summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
Diffstat
-rw-r--r--.sops.yaml7
-rw-r--r--hosts/omega-relay/default.nix8
-rw-r--r--hosts/omega-relay/firewall.nix8
-rw-r--r--hosts/omega-relay/hardware-configuration.nix26
-rw-r--r--secrets/omega-relay/freshrss.yaml47
-rw-r--r--secrets/omega-relay/stalwart.yaml39
-rw-r--r--secrets/omega-relay/vaultwarden.yaml39
-rw-r--r--secrets/omega-relay/wakapi.yaml39
8 files changed, 128 insertions, 85 deletions
diff --git a/.sops.yaml b/.sops.yaml
index 1c83d6b..6bbf5cf 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -1,8 +1,10 @@
keys:
- &admin_wilkuu age1hsxrd9shau86k7zz9wfdeplldyg5c2al6umnr7rn6tf7ewus64uswufr0a
- &server_apocalypse age19cw4x4ycrdhfdkwvp009czmvfhucpdtn8lme4ja0rvq7er87z3wsd2fxz7
- - &server_omega_relay age1n20lpr5x2aep3l3ta62x2c9cnuz3m495f2dmguqs08ezlqgu4vwsqfskyg
+ - &virtserver_omega_relay age1n20lpr5x2aep3l3ta62x2c9cnuz3m495f2dmguqs08ezlqgu4vwsqfskyg
- &vm_omega_relay age13x9grwfpqjgvjfcnwg5snuntp5emze85hqc8qwuz9nfphfe2pg4skl29r4
+ - &server_omega_relay age18u22lycxtcasvlm298qwzwuc97z56kkhw8ssy9yx4gzlkskuwpyqdz80g4
+
creation_rules:
- path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
@@ -17,6 +19,7 @@ creation_rules:
- path_regex: secrets/omega-relay/[^/]+\.(yaml|json|env|ini)$
age:
- *admin_wilkuu
- - *server_omega_relay
+ - *virtserver_omega_relay
- *vm_omega_relay
+ - *server_omega_relay
diff --git a/hosts/omega-relay/default.nix b/hosts/omega-relay/default.nix
index 90277a2..2235a04 100644
--- a/hosts/omega-relay/default.nix
+++ b/hosts/omega-relay/default.nix
@@ -41,13 +41,13 @@
in
{
stalwart = {
- enable = true;
+ enable = false;
domain = if isVM then "mail.omega-relay.local" else "mail.wilkuu.xyz";
doACME = !isVM;
};
vaultwarden = {
- enable = true;
+ enable = false;
signupWhitelist = [
"wilkuu.xyz"
"omega-relay.local"
@@ -57,13 +57,13 @@
doACME = !isVM;
};
uptimekuma = {
- enable = true;
+ enable = false;
domain = if isVM then "uptime.omega-relay.local" else "uptime.wilkuu.xyz";
dataDir = "/srv/data/uptimekuma";
doACME = !isVM;
};
freshrss = {
- enable = true;
+ enable = false;
domain = if isVM then "rss.omega-relay.local" else "rss.wilkuu.xyz";
doACME = !isVM;
};
diff --git a/hosts/omega-relay/firewall.nix b/hosts/omega-relay/firewall.nix
index 626307e..15a96b6 100644
--- a/hosts/omega-relay/firewall.nix
+++ b/hosts/omega-relay/firewall.nix
@@ -35,9 +35,15 @@ in
{
systemd.network.enable = true;
systemd.network.networks."10-uplink" = {
- matchConfig.Name = "ens1";
+ matchConfig.Name = "eth*";
networkConfig.DHCP = "ipv4";
+ linkConfig.RequiredForOnline="routable";
};
+ systemd.network.networks."99-fallback" = {
+ matchConfig.Type = "ether";
+ networkConfig.DHCP = "ipv4";
+ linkConfig.RequiredForOnline="routable";
+ }
networking.useDHCP = false;
networking.useNetworkd = true;
diff --git a/hosts/omega-relay/hardware-configuration.nix b/hosts/omega-relay/hardware-configuration.nix
index 328d228..aaf9d00 100644
--- a/hosts/omega-relay/hardware-configuration.nix
+++ b/hosts/omega-relay/hardware-configuration.nix
@@ -1,26 +1,24 @@
# Do not modify this file! It was generated by ‘nixos-generate-config’
# and may be overwritten by future invocations. Please make changes
# to /etc/nixos/configuration.nix instead.
-{ lib, modulesPath, ... }:
+{ config, lib, pkgs, modulesPath, ... }:
{
- imports = [
- (modulesPath + "/profiles/qemu-guest.nix")
- ];
+ imports =
+ [ (modulesPath + "/profiles/qemu-guest.nix")
+ ];
- boot.initrd.availableKernelModules = [
- "ahci"
- "xhci_pci"
- "virtio_pci"
- "sr_mod"
- "virtio_blk"
- ];
+ boot.initrd.availableKernelModules = [ "uhci_hcd" "ehci_pci" "ahci" "virtio_pci" "virtio_scsi" "sd_mod" "sr_mod" ];
boot.initrd.kernelModules = [ ];
boot.kernelModules = [ "kvm-intel" ];
boot.extraModulePackages = [ ];
- hosts.omega-relay.root_device = "/dev/vda";
- hosts.omega-relay.do_disko = true;
- addons.virtualisation.isTestVM = true;
+
+ # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+ # (the default) this is the recommended approach. When using systemd-networkd it's
+ # still possible to use this option, but it's recommended to use it in conjunction
+ # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+ networking.useDHCP = lib.mkDefault true;
+ # networking.interfaces.ens18.useDHCP = lib.mkDefault true;
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
}
diff --git a/secrets/omega-relay/freshrss.yaml b/secrets/omega-relay/freshrss.yaml
index ce4b197..9c757fd 100644
--- a/secrets/omega-relay/freshrss.yaml
+++ b/secrets/omega-relay/freshrss.yaml
@@ -1,36 +1,45 @@
fresh-rss:
- admin_password: ENC[AES256_GCM,data:aAKl2jCR4w==,iv:xYQXINEeywuyg8+guhS+kv79L/crXLquJp+k6l4vUkI=,tag:4UA4D9jcYtIGHh1FHBv7Nw==,type:str]
- db_pass: ENC[AES256_GCM,data:Sx53LIP7pQ==,iv:qWX7dMQ/8j00rxdRs9Gj//enxe6SMBqjIizX/xkFS4w=,tag:JFktb8O7DJSuNrsbe9bnWQ==,type:str]
+ admin_password: ENC[AES256_GCM,data:ujxub03hX4cIm+U5BnHqdOBkMi4HAMGg,iv:OOHnWL4ya9dJGz78SByO3iRrXZRi6ZQ3BNh23Xga/5M=,tag:ldh7LGkDlAoC/f0C2KmdZg==,type:str]
+ db_pass: ENC[AES256_GCM,data:P0EkUXci1LzZLqd10YCHxAdrPI5Qm5Sg,iv:NaMZ1Abj/gf3C0wUB25SjokI8i23IlZlA2NJevD/Rgs=,tag:kb/cE1PMAddg2+7HxQQVvw==,type:str]
sops:
age:
- recipient: age1hsxrd9shau86k7zz9wfdeplldyg5c2al6umnr7rn6tf7ewus64uswufr0a
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAydFI5ZWJLS1U2QjFIVmJx
- WHVwZGtuVmxiRUlTaUQwNmM5WTdlOWdNUFg0CllzMStMZmovdDJtemtoQ0licHlR
- LzI1QlF1TGlPOHRQbS9vMzJUS3o1UFEKLS0tIFZuUDNiTmdaWkxpNDV0eWlLYk54
- QnZLcVpTNFdJYjhXcy9ScjlreTdXaTAKjKimcaVOl5uS0tOBtFhIcDpfr7fFpJEF
- SYEWVGxeelgA2dUrZZRokjqzu65hMQBAMWqwjQknXXQ6c5NcLeBCOA==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxVUxvcWQ5T2lKcFNEOWdk
+ WHI2UlVrM3pGMDVUNlVzTDBvR1dKd0xPbzNnCkt4Rjh1T2tVQzcrMjFVaWpUVkpQ
+ VHdUSElYSlMyNy9EN1dLQVJwdkptcW8KLS0tIG9nSS9LaXI4RGJVRlZZZ3pjSFkr
+ dTF0TWFLcTkxamxpdkJhR2xCOE9PODQK+yTP8Nk0kuhx/kRoQttRadrQEblGhzQn
+ wWpV/fi6N8PFHLTRHr9b/7tjs3HEQjOHdhHR7Te00d7xus51W3sS7Q==
-----END AGE ENCRYPTED FILE-----
- recipient: age1n20lpr5x2aep3l3ta62x2c9cnuz3m495f2dmguqs08ezlqgu4vwsqfskyg
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0NzJBdmhldUo3WEt4Mmht
- MEZ3eDNhQUliVXA0aHhrbHlOZWNxL1dNNjBrCi9LbUtURHBkZUVWOFlvOWExZWtx
- VFdDekhyWXhsSmYvVmtrZkhYR3FhMzgKLS0tIC9tc0E4VUxjcHVadWUvSHZBTmYv
- VjN2a3RnZURSUC8zbGZQdERDUGw3dXcKvQNkSCtPvZkyx3y4kepyRVXZX1pqRZNT
- 9jYm0QpBd9P2KH55Um9/D96psP6KQYUf9E9Di6aSVYRhIt+qYevfjw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqMzlrc0d5SkYyR2pMRkRp
+ MEF4a2JVSVRTMDVBWlNvL3I2ZDIwMW9pMWdNCjl2RTR4RlU3UXJPOXRaMFVlZmJN
+ UVdVelJtemhYLzg3QWJZeUlLeUVHQ3cKLS0tIDdxU3M3SlczelU1cGt5blppUWN6
+ SDZIQTgwMnI1bnpEakQ2SjlNTTRkZzAKuQcMWPH0qM/Pprhcvfep7cG2VuU+SLvv
+ ENd5GdKX6rYmkaoIGLKTzIdnchhW6pT/24ShG/KXdRZTE1T+i859jw==
-----END AGE ENCRYPTED FILE-----
- recipient: age13x9grwfpqjgvjfcnwg5snuntp5emze85hqc8qwuz9nfphfe2pg4skl29r4
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzeHJGVTdObmpCUUhwUGFK
- ZVBjejFpWmNicmJSZUU2NjBkNjQ4bGttN2pBCmlaU0FqcStEdW80WU80SlRRSG83
- ellqa1l0MnRoOWFIaHZMREFLS2hnVVEKLS0tIFZMV3lXL1BrejB3U0Q1RE85ZGFN
- YjZyWGgzRjVIb2R3bDhsL2wvanZrRVUKw251Sa2TV66HFZSwzxLL43BSuG6jhDM7
- 9mMeFzmzffu0WXtLFppPqEX71Bj6i0N6qNBKUTIoDfnBLJoX3ptW+g==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0YzFSRndkL2NvRVpGT25S
+ N1NzZEc3WVJrT1J0VjUxVURTb3B6dkNyS0VrCk44ZTNRV2xMNUdXWEFPR2gwU0Nt
+ R0tEbDZmMWUrMUtKMCtzeDg5d0sxajQKLS0tIDh0ZUZjZ0xPODdVMHFTckxFRElI
+ SEFzQ05Cd3ZMamY5TldXb2xzdFlyOGcKleeerfbPxt9TXWgV+4ENNGWmXjypbbah
+ U9sN/MJA5G7QCOdGqEVHdu/LTubrfAvSkkGF8qacfntEa3wADtyNYw==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2026-01-25T14:55:26Z"
- mac: ENC[AES256_GCM,data:8++RevhtJBSX10DrrQO1sB8iqysw1MZGdkifmD4kZ1u2WwEQrWGtEk+W4Vnfhik8OyTFHjcLOmEdJ4Ksn+yrWDm1w+Dvw9/nPGQbS5ARp4sLp7likDn++F+uM0MI2UREIAxxys5QkcUWSF3/Ct6T9JHklKU82yWjRYjIAuLYY0M=,iv:+9zPYgRtHax95taB4ix3MwyB0cqIhzbbDb90fMGa97o=,tag:KjOM9/pOKKGZC3RqsKO38w==,type:str]
+ - recipient: age18u22lycxtcasvlm298qwzwuc97z56kkhw8ssy9yx4gzlkskuwpyqdz80g4
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBYkdDU3NRYVpRdWwyZitM
+ cjRvUHpqZmVYQ3NId2JxTTNvZ250b0Zyc0hZCkFJNHhEVmVOVC9PWjlkdHBZUHYx
+ OXltSGZwRkE5MEZiaEtzOERpcFhQMlEKLS0tIHpoaEIvaG1JcVJTd3hycUZNMlhZ
+ T0pHQTRBa2hzTGQzcXhRb3BHMGRzeEEK3xM2j44QtavaQ33zykfY4dlACS7lOXlS
+ XNwK9MMBhfbnN8ahZPBJiND1sm4iWcrnjWlOajVegppsA+Y0yAJAjw==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2026-02-01T18:41:41Z"
+ mac: ENC[AES256_GCM,data:75PktshY0baUFCx1eshC7bObCAbo+QvvepN4Ig6JYUr0qWM5PIa2TUfAqbh4MF1kbxysQ43sn66sxvkoyooUdA/Asg7vFdEq/NF7SCpkt/OUaFP5JWSl3i4eLU2Li00bqEkrjN0D+OdxvA8JJXXYZXZ1WA0RewEcDeG/duA3Gto=,iv:mcV3jCIVTatWNGoScAmirbR3dmGwHgH+W9SZwdWD8NM=,tag:az1Tg5/2dgPVtfbBx2rEeQ==,type:str]
unencrypted_suffix: _unencrypted
version: 3.11.0
diff --git a/secrets/omega-relay/stalwart.yaml b/secrets/omega-relay/stalwart.yaml
index be86604..64d9286 100644
--- a/secrets/omega-relay/stalwart.yaml
+++ b/secrets/omega-relay/stalwart.yaml
@@ -5,29 +5,38 @@ sops:
- recipient: age1hsxrd9shau86k7zz9wfdeplldyg5c2al6umnr7rn6tf7ewus64uswufr0a
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYU3B3MU5xOW9WQTcxVkcv
- SWYvVjJzRy9QenNTdk00eEZ0Y01lek5xQ1RBCmt0M2NrSmNKSW5sNFdadDdtbTcz
- R3VqTG82SnMwc3VQYzRQSlhRbEJrbHMKLS0tIDk2OUZ5WklXVFpnUUJOZ0Zad2VI
- eXhVaFQzNGpGL0sxRmdFVXpCYmN4TTAKauZL/nPl7oJqRqr60tC3EzMGUEU2qN3N
- 1DpM98NkcS2U4jR1hRSn37JaJjefjCccvzz5lAuktZSffUAiEWOCZQ==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZMFJ3ZTZFMzFTSThPTTc5
+ R3hlcXN0d0FKZ0d1Y0F0dkNWaThEcnVsVGt3CmxkcTNXa1hEV0NaUFBQYkZFVWRL
+ T1JMWDMvWTE2RitJZUlHRkpNTXVMRDgKLS0tIHoxd2hmZUx5OGVKMjRyUUt5eWZo
+ WE9tcCsxQThMN3J2SW9iZi9vM1h3NncKDIBFEkix0DG0TpsoAKNmT9y1cPf8QGUY
+ l0DhwfbUy081Qd6EvW3c8WaL4uKiN45PtV5swUl7wZUkExSt8x57yA==
-----END AGE ENCRYPTED FILE-----
- recipient: age1n20lpr5x2aep3l3ta62x2c9cnuz3m495f2dmguqs08ezlqgu4vwsqfskyg
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxK1FFWE5BTDl0TVd6VTFJ
- OVI2V1ZCNEpDUEROc2FpdG53REtHcDVYemc0Ck9YbHBhWjZxU3BFVThHc1BqUFBS
- cFVLRlIreVFPaitRRDhhSkVIVnVxd3cKLS0tICtVblNoV3FFRWpLUlluNUwyTHQx
- YmRpUlhmTk95K1ZCTXhLN0hTdnRUeXcKbG/91FrcT1nLdFD0FO41iur3Y9WhO56M
- N0/8XwKh+Gmi+RP+fCCHSRvnNWkpOVGs44r1GMDsMWfr6O4MRWHOlQ==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXaWE1bGcvMkhxaVRZa1Jz
+ RTlxR3Joa2xLRjBwVGc4NXdTUXNoZFc5alRnClc3U0wzRlNhWjhUWGJybW1ieHB5
+ NnRRSlQ2WkYwbysyOWNsZzRLcVFEVXcKLS0tIDh1ektNWllFSVBJVzZIVVhBNEUy
+ MXdIdFEvdm1qQXp3aERVVk9BR3J0ekUK0MigpfH9/0kazAnUpCr1ubzSaKBNU+k9
+ bxiK9cEIH8+bhKe5QujimM4/sEtNzTbXo2KzO6s5ez3ba7/VcT6SxA==
-----END AGE ENCRYPTED FILE-----
- recipient: age13x9grwfpqjgvjfcnwg5snuntp5emze85hqc8qwuz9nfphfe2pg4skl29r4
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZVm5TbE1haG1RSEtOZmM4
- blg5YkhRc2RsNlhNanQ4clVhK0dENU0yZ0hRCkpXb0syNEFWRjVKdXlneGlmRW9F
- MC9oaFY4VWdZRHVGU091MWp5N2N6RTgKLS0tIE5CV2dxZ0FuN0ZSUnFWTVRVTUJV
- VC9aeWtvSU9lR3JRMDJRMUtYa0pDTFUKTtogMiIWTBdkQZYykDRbXWyeOesqgNNp
- eWWI9hTCWMWRk7xUSddxCRe6sLQDtXEjBhsU0hbcaG9hW3ZGcm5M7A==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlaC9vS2U2UzZjUmVaeHBz
+ U2lKOHRIN1FUN3VwOTRBSVZjZDVQT0xWb1dzCnlPSmZQb0JuYkFRWWxMQzM2bnp6
+ Q2ZnNDVMRDBtMkR2YmRic3V1N21OQVUKLS0tICs0a3dhSXYyZGNFMi9NdXlVaktK
+ bnlTdksxRjk3ZlhvODZpZjE5RVRHL2sKSjydmq8Yhzn2Ze9/UJBONcv5qHjsEDoP
+ /ERd6jQR9Hi8B6v8fUF5W56VeFcciJhj4Paxt7cpH0xlSAz0XAC8zQ==
+ -----END AGE ENCRYPTED FILE-----
+ - recipient: age18u22lycxtcasvlm298qwzwuc97z56kkhw8ssy9yx4gzlkskuwpyqdz80g4
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2U2VhSnl4aDN4bmk1elE3
+ NlNjL3d5SG0rNUZDcVZNSmVTMTJTNkRsN1FJCmpjald4YWtGejR2dGI2U3ZNdUtE
+ Rk1PRi9uRFpnUlVrMFpzU0IxNTRicTAKLS0tIG1KNFlJeWtZbjU0a2lsS1NRV3RQ
+ aVVRTjZSUGdsa2lPWmQ1Yk9yYXFrcmcKq3rFIP2fGpqsFujP27bgUhEfbg67ULv8
+ EbaohOYOQJiCeQfRdT7IwWIjTVcBhyU4wDw5Ss9HFk8faQn2wrQdOg==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2026-01-17T21:45:45Z"
mac: ENC[AES256_GCM,data:ZN8Zmo6yvhuyJKrnAw4btIf6FxEWiQuCCBpWedYGj0S973YRgEbl7Q9HKsYrVOwNwGIMS5MBv+hjjvOMZvJU0331V7PefRy4yzqN10pJLgLwyB63ZrhOdY87q9U8Gz3K1qOoPJievJmyxBwUvbdwO7JWoeiNVxsC+YwGZiJ19yg=,iv:OillC3jS5bILDrZahmsN/sztSlFqrr2BpqzUYjdd7vU=,tag:28az0UH1hVcEq9532yY8nw==,type:str]
diff --git a/secrets/omega-relay/vaultwarden.yaml b/secrets/omega-relay/vaultwarden.yaml
index c09eb12..96f4841 100644
--- a/secrets/omega-relay/vaultwarden.yaml
+++ b/secrets/omega-relay/vaultwarden.yaml
@@ -6,29 +6,38 @@ sops:
- recipient: age1hsxrd9shau86k7zz9wfdeplldyg5c2al6umnr7rn6tf7ewus64uswufr0a
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5bEdrYTZSdUJTRTFqQVhu
- U3FGcldBdTVPTTdCTjhmY3d1VGNhWWdxUHc4CjlGei83Uk9MMXJveE80RGtGVjQw
- ZFJ2MHZyNlYzQi9CenNNMVc4NmRsRmcKLS0tIE4xeEFoVTUwT0hRekUzZVNQOEJ2
- SDBaZVlPNVBuWjZHZXlBMzJyQ2lQUGMKlU+7dEc/bshenwiuXr6JZPvC3YOCQ9TW
- lZlE6n385Xxqn3IpCLx29DWPDEDGxa5jb8hUDQrEk3f2IJ/ZjIl12A==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4RU5QRWJmbVRIY1MyODVW
+ MGdCRHVweUU5c0dJdEE5dEo0V2xhM2g1dG5nClpqRjQ0V1N6RXhaUlNyMTlrL3dX
+ c2JOWWxyN1VsOVFrc1JOSUtRbGVPdnMKLS0tIHc3ZGNQTSt0L1FjNlRuWE9MY2dY
+ a3pRRHpNZFladC9hTVk1OUFRL0UvQ0kKO33IpQ+8J9CQ1UGLzVTXXETKflB/68Jf
+ +ouT3ORbnnviO6lI088VQ9Vb29ymFAHPhsBGCe1epsSoEV/fc317dQ==
-----END AGE ENCRYPTED FILE-----
- recipient: age1n20lpr5x2aep3l3ta62x2c9cnuz3m495f2dmguqs08ezlqgu4vwsqfskyg
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrUWRmOXNhQkgxQk9kUldj
- STIzMS9zR0w3Q0RGVjRFK2Y3a080MHV2U3hNCmovQk5XeUU5Wmp0WnFHcGp4SGhG
- TmVSaVl4VDBQNksyRmhnUVJtaXpwbUEKLS0tIGhkNjNYVmt4VTRTYVFvZTJJMEpT
- eXA4VTdIU3RoSUNHcFd6bGpiVUFsRVUK/F0tJs4iQhbVsaRXjyN32SbQdgEHd93u
- /HTAxWHXGlzCRoXeUosSniMpSbr5MKDFuqOeHjsiXczCZLHI3mReaA==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqekFwWDFKNG83bFBtU2FD
+ QVlUVTVBcHErbGhyYjVOekkwcTRhb3o1bkhrCkFUSjd5bWJ3eVN4RlRnY1NtZVlO
+ MzRIN1pxa3pST21LZHNEWGZRRndVZ0EKLS0tICs5bHMyVmcyOG12VDlWMFdHcFBM
+ ZFZsdkhRM2VQMWZab2dQakYzVzM1T28Kt3WOAaEZoOHJq99TbXfJzogtcqfOJ9hf
+ t4scV+Fi7PKagOd2aSxJeUds7W1lnUMVhDXyWbaWZpUaYwozLvYfLA==
-----END AGE ENCRYPTED FILE-----
- recipient: age13x9grwfpqjgvjfcnwg5snuntp5emze85hqc8qwuz9nfphfe2pg4skl29r4
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBML2dFb3Uxa2NRaXlXMXA2
- TDE1TmlwU3YxbndkbmZYZGxSVGxYSVY3U1dBCjRQK2ZsVi9ZTXFFVG1LeCt0SVJr
- Zkd5dWt5ditaNkpUZVpkdG5QQXBuYmcKLS0tIHBLa3RZOTVrYXNyVmFGT2FTTFFC
- TVVodExqMENHb2prTDY2dE5JdEtJbnMKouGL7NPiWmFg4/oT5sT1n+h0JlZ7pjLX
- KPB/yOD4nswALO+158pnaxC6KBLkrbPBwrv0uW8XZGVPQE3C3ufhmw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkazZoa0w2aUF1MG9EMnda
+ eG1MMVprcFVxN3RuQlNWTUNJSUMvaDcvYW1jCjJuSTcxUXVvN1hkZDhzMFFvWlor
+ bjRCY2hxZkdDRTZUZnJSRjhPK2pKQTgKLS0tIEl2TXB3TjVvV2tDWU5jbERnYkNn
+ VWhKNXhhSE5MMm43aWVtYnhxUWZvQjQK2MZq9ERlfDUyeWVCWHteFnkQcFsckUAZ
+ UzQ7MZv01r9s+LCCaPjOMbBW93zKqv3UzSMiVlNjU4OSu1E+WBNkSg==
+ -----END AGE ENCRYPTED FILE-----
+ - recipient: age18u22lycxtcasvlm298qwzwuc97z56kkhw8ssy9yx4gzlkskuwpyqdz80g4
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWY1pHV3hGL0tzVExwcGdt
+ SUlmNWpqR010NXAyMnFRK2gySjFnUTRVY3dNClUveUpjdlNXWXZueEJDWnFYOGp3
+ b08zM2J1TGxNV0xXU25vRXNLbGgwOUEKLS0tIForWEhaUSt0aEcrSUNOaVhMTDhW
+ ZjhLY2NEK1pnMUtVaXNqWTVPQ083TkEKXsPEdc8ofY17oSU1JwlCE48u3JwWen9q
+ pN/2LN1kGGEupKoBYtDnwHsGWOtopgW5CG3QT6JRGukvXFeK/YxPwQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2026-01-24T19:54:55Z"
mac: ENC[AES256_GCM,data:7xNKZSR9CD0U7LhQ0ziHhgafNcvwZdWx+bQAffEVr+zk/1uC4LZn8vpab9Mwkma4ycW0w++LZZxNWx4lDJTLSl/+bGYb13pBGKiai5+4Bi7JIt5z9UAjLasPKTNCZXvXKv4Y2QLGT+Jqqkaa+e92RG3WSdnLwfZpoGUu89v/ifo=,iv:cwYU8650Ro437NpamndB6yMGUsGFxmtmWlwPwyC4VKE=,tag:qJlnztMaE6DhZ2WBQpCzLw==,type:str]
diff --git a/secrets/omega-relay/wakapi.yaml b/secrets/omega-relay/wakapi.yaml
index 4111371..c0c6174 100644
--- a/secrets/omega-relay/wakapi.yaml
+++ b/secrets/omega-relay/wakapi.yaml
@@ -5,29 +5,38 @@ sops:
- recipient: age1hsxrd9shau86k7zz9wfdeplldyg5c2al6umnr7rn6tf7ewus64uswufr0a
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwZ1Q5UVhBUTJzTkwzR0tT
- Z1F4TG4zK29DeVNYN05XMm9ieThqdTg0NFZvCmRpSEt5Rit1RThNdlRvTDNaek1x
- WXc1L1lHMW5YWlQ1K2J0QnV6eHI0ZFEKLS0tIEFsWUQyQjkrVTk5MHhhSkZ1eGw2
- aFIxbjQxNXdqbjg3ajBwNXlSRXJtSmMKjctdEDX4nY2W31zZY8ojqiyabVMMMngN
- u6fwaGKZp20tdi/pZXs1d2Hsi6fGXFna58Y5hoToBotnPbUBSvrVQw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTOUNpb2ZYREV0S01EbTdn
+ Qk9vcDhVMDNuaE5CK3dIa3VNQmVoUlAvK1Y4CnV1azVXNG5wbmZmRUd1NDlzUTZE
+ Zk93UVNTOWNrZ3ZOSjEzUnQxYXJDZVEKLS0tIFpYUFpDV1R4V3VqTDVEU1VSUTJ6
+ REtYVy8wamtrT3kyM2pJSm5DN1BPb2sKevfns0uEHInZfXCFUGZ4oZ5GEEwNJXSw
+ M78GxitL0clIBWO3F4OZsdnZArW4vM8bNaIBusiD1m9/n9trRFIyEA==
-----END AGE ENCRYPTED FILE-----
- recipient: age1n20lpr5x2aep3l3ta62x2c9cnuz3m495f2dmguqs08ezlqgu4vwsqfskyg
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzOUp3RzhRZ2k5d2RINDFy
- WWthZ01TUXd1MTNnaFRYaitneWswTGRJU2dRClBBYWk3Ymh1TW1qL1BOTlpGV0kw
- WmY5Uy95eDgvVW04RlNGT2o2dzVBRVkKLS0tIE9qdTlqTTRYSXpNa29sQkgxbzlM
- eE93ZXhjcWQxeEt5SjFuQWJVd0NOd3MKwUISLRBM2rstUdf2UR/wbWptTdh4mkc1
- 2fZC+V9jcJaYbLImA7ukpamUiyv9RwRGMDQjkh0jjy/w5B7PdtNJ3Q==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDcVN2SVVFdEQ3WVIrcHlO
+ UXMrWTBoVDZMend2bW5Mdm1UTm1LM25iWURRCitCTU1wcnVsUkNuZ09yR2phaVRj
+ aTRQTnA3ZTZrMmlpRVhZMk5FL211REUKLS0tIEZnVE5TRzBrOTRKQm5VSkpJRmZy
+ dUFqczdMdlVITVhncVVEZHU3bHp6dXMKVq5oQVEOQOPwIq9cfVS0QalV8lR4UbOF
+ jDMpHeJfA4wTOr/67SagAORPGHQBBplsvLRh4nhhFVci8yhxgSN4XA==
-----END AGE ENCRYPTED FILE-----
- recipient: age13x9grwfpqjgvjfcnwg5snuntp5emze85hqc8qwuz9nfphfe2pg4skl29r4
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuSkxjMDRzdmYvOUxBbkJW
- MWhodkFqRlJPZVh1WVZ0ajdZRk9EOFlVdjBrCm5iQUlxdDQ1K3d5dUUzc2pUbG9I
- Z0ZESXdZWGtLOXNnQVhFWFZYOW84MjgKLS0tIG52N09sT0NpUHJWTUs0Wkx3NGV6
- My9obEZlaEE5RHpqVk5Ca2lNek8xVGMKJFKplcDtN7DO2NONqxesSZTWZMylS16n
- MLX8+uhPWF5K9E+YZICuSo/imVchIzeWYP470e/p0RUEvjpXio4AXQ==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuRnhQbElYcVZnQTk4Wml2
+ eVNwYjFWNFNPZ3dXK1hEWGVoVlNCVysycVNBClJ4bzIvbFdxSVRVNXdPYjNrZndF
+ MG5SWVRhemVFZXowNnhWRGFDOGw5MUEKLS0tIGpQQXRVVVFZNVE3bncxcW5mR3NS
+ eENEMnJvWmJ4OUdNdGtVZ3pHbXViYlUKIcYc91zT5x6QxndMCbpZtCl+P4h7neBq
+ PqAlzke7BJd1+bDV3mTnmojQzxp0l4/Lv2wVLiinexOcmMBn8oLm4g==
+ -----END AGE ENCRYPTED FILE-----
+ - recipient: age18u22lycxtcasvlm298qwzwuc97z56kkhw8ssy9yx4gzlkskuwpyqdz80g4
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxTkFESlZKRWNKMDg0TklC
+ M1h3OENFUlFGOU9MRllHdXBzZjk2Y0RZSTJNCjFXcGtMRnFIcU9uOGhsSXoxVDl2
+ cTRNRFYvUzJUOWVPbWYzOEE4SHNlb0EKLS0tIFF4TGEvb1ZZeUdWV215bk80YzJR
+ TlI2QlJScjZ1aFdBQjFmQlJibEdOZ00K6MxXrgbF+D7LHLteD62Cdo+czJvXfQHW
+ frcqt29Qx/rMjOWJ29XozJHMWqVvH2UKnAYcCjF71FPC5INl1kH85A==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2026-01-25T12:52:57Z"
mac: ENC[AES256_GCM,data:tkmq5bwnqmucoRJuD867q4TL/GWPjDvkQO4LUIsVwXtIj+CUmrh3CS9rAMMS+dcMGuG9e9H3hJX3LKWNWIdHTuA6GqIAU94LmmKI57gm1EPmaakJWB9P9gIP/N1IVQS3fc451RSU1cd94Dy1rApTjsspzpBxeed24KqoY67/76E=,iv:cfQqv2s2bSiB7+T/9OZcaA7N05LqvWIBlMr6NfLoTWE=,tag:4/o3V1CS7urudjqUjN5FkQ==,type:str]
generated by cgit v1.3.1 (git 2.54.0) at 2026-08-10 23:21:57 +0000