VHM5QWZU
+            OXJucDVoSE1qNWo1ZjZrMkZtbWNEdXZ4VVZNCnUyM1lPbGlQVHBwSjZDMDdrQW1v
+            eHRBQ0ZuL0pHUGFpQnQwazZnN09GZTQKLS0tIHh6OE1vbjdwOUszdWwwemVIQU1E
+            enFxWWVhZ0k4dGxMYmMxWHVwZkVJV1EK8hhfBdCL7tjOL9xyohgtUqBLQZ3U6TDf
+            TV9qKkkvgE9V6gkmrAdw6F5CvGd8YImAS/MW/hKOA3ldTz7Yvm76og==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age15qj8latetnrmgzd7krq02y65kn7lhq2pcwv8cvzej2783u5a9scqs79nmf
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoS214U3pRcUM1YVVBM2hw
+            MzBuS0ViTHJSL0JnRE5aWncwWStSanNjQXhnCldWd1Z2YXJyU3UyRHJZczBsMjRN
+            SVdRL1Q5YWVwSldmRkswSVM2dkJQM1kKLS0tIHBNK0l4OThqd00vTVBOQjNRT0pP
+            QUpzMFlyODBYSzFWUWlPbURiUDJDTncKl7mAejT5KqfXqRYvAwHrtQRXKoEkxHdn
+            Qd8A6BZg3VWPP9UtZ4RuEGN9AIF3sKHJQkKapfXxPVXAXer4hebfaw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age125k9uyqw5ae5jqkfsak4d6c6rcx9q63ywuusk62pmxdnhwzqxgqq2jsau7
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNUk1MZU55bjdhS2Nld256
+            SVUrVFJZbFVPdGRKVTJNV0NRTDh5NWlOTVcwCnUxTG1jREZITUtoMmFuNmUyYnRS
+            MkRmQjFJbnNacHJaMERRV1U3ZmM4QVkKLS0tIFJOQ0d4V2l2TFdxRHl0YWMyUTc2
+            Rm5yV1crRGhUSGJBQXU0SGswR2dHcWcKe/NK1pzFiZF9lM4K7Rd97XsNeQ4DrlNd
+            ee18FBZxN4NGlEcIOakFqCFIC3VQjARUb2SWrDyjZUD7700uP0LvOg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1j5csp5v5s2g8am47dd85kcke8986e0qc88f0vfgd3kmvwu8azg3smslk92
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArcFkyTXE0S3NhR0FISi9U
+            cmRoTEtUakh4bkZDYjFSVXVoM0lxNHdTbEVNClh5WVRRd3NQTFFpaXlvZ0QxZEsz
+            RzZxRk5sc1VHZXdjNkFPUXBPMTAva2cKLS0tIGNHNXA5Y1ZuZGYvaHpuOXJtcWkw
+            aHZRUFZvU2d2eXFEaWpkVjcrLzRVUVkKtu2p9WRwNmVbnd/m17VoAehbv9QspyyL
+            gpXeqhLD5TXUSiYldd73XHwAN1p1LtS1aQJHZ91dPgceIrYych4Bdg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1qjvds58pedjdk9rj0yqfvad4xhpteapr9chvfucwcgwrsr8n7axqyhg2vu
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqdkZranNNdWYrVHV0TVl6
+            L1REOWlqZHFvT25PMlF0OVIyYWV4ZUZjUERRCmNXSHZoUjNZanRBajdzVG4xMk9B
+            THRMcDN3VWdvZno3R0xTWFdvSjFXdzQKLS0tIHFobVVIcW44R0VJcjZnUDlIWUdq
+            S1JyZ0Y2S1dJbHJsbGt1MGl6Vm00RGsK/2HWfRtXqfGTzd1ynFk8DCwH7L7QrU/k
+            6YT9+1lHIEIOGEI9bpuQElwtVbvv6tYMsVyXSLujb6aSOH+uQa43vg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1kdrpaqsy7gdnf80fpq6qrrc98nqjuzzlqx955uk2pkky3xcxky8sw9cdjl
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSV2dMOS80Rm1JNjdabHRk
+            dlJtN2xVdUtJN0Fia1hSdjg2Rk9aNEl3UG13CjhXcHlPMSs0VTQ4YXpERlczRHRT
+            citCVnFHeXo1a3RFOERtMVBtVEs4QWcKLS0tIDlRd2ZXMWdqRm94SnZQRXlTbUts
+            OUwyRHY1S3pGYlNKc0RWL3M3L1NjNFkKfc/wYgZqeRKFkLQ1RCGsNcqhP20WmLQJ
+            RPR0A9nMHsOFjML59CdXatWz7YswgUokXlIeI0qJJN8+nHgIE6TsIw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-01-06T21:58:08Z"
+    mac: ENC[AES256_GCM,data:Zw6HzWSo4xnjZJQ9u1J08V/E0zoV4LGoKfY8WgRN5dS04LUxb+O0A5fFEwFTsGs5Ch0IA/0MJ6k4fqGkg97X18w0lK+TLlxl/tcjW1yA5ECbQhNKEUuSajw7rgDdqGGqxJ0BoGOH/Rv5I3VBstoSS6Ad4hmDnRuLiY9VpRYA+RM=,iv:CK0jB87RBsnIv3mOQs7fz0VjBYczE/unP6+14X90qCI=,tag:8SJ1a7Kd9mc7yfdIv/a1Vw==,type:str]
+    pgp:
+        - created_at: "2023-01-06T21:56:58Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA6j84+xkv3y7ARAA3zk9QugVR/Ppa+8wV2Q9PySFRcPSsBz40TZGDj/pFC+h
+            2muP7gjlcaHergiPkhab0xfORHGzZEML5ANnT5bAkroWuih6iMT+srBKCQVs/DmR
+            /ZBS/W+Wg4CV1Tx0bQA/u/I1nm5jJ07WDLBRtLMy1GRIbv/Fmrg2kEZlblzDiWjJ
+            3C0QAS7+iCf6+vv3skDEBnAEGeJ8uU7NubLsdXXd2ogFZw2UTfxIU01wTRtsTcXU
+            /S0MbQ7kQErClNn0T1HEEDFFGVBuQUmqPepAY8TleeEHTBbb5PHNBEtETEwHUd0U
+            GNBrYka1pwDD4CHMr+WKlpbAXg9Dh4ICLWpTahnd1cAKdqjsQaGpF0kFjRHI5IvE
+            Ji4zz2A82WUkXYFoi/UBQWFPn64TbFoqIXnAdWhJeheamenSCWI3zIyrEWU4eQsH
+            pME2ZtTOo6rxYpKwQLTMhH/dQsOb/4aIeohlh1ngiYNlXsdfJrzmpaFLHudMu+rQ
+            H82Zuu91ecKSnGfIfIweIibooc8aq6ZqWorhBScT/zd8TzM0nyIITXJZjHrAWgYK
+            uMwp3LedvsscGZ4lOSY075S+TdpPRyb5PC8iWvdDAPMcYMnkrqgW/hAj0PjUbj29
+            NWvn4oafx6mCwpHYcpxS1EBq1cjUfKr9hx8HJkIIhW4I/hVUjw21LUuCA37zVgrS
+            UQGI93c0WvmTAYRM6z66XwPP80GkFfGs62bDrIjtwa5D1QGf0GS1dhkXBe0Ttvtp
+            BjFJIty/v6zcmhyyI/K4Tlc3ARqVwcw1bDximACtjkrS9w==
+            =5RSF
+            -----END PGP MESSAGE-----
+          fp: A5EE826D645DBE35F9B0993358512AE87A69900F
+        - created_at: "2023-01-06T21:56:58Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA8zMZ+ak7y/zARAAhr3gPTQC0o2IUbZp1U6JqeSQ4HAfQgJYMQb31kWTH0Al
+            81nod6hWLE8EcKWo/ttdY0BigYjk6ncKSOwt8KMht4KXFPuoEIkdrPV2fo7Yq1Q3
+            tiETNW+nxvV8N2BK6XzDLES5wBm6aSWSvXZNtfoTvpO8JN4SdAtX0cF7dMQqOAaR
+            VK3qAhteoOhPQf8cbrY9kW7DYSgeslCSBLnFHJ7C1nIKkA5+0/+/98V0z3Q9SGpg
+            KOu+ZqEojX8Ug/yDvaTbIgvhTref0BVRg4gaS/RG5ScEQhAik04g2GnZGMgP3yOf
+            KZsos8Fl1u06xpn8MWTpr9eO3WNRVTiRtsMZ421z7qbimvfynlnG/bprZgjaE72c
+            GkPf5AzoO7ESyUpxkoj8yIjwj745xV0DdolVzaT1N0idKyj+9QOLLdjKXrlSyVVx
+            0OcM8bPD5wuC9mzJJk42x8tUol6MGr6GRcA8BwSbv+Z8FeTe3DF66BPqtoSLX2Qz
+            zhXLOnFaEb9U1np+mfOSLShtxSst5n8QSKEhcoFAo7gQOM8qo/qLBSQlQy3PgQuh
+            O0lHVj7zkI1nCaGPcwL3wLi/g5ILFZuusnjJ6Xgdp079lFBazBpaidNEpS4L4r2+
+            RW55WL+VWiRTL/RIr8pTE7SUVnZvBuSjcWtiqczH1zpZ1KPF5Sbr4lwbp9tvHn/S
+            UQG5ooxTWnwGE5Si3skuZ/rggmq8E34jv3h5hXyk9pZgv3ei8y+jiUDy/FHP/tqx
+            IYOXzn7DfGtmC9/p4yJBEbwE3Q8ICg7Vx/uEkmCv7w6jnA==
+            =5r00
+            -----END PGP MESSAGE-----
+          fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
+        - created_at: "2023-01-06T21:56:58Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcBMA45bZkLXmBFpAQf/dnQ1PjqfaXYjS93JaOgrdoHdP2f12G2gl6IDBL3ojSor
+            vzMKhvIig2IYN+N0r9pqWiRruslSGqr+4BsHe65I4KXlHKbsFzyE/t5ILlVdLQ3U
+            GtPxoB+Y74ynIb4Uqqxbu0ON4XPF+B6GoEX7+t3/3jsB30tdDPxFcmjSpYTj4zwj
+            Si4oD2KpQhOmxW8oG0WH9hoHnpyR/yF8PLk1B/K7BzRutl26wpnB8NOrko044pWT
+            0y+IbDzDid86Vd5J0saF9kOGcJ8C+CGlcEHBj41+9Crb75xMJnowYAOk/123F7uA
+            m4Tk/DG8S9KxYRXVKKxOX9UC6IylzHJf+bUXJePMSdJRASkdX4iQ8twuKeHbJGBT
+            TojEzlj6KAHgHzMR3wha4mb+59l4Ygd4CkVjPWnp2qUbp+PspYWhmU4aXBKo5seQ
+            4V19zew8vl0NQd7f8xvddlzV
+            =A9BU
+            -----END PGP MESSAGE-----
+          fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
+        - created_at: "2023-01-06T21:56:58Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMAwMCBBrc/JA6ARAAw2fEC4Fb+GZ49bNhqmM5jTxuz9ouOHvhxIiGKyUjoNgY
+            Lm2ryMM2x3WskosOiOL2De8rZAApdn/9V0ABw6YysYBTi9Jdn3ggm/ju3mho4ww3
+            5frbNlZUosEf9Z84FzExE9M7NScMeXrGAdluWHnM0OtZD3WMfrsbUcHTtRZNsukv
+            fMoU7qpcc+Bg5WZsC3i7dcptrqkQk2DloGdD5jfHpXNn2XnBFri8wCprhtt9ysUu
+            DqdJXoEZRy58Tq+dqTkEM0P7B0QOEJojjZf6cq8lMbfPaBdAFC5tQFmrgpapaqoj
+            n38408dq5demJZ2hcOsIrxLfQG8pnKHh0F2xNkrNtiMC2Os9SacZUl8IjqVwfdcA
+            oOLpIUG95xjncG3A5YLZSpR8iOlnGP1ZFddAr1nbObh7+3xA2HzIIj3Wx/BepUpL
+            /9aXshXL88hOYFFpZUqT+MeZyF3DuEWIcv5NOGaOG0VW6WzVwFYkTW9PDP3RJKbr
+            3+yrumB65w6/wnM4F7RDmfXx9B7APMfdrsDHFzs1wMYRITYt2yag+AH1Q6XXc1zq
+            qG/Jbvb4zvjffYKndwPvEfXtfHIcdkefxjAOfkra6+BLkjXuvFCrDxMCqyyWL7oL
+            heSJ/MUQuvgOxgujmG92L5YWQDiwUdJAGwEuAubqakwLoUK4jqEeq1eEc1j2jofS
+            UQGZm/G3qw1vZWYOc+g4YTovlVxj7C+c9guF2do6e5XsMJyCouymHlAQuDH3XrFX
+            Jk4pG8dpMnPpUm2T8C+YcUdLgRltrE/9wlNLFFb3V4ozYA==
+            =WnuG
+            -----END PGP MESSAGE-----
+          fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
+        - created_at: "2023-01-06T21:56:58Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA9XEenRNYVGHARAAsLlnEVjZIKz9iF66ZxzpbyxvpzkZYMRd0Yndkg7kJcai
+            m5uwRHOIIf04nvZmoldJOO02qEe5TVsPuWqvPWvA6BwoAm+W5Ylz2vl5kgEVQKF6
+            89Rr4Ta9pDjUjoE6lcxCkBjRyw8s5CTg367RU+pJzmlHHaTjGHXMyedWdp1Iap01
+            HmataEaNrSS8kuFCdDfLSRQUKcG/fx1zShuxdAzJdtATZz6CrQGAGkEt7krCh1uT
+            1m5sd2ZiHrUffRwcpSTk5895EKzBf0XBil2b71UFCRbJEXjpwrWHknbJMBjwdX3w
+            RokYfc0NS9TJBwPiYt8D9iXBIm8qK9VgNLIwwI34LoTXgHCRNA6Hdz/ZrUOZY5Te
+            dnJ86JzOooQYAgkTzelXk7r4wpMWnj79OwFqUlq7pueFHmGzi4M8+c4kt9G3YpBE
+            1SAJZE5hpB0mNcvon+kT3iCVR+WrVe33A8eH5IHYELjRAxM9V3K6ZoLT8RSUMBb6
+            cd2VUVRStgxgmvORiBYK5WkijJwiKOX1FMywuIgP41xBBoFiUMOtwDAIU6jc4SDi
+            GWVeZ2pyw+8PTgHKjFguo7IWgkpWzfaFoVaHfCkngUCoGVgmdZCanIzEHv69JYPA
+            dhecdPedONXmP+ofKOz4KGtkOJvfTBtgL3Grr2cUQh4V1bqvGhZWPhaqMNp6uf/S
+            UQFnyY8XI6aSQyACa5wsGvGeNc+YNzYKJ/M7cQ5iA3JSfdZQ834kYzWKnLYXiaOJ
+            sKDyufcLBhA39P0TiZeZsf4nqiOn6Kohxu5EZSbKHgOnjw==
+            =mkse
+            -----END PGP MESSAGE-----
+          fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
+        - created_at: "2023-01-06T21:56:58Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcBMA/Z87ylQaotQAQgAg9KJzooHHFWrfmKkYjRbMujf2SzBBOcwSI0ERt0mTAwY
+            UFfv5FtyrIRYoXcnTAJ+ejYIWvu25BOdzzvf4mJP6tB0P2sWlXFnfz6jqzAJbGOB
+            2cJYAZqDhFe4iwaRMz1JdXEZBxiOjinz/nYJvuLbOgqodVRdgAZ4bSJjQO2GHe9H
+            B/tXHZefhP3VAtAAxUIv99xNS0aSUZWNLS+wxmLESfXLKjB4FPPOS8RqVY1lMgXN
+            WZqIhqon+ptfpVUFJOchycVt+9SqeZAkNidv3TZkZOCJtcMlRp/jOR/RTwjqf9ls
+            F96Oj8yaLi181wF0CXDWu3kItDZMV8RcXU6jFIOZy9JRAQzYqf9i2VrE+jGj3lKX
+            0wyq8TkaAfFDIUDWAfu6zdx0Aec6qedtFqEDuGsXXgVx3RGWtAgn3pElReVIo7MM
+            Fh/p/FEh2HIuCcuX5m04FKna
+            =684O
+            -----END PGP MESSAGE-----
+          fp: 9EA68B7F21204979645182E4287B083353C3241C
+        - created_at: "2023-01-06T21:56:58Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA9qJIVK2WMV7AQ/9GD58kbeiq+vAxkzDD7Fj0cH9Rn2z3yxaafvWWJVDiF4L
+            BZFXb2hjj2EZApCYsV4MhIgYfo3ANIbOUSh342tePq+GYJE5Y4sd//RoNBW2vKNA
+            wwzuQyt9XIkTwPkEGk8YiTfcE5BD2Pv1nvPo5jd08max+4mTuat32DtfN2cDVXDd
+            +XCk/GrxayaD2j+3NUCnjPy3E5/MWNOpvUUNdF31xfpEmNJwJCv4CXEqvR2Eeha6
+            gWKoo7QWjod4pQIBW3NTstN3hX4fmdVz1RrdY2RdV27NrcWEOlNsVit7wUM2ZDjP
+            RlJL/Hg3A+LkV2VlLGsN2AT5kRvOxa2DJ5M1E/00H6cxd65cC9gIxJZ/6M6R08u6
+            O/Z0T1beeLfxgYWx35dkXO4VsVrnywgXPkYyUcEWNOwmJHp/1P3y5+oUgqvuQblo
+            C6LNbKXFiGYNelzBwKQXevPNSjlRqwroceY5wKjBtB+Hkmt/8g038+TDgJJuDNsv
+            Pii2hiZkS75tlk2V//uT7pHQ0nqVTgG/gcwbo3KeaMpRWFp7Pvaz7ILBlsa8UIu/
+            Woxz+p5Uc75Y578i7b15+k2Qb7qSK45K9wy5OswIu/IF0QBdHXOiUkCWIgSL9nCA
+            bl8/mt65PYbUcNKkSDn0fVP51rr/Peetst5/MaZC2fNHR3JdAm79TEs8XxEyf6vS
+            UQHItdecjgwp142hUBymLmtcAchD/lYqcaWWNEn6PLlomNl1I5W5eVhoITtxMzLj
+            U3Ay+ccedBGzV+Yh1Ow3+ohGe+KoHy8GjcL5i75thOw6Gw==
+            =5Wng
+            -----END PGP MESSAGE-----
+          fp: 53B26AEDC08246715E15504B236B6291555E8401
+        - created_at: "2023-01-06T21:56:58Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA/YLzOYaRIJJAQ//W45UZ+zeGCfmNfgSRjFQhaQmiyFZ6KMzefX2lqtp3iJ9
+            ChSA95MeEkR0PD9+Vti6jvMynoQZCx28FMrJeYIJ2L1Tnqy0y58WFrB+fwOSKWaH
+            N4K9FsRl/RpyrHPA2soZinUl6qii52Hv19E2zmrhlHM+gEMr3AmyAQebD/hgxHqR
+            4NRtAlKmXV9/u3OzL3e7UTFqZDNbfCiieOeZDGl/fy0Oe3C2by49V82n8ATlThrH
+            dMfzY7WVnXnlS6+r2xO/z0vCzCh+IVIRYYY+m132NfaPMfxHMU11hwXL5ijLXcjn
+            8IfUNQyDKTyXjV/KfBdRqrG+g2bDCzdk9L6o2eA6zIuPrHPGFExcsx20kzLI2qme
+            n2B1up34T7g+3SbXkT70QeQPDM3gMRtfaEBmNcI14ugYjyHp5vu7n1jF24yhCuHk
+            ZzO5kkTfJn7X1F011o9plnsV/0QD6kZHUbLQEFGk6SZgoAUVjAo7QuAoY0zZ+c0t
+            VSfCLuqpeGNjZPeO7XxQl1KAQHzXc3+Kbx9+yck1/HCjRsVF6OjDHwbvx5gPdGZ3
+            y67xL684mIG3GblMQyAKpy7tQ3uKbJsAqo+nWlFMvZZyrYHh/yJwx6V6tm/rsKso
+            eIZAK5D9ZbZuwhIArOxquciSjxnhZDngzf5990YDK5e/7N2nlXKZwFcsEWmoGq7S
+            UQF68uHv7AVJxGGcYPhaiIl3uXi3gwYfuxfeqbIuA/3bT5nGOC2gEKCnAFOGHo0d
+            TLQRtJyuvY3gYxOAO7FkC/Rp6bkRP377Yf0gVnVEd03NiQ==
+            =4bzF
+            -----END PGP MESSAGE-----
+          fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2023-01-06T21:56:58Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7zUOKwzpAE7AQ/5AZen+XOv2LprUqwR32EU1gmC0b9q8r4GpQLOVrrNQNP6
+            HhnKxM+Iv+paWCgrgHsKwa/3FVpX/GB41M3PTiHQkSpZ2ehVTzzAU0d+hvalz7b0
+            4hn06leRSSz4LQlY8jtifOTHrr4Lcv7WE4xVNHpAyc8haSTMEeZWnnrwlekdhk/l
+            bejvyFbbfnqhFljwC57o2o1e6yxbX9wKuG+VNMhOOqPamYvwxQ7aWf6Grkn1k+fP
+            QaWE9ak2YHG29hOOIrIAOQEGcAwLSCXqxtGVZFUMeziS0qKH5KiOMdYSjas75pQm
+            wiuax5GfO3RRpJZc1YsHcN06y1oGIgtvtsLg9s25vTXzVzwmfYJx+YOQmYJzyQPi
+            5FQxLHLvjPNBrEgET71NTm6zLa7AAiSUkaDugMCUad8q5fbux7KudKpjF7GX+0Fh
+            /f1bVN8HKpvTedcaoj9+xHiny07a7hXUhjamvapQzUwRpRYqEGtEXRPbx6XeMQ6x
+            C8ZifwuuVnQqkZdKaFluItUYSBTEqQg66apyFYMTNPUm7OVDrNDNHLlVV7Nwp/WZ
+            TxWYWnhoYvD4GZ+TyardjMv3BBnNkeAUEn3CNaJNZTC9KisqXFvm0gg8AB58ePCd
+            umLXhz+BnYR0e+SH5Zs36FMkFw/nSMTUz18cn3I8JDKZs2QBxq/GT50XLPBVY7nS
+            UQG6eZgPduvZ7j7NsPPUlaNSq4dr+c/NTt8aHKNE07PxaDLQmVivRYhcC4UurPEY
+            fc6lQqsvk1S23dJwSswscb3kBo32iGAniHaBU9KELoGMhw==
+            =Wi88
+            -----END PGP MESSAGE-----
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
+    unencrypted_suffix: _unencrypted
+    version: 3.7.3

hosts/server10/default.nix

@@ -1,4 +1,4 @@
-{ ... }:
+{ config, ... }:
 
 {
   imports = [
@@ -57,6 +57,7 @@
       mode = "444";
       path = "/etc/machine-id";
     };
+    secrets."ceph/osd.4/keyfile" = {};
   };
 
   # static list of microvms from other sources
@@ -65,6 +66,13 @@
     "staging-data-hoarder"
   ];
   skyflake.nomad.client.meta."c3d2.cpuSpeed" = "4";
+  skyflake.storage.ceph.osds = [ {
+    id = 4;
+    fsid = "21ff9a57-c8d1-4cfa-8e01-c09ae0c2f0e3";
+    path = "/dev/zvol/server10/ceph-osd.4";
+    keyfile = config.sops.secrets."ceph/osd.4/keyfile".path;
+    deviceClass = "ssd";
+  } ];
 
   system.stateVersion = "21.11"; # Did you read the comment?
 }

hosts/server10/secrets.yaml

@@ -1,4 +1,7 @@
 machine-id: ENC[AES256_GCM,data:Ix/XS0rRXZhWePe41VmMarJ39a/f1kjz2ZALwWGzKa4=,iv:36fENZzal9gR/3DD4CVDq3yMmLr0rxtbMKaRDGH1Kpc=,tag:M/UmDJD0obr2wh8AnjrMSA==,type:str]
+ceph:
+    osd.4:
+        keyfile: ENC[AES256_GCM,data:msufQ5p9VVopAcvUcv5ziotUse2r4DO/BoKX9g6ZBNvlhnHJhxJhfA==,iv:CKPh7ILd9BqOXG6cAxSGVfHVCRSVv+rNwYtmBWg78KY=,tag:oylaYBS69HYZn8907Apdfw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -23,8 +26,8 @@ sops:
             UzVHYmRsUlhpeGJUQXlXOUUzRTdwNDQKhA6vI08t3YIYVO0Wi/gvJ62RYSym+gsh
             HKGo+MeKg+gRTDi7LQAPi/DYIiXoNJFuRj1OxFKsqCin1wElEiRmdA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2022-12-28T00:41:54Z"
-    mac: ENC[AES256_GCM,data:tXurnfoPGW/4T9CJVTKL0R30Z4evl4lEabOZQbXjkbpS1bisaQ5b3s02mYwrv38NDaxgxxolUn0ol6Tbdi1UF/FxQInG7nM0FU0s+yVOhhJR4dFsR37UXAh+mTWxk1leX8GH4N1dfDWtHpOnaGqydZ9L0BlB7iQaEBvNK68glwg=,iv:zB4NK/n5QrWlalFvafAAaTAw9YWaN9b+P7r+vD1EapU=,tag:3QHjMhj9WbO70E3qFUK/kA==,type:str]
+    lastmodified: "2023-01-07T00:22:48Z"
+    mac: ENC[AES256_GCM,data:jaVrE7H3QO4+kvo7/rO6of8YnxGL67Ey2dIwfa3hpl2WDSwdmIOsav3F9BqTbYKw/MH8BeLb0skEosmoJY/991C8j2B5RNTiEIOJHVakxhRzo0vopBu33Q4C59/zOlwqqJEPRUvwhr5VizZ8HshUApOxpDbDBlBEZNXj1i2N2zM=,iv:emsmabR65nNVoKRBAJMneiIdkJIcL2g1aiV8m8PmMDY=,tag:cs3nrvcutdQUJE027wm/6Q==,type:str]
     pgp:
         - created_at: "2022-12-28T00:41:47Z"
           enc: |

hosts/server8/default.nix

@@ -44,9 +44,24 @@
       mode = "444";
       path = "/etc/machine-id";
     };
+    secrets."ceph/osd.1/keyfile" = {};
+    secrets."ceph/osd.2/keyfile" = {};
   };
 
   skyflake.nomad.client.meta."c3d2.cpuSpeed" = "3";
+  skyflake.storage.ceph.osds = [ {
+    id = 1;
+    fsid = "4b196252-efb6-4ad2-9e9b-cc3fcd664a3a";
+    path = "/dev/zvol/server8_root/ceph-osd.1";
+    keyfile = config.sops.secrets."ceph/osd.1/keyfile".path;
+    deviceClass = "ssd";
+  } {
+    id = 2;
+    fsid = "b860ec59-3314-4fd1-be45-35a46fd8c059";
+    path = "/dev/zvol/server8_hdd/ceph-osd.2";
+    keyfile = config.sops.secrets."ceph/osd.2/keyfile".path;
+    deviceClass = "hdd";
+  } ];
 
   system.stateVersion = "22.11";
 }

hosts/server8/secrets.yaml

@@ -1,4 +1,9 @@
 machine-id: ENC[AES256_GCM,data:Ko/LrndeWRgHEhDKMC7k/6nRbZWowjA/fJXBzW2jLTI=,iv:wdexRj+zlYZ1NkS4MjQvbh28iE6UCUgDqvTeEfxyY3c=,tag:GSdZ0FhBS7PBfG4OfNiCkA==,type:str]
+ceph:
+    osd.1:
+        keyfile: ENC[AES256_GCM,data:p6ic3dssOo45ArTtX1HfbxO1NrpGjDIGrQHgcAouwucUP+oSWU3ZPw==,iv:g7mzt74BJ7I19QmwYmdeN2dlB+WSkC0Enn3odvU/nKY=,tag:Q0bf4yEkbvYbuT1A6gRTcw==,type:str]
+    osd.2:
+        keyfile: ENC[AES256_GCM,data:PwOm1GNXLUYVhjoTQB1Ne/X0J1OUeUBk3ucGJv2qgbgpJUH6sXR/Ng==,iv:q7JUhvn2jeyT55/DTepQTa4ocXl1zN9SdzKz1CO/XEE=,tag:lPsfERwCcfyjvaCWEd4e7w==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -23,8 +28,8 @@ sops:
             bWl4MTZUak1Bb0JWRXhRQkR4ZUFnNHMKvKQnoxb3IC7jW0P/zewbR68yJI8Uzz7U
             iPaL8MoOlmXPu5dHBSTwn39CpFR6bPxIDMHUn+y9gtCUrbIIJQAaQQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2022-12-27T23:54:21Z"
-    mac: ENC[AES256_GCM,data:XKBsQ2dhGT+ifU2EoCONcFpPtVzU0q+GkRn52EfwfjnGSRWggv2CZT5CE8vWpM0oDtsv7FYClmyXxDssBLCY3KmkGW39BXf4uTjg1WQItlfcK4iRqBwa/2xdVZEXhs+PvhnBBe+nzHMVGz0l8tKgK9SSt8GooaJjrugZbcLPg2s=,iv:AgHjkh/pTKRcczCMnMlKlY9X/LWHp5oiImcA1MH1Ei8=,tag:L6OFg3Vu9G1Lec0LkdjpHA==,type:str]
+    lastmodified: "2023-01-07T00:24:35Z"
+    mac: ENC[AES256_GCM,data:SIUoQ94/cy5Jsi/q3Oft7+tTONl+xyrLaS+QFdFgedQRQPo1VQwFz3ATlescjMkkEl/rrFwaY83D1f1ISRz7wcSwo6Fb9ZAzxYpBlDkC4BKdtTWr/BycFyIXjSD34i8olBSRl9js65J1WHOxtgFWprHn7F12L4y9wasqCCkQXd0=,iv:0lJ2qtO8Q/DjafZNKMYg7f7C+bqp0ylLD2Zscfoefew=,tag:h2o/nuO40CiMUwRYlZvdyg==,type:str]
     pgp:
         - created_at: "2022-12-27T23:54:07Z"
           enc: |

hosts/server9/default.nix

@@ -1,4 +1,4 @@
-_:
+{ config, ... }:
 
 {
   imports = [
@@ -52,9 +52,17 @@ _:
       mode = "444";
       path = "/etc/machine-id";
     };
+    secrets."ceph/osd.3/keyfile" = {};
   };
 
   skyflake.nomad.client.meta."c3d2.cpuSpeed" = "3";
+  skyflake.storage.ceph.osds = [ {
+    id = 3;
+    fsid = "54d56ab8-fc43-4e16-886d-3c82dcc1f8fe";
+    path = "/dev/zvol/tank/ceph-osd.3";
+    keyfile = config.sops.secrets."ceph/osd.3/keyfile".path;
+    deviceClass = "hdd";
+  } ];
 
   system.stateVersion = "21.11";
 

hosts/server9/secrets.yaml

@@ -1,4 +1,7 @@
 machine-id: ENC[AES256_GCM,data:YIOQJ21rswp+TE6sEKdNu0gP4iJ7K9ohrdXJRi5POoc=,iv:0Qd5ukdhpqQxrE60I7AVX7/U7oOsMvE7lDVXsB4d290=,tag:JbdNljkMRgjvPdxyUhXuIw==,type:str]
+ceph:
+    osd.3:
+        keyfile: ENC[AES256_GCM,data:jz+zGf9sRCjxxHHa+5FVOjIS3S2xXvLr4CoOdnLDQIrQypT8p9rbcQ==,iv:QoCCR8EhcYZqGgT512ou8CyPXR8qGUvfmTqaoAXLLpc=,tag:LcFl3qc3W0BSlXMClfQvyQ==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -23,8 +26,8 @@ sops:
             dU1TaURPUWFOVW11bVNtd2J4OFhDMVUK6YIU1s2aPhY3HL9EFrzcuRoFObiLjc/t
             HOFh/iFJd6fFPia7HYLYyJ1bv6Blcz9K6I5i9Ptb1AM8RUrBWC7BGw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2022-12-27T22:16:28Z"
-    mac: ENC[AES256_GCM,data:HYNf9KMRrLu+o7KuV7OQ7ixz0LDjy5YdHywNYBpkSuCaTp5RXgjJWnuHA5E3lqZmXj1gm6wUmZPA0fsvmBfXVNhdkMVdn2WSk5H8ED/ayMw1Th6g/0MlVYYMWOPvGKY7ZgydiexBJHuqBMznCkSyT1AzGxDu9yVaWXUTkMiaHFY=,iv:iBT9vCi/K8Go85/6Kgp294h2R4QXFKNZJX8yGW2MfU4=,tag:z+Xu9bnLxtqfK+G9e+o9nQ==,type:str]
+    lastmodified: "2023-01-07T00:23:15Z"
+    mac: ENC[AES256_GCM,data:SaOmnwmKjGmHZbcSBaDM2QK0+s68+2PmRe1mkLBNjAANTRIK9djxxXpBf2cpk7FAof+BNRJUa3Mcmy3r1b+LPBrzxK0aGLwRunN+Vc8xGMYQhJObVHbcwQkJg490dHW+jZ6vROxunwghq0/sAeKUbRgCf64TpbBgFt2DRMz1mIM=,iv:kKCEWzQvgXPr7YVtjCwp4ld2mTFD29kQov2gotH400c=,tag:cByRU1D529KZCFuc3pXOHQ==,type:str]
     pgp:
         - created_at: "2022-12-27T22:59:15Z"
           enc: |

modules/cluster/default.nix

@@ -77,6 +77,27 @@ in {
         source = "/var/glusterfs-big";
       } ];
     };
+
+    storage.ceph = rec {
+      fsid = "a06b1061-ef09-46d6-a15f-2f8ce4d7d1bf";
+      mons = [ "server8" "server9" "server10" ];
+      mgrs = mons;
+      mdss = mons;
+
+      monKeyring = config.sops.secrets."ceph/monKeyring".path;
+      adminKeyring = config.sops.secrets."ceph/adminKeyring".path;
+    };
+  };
+
+  sops.secrets = {
+    "ceph/monKeyring" = {
+      owner = "ceph";
+      sopsFile = ../../config/ceph.yaml;
+    };
+    "ceph/adminKeyring" = {
+      owner = "ceph";
+      sopsFile = ../../config/ceph.yaml;
+    };
   };
 
   systemd.tmpfiles.rules = [

modules/cluster/deployment.nix

@@ -50,7 +50,7 @@ in
         tag = builtins.replaceStrings [ "/" ] [ "-" ] (
           withoutLeadingSlash mountPoint
         );
-        source = "/glusterfs/${config.deployment.storage}/microvms/${user}/${repo}/${vmName}/${withoutLeadingSlash mountPoint}";
+        source = "/storage/cephfs/microvms/${user}/${repo}/${vmName}/${withoutLeadingSlash mountPoint}";
         inherit mountPoint;
       }) config.deployment.persistedShares
       ++