fix: set hex file for anubis instances

capytal/analytics.nix

@@ -22,5 +22,6 @@ in {
     metricsBind = ":${toString (port + 3)}";
     serveRobotsTxt = true;
     target = "http://localhost:${toString port}";
+    ed25519PrivateKeyHexFile = config.sops.secrets."medama/anubis/hexFile".path;
   };
 }

capytal/network.nix

@@ -23,6 +23,7 @@
       metricsBind = ":${toString (forgejo-port + 30)}";
       serveRobotsTxt = true;
       target = "http://localhost:${toString forgejo-port}";
+      ed25519PrivateKeyHexFile = config.sops.secrets."forgejo/anubis/hexFile".path;
     };
   };
 

secrets.nix

@@ -50,6 +50,13 @@ in {
     sops.secrets."forgejo/git-password" = mkIf config.services.forgejo.enable {
       owner = config.services.forgejo.user;
     };
+    sops.secrets."forgejo/anubis/hexFile" = {
+      owner = config.services.anubis.instances."forgejo".user;
+    };
+
+    sops.secrets."medama/anubis/hexFile" = {
+      owner = config.services.anubis.instances."medama".user;
+    };
 
     sops.secrets."cloudflared/tunnel-env" = {};
 

secrets/spacestation.yaml

@@ -13,6 +13,11 @@ forgejo:
         name: ENC[AES256_GCM,data:UL3g,iv:+ftGx57fhzN06DuLItxZTc7lXX2g4MhqrEqnDjk4Aug=,tag:ZNpwWuPYhBzDjRQBKikCDA==,type:str]
         password: ENC[AES256_GCM,data:9nMuj2/VIB7Pbw==,iv:+96/NZ+gmRkpXr05nFuUfRl2rGqElUA/LuMBYBQHCHQ=,tag:hMEO40iGeyWsMd8VPOV4Yg==,type:str]
         email: ENC[AES256_GCM,data:e6GOwBzRBxa00CHYHgV8,iv:oerF3kJWzjzOatND8Tngp3MADw2kaBKyigeFxtH/ypQ=,tag:1q093JG9hRDxs6OzOIU3vw==,type:str]
+    anubis:
+        hexFile: ENC[AES256_GCM,data:6hMIQUiSYYNkhrGGHHHIF6Ur+dQeXDuUTHZR4Tnl3O/T/phC7q881Gta6LCUJVvgQJ8hF2aKafggTUDsjcaI3g==,iv:3aGmqM8gV5YsdFNGCgZ4L9t8r9c0zubqZOE1eDBAong=,tag:/nB357mXDJJMRNoQ4E/KQQ==,type:str]
+medama:
+    anubis:
+        hexFile: ENC[AES256_GCM,data:INM0j8uPSV60nEyGJ2/+nH1IDVL08hvBzTULBHPbChQVdYO+Z/UCI1aKCLoCwad0NAp+rAljYotZ0NxlxfjnmQ==,iv:y9F70r7erFOBe94rvv3/3P+N8SwFgW39hRcfP2SjFMA=,tag:PnjbQcCDbB/8XPJc+hM5dA==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -28,8 +33,8 @@ sops:
             amRmVkVoS2RqeEs3OXZVeTlsZUVEV28K1WcbGJHT8LMah5b7NN1psiucTl1OfZYO
             4T3RDSQMB3qj1TGQSdixjwRRKbMGtL3LXnvkNd+caVi5Z9OkF1O9Yg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-04-04T23:36:47Z"
-    mac: ENC[AES256_GCM,data:CkcI8nfzNw9aBPDxyWdVAVXTjy5vIrRwgVfTtRGwPL2BlX8K6kOehSfCOgSv0LMGgKfhUeB//0AxFnuwUFU2r91jLFeFefNkXUung2VwlxBCE9WG6O2h3IHjysdlVcOs9+ljvTvelADqYYGTgIUAjPnbzT2EyA9C+qGC9+IqbXo=,iv:dpcd0BJbpYS6MjjFv1XUKfvo4vUYZTuNqaHaMYft23U=,tag:9XHQX2mt6rN1JSiy+7IfKQ==,type:str]
+    lastmodified: "2025-04-05T16:54:29Z"
+    mac: ENC[AES256_GCM,data:Kl2iN6R3C3WcRgDTG71Ev1KEeDlO+/y1Jck8f6q10zbB5SxXk73wmDtxOSM+Loqan2WVVyd1cYc0Lk6PiA5hMaC1svt5tIuvGlW8G2tXZgZAXdBMuYTYlWkq4ti977KNy4PwbfmWHemWQDdH4io/4oX3G6ZONKhNfOuP6ooRCd4=,iv:goYEGnDjFEGr9Dx564vTvfJN8tnmER6LX2nkG7RqG80=,tag:v2ur4o5zhvQ0ksK7xOhzLw==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.9.4