feat: agenix --rekey with laptop ssh key

This commit is contained in:
wi11-holdsworth 2025-09-25 18:06:04 +10:00
parent fc9f2a89d5
commit 2db3fbc309
17 changed files with 58 additions and 35 deletions

View file

@ -1,8 +1,9 @@
age-encryption.org/v1 age-encryption.org/v1
-> ssh-ed25519 LtK9yQ 3edXTIF3R9FV6nFioGmKfQj3KUhgHcBiLZqWvGYHTHA -> ssh-ed25519 LtK9yQ ffY9sDLotAZPq7WYBhBCo/+CG8hs8oSb+Zc26XQ5Kxs
whktnDd+FVRedb24p115Es/Z9VRHGUfuKP0ZnZckcH8 7JwKBUAUWfuOyfaf/pVcq1zv58OtrPAh9wGqPcEhlt8
-> ssh-ed25519 qLT+DQ RFxxvDwvEzCYWce3sgFpwpuMucStRCxcZJVl8IaCVl4 -> ssh-ed25519 qLT+DQ ulTuZ469zjWcwcuH54SUDaAsaNcpEqXkO0cdGsv2tEE
KdhOmU1bdunFZaEZ/rNEXz0USSKpQJefYQkaKmQwPy0 jwqDMwd/hyHvT+FQjHj8fziycK9WMGJqM6UZKB1yXrQ
--- Xqxy50Tk669XG4bJFo+Jn4iM3q5r43WykXJRPjGaRRo -> ssh-ed25519 7+xRyQ ZcybG8n14hpc/B9p1KWDzCi9T2UmVzzsTG32LtKtNFY
*—phž<C382> ÜhÁŞ<C381>„ź@†]jUŁŕ 81CixZ1eUgAZLS1LDceYeoGbKUPVqqzqjjJ7ACUHCCc
öŞă„ ٦Yَc˝ň<CB9D>oŚíŐ÷;R]ŮVë7@—Üä(Ę_QZŹVDH¬hÜ*fż --- 5eJlsZeXReu93xYN6WLtKfFycFyTZyrt0aMYgERe9ME
ÝÇ"ôŒº4<14>XêtºQqwáýÁ‹˜Æ(„¾Þ¸­ƒ±‚…ò‹èÊ3.JI¼ä6-)ö§áì,˜ó<>ªÕ²Úq ÁI~b®

Binary file not shown.

Binary file not shown.

Binary file not shown.

View file

@ -1,7 +1,9 @@
age-encryption.org/v1 age-encryption.org/v1
-> ssh-ed25519 LtK9yQ 5qUkcfVKMNSjnj55IEE50uzBq4+nnttmZTiTKhgvBgc -> ssh-ed25519 LtK9yQ 1+rVAfcPmwFSwlHIs/18EpAHAR/iAel9/u6LbPjfwgg
QacHV/T7u4mxq34XOtRNT2vK5ETKqBd7YGlaYC3hWuY BSOtFXzL3uC6H/g6VUzW54eW7VxXyCWHKsYJ5AUZvqA
-> ssh-ed25519 qLT+DQ iHIJ4YA/0hQ10X2lKYCWmzJWgcD3WtMEMcAmEN/KV0Y -> ssh-ed25519 qLT+DQ yWU5krUGrzPjgwatLYZXuf3R64amCNBv/6+GvmdYKRY
aMzsYlzcJTRTaA8qfynGaEtwAj727UCJC/vERY8R+Fo 8tA/JSbo5LZFRYvRYO8cKNVwhNAd2IFVnohFCDC6vK4
--- WmYMmCznOaPQJzltI7W77lJZr6UQ+z8AMlxSCo/flsc -> ssh-ed25519 7+xRyQ CNJWOa54gsvk6IN+6qEtmUEdaCqIoJb6TNdUooud1iw
<10>k<EFBFBD>V !JR<05><>><3E><>h<EFBFBD>@G<><47><EFBFBD>}* <0C><10><>Ǜ3<C79B>Z<EFBFBD><5A>rh<72>8G<38><47>T$3yb <0B>u< <0B><><EFBFBD><EFBFBD><EFBFBD>y<EFBFBD><79><EFBFBD><EFBFBD>h zwACF5+ovsPagA1pIHxYuAfcPWXm6trLBuBYM6EdgIc
--- MSCRgDUR1UPvp00lq4vlBKSpT75T17Khiy/pef6b/lc
<EFBFBD>À`$R±Œs<Öj¬¶:g>ô òÃ=TWÙôÕEúÂí1çÈ!0-hÓ­tކ‡Q„6£òÛ W

Binary file not shown.

Binary file not shown.

View file

@ -1,7 +1,11 @@
age-encryption.org/v1 age-encryption.org/v1
-> ssh-ed25519 LtK9yQ 9i8bOq3woX+NlmieWSmeoelNqN08i4ad2mGSCPjjlxk -> ssh-ed25519 LtK9yQ JC9GvXu4BNj4MUR6FaK4ujbLWwJ4A951aH7PooJHESE
GeEpaT+tQJe6Eqg9jdLkYUtMuWedB3oE8RsOw4ZtMrA FzYlAmzuH+UhmQnCCduYDLsJerXoezhsxjcLR563GZU
-> ssh-ed25519 qLT+DQ AsPmSML5ZJMt80pCK4MQGLJ5y1ZXHkroEIWKdz6u4j0 -> ssh-ed25519 qLT+DQ cHDIQyHW/OPHO1pZn3aaVD1iaUKRTWxsgXyWBiW3xn0
OZoIeyoaVTg49UoEZIE8kwW44GsOp9vNAgf+FYFcuzM Sj0xl1ZKJ15/tfKfIz0QVJa4ta1D2EWXBIAAVOdqTsw
--- EwP5WtBaG4lRoXtufF7P+arMMM1+012GjQCfWNnUG08 -> ssh-ed25519 7+xRyQ 0gApAofqyhWEF+clqpXUeZkXlXwQqaXuEireTblQJh8
<EFBFBD>×JB:+žyË ˇQŐv ŰJ-FËbH¬öűk…ŕ*Y±a™p=ă§®mźQźŢ]íéíßţęÓW žE\W58îY_AfOĽĽ˘í¦Ť™ýţ/?ef(f[Ú<>=`”ÝÉ6N: Za2PGL8XdYfxLS0QtvcBJVPtWKSavy8qspYVSPSo7IU
--- V/mf0wDrVeZey8WhWVTLtPSsa1zlovr6d0N4hcDRLFg
őę`PŢË7ˇ1öłYÁ./ßB‡#<&Ső
+ŕaG¤wČ
íľwzmőX: B¶ˇ&VëuĂצÄ)S [ƶľß 6© ßÓ1®t|ËŽ=ă\m<>T/†A2č<>

Binary file not shown.

BIN
secrets/protonmail-cert.age Normal file

Binary file not shown.

View file

@ -0,0 +1,9 @@
age-encryption.org/v1
-> ssh-ed25519 LtK9yQ mrHrXrAgVFW646Txm3QlAUi/WOXVkUdEQ+qWO5NFsz0
TMjM2Y3NChBeYADYRaezBpyY4SJ4cOKGb4Ab6cWC5Rw
-> ssh-ed25519 qLT+DQ CntS/zzNtRCQ5Lob3HrjECk1r9BzapxwMMOb3VNERRw
426vM91TSiLOBzoZO9Zu5Mdy9+s7i8FEkwyazCEbTbI
-> ssh-ed25519 7+xRyQ 9zqhAkU4RdxdT2xHTsvINuCZQbpL2MCmTFLgie9jH1s
OVtRGqVLr1Wz8WdmK2J+FqY5FOQIK1/rz9lP8S65RFc
--- TcEjvpATMap45CwfwXAbbyzF/NHra1AA865RRAUPfZk
z=ÁuÚö*ÃmY®õÜA6•l†¿qÎPÀÝë<C39D>½ÿçMl—Èù-,óZÙŽ{;<3B>

View file

@ -1,8 +1,9 @@
age-encryption.org/v1 age-encryption.org/v1
-> ssh-ed25519 LtK9yQ gydFv7SFOTuqfbV/QK56L6paj9dVOHmMYxKzUfDD3mw -> ssh-ed25519 LtK9yQ YVgPDwV8XS85LpMBbpgsXmoc2E0w2qopErn//kDHJzo
8Z20yv4cN75PJNsHE8dUGmLHi0c70GHskBd+TohSgLo ZX3RIdYPxwOzpLddoGhi0aJ4H89hcpmlPgJuyTiYzlE
-> ssh-ed25519 qLT+DQ 6xlhv9/VqZjYaFM7FveP0DGnBcWUlvqRAQIAg0cLED8 -> ssh-ed25519 qLT+DQ KQMInU5B/vVG4dr0DGAFk1Yf+LbnPkV7OqfiqRaNgzo
YLQ/q4kb3H8aNfsH+fzPfNw/WSOfUg7+VVw3ak7s2tk BeMLVvtSKSKIPplIorIJSBMciQj5GYF1ltGbUn8SsJA
--- 2w8MZjzFiUgK8kS8bcpz/AzqzGe+lwXVDZkhXU7qGwM -> ssh-ed25519 7+xRyQ Cr+rUSSDpC5WLh/bvWKJkf2SWIcljLofx3ybcVcK0z4
U»xZP7,«ã kqabKTHxNxH9xfgShKTcleNXjBf/huoU+hH9tnOx5hg
Ø Ã;‚£ÁÎÈ®šµåW&=<3D>Œ <0C>kaMò¯Äµe©Zp gqÅä‰8íN --- J6RjAbLUNOKkb2UQyVjgTyrfyrIkDFMkQtXZypBDfWw
1£4ôÒ%6½œpÒ< («â$$to¨ÁI8Þý‰;ƒÜpZ°ìÍb8Þ3hf!¢mNס<C397> ¼c8UÐ

Binary file not shown.

Binary file not shown.

View file

@ -1,15 +1,17 @@
let let
# keep-sorted start # keep-sorted start
desktop = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPHAnTQP77HQ/8nbf1oX7xftfKYtbH6MSh83wic0qdBy";
laptop = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOeu5HwuRayiXIZE35AxX6PmxHxbXZ8NTlTgHrcPwhcQ";
srv = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOeV0NxqIGIXXgLYE6ntkHE4PARceZBp1FTI7kKLBbk8"; srv = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOeV0NxqIGIXXgLYE6ntkHE4PARceZBp1FTI7kKLBbk8";
will = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPHAnTQP77HQ/8nbf1oX7xftfKYtbH6MSh83wic0qdBy";
# keep-sorted end # keep-sorted end
users = [ users = [
# keep-sorted start # keep-sorted start
desktop
laptop
srv srv
will
# keep-sorted end # keep-sorted end
]; ];
in in
{ {
# keep-sorted start # keep-sorted start
@ -24,6 +26,8 @@ in
"miniflux-creds.age".publicKeys = users; "miniflux-creds.age".publicKeys = users;
"paperless.age".publicKeys = users; "paperless.age".publicKeys = users;
"porkbun-api.age".publicKeys = users; "porkbun-api.age".publicKeys = users;
"protonmail-cert.age".publicKeys = users;
"protonmail-password.age".publicKeys = users;
"prowlarr.age".publicKeys = users; "prowlarr.age".publicKeys = users;
"radarr.age".publicKeys = users; "radarr.age".publicKeys = users;
"radicale.age".publicKeys = users; "radicale.age".publicKeys = users;

View file

@ -1,7 +1,9 @@
age-encryption.org/v1 age-encryption.org/v1
-> ssh-ed25519 LtK9yQ DlFSpGarWh5dC0MoHatf1qNojLzoOLXIifmBBYwxxGA -> ssh-ed25519 LtK9yQ Jj3KRTIEYA8+iG49vTA51zsNJ4btdWQLy51eReqHVlo
dwlHzXfNnCx8cpzPdYI3/sfB4upMGccm+MGfi7L9JCQ qvK5Dh15qHFtSLV4JTxt5lQccFk19uzIjK9q2C6+LvA
-> ssh-ed25519 qLT+DQ k9u/7jfgXO8KbtbZkR0p3iB7hsK54Xb7CEpBLAD9tQM -> ssh-ed25519 qLT+DQ HccKD1qbYlthbnBjHcmZDkzPKqIognQ38ZTQ/AkRjzQ
XQf+ChnVB0G4uE2SoBdr8wfGg1SAbml2I0zVsw0/hrQ nwRJUnl3J2+x8DeuvKjUm9Wq0GEDGiC16vqgUaeurBs
--- 1/KKI5MPgjg/5A9sKHAn22f7u78Jb6i0HjkIdVwPV6I -> ssh-ed25519 7+xRyQ 2YEENIDUuyc8QPpOq/MbmA2YiB3dXJ/xRhcQGzWpFA8
)ŸÛÈ ¦fÌÇMúOÆÂ8Á²ž¡õÎ6;¼¨l̆ÎËCjÙI8KßÝ!Hõ¶yAÐã…ÓêKž3'ü j8Q8+FWDWQMQ5B1ovYA1RoHYZTel7ossimA9RP5LVpQ
--- oyU+ckZayuQqElZsXVzrYUba4UYPQmCTM/dFnRgXu6w
}xÁåÚ?ÿšßœo)Ø•úˆ´<CB86>}zùcŒqÔîWþ +9?KùÌñˆBi€IKµœúúÑIªO(€þýP˜L<CB9C>\QÁ

Binary file not shown.