2025-04-01 09:40:55 +02:00
47 changed files with 203 additions and 454 deletions
--- a/.gitignore
+++ b/.gitignore
@ -2,4 +2,3 @@
 .direnv
 result
 result-*
 nixmoxer.conf
--- a/lib/mkmachine.nix
+++ b/lib/mkmachine.nix
@ -38,7 +38,6 @@ import "${nixpkgs}/nixos/lib/eval-config.nix" {
    (import inputs.lanzaboote).nixosModules.lanzaboote
    (import inputs.lila).nixosModules.hash-collection
    (import "${inputs.stateless-uptime-kuma}/nixos/module.nix")
    (import "${inputs.proxmox}/modules/declarative-vms")
    {
      home-manager.useGlobalPkgs = true;
      nixpkgs.system = system;
--- a/lon.lock
+++ b/lon.lock
@ -161,16 +161,6 @@
      "url": "https://github.com/nixos/nixpkgs/archive/b47fd6fa00c6afca88b8ee46cfdb00e104f50bca.tar.gz",
      "hash": "sha256-nbG9TijTMcfr+au7ZVbKpAhMJzzE2nQBYmRvSdXUD8g="
    },
    "proxmox": {
      "type": "GitHub",
      "fetchType": "tarball",
      "owner": "saumonnet",
      "repo": "proxmox-nixos",
      "branch": "main",
      "revision": "15187a4c4ac50d1a38c734f72dd201a7eb504a89",
      "url": "https://github.com/saumonnet/proxmox-nixos/archive/15187a4c4ac50d1a38c734f72dd201a7eb504a89.tar.gz",
      "hash": "sha256-wh2piKI2vfwQXmeSVX3ZDdxg6ChUQ1YolG4Cn4r6nuk="
    },
    "stateless-uptime-kuma": {
      "type": "Git",
      "fetchType": "git",
--- a/machines/biblios/default.nix
+++ b/machines/biblios/default.nix
@ -1,58 +0,0 @@
 {
  inputs,
  profiles,
  ...
 }:
 {
  imports = [
    ./hardware.nix
    ./home-julien.nix
    ./garage.nix
  ];
  machine.meta = {
    arch = "x86_64-linux";
    nixpkgs_version = inputs.nixpkgs;
    hm_version = inputs.home-manager;
    profiles = with profiles; [
      vm-simple-network
      server
      behind-sniproxy
    ];
    ips = {
      public.ipv4 = "82.67.34.230";
      vpn.ipv4 = "100.64.0.2";
      public.ipv6 = "2a01:e0a:de4:a0e1:eb2:aaaa::46";
      vpn.ipv6 = "fd7a:115c:a1e0::27";
    };
  };
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;
  deployment.tags = [ "server" ];
  disko = import ./disko.nix;
  luj.nginx.enable = true;
  environment.persistence."/persistent" = {
    hideMounts = true;
    directories = [
      "/var/lib"
      "/var/log"
      "/srv"
    ];
    files = [
      "/etc/machine-id"
      "/etc/ssh/ssh_host_ed25519_key"
      "/etc/ssh/ssh_host_ed25519_key.pub"
    ];
  };
  fileSystems."/srv".neededForBoot = true;
  services.tailscale.enable = true;
  system.stateVersion = "24.11";
 }
--- a/machines/biblios/disko.nix
+++ b/machines/biblios/disko.nix
@ -1,79 +0,0 @@
 {
  devices = {
    disk = {
      main = {
        type = "disk";
        device = "/dev/sda";
        content = {
          type = "gpt";
          partitions = {
            boot = {
              size = "1M";
              type = "EF02";
            };
            ESP = {
              size = "512M";
              type = "EF00";
              content = {
                type = "filesystem";
                format = "vfat";
                mountpoint = "/boot";
              };
            };
            swap = {
              size = "16G";
              content = {
                type = "swap";
                discardPolicy = "both";
              };
            };
            root = {
              size = "100%";
              content = {
                type = "lvm_pv";
                vg = "mainpool";
              };
            };
          };
        };
      };
    };
    lvm_vg = {
      mainpool = {
        type = "lvm_vg";
        lvs = {
          root = {
            size = "50G";
            pool = "mainpool";
            content = {
              type = "filesystem";
              format = "ext4";
              mountpoint = "/";
              mountOptions = [ "defaults" ];
            };
          };
          persistent = {
            size = "800G";
            pool = "mainpool";
            content = {
              type = "filesystem";
              format = "ext4";
              mountpoint = "/persistent";
              mountOptions = [ "defaults" ];
            };
          };
          store = {
            size = "100G";
            pool = "mainpool";
            content = {
              type = "filesystem";
              format = "ext4";
              mountpoint = "/nix";
            };
          };
        };
      };
    };
  };
 }
--- a/machines/biblios/garage.nix
+++ b/machines/biblios/garage.nix
@ -1,46 +0,0 @@
 {
  config,
  pkgs,
  ...
 }:
 let
  api_domain = "s3.luj.fr";
 in
 {
  services.garage = {
    enable = true;
    package = pkgs.garage_1_0_1;
    settings = {
      replication_factor = 1;
      db_engine = "lmdb";
      compression_level = 0;
      s3_api = {
        s3_region = "paris";
        api_bind_addr = "[::]:3900";
        root_domain = ".${api_domain}";
      };
      rpc_bind_addr = "[::]:3901";
      rpc_public_addr = "127.0.0.1:3901";
      admin.api_bind_addr = "127.0.0.1:3903";
    };
    environmentFile = config.age.secrets."garage-env-file".path;
  };
  age.secrets."garage-env-file".file = ../../secrets/garage-env-file.age;
  services.nginx.virtualHosts."${api_domain}" = {
    enableACME = true;
    forceSSL = true;
    locations."/" = {
      proxyPass = "http://127.0.0.1:3900";
      extraConfig = ''
        proxy_max_temp_file_size 0;
        client_max_body_size 5G;
      '';
    };
  };
 }
--- a/machines/biblios/hardware.nix
+++ b/machines/biblios/hardware.nix
@ -1,39 +0,0 @@
 {
  lib,
  modulesPath,
  pkgs,
  ...
 }:
 {
  imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
  boot.initrd.availableKernelModules = [
    "ata_piix"
    "uhci_hcd"
    "virtio_pci"
    "virtio_scsi"
    "sd_mod"
    "sr_mod"
  ];
  boot.initrd.kernelModules = [ ];
  boot.kernelModules = [ ];
  boot.extraModulePackages = [ ];
  fileSystems."/persistent".neededForBoot = lib.mkForce true;
  boot.initrd.postDeviceCommands = ''
    lvm lvremove --force /dev/mainpool/root || :
    yes | lvm lvcreate --size 100G --name root mainpool
    ${pkgs.e2fsprogs}/bin/mkfs.ext4 /dev/mainpool/root
  '';
  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
  # (the default) this is the recommended approach. When using systemd-networkd it's
  # still possible to use this option, but it's recommended to use it in conjunction
  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
  networking.useDHCP = lib.mkDefault true;
  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
  powerManagement.cpuFreqGovernor = lib.mkDefault "ondemand";
 }
--- a/machines/biblios/home-julien.nix
+++ b/machines/biblios/home-julien.nix
@ -1,3 +0,0 @@
 _: {
  luj.hmgr.julien = { };
 }
--- a/machines/fischer/default.nix
+++ b/machines/fischer/default.nix
@ -61,6 +61,8 @@
  networking.networkmanager.dns = "systemd-resolved";
  services.resolved.enable = true;
  time.timeZone = "Europe/Paris";
  # Select internationalisation properties.
  i18n.defaultLocale = "en_US.UTF-8";
  console = {
--- a/machines/gustave/default.nix
+++ b/machines/gustave/default.nix
@ -88,6 +88,9 @@
    };
  };
  # Set your time zone.
  time.timeZone = "Europe/Paris";
  services.forgejo = {
    enable = true;
    package = pkgs.unstable.forgejo;
--- a/machines/tower/default.nix
+++ b/machines/tower/default.nix
@ -39,6 +39,8 @@
  networking.useNetworkd = true;
  time.timeZone = "Europe/Paris";
  luj.buildbot.enable = true;
  luj.nginx.enable = true;
--- a/secrets/404-ssl-certificate-cert.age
+++ b/secrets/404-ssl-certificate-cert.age
--- a/secrets/404-ssl-certificate-key.age
+++ b/secrets/404-ssl-certificate-key.age
--- a/secrets/arkheon-env.age
+++ b/secrets/arkheon-env.age
@ -1,7 +1,7 @@
 age-encryption.org/v1
-> ssh-ed25519 xaddyw Kv7PyXV1X5VUzHBMdVr3u2dbgSqlkW1fTYYVqbu6SBs
+-> ssh-ed25519 xaddyw KDUHNcRPZyRNE+Mv8WZCkcHor3u2rBctyAkxnqxPo1E
-tOvQ+hmvhMYEv3BoaJmHQlZJNGfEeExr1CY2t+ESZ6U
+BREfSPFE4lBK43hKro6xx2JL8zEA03NFA3vGVWwMcQs
-> ssh-ed25519 AqX2tg /RQHaFENJnc4XwkNLNOx2t0tNIzI49/Jzxt2q/CW8wc
+-> ssh-ed25519 AqX2tg Z0/hV6PoCtbE8Y6TNmRAr/B/KpSM4Q9+Ui/pYq7VCFw
-P06olD7mn4eUG2AYGrdPZ/OB6q/8WpNQaYSvTq7/VJs
+IlF11V/xkVqeKo1EThX1SH36sTyG6DvwcqZIayBzFXo
--- Z3yxBHXTIz9spj8RJugM7Za4TDyrxgzFB2qCoW2hb2c
+--- XKI7oeqH4R5GIbZqpJZtdwwNgTI8d+V7KDZInKy9dIc
-｣ﾊhh'Zﾌ､g舫*<2A>ﾝﾈｮﾇﾖ㍼$οFｽﾒr旗5<E69797>ﾆﾜﾖI翰ﾅPRv聯/Eｧ<18>ｧ?<3F>ｻ<EFBFBD> ｯｿ*3yVH`<60>dｿ
+OùˆžÇ‡n£Çž®|Ä	s;”¨\B)~4äàÐfOJD¶¹‰¸ÝºCÚFÂüm	DéµõzË³A²ºØ_ÀGRf—&-
--- a/secrets/arkheon-token.age
+++ b/secrets/arkheon-token.age
@ -1,21 +1,20 @@
 age-encryption.org/v1
-> ssh-ed25519 IRHAkA a2yCD2Vclt+H6l57HN9t/vm05GbUhwRN3KeVUmTuVD8
+-> ssh-ed25519 IRHAkA caugjxDfvw6iTBHV1mUgpxFuX7T3pRuIQI67mjmp7mc
-KvE7ugYD19OjCq7C05scv8Ann0vKeGb4oAU6UTSZLUw
+5sMreEtVnsGH44V92dVfIEJLf5Y1UPeEGi466LtJy6Y
-> ssh-ed25519 AqX2tg m+A3ZbBBeiemV6jN438XDb5dVlVXmEaVl4MOG1MmD0U
+-> ssh-ed25519 AqX2tg AxeoCfeGB32CxOoNdhLzhvJhoiTQY1e46Xr0TRP1gDI
-PuKlZ0eWZNn/4eUxGYLYuxIuclBDj5QZYr90us7TVj0
+J2uMDrr1hpEM+cI7KhujXEnrLjQvSvFLhtxvAvQZ6HE
-> ssh-ed25519 bD9h7A TNOs0LFXm1juu1pyyzS2C2H+Ox+WiMRIMqtbWabSwmg
+-> ssh-ed25519 bD9h7A LHaPXxs+EaAuBI8bmnIkyTmD5BInR57sruS9teIv3Ww
-LBPd5ZV4763bkWoqGEw8C3reHe0m1wrtE7UIZ9sPqjU
+Qc6YL9GjDc/rIx2F+EL0B+svfEle+WS91h0rqrcCU7w
-> ssh-ed25519 2Wt2Kw mqtUc/tS5EHczd70Qjmwzu3ePGqLwJZrWu+9ebW820U
+-> ssh-ed25519 2Wt2Kw hZRNGjqv1PQ72vDp8GpZYILqMaWKmDbWn+jjNDqI+yU
-y9gUeKxmZukxy+G5SiRzI4i6HR9VF053bnRyO+SiT8A
+JrMbBvqAufjYAkSTgkMEiQSDTlYRmi2OAZ2CBNxed6I
-> ssh-ed25519 xaddyw cpGgaGIFJjWgRO8io23lgpHNJ05R7MYRBAkodAHPqno
+-> ssh-ed25519 xaddyw yFGv+frc+QPaXh0UQWvVbUA1kuN+jguh98NcxIICzD8
-Me+cdC6FPnfFAiqvJO3+KJgw9+sL4FMp/Yrp2uR2ZzY
+hObZCxpqfkG9GoJwLgIzquFkd+M1tFzBOgruT9YxNpQ
-> ssh-ed25519 6rkyTg 0clGC/h47zbadiWkON38j5IfX8iLdVFwzJY1yAIHEFY
+-> ssh-ed25519 6rkyTg 1uPSvPd0s7QSDaOzr+X1eW6Ouvkk+D9lfWrKJG/qPWk
-Hw7Vk6W/BM2UBk6k/GRi5k0vNfzyc+gPoGHzHvWFmCo
+SMrjRt2ACkXyMbz3Bm+E4cCKlu/WRTZI2JNg5ELDNRg
-> ssh-ed25519 d3M2Dw rK8b1befHR/bZrCXEOC7o3mpMx8Hbb7yIpKcW1NNtw4
+-> ssh-ed25519 d3M2Dw NU2rIWxLmKqQE+UP71C95CLugzo+fT5HO4RLzh8X5xc
-l//R9ELS0COGRjuCjBUusxYfIcEan2BdO3s8D6ksVDA
+6IFTudKWKlMBcT7ijHkWdP0e3eMSxVG8qe1d32HLXSU
-> ssh-ed25519 81O5Zw z7jk3FRx/1tu9W+BqLcbQf8gQY8q3lDsZgZ/P/CDpQ8
+-> ssh-ed25519 81O5Zw M9pBSFtkbSR8jd+cQgLC4PRrbKqmyq43SMtFbTFi6W0
-43PzL54PDmF5YKNy1B9BVPlgH3i93Has/UoYrlONAZE
+1Ir8c2h4ieX2p9a4GhUOj9bTMvWadfiCHUDQL74S/KU
-> ssh-ed25519 Ye6ufg wnklTDj1KJbsd4tizpSUEF/YRZs1tCE0JrkcC9/aGxM
+--- oFdyYyQ9UotWn8eJKqKLJdcs2EJ7MXMh9jn0Wijnokk
-K92k+XiLVhPyXTEqgzS5jh7X18d4Q33qUQu8fUPvRDA
+VóWU}QdÞ¦J›¼~¤p-nhÑÙÛ4:_Ø¤€ÆÜ$ðJ(AARäløAW¤S(
--- /GGB60A/b9drPC15suKCmpfFtcMpHbBWqkPE4b31h30
+ä#ƒ„ªÐ 
 L<>ÿÑå˜¿o¿:2û.VXDø»C–‚¤Ñùª¬¯|zL|J<>¥WÿéÌy:m‹×|<7C>'T¤
--- a/secrets/borg-encryption-secret.age
+++ b/secrets/borg-encryption-secret.age
--- a/secrets/borg-ssh-priv.age
+++ b/secrets/borg-ssh-priv.age
--- a/secrets/buildbot-nix-worker-password.age
+++ b/secrets/buildbot-nix-worker-password.age
@ -1,5 +1,5 @@
 age-encryption.org/v1
-> ssh-ed25519 AqX2tg fpshpDvM1kq0MDLSXdvFi1nivR9paw5FGhj9jDJfxxA
+-> ssh-ed25519 AqX2tg oP4YAObdroYTWAJDz3lYMK4beGeCwat6+qSE9ZvTVGY
-E4PjHy2n3Z9G4PZS74WmRNm8YOhjr3QiJpWoK26xSx8
+6bHl/WjXKOmhImnu/CSMRtbG2zQZLFvhBUk6Tq2kuLA
--- E2wRppIRlXq91sIc7wrASSEsf9sN3hAVjGa54Tc3zDo
+--- PBUnekguErQY8jJ5q2VFuYPbkYMRNB9YUpYAK5/Guxo
-;ÍEâ]ęĘŔŻ@JÍÖąµ±kĐŃ˝ e¤ďÝk<C39D>Ř^{—đj3”?ď–Ľő˛óµ'Ô“‹ˇK´\ăzÇŚŃg
+b?Ö$„‰=Íi/xQ7µGªE–±‰ç6¬ˆ‡žÕ|RÔ§'¿Õ7dê…
¤ÑÜ¯ 1pÑ¸ç<C2B8>TuRbø{m+
--- a/secrets/buildbot-nix-workers.age
+++ b/secrets/buildbot-nix-workers.age
@ -1,5 +1,5 @@
 age-encryption.org/v1
-> ssh-ed25519 AqX2tg HWG8U+EZzoOhHQ1bmHtSp3skTKhMo7ClifBIIf1ZZwE
+-> ssh-ed25519 AqX2tg nA/VSQ57CLw42YczGEIk6UqRR0vJ9kLViE3C+8va/AE
-sPOKZJvswG2LGRhp+8sX2TMtq/lLHs5NcL5XHwYc1/A
+yGejdcZdYstvFtptrMhpFeWaD+gxZm85dJ3fDG6g30
--- foudWLZ2RUAN3IyCGoaVMuIZmUmAMeTbK5KH0KuhorU
+--- 3YdGBJFy7F3rxLyWznAeEJi7p1nfObT0kaqCEz0emZE
-nÞÀ<EFBFBD>8ôÕ¢²[eœ˜¥,5%'ªþSt±žó„£Ôý6Ì8Í:ð©Á7@Û.-ŒéŸ ³$ŒÇ[¼D4™´o²è/óÿ(	œ8sé{ðPoØ~ÅV<7F>‚–"¨èeÓÖx&[gŸ77É
+Ý}â©ň´Řt<C598>tfű¸Ś.š˛JÁI„˘´?&¨n*˘$‰X~Ä™.¸3ĚŢˇd@ľłŘ™YŇőOMŘ»ÂéV‘Ě;DJ‡T6#˘A—I†é†C6é9ĆˇwŞb;ëj(¦Ç:_˘qÓňbů™
--- a/secrets/deluge-webui-password.age
+++ b/secrets/deluge-webui-password.age
--- a/secrets/dgnum-mail-pw.age
+++ b/secrets/dgnum-mail-pw.age
@ -1,13 +1,14 @@
 age-encryption.org/v1
-> ssh-ed25519 u3yXZQ 50+0erysLR9fWR68yB+VqA33b5baoJ0GKP8VTL+ivUk
+-> ssh-ed25519 u3yXZQ 5PeYNFchlEHtVXEQSG+dC3D+EEP46i71O6T9uuEkD3g
-uA/yUCifZeJcZjr0PlY0hqdiGQS3LHzuQtU/seXwfLA
+WS0s5betBaa+jVwSD6cEKR4KBqWwMR6eGnGZvthTrU8
-> ssh-ed25519 AqX2tg JHdyvwg0rw2OJMCOk0a0X+7vHeqdttXKcqIqs1QIPBk
+-> ssh-ed25519 AqX2tg NTnhvcfQ/W1tzezQluexQDtTKAI+6ATLENvxV7pNCCA
-IB4uino+qi8/oHX1zDtORbnV96Vd5XySvfxC3Ul3sC4
+HxbdeKRviWIl4l8VCY2MUnk4uSQg3AuqwIb1xgTySyg
-> ssh-ed25519 eySVIw igfuKku47i0pd26aXPdFkCHDN2R7gz32XZ++kUJhlwc
+-> ssh-ed25519 eySVIw v1tXIUlY+stg20QI0uBZK3/17FtSIYTXFPZr4r/KUR0
-VlQ+viZ29SaLRuHMCTWsa2xDLipzPB/GCrRzb2WJC44
+GBdyiP3nzDSET4xBYjJfXFXW/Wfs3UTI68BUepwUv9E
-> ssh-ed25519 ThuR9A v0EWGgZiMK4287dBCtXtH/mTcsnAo4CyC3pBpsyYJhM
+-> ssh-ed25519 ThuR9A zgid7w5dH1ETfDlSLHwy/UhnaFtFTlWqMm5RpjifzCs
-eR9IoHCNDiLn83gm4U9sx7a9vmuvdXVW6o/x7bd5XIY
+x2+s/vC3MWW5mi9deiu2U+ZvLNEEsql8NxzJgnRlRCM
-> ssh-ed25519 LFAtBQ 5M3LuYiW0iP9Ll+5N3IzJ+VCA00uciuJ5VRLzka2tDc
+-> ssh-ed25519 LFAtBQ l9GhRJTJHugH8W2/r0QwZRRPZqGkRvx8yxTj4TwOV1w
-URFsZ6y3RkEgpkSIztj2AHK8i+sTAOGr1wy5i7JAvwM
+KzhI8Cs5zj5MMaLNMFdTc2N5qSbFVCK6NpNbGDdqHOU
--- qZ53ZMlPMpDKEYtwClDjOSs5wKdf+6hCHZZQyuZiHro
+--- EFAMmxVPGjYrzXTdBiYCGRv8IGVp3M+DAiJe8jrAG/U
-7Beúë¯é1©–P÷¾—¥‰QJð]«ýêøÛíàs¬kú¶Ž
±ˆ!2<>d©F“+Ù†f®IÅGw×ÄžÌGÏ¤îžÃS<C383>§";,žç
yŸÍò7þ’tý<>|
+¾hÊÐZDÎÇ\Ì2ñ|cÙŸ„A7Kà .·éÞ«7Èïå¬0tËã#ì™uÌP^åû¨Þ R@
 ÝœÝ>ü‚Ä¨ß²RCª>¢îîÐê6‰ôryøy<C2AD>Žg
--- a/secrets/ens-mail-password.age
+++ b/secrets/ens-mail-password.age
@ -1,25 +1,23 @@
 age-encryption.org/v1
-> ssh-ed25519 IRHAkA 9m3cpLdjnBpUcdpfbosH4OQbopvLPh7+MxJp6Fm6fE0
+-> ssh-ed25519 IRHAkA E6YjaiSK1ZAOvdn/ctKDdcZ8N27PM4aumwR6PoemTyo
-fVZHAefdGtWqbYTqXrbBQ5L8XSokaGHK0RBZCsXX7zs
+KZHCsqFOI5CKASAB7JfDZFu8X1bJqbnK5S+EGdz6O+c
-> ssh-ed25519 AqX2tg lcw+UadSkAWH/0dK0IYbc7Flh9I6D/IQELsBuHdg3hc
+-> ssh-ed25519 AqX2tg +psiPgcDgwb986ohcFyCjtHV3vU586KfpeMFB+M7aH8
-nP93GNCGszjB+rXa0PKu+VZyZbf7CCwqPEhjlEHPlkc
+YRPP31H6xqLvDBWVBhfVDX1iOOl4Cj8l2OumlJSnXvk
-> ssh-ed25519 bD9h7A 1ZdCBT6j2OcUMa3bMWnNlk2ncAn2W5E0Rd618zk7BEU
+-> ssh-ed25519 bD9h7A ydvgeErQgCV01KymM3GeoAJjXadWsu1oKAzNx5tyxys
-7A/zZR4gWAM3uzE4L7qmPo2+TuLXjc1mpnDMHv9yUUY
+s9fVHxOKECRikXrpl1WtDRENpA8lfi0sjs9guzWovfA
-> ssh-ed25519 2Wt2Kw l4UxcHpKntVW9o6CGAxyMKz+H2ImZw8g9RNHl/FiGzs
+-> ssh-ed25519 2Wt2Kw QUY6meNOB5/1VbsmdG3Rciv2Ylo+XNs7EzosZZoXexY
-tIymKvzuYdZp+VO/l4TueL/7OPFEgtnor9jcrk3mK2k
+Dg29e/qV71KuO5w7XfJ5D1Ub5D7LS9zJJjCpjq74F4E
-> ssh-ed25519 xaddyw qbRopPtTJ+FvF3odpq5i+FKu03IoxX859dnwAsGvlGQ
+-> ssh-ed25519 xaddyw wBv8i9YaMzSy9G6bAhU2g0PZ+dD4trpcnFkm20ZMX0I
-2I409t+423KL4/sxFQ1CEnGU/h+j2birKIFzRCONMrM
+Ydgvk6IUABPq0D5EaLVQ8+CvOmcamHDsAK7Cam6W34A
-> ssh-ed25519 6rkyTg 3FtTckukh+osf/DN/iwh0+QAo7rgsS7bay8Af0teZx4
+-> ssh-ed25519 6rkyTg 5k97dTYMQRrJlRBYOkDM14kmifH3gVkp/6WqSj1OeVE
-MU490K3+bL8SKHsVjyxRZ1XQre910teyDdjWbqqLmsA
+xTWLfO7RW+cug9uzqYf2506PA0ZbDIIpLC4rj0bOPEs
-> ssh-ed25519 d3M2Dw xZgqhprpWZBoZf7y5wdfso+DUJWAU3XL8vSEb13J2HY
+-> ssh-ed25519 d3M2Dw FBzN/y5DHl0zyMnBppPC4bYgnQ5GWd8hO/BOaf6jOAE
-7XiwjK4gnPnRSKbTiVQuiCDXZ/fNbefg7E0aktp0oBM
+QvPkcQXG9Owh917ZiepdbZlPExrJXJxk2NG4xK7+q58
-> ssh-ed25519 81O5Zw QNuz72Eya5fgmJu8zFVFrKm9vkC/azqG0yaDTmaqC0A
+-> ssh-ed25519 81O5Zw eZ/GqBbvLpyniWpO1lDVMVV9R01/z7GzHaPgKu0M0nI
-asVCf3pScgveMQN2p7oxPNMd3UpPtwYV5MJzvDGnS8U
+ovaTkodIPWOyLNG+4ve7JQJhBJZv3vdP4ej00ojeFHI
-> ssh-ed25519 Ye6ufg 8kd7B9qdP8T9HjmPr8aCo8+kzxzUjfljFjO4YCW3dkA
+-> ssh-ed25519 RiYKHA Yiky3HQMFuE7QdXwEXZSDcpLtzwI0DKn/NFpw3lSVQY
-T8/0fj3xLSgUvjMyE6njn5IUTba/65Etz+sBN0dWjaA
+sd2gqlXd46g4CMnOT6Bw1Z9uxt9ju27Jt6JzjbQrc+Q
-> ssh-ed25519 RiYKHA yZzOOB8HaoonyY3N9dAEb8LSgc34QxaOxl483+1lyBU
+-> ssh-ed25519 eySVIw OJqBAOMw7/ptX5fm4a6gLXZ1YYGHdyVVtFHluX7nXTo
-iLF9ldlcmncarhHkJklGj95hh4eXfNXxBtdkfQN+zl8
+22tqx+J41YXbve1AuWDyQN9YBmKKof+rzsSSqWFGqcA
-> ssh-ed25519 eySVIw GmFGcIZfV/lMxfEpl7vojGVqzaA3Cj7y4U2w2bQ9qTE
+--- nnI6MSQEXFlbg8/Y5htKDusZE0/yIBSajB3SAXEJwVE
-RYFUAeLmNyLU9K8QE5W/ofCgcd9TSuQi3dPsrvaaPFU
+TÈ&*®Å¨KŠîE|U]-
‚yÁ XÑþá‰ÔëM^Ëéæ¬<C3A6>:H#`m£ù
 --- vk8TmIye+Z9ynTtgd/JosR1/ZtfakMT6MwzcOR9tNBA
 8g}Ú/s¢Ï§R<C2A7>ê²+!~V!Ú[aŸy-ùd½üÍ»‡y^!B1ËxPÆM
--- a/secrets/ens-mail-pw.age
+++ b/secrets/ens-mail-pw.age
@ -1,13 +1,14 @@
 age-encryption.org/v1
-> ssh-ed25519 u3yXZQ 0MuvaDvACZQKuk/7cr/ADyVLU15Zxrl0pxyqRg1Y2CU
+-> ssh-ed25519 u3yXZQ xgPFHNqjt5oiwyA6DjbJQwt1OJIwrhaM9rBj8VkfJlQ
-O14a2rYxLYToNfvmv4SwRezCW25ehDgkfnvKYaFoJNs
+oEFkyDXUMw7h+kKXb6Yrn7SDH2hByFW85blHmtu7opk
-> ssh-ed25519 AqX2tg 3qjvW/mqtOO8UX6SxlcD7gZahy9SFRosJNAit0InOVk
+-> ssh-ed25519 AqX2tg LuCm78y0BFQYqbS7xkqBTc+IGl0HlLLsePgIkTsGgkM
-xWvWvmojhTmaaCCDz/8OPaBtnZpBI4VaEeIRWckP6b4
+Ebuqvp72OVZE2gXbKpOxr0Awk6zb55xffZYYb43uDHM
-> ssh-ed25519 eySVIw +9N1zrT0NKQtkZKSpCjsv0CxgoAhDSPKiIoosYRc9QU
+-> ssh-ed25519 eySVIw ki51C627bozYPOrTZvz28kNthpr8ZvzooBux0yyEmHc
-cWAofgX2SAiRJM61zhGXSwj1jwoubCfYPQr/OvmWbUM
+pThFLvfXrgOu9x5jyZMuZP8LJymNb7MQUzT2EnwruiU
-> ssh-ed25519 ThuR9A IDtUvI1+NkAocnNJRA8cGPV273LQ+Q+U5HUKZwDiUDc
+-> ssh-ed25519 ThuR9A 4CDVLXHdYwPqCSGYw22vQMeWpspVNT8zbj6lXmJVBCk
-aKxU7PGR8/5BneWKTeHsIw9xrZVPd+kJEbjg2lwl5CQ
+mYiAD8uCZsxYhjremt3vJ9DTXAqBWhOsAMKEiSHWSzs
-> ssh-ed25519 LFAtBQ Tw78+c/zpHOQjozMxPs18WkPsZgCL8nfl/EdxAOaQj4
+-> ssh-ed25519 LFAtBQ UzVzUenJO9tjF1FJNNuCIs7P37qpZ2WfUO82rkrXABQ
-i9r0IQinsk5Ecc47L5NQRoDEMGUStdOKo8uUlSOj/w4
+JkWXo9nJ7+6xiznzpeH2gK7BDpmXYfhO4sLy6iwflOc
--- +C1U7I5yIrj79g/1a5b6B43mzv816I0MJrhGMn4lzaQ
+--- syGfKorkGOCg8iY7gGV6UuVq9ePtzTSyvCu9MEqy17k
-s<®»~µ~,<2C>:t¤~É•ã×qUÃ¢<C383>t¢_¢ÍM|NÆ-Ô°ì*Ÿ¶Ü‡ì
+o	T<>39V˓<56>ٙ<EFBFBD><D999>VL<56>
 <19><><EFBFBD>AK<41><4B>Ǫ<EFBFBD>iA<69><41>	O<><4F>'
--- a/secrets/forgejo_runners-token_file.age
+++ b/secrets/forgejo_runners-token_file.age
@ -1,5 +1,5 @@
 age-encryption.org/v1
-> ssh-ed25519 AqX2tg oTeGzJN0ys3u+aU/uLvX2htWr3m6ofAIH8kpNx8PmBc
+-> ssh-ed25519 AqX2tg uj0zw8tXYKjybw5xA/Xn4+Es/ulxj9Y2DXkE1fXtsVk
-olLmwqD06t9SGh7FU5ib5jbrWmB0UvPg5kLnjk6NIGk
+QAUDeiz14pMvz641epOEQSM+KE8ynbed/ta1SINGqn4
--- qeXRG2T2Qj8v0nl8jBHOC+ze5mChJ9j+Zkx7QMoAzhk
+--- HLbmnjjZgL/ttkZnLv6FZqMcyvMHWnnjY/3YR7SM4gQ
-F>Rò3»#¨îAH	ÎGr4ìC¥ëò¢tSy¨é“UÄn]«‹\O1)ó½Þ×ã„hÂŒx +QÃŸ5!r¼<72>!Øf$ö¤$
+xÍå ;6Ÿ–“úÔv¶la6ygy±q`3¼üÆú88ØÊªáÿU<C3BF>~ç{›C2XÅ¯«£
#Ñ<>¹“LSßå@ÙpMmöR2—ïÉœöp
--- a/secrets/garage-env-file.age
+++ b/secrets/garage-env-file.age
@ -1,9 +0,0 @@
 age-encryption.org/v1
 -> ssh-ed25519 AqX2tg /PkqG834zUG9r/z48nBnHI/ijpdvyc+EaGFvly/IG2w
 A8u/BX5rMPezKwsYIuQqBLYg/4h+qgSSVEUufg46ucs
 -> ssh-ed25519 u3yXZQ 7MDWda7VedzeVX3hVRGbk25iikErLT07rOChyx0JeV8
 ulBhkF34KB6kxMXb59GR6fJdn4ggx+rZUxsTB3ncSqg
 -> ssh-ed25519 Ye6ufg 2IcyIgZKVSiHfJtRFZ4Aj7GXowEg6SJVUWWcjZXX/kc
 rn5IynBgc4kG/sWnxa4U+IbP7NFjETf5N5MgsjyBfnI
 --- mIZ88KIGQNHX9Zm0eoL/D0g2oCOyTXKCllHSzCl3658
 nJèómË¦;$õ·…À<E280A6>ùhè‹.8š3(ù'gë
!`/¤±<C2A4>r†QYý[	=Çš†2—7dh¢w2àSÅý|nÏ†šÆnfMê6Ðâe]XùÁoùoödŸ=›º˜ÎàŽÈÎºë©:>¯þ¯ÙãlãéeÉ
--- a/secrets/git-gpg-private-key.age
+++ b/secrets/git-gpg-private-key.age
--- a/secrets/github-oauth-secret.age
+++ b/secrets/github-oauth-secret.age
--- a/secrets/github-token-secret.age
+++ b/secrets/github-token-secret.age
@ -1,5 +1,6 @@
 age-encryption.org/v1
-> ssh-ed25519 AqX2tg yhgLtJVEHxBetawkollP8vCAISaaxAkHztkcGnz0XDA
+-> ssh-ed25519 AqX2tg H8gb3bQ7tk3H4Vod/OnXIC0UFrOPSft0yaJSL7LCi3E
-w2VOeoPtekHo44eh4iMo3XwicXG6lqPfMbXYdDj3DDo
+FJkk71KT83lkCbnVj8pjN6kS9aQVTEFuCIYuwtTKYC0
--- zRdP9eVR/a9sknqZ1qwW5EkuTit/2GQXvOyaqfN3+dg
+--- O5gq33TtRFBzVLMmfcsepn2ES+5LdCbMYcjP+tuUcMw
-AR4Êk×<EFBFBD>AÓH»:@CMK:©9"†z¤øU;×Vn/}&³$·üÃfpVjvK÷™¶»EUŒDA±lä¹Ì¸2ß¿Þ˜ýë¿
+Ã1&Äg–µ#ÌógPÕ¤ÆT»7•ŠU´<1F>–È©;k|©Ÿ2å!*xºÖâEeˆ˜x&#üZµrÊÏ˜)@âÓŒ½Ót(š
 En¢
--- a/secrets/github-webhook-secret.age
+++ b/secrets/github-webhook-secret.age
--- a/secrets/julien-malka-sh-mail-password.age
+++ b/secrets/julien-malka-sh-mail-password.age
--- a/secrets/keycloak-db.age
+++ b/secrets/keycloak-db.age
@ -1,8 +1,8 @@
 age-encryption.org/v1
-> ssh-ed25519 2Wt2Kw e5+Y/Gg4TkwQInnfGKcFD4Ot5tzWX/M0AqoHoXtb3jk
+-> ssh-ed25519 2Wt2Kw I8bJmMyaQKvWi66zH6QWQzU9ZTge71PPtU4Mxwfue0s
-DOB7V+qhXDGsJYyuaYvyz79Gjtpe5vt3IidmkFvpBjQ
+0Fzgp52eVopX0t/ujTlsUb4+NcL5Au5NhpeCuqY1WOY
-> ssh-ed25519 AqX2tg C+NIb4Zo/vuQxzLs6GODD3ah+dXVAr7Tlfx8p/7npwc
+-> ssh-ed25519 AqX2tg R7TwVyMqXx4Yqk45tjxUYWJqBerf/n+9IzKU+zvMABM
-Q5IHILoqxvLBz3g5DH8bAi0mSCl4k9aFxpTJ+S4ZVGo
+1P4bUSlrFT7KQ46kyL50iHujmnBRTYi6XKFKuPA54AI
--- u7qqT5e8mFONtWwf9aOy16140Kx8rfI/+4M5Pm45YNc
+--- ZD2/lAcRhhEhfs7DwaZJJqlaxxF1yRzdWRCPWEVCJdg
-,ÜÍÐ³¼à¼
+mDwpÃ<70><C383>Î„W˜…ùEñ<45>èL÷ý¥Ï<C2A5>jÂ”AˆÞWŠÛf`[k%—#LÆIÑ¬úº)’j
-%ùPõ¢Ò½îCó^!åÈŒÑ|§ÊˆŠÄ¸•<ÍåÃ¬Hlió0ó^ßh,¿<1C>ãß×Ó”ÅLÀíëÑ0PÈˆ;š8ß2øY Ç]Èƒ<C388>Ñ·™
+\ ?/ª{ p\ž ³;	Hz#Ng§ÆMr¥÷c¾ˆÖû›X§êO¯
--- a/secrets/malka-ens-school-mail-password.age
+++ b/secrets/malka-ens-school-mail-password.age
--- a/secrets/mondon-ens-school-mail-password.age
+++ b/secrets/mondon-ens-school-mail-password.age
@ -1,7 +1,8 @@
 age-encryption.org/v1
-> ssh-ed25519 bD9h7A WnnKDBmWFlEZOWFpT4MVRDcVpSUH/yPda9BWoJ6QVC8
+-> ssh-ed25519 bD9h7A /UO9Zl5dJw4EuRNwq/8or3VLrnntW4B+8bXwgjflXEI
-pE36ZpcK/dKZeAMvf5uPwEMN2VIXxfvR2/rwvZyxMWA
+s0J/u/qd/+OZQx9zDi1mclsMd7li7fumm4E55Y0arNw
-> ssh-ed25519 AqX2tg MejgO0Me2W0VBJzCV8NuJ199d1D/Ub3a1Xlp8VSun00
+-> ssh-ed25519 AqX2tg vhFn5mLYcxQZmODtZGea9NRxuXn1+8NoBFSqcOycoVA
-88XHkXjRdR3wTQ1tiv9MgV5QPEg9qIFqud5bE0FGZCo
+wjHiZrJw9EQULkcXrjzbWPZrIu6kgR905nf4I0b5aQw
--- lermSzFXWrCHR41EK+MYhXYEsimmxRQtSFMnPlwpI3s
+--- 7iLEndR131p2i7gLS0SB5CAp5zUA5kIFtz68VbkFg0A
-\¤àƒÄÞG1»@<40>Ø8NIèoMíkóóÒÞ<18>R§×‰ˆ#ã£ZÉ–Òº|¬¼Ïoêž#M½ ŠòHEqöñrwªHzòFYvø#q…ÑŒU±%[»pI
+FqÞÞZœíˆD‚Ä×½SÒ5ç x%2o¾’E‹`ô4N³”´
 Õ‘=KŠP^ü€³,•,f
V–œ›ÀJ)’}3Ÿz™Úmo‰<6F>\°ó…À£-Å¶<C385>Êt
--- a/secrets/pages-settings-file.age
+++ b/secrets/pages-settings-file.age
--- a/secrets/plausible-keybase-secret.age
+++ b/secrets/plausible-keybase-secret.age
--- a/secrets/plausible-password.age
+++ b/secrets/plausible-password.age
@ -1,9 +1,9 @@
 age-encryption.org/v1
-> ssh-ed25519 AqX2tg 7HPNSlD9k6QD/5OAZzxcAxyvo9BmnobYxWGwfSS+Ay4
+-> ssh-ed25519 AqX2tg uurrbgincmOIH/eXNPkLSvDem4tCVlXvicTC9WvPA1E
-l8a5zaXpUZMxDQkgVYx19fnU0s82jqfjbgnK1d2EaWk
+gRjRiEL0jj+76E8jKAoDI5mzO6WCEGeiRivJTio7Y8Y
-> ssh-ed25519 u3yXZQ txMpkYzCPlhcRvNkF1yNPm0BUjZwxAFL+nKPFXoedVs
+-> ssh-ed25519 u3yXZQ 8YyLZtt2tQ0zajM3SjykPH4PUXKtpme3KQ2X+EeG5UE
-JB6TDfXh3KM6XMyrzgYvtOvGv5d6ja/w75yB6DqJZ7o
+BZxZyLuc8yQ4aLOQHafQt8ed7HUnE+vJvrGxbzIbO4o
-> ssh-ed25519 IRHAkA AA5ZmgMLM7rGHZ8uwrqAEQyQZcrnkmND20wtMttkc1M
+-> ssh-ed25519 IRHAkA m1eAtnpxfExAHlPKQeHwLmFFQGSGlVaZY+0Z3IBEiSU
-gTGJGuAg0cro8ZvWFihKIJVohQtkJ2nW7Zi1YnIO8zM
+3bORsrUsW1ABEjLHcrc9UsVNmrFyKfwUcqRzSFekWeE
--- uuVlNOT0P1T8n0u+Yvc9ypxMhGO3fB+PPICGNRu4Vok
+--- y6RfOhPCb76nsA1w5YSyYSnV6+WrCsxQP2W7EL684L0
-ÁÿR½Å•ò_ÝNõ6„DØ¶»&žù¥áâ’O7?³'ŠQï—‡²ÉrŽGÎW—!iõ&c5)ªsÇÓV
+<\>r~	œ.tX*û’·ÎöÝlŽ0Åòt»4!«#ä_f™¶e§L¨ë3äLüš_ÿ'ƒÌ`ÿ4ÑŸ³Äé¢u
--- a/secrets/readeck-config.age
+++ b/secrets/readeck-config.age
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@ -12,7 +12,6 @@ let
  gallifrey_home = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMAa0wll9ildhgPiV0DhgJXXtw3TQr5VkNxxxPspHSbX julien@gallifrey";
  fisher_home = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIADCpuBL/kSZShtXD6p/Nq9ok4w1DnlSoxToYgdOvUqo julien@telecom";
  akhaten = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII5W1rr+VW2TLLytoTExWg4T14lrdLFkSM4YLfbEIb2g";
  biblios = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF5//9IlSSuES0xVsqqOwpotfcajgXL0AtcySpoZ8OLJ";
  servers = [
    gustave
    tower
@ -22,7 +21,6 @@ let
    core-data
    nuage
    akhaten
    biblios
  ];
  all = servers ++ [
    x2100
@ -150,10 +148,4 @@ in
    gustave
  ];
  "garage-env-file.age".publicKeys = [
    tower
    gallifrey
    biblios
  ];
 }
--- a/secrets/ssh-lisa-priv.age
+++ b/secrets/ssh-lisa-priv.age
--- a/secrets/ssh-lisa-pub.age
+++ b/secrets/ssh-lisa-pub.age
@ -1,7 +1,9 @@
 age-encryption.org/v1
-> ssh-ed25519 bD9h7A +wllsjo/bIHApYJP5qec7V6TqiOp0gXAXVpsFhpAfHE
+-> ssh-ed25519 bD9h7A ny0M8zk7nz5iJD6k6OUygN3xa5yh1AMrcYWcCnbnRXM
-tnHvP2n7QC0llx/j+/HUFVGbe26SEs4tBwRitqn0yzk
+dUl8yf+TdgrmH4yTXG98DRBwhpyC66xho/VWQ+UsHyo
-> ssh-ed25519 AqX2tg ETJOn7wVD8U59nJhRwcckxEOs9FDFnXRO/L1uyeUvWU
+-> ssh-ed25519 AqX2tg t10DbE0vFVc+X7Dkgu8AqeeQabl/BNeSLUpc7mnnc38
-CToel/g5cAkAth9gCA8vhbyfSqO/RW5l23DhdXPNan0
+aDC4ikK7WJe4t8+GgX5cQwK1fPs6qSqxQprkQDSdJJg
--- lxzVg42zOjkNC4Sag5Mkd4sh3I1sfh5K/HKt3X7piUs
+--- 1YzrbL7aJkwOz6AI4c1sqrLJQUzrtnueN0ZyfnWdmwc
-â"€è6¸˜]^½)É|ÉðÂ_Î@iÌU`Œ<¼-ÂmÓKÏáL·Ü*%<25>êR†‘èE¢üWÅ¿¤Ç<C2A4>–¶‡–<E280A1>4Ñ\’ØµÉ0z§ ½„`ÂŒ¶¦zQvÔ¢©E…-æFèi5{øXN€L7®t¸½ C?exEQÁä
+ù#!É_¦6$2ºÃƒ¯A’L7ºÎ”ó4ñ]
 Åd
 M¿<EFBFBD>ãO´Ó>&€B:»ˆ_]³;±¤~Õë*Òi-žUÞ=ÊÃ–˜ÑâÚ¥¾Ä”|aÀ|þžŽYû”dh7_Æ@±Ÿ-¼”6UTŒ–â#Z.¤ù€pÉ¾Þ|-Ó„Êã_¢a¡
--- a/secrets/stalwart-admin.age
+++ b/secrets/stalwart-admin.age
@ -1,7 +1,7 @@
 age-encryption.org/v1
-> ssh-ed25519 AqX2tg VimZo8mJFKrIZtTweiXfq7LaQWJ6yHS6lV/ok5PuDH4
+<EFBFBD>
-A8R//x8XPvZ4M+6ppqG69sVhqanoxdANiiYr0x75qXE
+<EFBFBD>
-> ssh-ed25519 81O5Zw U1zwQjwMybYn5Pf0CEQ2Nm98HhyBNjpo9PYp1qpOeSw
+<EFBFBD>
-KoH14PlNVL1hS8XEZ+Zy99ZQzY1HW5qSJZAUeW5EVIs
+<EFBFBD>
--- dipxCNpt89CSd2FC3cSnLRHmMMmL9H/0NUNp8PSbaLw
+<EFBFBD>
-8àì‡F¥ó,Ú„ö—ˆ2bbíe~œ%<25>•³z)Òˆá<CB86>Q‹®¬.dú-%) `Óô´ðWshiV)(<K+dÀs~Hû¨Uûì0ù_k<5F>LÔ€aBPŽÎ£áÆjU„€Û®MVð¿,ú¸ð$ýà6ÖÎÔ‘_[±®ùõkzŠ‘º=ëiâ‚ú_mëÅc*
+<EFBFBD>
--- a/secrets/stateless-uptime-kuma-password.age
+++ b/secrets/stateless-uptime-kuma-password.age
@ -1,10 +1,10 @@
 age-encryption.org/v1
-> ssh-ed25519 u3yXZQ rUCDxb+7FN7p4DnXoCuxaEUIOy+jVORv31WXkP/3WGk
+-> ssh-ed25519 u3yXZQ tmFNbSWWcoA7Z/TvAaeodP8U7IqoMUDeUgEuueV3ugE
-P/SVX6zKb0akf5ir6rNO/C/OvIlJ1hD04jcrnskbmnQ
+MmrD0NCtXoLR8GAwexcdN0dcGvyjdRgSMmz9Rt05b5A
-> ssh-ed25519 AqX2tg 7vKtcYFHVm+JAyABsui10UkhXV4ZNTGbPi0Gv2qoOjQ
+-> ssh-ed25519 AqX2tg 0fjjaaTdxHyaUHLhaMoR89FrWHxsJ+iJP9HjYePyJEk
-BWylvnTfeC/FBrdgUbqlU70qeS1bA6nb33fbyObSFgI
+t8T8TEnqSrDneiblrTxOPA1OiDMrB3/o36JqXwanlTo
-> ssh-ed25519 xaddyw V7Zhv7A0r5rmU8vqAtW+6cVLRz+jBPRbz7Sxpcm8Axs
+-> ssh-ed25519 xaddyw 52IFyDb+AaTJAlwItAxNwXw230RBssaIdiZL0rm+/SQ
-ddVeAc22kcIXuh1Rfz4MqAvI9vPJGa4arUM9FFWBusw
+C9pqrsqtNvaqSW4VPcW0+MsNfYz+GDu4UqP497vWtAA
--- /A0uip5xell7nubJXIDrHL7p2u1bFJg/ujKTNMD7mH4
+--- O28WnFNZwT2ExTac5bu7LVtbaW/ZVI4acdM5u0lVnV4
-Öò¼³"s;6^Ú¼Å@4ù#öDF€Òb¤F$æ5<C3A6>‰<07>´ºn–³Ù¡<÷C[¯€Ìâ=a²ÄF„
+¥›’äÉÐ‡hW2K#Æ¯Yê‹¤
ÉUž—»¦%ú¨¦
-
+Nî×XòË iX¢F›2Ù¿§Kð¿$fd
--- a/secrets/telecom-mail-pw.age
+++ b/secrets/telecom-mail-pw.age
@ -1,14 +1,14 @@
 age-encryption.org/v1
-> ssh-ed25519 u3yXZQ JshqrnAlJ2HlxnTuhWXJTllTS992WjOCy37ZhljATUU
+-> ssh-ed25519 u3yXZQ kUUnaOHFtg5OFlERbYMS9qyJ6p1jcxborXJWr/FZT1w
-ieKs86H8BEJMA302OehOWCPkd6Q1VVJYnBJqBvmMD1U
+y+a2IzEoRuvwzl7U8TYfQvUhZcHgaHALqyzpHN3XcQ8
-> ssh-ed25519 AqX2tg 2ixtbzSzTn38wCyEzONxeCvH9F4R0MWgZzZRbXYbRC0
+-> ssh-ed25519 AqX2tg exW2CX3Qai32V0cw6TIs1cSPjQVenKu/ZxPTGd9JKQU
-vgwvA4e8zdWf5ddUfyK7bCxpDPJWgbFViAN+Oax/Lac
+QEz7dXeTUv2SFUdMwSIphT4mVrLc4p9I/6K7UZw6gL4
-> ssh-ed25519 eySVIw Mmaz7xkHfiw4LiefuQmxDAoLH1bwzxO//NSNDCmHITY
+-> ssh-ed25519 eySVIw tUhWZPM/2Bj5rKXQbeGRAby3r/w6YttOoHb4UHa2FDU
-udd+2A1RZmkmrkC/m9kPc2tSIbHeYZX2zBwFlNtBpd4
+M9TG1clNu4sS36SbKvJyv5yAPlYRVqzknax8xqakSnw
-> ssh-ed25519 ThuR9A R5oMdoesN5R0VpWZ1u8G8w6QP31CkRazXVcl2ndvJ3k
+-> ssh-ed25519 ThuR9A 3hagqEkYVpY6KlstIbWEwoqS364+bP84nIGeafnGIlA
-vrQsWpFVbWEgBLptYS5mqaWV9zEEMKkF1Yb245Ga/SI
+Ix8J2vH5N27JMyrFS7puc7w4o/ncnVCiY93wzRQFqOs
-> ssh-ed25519 LFAtBQ emryRlmANSW/zESFJ5HJSVpFl3MCqF6LrZbOc/QMrlg
+-> ssh-ed25519 LFAtBQ aymoqg13GB70LePTog97o2TYqP9jj7Xc8FhXUgBxDko
-+slCmbpnz2PuKh/DI2VLN1U0RcPtUD8isyC59s7M5uA
+pci2UrnhzbUMAFQuo7pg1a3Nz4ru33zL5Zov5Ropv48
--- arnmhXcR1864XsqXCFW23QZYyR1ff5kOSrYt7LRZD/A
+--- QDnPy3fW5pTLwpR8Csc9yx/Xj0Jdf1BwxL2moee1M2c
-
+šgÉ0äÌp 
-;;\ŒJ´’…:~<7E>D6';"]MÞÅÉÁÄ€ùË¨¦º´«—[ZNµ‘äsN°
+AôjÝøÂÈêïå5ðôûo²ó‡Ç~ˆÆï(,UÔ¬
--- a/secrets/user-julien-password.age
+++ b/secrets/user-julien-password.age
@ -1,28 +1,25 @@
 age-encryption.org/v1
-> ssh-ed25519 IRHAkA hgaBWQ7tCq/1ZjF+4LA2sDhgwhh0+q4SkbANa0wgugQ
+-> ssh-ed25519 IRHAkA HDj6sMkMCloMNe0l9YsZKD4OVhz1q2plKC6CuGSdF2I
-lAaaAAYWF2nIuBm7EakDDQSSxm3i7DEwsv7HmSuNZS8
+zGJDZ5manAfBaSBE+Ig2GOjPiBrr3Kva4RHtnO8D3jo
-> ssh-ed25519 AqX2tg Ee03QoPBWZqEAv3IrAYCuOmlo9AC9M9KUdgK/r4K1zs
+-> ssh-ed25519 AqX2tg euMgICa9DGJelFNN9pTz1HtJoRigcQfYRk7HxIXqITo
-zqXhkbhNcmBIr95HkAXQNgaMMyihgqA02wmnqap+MDM
+zBUXTi5MBmu0YW8XOu5wN1hPIhhND6eOSTFQYZLFYBg
-> ssh-ed25519 bD9h7A a81W9qTis6cu+KSlIvvAsf04GosuXU8yDyjeApHCV2w
+-> ssh-ed25519 bD9h7A ir53lJbxItcpq1+Uc0oWPIG/+xP20AcaQcGd6ZnLyVk
-L8yNstriP9GNc15XhfFGf4LUpBq90K65Hph9tXES2Xg
+zrxrJxir1s+G2zgJpETAXczDsOT8gsGRFGB+UBSDiw0
-> ssh-ed25519 2Wt2Kw 4qVhowhrlIaNXvb75m5q3eLZmumiJHAI2feQ+JPbyDg
+-> ssh-ed25519 2Wt2Kw YlklqvgeEqThZsE6Q/NhW4RFfNnu2TOPjfQxcsnxFzI
-NzmhYCOEsohKSiRcOOYBp92ZBN05inhTzIUYspcmYlI
+odPRmZjR9nROr7jIL40kRbE8neSW5F7j6S2sOwZUB3o
-> ssh-ed25519 xaddyw 62Xgbb7HyOuI4BFaOr2/gvSHAjJ+x5Osx68dMG3HPDI
+-> ssh-ed25519 xaddyw JYEed6y8iBXNXso0iO1ZX030/n479n0PaUtQaX+D6FM
-LE+MIer3q/JS6P2P3b+jvE57XU3RnRSg76ZWBd59gEg
+x8YBLS/dJaK+m5Ti6BONjckOhkEiaSPlblSiu4Ert9g
-> ssh-ed25519 6rkyTg dXgTeVGalswwsMTz9iHHD+CCdLhnV9JiF95VPDQaii0
+-> ssh-ed25519 6rkyTg 13UXONJUPLDz32aGyqlk2Okt+i7mHnR4wkXGPd0emyo
-PiFssiSJbFvDj8KVPUz2a+icgh+5oyjFc/hQjQhtLWc
+hVIqX3NdAFBE8xxWGwUH+54QJOG7dHEfhy05D8NaYN0
-> ssh-ed25519 d3M2Dw A3Vq93lKhHS/NMpIO6G3FomDqpdD42LIICzvs/YFfwQ
+-> ssh-ed25519 d3M2Dw 39XLct/6ve+qWI62nidUa8RNE9g36W6H95oJuWWd6CM
-n4WhahrK5TI0GJhFo6fU8CISyCi9H/SwMeexlFizLY8
+O045hhTUQV4V+kubouu89XKWMD1rqtNh5CtSB9JDGGw
-> ssh-ed25519 81O5Zw JXXtJCJXsY5SkMBTqkUtdcj7QRukXTUNzijZrbAWsgg
+-> ssh-ed25519 81O5Zw hg9eZKp5g2vB1DKYRN3AjCMi0ehv4b3F51C5mzWzylw
-bJbazdY7rPNgeuCwVpnDSHAkPHXtyyWdb+aMrZrCDYM
+07991sBqL4B3NEzyoyO/V6GKLazNos9QpycWSjVm9FU
-> ssh-ed25519 Ye6ufg XKzxyotylhqu2Hj7MwqNY/G3g0YYpRrHEMK6GN1q0xI
+-> ssh-ed25519 RiYKHA 1w1gG5jfs54kYuDB0yYHAN7oF6/sQMBf11hJLPsbsyc
-TFQ5MvU9/KYx71OAmvrN5aGBrBgl18eVNtYQGm2CpjI
+jXBlL1sv9Uz4mAkc6s2wR3kKT2tv2oaoWkEC5qeGpSs
-> ssh-ed25519 RiYKHA zGRHs4AT6wpAcwJWmj8PqJswZWs4hUESNWtymEojYnw
+-> ssh-ed25519 eySVIw jAw2h3wyPI7/AL/6cERhW4zLJPxaTba21vapVh+qglA
-fVjl4wZc0AvhVy5HQeyLrLuOIf6i1+oTdxc81RjLxNE
+7RQyCTdnrSvbt0LxQH6QHLKln/42xxbsIU7OOv2I5tQ
-> ssh-ed25519 eySVIw 2DJiCTH7caM3QdwLp2DG5FYUlZl2z4I7MxfWyuTmmkI
+-> ssh-ed25519 u3yXZQ VfjX9WYR36raJECq1YqAzVvfXg00KJ+PN0VjYUcC/mY
-LqKZEIlfnlTDiTTKCwd7U8iAMpx0uk/cjlHFOaOi/Ko
+9Gj+3xKWBmC5prTWEsvXP720wqP2YWhF8UmDC8SlsTw
-> ssh-ed25519 u3yXZQ YCk1BN5DEWIJtXXqNKNkHYAshky1Q3/mMlBZuk0urkk
+--- 5MlLMHU6KW8JbF7S5QFpTKG5W4pHKmYN7X+RbovVR+M
-8qiRq78qUuhQTDRMbMuvfgM85HEP9cAbh60UsQsPCgc
+,ï2±×ÑÀ™ùÉð²}ò=20c#¸ØøÀ†üÈ–•™éDu	˜)Ø„i<ÏÄ,Í°ð#‡ÞÃ«žrªÈp=Ý×v+oÞó…žà¸×D—%ÕG½n:SJß‡$êv<þO:‘Ìl¡%pW4:ÊþŠ<C3BE>º„‰)*Dš…Î¥yÁ¨é¿ŸçäWY»X	‡
 --- u9deyC0OXA5hOqVQVcAcFZW5X3CkXu/yxUZqlIq2ueQ
 p‰Ë/»u4<75>‚ñÂ×bqû2“2‘à×'åw›¥ŽKÕÜ<C395>-×ºS\ÍZÆZô"ì¾6A	¥—Ñ™Ï?;‰á•Þ¢¥%
 ¸Ÿ=y…©5¦D8yÄZ¸tÝ‘m âšÞÙÏš¯£T‡]²@òèèï(7í4³Uz¤g¿»ßHgKÉÑÉÃã~uØ…xó
--- a/secrets/user-root-password.age
+++ b/secrets/user-root-password.age
@ -1,27 +1,25 @@
 age-encryption.org/v1
-> ssh-ed25519 IRHAkA qspDa8zIwh+7n1QWTpUMJpxvGHQOEozPK7pQ5BwkJUU
+-> ssh-ed25519 IRHAkA FVdTV6EWLuXZb3wuGGEZvG6gXPMS3UxRjXdbdQjh5FM
-0QwDqG5fIjm1xiCxUl6eP9Uojo8GlVd4Yz0jP/YHVi4
+v1GZznR5FxhQBf7E0bfV2HrHaIJ/1+zvNhXXSiF3FNc
-> ssh-ed25519 AqX2tg RkAjiRaKykyrVL4FWEJtViZjrFO/Kg8UC2gWJpgVmSI
+-> ssh-ed25519 AqX2tg 5R7wBXS7eh5l1p+65pHUhfMGFQE2u+m/EuguUNx/w2Q
-OOzaeAp7fekaXNulqcqK2XWchO1S4E+vJ8D+jJWQvyE
+FeeHqZeQ8lW5wDmy8M/i61yULmB/V5a0nu/wGXtvP2Y
-> ssh-ed25519 bD9h7A skcDCI8xbRF76AaJrKl0ggTjTRQlonmAZYei8aiDi1c
+-> ssh-ed25519 bD9h7A AXsllj2X5Gw13NZTtudjWpZCNzLc/O0zyakotaV+kBk
-a2DawgWNTWSzSOyxuC6NVvvTqfIw17MrnjBm/zfZH84
+Jw+GFUq9a/uVMZI2VbdoPtP9UPXv7qrCXHKdyHh2Js
-> ssh-ed25519 2Wt2Kw sEoEutQQCBZBer+lX2I0LhNpMpfUmR5JB5sOiJIsNno
+-> ssh-ed25519 2Wt2Kw IEZ9OM0eArQGnNPQ67BzxhdvmtM2FeBYFwRPeqD90Wo
-mORVNZfdVmulANsGv8vNDCnO7xJxg5IjddpX/Mgy/G0
+ZH0i4gDcYcuYVcmT/XEMDEy64FPuz3B5wdio1mDHztw
-> ssh-ed25519 xaddyw 9sE2HjCdvbKHIVLuyjd4G2IemBL54cyrepy3RorKRA4
+-> ssh-ed25519 xaddyw aMtzFVqwnFow6EX0FhdrUf1x90rg+u/p9MGdO9neFRI
-rRrroobO/Ad5cM0fKAEt1EvpYy7E75ccI3721TSCPYQ
+aMZMocb/HuBcZRfkMJwpHvZdaGa1L2bDcO5+JZZV+TI
-> ssh-ed25519 6rkyTg MqpZDtNhHJgR1hRGgv2E/ckJBpN171yooAiVUl5x/yY
+-> ssh-ed25519 6rkyTg H+sGiZjdU5vudKk/fgR3rAZy1iIsyjmpasUkauklHQc
-SDwYWCdpTjwHGYTwQHZPITV/q3DVPXcUcujBrlueo7U
+WUd4hIv/FmnFLNxTDQDAzCv5fk5Vh/wb/LvzemWsOfY
-> ssh-ed25519 d3M2Dw xTq0/gg8asqP+SsSc8lgiJyEilEq9T087dbz/fcikyI
+-> ssh-ed25519 d3M2Dw W7YbY2Gv9556xWKrqd8LqST8WV8n7P00vhNi0oxUKWo
-rdKZAx0gP3hn5JXy24UOYIZ2FfEPLG6RLilJi4EGqyA
+jZLWPj6Tg803dcsPyMpVOIWxczJyr7qOsrLp5DvVueo
-> ssh-ed25519 81O5Zw TtwRH44QfSkPqEGj4xYU1qYhBBYzXZ801dJNYI4ZE08
+-> ssh-ed25519 81O5Zw Di6Izx+fjqWDTeV0Fm34G3riV09lsgP7IQr0fcE+/X4
-xXUXhhdH9BC4rj5EL3MmXyv9ZqYp7PmvljgIYtpx0zo
+0GmjO2g1MeAlfziBFKskxd3mcsNBW0/8FbD1hcQQfT4
-> ssh-ed25519 Ye6ufg bjDuzt4UKsweB5QDhHHBWT68RNT89TsSWTGIPVkDlSg
+-> ssh-ed25519 RiYKHA t+Qa3COiqnHCtNO9D9YSBFnZiGCyz8BbDyXh1S7Y2Rc
-SJ7g8FRNfyKbKl8HHdoC6z9t0aE0p++PxvREkPGcXkc
+W4QC62Gbfz/adBIiPkavfdYrTIiTrmZ5jPwpv5dLdlo
-> ssh-ed25519 RiYKHA GrIulFnBwLSg+WodSFJLOJYwDUddxZceoVm0K97kGQo
+-> ssh-ed25519 eySVIw s45M4XkCsWgBLO3OwAgSXMcUp0fpE1rTd6uevxM+cic
-GSnCM7XMdvsUCxixqe1Fq92JmF+Z8Z8MROf6/7D6pVk
+2cPWAG7WBV6Ien4sh5VLYquOg18pKCDGGAeU+a8p+yo
-> ssh-ed25519 eySVIw U/lpMx1CoC2DCtrAAXMh+tO5hOZ/lsge0U7H+G1hqgY
+-> ssh-ed25519 u3yXZQ vZBYkX3N7Qz48OYnG5IBBobOI6+22XaGFKad+JjH6Dc
-/ZK7oNH9z1FSH6oLPBX6iegVtK0P4j6fmtoIMV2r+jE
+iwB9bEwv/bbitK1oAFmJ9jtOcp+BXV6SHQ1NwvJHkyg
-> ssh-ed25519 u3yXZQ HS0FAAoNxM0HQA3Dm2v81yCENsU5ra+xbVx2QOuEMBw
+--- sETrZbRCRj4QsnGrpnpvO4LBUANQXOroTpIbGulncjI
-sjr+AgmmzmajH9QNxD5G2BxAfZsBu5Zvnw9vgga1nIU
+Ò°¥ðˆ„E®Ô<õÔ{‹ºE²&}Ò5¸,m…žUg«lô:”©·îŒûc;u¾<75>‡‰KA<4B>ã#,	šZA¼áqš‚¢}vïZŒô?î´!”‡öþ˜N-®	[ªm(dÎ#©Sàw¦NŽØ¯ ÞáƒÃö]Jä'¶;yôeËzµÐ<C2B5>¨B-t]˜¿š¥Fø
 --- GiVG6ASswBXeAKX1YSkeQ0BG0Ck7J/SVsw6bNmIhm/0
 Õ¬ét©Aþ—+F$²lëîžÙŸôrQnçyÞ?|E°fzaÓrW¨:Þ¡æë¢YþÄpÝƒV¦vîKÆ(‘êÄ¥ôsáïE_xÏí…2ˆÐì$¥Šz½6U½GÕ¶? °/HÝ/·)N'î³ }ðÄ_„Cï·ÎH0/3'òa$ˆ2Ë)oJÌZ iÜÍ
--- a/secrets/work-mail-pw.age
+++ b/secrets/work-mail-pw.age
--- a/shell.nix
+++ b/shell.nix
@ -5,7 +5,6 @@ let
  agenix = pkgs.callPackage "${inputs.agenix}/pkgs/agenix.nix" { };
  bootstrap = pkgs.callPackage scripts/bootstrap-machine.nix { inherit nixos-anywhere; };
  lon = pkgs.callPackage "${inputs.lon}/nix/packages/lon.nix" { };
  nixmoxer = pkgs.callPackage "${inputs.proxmox}/pkgs/nixmoxer" { };
  pre-commit-hook =
    (import (
      pkgs.applyPatches {
@ -41,7 +40,6 @@ pkgs.mkShell {
    bootstrap
    pkgs.statix
    lon
    nixmoxer
  ];
  shellHook = ''
    ${pre-commit-hook.shellHook}