infrastructure

commit 705e8c575acea8b494365ff2ea5db41ed5ab4bcb
parent 01d6c943688e5b14c9b9ec7195a07b8acdb8442a
Author: Silas Brack <silasbrack@gmail.com>
Date:   Sun, 12 Apr 2026 15:02:20 +0200

fix: gaia key

Diffstat:
M
.sops.yaml
 | 
2
++
M
nixos/gaia/configuration.nix
 | 
6
+++++-
M
secrets.yaml
 | 
39
++++++++++++++++++++++++---------------

3 files changed, 31 insertions(+), 16 deletions(-)
diff --git a/.sops.yaml b/.sops.yaml
@@ -4,10 +4,12 @@ keys:
   - &hosts:
     - &server age1e52v0cr69sycuh59hksx9nk5327vgkemkxqwngd25gtztxhkpups87yd5g
     - &hetzner age1damatvmepexkts3ayg2rfac0nal24tghxnrrvvmpu76wa4gvd58qyn2nwc
+    - &gaia age173q4ncu9rux9ufx54vp0r9369qqkaz4z7nwsyqsyp0whkvv2rynqnnt93w
 creation_rules:
   - path_regex: secrets.yaml
     key_groups:
       - age:
           - *desktop
+          - *gaia
           - *server
           - *hetzner
diff --git a/nixos/gaia/configuration.nix b/nixos/gaia/configuration.nix
@@ -20,7 +20,7 @@
     restartUnits = [ "wg-quick-wg0.service" ];
   };
   sops.secrets.gaia_forgejo_runner_token = { };
-  sops.secrets.gaia_gitea_sunner_ssh_key = { };
+  sops.secrets.gaia_gitea_runner_ssh_key = { };
 
   nix.settings.experimental-features = [
     "nix-command"
@@ -362,6 +362,10 @@ EOF
   };
 
   services.openssh.enable = true;
+  programs.ssh.knownHosts = {
+    "git.fnarglebeast.com".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEOKImx9KgmG+/ggpuS2z/hXkWu3TgT/xK9fI18tPOI1";
+    "github.com".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl";
+  };
 
   services.ollama = {
     enable = true;
diff --git a/secrets.yaml b/secrets.yaml
@@ -11,29 +11,38 @@ sops:
         - recipient: age1s29qgfupgx7mqn9dk2rndp6xh63f5qan8vqa77ve603wd5m9a9rqkpq7re
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2K3F3K1RUSWs5MktaejF6
-            dDdLQTYrYnpEM3gxWTNHWWd6bFFFUnhObHpZCkNCU3BPT29UM0JFSWZDZ0RGSXkw
-            U2YxYzZaZFRvNElyaFBzeW9nTkg0cWMKLS0tIElhdGtOdFNhUW5Sb1pSY1J2L2cr
-            dzUybWZ2NStHQ0doL0xHYWJrZDNlUGcKQdgVBiwsLzTNkRs4F7SNoBk2f0cb7weE
-            0eD240fbOmC6sghreXT2/QNJFqSt7RETHS21kbKpIcs0PNzVbre03g==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZanNScVFPWERrdkZuRkJQ
+            T2l1dWc2RHFKbElxb2pITEJIL2FiOGpRdkdBCk5CYzdoR2ZKaXp4QURKMGp5REZF
+            OUZ4QVVSS2pmWXBRL25FekdMZVVIa28KLS0tIHVzdVhYM2FQWFY3RlBGUzNHUkRC
+            RE9qcjVYdGNBQ2NHdFliMFRwamQ1OTQKIdDInT2ZbXv7XElXdTUB7v4aajjWMfNm
+            UkAkEAK9FfumNY0/uu2lP1QNMBLu4rIr9cJoul8WNg2yrQ/Dv57RKQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age173q4ncu9rux9ufx54vp0r9369qqkaz4z7nwsyqsyp0whkvv2rynqnnt93w
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1TXFaRkVFMzZ4K1dRSXdr
+            V0wycEpZTjFzZURqMDJzYTlYZy9YWkVONWk0CjYrYWl0dngrZGlWMmdmYzVERVVV
+            RkprUWZpMmlLSnY2QzB6KzlJdW1Ud2sKLS0tIEt6SmdYOEVFR01WS0FBMUVYWFNF
+            TWRsWXdNcDF5MHZnMFU0KzIxSzdVM28Kw6y/CjsjkCCxs1g1++cAS4FdOlNLamBP
+            MaStIYGOdocEK5+WPja7FURDnOTzC3l6bss3w4OFsnn3qqW3LQvVHQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1e52v0cr69sycuh59hksx9nk5327vgkemkxqwngd25gtztxhkpups87yd5g
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1Q2NqRER0dDQ0RjZyVHhW
-            Ujh0Q09jaW10ZVV0ZEdwMXk4dW5PK2RMNG5VCjIyeGhxcTZLQnJlV1JrOWZYaFBn
-            bzJkc3pIM3ZzSjJpQ0dRNDgyS0JMU2cKLS0tIERhMU5yaGZiK3p0SDh3NGlydmNS
-            dmJ0c215TzhsT0graW8yK1ZZRU84bnMKA4aujo+KfrzDJWxsXtCTP7A2NI6Tgqr5
-            +ZqVubHe9deC4zkuTv0jPs2YxiFP3/D/QI1+B07b+fFBHdLaj/VQ3A==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBQjE5aVJHcXpOdHJINHdl
+            cC9SYkhoVU1zZHJVWFhtUnY4Z1JBaDVSQnpjCm1hSm1wa0FvbmRPNlNNWEtLcjhY
+            ZFhsWXVCZzIwK09wV2dLOWpwY3liRGMKLS0tIG5jTDlqbTFqOTB5UmFLWlZjdnBn
+            N09mTy9CbkpiZTdVRkh5dXJrYmJrbjQKiSVWJGvjF/2nElPia4ozU2iR+Phj0N25
+            BudqXdktvI6vRxo92W2X4IalbgjQ+33cORGc41F2F4rztSSfh/2fOg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1damatvmepexkts3ayg2rfac0nal24tghxnrrvvmpu76wa4gvd58qyn2nwc
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNRkM3VUhabTdxTDRIYU1W
-            V2g5SlN1MUxta3lLRXc0dGRpMG9Mc0xOUWpnCldVdkVVUG80bmdtV3hJNVVrbHdF
-            aDR0UlpWcFZSaXgxWndvTS8xeERjeDAKLS0tIFJUaVdLelR6WURQQkFCdW9WVXFE
-            dXNXQkF5SXZjWHRPNjZaR29YZ1pRQ3MKJvGVAm8M9oIQBHJH1o0NG8x0c4qvgvHr
-            1T/ghKHZWIpbXzct1LNy+5T10OgRxm5++NKuuuiAXW2XmnkJu1Bc3Q==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzeVdlVGs3N25BSzY0eThu
+            OVZMMzJJdVRPSnFvczBiYTZBT0RSNlB4NWxnCmE2eCtRREZyR3lyb3VJc0dkODZI
+            bmtKd3p6NEtKVmh3V1JlQkphQ0RlaUkKLS0tIHJwMGp2UEhTZ0pwVU56Y3djcGlT
+            ZGptR25vdWhEKzFxbE5qS051ZFF4RkEK1hGCQVE1E92nFSwSeYRRhxn2p3wBfhpS
+            TZMRsiXtUdlgnoa+IJcFKsbwaZspYnKCA93IEfOXy6TadcoNiFzypw==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2026-04-07T11:03:18Z"
     mac: ENC[AES256_GCM,data:pgoUncoeDHSoLFQfHMx3ZFRfhmwTvabvODMGblahUYacSs1UA6h9pw0K/kp2xLsI/qMw4VyAdjnebprPO0khOP2GCj1TDL+dMVYlma8M9/X/VDzf96uiwTuIKIoIMrAj9v/k8RSZXiD/y7S/8sCuymIg8tT2BLfF1zO9WpgyPSI=,iv:vlu9suf6NMr/uTg9pFw+JXVeahNsslCg+vPxGPtk2TM=,tag:tBpbSEbcHDZBdom+MYFksA==,type:str]