From c9316ac41c6ea6bc2c5b3133d28433e9695f4b1e Mon Sep 17 00:00:00 2001 From: Astro Date: Sat, 7 Jan 2023 02:54:35 +0100 Subject: [PATCH] modules/cluster: add ceph --- .sops.yaml | 1 + config/ceph.yaml | 580 +++++++++++++++++++++++++++++++++ hosts/server10/default.nix | 10 +- hosts/server10/secrets.yaml | 7 +- hosts/server8/default.nix | 15 + hosts/server8/secrets.yaml | 9 +- hosts/server9/default.nix | 10 +- hosts/server9/secrets.yaml | 7 +- modules/cluster/default.nix | 21 ++ modules/cluster/deployment.nix | 2 +- 10 files changed, 653 insertions(+), 9 deletions(-) create mode 100644 config/ceph.yaml diff --git a/.sops.yaml b/.sops.yaml index 1046c743..8b428987 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -107,6 +107,7 @@ creation_rules: - *riscbert - *scrape - *sdrweb + - *server8 - *server9 - *server10 - *spaceapi diff --git a/config/ceph.yaml b/config/ceph.yaml new file mode 100644 index 00000000..633532fd --- /dev/null +++ b/config/ceph.yaml @@ -0,0 +1,580 @@ +ceph: + monKeyring: ENC[AES256_GCM,data:yL2XY64t9qzVXNbqkmVA47X/uMu/nbCGZLek6U8YFZyVj8jFtGnjlR+dx9nT1jcf9Io/Ha8qSNKRse9xOhimVheyTfU2Yhxgc7/a/mizEWyqVx4=,iv:KRsJ/fGm/dj9UpD4bTDtOyD+jPChOtjvLHox8El7+kY=,tag:o0ZcqJMuezVldSBpS7fYtA==,type:str] + adminKeyring: ENC[AES256_GCM,data:laAVu9pZAEN9kx9jw5KRJYYCmWKhVajO7FBYaHrRe3PERQX4Nf9bigslHYwVXJLSvhhpvFl25Wk9eSGAImWlYdsduMVpeex6mROuaTZXutuBxZ3pyaXBDjR4WDvaD08hoO3amtZrMoiZ8j4n1Jz5mz/tHyS6L47sPd8v7d/8CZhrNpb6llPdtJMIzrBBjOeb0jxl//3GJz9bcxQzDR2ojVQIUF00hg==,iv:8QErXkqoY+mUdHYmxrpixzh3yXD171p3WHWzUbrcYeg=,tag:BDzZx2RtD9iRK5BB0XrkXA==,type:str] +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: + - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJc0RTOTV0R1I1cnN1cGo1 + bFg3enFPVFpldjVGNjVpdVBMQXRWMFBzdEdzClNxb1dMMklyMWtVN2NkblQ2K083 + TnRCcXk1VWZyT2xGYUNISjZDaURHQ0EKLS0tIGNVWjZtK29iM1B3L1g0Mi80amdV + WWxCTTZoSkJOSjE2em9vSGhkRVQ5MlEKWRIvf0uyP3CgCoEKs0Mlsd2VpCZ2EYWY + mn00FNX12veYQItzmqX7YVk3igiyW00Qx6b9L9AUM4s/EANHzfbwgQ== + -----END AGE ENCRYPTED FILE----- + - recipient: age1y7lxpxskqclwqluft2ct2c3u8weehus6t8evwk7cdnpakxzgcquspn827x + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3ajVYZ05jWDdlL1F0dWda + NjArb0Q5UUNhRHJaSFJ1ZjBIQitXTlJYN1VzCm0vMnN4L3I2WnBwa0tEMlZhaVBH + YlF6anVIMjZjMlZrMDVSZnF4aUp1YVkKLS0tIFlTOStERm5DQ1M0aU5FOFg0WVl3 + TmJEdmpWS1NNTVBHVjhRWi96Nk9BaEUKQcMP6O46yIE9IndeUcytrmFlj0N89PS0 + MF73D6nqA+kGMeSk5NK16lu8GM2ah+xOuN5zn36E/daYFEzso6t4NQ== + -----END AGE ENCRYPTED FILE----- + - recipient: age1hfzpctkk5tz0ddc86ul9t0nf8c37jtngawepvgxk5rxlvv938vusx4kuc6 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBET0o2bTZKTE5DNWQvYksy + UjdyNk5hZXhNdmc5d1RWRzYvSlBLei9ueEVVCmNxZGhwZVkxUzlacUFwUnR3VS9a + TkpuamdKMnYvR3YxSmsrYnkvTVBqUE0KLS0tICtNV1pJdStQTUdQcjRGeFFyNFAx + UmQ3Z1pSZEdTSHUxRXpsZWFGWjc1VzAK5vz6K9lJsP4TPWkyT8klllC2Z1Tzujom + K5a2ePYymsSKuK2DeusFW94gFoMISXGQkjJuQn4pvUwFTzmm9u5HEw== + -----END AGE ENCRYPTED FILE----- + - recipient: age1lccjvj9z8de4hfrdeumm9eu7awef4d9jygv3w7zdash3fhv6e53quy53wz + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArR3pVUkkxbnpWSi80K0d1 + aFlIMWh4dmw2Sm0zcnpldCt1UW1OZVdwNXpVCklmOS9ZWFl5VFF5ZnZGdnh1aHpN + bmZsTDJmcFVLY0dEQVZBZlNTd3ZsTEEKLS0tIEdVSEtGREVGTmtwelcrYkRScGtE + aUJ1SFVUNmtOaU51WWNmRXNMVFVaT1UKX6hSJTGoSaBfBomKvAz0EfKqLovwkBG4 + 3ejcIO60f59uvMLizMZUr6j7SCS3WNBex3uauVaEJJadVVctkYni4g== + -----END AGE ENCRYPTED FILE----- + - recipient: age1dj0d0339f4law7qvuzcv2fs6sf8why63s3l8tja0f8vsj7wefcds9drvte + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxNk1XTHlMOEJCN09zM3Rl + VnJlQklIemFDNGpvSUJCQ3FpZmNtZnV1dDNNCnkrL0thSUlZaVRrOUw0V0hXdndL + NGwwVEwvVjBhRjFyalhrT1NVcDUwN1EKLS0tIEFNZU85Vm1WRlZIT0VaUWNRU01Z + VkVnSStFcGdIZjVEM3hCN0Y1MDJ2VmMKFfcSn3cKnBtYl657+G6R2mxABQVogUQL + EIOP2RzyzYcQ0e/cyYMmLJigu8JxaIKiFq/LPd+OVtAps8N2x07aWQ== + -----END AGE ENCRYPTED FILE----- + - recipient: age1j2euh5qt4a7cvx0t93uj4n9t8y8tkv9h3nefszc6g2q7t7gvngxswhrve0 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwU1pJY1hPQTVHVUorcnpC + UDU2Rnpnd3Z2Y3lSZFNmYnJxMklzZUU3K0c4Cjg5Vk5pRUlLV1hZbXlNc0NKTnYy + Z0hFdWZCVkdYb0pRaXF2Z2wxUEdZT2sKLS0tIFpNNFp0dm9SN0g4WXVLWG5QckJ1 + aGd5NVFjK29Zd1QwR295c2I2L25XQ3cK4scPpkT15nMmMxIzRO/4JdMR7WffY6+O + 9HMWokJoe7IWG9Mb4A9vITVOwzlgbxwe7KIj6ztCaLarEozw7lx0VQ== + -----END AGE ENCRYPTED FILE----- + - recipient: age18h6vmfduhmj28wxdgur8wugn7scm5vwvwkj5sr4f7nl0czr2zvaqscsdsv + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEWitiNXVmYUJaS3QzNVNt + c3RBTy84T0w0VDBqNVY1MldYSXUwaEo0aWhnClRRQ3hHUTdCLzhNdENZTEdrUS9w + elVqdU8ydTBjdVp5NGt3OXlaZzMrMGcKLS0tIHZMajZqMXlIblJRVFhscTU0K3NM + Z2l4MmRJLzdIbW12M1F0RW9nTmpXQlkKj4ZyO3L9ShRV3aIZhvd7ZyJBJW4ev7WW + S5aqc3ykvwsjW1jUVmYtKG8gHqx4FEfFsEnVdqHWQW7zVPQX7NrWpg== + -----END AGE ENCRYPTED FILE----- + - recipient: age1hg0mmua5y82ct7l6q9gpc8w940ce5seqcjhm4dgx7tlzvflznyas7v3hf4 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtRUhJYjZOU1hyYjJ3NmJl + T0JRUy94ZmR1NVV1ZHpETVpoN3daeVVjM2dBCkt4WGc1NzZIQm9VWFc4UjV4RXNE + elZqakYrSHU5aTk4UkNSZjNRaWVhQmcKLS0tIEp5TStpMWNBZHFEbXRrVkVUV0Rk + dnFDa1dhQmkvalFLRTJuMHg0V0gyQXMKHjh3bo+/gi2k9lnMXoamq0gvgDawirjj + 0SgV9rha8RZaGy6JbW++AYIgpnVfc4NHXazpKKiGXiPt5qH/EGqSVw== + -----END AGE ENCRYPTED FILE----- + - recipient: age1qe8wvy8kdmfdxh505apkqnnquqgtvykd6x6qlxmzqp93cv6wjy4qlu5mpj + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCZFpFSXBNL3JISzUwT2c1 + elh2T1NhdFNzc2gwd1QrQ3lyYVNMSFUxaEFjClRIcE8zeXZhVTFBYVRJdnd0dWk3 + R3ord0pyQ0xXbExxekFDWTZLaWpXS3cKLS0tIElzZmhoZ211RjFrc3ExQkVnTWlv + TXQ1OUs5eXQxdmxTdEMzaFFKRE83aDAKOhjfwTJTyQxgHpdkFXzRRgffgjeTvTrf + 3wTWT0VVwim/MvNqyCcnecGBrO9MVX0t8gYxt3TmKhWot6AiqgXkLA== + -----END AGE ENCRYPTED FILE----- + - recipient: age1726t33dl7pv3xrxxlafj2sexh7c0jm8pza84yu6l3wpz3fw5dauqxlass3 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwRkd6eU0wY2srWEhZODFp + QmJqb1VkZ052cTNISjNLY0sxS21IL3J6aG1nCkFSN3lZd2ZtRG5tYUNmczVJTHdh + NXNmRzVnaXRzeFo0ekE3MTJ5UFhoTEEKLS0tIHZqMVdpZkYvQmlwNXYrcExqREx6 + bjVpem5Ib1JyMEIxb0N5djhRZ3AzOHcKjRNmVhQFjfXF8AHLv74jd+PnEa03lLWi + qauXxWOzaTtg93aap5M7gS8bchmJohBHYTlls74KkZgi+1ypwoUBhQ== + -----END AGE ENCRYPTED FILE----- + - recipient: age1av4ww0zzyas0egzwkpdaj4crwz3vwnhpq0nfez2zad4me38zss7sjz5kw2 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkWEtrTTArOTZ2VnBCNkYz + bmIwZDErM3BETFV1dHVxL3hwdXRseG9zdmpNCm1ocFpUK3lHa09iTDZNZkFQdEth + SnU2dWdWNkFFUHNhVU01WWh4MnM1MkkKLS0tIHBmMTZnMnZoK2ZBaklsb09GTWxM + QzJsUDNpV2F5dER6NzR4QjFTNVFDd1EKMzqx+QmdqTyau5wzLUmi1xt0Y8tqj227 + y/yTJLUYEsAj2x7OOZWJVJaHW/FW04P805MxOW5BXofjHEesY4P9YQ== + -----END AGE ENCRYPTED FILE----- + - recipient: age17rrjtdgzzwgjatyqqv27pftx42t8xhksls46jc3f78juzw4g04vsd7lr7e + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0aHZxbEtscDREWUlhNVlS + MFRoMkdSVGZJWHIvTWxOa1J4M055bTc2UTBNCkhDamFHSm9JODZmWE5ZN0dhMTZj + YlZibkVHT29NNDVkZEREdE8ydUIxMlkKLS0tIHExTkVwVllVQzBmRE5rYTBmaXVY + TUFIZGNqZEoxQzRvWEZtTUhRQmtIVFkKYxRyd/zSz5+pRmNGcwSKd8zaGQHg6uSU + mDhMeauxFQ/gbxCYK+/gKfabM9BTaLE3SlcNIkAhsuXJwE2G3lIyRw== + -----END AGE ENCRYPTED FILE----- + - recipient: age1lkr5rkf3z0976g8snmznf755gnexhjkwpzsw8xxwyesqmneawa4qgsqx77 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoekljYWY0NWJOcisycTVj + VHAvNldUdHJmTGdsOGNlRjhRN2xscU9XOUM0CmlvUkg2RThhZTJkK2wwN3YrMkxW + cm5IcjFaSisvWkNSOUhRUUQ1bG5yclkKLS0tIC83Mjg0NWt4ZWRNT2dSS1c1cjZu + dnQ1YklpQzdDNkV3UkUyeWNUSDNhOHcK2oWZB/yDTS3s9V1+94Ln9EuifwQ2DZes + ZDKO785AMpIzxBlENLL6fjGRsciPAPywXuxeVDRbfvYFUy+d5T4N1g== + -----END AGE ENCRYPTED FILE----- + - recipient: age12n5k6c4rxp4mjnexw9uw83yp34sallt44kldupfmxr2xkppj8a8sdsmv8h + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0SFpxWUNIanhFREh3eUx5 + Q2lNb1Bhb3NSOS9RcExPWWtaaGlKVlArMWh3CnFYcmIzL0t4bDBua3NTVjhDMSsx + ZkF2QlNVdzBJaVdxQXo5MmsvSXZWMmsKLS0tIEI3bmp6dkJFUUFhbjJVZGkycDZh + TGRKRDZBY2NjeFZpVlFvcjlLVFdRMHcKU4rtWLFJrtr/TTLxeGnHosGw+AcCfVS+ + A8NzNyjfxW7zetKHPJ25WPe2KdgHgjVQHTeBMj1ov+JJroWYi49jeg== + -----END AGE ENCRYPTED FILE----- + - recipient: age1zqpep2vgfqeyvtj2jpxczfgrpjffwda429rnuztfp0vpqsrqdq8s8f4yua + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWQmdZd3RNd0ZkUS9kVmRF + UEFPWXdrQXJONkgvNFZmVWRTV2w3TjVGa0UwCmd0YWMvYTJsSWU1eGNjVzdRMGhX + S3NSQXhtOFZlTC8vd1U3MzdwdGpmNUUKLS0tIFR0RHl2QjlKUjd2U2JCaTJ0dVNB + azdlOGxNcGtkajNJSmdtbERKSmF4VzAKLEzjjAXD+Lo8re8ad4T5W8GGbAkx2CV6 + TfXzNaVTLvd6F1SF795OH7QBoWvtwcZ/R27hJ7+kCN5tRW3BV5xVAg== + -----END AGE ENCRYPTED FILE----- + - recipient: age1kk0thtx6mg5cs0gqm4ylc4r8w6klq660s3j04w7m8w0w084yrpcqh3tqwf + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6cHR1WVhLbjJSYmdpK3Ix + TGxkUlYvYk9yOUo5TUE5d2FFa2JKRklPRDBjCi9TRE5JajROeGVOQnpQaEJKRFpK + MUVSd1hGSTltQWdvc0ZNbDE2SGxnU00KLS0tIDRvRFY5QVFrdS9hZzFLb2ZXNnd4 + UHZyV21YYitvOGUvYzV3aUlsMG5sMkEKP4wAOBvI/rOlQgk4lu47Lkeo1pFHEaVh + gstBiFsxvIF85VJLBKZJ8TCDIo+oGEjQ7yPcJ780l058oX7kwGoo/w== + -----END AGE ENCRYPTED FILE----- + - recipient: age1yahhqn2620300n20k68az5lr2u42wdgtjwysgqyr99a4cj52ay0qjw02pl + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsZDQ4dXMxYW42ckwzUElK + YmYyUTdacDdIaldvcmdyYlNyTG1nL1NhRnk4Ck9WSUFGY3VZTFVIc2tpR3VpM2Zz + OTFFNlpyMTJ4M29kZHZobDdWd0tjalUKLS0tIGdwdFluWVNYRmd5R2dTTWV0QXhz + M3FsVmp4NzZoMWZUejNCNVV6dGtNUE0KiagMg3brVB7PgAhLv2BRgjaNCPkCjE16 + F5U/ooB1N4nKk4ZZMpPxQWV3sisgotrDV1DSFHkoKGl7aedIxEA3lw== + -----END AGE ENCRYPTED FILE----- + - recipient: age1jt5pj0c0fvmzg7quaucq4n2rzcx9ajzstp8ruwc8ewjpay5vqfqsdjaal8 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUQjh6MXBhaEJlWlNlTzBY + YlN0Ym0rcnhwbDhRSG01RnptN2N5NytuSW1vCnJwZFF5RFpWTjMyUzdwcjltNS9r + TDlmNFh6YU9EdktyRmhwcU91U1grRzQKLS0tIDk4NlI4RGw1K3VnZ3NjKzUxOGEw + UHg5cjVyQ1REdmFKTUdSdndUOFZ2cncK+J0JrI70J/gQMiQjVJNH5vVA2iVnrOWj + 81hGV2W9YWAQ3F9MIdRe2eoqzHKLHNkCRfmvSX+JHzJtwPjdmTjScA== + -----END AGE ENCRYPTED FILE----- + - recipient: age1px8sjpcmnz27ayczzu883n0p5ad34vnzj6rl9y2eyye546v0m3dqfqx459 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlbFpmakQxbGt2eUcraGZK + OUM1WVhGbi9WZVVRbkFHUnpTdkNnSXB0L0hBCm9ENDFyQ1pxdlBTY1ZiZzJvRFVq + bm5QZDgzdjltT09sVUhxOEVVRGhwZUEKLS0tIDFzQ0ZjeUhoempDdVBvdU0vQ0pm + K1BpL3JFaHZTVE1LV3g1SGVTOXVqdVEKEttNtYhaQpl3fwhAKSLcML1PcCcuoJiG + Rg9yTebNOYm+mHHiv+/xUhJiBCebnBx4xgrXRJeQHYJeGlofQ94dRg== + -----END AGE ENCRYPTED FILE----- + - recipient: age1tnq862ekxepjkes6efr282uj9gtcsqru04s5k0l2enq5djxyt5as0k0c2a + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYTEUzdkJCazlSSjFpb2Zr + VWhJeGF3Q05BZ3RkOUx5eXQ0RmRaVWdyNXhZCnVOL2ZVVlV6WDJneTdpR3ZhTVFl + NW51OVdia2ZObUtNTmttNG1VQ25uRU0KLS0tIG9ObG5sNnAwRFF3YnMvZXh4dWlx + MlZSQUhnWE9PZVBJMHRyWTlMaTdIVHMKZk3KPtaP2ucY+8p0S0ktcBsrUEVwbJtN + Qkh/9mBeA7O00riqWZSnFYvbRuIARIWw0CUbHafwOTlaBxWK5EpQrA== + -----END AGE ENCRYPTED FILE----- + - recipient: age15nj7xkv7nrewxam4cd0uw6glxeh9xmq46lu4zdnq23trqch4pufqm9phq6 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUbVhzMHRSUElHK3JrSVZS + Q1Jhb1YzbXhnMm5ROVZ5Y2NVQmV1ZWxMcG1nCkd2T3BsUjQ2aENsQTh1UyttRy9D + c09MdUpaSU1RTlJ3ME1TMWQwNU1FMFkKLS0tIHVLVTFTSUIybFR3b28zbkZQNzAx + ZVFBTytiVlU1amJUdFZnS3NzWE1hbDAKrXp+TsNwAFIgD3Xk9O2KebADIEQr8Gxf + dbPQmoK88XYbfmRuLcYsn+cGgKlLaMfR4u/BxHYDj7wzZRt3bdMbyg== + -----END AGE ENCRYPTED FILE----- + - recipient: age1cm0cjk2764s4pv5g7e67as34g9xtcltex96ga87wckndw62wqqlsvkscqc + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkU3I4OHFjSFF1RXJVdWky + Z2p4OVhMSk5taGRkY1RiaXlwSlFxNmJIbFV3CkJOT1pZUUtBaE5pR041MUFPd05P + MFRUc3E3ampiQTdhSW55Q0x0dllYZ0kKLS0tIFBsOUlvaW8xbDdYZkJUSVJIYlBR + MldwMHowdnVnQ292dmJaaitGUEh5Wm8KyKh3y1cq5XAi4+4Hj5shut1t3ac53E6V + 4iHbiALKm8Rqs371w6K5852H6zNoLASvWx/qBb/j2bk29n2+MbR7Yw== + -----END AGE ENCRYPTED FILE----- + - recipient: age1aw9s4kcd6ys64ddzzfya9ajzln2tv8pm9uvz6d85v0r6eq4dudqq5vts86 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuT2xONE43bWxtYWRFdnhi + cUtKM1JMQ2tjWjVUcE9XL3E5ckpjRjdCTWdFCjNkT2ZBVWI4S3kzUG03Q0VjKzdR + VlZaWU84WlczbG5WQVZhSWZyeFNlMk0KLS0tIFR1YlFjQ0RSTC9VMklUUmVsMjJ5 + azNwc0lWTWk4OW5FZzhZaHVzdWdDVE0Khe/FMxu6nNuJ9ge6Vc/xHve4yE658U6e + 9IjgRcaadtQq7kE+uZndHDVWs/L2b0UJA/9FU7iXNTAcq3tx4GhgyA== + -----END AGE ENCRYPTED FILE----- + - recipient: age1jr5mc4ekmjf4uk2ue4xcuy0yl202phlu2t6c544qfj45ahzag56s4d0kzj + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZYlJuZ0dTblVlYm9rK0FJ + WktVL3EzNmtSSjc3WnFQV1NPRUdXZG5GWFJjCmw1N1hXajBySXB3TVBkalJHcHVS + UUVpb1pIVWNKeUtJWEhvcmlKOGU5OEUKLS0tIHpqQWY2T2M0Q2pqS1lwRUxvMFR3 + cVhKTk9rS3FoUjI5N0N2YVc0S1NKT00KxSplVpSHY3EcQADlxI6PunTpo1COw0PL + 1KvtyEdYOelYDgXRf/Up08dg/a4A6UPwn0b1TsEHAikiHEbjhYXm7w== + -----END AGE ENCRYPTED FILE----- + - recipient: age1dcpd6u4psq3hehjyjrt3s7kzmnvxd20vsc8urjcdv6anr5v7ky2sq9rhtt + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmc1pPcy9XNDdJSEZodkNR + dTBBRnNDNWo3TVcyOU05LzBGQWZsdTdrV3dvCkpMZU1rVC9MUzRkVlRWTUppWU5y + SUdwcW81NWNBZHh0eTRudmROWmNvN2cKLS0tIGE1Rm4xMC82TjJCc05NNjdqZTZK + cGU0Nm1xT1I3RXloMUtCczhBcnVDajgKbB0oUrO9UPrwuCNk2JVeHnv19n4fEGWm + 0O6RKZyonRX03aUd5T9SQwuxG1CH5sFbyjRi4q8OU5K6+xR1vzeXGA== + -----END AGE ENCRYPTED FILE----- + - recipient: age15vmz2evhnkn26fyt4vqvgztfrsr2s8qavd2m6zfjmkh84q2g75csnc5kr6 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhUlEwTEtaMkVlMTV1TDZq + UmNiRDQ4c0crM2pVSm5LazluazZCeHlNa2dRCkdDMHZkUFdGTUZLZnRTNnlTSkE2 + bXBTUWVRSCtuQ3BqSDF6alQ0SEZDLzQKLS0tIFRjalZ0VVU4N2JDM1VMMXRnY0VX + TDZ4Vi91T0Y4emdyZG1Mb1kxVCtza28K3BE9H+G5oGntLTAzPONdUhuIdqttfDyr + X0Kq+p6OoPLHcr0apareenF+b04q11KcuY987HmgiAk40oBGMWSflA== + -----END AGE ENCRYPTED FILE----- + - recipient: age1xjvep7hsnfefgxvuwall8nq0486qu8yknhzwhf0cskw5xlpm8qws9txc56 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEZFREK2MwbmsyTENRcEJr + UGxPMHQxYVhKcE5oTlY5LzFiMG1kN05tcXlZClJFQjJyMHpmeE1FNkJ0ekYvVVk0 + cm00Sys2YmhCOTg2MDFNSW54NW5CQmsKLS0tIHpTbGYrRW94anZpL0Z3akR4V3hH + eVdGekgwajRzNms1Rmh5SGV2VmdHUkkKxFhkSYnCDl4M83zwD6aF57B23GrYZITY + UseOE9meva2wfuheJUG/GRZsVEGNHhZKyMlIM/t9ZPo5Ze+3h4kG5g== + -----END AGE ENCRYPTED FILE----- + - recipient: age1cqeh03zq0hvz5l78r678q93ey5mlw49lqy4whvgqxgenudth7g6skee6kh + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPVGplanlhYndVbG1RS1F5 + OFBHdmFsWDRKTVYwVitBbmYyRHdadmxGVTFvCnppYzdHeWdnZnFhblphNitQYTVC + K0ZERi9rVFJGeVhZeS8ya1FlcDUzWTgKLS0tIGIvbjBodkw0NXlnZHE3VVg0L0hr + aVM2LzNyaWFQYWpwT0M2VjRJWU54K2cKj/Lh9JDfg616mtRyJYwOSQxzdCE+YS1h + 6BLN3mb/B7lY12tWHm3SlNIrjplhI5ZPPGCQp8pdZm4i9jzTvGgOag== + -----END AGE ENCRYPTED FILE----- + - recipient: age18yxgwpakrkzq8ca2enayf79py25se3d8dsed2q523869re30jcaqx6rjln + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQK0s1UVJBVVRTdTB1R3o2 + RkVXMHVhaTVNdmlRRXQrbHNzazdaRWFLQmlnCmVCY1VZZ3NJN2NHNFhpa3FXVEkx + UzNLSTk4OHFxUWtZc1RrZVVyTVMzeXMKLS0tIFc4aWJvUFlGQytCN1l1N1BlWXNI + YXJoeGZOL29rUHNCMDdEK1dGWWJGd00KpKEP+/W02UoL2vQMxRxXjjsh+aBpqrWR + HeleWjy6tz7mMaEtUgOuSE/YGExSzvF33oX0DiKVFI9dCkOvayVFYA== + -----END AGE ENCRYPTED FILE----- + - recipient: age14aq8fscrwkgmu5yv86vj7p7kmxclzs6dp7fpvdhvrnmce83ztphqc4mr9q + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1OHRaR25pSE1rcWxKVWRK + em1jRkNzU0lJcE1Pc3grM3A5UHhHVU1PbUhRCjc0WDNXQzBoZmVNVlg5dm9xdElE + UkUrYzg5LzVXWGg0N0tIMTZ1ZUlOa3cKLS0tIGErU01jOGRpZlRyeUNzMnBiVllT + MXZKbStHZU1kQmd3aUpaZVVkTUY3U0UKdVj+VpmxZ3fRp7gLbfslYmoMOH2tXK6E + sKqMrGBb+3GWVrg5x/l8ZYTObnUrrjOeLWEHp3pND1Ga86YnzSufqw== + -----END AGE ENCRYPTED FILE----- + - recipient: age13xhxqulvswuckmpkmy2fgeqd5jx0ar8e2hst33leljt69r6hsvnsrdw63k + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArem9lcGNjVDBpWVdFUGxS + NHNSMUNwYllKMFZaRngxR0txUlpyZXhiaVFRCnF5WWliZkdvTXJaWHJmNzBOamZD + T0I3ZnhpeTZaYnkreFlYMWk4cDc1RzAKLS0tIDVmNnZQTllneS9mdEhjOFdmMFY3 + aEM2QTRLOENqeVRUZjRGa1JheGpGaDgKdE/bdferxAy2UnfZTQBLHZZSSLX8K/pL + xGOXzQ8K70/e/F6UyTInPVWCsxFYJqENQEvWz+PBUEhVrz+4+R5w/Q== + -----END AGE ENCRYPTED FILE----- + - recipient: age1xcj6peyaf5xvj2673vl9j0z7supwtw7hzuk782zk7gt69k2ykytqe65mg5 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6YU1kTGIxL3RkVUZpWnhL + cGFpb2RoZ0xvYUdibUk0a2VwWldoL1FqWW5JCld2RTVhU3NlTGhPaTZuWDVOZ053 + Y2wyVWRJUldXZDZkUmtieGlPUlp5Tk0KLS0tIGVITHI3SXZ2VEh4SjhOeS9ENE5M + Q2JWU1NpSXNTM2UrR0dSc0tya1lxTmMK55D9JVQbacUdd4EdIcER5O/28QBCAmBD + Z9iSTSdDAHIFHvs8r2IsskKK7YbAMDUD0oOl9v0Js/Uyt9AQRxC41g== + -----END AGE ENCRYPTED FILE----- + - recipient: age12hdk2stter0cjexxwx3sqn9wx3vmptkxszvx7knq9zgm9uqzjs7suvkcqu + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1ZnJIZFZtZUlMUGx1RGMx + V3R1cFpkd293L3QvNXJzT09ycDJIdHBhbXh3CmwzRU5xenRrODNyeWlWMnNicmVB + MTJsMHdJRWhEcmg1SmNmemt0V2tUS1kKLS0tIGFTWGdFZlQ3SVBYK1dkNWF4REVo + aWdMcUExa0NMWXErNHlvSXRQekVYYnMKcmZxAnktjHUMphddo6bzHSnFhODtyNWl + 9yl+W9NTAr/2VIzu+oa7HkWr05MN0c6qT00n8tYjdCr6PZM6DRL+mw== + -----END AGE ENCRYPTED FILE----- + - recipient: age1lga6hjmxa95fmtdn3frlmy64ej3hyswxrcuz25qvw0kfsxkqeugs8gjw8q + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMVGZHUlloYXd1RXlqQklC + RnpiSzRKSG9VcUcyeU05bU1GanFsNTE1b2swClpCVmpVMkJXQ1dlRW5MLytrU0Yy + MW1aNHRNK2hTNFNURHVTZVFzWHpFaWsKLS0tIFR4WkVUS3dRbytxSXlYQjdpV0Q0 + MDVwL0orYUJzVEpVaTZzMmEwVkR2b3cK4ErvQ1VAXf77m+VSQIjn06GHFjJYQGqO + JFH8KobzRykLWZEKXZo+FT27YqglRowWEBclQJ+77ciGHSW93+DSLQ== + -----END AGE ENCRYPTED FILE----- + - recipient: age148d87gqw59lmst5jv3vynhsu3tv4t4sj49s4lktvnplfcrjq2y5sjcwsu8 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYbWQ1ci9FckVxc0UrYmZ6 + Y0orUmRxZlk5NHZ6R1hTNUhGclA4SDZmU1RJCjA4UEc1cG1YWUJsRXRueDlLaXBy + ZXBJSitMNE9CVVgyTTBhWjRoWDNMcHcKLS0tIEloSUVSVWVhTm4za3F2eStHS1lH + K2lGYk52NWJ2Um5KeXQvYk9DWFZwL1kKdn/QyL1Defmq2+073eFNHUIuxt7biV6c + RL+A1n8DlR0SduY4Z81YYdAw+lldQJZVGOW0DfAHYEfs70Gc15mzfQ== + -----END AGE ENCRYPTED FILE----- + - recipient: age1p60rg45qrzpv2hcfzxl8d8k9afkk7dtrhr98cngeyuhlega83ynssmtx5k + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIZk9nUEZ1d3J6MXpKb2Zk + K0VSU1BiLy9qTVdjR1JtTXU4eUFzaFJ6RDFZCllkOUU1Y2hFbFdFQTRkVXl4eTg2 + SFV3OFBETG1EejFYTENwNVkyOHNNakkKLS0tIDZYOERNQmdyd1RmMFdiL1BpR3R2 + Z3FsbDVGR0hOYXJUY29FZnZZZGpWdmcK+6mfH1dbNW0eoqq6H5RfG3J0GLk2y6Y0 + 1aF70OEZQpnIEV/WGddT3RkeSyv3vObQhuSAsBlGeyPeNbZ+tmgldQ== + -----END AGE ENCRYPTED FILE----- + - recipient: age1makkpv2t74lxmw0nk6m89nespva7j700pmt83pl5a4ldtj2k8fzqakw8h7 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwY2pkVFMyOFVkMVh4UVU4 + U1NnYTFxREs0eitCQmFYdXgwN1RnMkJzbzJrCktFME5Bc0hHZ1RHWkxMNVFDNFdC + V2xKaTNlMFBNNFZPTTNKMW1qdnk0Y28KLS0tIHJjalVUZWd1ZFFmalhvVXdFS3Ji + SHZYREVzY2dFdDNVUDJHb1lxMmErTFEKxr9zBJQzDkonHxvvoWwCn0zc909BdDPb + cErBHJifta6yYo1gC6RFw3dU6mcVJhWUoHTwfasN/bOgaUKgpem9Ng== + -----END AGE ENCRYPTED FILE----- + - recipient: age12jcu0jtw7m96evxnd0vu6lvsm8uswslrdhxd2u655vjrwhljmqdsptry37 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2a2Y5U2t0a1cvb3lTelJp + MS9nbWF3VEVoZG1zYzFaUEFDa04zTVFKeUFzCmJZTElKUjZ5WDhHajJnenJKUE5U + UzBWQS9DVUt0eldpZTR4MkFMejU4VVUKLS0tIEN3UTZ6OEY0b3YxL0Q2U2JydkZD + TXQ2M053VjVrYmZSVE12UjNCWmw4ZXMK4dzqrEpfiNfcDvo9bXx24YbZyF2IFzAl + govLi3Jhwzdv1k9VGJO0LF+a8sHFz9TDUSnwnCT5CaEftJ27j+m4hw== + -----END AGE ENCRYPTED FILE----- + - recipient: age15vrlmtckjf4j242juw7l5e0s6eunn67ejr9acaztnl3tmvwpufrsevntva + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5bXZRUzZsMC85VHM5QWZU + OXJucDVoSE1qNWo1ZjZrMkZtbWNEdXZ4VVZNCnUyM1lPbGlQVHBwSjZDMDdrQW1v + eHRBQ0ZuL0pHUGFpQnQwazZnN09GZTQKLS0tIHh6OE1vbjdwOUszdWwwemVIQU1E + enFxWWVhZ0k4dGxMYmMxWHVwZkVJV1EK8hhfBdCL7tjOL9xyohgtUqBLQZ3U6TDf + TV9qKkkvgE9V6gkmrAdw6F5CvGd8YImAS/MW/hKOA3ldTz7Yvm76og== + -----END AGE ENCRYPTED FILE----- + - recipient: age15qj8latetnrmgzd7krq02y65kn7lhq2pcwv8cvzej2783u5a9scqs79nmf + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoS214U3pRcUM1YVVBM2hw + MzBuS0ViTHJSL0JnRE5aWncwWStSanNjQXhnCldWd1Z2YXJyU3UyRHJZczBsMjRN + SVdRL1Q5YWVwSldmRkswSVM2dkJQM1kKLS0tIHBNK0l4OThqd00vTVBOQjNRT0pP + QUpzMFlyODBYSzFWUWlPbURiUDJDTncKl7mAejT5KqfXqRYvAwHrtQRXKoEkxHdn + Qd8A6BZg3VWPP9UtZ4RuEGN9AIF3sKHJQkKapfXxPVXAXer4hebfaw== + -----END AGE ENCRYPTED FILE----- + - recipient: age125k9uyqw5ae5jqkfsak4d6c6rcx9q63ywuusk62pmxdnhwzqxgqq2jsau7 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNUk1MZU55bjdhS2Nld256 + SVUrVFJZbFVPdGRKVTJNV0NRTDh5NWlOTVcwCnUxTG1jREZITUtoMmFuNmUyYnRS + MkRmQjFJbnNacHJaMERRV1U3ZmM4QVkKLS0tIFJOQ0d4V2l2TFdxRHl0YWMyUTc2 + Rm5yV1crRGhUSGJBQXU0SGswR2dHcWcKe/NK1pzFiZF9lM4K7Rd97XsNeQ4DrlNd + ee18FBZxN4NGlEcIOakFqCFIC3VQjARUb2SWrDyjZUD7700uP0LvOg== + -----END AGE ENCRYPTED FILE----- + - recipient: age1j5csp5v5s2g8am47dd85kcke8986e0qc88f0vfgd3kmvwu8azg3smslk92 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArcFkyTXE0S3NhR0FISi9U + cmRoTEtUakh4bkZDYjFSVXVoM0lxNHdTbEVNClh5WVRRd3NQTFFpaXlvZ0QxZEsz + RzZxRk5sc1VHZXdjNkFPUXBPMTAva2cKLS0tIGNHNXA5Y1ZuZGYvaHpuOXJtcWkw + aHZRUFZvU2d2eXFEaWpkVjcrLzRVUVkKtu2p9WRwNmVbnd/m17VoAehbv9QspyyL + gpXeqhLD5TXUSiYldd73XHwAN1p1LtS1aQJHZ91dPgceIrYych4Bdg== + -----END AGE ENCRYPTED FILE----- + - recipient: age1qjvds58pedjdk9rj0yqfvad4xhpteapr9chvfucwcgwrsr8n7axqyhg2vu + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqdkZranNNdWYrVHV0TVl6 + L1REOWlqZHFvT25PMlF0OVIyYWV4ZUZjUERRCmNXSHZoUjNZanRBajdzVG4xMk9B + THRMcDN3VWdvZno3R0xTWFdvSjFXdzQKLS0tIHFobVVIcW44R0VJcjZnUDlIWUdq + S1JyZ0Y2S1dJbHJsbGt1MGl6Vm00RGsK/2HWfRtXqfGTzd1ynFk8DCwH7L7QrU/k + 6YT9+1lHIEIOGEI9bpuQElwtVbvv6tYMsVyXSLujb6aSOH+uQa43vg== + -----END AGE ENCRYPTED FILE----- + - recipient: age1kdrpaqsy7gdnf80fpq6qrrc98nqjuzzlqx955uk2pkky3xcxky8sw9cdjl + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSV2dMOS80Rm1JNjdabHRk + dlJtN2xVdUtJN0Fia1hSdjg2Rk9aNEl3UG13CjhXcHlPMSs0VTQ4YXpERlczRHRT + citCVnFHeXo1a3RFOERtMVBtVEs4QWcKLS0tIDlRd2ZXMWdqRm94SnZQRXlTbUts + OUwyRHY1S3pGYlNKc0RWL3M3L1NjNFkKfc/wYgZqeRKFkLQ1RCGsNcqhP20WmLQJ + RPR0A9nMHsOFjML59CdXatWz7YswgUokXlIeI0qJJN8+nHgIE6TsIw== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2023-01-06T21:58:08Z" + mac: ENC[AES256_GCM,data:Zw6HzWSo4xnjZJQ9u1J08V/E0zoV4LGoKfY8WgRN5dS04LUxb+O0A5fFEwFTsGs5Ch0IA/0MJ6k4fqGkg97X18w0lK+TLlxl/tcjW1yA5ECbQhNKEUuSajw7rgDdqGGqxJ0BoGOH/Rv5I3VBstoSS6Ad4hmDnRuLiY9VpRYA+RM=,iv:CK0jB87RBsnIv3mOQs7fz0VjBYczE/unP6+14X90qCI=,tag:8SJ1a7Kd9mc7yfdIv/a1Vw==,type:str] + pgp: + - created_at: "2023-01-06T21:56:58Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + wcFMA6j84+xkv3y7ARAA3zk9QugVR/Ppa+8wV2Q9PySFRcPSsBz40TZGDj/pFC+h + 2muP7gjlcaHergiPkhab0xfORHGzZEML5ANnT5bAkroWuih6iMT+srBKCQVs/DmR + /ZBS/W+Wg4CV1Tx0bQA/u/I1nm5jJ07WDLBRtLMy1GRIbv/Fmrg2kEZlblzDiWjJ + 3C0QAS7+iCf6+vv3skDEBnAEGeJ8uU7NubLsdXXd2ogFZw2UTfxIU01wTRtsTcXU + /S0MbQ7kQErClNn0T1HEEDFFGVBuQUmqPepAY8TleeEHTBbb5PHNBEtETEwHUd0U + GNBrYka1pwDD4CHMr+WKlpbAXg9Dh4ICLWpTahnd1cAKdqjsQaGpF0kFjRHI5IvE + Ji4zz2A82WUkXYFoi/UBQWFPn64TbFoqIXnAdWhJeheamenSCWI3zIyrEWU4eQsH + pME2ZtTOo6rxYpKwQLTMhH/dQsOb/4aIeohlh1ngiYNlXsdfJrzmpaFLHudMu+rQ + H82Zuu91ecKSnGfIfIweIibooc8aq6ZqWorhBScT/zd8TzM0nyIITXJZjHrAWgYK + uMwp3LedvsscGZ4lOSY075S+TdpPRyb5PC8iWvdDAPMcYMnkrqgW/hAj0PjUbj29 + NWvn4oafx6mCwpHYcpxS1EBq1cjUfKr9hx8HJkIIhW4I/hVUjw21LUuCA37zVgrS + UQGI93c0WvmTAYRM6z66XwPP80GkFfGs62bDrIjtwa5D1QGf0GS1dhkXBe0Ttvtp + BjFJIty/v6zcmhyyI/K4Tlc3ARqVwcw1bDximACtjkrS9w== + =5RSF + -----END PGP MESSAGE----- + fp: A5EE826D645DBE35F9B0993358512AE87A69900F + - created_at: "2023-01-06T21:56:58Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + wcFMA8zMZ+ak7y/zARAAhr3gPTQC0o2IUbZp1U6JqeSQ4HAfQgJYMQb31kWTH0Al + 81nod6hWLE8EcKWo/ttdY0BigYjk6ncKSOwt8KMht4KXFPuoEIkdrPV2fo7Yq1Q3 + tiETNW+nxvV8N2BK6XzDLES5wBm6aSWSvXZNtfoTvpO8JN4SdAtX0cF7dMQqOAaR + VK3qAhteoOhPQf8cbrY9kW7DYSgeslCSBLnFHJ7C1nIKkA5+0/+/98V0z3Q9SGpg + KOu+ZqEojX8Ug/yDvaTbIgvhTref0BVRg4gaS/RG5ScEQhAik04g2GnZGMgP3yOf + KZsos8Fl1u06xpn8MWTpr9eO3WNRVTiRtsMZ421z7qbimvfynlnG/bprZgjaE72c + GkPf5AzoO7ESyUpxkoj8yIjwj745xV0DdolVzaT1N0idKyj+9QOLLdjKXrlSyVVx + 0OcM8bPD5wuC9mzJJk42x8tUol6MGr6GRcA8BwSbv+Z8FeTe3DF66BPqtoSLX2Qz + zhXLOnFaEb9U1np+mfOSLShtxSst5n8QSKEhcoFAo7gQOM8qo/qLBSQlQy3PgQuh + O0lHVj7zkI1nCaGPcwL3wLi/g5ILFZuusnjJ6Xgdp079lFBazBpaidNEpS4L4r2+ + RW55WL+VWiRTL/RIr8pTE7SUVnZvBuSjcWtiqczH1zpZ1KPF5Sbr4lwbp9tvHn/S + UQG5ooxTWnwGE5Si3skuZ/rggmq8E34jv3h5hXyk9pZgv3ei8y+jiUDy/FHP/tqx + IYOXzn7DfGtmC9/p4yJBEbwE3Q8ICg7Vx/uEkmCv7w6jnA== + =5r00 + -----END PGP MESSAGE----- + fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A + - created_at: "2023-01-06T21:56:58Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + wcBMA45bZkLXmBFpAQf/dnQ1PjqfaXYjS93JaOgrdoHdP2f12G2gl6IDBL3ojSor + vzMKhvIig2IYN+N0r9pqWiRruslSGqr+4BsHe65I4KXlHKbsFzyE/t5ILlVdLQ3U + GtPxoB+Y74ynIb4Uqqxbu0ON4XPF+B6GoEX7+t3/3jsB30tdDPxFcmjSpYTj4zwj + Si4oD2KpQhOmxW8oG0WH9hoHnpyR/yF8PLk1B/K7BzRutl26wpnB8NOrko044pWT + 0y+IbDzDid86Vd5J0saF9kOGcJ8C+CGlcEHBj41+9Crb75xMJnowYAOk/123F7uA + m4Tk/DG8S9KxYRXVKKxOX9UC6IylzHJf+bUXJePMSdJRASkdX4iQ8twuKeHbJGBT + TojEzlj6KAHgHzMR3wha4mb+59l4Ygd4CkVjPWnp2qUbp+PspYWhmU4aXBKo5seQ + 4V19zew8vl0NQd7f8xvddlzV + =A9BU + -----END PGP MESSAGE----- + fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9 + - created_at: "2023-01-06T21:56:58Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + wcFMAwMCBBrc/JA6ARAAw2fEC4Fb+GZ49bNhqmM5jTxuz9ouOHvhxIiGKyUjoNgY + Lm2ryMM2x3WskosOiOL2De8rZAApdn/9V0ABw6YysYBTi9Jdn3ggm/ju3mho4ww3 + 5frbNlZUosEf9Z84FzExE9M7NScMeXrGAdluWHnM0OtZD3WMfrsbUcHTtRZNsukv + fMoU7qpcc+Bg5WZsC3i7dcptrqkQk2DloGdD5jfHpXNn2XnBFri8wCprhtt9ysUu + DqdJXoEZRy58Tq+dqTkEM0P7B0QOEJojjZf6cq8lMbfPaBdAFC5tQFmrgpapaqoj + n38408dq5demJZ2hcOsIrxLfQG8pnKHh0F2xNkrNtiMC2Os9SacZUl8IjqVwfdcA + oOLpIUG95xjncG3A5YLZSpR8iOlnGP1ZFddAr1nbObh7+3xA2HzIIj3Wx/BepUpL + /9aXshXL88hOYFFpZUqT+MeZyF3DuEWIcv5NOGaOG0VW6WzVwFYkTW9PDP3RJKbr + 3+yrumB65w6/wnM4F7RDmfXx9B7APMfdrsDHFzs1wMYRITYt2yag+AH1Q6XXc1zq + qG/Jbvb4zvjffYKndwPvEfXtfHIcdkefxjAOfkra6+BLkjXuvFCrDxMCqyyWL7oL + heSJ/MUQuvgOxgujmG92L5YWQDiwUdJAGwEuAubqakwLoUK4jqEeq1eEc1j2jofS + UQGZm/G3qw1vZWYOc+g4YTovlVxj7C+c9guF2do6e5XsMJyCouymHlAQuDH3XrFX + Jk4pG8dpMnPpUm2T8C+YcUdLgRltrE/9wlNLFFb3V4ozYA== + =WnuG + -----END PGP MESSAGE----- + fp: 4F9F44A64CC2E438979329E1F122F05437696FCE + - created_at: "2023-01-06T21:56:58Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + wcFMA9XEenRNYVGHARAAsLlnEVjZIKz9iF66ZxzpbyxvpzkZYMRd0Yndkg7kJcai + m5uwRHOIIf04nvZmoldJOO02qEe5TVsPuWqvPWvA6BwoAm+W5Ylz2vl5kgEVQKF6 + 89Rr4Ta9pDjUjoE6lcxCkBjRyw8s5CTg367RU+pJzmlHHaTjGHXMyedWdp1Iap01 + HmataEaNrSS8kuFCdDfLSRQUKcG/fx1zShuxdAzJdtATZz6CrQGAGkEt7krCh1uT + 1m5sd2ZiHrUffRwcpSTk5895EKzBf0XBil2b71UFCRbJEXjpwrWHknbJMBjwdX3w + RokYfc0NS9TJBwPiYt8D9iXBIm8qK9VgNLIwwI34LoTXgHCRNA6Hdz/ZrUOZY5Te + dnJ86JzOooQYAgkTzelXk7r4wpMWnj79OwFqUlq7pueFHmGzi4M8+c4kt9G3YpBE + 1SAJZE5hpB0mNcvon+kT3iCVR+WrVe33A8eH5IHYELjRAxM9V3K6ZoLT8RSUMBb6 + cd2VUVRStgxgmvORiBYK5WkijJwiKOX1FMywuIgP41xBBoFiUMOtwDAIU6jc4SDi + GWVeZ2pyw+8PTgHKjFguo7IWgkpWzfaFoVaHfCkngUCoGVgmdZCanIzEHv69JYPA + dhecdPedONXmP+ofKOz4KGtkOJvfTBtgL3Grr2cUQh4V1bqvGhZWPhaqMNp6uf/S + UQFnyY8XI6aSQyACa5wsGvGeNc+YNzYKJ/M7cQ5iA3JSfdZQ834kYzWKnLYXiaOJ + sKDyufcLBhA39P0TiZeZsf4nqiOn6Kohxu5EZSbKHgOnjw== + =mkse + -----END PGP MESSAGE----- + fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA + - created_at: "2023-01-06T21:56:58Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + wcBMA/Z87ylQaotQAQgAg9KJzooHHFWrfmKkYjRbMujf2SzBBOcwSI0ERt0mTAwY + UFfv5FtyrIRYoXcnTAJ+ejYIWvu25BOdzzvf4mJP6tB0P2sWlXFnfz6jqzAJbGOB + 2cJYAZqDhFe4iwaRMz1JdXEZBxiOjinz/nYJvuLbOgqodVRdgAZ4bSJjQO2GHe9H + B/tXHZefhP3VAtAAxUIv99xNS0aSUZWNLS+wxmLESfXLKjB4FPPOS8RqVY1lMgXN + WZqIhqon+ptfpVUFJOchycVt+9SqeZAkNidv3TZkZOCJtcMlRp/jOR/RTwjqf9ls + F96Oj8yaLi181wF0CXDWu3kItDZMV8RcXU6jFIOZy9JRAQzYqf9i2VrE+jGj3lKX + 0wyq8TkaAfFDIUDWAfu6zdx0Aec6qedtFqEDuGsXXgVx3RGWtAgn3pElReVIo7MM + Fh/p/FEh2HIuCcuX5m04FKna + =684O + -----END PGP MESSAGE----- + fp: 9EA68B7F21204979645182E4287B083353C3241C + - created_at: "2023-01-06T21:56:58Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + wcFMA9qJIVK2WMV7AQ/9GD58kbeiq+vAxkzDD7Fj0cH9Rn2z3yxaafvWWJVDiF4L + BZFXb2hjj2EZApCYsV4MhIgYfo3ANIbOUSh342tePq+GYJE5Y4sd//RoNBW2vKNA + wwzuQyt9XIkTwPkEGk8YiTfcE5BD2Pv1nvPo5jd08max+4mTuat32DtfN2cDVXDd + +XCk/GrxayaD2j+3NUCnjPy3E5/MWNOpvUUNdF31xfpEmNJwJCv4CXEqvR2Eeha6 + gWKoo7QWjod4pQIBW3NTstN3hX4fmdVz1RrdY2RdV27NrcWEOlNsVit7wUM2ZDjP + RlJL/Hg3A+LkV2VlLGsN2AT5kRvOxa2DJ5M1E/00H6cxd65cC9gIxJZ/6M6R08u6 + O/Z0T1beeLfxgYWx35dkXO4VsVrnywgXPkYyUcEWNOwmJHp/1P3y5+oUgqvuQblo + C6LNbKXFiGYNelzBwKQXevPNSjlRqwroceY5wKjBtB+Hkmt/8g038+TDgJJuDNsv + Pii2hiZkS75tlk2V//uT7pHQ0nqVTgG/gcwbo3KeaMpRWFp7Pvaz7ILBlsa8UIu/ + Woxz+p5Uc75Y578i7b15+k2Qb7qSK45K9wy5OswIu/IF0QBdHXOiUkCWIgSL9nCA + bl8/mt65PYbUcNKkSDn0fVP51rr/Peetst5/MaZC2fNHR3JdAm79TEs8XxEyf6vS + UQHItdecjgwp142hUBymLmtcAchD/lYqcaWWNEn6PLlomNl1I5W5eVhoITtxMzLj + U3Ay+ccedBGzV+Yh1Ow3+ohGe+KoHy8GjcL5i75thOw6Gw== + =5Wng + -----END PGP MESSAGE----- + fp: 53B26AEDC08246715E15504B236B6291555E8401 + - created_at: "2023-01-06T21:56:58Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + wcFMA/YLzOYaRIJJAQ//W45UZ+zeGCfmNfgSRjFQhaQmiyFZ6KMzefX2lqtp3iJ9 + ChSA95MeEkR0PD9+Vti6jvMynoQZCx28FMrJeYIJ2L1Tnqy0y58WFrB+fwOSKWaH + N4K9FsRl/RpyrHPA2soZinUl6qii52Hv19E2zmrhlHM+gEMr3AmyAQebD/hgxHqR + 4NRtAlKmXV9/u3OzL3e7UTFqZDNbfCiieOeZDGl/fy0Oe3C2by49V82n8ATlThrH + dMfzY7WVnXnlS6+r2xO/z0vCzCh+IVIRYYY+m132NfaPMfxHMU11hwXL5ijLXcjn + 8IfUNQyDKTyXjV/KfBdRqrG+g2bDCzdk9L6o2eA6zIuPrHPGFExcsx20kzLI2qme + n2B1up34T7g+3SbXkT70QeQPDM3gMRtfaEBmNcI14ugYjyHp5vu7n1jF24yhCuHk + ZzO5kkTfJn7X1F011o9plnsV/0QD6kZHUbLQEFGk6SZgoAUVjAo7QuAoY0zZ+c0t + VSfCLuqpeGNjZPeO7XxQl1KAQHzXc3+Kbx9+yck1/HCjRsVF6OjDHwbvx5gPdGZ3 + y67xL684mIG3GblMQyAKpy7tQ3uKbJsAqo+nWlFMvZZyrYHh/yJwx6V6tm/rsKso + eIZAK5D9ZbZuwhIArOxquciSjxnhZDngzf5990YDK5e/7N2nlXKZwFcsEWmoGq7S + UQF68uHv7AVJxGGcYPhaiIl3uXi3gwYfuxfeqbIuA/3bT5nGOC2gEKCnAFOGHo0d + TLQRtJyuvY3gYxOAO7FkC/Rp6bkRP377Yf0gVnVEd03NiQ== + =4bzF + -----END PGP MESSAGE----- + fp: 91EBE87016391323642A6803B966009D57E69CC6 + - created_at: "2023-01-06T21:56:58Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + wcFMA7zUOKwzpAE7AQ/5AZen+XOv2LprUqwR32EU1gmC0b9q8r4GpQLOVrrNQNP6 + HhnKxM+Iv+paWCgrgHsKwa/3FVpX/GB41M3PTiHQkSpZ2ehVTzzAU0d+hvalz7b0 + 4hn06leRSSz4LQlY8jtifOTHrr4Lcv7WE4xVNHpAyc8haSTMEeZWnnrwlekdhk/l + bejvyFbbfnqhFljwC57o2o1e6yxbX9wKuG+VNMhOOqPamYvwxQ7aWf6Grkn1k+fP + QaWE9ak2YHG29hOOIrIAOQEGcAwLSCXqxtGVZFUMeziS0qKH5KiOMdYSjas75pQm + wiuax5GfO3RRpJZc1YsHcN06y1oGIgtvtsLg9s25vTXzVzwmfYJx+YOQmYJzyQPi + 5FQxLHLvjPNBrEgET71NTm6zLa7AAiSUkaDugMCUad8q5fbux7KudKpjF7GX+0Fh + /f1bVN8HKpvTedcaoj9+xHiny07a7hXUhjamvapQzUwRpRYqEGtEXRPbx6XeMQ6x + C8ZifwuuVnQqkZdKaFluItUYSBTEqQg66apyFYMTNPUm7OVDrNDNHLlVV7Nwp/WZ + TxWYWnhoYvD4GZ+TyardjMv3BBnNkeAUEn3CNaJNZTC9KisqXFvm0gg8AB58ePCd + umLXhz+BnYR0e+SH5Zs36FMkFw/nSMTUz18cn3I8JDKZs2QBxq/GT50XLPBVY7nS + UQG6eZgPduvZ7j7NsPPUlaNSq4dr+c/NTt8aHKNE07PxaDLQmVivRYhcC4UurPEY + fc6lQqsvk1S23dJwSswscb3kBo32iGAniHaBU9KELoGMhw== + =Wi88 + -----END PGP MESSAGE----- + fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C + unencrypted_suffix: _unencrypted + version: 3.7.3 diff --git a/hosts/server10/default.nix b/hosts/server10/default.nix index 8db5327b..a669a7bb 100644 --- a/hosts/server10/default.nix +++ b/hosts/server10/default.nix @@ -1,4 +1,4 @@ -{ ... }: +{ config, ... }: { imports = [ @@ -57,6 +57,7 @@ mode = "444"; path = "/etc/machine-id"; }; + secrets."ceph/osd.4/keyfile" = {}; }; # static list of microvms from other sources @@ -65,6 +66,13 @@ "staging-data-hoarder" ]; skyflake.nomad.client.meta."c3d2.cpuSpeed" = "4"; + skyflake.storage.ceph.osds = [ { + id = 4; + fsid = "21ff9a57-c8d1-4cfa-8e01-c09ae0c2f0e3"; + path = "/dev/zvol/server10/ceph-osd.4"; + keyfile = config.sops.secrets."ceph/osd.4/keyfile".path; + deviceClass = "ssd"; + } ]; system.stateVersion = "21.11"; # Did you read the comment? } diff --git a/hosts/server10/secrets.yaml b/hosts/server10/secrets.yaml index dbf66c2e..fc05c859 100644 --- a/hosts/server10/secrets.yaml +++ b/hosts/server10/secrets.yaml @@ -1,4 +1,7 @@ machine-id: ENC[AES256_GCM,data:Ix/XS0rRXZhWePe41VmMarJ39a/f1kjz2ZALwWGzKa4=,iv:36fENZzal9gR/3DD4CVDq3yMmLr0rxtbMKaRDGH1Kpc=,tag:M/UmDJD0obr2wh8AnjrMSA==,type:str] +ceph: + osd.4: + keyfile: ENC[AES256_GCM,data:msufQ5p9VVopAcvUcv5ziotUse2r4DO/BoKX9g6ZBNvlhnHJhxJhfA==,iv:CKPh7ILd9BqOXG6cAxSGVfHVCRSVv+rNwYtmBWg78KY=,tag:oylaYBS69HYZn8907Apdfw==,type:str] sops: kms: [] gcp_kms: [] @@ -23,8 +26,8 @@ sops: UzVHYmRsUlhpeGJUQXlXOUUzRTdwNDQKhA6vI08t3YIYVO0Wi/gvJ62RYSym+gsh HKGo+MeKg+gRTDi7LQAPi/DYIiXoNJFuRj1OxFKsqCin1wElEiRmdA== -----END AGE ENCRYPTED FILE----- - lastmodified: "2022-12-28T00:41:54Z" - mac: ENC[AES256_GCM,data:tXurnfoPGW/4T9CJVTKL0R30Z4evl4lEabOZQbXjkbpS1bisaQ5b3s02mYwrv38NDaxgxxolUn0ol6Tbdi1UF/FxQInG7nM0FU0s+yVOhhJR4dFsR37UXAh+mTWxk1leX8GH4N1dfDWtHpOnaGqydZ9L0BlB7iQaEBvNK68glwg=,iv:zB4NK/n5QrWlalFvafAAaTAw9YWaN9b+P7r+vD1EapU=,tag:3QHjMhj9WbO70E3qFUK/kA==,type:str] + lastmodified: "2023-01-07T00:22:48Z" + mac: ENC[AES256_GCM,data:jaVrE7H3QO4+kvo7/rO6of8YnxGL67Ey2dIwfa3hpl2WDSwdmIOsav3F9BqTbYKw/MH8BeLb0skEosmoJY/991C8j2B5RNTiEIOJHVakxhRzo0vopBu33Q4C59/zOlwqqJEPRUvwhr5VizZ8HshUApOxpDbDBlBEZNXj1i2N2zM=,iv:emsmabR65nNVoKRBAJMneiIdkJIcL2g1aiV8m8PmMDY=,tag:cs3nrvcutdQUJE027wm/6Q==,type:str] pgp: - created_at: "2022-12-28T00:41:47Z" enc: | diff --git a/hosts/server8/default.nix b/hosts/server8/default.nix index 6faaa3b5..594bb026 100644 --- a/hosts/server8/default.nix +++ b/hosts/server8/default.nix @@ -44,9 +44,24 @@ mode = "444"; path = "/etc/machine-id"; }; + secrets."ceph/osd.1/keyfile" = {}; + secrets."ceph/osd.2/keyfile" = {}; }; skyflake.nomad.client.meta."c3d2.cpuSpeed" = "3"; + skyflake.storage.ceph.osds = [ { + id = 1; + fsid = "4b196252-efb6-4ad2-9e9b-cc3fcd664a3a"; + path = "/dev/zvol/server8_root/ceph-osd.1"; + keyfile = config.sops.secrets."ceph/osd.1/keyfile".path; + deviceClass = "ssd"; + } { + id = 2; + fsid = "b860ec59-3314-4fd1-be45-35a46fd8c059"; + path = "/dev/zvol/server8_hdd/ceph-osd.2"; + keyfile = config.sops.secrets."ceph/osd.2/keyfile".path; + deviceClass = "hdd"; + } ]; system.stateVersion = "22.11"; } diff --git a/hosts/server8/secrets.yaml b/hosts/server8/secrets.yaml index a30f0771..de17e88b 100644 --- a/hosts/server8/secrets.yaml +++ b/hosts/server8/secrets.yaml @@ -1,4 +1,9 @@ machine-id: ENC[AES256_GCM,data:Ko/LrndeWRgHEhDKMC7k/6nRbZWowjA/fJXBzW2jLTI=,iv:wdexRj+zlYZ1NkS4MjQvbh28iE6UCUgDqvTeEfxyY3c=,tag:GSdZ0FhBS7PBfG4OfNiCkA==,type:str] +ceph: + osd.1: + keyfile: ENC[AES256_GCM,data:p6ic3dssOo45ArTtX1HfbxO1NrpGjDIGrQHgcAouwucUP+oSWU3ZPw==,iv:g7mzt74BJ7I19QmwYmdeN2dlB+WSkC0Enn3odvU/nKY=,tag:Q0bf4yEkbvYbuT1A6gRTcw==,type:str] + osd.2: + keyfile: ENC[AES256_GCM,data:PwOm1GNXLUYVhjoTQB1Ne/X0J1OUeUBk3ucGJv2qgbgpJUH6sXR/Ng==,iv:q7JUhvn2jeyT55/DTepQTa4ocXl1zN9SdzKz1CO/XEE=,tag:lPsfERwCcfyjvaCWEd4e7w==,type:str] sops: kms: [] gcp_kms: [] @@ -23,8 +28,8 @@ sops: bWl4MTZUak1Bb0JWRXhRQkR4ZUFnNHMKvKQnoxb3IC7jW0P/zewbR68yJI8Uzz7U iPaL8MoOlmXPu5dHBSTwn39CpFR6bPxIDMHUn+y9gtCUrbIIJQAaQQ== -----END AGE ENCRYPTED FILE----- - lastmodified: "2022-12-27T23:54:21Z" - mac: ENC[AES256_GCM,data:XKBsQ2dhGT+ifU2EoCONcFpPtVzU0q+GkRn52EfwfjnGSRWggv2CZT5CE8vWpM0oDtsv7FYClmyXxDssBLCY3KmkGW39BXf4uTjg1WQItlfcK4iRqBwa/2xdVZEXhs+PvhnBBe+nzHMVGz0l8tKgK9SSt8GooaJjrugZbcLPg2s=,iv:AgHjkh/pTKRcczCMnMlKlY9X/LWHp5oiImcA1MH1Ei8=,tag:L6OFg3Vu9G1Lec0LkdjpHA==,type:str] + lastmodified: "2023-01-07T00:24:35Z" + mac: ENC[AES256_GCM,data:SIUoQ94/cy5Jsi/q3Oft7+tTONl+xyrLaS+QFdFgedQRQPo1VQwFz3ATlescjMkkEl/rrFwaY83D1f1ISRz7wcSwo6Fb9ZAzxYpBlDkC4BKdtTWr/BycFyIXjSD34i8olBSRl9js65J1WHOxtgFWprHn7F12L4y9wasqCCkQXd0=,iv:0lJ2qtO8Q/DjafZNKMYg7f7C+bqp0ylLD2Zscfoefew=,tag:h2o/nuO40CiMUwRYlZvdyg==,type:str] pgp: - created_at: "2022-12-27T23:54:07Z" enc: | diff --git a/hosts/server9/default.nix b/hosts/server9/default.nix index f5a440d7..f4ebc33d 100644 --- a/hosts/server9/default.nix +++ b/hosts/server9/default.nix @@ -1,4 +1,4 @@ -_: +{ config, ... }: { imports = [ @@ -52,9 +52,17 @@ _: mode = "444"; path = "/etc/machine-id"; }; + secrets."ceph/osd.3/keyfile" = {}; }; skyflake.nomad.client.meta."c3d2.cpuSpeed" = "3"; + skyflake.storage.ceph.osds = [ { + id = 3; + fsid = "54d56ab8-fc43-4e16-886d-3c82dcc1f8fe"; + path = "/dev/zvol/tank/ceph-osd.3"; + keyfile = config.sops.secrets."ceph/osd.3/keyfile".path; + deviceClass = "hdd"; + } ]; system.stateVersion = "21.11"; diff --git a/hosts/server9/secrets.yaml b/hosts/server9/secrets.yaml index 32584f34..4c120210 100644 --- a/hosts/server9/secrets.yaml +++ b/hosts/server9/secrets.yaml @@ -1,4 +1,7 @@ machine-id: ENC[AES256_GCM,data:YIOQJ21rswp+TE6sEKdNu0gP4iJ7K9ohrdXJRi5POoc=,iv:0Qd5ukdhpqQxrE60I7AVX7/U7oOsMvE7lDVXsB4d290=,tag:JbdNljkMRgjvPdxyUhXuIw==,type:str] +ceph: + osd.3: + keyfile: ENC[AES256_GCM,data:jz+zGf9sRCjxxHHa+5FVOjIS3S2xXvLr4CoOdnLDQIrQypT8p9rbcQ==,iv:QoCCR8EhcYZqGgT512ou8CyPXR8qGUvfmTqaoAXLLpc=,tag:LcFl3qc3W0BSlXMClfQvyQ==,type:str] sops: kms: [] gcp_kms: [] @@ -23,8 +26,8 @@ sops: dU1TaURPUWFOVW11bVNtd2J4OFhDMVUK6YIU1s2aPhY3HL9EFrzcuRoFObiLjc/t HOFh/iFJd6fFPia7HYLYyJ1bv6Blcz9K6I5i9Ptb1AM8RUrBWC7BGw== -----END AGE ENCRYPTED FILE----- - lastmodified: "2022-12-27T22:16:28Z" - mac: ENC[AES256_GCM,data:HYNf9KMRrLu+o7KuV7OQ7ixz0LDjy5YdHywNYBpkSuCaTp5RXgjJWnuHA5E3lqZmXj1gm6wUmZPA0fsvmBfXVNhdkMVdn2WSk5H8ED/ayMw1Th6g/0MlVYYMWOPvGKY7ZgydiexBJHuqBMznCkSyT1AzGxDu9yVaWXUTkMiaHFY=,iv:iBT9vCi/K8Go85/6Kgp294h2R4QXFKNZJX8yGW2MfU4=,tag:z+Xu9bnLxtqfK+G9e+o9nQ==,type:str] + lastmodified: "2023-01-07T00:23:15Z" + mac: ENC[AES256_GCM,data:SaOmnwmKjGmHZbcSBaDM2QK0+s68+2PmRe1mkLBNjAANTRIK9djxxXpBf2cpk7FAof+BNRJUa3Mcmy3r1b+LPBrzxK0aGLwRunN+Vc8xGMYQhJObVHbcwQkJg490dHW+jZ6vROxunwghq0/sAeKUbRgCf64TpbBgFt2DRMz1mIM=,iv:kKCEWzQvgXPr7YVtjCwp4ld2mTFD29kQov2gotH400c=,tag:cByRU1D529KZCFuc3pXOHQ==,type:str] pgp: - created_at: "2022-12-27T22:59:15Z" enc: | diff --git a/modules/cluster/default.nix b/modules/cluster/default.nix index baea976e..7c1e4115 100644 --- a/modules/cluster/default.nix +++ b/modules/cluster/default.nix @@ -77,6 +77,27 @@ in { source = "/var/glusterfs-big"; } ]; }; + + storage.ceph = rec { + fsid = "a06b1061-ef09-46d6-a15f-2f8ce4d7d1bf"; + mons = [ "server8" "server9" "server10" ]; + mgrs = mons; + mdss = mons; + + monKeyring = config.sops.secrets."ceph/monKeyring".path; + adminKeyring = config.sops.secrets."ceph/adminKeyring".path; + }; + }; + + sops.secrets = { + "ceph/monKeyring" = { + owner = "ceph"; + sopsFile = ../../config/ceph.yaml; + }; + "ceph/adminKeyring" = { + owner = "ceph"; + sopsFile = ../../config/ceph.yaml; + }; }; systemd.tmpfiles.rules = [ diff --git a/modules/cluster/deployment.nix b/modules/cluster/deployment.nix index 00225480..0608ad8e 100644 --- a/modules/cluster/deployment.nix +++ b/modules/cluster/deployment.nix @@ -50,7 +50,7 @@ in tag = builtins.replaceStrings [ "/" ] [ "-" ] ( withoutLeadingSlash mountPoint ); - source = "/glusterfs/${config.deployment.storage}/microvms/${user}/${repo}/${vmName}/${withoutLeadingSlash mountPoint}"; + source = "/storage/cephfs/microvms/${user}/${repo}/${vmName}/${withoutLeadingSlash mountPoint}"; inherit mountPoint; }) config.deployment.persistedShares ++