Update notice-me-senpai secrets

add package ssh-to-age to base
notice-me-senpai: switch to zw microvm config
2024-04-28 02:12:59 +02:00 · 2024-04-28 02:08:26 +02:00 · 2024-04-28 01:29:15 +02:00 · 2024-04-27 23:42:03 +02:00 · 2024-04-27 22:33:15 +02:00
10 changed files with 214 additions and 156 deletions
--- a/.sops.yaml
+++ b/.sops.yaml
@ -6,7 +6,7 @@ keys:

  - &data-hoarder age1djp5hk6vpm5glzqy9h2e2cgam5xydx888glgs85kvs57spaf8v0sfm0pa2
  - &data-hoarder-staging age1m4g4y5ga2m8xdvs7rarda3tyk4gtkyta6pfyq2n3xmy47z20kfxq73m8r8
-  - &notice-me-senpai age1wxewmzwlzgtsmr29tnu76n30kv29ra5p0ptvr2e3f3ymkqh569kqm07fv4
+  - &notice-me-senpai age1klzqcm0qq8kun75y8rx98e8hw8p6qz8zkkqf7yrdl9sw6uvvvvrqxs39e5
  - &tram-borzoi age10sedt7xftzu383y8g4pxsj0hazht8tnnxhcngedcsl93s4v9uvvsk99er4
  - &uranus age1xnaw8ssrq2hpsntnt8kdu4dlqh4lz3dcq5lzwn490cskz886te6sreuale
  - &tetra-zw age1nknzqnqm2d7pxxjl4e4w50jk8t8xx947l2qgrjhpqjfd33ypjfusw7nszw
--- a/flake.lock
+++ b/flake.lock
@ -34,11 +34,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1700522915,
-        "narHash": "sha256-h8WHdvl1s3/Kd0g/5Cw9fWTcYrZ7Q3sWGYwg9WNn2Ww=",
+        "lastModified": 1714248761,
+        "narHash": "sha256-BXalyUcTRbbG8pf6RaIo3jCcBkubSglOb62MA8pfnZg=",
        "owner": "tlm-solutions",
        "repo": "bureaucrat",
-        "rev": "850280178a8723ed8aba0ee47b56db1c36f01c6a",
+        "rev": "1ed7dc1f1f1c2bc3288e7b723d6a0c5173053fa9",
        "type": "github"
      },
      "original": {
@ -59,11 +59,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1700523298,
-        "narHash": "sha256-KvUSTjx6faT3vtErTlhuq24O3SQR9tBo0r+tO3dSYSU=",
+        "lastModified": 1714249501,
+        "narHash": "sha256-wrWuj6msUxlohCGVWfEcg5KUYxtkZAOSa4GjA5Z1tkc=",
        "owner": "tlm-solutions",
        "repo": "chemo",
-        "rev": "aaf80b8142348c56e6d55580f5f0dcef188df3c4",
+        "rev": "844ffaf63e9e233cb760f81be5f7b527210c7f66",
        "type": "github"
      },
      "original": {
@ -134,11 +134,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1700522510,
-        "narHash": "sha256-SJrjquABmF0uzCNGnPIS9gA8L92WIch32PoJfAe2qMA=",
+        "lastModified": 1714249308,
+        "narHash": "sha256-JOugZASWdqf8js/aiqtW+Z/Fy1gAsCkcLqjeN3PiZzQ=",
        "owner": "tlm-solutions",
        "repo": "data-accumulator",
-        "rev": "ab64ff684b8d242674b30c2325e62bddfbc41888",
+        "rev": "5319b79594df2dd3f142ca7e49aa549a37a1e808",
        "type": "github"
      },
      "original": {
@ -307,11 +307,11 @@
        "systems": "systems_2"
      },
      "locked": {
-        "lastModified": 1701680307,
-        "narHash": "sha256-kAuep2h5ajznlPMD9rnQyffWG8EM/C73lejGofXvdM8=",
+        "lastModified": 1710146030,
+        "narHash": "sha256-SZ5L6eA7HJ/nmkzGG7/ISclqe6oZdOZTNoesiInkXPQ=",
        "owner": "numtide",
        "repo": "flake-utils",
-        "rev": "4022d587cbbfd70fe950c1e2083a02621806a725",
+        "rev": "b1d9ab70662946ef0850d488da1c9019f3a9752a",
        "type": "github"
      },
      "original": {
@ -332,11 +332,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1700510336,
-        "narHash": "sha256-CHjn9N+DIB0Sxb+862Dp/JaBiqQc6bBqywVFeEs1IaE=",
+        "lastModified": 1714244204,
+        "narHash": "sha256-yXmLC0beeBmMNwvpk9R8EkWN7OSztU/Yg18m9/MX0eo=",
        "owner": "tlm-solutions",
        "repo": "funnel",
-        "rev": "98b0a67cfbeb8f692643aaac214187184b299e6f",
+        "rev": "4bdc18a09dd92876e0bc5058461b4026dfb20003",
        "type": "github"
      },
      "original": {
@ -355,11 +355,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1700510503,
-        "narHash": "sha256-SztDp6RnDRS80HtaNMOOkpJMdWwuMlF9RZr2aDKDWXM=",
+        "lastModified": 1714253000,
+        "narHash": "sha256-3c81gxWOt80yOkwvHLjFdZgpKW3HEikPXUliFlfEXTM=",
        "owner": "tlm-solutions",
        "repo": "gnuradio-decoder",
-        "rev": "5e122e74fa9380183428cc74bceb8ec0683dab74",
+        "rev": "4b012adec883477b19a88d272fd7e7a7900f275a",
        "type": "github"
      },
      "original": {
@ -395,11 +395,11 @@
        "pnpm2nix": "pnpm2nix"
      },
      "locked": {
-        "lastModified": 1703287958,
-        "narHash": "sha256-UYuskP3bdlenaRqauAQtPyb/yzCQxh1Dztu0WQ3oK/I=",
+        "lastModified": 1710334682,
+        "narHash": "sha256-4eI9sMQIEM3yJObH7+vpNcDKojD+2dreun7ULbZoxDY=",
        "owner": "tlm-solutions",
        "repo": "kindergarten",
-        "rev": "268363e8b84f45d1ee59566ff97193f1ab664cbe",
+        "rev": "9aecf55138e55ae83893df8db4acae84bf394776",
        "type": "github"
      },
      "original": {
@ -420,11 +420,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1700693622,
-        "narHash": "sha256-w4WpSJ5envceM9kxiXp28vWJEfTJCLInbSoFpWgOsl4=",
+        "lastModified": 1714249555,
+        "narHash": "sha256-s83SFe5H8ye1r/4hX5t5vd8QbyAF5aT1rN4EBXOzpeY=",
        "owner": "tlm-solutions",
        "repo": "lizard",
-        "rev": "709441590bfe576ebba8843e2842b803bc0ff8dc",
+        "rev": "6de687779e0d28fe979fc073eef49b0c9ba4b31c",
        "type": "github"
      },
      "original": {
@ -440,14 +440,15 @@
        ],
        "nixpkgs": [
          "nixpkgs"
-        ]
+        ],
+        "spectrum": "spectrum"
      },
      "locked": {
-        "lastModified": 1703208335,
-        "narHash": "sha256-BkAhzM8xC577hK3s9CTpOeJ/oAb1lSbBULcEVOPQPbw=",
+        "lastModified": 1714072181,
+        "narHash": "sha256-MOxTGzM8lgq8uo6zAy6e4ZUdzUpF/eSQPBXeH5G5BtE=",
        "owner": "astro",
        "repo": "microvm.nix",
-        "rev": "420e3ba01b521ba508236030d802517a34c35067",
+        "rev": "ac28e21ac336dbe01b1f1bcab01fd31db3855e40",
        "type": "github"
      },
      "original": {
@ -526,11 +527,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1698420672,
-        "narHash": "sha256-/TdeHMPRjjdJub7p7+w55vyABrsJlt5QkznPYy55vKA=",
+        "lastModified": 1713520724,
+        "narHash": "sha256-CO8MmVDmqZX2FovL75pu5BvwhW+Vugc7Q6ze7Hj8heI=",
        "owner": "nix-community",
        "repo": "naersk",
-        "rev": "aeb58d5e8faead8980a807c840232697982d47b9",
+        "rev": "c5037590290c6c7dae2e42e7da1e247e54ed2d49",
        "type": "github"
      },
      "original": {
@ -557,16 +558,16 @@
    },
    "nixpkgs-stable": {
      "locked": {
-        "lastModified": 1702777222,
-        "narHash": "sha256-/SYmqgxTYzqZnQEfbOCHCN4GzqB9uAIsR9IWLzo0/8I=",
+        "lastModified": 1713638189,
+        "narHash": "sha256-q7APLfB6FmmSMI1Su5ihW9IwntBsk2hWNXh8XtSdSIk=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "a19a71d1ee93226fd71984359552affbc1cd3dc3",
+        "rev": "74574c38577914733b4f7a775dd77d24245081dd",
        "type": "github"
      },
      "original": {
        "owner": "NixOS",
-        "ref": "release-23.05",
+        "ref": "release-23.11",
        "repo": "nixpkgs",
        "type": "github"
      }
@ -637,16 +638,16 @@
    },
    "nixpkgs_6": {
      "locked": {
-        "lastModified": 1703034876,
-        "narHash": "sha256-4bMPFv/bs5g1nEsXQwXlrAGJgjv1Ilr0ejdaTkBwQLs=",
+        "lastModified": 1713995372,
+        "narHash": "sha256-fFE3M0vCoiSwCX02z8VF58jXFRj9enYUSTqjyHAjrds=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "312ab59e8ade69e6083017bd9b98a2919f1fb86a",
+        "rev": "dd37924974b9202f8226ed5d74a252a9785aedf8",
        "type": "github"
      },
      "original": {
        "owner": "NixOS",
-        "ref": "nixos-23.05",
+        "ref": "nixos-23.11",
        "repo": "nixpkgs",
        "type": "github"
      }
@ -871,11 +872,11 @@
        "nixpkgs-stable": "nixpkgs-stable"
      },
      "locked": {
-        "lastModified": 1702937567,
-        "narHash": "sha256-bUNl3GPqRgTGp13+oV1DrYa1/NHuGHo5SKmr+RqC/2g=",
+        "lastModified": 1713892811,
+        "narHash": "sha256-uIGmA2xq41vVFETCF1WW4fFWFT2tqBln+aXnWrvjGRE=",
        "owner": "Mic92",
        "repo": "sops-nix",
-        "rev": "f7db64b88dabc95e4f7bee20455f418e7ab805d4",
+        "rev": "f1b0adc27265274e3b0c9b872a8f476a098679bd",
        "type": "github"
      },
      "original": {
@ -884,6 +885,22 @@
        "type": "github"
      }
    },
+    "spectrum": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1708358594,
+        "narHash": "sha256-e71YOotu2FYA67HoC/voJDTFsiPpZNRwmiQb4f94OxQ=",
+        "ref": "refs/heads/main",
+        "rev": "6d0e73864d28794cdbd26ab7b37259ab0e1e044c",
+        "revCount": 614,
+        "type": "git",
+        "url": "https://spectrum-os.org/git/spectrum"
+      },
+      "original": {
+        "type": "git",
+        "url": "https://spectrum-os.org/git/spectrum"
+      }
+    },
    "systems": {
      "locked": {
        "lastModified": 1681028828,
@ -1014,11 +1031,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1700869212,
-        "narHash": "sha256-koy8a2NOgHOUdLya9jNlFvcmvj+y9phQgfBIYjBHT9M=",
+        "lastModified": 1714249178,
+        "narHash": "sha256-FyA8S55zjYg9jL2LZAnRjASOaId5c32Qt9mvvS+u58w=",
        "owner": "tlm-solutions",
        "repo": "trekkie",
-        "rev": "4e5715582a16ed10f693c53a0ba614ddca09e7c0",
+        "rev": "f0b56107900db4f80a2b50f4aa9f562bb815aa86",
        "type": "github"
      },
      "original": {
--- a/flake.nix
+++ b/flake.nix
@ -5,7 +5,7 @@
  };

  inputs = {
-    nixpkgs.url = "github:NixOS/nixpkgs/nixos-23.05";
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-23.11";

    # naersk and flake utils are not used by this flake directly, but needed
    # for the follows in all the other ones.
@ -231,6 +231,7 @@
          specialArgs = { inherit inputs self; registry = registry.notice-me-senpai; };
          modules = [
            sops-nix.nixosModules.sops
+            microvm.nixosModules.microvm
            ./modules/TLMS
            ./hosts/notice-me-senpai
          ];
--- a/hosts/notice-me-senpai/configuration.nix
+++ b/hosts/notice-me-senpai/configuration.nix
@ -1,12 +0,0 @@
-{ self, pkgs, lib, ... }: {
-  sops.defaultSopsFile = self + /secrets/notice-me-senpai/secrets.yaml;
-
-  boot = {
-    tmp.cleanOnBoot = true;
-    kernelPackages = pkgs.linuxPackages_latest;
-  };
-
-  users.motd = lib.mkForce (builtins.readFile ./motd.txt);
-
-  system.stateVersion = "22.11";
-}
--- a/hosts/notice-me-senpai/default.nix
+++ b/hosts/notice-me-senpai/default.nix
@ -1,10 +1,94 @@
-{ ... }:
+# Edit this configuration file to define what should be installed on
+# your system.  Help is available in the configuration.nix(5) man page
+# and in the NixOS manual (accessible by running ‘nixos-help’).
+
+{ config, lib, ... }:
+let
+  mac_addr = "00:de:5b:f9:e2:3e";
+in
 {
  imports = [
-    ./configuration.nix
-    ./hardware-configuration.nix
    ./grafana.nix
-    ./uplink.nix
-    ./wg.nix
  ];
+  microvm = {
+    vcpu = 4;
+    mem = 1024 * 4;
+    hypervisor = "cloud-hypervisor";
+    socket = "${config.networking.hostName}.socket";
+
+    interfaces = [{
+      type = "tap";
+      id = "serv-tlm-mon";
+      mac = mac_addr;
+    }];
+
+    shares = [{
+      source = "/nix/store";
+      mountPoint = "/nix/.ro-store";
+      tag = "store";
+      proto = "virtiofs";
+      socket = "store.socket";
+    }
+      {
+        source = "/var/lib/microvms/notice-me-senpai/etc";
+        mountPoint = "/etc";
+        tag = "etc";
+        proto = "virtiofs";
+        socket = "etc.socket";
+      }
+      {
+        source = "/var/lib/microvms/notice-me-senpai/var";
+        mountPoint = "/var";
+        tag = "var";
+        proto = "virtiofs";
+        socket = "var.socket";
+      }];
+  };
+
+  time.timeZone = "Europe/Berlin";
+
+  networking.useNetworkd = true;
+
+  sops.defaultSopsFile = ../../secrets/notice-me-senpai/secrets.yaml;
+  sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
+
+  sops.secrets.wg-seckey = {
+    owner = config.users.users.systemd-network.name;
+  };
+  deployment-TLMS.net = {
+    iface.uplink = {
+      name = "ens3";
+      mac = mac_addr;
+      matchOn = "mac";
+      useDHCP = false;
+      addr4 = "172.20.73.10/25";
+      dns = [ "172.20.73.8" "9.9.9.9" ];
+      routes = [
+        {
+          routeConfig = {
+            Gateway = "172.20.73.1";
+            GatewayOnLink = true;
+            Destination = "0.0.0.0/0";
+          };
+        }
+      ];
+    };
+
+    wg = {
+      prefix4 = 24;
+      privateKeyFile = config.sops.secrets.wg-seckey.path;
+    };
+
+  };
+
+  users.motd = lib.mkForce (builtins.readFile ./motd.txt);
+
+  # This value determines the NixOS release from which the default
+  # settings for stateful data, like file locations and database versions
+  # on your system were taken. It‘s perfectly fine and recommended to leave
+  # this value at the release version of the first install of this system.
+  # Before changing this value read the documentation for this option
+  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
+  system.stateVersion = "23.11"; # Did you read the comment?
+
 }
--- a/hosts/notice-me-senpai/hardware-configuration.nix
+++ b/hosts/notice-me-senpai/hardware-configuration.nix
@ -1,9 +0,0 @@
-{ modulesPath, ... }:
-{
-  imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
-  boot.loader.grub.device = "/dev/sda";
-  boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "xen_blkfront" "vmw_pvscsi" ];
-  boot.initrd.kernelModules = [ "nvme" ];
-  fileSystems."/" = { device = "/dev/sda1"; fsType = "ext4"; };
-
-}
--- a/hosts/notice-me-senpai/uplink.nix
+++ b/hosts/notice-me-senpai/uplink.nix
@ -1,13 +0,0 @@
-{ lib, ... }: {
-  networking.useNetworkd = lib.mkForce true;
-  systemd.network.enable = true;
-
-  deployment-TLMS.net = {
-    iface.uplink = {
-      name = "enp1s0";
-      mac = "96:00:02:25:d4:48";
-      matchOn = "mac";
-      useDHCP = true;
-    };
-  };
-}
--- a/hosts/notice-me-senpai/wg.nix
+++ b/hosts/notice-me-senpai/wg.nix
@ -1,11 +0,0 @@
-{ config, ... }: {
-  sops.secrets.wg-seckey.owner = config.users.users.systemd-network.name;
-
-  networking.firewall.allowedUDPPorts = [ 51820 ];
-  networking.wireguard.enable = true;
-
-  deployment-TLMS.net.wg = {
-    prefix4 = 24;
-    privateKeyFile = config.sops.secrets.wg-seckey.path;
-  };
-}
--- a/modules/TLMS/base.nix
+++ b/modules/TLMS/base.nix
@ -59,6 +59,7 @@ in
    usbutils
    rtl-sdr
    hackrf
+    ssh-to-age
  ];

  networking.firewall.enable = lib.mkDefault true;
--- a/secrets/notice-me-senpai/secrets.yaml
+++ b/secrets/notice-me-senpai/secrets.yaml
@ -5,86 +5,86 @@ sops:
    azure_kv: []
    hc_vault: []
    age:
-        - recipient: age1wxewmzwlzgtsmr29tnu76n30kv29ra5p0ptvr2e3f3ymkqh569kqm07fv4
+        - recipient: age1klzqcm0qq8kun75y8rx98e8hw8p6qz8zkkqf7yrdl9sw6uvvvvrqxs39e5
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQWEdJWWpSci9SRkZVOE54
-            TDNsMVVJdU9CdXc2ZjVXamtSbGhPNmR6ekV3ClQzUzlhYlJHOUJNTStLYU94cURN
-            d2Z0ZnJ1NjZJL2JaYjVZRmNlbGVpakkKLS0tIDhSNUdQM21DRXltWmhaVXBEZjlM
-            Q282MlUraTJhd3QrWlNEL21RcnhJVmMK81sfG+Qj2Tvinu5DZ3yR/va52xMv+i/V
-            1T55P63lJ+8VTNSsDjKaaDzKJ6ti4pkFb4Uq6P/QpXi+p7mn6/2y/g==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4Z0VydStNQnp2ME1oREJD
+            YnhwZ1ZuRU04L01ONTNRKzJ4YUFTdVpCUVVVCktNbmdMNHlLQVYzTXR1UXRtd2xR
+            Q0xtd1BMNURnVS9vd3V3My9kanhDc0kKLS0tIEEvSmFOaTNkZndXZUpQSEFYcE5D
+            Mmd5eGx3TkVCWmtDZE9hNzdnL2dSd0UKlBOeMdcYT5ACU052RYD0XHpyWBPuSHJE
+            OrQZLZ7oADyUFLb8eFIPmWOZgKuZalzxONKogtI7yAvliTSZ6zcVPw==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2023-04-23T16:57:02Z"
    mac: ENC[AES256_GCM,data:JLYmp/Q7u9sr+/CyM5f5xovaQ0C+cEuCVMGSsyiXSnBGTTvMJm1s4nUX5g9DcFOEVEXA24Uxb7Sun353GIsuaXIAfRf6plqQ15e3r78uA52j72j6aq/124Le2saABRzYmNn+M8HTSi7AMURuR+fOtC4LPUoSDNEa9MRJmn/kEyg=,iv:sl8QPDQ8X+iwfhc/z+box8o64ZnTlwSmyP3H0mCF4+8=,tag:4px5bl+hYRkkzx8Dbca96Q==,type:str]
    pgp:
-        - created_at: "2023-05-01T19:48:12Z"
+        - created_at: "2024-04-28T00:12:15Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            wcFMA7zUOKwzpAE7ARAAkDPfzrUaiYMkkyvu65OUketaUTCAV0p4lMHEmfDGpcOF
-            gxMce52cybLFXf+nyHq1+Bx0eh2ejvetd28rY1OiSAHR/ExIMPU/8NC+/wruoKus
-            YIJK0iPX/cWMuTRs0mSZn55u44awJc2liWAqV5x3E6uo5fkLV/5fQn6yl7E0ESbQ
-            ie9E3h0ynM/wlCijvUn/tU2iGoXycl5+WX5H+lM+jHC+Tjr5xiqSuMY/n6gPMt+i
-            AWAx1ve4OxxSEIlywwAkURgMihl9M6hHy94tP1PFtv2VkQ7nHw9YM6C9CfvapIk6
-            NCxVauFXykBo4bF58Kdw/xyt+biq3qE7UWCKrnnfW14UmvqXffkK+QZZGIYEGQ51
-            iqqln+AdNcpsdFr6Mu8TfsEWO++YPYrl7M2f5HNlJjeIAHM6AyndNPGb363M/scC
-            JsikojFK5L77Nf+PVfMHFMeR04x3wS6nUqD1SYDd29ancXKf3RSgLOeO+R3hypXv
-            BduZgRs/lc4ni8xg3lREGXPaxGF5ymnGhcsinNXf9xbdBQmEJxc/Yf/MWkTPW7V7
-            8CBLwxp3jHgTVYbK9F4r413V1bjfjUmHjsyaaZ725XuQUt4Iw6TU1vpU6wrc7Hsp
-            eobEOPzKC5myXZ6YE5sGr8AhyIixFSCj/T/9E5B1uxeK1nnw5B4REXbWbToaDivS
-            UQGmCqVX0Zmlw1tRfq2Moua13M4kAWdgjxoi65WJC47OCwAifUwj406gOpbA4FjY
-            /HNuxEbLF3TBrJSRKAR3zGPE8eAWnMzX+uRcn2MbZ974YQ==
-            =QfLA
+            wcFMA7zUOKwzpAE7AQ//cPxWC1Xs4YvZh0q7UOFQQBS3wXFJs9UuzVniDxP+F7wO
+            VsCKeRf9yQjHAGDw9cVm9z85VZRLHiKTJTx0BR8hCtbLPl2p02U1pledwNjC9kKi
+            N7Pwjw5Dg+6yhlfol3YHlthi2TnQF38DIpBf6J0AqNr1c+1TLaOoj4TpEfRz3+Tt
+            LME0EeEIVUb8ZZPb3lC9syRgmsSuKt+aLQ2OphrtPAV0Bcy0PqHBSEUBAojBoEwU
+            b/iapMfF3LK3X5pKqgEetlDs/ztb5fBy0FJVnGzwLc/11MZw37SSm62lYDYqAdAt
+            amS0YNYl/moXscWHuPzR9ahFPlqm9tJ8+6Vs8RUJLBSjOaHQoP8EVO8/LI1OPCPl
+            2c5R/SDM43LoZ+ENvU2CHlYQwtkP9+bo9JQ8LJxlpK1BdcPUZvIixYU+xitX27df
+            Zm7+at6NzAI+UyowA1lnKcCZIZaujp5IJMMLQ77VE8iellSFTZzyGXuFt9jH8+kS
+            BqLVL2jwEuXRAdLpJeZK32Bhxw3T/8NhQ2BiHJpRr9TVGc+QB5fz6+Eq4huvmZRg
+            iGAsW6nD4i8Bb8OFWOk6AnPH6JAaZOe/FqVzuVBhCQ5MjsdERC2fUYj0PyV0JMSl
+            yhp0A11BakfraLibTjaP1owCJHv2yVx5C3XmJyD0gYJONpHbniwmQT1rQgzDXhbS
+            UQHxVTa/iW8AftsEmSxDdLNHeMOfoghW9CGfEB1ZmXDfm9LCQstbvjcyyVKbwwvo
+            oS9vxn6vAuftYpqzb04Pz/2/I/ofl/TRzn47YbjZYdFzSw==
+            =ZB0Q
            -----END PGP MESSAGE-----
          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
-        - created_at: "2023-05-01T19:48:12Z"
-          enc: |
+        - created_at: "2024-04-28T00:12:15Z"
+          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQIMA/YLzOYaRIJJARAAijkvVsyFAKYLJ9qChneaJl3ai6h4Hubb9BUwWXDvB45A
-            fLZsWYQlbrB9IoIXuSNmvVdYOs5vfSPQK0Tln60IasDqRN6QoVYpFm7TJTbVRqMV
-            rNWm2L3X0yoQ44P9UbbgYWJ4k9gCa83lfXj+3PgNG3yQxYEv2iPePgKUtxnb5KM+
-            5oZ0XzW/C8+N1c6ajft8g42B7u8o+n8uP72GF+OosjXs6KijuKRTvUHX/gW7T0XZ
-            6/t978EMez0SKCn35Rj4fTC+2Eda+tYtaB3k9EYzeC1ZyqHy/Sba7JvOW5PVETiF
-            Ll1DJrC+IazD3PQssxbVLLMaY9gTCr4ICX+rmtIYnbDEG7dZzZ00cfcLzAfM2Vhc
-            Zqcr5xO0MuJSfU8RIlFH7LhdkPGNJqvGta2G0amAE1QSOi2NPu6+chgU9zz8o1/C
-            +ebozBFlxPzytKM9yb4pAzpka1/sDKacnl3MqV68EDjUnw2M/JJrU34dYAvY/2BT
-            hYpGbHMVpIxFsSNz0BrZJ/IoF4fU1uemliTsrj/uheTXxgbkFbQOcfsau3YKZ7Y+
-            v7YbuxslhqBsYOo2QMHVMCIBD332zOPCzaCfVbqLwVrcJRvjGjLl+U8Jvni4ZdZS
-            tx/1F8skS2aMWBu/qoi44uc9F3u82z54mujIEnOdnPHxxnOSjmJUAF5IaiFpxWTS
-            XgFt93CtGpoAh17J8JXEdUKG7B+DNabLLMcAcT06hUCKu8V1c2G9keWez77yNXng
-            SccL52mqmHI3en3fjVvzDiQ39+dbpHskOywQ6WmXqUQbfyMVq/CZycaBL3+6T+Y=
-            =Wotl
+            wcFMA/YLzOYaRIJJAQ/9FczNMFWyj0IcbTBnP9xA16Myr9gUYCNlItaX+lbncEUy
+            gpmA4FrDmEdRU4s24XVX5aSj/CXpF6FRW0G8hjzWJtOiuNuGZ2WEojZyHXJo6yhp
+            PrA1dAOxmuGkAl1oSLb3C19XcVmkblw6WQ4pXidohojwrpggDoYb71d8kSCNsJK5
+            avFVS1vehUFvhBdT6RzTpHizUJUCP5y1f7F3BxBpGuNyE/kndm3veNglh3DoArzC
+            wRoBcZLHSf82AM7PIBVuE4/ExhAXLKBTSRuOac6j6THjo2mGCCV4/IRwpibiedRK
+            HjWu5F+4N+4WlEzy4qXjSugkiklF7UXXov5tPZih2v7JpSbyZGuMBBX4xMtTIT3S
+            GGoOhLw6puyb3onmHbxGkCX0yyaCiQ+lgI0/KDGqPwDE85yJY7zNFUdn908G91Mg
+            zBrv5LXh0pRO8ymxsovqUOiDyE7je10upQjQzW1CqdjUTILaFl8GmmN4ELPRoCGp
+            N7BJLX6nm7tXTQRbA8ESEYON1YkjMjc7BKcnB3C+PJwshaz/HsqwNoar9QU0AK5u
+            1MBtLvAHBFkoC74PO7cD8hCwz5MvlzbRLClB3OBbUx9Quy1hk5Q64mMielUnX9SH
+            TLBVTQ7f839kaH3HY/S280v+mhsHB0cQ5sqJpNMW5OpUibGtSEEgXkLEZY4JrFnS
+            UQEzzYbZIGNXV69mEd6MukpoAFsLU3f6pHT7WxXUqBwPpFT0FLJKxmDtE+4Ppkls
+            KaQXFJ/XKMHUiaDbSBqegktA+aaicQ3KV7gzrmF/z639sQ==
+            =Mv12
            -----END PGP MESSAGE-----
          fp: 91EBE87016391323642A6803B966009D57E69CC6
-        - created_at: "2023-05-01T19:48:12Z"
-          enc: |
+        - created_at: "2024-04-28T00:12:15Z"
+          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQEMA1N/l9+zlMQzAQf8DdOZXClVV5JG7dANWkRAZr2HgVlqmcoSGyZ1lOIpi18n
-            G1lCT+I51DnEd4xBmeZtQrRnCmfLIoEN92QQjIGLfHJQUGW1+uC359h81YeqSSwN
-            2YTgzBq6uHKLMe7bXWLxhzDIm+aZNWZgmEsVCmwahSFVQPgrDkMqg+cYg22885Qu
-            u+LUIL1QaUNDFLeQkN5BieLn1gFi3+fP3MkFlAqkpMwZtQANgYbgRRR/qF5LVF66
-            J2QAUGGZoH+qcE4GPo9Yi+5/PGByY6T7dY8xtNhK6u1Rx9tkSxj0jDU8ZwMpYTbb
-            OllVYbzzFxGob7+ciV+602fJfTwqUUJzolp4wW8GS9JeAbSGC4dA+BGOzVjB/5QR
-            qfjXPoeDTyaVgiObxcawiwxhQPPMo75odGrLy0u28UnD/M0sTg6ZaTV50XZo9HDI
-            kAdmimAvFF0UEvepyn5LLbxl+7x9ZfyJKxOu6TJkAA==
-            =L+RU
+            hQEMA1N/l9+zlMQzAQf/T8Izfy1OBB2aj2NUmucFjzlhldux5HrTNaSpzyVrTvnR
+            U3rgR4VV3pa69i23FXDHAsQ9XnCNYywh23ekOhwxXBS9VAXISfTi2bS/lWGx1Bhn
+            7HLFHDThT9WHwgPqGy0kZBsqSKdvLGP8n5Tad1udM6pmtcfBtuHmCOQVkkRvkd3R
+            9Oa/HrqyryPcOOMmrN8knuUgpKW5FJUPGzSKS/noXbJjj9gDGN+IymJAbaukZOcz
+            KiCk4fDtbTpxmabthkT5+zKPIP/6VYrpS37AvafRnW7arGTjm0wTLPaWe/DjUiw1
+            Mskx1DDatYDOKQVznsTwNXLLw7Fi9+hrZW9+w6Q2EdJeAXAOoyWHlxjBZcrH3WwO
+            VuX9fXum+3DxDz2/Gm6ZkQ9XC0XyjyWTGKhQcH3VWBg1W1HpAw+pjpXkJ5p0qLdX
+            bltnEH8KTBOP/FVYPH4hnSz55EI3AyaIfU9ouOy86A==
+            =kEKu
            -----END PGP MESSAGE-----
          fp: 069836A578F7939612DB4934F77D0F7E247A1EE4
-        - created_at: "2023-05-01T19:48:12Z"
-          enc: |
+        - created_at: "2024-04-28T00:12:15Z"
+          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQEMA1N/l9+zlMQzAQf/cX1rPSKDlUjkm20hvre9kMkYRhc1N0p1mOx2wuubIo/s
-            7kEzTjY/GaL0RLPL2201jXFl6nThxm/oLz57tPIY1mq2PTbBEYMYnW3p0Rt83gfC
-            fDf60fmooYsrA49nkwihK+Bgn1GljowlaN64H5j5Yg7IoRRwaS6hckrl5nNFsQbl
-            +wGizDXvUU9d27I6xoyO8RxbQXKUX4Yv7FxL7AaUGa7+XwiSlzQ5C9eVjtWYE2xr
-            akI50mXBy3Ni4F+TlEv516zULldvcRWtRu8x+3iLTsPCUGmQvAa9sH7mEbzrGzkA
-            i1Vnz17UlUcoWIaUe9yNnZiGxmWe2Dqtv/R+HHLKMNJeAfozoa9wKJRlkfkoHord
-            S1VIc5iO/rx3+Lnhmo5R62P8RU9W37pfKFkEmq0Ns5cA5Cpqwz19xsWJGhquklMw
-            9+HGWh1IfqLYfwkg7e/4LfGErMAskkjc0h7YD30lCg==
-            =jg7O
+            hQEMA1N/l9+zlMQzAQf+LKie/5/8BQ5Ij10/tWBbF6jjnJtbt/AqrkmlCAGSJjhM
+            PRJk/UkaLhOeR8PL47jZ99UwjyanlJdg6JB32IRUNVdqw3HsgjZK+QnFBUrFTvno
+            fe6bW11O1A0MJ+Gu4TGlDl0eGpL5NwrDWnPCAsoa2FeQbYIhDtkrooc3ohksGUWf
+            e8+0acnE9YRAe0WzAK/J49j+dFizLUVAk2kdUoyUyB4TtR5X7FZp+7lXkwB79m4t
+            Tfd7tSkuJCXym/8/hB2D4uTasATUkrRKPd4SDqlxxP/nzCEUyZWCJI3RGR11RV1i
+            /ckRmLNn127kj7RCiBmP8uPLLL++1/DBQPRbRoAz6tJeAYidyj4Jeb4Et3av3acW
+            N+uvFZ96zuZupZDXYW5nqolQIOCdgzythXZ7iYPHBpa17QlWgTc3o0Ylg0RqTvZg
+            8NleM4shz+A6oASZvxg6fZaG5nOK2/n/bxW9Hfc5oQ==
+            =P5Y3
            -----END PGP MESSAGE-----
          fp: ED06986DFAAE6A61B751DC2F537F97DFB394C433
    unencrypted_suffix: _unencrypted
Author	SHA1	Message	Date
Markus Schmidl	1f68bef6bf	Update notice-me-senpai secrets	2024-04-28 02:12:59 +02:00
Markus Schmidl	853625eb0c	add package ssh-to-age to base	2024-04-28 02:08:26 +02:00
Markus Schmidl	640a2af430	notice-me-senpai: switch to zw microvm config	2024-04-28 01:29:15 +02:00
Tassilo -	f8c0e60971	upgrading to 23.11	2024-04-27 23:42:03 +02:00
Tassilo -	87367f3137	half broken version	2024-04-27 22:33:15 +02:00