diff --git a/.sops.yaml b/.sops.yaml index 320f3f5..1f7599c 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -10,6 +10,7 @@ keys: - &g10 age15v6levndaa50p69d0hhgyhaduazre6zrgca9rcuc728umaenj36s2zqj93 - &g11 age19rgse270d0aq8kwzmnalafvrwqrjdhyrz7dejlar0dypf20hgclsx5h720 - &g12 age1mxqwn0gw25yaj48nkhe4nsc60l25nam0fdlaeqd8z5ft2rxhv9ksuc5fyq + - &g13 age1gucxgrgz6fadrqq0eyu5366s8946ctmsvtkw96r498gr7we4depq8pj578 - &g14 age14zehkczemky9y0gucf245zw73y4waq8w03lqakanlvjyxgwzcycqj47shq creation_rules: - path_regex: hosts/g1/[^/]+\.(yaml|json|env|ini)$ @@ -72,6 +73,12 @@ creation_rules: - *dictxiong-pgp age: - *g12 + - path_regex: hosts/g13/[^/]+\.(yaml|json|env|ini)$ + key_groups: + - pgp: + - *dictxiong-pgp + age: + - *g13 - path_regex: hosts/g14/[^/]+\.(yaml|json|env|ini)$ key_groups: - pgp: diff --git a/flake.nix b/flake.nix index 2a96ce3..2392656 100644 --- a/flake.nix +++ b/flake.nix @@ -19,6 +19,7 @@ "g10" "g11" "g12" + "g13" "g14" ]; in diff --git a/hosts/g13/configuration.nix b/hosts/g13/configuration.nix new file mode 100644 index 0000000..1362d99 --- /dev/null +++ b/hosts/g13/configuration.nix @@ -0,0 +1,21 @@ +{ config, lib, pkgs, ... }: + +{ + imports = + [ + ./hardware-configuration.nix + ../modules/nasp.nix + ]; + nasp = { + enable = true; + gSeries = { + enable = true; + serial = 13; + eth0Name = "eno1"; + eth1Name = "eno2"; + eth2Name = "enp2s0np0"; + }; + }; + networking.hostId = "e4a4ad31"; + system.stateVersion = "24.05"; +} diff --git a/hosts/g13/secrets.yaml b/hosts/g13/secrets.yaml new file mode 100644 index 0000000..1bc128f --- /dev/null +++ b/hosts/g13/secrets.yaml @@ -0,0 +1,32 @@ +telegraf: ENC[AES256_GCM,data:iwOXP2nO5DZEWJx0dZdXc2haoRaLxdSwjzPBwyw1hlC5qK/rbGcWwP9fASqkdGepohRUeidrXeUCQcawZsucD8XNqOLPjIgV3nSJaRmheLr/pTKghdNwaUOTk/ZwaffItr8wQt0cUuUUsCdN4ht1AZNwXPOyNIEiTv5wLGqU8E53QktO9VT95u5HSn+vsd8G,iv:PytDNMjF1/zdzy38DmwQJjL1FIc6EmyFzn56E1GoYEs=,tag:uEqnk9j8miAhvFszoqSLQw==,type:str] +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: + - recipient: age1gucxgrgz6fadrqq0eyu5366s8946ctmsvtkw96r498gr7we4depq8pj578 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrTU9FdmcrMkhsb0YvSlRw + Z2lUUElSUWR3UHJVcjZjU1BhempGS3oyM1JJCnRDbjMrbnRDcnA5RDhGQUxHRzZ4 + eVh6ZG1JYTJxalVyRWdTcUZNUUN6WTgKLS0tIHgycjRTL1o0WlhWVUVEa1hiMXUx + Q3IrK2lWcG5NOWJ3UGthN3VSQTFVY3cKhYuCAWpx8dyMqEXzE+eRr9mrWvoNwwRM + z7hkXadolx4tJk0VXs8c4/Ww+y/j5UCQBJVTGAOxTXei2Uf5MNNnaA== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2024-06-14T17:42:45Z" + mac: ENC[AES256_GCM,data:20vyoo9AEFyGn7YT1XcxBTvWLZpcB3OxFFo2Q4P0ao9S4tDt12rZvQFUq+yM/TzcuC4hKNYKmz6pj9SfdzVpYTek65I1q4+6+6WoHsQnPniXEXvwllnDnAs0xv4ftFTMcRLwhPGO5ggUe085c0u20Z+ETEzq3w7aZ0Q7Kx03e5M=,iv:x2JjJsXQ4JinKHPsjAp0je2PXMynooGerBblfy7S9To=,tag:uAJS8P9g1U3RFxofgYrYHQ==,type:str] + pgp: + - created_at: "2024-06-14T17:41:53Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + hF4DLBF4i730Eg8SAQdA/3Aa1O/28Cwk0MXHTi2Zru6wCPA8Cg9T1vTANDHPBEQw + hwEyz0qmRiOvqhF5Wpk5idBLRIHaCZUtNOzIWTzxIJRH/UH3qGB4TyH1Ey5P3rUT + 0l4BdctgzHh/SqQl3Ud/VIzrj0c4nYhgMrPVlhKt14DhDLOFzn/nBixzOBdVVJZO + 7QaBf2lqySLoMtXgWKzGDaiVmurkyJs3ucIQT3zlOIKWa7d3tTibNopFoJgOHEKG + =TT8i + -----END PGP MESSAGE----- + fp: 3E241558655D7FE06C6711A5A5D6250D1806CAA8 + unencrypted_suffix: _unencrypted + version: 3.8.1