dump-dvb/nix-config
dump-dvb
/
nix-config
mirror of https://github.com/dump-dvb/nix-config.git
3
0
Fork 0
Code Issues Projects Releases Wiki Activity

traffic-stop-box-{0,1,2}: put token into secrets

This commit is contained in:
Markus Schmidl 2022-07-26 15:00:16 +02:00
parent e345e84e27
commit c09d48e12b
5 changed files with 14 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
modules/traffic-stop-boxes/radio-config.nix
View File

@ -26,7 +26,7 @@ in
enable = true;
server = [ "http://10.13.37.1:8080" "http://10.13.37.5:8080" ];
configFile = file;
authTokenFile = "/etc/telegram-decoder/token";
authTokenFile = config.sops.secrets.telegram-decoder-token.path;
};
}

1
modules/traffic-stop-boxes/secrets.nix
View File

@ -4,4 +4,5 @@
sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
sops.secrets.wg-seckey = { };
sops.secrets.telegram-decoder-token.owner = config.users.users.telegram-decoder.name;
}

7
secrets/traffic-stop-box-0/secrets.yaml
View File

@ -1,4 +1,5 @@
wg-seckey: ENC[AES256_GCM,data:rPHDLe3HYqoj5xpLQEalw5K1zeVFUg8IAEUTsAKt3V2jSUiM0f8yPh2bFdg=,iv:4rLtKh3Xspet9pGrnFUn3/4kwqRjYeDHjzUWWsNX7Q0=,tag:8z0GyGYdi35PH3w4PujZoA==,type:str]
telegram-decoder-token: ENC[AES256_GCM,data:r2syc0nAr+OPLQJZi/G3MqLOmJbLcw7Kk7zgOeKQIcI=,iv:lm4sfW1KXe5WunmL01pRx4+DNxrji1HFUIrSn+6Q0Vw=,tag:mTq4pc1gH/i8cP6weq3dQg==,type:str]
sops:
kms: []
gcp_kms: []
@ -14,8 +15,8 @@ sops:
N0xrTmxmc0x4TWtjaElrMkxReUhCQXcKq6nGY7wrlZmr3H+m67CxfTn1G8MLD38j
QW5zCTE5peahrgDEpuQ/HvEarGyX8tFfVhr3v0svdgjjACAg2caz9w==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2022-05-29T05:07:59Z"
mac: ENC[AES256_GCM,data:FjfFAEhojITR8CY6x252GGhbky3wtKBvYxb1tjRCw77tmPTTN9BuEK87uXRm9GKuGhmiEi1Jd+V+aCUGKlUloqQLY2X7IONLPZUK+p5RekBimThWnUzPj2UToPYkib0E2cvRRyhWk0Ot/aCjRiiDiIsP85YlbNFx+J3rcxZF3Rg=,iv:6j/8soWURwGcLKUn5g6kh3nclj31wB97bcrFKQV43+8=,tag:s1tVSVKTKmvkgExzPzI8ug==,type:str]
lastmodified: "2022-07-26T12:54:04Z"
mac: ENC[AES256_GCM,data:jd3BQ1UOO/0L2nce93VD4jjI9LKDFOTaSu+FWsPKbOw1D1JQd85YBo4UW7UTjhQDM4sgI9gHUHOODlhxpkt1sT3VQ7XBpsLSL8zdjKy4u2DL6YPdXAz9Ap1nq8na82/b3FLhh7CIOMjRaFoVRriLX1JVoNHyn0G7/UdxwgcLul4=,iv:8CKrsOJcIxOlK6QdMZys7GpZ3DjbWQV7uiwk4i5x0iE=,tag:DUkGT97vMU4o7WSPrwVolg==,type:str]
pgp:
- created_at: "2022-05-29T14:14:08Z"
enc: |-
@ -88,4 +89,4 @@ sops:
-----END PGP MESSAGE-----
fp: ED06986DFAAE6A61B751DC2F537F97DFB394C433
unencrypted_suffix: _unencrypted
version: 3.7.2
version: 3.7.3

7
secrets/traffic-stop-box-1/secrets.yaml
View File

@ -1,4 +1,5 @@
wg-seckey: ENC[AES256_GCM,data:v3ZZcnkzyOXqBcxUqXWqv0GoLTrc9oE2UFvolCuyg/jWBkmA2BeZ/hmPFTs=,iv:uOUwhbT3xYMbAAY+iNLl4pNWFJvXaFbIC0hir9t2sFE=,tag:YuxKlQaoq/DkdEqgCgELHQ==,type:str]
telegram-decoder-token: ENC[AES256_GCM,data:mF8PVyq0D0a0UUG/bLmeTQ8mdsQiFJtQUL2oig0iYPE=,iv:R0wTTU7vtBQV4ynyfVy/wQJYkfGa2M03DZ9limEIiQw=,tag:aIYkV1rwjoJz48zVgrhSbA==,type:str]
sops:
kms: []
gcp_kms: []
@ -14,8 +15,8 @@ sops:
eDlibXBhc2xvaTFVNlpGTURtOUJCd1EK27PVh/HThLvHJLgbJyei7bsUkKfeYPWU
7ziDaIw3QLlaIJq5GMe0hZVAxwVhO0hVpkbIklYRQ4ErV64rJPYIKw==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2022-05-29T05:11:02Z"
mac: ENC[AES256_GCM,data:PMutuIGIFYxJ6z4AcyQsSW1RpglbGI0LnmSj8T/T+8/1+EnuMz6MnW7Y6JPbxgFcFE2ukwP/YYwaaoPD94zgwlEYDPtZFjlsWDIE3PgU+f7nzg6S9uyZcSYvPGt6kxB+Pw8jqPpv39jhyIz7rhcNvnaNM7b9GF66kv5dibt0Uq4=,iv:NLHjBXTUuYbcALqP8I/hRiyQfh48yDnChtWA3yAH93I=,tag:Ty0dkRHnPE4eCL49TWUgHA==,type:str]
lastmodified: "2022-07-26T12:54:19Z"
mac: ENC[AES256_GCM,data:ibKzHbJoGqlf5ExKlma10uez1xaZIWz2sn3si7HmIP9v2ZjMT2CwZ8ARZ5R7PC9H5Qr44VbmuryzcLDK31e7x7OgmkbyGKDzj0YcEgTOngonf8qGuxrLu0jNKRZF+jW9SLV/JDdDvFFWlEFV202CA3T5QzlblVbexodHv5CnNVs=,iv:GFAuvNksuwqz7KwAYgcUSUJRf2EpQrs6TGRdA5PE0Ig=,tag:t3foIGJFJnQNsGveTiBFBg==,type:str]
pgp:
- created_at: "2022-05-29T14:14:14Z"
enc: |-
@ -88,4 +89,4 @@ sops:
-----END PGP MESSAGE-----
fp: ED06986DFAAE6A61B751DC2F537F97DFB394C433
unencrypted_suffix: _unencrypted
version: 3.7.2
version: 3.7.3

7
secrets/traffic-stop-box-2/secrets.yaml
View File

@ -1,4 +1,5 @@
wg-seckey: ENC[AES256_GCM,data:eoFthwflpzD1ghENFcbUzY94GlluPqYljMPOMlQ5C+mi06eMUPW/bkR9rZ0=,iv:POEwqlU+lbzEVebCs0DTRhpdFaAMnqMMC0jAAGUt0Qk=,tag:DM4aNr+vTJO7BtP2zQE3Qw==,type:str]
telegram-decoder-token: ENC[AES256_GCM,data:J8uWDOPX2sc9x/KdTmWX3GFM4+6dB0ABwI5CZt/YZ2A=,iv:ntgMv9KJ0a0qLgS6N/9fxjoyGboMLJZHnOjPwR0H8mU=,tag:VnMjz5qnD5NFqCQcSjZUhA==,type:str]
sops:
kms: []
gcp_kms: []
@ -14,8 +15,8 @@ sops:
RFJ6Yno0ZTBuVFFmYitES1Rrb3dXeE0K3T9Oc9w6SqlUfxGLBlzzxbfypPM0e3Sc
wdwEAZpZtQSnKBTJqfU1zdLlXGRm29zTR/9761jNeIBguLvnHLillw==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2022-05-29T05:11:44Z"
mac: ENC[AES256_GCM,data:B4erXYeGDDNTNOyNVr6FC05BzVe0kYYpUbauUAKVS2LyzkYNvTUXJI3SVjgB59TaBYK2KxYZd+apK4zg/HgY5zPUo9L6PzsvMnBXr9X3vTE0VJDrofGXnYbhJsZMic67+qlPmJsudUU0XREUzdFYXdfsBFGX8yG8HmnvfS7v4To=,iv:Des7ccn+io0Q8sHfcnr9TMqwzg6eAR1TV/ryX/l1z5o=,tag:y5tE/gKUVSwCDtLi52RhOg==,type:str]
lastmodified: "2022-07-26T12:54:39Z"
mac: ENC[AES256_GCM,data:4R69Gb9hW1kBY5Tq5Y6VZlN/TlxQLN2jlrVHrd/oWy4G8MBi+z97ph8WbSVx0mD8G2pffPjk44eTHPGXMSshrpIrEnXuBtkxeNu5wAFNxZESnEWqonskTca8HM9D5IK4RBVloY5QZhr86IWTMSxJoEkQff4fu1E26g+aE5jYtek=,iv:aorfrBReDIX67dR1E8QY/lfAD2H6A+EQMpjmXpEc0E8=,tag:qozu3wWHYJJ8wTnETkZoBg==,type:str]
pgp:
- created_at: "2022-05-29T14:14:19Z"
enc: |-
@ -88,4 +89,4 @@ sops:
-----END PGP MESSAGE-----
fp: ED06986DFAAE6A61B751DC2F537F97DFB394C433
unencrypted_suffix: _unencrypted
version: 3.7.2
version: 3.7.3