Commit `d39709c2d0fd`

Vincent Demeester <vincent@sbr.pm>

2025-11-12 11:16:04

secrets: some updates related to RH

Signed-off-by: Vincent Demeester <vincent@sbr.pm>

main

1 parent 40e8edd

Changed files (7)

secrets

redhat

2015-RH-IT-Root-CA.pem.age

AMS2.ovpn.age

BBRQ.ovpn.age

RDU2.ovpn.age

RHVPN.ovpn.age

systems

redhat

default.nix

secrets.nix

Binary file

@@ -1,14 +1,14 @@
 age-encryption.org/v1
--> piv-p256 ItIHHA AlFS2WUoKNBKxG7U+SrhomUBJfXl5Q4l7rkR0EE0r53j
-4sY/egjdDqNr/ChDYoyn1zrpmQCpG2AUtc+aKtRPCRY
--> piv-p256 ViCCtQ A75nJ5NlW2U1IKVPrLdDSmv8+Jn/vD4+SEDeYWP0yk7N
-dyTd9w7LazsWnvUZEO/eOsZE4Ae/ADI8oMDl2T6IGgw
--> ssh-ed25519 irMfZA P+3QgMf3333Nr6WPBVZdAdbQUNTZHYqI/wY9d4F6BTg
-ObcAQ4fT6JNbgysy3XH2zLRaBKDqim3m7LJhvO+X2d8
--> ssh-ed25519 s9inwA AZpLumMGSD/RmOqJGc9nCfm5QCVBABQUVaIj4NJ8BWI
-WPJovAEUBK0PBx813C1FZ411WGhK5w8BbLCGdyOgItA
---- igc7q74WuGEvgfNv2P2IK2TiH/O2iK09Z5Chh7vaz1g
-rkrҾ�a
-�6��,�\�	���e*:�햆Sx7L�ʰ��]a[�g~�u�
-�v�
q���-(�22ؤſ^]j;tή(u�X����E�}����oĸ�I�Zn6���Dk-ہr�b\c����dx� �1:�¾�9�uT��5?Dh�I�Qb�"�^T���������g��N����ѯRW#���j
lPmH�����}�T
-G�3r��
�pB����>��a��ɮ��@c��~����~p��h;�>��aFc������|.��!��؇����'���V�Z�zN�_��Єݎ���0Ko	�d@��#�V�cW��Q����Bt|��o�����I�RC`q���ևXy6)LwtG�������ɧ���,_���{���n�$����G��v�}w���Er�Tn�µ��haS8�-�G�3����QS����������'�����c����nȉ�B��x��ï���s\?��X9�喃�g��&��+�l��Uy	��g︝������������Q(�l!c�:�
\ No newline at end of file
+-> piv-p256 ItIHHA A4WMhWdjxg7GFn0ZekgaP/moO2qIdVMyYoE5TvBt2Hz6
+ALmXXbmxcKp9nonucVsVktIbZ5/G530wJwbJ+no8yPU
+-> piv-p256 ViCCtQ AhUqXAum+xtKDGm+6TcUPYqSwFMBJxrUmhVEAsXEmZLt
+sndU0vfJdB47GMGoyhUbWMbxuWg57AiLmX5IRFwZXvA
+-> ssh-ed25519 irMfZA zffIy+q6afBU4BTABWgSc/B6uL0VkU+J0Flv4oCzRjg
+Zec21iM64ZHNsC2u9uiUY0uQzD1f267eABYh/vffw5A
+-> ssh-ed25519 s9inwA 8fJkAn9Qao/HLG01RG7ld6ZDhrIxn3pWK5P8AuZwvks
+8jbq/5jQ1cvfl+BusiV25hfPPjAD3hOMUN76V2sjEFU
+--- SKtsbANyuZ2eFCRULc91HG2L9vmoPcGEgXtH+5tBKY4
+�M���'r��n���#ׄ�e�g�����%	�WW���r��x�nD��de�-�.���'�)�J��D�N"%�̱g����-\�;	�Ē'< ���9�R$ژL|7|B߮���-������Β���
+�ӫ3�2��o�{~$�`�H!�5)�O[����bռ'�H��kodɉ���n}�:T�H&o���d��;�Տ��^�6}�3�����Ʋ��]l����CJ�0�iwD�R��%��+L4��ۚ���L��&<��`�;�<W��?����k��@4�q�*OA�wR�tO߼�
':ŉNh��t���HN�(����5����tى�y݁�B!}�
++3�~�R��<�/*{��iZR�������)~���h�e�`�x���R��ݐ�&׍�ǢZ���*u��kѩ��<(�F��!]���]�F� J|���{��^�T[P��K�x
f�~7���!u�ų�j��$�-�<R�G�
+E��(�p#L8���+�7x�6������Z�%�,tA2�;���
\ No newline at end of file

Binary file

@@ -47,11 +47,6 @@
     path = "/etc/pki/tls/certs/2022-RH-IT-Root-CA.pem";
     mode = "444";
   };
-  age.secrets."2015-RH-IT-Root-CA.pem" = {
-    file = ../../secrets/redhat/2015-RH-IT-Root-CA.pem.age;
-    path = "/etc/pki/tls/certs/2015-RH-IT-Root-CA.pem";
-    mode = "444";
-  };
 
   # security.pki.certificates =[];
   security.pki.certificateFiles = [

@@ -62,10 +62,6 @@ in
     aomi
     kyushu
   ];
-  "secrets/redhat/2015-RH-IT-Root-CA.pem.age".publicKeys = users ++ [
-    aomi
-    kyushu
-  ];
   "secrets/redhat/Eng-CA.crt.age".publicKeys = users ++ [
     aomi
     kyushu

Commit d39709c2d0fd

Commit `d39709c2d0fd`