hosts: add notice-me-senpai

2023-04-23 21:19:45 +02:00 · 2023-04-23 21:19:45 +02:00 · 10f88f3dc3
parent 77d59fa13b
commit 10f88f3dc3
10 changed files with 188 additions and 148 deletions
--- a/.sops.yaml
+++ b/.sops.yaml
@ -9,7 +9,7 @@ keys:

  - &data-hoarder age1djp5hk6vpm5glzqy9h2e2cgam5xydx888glgs85kvs57spaf8v0sfm0pa2
  - &data-hoarder-staging age1m4g4y5ga2m8xdvs7rarda3tyk4gtkyta6pfyq2n3xmy47z20kfxq73m8r8
-  - &watch-me-senpai age18q907v2706qxmjewqan7xng2su3z6zyz9a2q444jew22apd46y7q8wjjku
+  - &notice-me-senpai age1t8ktl8tkkpa7s5f2a4crhgpr8c72c942vqht9l8m9y35fhppv4ks8gjqnn
  # turmlabor
  - &traffic-stop-box-0 age1yxtur968m4xe0m3kj0waqpm2kuuywpp9f6t0rxl4f0262ze9n9jqehw0k5
  # zw
@ -72,7 +72,7 @@ creation_rules:
        age:
        - *data-hoarder
        - *data-hoarder-staging
-  - path_regex: secrets/watch-me-senpai/[^/]+\.yaml$
+  - path_regex: secrets/notice-me-senpai/[^/]+\.yaml$
    key_groups:
      - pgp:
        - *admin_oxa
@ -80,7 +80,7 @@ creation_rules:
        - *admin_marenz-1
        - *admin_marenz-2
        age:
-        - *watch-me-senpai
+        - *notice-me-senpai
  - path_regex: secrets/traffic-stop-box/[^/]+\.yaml$
    key_groups:
      - pgp:
--- a/flake.nix
+++ b/flake.nix
@ -332,6 +332,16 @@
          ] ++ data-hoarder-modules;
        };

+        notice-me-senpai = nixpkgs.lib.nixosSystem {
+          system = "x86_64-linux";
+          specialArgs = { inherit inputs self; };
+          modules = [
+            sops-nix.nixosModules.sops
+            ./modules/TLMS
+            ./hosts/notice-me-senpai
+          ];
+        };
+
      };
      apps."x86_64-linux".mctest = {
        type = "app";
--- a/hosts/notice-me-senpai/configuration.nix
+++ b/hosts/notice-me-senpai/configuration.nix
@ -0,0 +1,48 @@
+{ self, pkgs, ... }: {
+  sops.defaultSopsFile = self + /secrets/notice-me-senpai/secrets.yaml;
+
+  networking.hostName = "notice-me-senpai";
+
+  boot = {
+    loader.grub = {
+      device = "/dev/sda";
+      configurationLimit = 3;
+    };
+    cleanTmpDir = true;
+    kernelPackages = pkgs.linuxPackages_latest;
+  };
+
+  zramSwap.enable = true;
+  virtualisation.vmware.guest.enable = true;
+
+  boot.initrd.availableKernelModules =
+    [ "ata_piix" "vmw_pvscsi" "sd_mod" "sr_mod" ];
+  boot.initrd.kernelModules = [ "dm-snapshot" ];
+  boot.kernelModules = [ ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" = {
+    device = "/dev/disk/by-uuid/ac20e417-1e72-4054-b941-372b935a0cf7";
+    fsType = "btrfs";
+  };
+
+  fileSystems."/home" = {
+    device = "/dev/disk/by-uuid/e79a1405-fd1b-4caf-a43d-9ec7822c9307";
+    fsType = "btrfs";
+  };
+
+  fileSystems."/var" = {
+    device = "/dev/disk/by-uuid/de512e60-4b1a-4b31-a28a-d2021fdec19a";
+    fsType = "btrfs";
+  };
+
+  fileSystems."/tmp" = {
+    device = "/dev/disk/by-uuid/39c75d79-4661-4d57-bb9e-9033a2ab3366";
+    fsType = "xfs";
+  };
+
+  swapDevices =
+    [{ device = "/dev/disk/by-uuid/2b8ee579-0ef5-4a8c-87a2-c178a9403ebe"; }];
+
+  system.stateVersion = "22.11";
+}
--- a/hosts/notice-me-senpai/default.nix
+++ b/hosts/notice-me-senpai/default.nix
@ -0,0 +1 @@
+{ imports = [ ./configuration.nix ./uplink.nix ./wg.nix ]; }
--- a/hosts/notice-me-senpai/uplink.nix
+++ b/hosts/notice-me-senpai/uplink.nix
@ -0,0 +1,25 @@
+{ lib, ... }: {
+  networking.firewall.allowedUDPPorts = [ 51820 ];
+  networking.wireguard.enable = true;
+
+  networking.useNetworkd = lib.mkForce true;
+  systemd.network.enable = true;
+
+  deployment-TLMS.net = {
+    iface.uplink = {
+      name = "ifacename";
+      mac = "00:50:56:83:4e:9e";
+      matchOn = "mac";
+      useDHCP = false;
+      addr4 = "172.26.121.158/23";
+      dns = [ "141.30.1.1" "141.76.14.1" ];
+      routes = [{
+        routeConfig = {
+          Gateway = "172.26.120.1";
+          GatewayOnLink = true;
+          Destination = "0.0.0.0/0";
+        };
+      }];
+    };
+  };
+}
--- a/hosts/notice-me-senpai/wg.nix
+++ b/hosts/notice-me-senpai/wg.nix
@ -0,0 +1,10 @@
+{ config, ... }: {
+  sops.secrets.wg-seckey.owner = config.users.users.systemd-network.name;
+
+  deployment-TLMS.net.wg = {
+    addr4 = "10.13.37.200";
+    prefix4 = 24;
+    privateKeyFile = config.sops.secrets.wg-seckey.path;
+    publicKey = "z2E9TjL9nn0uuLmyQexqddE6g8peB5ENyf0LxpMolD4=";
+  };
+}
--- a/hosts/watch-me-senpai/configuration.nix
+++ b/hosts/watch-me-senpai/configuration.nix
@ -1,48 +0,0 @@
-{ self, ... }:
-let
-  mac_addr = "03:db:db:db:db:db";
-in
-{
-  microvm = {
-    hypervisor = "qemu";
-    mem = 2048;
-    vcpu = 2;
-    interfaces = [{
-      type = "tap";
-      id = "serv-dvb-prod";
-      mac = mac_addr;
-    }];
-    shares = [
-      {
-        source = "/nix/store";
-        mountPoint = "/nix/.ro-store";
-        tag = "store";
-        proto = "virtiofs";
-        socket = "store.socket";
-      }
-      {
-        source = "/var/lib/microvms/watch-me-senpai/etc";
-        mountPoint = "/etc";
-        tag = "etc";
-        proto = "virtiofs";
-        socket = "etc.socket";
-      }
-      {
-        source = "/var/lib/microvms/watch-me-senpai/var";
-        mountPoint = "/var";
-        tag = "var";
-        proto = "virtiofs";
-        socket = "var.socket";
-      }
-    ];
-  };
-
-  networking.hostName = "watch-me-senpai"; # Define your hostname.
-
-  # Set your time zone.
-  time.timeZone = "Europe/Berlin";
-
-  sops.defaultSopsFile = self + /secrets/watch-me-senpai/secrets.yaml;
-
-  system.stateVersion = "22.11";
-}
--- a/hosts/watch-me-senpai/default.nix
+++ b/hosts/watch-me-senpai/default.nix
@ -1,6 +0,0 @@
-{
-  imports = [
-    ./configuration.nix
-    #./wireguard_server.nix
-  ];
-}
--- a/secrets/notice-me-senpai/secrets.yaml
+++ b/secrets/notice-me-senpai/secrets.yaml
@ -0,0 +1,91 @@
+wg-seckey: ENC[AES256_GCM,data:Qx9kiHzem2g95LsmI8opyNUCxjdUXakI+0Pwr5n35aJH9SVKXnzqbsjT1fk=,iv:t7tFUjd0HZDbzmUcqC7Ufsk7Zvqb2MkYc3d4Li3ky24=,tag:ap8FBYkF8DuowI0xSNonWg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1t8ktl8tkkpa7s5f2a4crhgpr8c72c942vqht9l8m9y35fhppv4ks8gjqnn
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZbjBNeDQySXR0QStiVzVn
+            Z1pVWG96WWgyQlludU9NNWhhS2d1VUp1M3pRCmpVdTVib3pGZ0p3QTFORDZSaUhM
+            QjkwWGlKdmhBWXBxcTBIOTU1cU53WEEKLS0tIE1WbE1kL01NalcydyszUWtwMTB2
+            ZXlJSkNRSUREZ0sxdWhoR2RuWlljZEUK0uFtaFXdC0TgQxLyngjfYORoHWS9kJY+
+            vR5tX5XMCyM0DreldW5HLhYefV+b77mGQt9ICr/delisl0BM1LfhVg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-04-23T16:57:02Z"
+    mac: ENC[AES256_GCM,data:JLYmp/Q7u9sr+/CyM5f5xovaQ0C+cEuCVMGSsyiXSnBGTTvMJm1s4nUX5g9DcFOEVEXA24Uxb7Sun353GIsuaXIAfRf6plqQ15e3r78uA52j72j6aq/124Le2saABRzYmNn+M8HTSi7AMURuR+fOtC4LPUoSDNEa9MRJmn/kEyg=,iv:sl8QPDQ8X+iwfhc/z+box8o64ZnTlwSmyP3H0mCF4+8=,tag:4px5bl+hYRkkzx8Dbca96Q==,type:str]
+    pgp:
+        - created_at: "2023-04-23T18:51:47Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7zUOKwzpAE7AQ/+KryDKWYsiflZcShZHT6epqCN6mo+xX0VU7mcmTlFZ9li
+            fdcE59zqOKs8pV8V+0tzTxA7Wm9WVYFPYO2GFJ3pzp7xoWZw3J8znQqJbc/lTbbe
+            EuKn5UqDNsCQAh4Fh+QxmYkhVcspkf1uV2d14es9bF61T2ncoSfvARJxMQmD85S+
+            j3OVJKfmbXha7wAUbKETgKmq9ViZqfqZynFwPttybKxqBRczMreNwt2od8EpAe6y
+            paWhqXiaYxnmBoBRg09L9XtkHQE6iOn0U0H9Br3sbiKt7y1Wz7Utbvg+XC7L44Cd
+            vk6nimcrew52Uz71yUz8u+3OWtUH0MzD+MzsKB7UdUTF0Rem6Ddyhpq2gtWrFljr
+            V0YdKKaGkN2J4pr/+6frMkeuEJICWj6rSiCtZEu8mv8ZEJREyKFwGxN8FYKSH1G0
+            BZQBnVp2hGTd6zxxMgi0IS1FGl/SZbnXcQv7ugfiAGG9wFpl8WiWD5SO+Srarp8E
+            wfDlbWc2MPtCha5JoofJlsfljseAUa9e+4TedKAYmzl3k+V/XK5jvov5+bBHhl4b
+            lhziLHz+fQTLrXFZyufEN59kUweUA+0ARw/PdAxyWjlg+bIhBO7Azd5wPXlzPMA2
+            P40ZtnU+AQRh2Wu75cJERiDYFtnSCl0m/ndGztal8fwxYtbXqRjzBOqPp4MtmAjS
+            UQF4MMzKAMKkTu4hqYqaX/8RrT6fMbGnL/fUICZ11lS1ISUtjQPwcndc3tVIG1MA
+            K/rYh3uzm4blA9O/8pJy1d0W1qvTvSZOZjAzNyD/oNxY/g==
+            =eheY
+            -----END PGP MESSAGE-----
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
+        - created_at: "2023-04-23T18:51:47Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA/YLzOYaRIJJAQ//TU4zkIcS/6kWlFE9pvT1tGdL8hrGV2AiUF73YPto5bVj
+            UhfbaAf/9GETqPYv82RTmdRuHWxB/IqMfGk7ou+3SZ+NM015M49E6ODZ4I4IfhBW
+            gusdNdCf6glxOtzhB9wu1ylnwgSmTwALCrVqUfpQLfop+8gag8lWrYoiE3gXQcMU
+            qk4UwDtybVV6OiP0pEh8KnQsHUJC1eH0ZZA0qIjQbuVH4juCRFTvExHFRI9oCraJ
+            j2CzGoJoW3aK++vwp6CMYifZRCgM3nJ4A0WGuo1k9ztRAyV0vmN0OJxG75WcMPOD
+            ieCNsX31h+1MvxcQcwH3JkyCQ4DG99L1q6KycQv+hWPJWvrfLfypR+/2+mBki9+i
+            zykb94h5mTHHm6LUuUnhmH9JoIXydakf7Rnx7OpL4NRR4KpvXi2jL/csxyMklt+S
+            6Z3Qop42ji4LMD0RecXsZ+TkOUotunUL03tkfeh0SOq7AQOL8jOp2zWcDkmX0fMH
+            bHwgWkdx+/jgCMQiSZUTSSN6piwnFcSC5s8HEqtiOuDqf1WKsmWONmnVfF33Uulx
+            Q86YnhM43rb3/MnJEsl3gxV0QvB7ejGGByhU+2G9mSOeqwE8eBKWzpwzcKTX15j9
+            it3EFZ/TkJGSbPzMXQfDqOdjJIlRhgzxYlrp9XamQMN8/6x0xWIJEfWKtM78EGXS
+            UQFXm+LWZ39gV6Zb18e05p2kUg1i9LhXfwrRbOU7vRUGIa0ocMLL6VwMBNkwNJm5
+            Ic9RdaePSi0ILvbHuKtXILpVBQFxRBceNYos1rhcKsZ7jg==
+            =uAMH
+            -----END PGP MESSAGE-----
+          fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2023-04-23T18:51:47Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMA1N/l9+zlMQzAQf/fIkFa5U2MGon7qH+VRUJhRCchnDW8DIRgasTLLFHqXoJ
+            7zAQXP6/Fcja8zfxgfN5PLrjsMrZzaI0qiR04mQFMP51QGXlAcVDODlFaZ11rdWy
+            YXeJqR4WSVANXNn1P60hdv+q5z8MJepfo/d/Uz+yZAhKdb+/do1scqCmC42+1INO
+            UQkCHqTtW3MmFjLxNXvlLdTjj1OqpL+gOUDjhMpYsXWIM77oQ6m2xtM1QiiVXNUS
+            1I1VaHaH2fcMzGcUbmmF0Q8GZZEJeEyykkDtYDOAAEHPX5BbpzLoeO+ZkCvv6yhB
+            LOZUuU/oVskY9pgfT1jFVyK3x/YiP78nNn5gB/yEfNJeAYddTHaaFuh1MElC/FkS
+            WQ4lVcl9g2Kuf3SQ2O+Houtprs1TN8Q8PqRJklk2pkDCCic25G1tDV73vFptpsAh
+            yUrLwJ6C9izOzW8JB28EjnDsab5mNO2wjMWO1+B8aw==
+            =SEEW
+            -----END PGP MESSAGE-----
+          fp: 069836A578F7939612DB4934F77D0F7E247A1EE4
+        - created_at: "2023-04-23T18:51:47Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMA1N/l9+zlMQzAQf/cqfm74Pk0ZX5095Atw4oB8AtuI4jtEZA6+kIhzTqjuW1
+            OS/MvHBjFNpxx/sn/SHDpoQGw2BXSHgjdupYhvIh+miXGiUfwkR1pPcWrDcyqsFu
+            hO//8Bxf5uEYR0WfjYvrhcTLDEBTr90q15SvlAEHw9BJWHYz6q4jqfsnv3ANPf8M
+            B1ZNFul9fJ5MziTmOyFWdpffrwylcbEoIJwXqkBLJAZJ3WpHikQYYp55w1vTSsUG
+            /aNWI5CdenotMtfnVnqZERVv9FktQXXK1pN83trvbdJEReMILGOMxCtGfMm+a1ua
+            AnPP/JBcHK/1U8/ihwVBODE1FZRKK/8B5aM+z4zr7dJeAbrRW/rLRiqSnDmX5PUM
+            XCJTLFoPsd6cVbiTzR8GA++9Lqh7WdvM/VrrcBEJdZipZLpHPcXe+KZYztAhtcgt
+            aFmoFnzDXH5WuN4PinBHf4JaaVfMJEFXrn+7TC6GWw==
+            =XSe2
+            -----END PGP MESSAGE-----
+          fp: ED06986DFAAE6A61B751DC2F537F97DFB394C433
+    unencrypted_suffix: _unencrypted
+    version: 3.7.3
--- a/secrets/watch-me-senpai/secrets.yaml
+++ b/secrets/watch-me-senpai/secrets.yaml
@ -1,91 +0,0 @@
-wg-seckey: ENC[AES256_GCM,data:kG99JwoEz2ZKzsqSl2/gCZ+u/UGi7Rf1z0Iv6hDr1yMJ3F8v49axmmHsnJk=,iv:iFreGQyC3+5i/oxIlHQVoHHPgidgcdOBJ6HSCApy/mU=,tag:YVUQdNtRJ2lUqMr6b5Re8g==,type:str]
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age:
-        - recipient: age18q907v2706qxmjewqan7xng2su3z6zyz9a2q444jew22apd46y7q8wjjku
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDYndZRDlqZGVQclpEVkZL
-            Y1lrK1BwZXgwemt5NFRHQmY1bXNEc2dNOWtjCldUMk5EQkIwV1VkMFpaL1R4a0ZL
-            WmRoNnliOU1Qc1dqUG54Rk1tWWtuUXcKLS0tIGEzOUVCakV5cXRTOGw5N2JvWmpk
-            SlB0aktyeEo2VjY0bW93TXg2YXJ1bzQKkm1eCnbcSyVHAIbQ1cIcU5RabUYSgsUp
-            VXq8j515D7MhdngnTW5uvk7og+Qe4iIgRXGsTLgelP5JEiHcOs/WPg==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2022-12-07T22:24:25Z"
-    mac: ENC[AES256_GCM,data:hybiH3hiMmN+YOcx7ydFuIpxsjbUk69t2tSoEsguRubLMgsQLaaxCwwIDkHk63ktDs/fobVqFOtdv7rEYfdxnkWrk4RmtWVdKALQRabKiJ1j9qwoqDsS2cdUF7mZzGQkHQcnOVQkRdmTtpFBJf9OUYJxORizHp3RHpn+Djj2cH4=,iv:8rhZcNP0yw9jCxtcp3VRpBTGOTOpBgtdfXF7KDZX30I=,tag:pIK4BZcY0OouxLGPPR37Zw==,type:str]
-    pgp:
-        - created_at: "2022-12-07T22:24:12Z"
-          enc: |-
-            -----BEGIN PGP MESSAGE-----
-
-            wcFMA7zUOKwzpAE7AQ//fMom3jJ6gUONSojJ5yMdKiFtJPHqU/abK5raH20zi4hS
-            /NBi+xYWz6bapX0gFIFFwsM5nEquoRWv+yVKbyro/PC2t050EntPgQfi/kdOY9EW
-            wCVYyBWm2GvYIV4jtrdPEW2bbITJhriJMSm8L56TpOyQhM/AJm6hK67JlbyQPFMU
-            0Mx9HehnFFYlb4wm+be/sg8zcCZOhtH8mDY0qcFn96LDx6W24I+v37Ejj2Yr9Ul6
-            w7J9FInYaCMh4g+sCc07nSQvQ9kaeXOt6nQJbzVPhW4H7SCBMC9MIVe8vCiIotkQ
-            9a5ZjZSA70IlGaXR1xGn+RvLA2DpIKcUQ3JYjcLafRgZaTouF6FWW4QnzjtcLbhP
-            HwL7R+AZ1plxt+yFUhn6SYjLwheu+ACVtMnMA6msqdHYsi1vReNkoUljYeJgL0AW
-            VPOtzmWrnv1NxaK6XarwIOtJ164aIjOA9lkE/qaFV6haZ8bekH7YvLQdPchjS+br
-            UYZ7dXWLyUU1JKDCKBBntTtOZhyIOjs/u+NErd9Sk+X6Db5wtGFKGT2u8w1KrSM5
-            7nGEg9D4KCzfwGJ2ohm8Z74DhUH3bSdTjpOnoeEcXT/SMq6B2+CbiAlL1LBCWvWR
-            dZ/blfvQ65PbR0sg1Fo6qbp0yqAT67lvbk3kBdXW9GnwU8AP6r4fodt2pY7aGn3S
-            UQGzugfZM6GTmfVdkUJZzn/62pts4lvLYWt1SlCLmq/zGuMUvwGBtA6H9WZBh6Pt
-            wvZtMIaFsOTWJj3aKPfVLELv9S+y6+Qv+ZbsOvXc6cbtjA==
-            =Ftcl
-            -----END PGP MESSAGE-----
-          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
-        - created_at: "2022-12-07T22:24:12Z"
-          enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMA/YLzOYaRIJJAQ/7B+o+Rqi1f/qoDRy1mLwKAzu70v20sZe719RXssu0qH6U
-            C8OTaipGNZQSR7ykifEUJvBLd0gwDpNDylL6IJkP/lbRgRc978y/mM3ixjQwj6wZ
-            x4W6akq16RyPRFTbEGtWg+c+jMxkRU86xWxHrkulEQ4f8N7sXVEvhqQ+OghQuSw8
-            rxS5JgXbQg28a3DEt328DqSoaJg/SLdBg1MFsVJoJZ4c4qAlg+s1zP20oQNlZaWE
-            fC1sYJJnz8RFCPgwNu68anVgmW5UHjkq5KN0CIXbOifz+u3XDlHxoagd4kwTk5Ci
-            FdXsyCeBeW228UmVcXswB7s7yHUNU4XVmevwqjX9kzvgQs75+6BoMCa8XnRF4TrH
-            +MMZTaljkqIBVEKfqO9erhUrKR6Jsp4p6zn9wsQUmfy6VDI0kQpPXcnbq2hndDcQ
-            m3RRzAfF5N0QUECKytECEoON10KE4qG+UbeKjOyrVi8xBZKt75A2yyNPCVlX0vOO
-            o/xQ0ltpVHWwaGxpU0LYd+KblLuipeWnx5UwNApEwS0fWKyvkfWJdG5Vph+l1ao/
-            Jda/MHpuCYqqNa+Cq/EOZugQXGr49pUwU3ldjGwAzQcv1d58lmwSqy/f8WUW/21c
-            dvYfSlXLycVk7NekNvAfpfkr1e+DGXf9jvVVf0YLuekr43YNDNCPp8l6iKn/z5jS
-            XgGZmvUC9x8gWD94OF6XdRItD0wwoLTUT/75tb/5YynnjDvDhKFRy2xAF/KnhCLB
-            YeKCmBEMeikPuS3K15QiXwytfrugQlCb2tPwHKdm4mSjyNE26AFl9LU4vqaMRao=
-            =eTR4
-            -----END PGP MESSAGE-----
-          fp: 91EBE87016391323642A6803B966009D57E69CC6
-        - created_at: "2022-12-07T22:24:12Z"
-          enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQEMA1N/l9+zlMQzAQf+Ls+um2eBmqTNnrkSUv+1keEH9jSkjie+Gky2netGSJpb
-            oxAoycep5HQHqNmWdsMDInJ+r/jufnLV23xufOokhJQcpXYiJm0LYSYqRhSkGAD0
-            NXOO1sEjEmETU5+jdKjJGa97hwOZ3Y0vgHKCKGivpVbyguR5tquaEt7NEoRCObY3
-            4ZkqFyAQCLtFF9YJ52jAgfMuAjINGdMVNWFgWD84rXOnC51B35E4/Plf3TtR9/lM
-            yb3kYxOAwhGH5xQ6cWrMgi43pzTTMw9xE7Tl3bOQjiOYtSuNh4dxoZvU45CI/pLQ
-            NH73Is2IKiolhkMpcb5rszMbrF91jiZcWol8a3VIbtJeAWsieJtKYlFkptupqYfP
-            xR7BhTBWH73cE/wmoaiMoY8s9NoGm4CLdRhw5A4jcdjztNmGwRhvkIfrWWa+VWhi
-            Yxt5G1u95z3hvQV9VpaBv6Y+rCnIPK5yuYUJpukFHw==
-            =8sFN
-            -----END PGP MESSAGE-----
-          fp: 069836A578F7939612DB4934F77D0F7E247A1EE4
-        - created_at: "2022-12-07T22:24:12Z"
-          enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQEMA1N/l9+zlMQzAQgAjS4wueWqzWR66ow1ERnS8JwD0FEW6dj/18QWqvE+1ods
-            WD28+6WEqb/SEb5ZO4yBNJYrncuR9brHFfUfNa2CxWn39uBoHixcTL1uQ3iAPZ86
-            xQhzmInrdHfkIsjtMNuIbGq9mMAsRhtOkEkmvjUWTwZkoUXNSKRrzfzaiAMs5Neh
-            W+NFwz6mCZOYkiZpk2YGY4Ej0Xd5aVwvcZ4JTG1MgSfmNOJCF1A9eaPpvxfcAbky
-            x7kfUjDUCzYDU3F1sVFjitI7Qu/BKx1dwxuiDIgS2Or7BjxUMigpR4xC34YivAjZ
-            VG512GN0A6a+rsiVWVAV+JP5tKvBYu6yQ/vJrxCJu9JeAQ7GtA9oknDH3ope0lrQ
-            kSYWU2ab1ydfNjJxb36JWKatn2rozVPbbGxceEecE3VIhqSCY/tRZ7EuIhdVrp5j
-            jAI26G6r+vxUikMUjsizbIAuVm79nBnv7GbRtRmSsg==
-            =55m4
-            -----END PGP MESSAGE-----
-          fp: ED06986DFAAE6A61B751DC2F537F97DFB394C433
-    unencrypted_suffix: _unencrypted
-    version: 3.7.3
				`@ -0,0 +1 @@`
				`{ imports = [ ./configuration.nix ./uplink.nix ./wg.nix ]; }`