diff --git a/capytal/analytics.nix b/capytal/analytics.nix index c7c5435..07da084 100644 --- a/capytal/analytics.nix +++ b/capytal/analytics.nix @@ -22,5 +22,6 @@ in { metricsBind = ":${toString (port + 3)}"; serveRobotsTxt = true; target = "http://localhost:${toString port}"; + ed25519PrivateKeyHexFile = config.sops.secrets."medama/anubis/hexFile".path; }; } diff --git a/capytal/network.nix b/capytal/network.nix index 0f46cb0..3f1061a 100644 --- a/capytal/network.nix +++ b/capytal/network.nix @@ -23,6 +23,7 @@ metricsBind = ":${toString (forgejo-port + 30)}"; serveRobotsTxt = true; target = "http://localhost:${toString forgejo-port}"; + ed25519PrivateKeyHexFile = config.sops.secrets."forgejo/anubis/hexFile".path; }; }; diff --git a/secrets.nix b/secrets.nix index 6fc6aca..ff06861 100644 --- a/secrets.nix +++ b/secrets.nix @@ -50,6 +50,13 @@ in { sops.secrets."forgejo/git-password" = mkIf config.services.forgejo.enable { owner = config.services.forgejo.user; }; + sops.secrets."forgejo/anubis/hexFile" = { + owner = config.services.anubis.instances."forgejo".user; + }; + + sops.secrets."medama/anubis/hexFile" = { + owner = config.services.anubis.instances."medama".user; + }; sops.secrets."cloudflared/tunnel-env" = {}; diff --git a/secrets/spacestation.yaml b/secrets/spacestation.yaml index 53d5bd0..7c3782c 100644 --- a/secrets/spacestation.yaml +++ b/secrets/spacestation.yaml @@ -13,6 +13,11 @@ forgejo: name: ENC[AES256_GCM,data:UL3g,iv:+ftGx57fhzN06DuLItxZTc7lXX2g4MhqrEqnDjk4Aug=,tag:ZNpwWuPYhBzDjRQBKikCDA==,type:str] password: ENC[AES256_GCM,data:9nMuj2/VIB7Pbw==,iv:+96/NZ+gmRkpXr05nFuUfRl2rGqElUA/LuMBYBQHCHQ=,tag:hMEO40iGeyWsMd8VPOV4Yg==,type:str] email: ENC[AES256_GCM,data:e6GOwBzRBxa00CHYHgV8,iv:oerF3kJWzjzOatND8Tngp3MADw2kaBKyigeFxtH/ypQ=,tag:1q093JG9hRDxs6OzOIU3vw==,type:str] + anubis: + hexFile: ENC[AES256_GCM,data:6hMIQUiSYYNkhrGGHHHIF6Ur+dQeXDuUTHZR4Tnl3O/T/phC7q881Gta6LCUJVvgQJ8hF2aKafggTUDsjcaI3g==,iv:3aGmqM8gV5YsdFNGCgZ4L9t8r9c0zubqZOE1eDBAong=,tag:/nB357mXDJJMRNoQ4E/KQQ==,type:str] +medama: + anubis: + hexFile: ENC[AES256_GCM,data:INM0j8uPSV60nEyGJ2/+nH1IDVL08hvBzTULBHPbChQVdYO+Z/UCI1aKCLoCwad0NAp+rAljYotZ0NxlxfjnmQ==,iv:y9F70r7erFOBe94rvv3/3P+N8SwFgW39hRcfP2SjFMA=,tag:PnjbQcCDbB/8XPJc+hM5dA==,type:str] sops: kms: [] gcp_kms: [] @@ -28,8 +33,8 @@ sops: amRmVkVoS2RqeEs3OXZVeTlsZUVEV28K1WcbGJHT8LMah5b7NN1psiucTl1OfZYO 4T3RDSQMB3qj1TGQSdixjwRRKbMGtL3LXnvkNd+caVi5Z9OkF1O9Yg== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-04-04T23:36:47Z" - mac: ENC[AES256_GCM,data:CkcI8nfzNw9aBPDxyWdVAVXTjy5vIrRwgVfTtRGwPL2BlX8K6kOehSfCOgSv0LMGgKfhUeB//0AxFnuwUFU2r91jLFeFefNkXUung2VwlxBCE9WG6O2h3IHjysdlVcOs9+ljvTvelADqYYGTgIUAjPnbzT2EyA9C+qGC9+IqbXo=,iv:dpcd0BJbpYS6MjjFv1XUKfvo4vUYZTuNqaHaMYft23U=,tag:9XHQX2mt6rN1JSiy+7IfKQ==,type:str] + lastmodified: "2025-04-05T16:54:29Z" + mac: ENC[AES256_GCM,data:Kl2iN6R3C3WcRgDTG71Ev1KEeDlO+/y1Jck8f6q10zbB5SxXk73wmDtxOSM+Loqan2WVVyd1cYc0Lk6PiA5hMaC1svt5tIuvGlW8G2tXZgZAXdBMuYTYlWkq4ti977KNy4PwbfmWHemWQDdH4io/4oX3G6ZONKhNfOuP6ooRCd4=,iv:goYEGnDjFEGr9Dx564vTvfJN8tnmER6LX2nkG7RqG80=,tag:v2ur4o5zhvQ0ksK7xOhzLw==,type:str] pgp: [] unencrypted_suffix: _unencrypted version: 3.9.4