feat: init biblios

.gitignore

@@ -2,3 +2,4 @@
 .direnv
 result
 result-*
+nixmoxer.conf

lib/mkmachine.nix

@@ -38,6 +38,7 @@ import "${nixpkgs}/nixos/lib/eval-config.nix" {
     (import inputs.lanzaboote).nixosModules.lanzaboote
     (import inputs.lila).nixosModules.hash-collection
     (import "${inputs.stateless-uptime-kuma}/nixos/module.nix")
+    (import "${inputs.proxmox}/modules/declarative-vms")
     {
       home-manager.useGlobalPkgs = true;
       nixpkgs.system = system;

lon.lock

@@ -161,6 +161,16 @@
       "url": "https://github.com/nixos/nixpkgs/archive/b47fd6fa00c6afca88b8ee46cfdb00e104f50bca.tar.gz",
       "hash": "sha256-nbG9TijTMcfr+au7ZVbKpAhMJzzE2nQBYmRvSdXUD8g="
     },
+    "proxmox": {
+      "type": "GitHub",
+      "fetchType": "tarball",
+      "owner": "saumonnet",
+      "repo": "proxmox-nixos",
+      "branch": "main",
+      "revision": "15187a4c4ac50d1a38c734f72dd201a7eb504a89",
+      "url": "https://github.com/saumonnet/proxmox-nixos/archive/15187a4c4ac50d1a38c734f72dd201a7eb504a89.tar.gz",
+      "hash": "sha256-wh2piKI2vfwQXmeSVX3ZDdxg6ChUQ1YolG4Cn4r6nuk="
+    },
     "stateless-uptime-kuma": {
       "type": "Git",
       "fetchType": "git",

machines/biblios/default.nix

@@ -0,0 +1,58 @@
+{
+  inputs,
+  profiles,
+  ...
+}:
+{
+  imports = [
+    ./hardware.nix
+    ./home-julien.nix
+    ./garage.nix
+  ];
+
+  machine.meta = {
+    arch = "x86_64-linux";
+    nixpkgs_version = inputs.nixpkgs;
+    hm_version = inputs.home-manager;
+    profiles = with profiles; [
+      vm-simple-network
+      server
+      behind-sniproxy
+    ];
+    ips = {
+      public.ipv4 = "82.67.34.230";
+      vpn.ipv4 = "100.64.0.2";
+      public.ipv6 = "2a01:e0a:de4:a0e1:eb2:aaaa::46";
+      vpn.ipv6 = "fd7a:115c:a1e0::27";
+    };
+  };
+
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+
+  deployment.tags = [ "server" ];
+
+  disko = import ./disko.nix;
+
+  luj.nginx.enable = true;
+
+  environment.persistence."/persistent" = {
+    hideMounts = true;
+    directories = [
+      "/var/lib"
+      "/var/log"
+      "/srv"
+    ];
+    files = [
+      "/etc/machine-id"
+      "/etc/ssh/ssh_host_ed25519_key"
+      "/etc/ssh/ssh_host_ed25519_key.pub"
+    ];
+  };
+
+  fileSystems."/srv".neededForBoot = true;
+
+  services.tailscale.enable = true;
+
+  system.stateVersion = "24.11";
+}

machines/biblios/disko.nix

@@ -0,0 +1,79 @@
+{
+  devices = {
+    disk = {
+      main = {
+        type = "disk";
+        device = "/dev/sda";
+        content = {
+          type = "gpt";
+          partitions = {
+            boot = {
+              size = "1M";
+              type = "EF02";
+            };
+            ESP = {
+              size = "512M";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+              };
+            };
+            swap = {
+              size = "16G";
+              content = {
+                type = "swap";
+                discardPolicy = "both";
+              };
+            };
+            root = {
+              size = "100%";
+              content = {
+                type = "lvm_pv";
+                vg = "mainpool";
+              };
+            };
+          };
+        };
+      };
+    };
+    lvm_vg = {
+      mainpool = {
+        type = "lvm_vg";
+        lvs = {
+          root = {
+            size = "50G";
+            pool = "mainpool";
+            content = {
+              type = "filesystem";
+              format = "ext4";
+              mountpoint = "/";
+              mountOptions = [ "defaults" ];
+            };
+          };
+          persistent = {
+            size = "800G";
+            pool = "mainpool";
+            content = {
+              type = "filesystem";
+              format = "ext4";
+              mountpoint = "/persistent";
+              mountOptions = [ "defaults" ];
+            };
+          };
+
+          store = {
+            size = "100G";
+            pool = "mainpool";
+            content = {
+              type = "filesystem";
+              format = "ext4";
+              mountpoint = "/nix";
+            };
+          };
+        };
+      };
+    };
+  };
+}

machines/biblios/garage.nix

@@ -0,0 +1,46 @@
+{
+  config,
+  pkgs,
+  ...
+}:
+let
+  api_domain = "s3.luj.fr";
+
+in
+{
+  services.garage = {
+    enable = true;
+    package = pkgs.garage_1_0_1;
+
+    settings = {
+      replication_factor = 1;
+      db_engine = "lmdb";
+      compression_level = 0;
+      s3_api = {
+        s3_region = "paris";
+        api_bind_addr = "[::]:3900";
+        root_domain = ".${api_domain}";
+      };
+      rpc_bind_addr = "[::]:3901";
+      rpc_public_addr = "127.0.0.1:3901";
+
+      admin.api_bind_addr = "127.0.0.1:3903";
+    };
+
+    environmentFile = config.age.secrets."garage-env-file".path;
+  };
+
+  age.secrets."garage-env-file".file = ../../secrets/garage-env-file.age;
+
+  services.nginx.virtualHosts."${api_domain}" = {
+    enableACME = true;
+    forceSSL = true;
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:3900";
+      extraConfig = ''
+        proxy_max_temp_file_size 0;
+        client_max_body_size 5G;
+      '';
+    };
+  };
+}

machines/biblios/hardware.nix

@@ -0,0 +1,39 @@
+{
+  lib,
+  modulesPath,
+  pkgs,
+  ...
+}:
+
+{
+  imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
+
+  boot.initrd.availableKernelModules = [
+    "ata_piix"
+    "uhci_hcd"
+    "virtio_pci"
+    "virtio_scsi"
+    "sd_mod"
+    "sr_mod"
+  ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/persistent".neededForBoot = lib.mkForce true;
+
+  boot.initrd.postDeviceCommands = ''
+    lvm lvremove --force /dev/mainpool/root || :
+    yes | lvm lvcreate --size 100G --name root mainpool
+    ${pkgs.e2fsprogs}/bin/mkfs.ext4 /dev/mainpool/root
+  '';
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  powerManagement.cpuFreqGovernor = lib.mkDefault "ondemand";
+}

machines/biblios/home-julien.nix

@@ -0,0 +1,3 @@
+_: {
+  luj.hmgr.julien = { };
+}

machines/fischer/default.nix

@@ -61,8 +61,6 @@
   networking.networkmanager.dns = "systemd-resolved";
   services.resolved.enable = true;
 
-  time.timeZone = "Europe/Paris";
-
   # Select internationalisation properties.
   i18n.defaultLocale = "en_US.UTF-8";
   console = {

machines/gustave/default.nix

@@ -88,9 +88,6 @@
     };
   };
 
-  # Set your time zone.
-  time.timeZone = "Europe/Paris";
-
   services.forgejo = {
     enable = true;
     package = pkgs.unstable.forgejo;

machines/tower/default.nix

@@ -39,8 +39,6 @@
 
   networking.useNetworkd = true;
 
-  time.timeZone = "Europe/Paris";
-
   luj.buildbot.enable = true;
   luj.nginx.enable = true;
 

secrets/arkheon-env.age

@@ -1,7 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 xaddyw KDUHNcRPZyRNE+Mv8WZCkcHor3u2rBctyAkxnqxPo1E
-BREfSPFE4lBK43hKro6xx2JL8zEA03NFA3vGVWwMcQs
--> ssh-ed25519 AqX2tg Z0/hV6PoCtbE8Y6TNmRAr/B/KpSM4Q9+Ui/pYq7VCFw
-IlF11V/xkVqeKo1EThX1SH36sTyG6DvwcqZIayBzFXo
---- XKI7oeqH4R5GIbZqpJZtdwwNgTI8d+V7KDZInKy9dIc
-OùˆžÇ‡n£Çž®|Ä	s;”¨\B)~4äàÐfOJD¶¹‰¸ÝºCÚFÂüm	Déµõz˳A²ºØ_ÀGRf—&-
+-> ssh-ed25519 xaddyw Kv7PyXV1X5VUzHBMdVr3u2dbgSqlkW1fTYYVqbu6SBs
+tOvQ+hmvhMYEv3BoaJmHQlZJNGfEeExr1CY2t+ESZ6U
+-> ssh-ed25519 AqX2tg /RQHaFENJnc4XwkNLNOx2t0tNIzI49/Jzxt2q/CW8wc
+P06olD7mn4eUG2AYGrdPZ/OB6q/8WpNQaYSvTq7/VJs
+--- Z3yxBHXTIz9spj8RJugM7Za4TDyrxgzFB2qCoW2hb2c
+｣ﾊhh'Zﾌ､g舫*<2A>ﾝﾈｮﾇﾖ㍼$οFｽﾒr旗5<E69797>ﾆﾜﾖI翰ﾅPRv聯/Eｧ<18>ｧ?<3F>ｻ<EFBFBD> ｯｿ*3yVH`<60>dｿ

secrets/arkheon-token.age

@@ -1,20 +1,21 @@
 age-encryption.org/v1
--> ssh-ed25519 IRHAkA caugjxDfvw6iTBHV1mUgpxFuX7T3pRuIQI67mjmp7mc
-5sMreEtVnsGH44V92dVfIEJLf5Y1UPeEGi466LtJy6Y
--> ssh-ed25519 AqX2tg AxeoCfeGB32CxOoNdhLzhvJhoiTQY1e46Xr0TRP1gDI
-J2uMDrr1hpEM+cI7KhujXEnrLjQvSvFLhtxvAvQZ6HE
--> ssh-ed25519 bD9h7A LHaPXxs+EaAuBI8bmnIkyTmD5BInR57sruS9teIv3Ww
-Qc6YL9GjDc/rIx2F+EL0B+svfEle+WS91h0rqrcCU7w
--> ssh-ed25519 2Wt2Kw hZRNGjqv1PQ72vDp8GpZYILqMaWKmDbWn+jjNDqI+yU
-JrMbBvqAufjYAkSTgkMEiQSDTlYRmi2OAZ2CBNxed6I
--> ssh-ed25519 xaddyw yFGv+frc+QPaXh0UQWvVbUA1kuN+jguh98NcxIICzD8
-hObZCxpqfkG9GoJwLgIzquFkd+M1tFzBOgruT9YxNpQ
--> ssh-ed25519 6rkyTg 1uPSvPd0s7QSDaOzr+X1eW6Ouvkk+D9lfWrKJG/qPWk
-SMrjRt2ACkXyMbz3Bm+E4cCKlu/WRTZI2JNg5ELDNRg
--> ssh-ed25519 d3M2Dw NU2rIWxLmKqQE+UP71C95CLugzo+fT5HO4RLzh8X5xc
-6IFTudKWKlMBcT7ijHkWdP0e3eMSxVG8qe1d32HLXSU
--> ssh-ed25519 81O5Zw M9pBSFtkbSR8jd+cQgLC4PRrbKqmyq43SMtFbTFi6W0
-1Ir8c2h4ieX2p9a4GhUOj9bTMvWadfiCHUDQL74S/KU
---- oFdyYyQ9UotWn8eJKqKLJdcs2EJ7MXMh9jn0Wijnokk
-VóWU}QdÞ¦J›¼~¤p-nhÑÙÛ4:_ؤ€ÆÜ$ðJ(AARäløAW¤S(
-ä#ƒ„ªÐ 
+-> ssh-ed25519 IRHAkA a2yCD2Vclt+H6l57HN9t/vm05GbUhwRN3KeVUmTuVD8
+KvE7ugYD19OjCq7C05scv8Ann0vKeGb4oAU6UTSZLUw
+-> ssh-ed25519 AqX2tg m+A3ZbBBeiemV6jN438XDb5dVlVXmEaVl4MOG1MmD0U
+PuKlZ0eWZNn/4eUxGYLYuxIuclBDj5QZYr90us7TVj0
+-> ssh-ed25519 bD9h7A TNOs0LFXm1juu1pyyzS2C2H+Ox+WiMRIMqtbWabSwmg
+LBPd5ZV4763bkWoqGEw8C3reHe0m1wrtE7UIZ9sPqjU
+-> ssh-ed25519 2Wt2Kw mqtUc/tS5EHczd70Qjmwzu3ePGqLwJZrWu+9ebW820U
+y9gUeKxmZukxy+G5SiRzI4i6HR9VF053bnRyO+SiT8A
+-> ssh-ed25519 xaddyw cpGgaGIFJjWgRO8io23lgpHNJ05R7MYRBAkodAHPqno
+Me+cdC6FPnfFAiqvJO3+KJgw9+sL4FMp/Yrp2uR2ZzY
+-> ssh-ed25519 6rkyTg 0clGC/h47zbadiWkON38j5IfX8iLdVFwzJY1yAIHEFY
+Hw7Vk6W/BM2UBk6k/GRi5k0vNfzyc+gPoGHzHvWFmCo
+-> ssh-ed25519 d3M2Dw rK8b1befHR/bZrCXEOC7o3mpMx8Hbb7yIpKcW1NNtw4
+l//R9ELS0COGRjuCjBUusxYfIcEan2BdO3s8D6ksVDA
+-> ssh-ed25519 81O5Zw z7jk3FRx/1tu9W+BqLcbQf8gQY8q3lDsZgZ/P/CDpQ8
+43PzL54PDmF5YKNy1B9BVPlgH3i93Has/UoYrlONAZE
+-> ssh-ed25519 Ye6ufg wnklTDj1KJbsd4tizpSUEF/YRZs1tCE0JrkcC9/aGxM
+K92k+XiLVhPyXTEqgzS5jh7X18d4Q33qUQu8fUPvRDA
+--- /GGB60A/b9drPC15suKCmpfFtcMpHbBWqkPE4b31h30
+L<>ÿÑ嘿o¿:2û.VXDø»C–‚¤Ñùª¬¯|zL|J<>¥WÿéÌy:m‹×|<7C>'T¤

secrets/buildbot-nix-worker-password.age

@@ -1,5 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 AqX2tg oP4YAObdroYTWAJDz3lYMK4beGeCwat6+qSE9ZvTVGY
-6bHl/WjXKOmhImnu/CSMRtbG2zQZLFvhBUk6Tq2kuLA
---- PBUnekguErQY8jJ5q2VFuYPbkYMRNB9YUpYAK5/Guxo
-b?Ö$„‰=Íi/xQ7µGªE–±‰ç6¬
ˆ‡žÕ|RÔ§'¿Õ7dê…
¤Ñܯ 1pѸç<C2B8>TuRbø{m+
+-> ssh-ed25519 AqX2tg fpshpDvM1kq0MDLSXdvFi1nivR9paw5FGhj9jDJfxxA
+E4PjHy2n3Z9G4PZS74WmRNm8YOhjr3QiJpWoK26xSx8
+--- E2wRppIRlXq91sIc7wrASSEsf9sN3hAVjGa54Tc3zDo
+;ÍEâ]ęĘŔŻ@JÍÖąµ±kĐŃ˝ e¤ďÝk<C39D>Ř^{—đj3”?ď–Ľő˛óµ'Ô“‹ˇK´\ăzÇŚŃg

secrets/buildbot-nix-workers.age

@@ -1,5 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 AqX2tg nA/VSQ57CLw42YczGEIk6UqRR0vJ9kLViE3C+8va/AE
-+yGejdcZdYstvFtptrMhpFeWaD+gxZm85dJ3fDG6g30
---- 3YdGBJFy7F3rxLyWznAeEJi7p1nfObT0kaqCEz0emZE
-Ý}â©ň´Řt<C598>tfű¸Ś.š˛JÁI„˘´?&¨n*˘$‰X~Ä™.¸3Ěޡd@ľłŘ™YŇőOMŘ»ÂéV‘Ě;DJ‡T6#˘A—I†é†C6é9ơwŞb;ëj(¦Ç:_˘qÓňbů™
+-> ssh-ed25519 AqX2tg HWG8U+EZzoOhHQ1bmHtSp3skTKhMo7ClifBIIf1ZZwE
+sPOKZJvswG2LGRhp+8sX2TMtq/lLHs5NcL5XHwYc1/A
+--- foudWLZ2RUAN3IyCGoaVMuIZmUmAMeTbK5KH0KuhorU
+nÞÀ<EFBFBD>8ôÕ¢²[eœ˜¥,5%'ªþSt±žó„£­Ôý6Ì8Í:ð©Á7@Û.-Œ­éŸ ³$ŒÇ[¼D4™´o²è/óÿ(	œ
8sé{ðPoØ~ÅV<7F>‚–"¨èeÓÖx&[gŸ77É

secrets/dgnum-mail-pw.age

@@ -1,14 +1,13 @@
 age-encryption.org/v1
--> ssh-ed25519 u3yXZQ 5PeYNFchlEHtVXEQSG+dC3D+EEP46i71O6T9uuEkD3g
-WS0s5betBaa+jVwSD6cEKR4KBqWwMR6eGnGZvthTrU8
--> ssh-ed25519 AqX2tg NTnhvcfQ/W1tzezQluexQDtTKAI+6ATLENvxV7pNCCA
-HxbdeKRviWIl4l8VCY2MUnk4uSQg3AuqwIb1xgTySyg
--> ssh-ed25519 eySVIw v1tXIUlY+stg20QI0uBZK3/17FtSIYTXFPZr4r/KUR0
-GBdyiP3nzDSET4xBYjJfXFXW/Wfs3UTI68BUepwUv9E
--> ssh-ed25519 ThuR9A zgid7w5dH1ETfDlSLHwy/UhnaFtFTlWqMm5RpjifzCs
-x2+s/vC3MWW5mi9deiu2U+ZvLNEEsql8NxzJgnRlRCM
--> ssh-ed25519 LFAtBQ l9GhRJTJHugH8W2/r0QwZRRPZqGkRvx8yxTj4TwOV1w
-KzhI8Cs5zj5MMaLNMFdTc2N5qSbFVCK6NpNbGDdqHOU
---- EFAMmxVPGjYrzXTdBiYCGRv8IGVp3M+DAiJe8jrAG/U
-¾hÊÐZDÎÇ\Ì2ñ|cÙŸ„A7Kà .·éÞ«7Èïå¬0tËã#ì™uÌP^åû¨Þ R@
-ÝœÝ>ü‚Ĩ߲RCª>¢îîÐê6‰ôryø­y<C2AD>Žg
+-> ssh-ed25519 u3yXZQ 50+0erysLR9fWR68yB+VqA33b5baoJ0GKP8VTL+ivUk
+uA/yUCifZeJcZjr0PlY0hqdiGQS3LHzuQtU/seXwfLA
+-> ssh-ed25519 AqX2tg JHdyvwg0rw2OJMCOk0a0X+7vHeqdttXKcqIqs1QIPBk
+IB4uino+qi8/oHX1zDtORbnV96Vd5XySvfxC3Ul3sC4
+-> ssh-ed25519 eySVIw igfuKku47i0pd26aXPdFkCHDN2R7gz32XZ++kUJhlwc
+VlQ+viZ29SaLRuHMCTWsa2xDLipzPB/GCrRzb2WJC44
+-> ssh-ed25519 ThuR9A v0EWGgZiMK4287dBCtXtH/mTcsnAo4CyC3pBpsyYJhM
+eR9IoHCNDiLn83gm4U9sx7a9vmuvdXVW6o/x7bd5XIY
+-> ssh-ed25519 LFAtBQ 5M3LuYiW0iP9Ll+5N3IzJ+VCA00uciuJ5VRLzka2tDc
+URFsZ6y3RkEgpkSIztj2AHK8i+sTAOGr1wy5i7JAvwM
+--- qZ53ZMlPMpDKEYtwClDjOSs5wKdf+6hCHZZQyuZiHro
+7Beúë¯é1©–P÷¾—¥‰QJð]«ýêøÛíàs¬kú¶Ž
±ˆ!2<>d©F“+Ù†f®IÅGw×ÄžÌGϤîžÃS<C383>§";,žç
yŸÍò7þ’tý<>|

secrets/ens-mail-password.age

@@ -1,23 +1,25 @@
 age-encryption.org/v1
--> ssh-ed25519 IRHAkA E6YjaiSK1ZAOvdn/ctKDdcZ8N27PM4aumwR6PoemTyo
-KZHCsqFOI5CKASAB7JfDZFu8X1bJqbnK5S+EGdz6O+c
--> ssh-ed25519 AqX2tg +psiPgcDgwb986ohcFyCjtHV3vU586KfpeMFB+M7aH8
-YRPP31H6xqLvDBWVBhfVDX1iOOl4Cj8l2OumlJSnXvk
--> ssh-ed25519 bD9h7A ydvgeErQgCV01KymM3GeoAJjXadWsu1oKAzNx5tyxys
-s9fVHxOKECRikXrpl1WtDRENpA8lfi0sjs9guzWovfA
--> ssh-ed25519 2Wt2Kw QUY6meNOB5/1VbsmdG3Rciv2Ylo+XNs7EzosZZoXexY
-Dg29e/qV71KuO5w7XfJ5D1Ub5D7LS9zJJjCpjq74F4E
--> ssh-ed25519 xaddyw wBv8i9YaMzSy9G6bAhU2g0PZ+dD4trpcnFkm20ZMX0I
-Ydgvk6IUABPq0D5EaLVQ8+CvOmcamHDsAK7Cam6W34A
--> ssh-ed25519 6rkyTg 5k97dTYMQRrJlRBYOkDM14kmifH3gVkp/6WqSj1OeVE
-xTWLfO7RW+cug9uzqYf2506PA0ZbDIIpLC4rj0bOPEs
--> ssh-ed25519 d3M2Dw FBzN/y5DHl0zyMnBppPC4bYgnQ5GWd8hO/BOaf6jOAE
-QvPkcQXG9Owh917ZiepdbZlPExrJXJxk2NG4xK7+q58
--> ssh-ed25519 81O5Zw eZ/GqBbvLpyniWpO1lDVMVV9R01/z7GzHaPgKu0M0nI
-ovaTkodIPWOyLNG+4ve7JQJhBJZv3vdP4ej00ojeFHI
--> ssh-ed25519 RiYKHA Yiky3HQMFuE7QdXwEXZSDcpLtzwI0DKn/NFpw3lSVQY
-sd2gqlXd46g4CMnOT6Bw1Z9uxt9ju27Jt6JzjbQrc+Q
--> ssh-ed25519 eySVIw OJqBAOMw7/ptX5fm4a6gLXZ1YYGHdyVVtFHluX7nXTo
-22tqx+J41YXbve1AuWDyQN9YBmKKof+rzsSSqWFGqcA
---- nnI6MSQEXFlbg8/Y5htKDusZE0/yIBSajB3SAXEJwVE
-TÈ&*®Å­¨KŠîE|U]-
‚yÁ XÑþá‰ÔëM^Ëéæ¬<C3A6>:H#`m£ù
+-> ssh-ed25519 IRHAkA 9m3cpLdjnBpUcdpfbosH4OQbopvLPh7+MxJp6Fm6fE0
+fVZHAefdGtWqbYTqXrbBQ5L8XSokaGHK0RBZCsXX7zs
+-> ssh-ed25519 AqX2tg lcw+UadSkAWH/0dK0IYbc7Flh9I6D/IQELsBuHdg3hc
+nP93GNCGszjB+rXa0PKu+VZyZbf7CCwqPEhjlEHPlkc
+-> ssh-ed25519 bD9h7A 1ZdCBT6j2OcUMa3bMWnNlk2ncAn2W5E0Rd618zk7BEU
+7A/zZR4gWAM3uzE4L7qmPo2+TuLXjc1mpnDMHv9yUUY
+-> ssh-ed25519 2Wt2Kw l4UxcHpKntVW9o6CGAxyMKz+H2ImZw8g9RNHl/FiGzs
+tIymKvzuYdZp+VO/l4TueL/7OPFEgtnor9jcrk3mK2k
+-> ssh-ed25519 xaddyw qbRopPtTJ+FvF3odpq5i+FKu03IoxX859dnwAsGvlGQ
+2I409t+423KL4/sxFQ1CEnGU/h+j2birKIFzRCONMrM
+-> ssh-ed25519 6rkyTg 3FtTckukh+osf/DN/iwh0+QAo7rgsS7bay8Af0teZx4
+MU490K3+bL8SKHsVjyxRZ1XQre910teyDdjWbqqLmsA
+-> ssh-ed25519 d3M2Dw xZgqhprpWZBoZf7y5wdfso+DUJWAU3XL8vSEb13J2HY
+7XiwjK4gnPnRSKbTiVQuiCDXZ/fNbefg7E0aktp0oBM
+-> ssh-ed25519 81O5Zw QNuz72Eya5fgmJu8zFVFrKm9vkC/azqG0yaDTmaqC0A
+asVCf3pScgveMQN2p7oxPNMd3UpPtwYV5MJzvDGnS8U
+-> ssh-ed25519 Ye6ufg 8kd7B9qdP8T9HjmPr8aCo8+kzxzUjfljFjO4YCW3dkA
+T8/0fj3xLSgUvjMyE6njn5IUTba/65Etz+sBN0dWjaA
+-> ssh-ed25519 RiYKHA yZzOOB8HaoonyY3N9dAEb8LSgc34QxaOxl483+1lyBU
+iLF9ldlcmncarhHkJklGj95hh4eXfNXxBtdkfQN+zl8
+-> ssh-ed25519 eySVIw GmFGcIZfV/lMxfEpl7vojGVqzaA3Cj7y4U2w2bQ9qTE
+RYFUAeLmNyLU9K8QE5W/ofCgcd9TSuQi3dPsrvaaPFU
+--- vk8TmIye+Z9ynTtgd/JosR1/ZtfakMT6MwzcOR9tNBA
+8g}Ú/s¢Ï§R<C2A7>ê²+!~V!Ú[aŸy-ùd½üÍ»‡y^!B1ËxPÆM

secrets/ens-mail-pw.age

@@ -1,14 +1,13 @@
 age-encryption.org/v1
--> ssh-ed25519 u3yXZQ xgPFHNqjt5oiwyA6DjbJQwt1OJIwrhaM9rBj8VkfJlQ
-oEFkyDXUMw7h+kKXb6Yrn7SDH2hByFW85blHmtu7opk
--> ssh-ed25519 AqX2tg LuCm78y0BFQYqbS7xkqBTc+IGl0HlLLsePgIkTsGgkM
-Ebuqvp72OVZE2gXbKpOxr0Awk6zb55xffZYYb43uDHM
--> ssh-ed25519 eySVIw ki51C627bozYPOrTZvz28kNthpr8ZvzooBux0yyEmHc
-pThFLvfXrgOu9x5jyZMuZP8LJymNb7MQUzT2EnwruiU
--> ssh-ed25519 ThuR9A 4CDVLXHdYwPqCSGYw22vQMeWpspVNT8zbj6lXmJVBCk
-mYiAD8uCZsxYhjremt3vJ9DTXAqBWhOsAMKEiSHWSzs
--> ssh-ed25519 LFAtBQ UzVzUenJO9tjF1FJNNuCIs7P37qpZ2WfUO82rkrXABQ
-JkWXo9nJ7+6xiznzpeH2gK7BDpmXYfhO4sLy6iwflOc
---- syGfKorkGOCg8iY7gGV6UuVq9ePtzTSyvCu9MEqy17k
-o	T<>39V˓<56>ٙ<EFBFBD><D999>VL<56>
-<19><><EFBFBD>AK<41><4B>Ǫ<EFBFBD>iA<69><41>	O<><4F>'
+-> ssh-ed25519 u3yXZQ 0MuvaDvACZQKuk/7cr/ADyVLU15Zxrl0pxyqRg1Y2CU
+O14a2rYxLYToNfvmv4SwRezCW25ehDgkfnvKYaFoJNs
+-> ssh-ed25519 AqX2tg 3qjvW/mqtOO8UX6SxlcD7gZahy9SFRosJNAit0InOVk
+xWvWvmojhTmaaCCDz/8OPaBtnZpBI4VaEeIRWckP6b4
+-> ssh-ed25519 eySVIw +9N1zrT0NKQtkZKSpCjsv0CxgoAhDSPKiIoosYRc9QU
+cWAofgX2SAiRJM61zhGXSwj1jwoubCfYPQr/OvmWbUM
+-> ssh-ed25519 ThuR9A IDtUvI1+NkAocnNJRA8cGPV273LQ+Q+U5HUKZwDiUDc
+aKxU7PGR8/5BneWKTeHsIw9xrZVPd+kJEbjg2lwl5CQ
+-> ssh-ed25519 LFAtBQ Tw78+c/zpHOQjozMxPs18WkPsZgCL8nfl/EdxAOaQj4
+i9r0IQinsk5Ecc47L5NQRoDEMGUStdOKo8uUlSOj/w4
+--- +C1U7I5yIrj79g/1a5b6B43mzv816I0MJrhGMn4lzaQ
+s<®»~µ~,<2C>:t¤~É•ã×qUâ<C383>t¢_¢ÍM|NÆ-Ô°ì*Ÿ¶Ü‡ì

secrets/forgejo_runners-token_file.age

@@ -1,5 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 AqX2tg uj0zw8tXYKjybw5xA/Xn4+Es/ulxj9Y2DXkE1fXtsVk
-QAUDeiz14pMvz641epOEQSM+KE8ynbed/ta1SINGqn4
---- HLbmnjjZgL/ttkZnLv6FZqMcyvMHWnnjY/3YR7SM4gQ
-xÍå ;6Ÿ–“úÔv¶la6yg
y±q`3¼üÆú88ØʪáÿU<C3BF>~ç{›C2Xů«£
#Ñ<>¹“LSßå@ÙpMmöR2—ïÉœöp
+-> ssh-ed25519 AqX2tg oTeGzJN0ys3u+aU/uLvX2htWr3m6ofAIH8kpNx8PmBc
+olLmwqD06t9SGh7FU5ib5jbrWmB0UvPg5kLnjk6NIGk
+--- qeXRG2T2Qj8v0nl8jBHOC+ze5mChJ9j+Zkx7QMoAzhk
+F>Rò3»#¨îAH	ÎGr4ìC¥ëò¢tSy¨é“UÄn]«‹\O1)ó½Þ×ã„hÂŒx +Qß5!r¼<72>!Øf$ö¤$

secrets/garage-env-file.age

@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> ssh-ed25519 AqX2tg /PkqG834zUG9r/z48nBnHI/ijpdvyc+EaGFvly/IG2w
+A8u/BX5rMPezKwsYIuQqBLYg/4h+qgSSVEUufg46ucs
+-> ssh-ed25519 u3yXZQ 7MDWda7VedzeVX3hVRGbk25iikErLT07rOChyx0JeV8
+ulBhkF34KB6kxMXb59GR6fJdn4ggx+rZUxsTB3ncSqg
+-> ssh-ed25519 Ye6ufg 2IcyIgZKVSiHfJtRFZ4Aj7GXowEg6SJVUWWcjZXX/kc
+rn5IynBgc4kG/sWnxa4U+IbP7NFjETf5N5MgsjyBfnI
+--- mIZ88KIGQNHX9Zm0eoL/D0g2oCOyTXKCllHSzCl3658
+nJèóm˦;$õ·…À<E280A6>ùhè‹.8š3(ù'gë
!`/¤±<C2A4>r†QYý[	=Çš†2—7dh¢­w2àSÅý|nφšÆnfMê6Ðâe]XùÁoùoödŸ=›º˜ÎàŽÈκë©:>¯þ¯ÙãlãéeÉ

secrets/github-token-secret.age

@@ -1,6 +1,5 @@
 age-encryption.org/v1
--> ssh-ed25519 AqX2tg H8gb3bQ7tk3H4Vod/OnXIC0UFrOPSft0yaJSL7LCi3E
-FJkk71KT83lkCbnVj8pjN6kS9aQVTEFuCIYuwtTKYC0
---- O5gq33TtRFBzVLMmfcsepn2ES+5LdCbMYcjP+tuUcMw
-Ã1&Äg–µ#ÌógPÕ¤ÆT»7•ŠU´<1F>–È©;k|©Ÿ2å!*xºÖâEeˆ˜x&#üZµrÊϘ)@âÓŒ½Ót(š
-En¢
+-> ssh-ed25519 AqX2tg yhgLtJVEHxBetawkollP8vCAISaaxAkHztkcGnz0XDA
+w2VOeoPtekHo44eh4iMo3XwicXG6lqPfMbXYdDj3DDo
+--- zRdP9eVR/a9sknqZ1qwW5EkuTit/2GQXvOyaqfN3+dg
+AR4Êk×<EFBFBD>AÓH»:@CMK:©9"†
z¤øU;×Vn/}&³$·üÃfpVjvK÷™¶»EUŒDA±lä¹Ì¸2ß¿Þ˜ýë¿

secrets/keycloak-db.age

@@ -1,8 +1,8 @@
 age-encryption.org/v1
--> ssh-ed25519 2Wt2Kw I8bJmMyaQKvWi66zH6QWQzU9ZTge71PPtU4Mxwfue0s
-0Fzgp52eVopX0t/ujTlsUb4+NcL5Au5NhpeCuqY1WOY
--> ssh-ed25519 AqX2tg R7TwVyMqXx4Yqk45tjxUYWJqBerf/n+9IzKU+zvMABM
-1P4bUSlrFT7KQ46kyL50iHujmnBRTYi6XKFKuPA54AI
---- ZD2/lAcRhhEhfs7DwaZJJqlaxxF1yRzdWRCPWEVCJdg
-mDwpÃ<70><C383>΄W˜…ùEñ<45>èL÷ý¥Ï<C2A5>j”AˆÞWŠÛf`[k%—#LÆIѬúº)’j
-\ ?/ª{ p\ž ³;	Hz#Ng§ÆMr¥÷c¾ˆÖû›X§êO¯
+-> ssh-ed25519 2Wt2Kw e5+Y/Gg4TkwQInnfGKcFD4Ot5tzWX/M0AqoHoXtb3jk
+DOB7V+qhXDGsJYyuaYvyz79Gjtpe5vt3IidmkFvpBjQ
+-> ssh-ed25519 AqX2tg C+NIb4Zo/vuQxzLs6GODD3ah+dXVAr7Tlfx8p/7npwc
+Q5IHILoqxvLBz3g5DH8bAi0mSCl4k9aFxpTJ+S4ZVGo
+--- u7qqT5e8mFONtWwf9aOy16140Kx8rfI/+4M5Pm45YNc
+,ÜÍг¼à¼
+%ùPõ¢Ò½îCó^!åÈŒÑ|§ÊˆŠÄ¸•<ÍåìHlió0ó^ßh,¿<1C>ãß×Ó”ÅLÀíëÑ0PȈ;š8ß2øY Ç]ȃ<C388>Ñ·™

secrets/mondon-ens-school-mail-password.age

@@ -1,8 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 bD9h7A /UO9Zl5dJw4EuRNwq/8or3VLrnntW4B+8bXwgjflXEI
-s0J/u/qd/+OZQx9zDi1mclsMd7li7fumm4E55Y0arNw
--> ssh-ed25519 AqX2tg vhFn5mLYcxQZmODtZGea9NRxuXn1+8NoBFSqcOycoVA
-wjHiZrJw9EQULkcXrjzbWPZrIu6kgR905nf4I0b5aQw
---- 7iLEndR131p2i7gLS0SB5CAp5zUA5kIFtz68VbkFg0A
-FqÞÞZœíˆD‚Ä×½SÒ5ç x%2o¾’E‹`ô4N³”´
-Õ‘=KŠP^ü€
³,•,f
V–œ›ÀJ)’}3Ÿz™Úmo‰<6F>\°ó…À£-Ŷ<C385>Êt
+-> ssh-ed25519 bD9h7A WnnKDBmWFlEZOWFpT4MVRDcVpSUH/yPda9BWoJ6QVC8
+pE36ZpcK/dKZeAMvf5uPwEMN2VIXxfvR2/rwvZyxMWA
+-> ssh-ed25519 AqX2tg MejgO0Me2W0VBJzCV8NuJ199d1D/Ub3a1Xlp8VSun00
+88XHkXjRdR3wTQ1tiv9MgV5QPEg9qIFqud5bE0FGZCo
+--- lermSzFXWrCHR41EK+MYhXYEsimmxRQtSFMnPlwpI3s
+\¤àƒÄÞG1»@<40>Ø8NIèoMíkóóÒÞ<18>R§×‰ˆ#ã£ZÉ–Òº|¬¼Ïoêž#M½ ŠòHEqöñrwªHzòFYvø#q…ÑŒU±%[»pI

secrets/plausible-password.age

@@ -1,9 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 AqX2tg uurrbgincmOIH/eXNPkLSvDem4tCVlXvicTC9WvPA1E
-gRjRiEL0jj+76E8jKAoDI5mzO6WCEGeiRivJTio7Y8Y
--> ssh-ed25519 u3yXZQ 8YyLZtt2tQ0zajM3SjykPH4PUXKtpme3KQ2X+EeG5UE
-BZxZyLuc8yQ4aLOQHafQt8ed7HUnE+vJvrGxbzIbO4o
--> ssh-ed25519 IRHAkA m1eAtnpxfExAHlPKQeHwLmFFQGSGlVaZY+0Z3IBEiSU
-3bORsrUsW1ABEjLHcrc9UsVNmrFyKfwUcqRzSFekWeE
---- y6RfOhPCb76nsA1w5YSyYSnV6+WrCsxQP2W7EL684L0
-<\>r~	œ.tX*û’·ÎöÝlŽ0Åòt»4!«#ä_f™¶e§L¨ë3äLüš_ÿ'ƒÌ`ÿ4ÑŸ³Äé¢u
+-> ssh-ed25519 AqX2tg 7HPNSlD9k6QD/5OAZzxcAxyvo9BmnobYxWGwfSS+Ay4
+l8a5zaXpUZMxDQkgVYx19fnU0s82jqfjbgnK1d2EaWk
+-> ssh-ed25519 u3yXZQ txMpkYzCPlhcRvNkF1yNPm0BUjZwxAFL+nKPFXoedVs
+JB6TDfXh3KM6XMyrzgYvtOvGv5d6ja/w75yB6DqJZ7o
+-> ssh-ed25519 IRHAkA AA5ZmgMLM7rGHZ8uwrqAEQyQZcrnkmND20wtMttkc1M
+gTGJGuAg0cro8ZvWFihKIJVohQtkJ2nW7Zi1YnIO8zM
+--- uuVlNOT0P1T8n0u+Yvc9ypxMhGO3fB+PPICGNRu4Vok
+ÁÿR½Å•ò_ÝNõ­6„Dض»&žù¥áâ’O7?³'ŠQï—‡²ÉrŽGÎW—!iõ&c5)ªsÇÓV

secrets/secrets.nix

@@ -12,6 +12,7 @@ let
   gallifrey_home = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMAa0wll9ildhgPiV0DhgJXXtw3TQr5VkNxxxPspHSbX julien@gallifrey";
   fisher_home = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIADCpuBL/kSZShtXD6p/Nq9ok4w1DnlSoxToYgdOvUqo julien@telecom";
   akhaten = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII5W1rr+VW2TLLytoTExWg4T14lrdLFkSM4YLfbEIb2g";
+  biblios = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF5//9IlSSuES0xVsqqOwpotfcajgXL0AtcySpoZ8OLJ";
   servers = [
     gustave
     tower
@@ -21,6 +22,7 @@ let
     core-data
     nuage
     akhaten
+    biblios
   ];
   all = servers ++ [
     x2100
@@ -148,4 +150,10 @@ in
     gustave
   ];
 
+  "garage-env-file.age".publicKeys = [
+    tower
+    gallifrey
+    biblios
+  ];
+
 }

secrets/ssh-lisa-pub.age

@@ -1,9 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 bD9h7A ny0M8zk7nz5iJD6k6OUygN3xa5yh1AMrcYWcCnbnRXM
-dUl8yf+TdgrmH4yTXG98DRBwhpyC66xho/VWQ+UsHyo
--> ssh-ed25519 AqX2tg t10DbE0vFVc+X7Dkgu8AqeeQabl/BNeSLUpc7mnnc38
-aDC4ikK7WJe4t8+GgX5cQwK1fPs6qSqxQprkQDSdJJg
---- 1YzrbL7aJkwOz6AI4c1sqrLJQUzrtnueN0ZyfnWdmwc
-ù#!É_¦6$2ºïA’L7ºÎ”ó4ñ]
-Åd
-M¿<EFBFBD>ãO´Ó>&€B:»ˆ_]³;±¤~Õë*Òi-žUÞ=ÊÖ˜ÑâÚ¥¾Ä”|aÀ|þ
žŽYû”dh7_Æ@±Ÿ-¼”6UTŒ–â#Z.¤ù€pɾÞ|-Ó„Êã_¢a¡
+-> ssh-ed25519 bD9h7A +wllsjo/bIHApYJP5qec7V6TqiOp0gXAXVpsFhpAfHE
+tnHvP2n7QC0llx/j+/HUFVGbe26SEs4tBwRitqn0yzk
+-> ssh-ed25519 AqX2tg ETJOn7wVD8U59nJhRwcckxEOs9FDFnXRO/L1uyeUvWU
+CToel/g5cAkAth9gCA8vhbyfSqO/RW5l23DhdXPNan0
+--- lxzVg42zOjkNC4Sag5Mkd4sh3I1sfh5K/HKt3X7piUs
+â"€è6¸˜]^½)É|ÉðÂ_Î@iÌU`Œ<¼-ÂmÓKÏáL
·Ü*%<25>êR†‘èE¢üWÅ¿¤Ç<C2A4>–¶‡–<E280A1>4Ñ\’صÉ0z§ ½„`ÂŒ¶¦zQvÔ¢©E…-æFèi5{øXN€L7®t¸½ C?ex
EQÁä

secrets/stalwart-admin.age

@@ -1,7 +1,7 @@
 age-encryption.org/v1
-<EFBFBD>
-<EFBFBD>
-<EFBFBD>
-<EFBFBD>
-<EFBFBD>
-<EFBFBD>
+-> ssh-ed25519 AqX2tg VimZo8mJFKrIZtTweiXfq7LaQWJ6yHS6lV/ok5PuDH4
+A8R//x8XPvZ4M+6ppqG69sVhqanoxdANiiYr0x75qXE
+-> ssh-ed25519 81O5Zw U1zwQjwMybYn5Pf0CEQ2Nm98HhyBNjpo9PYp1qpOeSw
+KoH14PlNVL1hS8XEZ+Zy99ZQzY1HW5qSJZAUeW5EVIs
+--- dipxCNpt89CSd2FC3cSnLRHmMMmL9H/0NUNp8PSbaLw
+8àì‡F¥ó,Ú
„ö—ˆ2bbíe~œ%<25>•³z)Òˆá<CB86>Q‹®¬.dú-%) `Óô´ðWshiV)(<K+dÀs~Hû¨Uûì0ù_k<5F>LÔ€aBPŽÎ£áÆjU„€Û®MVð¿,ú¸ð$ýà6ÖÎÔ‘_[±®ùõkzŠ‘º=ëiâ‚ú_mëÅc*

secrets/stateless-uptime-kuma-password.age

@@ -1,10 +1,10 @@
 age-encryption.org/v1
--> ssh-ed25519 u3yXZQ tmFNbSWWcoA7Z/TvAaeodP8U7IqoMUDeUgEuueV3ugE
-MmrD0NCtXoLR8GAwexcdN0dcGvyjdRgSMmz9Rt05b5A
--> ssh-ed25519 AqX2tg 0fjjaaTdxHyaUHLhaMoR89FrWHxsJ+iJP9HjYePyJEk
-t8T8TEnqSrDneiblrTxOPA1OiDMrB3/o36JqXwanlTo
--> ssh-ed25519 xaddyw 52IFyDb+AaTJAlwItAxNwXw230RBssaIdiZL0rm+/SQ
-C9pqrsqtNvaqSW4VPcW0+MsNfYz+GDu4UqP497vWtAA
---- O28WnFNZwT2ExTac5bu7LVtbaW/ZVI4acdM5u0lVnV4
-¥›’äÉЇhW2K#ƯYꋤ
ÉUž—»¦%ú¨¦
-Nî×XòË iX¢F›2Ù¿§Kð¿$fd
+-> ssh-ed25519 u3yXZQ rUCDxb+7FN7p4DnXoCuxaEUIOy+jVORv31WXkP/3WGk
+P/SVX6zKb0akf5ir6rNO/C/OvIlJ1hD04jcrnskbmnQ
+-> ssh-ed25519 AqX2tg 7vKtcYFHVm+JAyABsui10UkhXV4ZNTGbPi0Gv2qoOjQ
+BWylvnTfeC/FBrdgUbqlU70qeS1bA6nb33fbyObSFgI
+-> ssh-ed25519 xaddyw V7Zhv7A0r5rmU8vqAtW+6cVLRz+jBPRbz7Sxpcm8Axs
+ddVeAc22kcIXuh1Rfz4MqAvI9vPJGa4arUM9FFWBusw
+--- /A0uip5xell7nubJXIDrHL7p2u1bFJg/ujKTNMD7mH4
+Öò¼³"s;6^Ú¼Å@4ù#öDF€Òb¤F$æ5<C3A6>‰<07>´ºn–­³Ù¡<÷C[¯€Ìâ=a²ÄF„
+

secrets/telecom-mail-pw.age

@@ -1,14 +1,14 @@
 age-encryption.org/v1
--> ssh-ed25519 u3yXZQ kUUnaOHFtg5OFlERbYMS9qyJ6p1jcxborXJWr/FZT1w
-y+a2IzEoRuvwzl7U8TYfQvUhZcHgaHALqyzpHN3XcQ8
--> ssh-ed25519 AqX2tg exW2CX3Qai32V0cw6TIs1cSPjQVenKu/ZxPTGd9JKQU
-QEz7dXeTUv2SFUdMwSIphT4mVrLc4p9I/6K7UZw6gL4
--> ssh-ed25519 eySVIw tUhWZPM/2Bj5rKXQbeGRAby3r/w6YttOoHb4UHa2FDU
-M9TG1clNu4sS36SbKvJyv5yAPlYRVqzknax8xqakSnw
--> ssh-ed25519 ThuR9A 3hagqEkYVpY6KlstIbWEwoqS364+bP84nIGeafnGIlA
-Ix8J2vH5N27JMyrFS7puc7w4o/ncnVCiY93wzRQFqOs
--> ssh-ed25519 LFAtBQ aymoqg13GB70LePTog97o2TYqP9jj7Xc8FhXUgBxDko
-pci2UrnhzbUMAFQuo7pg1a3Nz4ru33zL5Zov5Ropv48
---- QDnPy3fW5pTLwpR8Csc9yx/Xj0Jdf1BwxL2moee1M2c
-šgÉ0äÌp 
-AôjÝøÂÈêï­å5ðôûo²ó‡Ç~ˆÆï­(,UÔ¬
+-> ssh-ed25519 u3yXZQ JshqrnAlJ2HlxnTuhWXJTllTS992WjOCy37ZhljATUU
+ieKs86H8BEJMA302OehOWCPkd6Q1VVJYnBJqBvmMD1U
+-> ssh-ed25519 AqX2tg 2ixtbzSzTn38wCyEzONxeCvH9F4R0MWgZzZRbXYbRC0
+vgwvA4e8zdWf5ddUfyK7bCxpDPJWgbFViAN+Oax/Lac
+-> ssh-ed25519 eySVIw Mmaz7xkHfiw4LiefuQmxDAoLH1bwzxO//NSNDCmHITY
+udd+2A1RZmkmrkC/m9kPc2tSIbHeYZX2zBwFlNtBpd4
+-> ssh-ed25519 ThuR9A R5oMdoesN5R0VpWZ1u8G8w6QP31CkRazXVcl2ndvJ3k
+vrQsWpFVbWEgBLptYS5mqaWV9zEEMKkF1Yb245Ga/SI
+-> ssh-ed25519 LFAtBQ emryRlmANSW/zESFJ5HJSVpFl3MCqF6LrZbOc/QMrlg
++slCmbpnz2PuKh/DI2VLN1U0RcPtUD8isyC59s7M5uA
+--- arnmhXcR1864XsqXCFW23QZYyR1ff5kOSrYt7LRZD/A
+
+;;\ŒJ´’…:~<7E>D6';"]MÞÅÉÁÄ€ù˨¦º´«—[ZNµ‘äsN°

secrets/user-julien-password.age

@@ -1,25 +1,28 @@
 age-encryption.org/v1
--> ssh-ed25519 IRHAkA HDj6sMkMCloMNe0l9YsZKD4OVhz1q2plKC6CuGSdF2I
-zGJDZ5manAfBaSBE+Ig2GOjPiBrr3Kva4RHtnO8D3jo
--> ssh-ed25519 AqX2tg euMgICa9DGJelFNN9pTz1HtJoRigcQfYRk7HxIXqITo
-zBUXTi5MBmu0YW8XOu5wN1hPIhhND6eOSTFQYZLFYBg
--> ssh-ed25519 bD9h7A ir53lJbxItcpq1+Uc0oWPIG/+xP20AcaQcGd6ZnLyVk
-zrxrJxir1s+G2zgJpETAXczDsOT8gsGRFGB+UBSDiw0
--> ssh-ed25519 2Wt2Kw YlklqvgeEqThZsE6Q/NhW4RFfNnu2TOPjfQxcsnxFzI
-odPRmZjR9nROr7jIL40kRbE8neSW5F7j6S2sOwZUB3o
--> ssh-ed25519 xaddyw JYEed6y8iBXNXso0iO1ZX030/n479n0PaUtQaX+D6FM
-x8YBLS/dJaK+m5Ti6BONjckOhkEiaSPlblSiu4Ert9g
--> ssh-ed25519 6rkyTg 13UXONJUPLDz32aGyqlk2Okt+i7mHnR4wkXGPd0emyo
-hVIqX3NdAFBE8xxWGwUH+54QJOG7dHEfhy05D8NaYN0
--> ssh-ed25519 d3M2Dw 39XLct/6ve+qWI62nidUa8RNE9g36W6H95oJuWWd6CM
-O045hhTUQV4V+kubouu89XKWMD1rqtNh5CtSB9JDGGw
--> ssh-ed25519 81O5Zw hg9eZKp5g2vB1DKYRN3AjCMi0ehv4b3F51C5mzWzylw
-07991sBqL4B3NEzyoyO/V6GKLazNos9QpycWSjVm9FU
--> ssh-ed25519 RiYKHA 1w1gG5jfs54kYuDB0yYHAN7oF6/sQMBf11hJLPsbsyc
-jXBlL1sv9Uz4mAkc6s2wR3kKT2tv2oaoWkEC5qeGpSs
--> ssh-ed25519 eySVIw jAw2h3wyPI7/AL/6cERhW4zLJPxaTba21vapVh+qglA
-7RQyCTdnrSvbt0LxQH6QHLKln/42xxbsIU7OOv2I5tQ
--> ssh-ed25519 u3yXZQ VfjX9WYR36raJECq1YqAzVvfXg00KJ+PN0VjYUcC/mY
-9Gj+3xKWBmC5prTWEsvXP720wqP2YWhF8UmDC8SlsTw
---- 5MlLMHU6KW8JbF7S5QFpTKG5W4pHKmYN7X+RbovVR+M
-,ï2±×ÑÀ™ùÉð²}ò=20c#¸ØøÀ†üÈ–•™éDu	˜)Ø„i<ÏÄ,Í°
ð#‡ÞëžrªÈp=Ý×v+oÞó…žà¸×D—%ÕG½n:SJ߇$êv<þO:‘Ìl¡%pW4:ÊþŠ<C3BE>º„‰)*Dš…Î¥yÁ¨é¿ŸçäWY»X	‡
+-> ssh-ed25519 IRHAkA hgaBWQ7tCq/1ZjF+4LA2sDhgwhh0+q4SkbANa0wgugQ
+lAaaAAYWF2nIuBm7EakDDQSSxm3i7DEwsv7HmSuNZS8
+-> ssh-ed25519 AqX2tg Ee03QoPBWZqEAv3IrAYCuOmlo9AC9M9KUdgK/r4K1zs
+zqXhkbhNcmBIr95HkAXQNgaMMyihgqA02wmnqap+MDM
+-> ssh-ed25519 bD9h7A a81W9qTis6cu+KSlIvvAsf04GosuXU8yDyjeApHCV2w
+L8yNstriP9GNc15XhfFGf4LUpBq90K65Hph9tXES2Xg
+-> ssh-ed25519 2Wt2Kw 4qVhowhrlIaNXvb75m5q3eLZmumiJHAI2feQ+JPbyDg
+NzmhYCOEsohKSiRcOOYBp92ZBN05inhTzIUYspcmYlI
+-> ssh-ed25519 xaddyw 62Xgbb7HyOuI4BFaOr2/gvSHAjJ+x5Osx68dMG3HPDI
+LE+MIer3q/JS6P2P3b+jvE57XU3RnRSg76ZWBd59gEg
+-> ssh-ed25519 6rkyTg dXgTeVGalswwsMTz9iHHD+CCdLhnV9JiF95VPDQaii0
+PiFssiSJbFvDj8KVPUz2a+icgh+5oyjFc/hQjQhtLWc
+-> ssh-ed25519 d3M2Dw A3Vq93lKhHS/NMpIO6G3FomDqpdD42LIICzvs/YFfwQ
+n4WhahrK5TI0GJhFo6fU8CISyCi9H/SwMeexlFizLY8
+-> ssh-ed25519 81O5Zw JXXtJCJXsY5SkMBTqkUtdcj7QRukXTUNzijZrbAWsgg
+bJbazdY7rPNgeuCwVpnDSHAkPHXtyyWdb+aMrZrCDYM
+-> ssh-ed25519 Ye6ufg XKzxyotylhqu2Hj7MwqNY/G3g0YYpRrHEMK6GN1q0xI
+TFQ5MvU9/KYx71OAmvrN5aGBrBgl18eVNtYQGm2CpjI
+-> ssh-ed25519 RiYKHA zGRHs4AT6wpAcwJWmj8PqJswZWs4hUESNWtymEojYnw
+fVjl4wZc0AvhVy5HQeyLrLuOIf6i1+oTdxc81RjLxNE
+-> ssh-ed25519 eySVIw 2DJiCTH7caM3QdwLp2DG5FYUlZl2z4I7MxfWyuTmmkI
+LqKZEIlfnlTDiTTKCwd7U8iAMpx0uk/cjlHFOaOi/Ko
+-> ssh-ed25519 u3yXZQ YCk1BN5DEWIJtXXqNKNkHYAshky1Q3/mMlBZuk0urkk
+8qiRq78qUuhQTDRMbMuvfgM85HEP9cAbh60UsQsPCgc
+--- u9deyC0OXA5hOqVQVcAcFZW5X3CkXu/yxUZqlIq2ueQ
+p‰Ë/»u4<75>‚ñÂ×bqû2“2‘à×'åw›¥ŽKÕÜ<C395>-׺S\ÍZÆZô"ì¾6A	¥—Ñ™Ï?;‰á•Þ¢¥%
+¸Ÿ=y…©5¦D8yÄZ¸tÝ‘m âšÞÙÏš¯£
T‡]²@òèèï(7í4³Uz¤g¿»ßHgKÉÑÉÃã~uØ…xó

secrets/user-root-password.age

@@ -1,25 +1,27 @@
 age-encryption.org/v1
--> ssh-ed25519 IRHAkA FVdTV6EWLuXZb3wuGGEZvG6gXPMS3UxRjXdbdQjh5FM
-v1GZznR5FxhQBf7E0bfV2HrHaIJ/1+zvNhXXSiF3FNc
--> ssh-ed25519 AqX2tg 5R7wBXS7eh5l1p+65pHUhfMGFQE2u+m/EuguUNx/w2Q
-FeeHqZeQ8lW5wDmy8M/i61yULmB/V5a0nu/wGXtvP2Y
--> ssh-ed25519 bD9h7A AXsllj2X5Gw13NZTtudjWpZCNzLc/O0zyakotaV+kBk
-+Jw+GFUq9a/uVMZI2VbdoPtP9UPXv7qrCXHKdyHh2Js
--> ssh-ed25519 2Wt2Kw IEZ9OM0eArQGnNPQ67BzxhdvmtM2FeBYFwRPeqD90Wo
-ZH0i4gDcYcuYVcmT/XEMDEy64FPuz3B5wdio1mDHztw
--> ssh-ed25519 xaddyw aMtzFVqwnFow6EX0FhdrUf1x90rg+u/p9MGdO9neFRI
-aMZMocb/HuBcZRfkMJwpHvZdaGa1L2bDcO5+JZZV+TI
--> ssh-ed25519 6rkyTg H+sGiZjdU5vudKk/fgR3rAZy1iIsyjmpasUkauklHQc
-WUd4hIv/FmnFLNxTDQDAzCv5fk5Vh/wb/LvzemWsOfY
--> ssh-ed25519 d3M2Dw W7YbY2Gv9556xWKrqd8LqST8WV8n7P00vhNi0oxUKWo
-jZLWPj6Tg803dcsPyMpVOIWxczJyr7qOsrLp5DvVueo
--> ssh-ed25519 81O5Zw Di6Izx+fjqWDTeV0Fm34G3riV09lsgP7IQr0fcE+/X4
-0GmjO2g1MeAlfziBFKskxd3mcsNBW0/8FbD1hcQQfT4
--> ssh-ed25519 RiYKHA t+Qa3COiqnHCtNO9D9YSBFnZiGCyz8BbDyXh1S7Y2Rc
-W4QC62Gbfz/adBIiPkavfdYrTIiTrmZ5jPwpv5dLdlo
--> ssh-ed25519 eySVIw s45M4XkCsWgBLO3OwAgSXMcUp0fpE1rTd6uevxM+cic
-2cPWAG7WBV6Ien4sh5VLYquOg18pKCDGGAeU+a8p+yo
--> ssh-ed25519 u3yXZQ vZBYkX3N7Qz48OYnG5IBBobOI6+22XaGFKad+JjH6Dc
-iwB9bEwv/bbitK1oAFmJ9jtOcp+BXV6SHQ1NwvJHkyg
---- sETrZbRCRj4QsnGrpnpvO4LBUANQXOroTpIbGulncjI
-Ò°¥ðˆ„E®Ô<õÔ{‹ºE²&}Ò5¸,m…žUg«lô:”©·îŒûc;u¾<75>‡‰KA<4B>ã#,	šZA¼áqš‚¢}vïZŒô?î´!”‡öþ˜N-®	[ªm(dÎ#©Sàw¦NŽØ¯ ÞáƒÃö]Jä'¶;yôeËzµÐ<C2B5>¨B-t]˜¿š¥Fø
+-> ssh-ed25519 IRHAkA qspDa8zIwh+7n1QWTpUMJpxvGHQOEozPK7pQ5BwkJUU
+0QwDqG5fIjm1xiCxUl6eP9Uojo8GlVd4Yz0jP/YHVi4
+-> ssh-ed25519 AqX2tg RkAjiRaKykyrVL4FWEJtViZjrFO/Kg8UC2gWJpgVmSI
+OOzaeAp7fekaXNulqcqK2XWchO1S4E+vJ8D+jJWQvyE
+-> ssh-ed25519 bD9h7A skcDCI8xbRF76AaJrKl0ggTjTRQlonmAZYei8aiDi1c
+a2DawgWNTWSzSOyxuC6NVvvTqfIw17MrnjBm/zfZH84
+-> ssh-ed25519 2Wt2Kw sEoEutQQCBZBer+lX2I0LhNpMpfUmR5JB5sOiJIsNno
+mORVNZfdVmulANsGv8vNDCnO7xJxg5IjddpX/Mgy/G0
+-> ssh-ed25519 xaddyw 9sE2HjCdvbKHIVLuyjd4G2IemBL54cyrepy3RorKRA4
+rRrroobO/Ad5cM0fKAEt1EvpYy7E75ccI3721TSCPYQ
+-> ssh-ed25519 6rkyTg MqpZDtNhHJgR1hRGgv2E/ckJBpN171yooAiVUl5x/yY
+SDwYWCdpTjwHGYTwQHZPITV/q3DVPXcUcujBrlueo7U
+-> ssh-ed25519 d3M2Dw xTq0/gg8asqP+SsSc8lgiJyEilEq9T087dbz/fcikyI
+rdKZAx0gP3hn5JXy24UOYIZ2FfEPLG6RLilJi4EGqyA
+-> ssh-ed25519 81O5Zw TtwRH44QfSkPqEGj4xYU1qYhBBYzXZ801dJNYI4ZE08
+xXUXhhdH9BC4rj5EL3MmXyv9ZqYp7PmvljgIYtpx0zo
+-> ssh-ed25519 Ye6ufg bjDuzt4UKsweB5QDhHHBWT68RNT89TsSWTGIPVkDlSg
+SJ7g8FRNfyKbKl8HHdoC6z9t0aE0p++PxvREkPGcXkc
+-> ssh-ed25519 RiYKHA GrIulFnBwLSg+WodSFJLOJYwDUddxZceoVm0K97kGQo
+GSnCM7XMdvsUCxixqe1Fq92JmF+Z8Z8MROf6/7D6pVk
+-> ssh-ed25519 eySVIw U/lpMx1CoC2DCtrAAXMh+tO5hOZ/lsge0U7H+G1hqgY
+/ZK7oNH9z1FSH6oLPBX6iegVtK0P4j6fmtoIMV2r+jE
+-> ssh-ed25519 u3yXZQ HS0FAAoNxM0HQA3Dm2v81yCENsU5ra+xbVx2QOuEMBw
+sjr+AgmmzmajH9QNxD5G2BxAfZsBu5Zvnw9vgga1nIU
+--- GiVG6ASswBXeAKX1YSkeQ0BG0Ck7J/SVsw6bNmIhm/0
+Õ¬ét©Aþ—+F$²lëîžÙŸôrQnçyÞ?|E°fzaÓrW¨:Þ¡æë¢YþÄp݃V¦vîKÆ(‘êÄ¥ôsáïE_xÏí…2ˆÐì$¥Šz½6U½GÕ¶? °/HÝ/·)N'î³ }ðÄ_„Cï·ÎH0/3'òa$ˆ2Ë)oJÌZ iÜÍ

shell.nix

@@ -5,6 +5,7 @@ let
   agenix = pkgs.callPackage "${inputs.agenix}/pkgs/agenix.nix" { };
   bootstrap = pkgs.callPackage scripts/bootstrap-machine.nix { inherit nixos-anywhere; };
   lon = pkgs.callPackage "${inputs.lon}/nix/packages/lon.nix" { };
+  nixmoxer = pkgs.callPackage "${inputs.proxmox}/pkgs/nixmoxer" { };
   pre-commit-hook =
     (import (
       pkgs.applyPatches {
@@ -40,6 +41,7 @@ pkgs.mkShell {
     bootstrap
     pkgs.statix
     lon
+    nixmoxer
   ];
   shellHook = ''
     ${pre-commit-hook.shellHook}