From 8bcaf162b08dfcb94afc3a22aa1c167b939429b5 Mon Sep 17 00:00:00 2001 From: Robert Date: Fri, 18 Sep 2026 16:23:33 -0400 Subject: [PATCH 1/2] secrets: re-encrypt containers.env to gortium.main with rotated dashboard/honcho/restic/cathou secrets; repair secrets.nix (was corrupt). age secrets never in public repo. --- assets/compose | 2 +- secrets/containers.env.age | Bin 2681 -> 2241 bytes secrets/secrets.nix | 9 +-------- 3 files changed, 2 insertions(+), 9 deletions(-) diff --git a/assets/compose b/assets/compose index 3353c6f..8885230 160000 --- a/assets/compose +++ b/assets/compose @@ -1 +1 @@ -Subproject commit 3353c6fba1b349a72a3dce9c23d6e5fc23536b3d +Subproject commit 888523079f1ae9dab868430450d6939833a0e59a diff --git a/secrets/containers.env.age b/secrets/containers.env.age index a02308b5a89ba3581f08c2c853e89960687048ad..67aec19d08d6b27768e9fee40ad153f88a0f008b 100644 GIT binary patch literal 2241 zcmV;y2tM~=XJsvAZewzJaCB*JZZ2BxH0)6D)*|*E*c3q*x93WPZ->{yQ8lU!y7m-^tCc zg(D_F(}@U(&=V=1!zr*PmE-~Qe3luS{}xW1z;P_>HcLgpyJTi{THe3!oxNt&1(P6V zDS@_=j!h2SL5&uWojI^H!}G-Ee2%g0NMZIKFj6p|$mZR30Hzj#g%i$34E+s|LuBET#c|To;Nj>gZz53TSxugFT+xSiLI1Zl>o`tC0 zP70LQ>0q4oy)wSj^yQ-P>Wav}p^2OR^q>G8#>y;p$fqjexjlYu)v_rXdln zJNY+ZTGaE^5_yvPhuNoGD=!P52h9%QW0+>i-8Jim_zP9XSbIsPMOa=ks?PA^q-_t) zJ5xGyaZTEKSZ&Kb7P`p-!L!ee8BclvtOd8c!?r~O8T?Bi{9*!f=R1D-82Bd<Cy7I2i0(DlQNOMlVI>l15@aGr1>0Y?wJ!MD23z(saNmE6jVwpwH3(; zF=QP(@B%F4s9E0vXc}p1I-2IfB;BY!f^x<@vpaO3-~o}T3mnyxp^>waGVCVXGJ0p+{IyVSt-ahUt9-OYnVme zL8*RVIn5cB;pi0ei(g_4VuHG5Bw#&LVu(JO`{tyNa1SwHuZ)4(#Oey-@6JJf?bxg) zWV(`XCSW}?PGr#wz&W6$dAnYI7oQE%lBF#U%b~#tcL2*k%_5ml1DO`|4mg~2@tE_* zQ&PTU+JG8`{s~vTXu~jClU$~L*4P@A{ouyj*MXhoz3Kr-ksl3|A?9~;)hsm_*?#r! z5fO^}phE#3YdH_;84zO@0Tza(}5t&L+$5|MZvV*o0vncBJj){ zDFdEMtbh%$g45&V%T4}!|*5=N76^}y{*-~9LhdS$HYm-yy* zA(m#(Gl5ha_FZDc3<0;P|8EaD`=%nT4eg}Ho)hQL zVs~5R1HF0(%t>TWVuUhM=wNs2;dom%KLJQ~2KPTk;HfTSaKL`=uo!k`x_m%_@caRo zTmsH!@r)vL7!@lyd;10^*u{ssb~79WD*3+hJ>T*uZoo54Eb6@L7xR8oNxM{rx+gH@ zQYa~b>(zryPvp%ICa?Va%177hwx{Nk{u)trV#z*8M-jwQ&rtrHtxrCf8=)u_viAya z-XM?ow6;Xd%hc>sF)1+6LI1WA$<>^n;h2mztH%`oq~V81j5o3-@st5dG>?m=zqTrd zn( z)91bJaf1FYO9iFZ`8u(wmf;)$VOD4{BsMw7rL6M3-zrnLlBB2%{cbo~E%b=>;deb7 zoeeDQWRYXugY*)})fpoOUIvQf@-e&7`dF(dC&B$$UQhKD(9O3!D`%mD5kpo<<8@v2 zN1}@eH)1I02T~*nf^E>PY^lL4s8cuA9Bsxd#;HqzRV`RL)2G0+;0sIOakA4f6cz9t`4Xbz7sYjKle&jHDKNimgXM~b+w=F`zz|@^~+h7 zpA2jeQD&O=Hi=5^K0o{t`_4F(&|pHXS*;^oJu78HC3I)mEHe6K#lJCoRcmBML@HJC zM_5X%V=*IOU7(<$Qf$OIO%1H9`0_U{^{g-0X96MoNNoob)*Af^#7j+~@%)x4XDad$ P7afW;xhdc3#);@hBzr1> literal 2681 zcmZ{mx6XuGvW0V=;^gRv#x+ea0kHAS#@mbr8ryjP^!LA$Po*W5RG(_qTL1q0SG*{z z@E=YV{}G|!#Fi(5esDjFbjeq2{a;6+xF| za;G~|c?iD%dI7wH_H`qPyWD{fiK4I6;KBMvJIYXI_oS;lFG%Jb_i?-DpJp)jrvK32 z9#y(RxhAC6#S!cfRa%3{>ugo-o^j+TLX%I>Wrvg;>0C~hA`EBdECeI!L**$`r&8De0$K0zi~O& zRfu~XPa!2DBKi=v+?!8P9gO9>JiU^6Wnv8!3W!;r!CV>Kq)Vavo_(d?MJz5eOnxBy z{Q%^4dfx8vQfxujge$s1wjoAR6BC_Qx^Bf~=QljF*V(r#u*dd@-(^u+aeRgdEf?5z z99E}~cz91iz}q_^DL6L$9(Kn2)!NLh=UI~3wB+8+(e!Z*rl&F^(c;jlk=D>@d?FNz zP5Z-pm2FyROm%eH_`9JxWMBmJa-LCxLpejYp%lMqGFy!5ES%taDN>f(2Ybhjb)`*1 z3GZe_pC+lpVuXw7iM6cYxR*S$tEop&%xadL_-ta&tT(L@QV+yS>sIabyb5q(GPR z=5S_S%ruh|t+K4fIv?(RN7dM%k(qa_#9-9;wROT&*r#WY!h!hLp!}yaLEeF#-sKfO>M-~S}ZP^cTIINiinY&LD%ErO`@|NQ{{=D=Q@K;!) zcZ@I&%e^^xu~T`zd!FMW^)nLnrKOi-18Bn5>_!R(gi{9)^JgVX;F2uv*LVQwo+@M+ zw`nD_`^V+Ge}`jVR*m8K0>!p%NJLOOT{d?_Z;qNi88A5poD%(ke}k z7SiyTRqMa%d|VW_Ydb5Ies9F_XxG<{dIOkBE|dfCJ>|Nvhv!VQVuvK7ccOnwG#=Wh zbn@IOGjL4c6Oz;w1sZ1(ISdkc)d$S?&8gJV3u^6_#VyV`th8A@4&SuZgMz#Rib6nle*RlBDfmsIQ`)%@A zAGi+}x)>=Gm|Ko5PHzJv-11;DVtF@c_WAogdpR@!Ap9Ydf_wW~76rupagOt=IBDMw z4+moQxU?B&;h=Vnd^@dIpLi%X6N+%P5h^&X!64S!%a7ln1G1(!GQt|0<17x3Sl;@4 zj?xpc{-=zkamqLkXt{g;iWsk2-Z@0S>)jdg7xMS;m9}3b#JWJg@~Pfjo$XQqc2xbv+pa=ji6CmM_5Jr zPnzn|qKP7|fiM$+%kt(IEVkN^A!`EPU-A^4xE^8Wx(Fmx&a diff --git a/secrets/secrets.nix b/secrets/secrets.nix index c91d02d..1ef50b6 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -8,11 +8,4 @@ let in { "containers.env.age".publicKeys = authorizedKeys; - "lazyworkhorse_host_ssh_key.age".publicKeys = authorizedKeys; - "n8n_ssh_key.age".publicKeys = authorizedKeys; - "openclaw_gateway_token.age".publicKeys = authorizedKeys; - "ai.age".publicKeys = authorizedKeys; - "cloudstorege.age".publicKeys = authorizedKeys; - "homeautomation.age".age".publicKeys = authorizedKeys; - "network.age".age".publicKeys = authorizedKeys; -} +} \ No newline at end of file -- 2.49.1 From d72bfca2d8a99de0aa1b7c57b271172c89a1cc31 Mon Sep 17 00:00:00 2001 From: Robert Date: Fri, 18 Sep 2026 16:23:48 -0400 Subject: [PATCH 2/2] chore: ignore secret backups --- secrets/.gitignore | 2 ++ 1 file changed, 2 insertions(+) create mode 100644 secrets/.gitignore diff --git a/secrets/.gitignore b/secrets/.gitignore new file mode 100644 index 0000000..21c153b --- /dev/null +++ b/secrets/.gitignore @@ -0,0 +1,2 @@ +*.age.bak +*.corrupt.bak -- 2.49.1