diff --git a/flake.lock b/flake.lock index 5d3fcb0..3108941 100644 --- a/flake.lock +++ b/flake.lock @@ -30,18 +30,20 @@ "flake-parts": "flake-parts", "flake-utils": "flake-utils", "napalm": "napalm", - "nixpkgs": "nixpkgs", + "nixpkgs": [ + "nixpkgs" + ], "pyproject-build-systems": "pyproject-build-systems", "pyproject-nix": "pyproject-nix", "systems": "systems_2", "uv2nix": "uv2nix" }, "locked": { - "lastModified": 1763643080, - "narHash": "sha256-jlYmjrTw3g5iOYDZBGb5Plw6IyRa+WY60e3GzU19bkk=", + "lastModified": 1765971510, + "narHash": "sha256-HdGpVTqPguAvkDbgjWi38sGUaI0MvxJJX2bFVZTKXaE=", "owner": "nix-community", "repo": "authentik-nix", - "rev": "4a670757083d94a9dceb4929eb88eb9995bc1363", + "rev": "e929253deddb8398c7010b28187d9d43603db950", "type": "github" }, "original": { @@ -53,16 +55,16 @@ "authentik-src": { "flake": false, "locked": { - "lastModified": 1763564826, - "narHash": "sha256-xBnAfoAOUslOrxNzY5kV0h67qWMXKZnPC/wgRGXZleQ=", + "lastModified": 1765907481, + "narHash": "sha256-d0pPNE2T30COdFse0T15Mx8XW4BGg8hgPQvmW2dAV9s=", "owner": "goauthentik", "repo": "authentik", - "rev": "2fedc3d0a0ba91c16bb71bd4b2432108ca02e890", + "rev": "0d617e4ad1eb9e4540ba5381e6ce06e971affc63", "type": "github" }, "original": { "owner": "goauthentik", - "ref": "version/2025.10.2", + "ref": "version/2025.10.3", "repo": "authentik", "type": "github" } @@ -107,14 +109,14 @@ "flake-parts": "flake-parts_2", "git-hooks": "git-hooks", "nix": "nix", - "nixpkgs": "nixpkgs_2" + "nixpkgs": "nixpkgs" }, "locked": { - "lastModified": 1764608723, - "narHash": "sha256-fF//0lYLApVlXdv1WkXA6zz05u/+VBxfiWtidFtDvLI=", + "lastModified": 1766415291, + "narHash": "sha256-ECD+BQoRVB7Q0YvT/YrlIe4s9ZNanTkRUWdtcziTJak=", "owner": "cachix", "repo": "devenv", - "rev": "c27ea8fd3b9f4ac19399be519f54bcf6c87c7005", + "rev": "445843843575c324f56f46e0a54c2fef1332f3cc", "type": "github" }, "original": { @@ -126,11 +128,11 @@ "flake-compat": { "flake": false, "locked": { - "lastModified": 1761588595, - "narHash": "sha256-XKUZz9zewJNUj46b4AJdiRZJAvSZ0Dqj2BNfXvFlJC4=", + "lastModified": 1765121682, + "narHash": "sha256-4VBOP18BFeiPkyhy9o4ssBNQEvfvv1kXkasAYd0+rrA=", "owner": "edolstra", "repo": "flake-compat", - "rev": "f387cd2afec9419c8ee37694406ca490c3f34ee5", + "rev": "65f23138d8d09a92e30f1e5c87611b23ef451bf3", "type": "github" }, "original": { @@ -160,11 +162,11 @@ "nixpkgs-lib": "nixpkgs-lib" }, "locked": { - "lastModified": 1762980239, - "narHash": "sha256-8oNVE8TrD19ulHinjaqONf9QWCKK+w4url56cdStMpM=", + "lastModified": 1765835352, + "narHash": "sha256-XswHlK/Qtjasvhd1nOa1e8MgZ8GS//jBoTqWtrS1Giw=", "owner": "hercules-ci", "repo": "flake-parts", - "rev": "52a2caecc898d0b46b2b905f058ccc5081f842da", + "rev": "a34fae9c08a15ad73f295041fec82323541400a9", "type": "github" }, "original": { @@ -257,7 +259,7 @@ "generators": { "inputs": { "nixlib": "nixlib", - "nixpkgs": "nixpkgs_3" + "nixpkgs": "nixpkgs_2" }, "locked": { "lastModified": 1764234087, @@ -424,37 +426,6 @@ } }, "nixpkgs": { - "locked": { - "lastModified": 1763421233, - "narHash": "sha256-Stk9ZYRkGrnnpyJ4eqt9eQtdFWRRIvMxpNRf4sIegnw=", - "owner": "NixOS", - "repo": "nixpkgs", - "rev": "89c2b2330e733d6cdb5eae7b899326930c2c0648", - "type": "github" - }, - "original": { - "owner": "NixOS", - "ref": "nixos-unstable", - "repo": "nixpkgs", - "type": "github" - } - }, - "nixpkgs-lib": { - "locked": { - "lastModified": 1761765539, - "narHash": "sha256-b0yj6kfvO8ApcSE+QmA6mUfu8IYG6/uU28OFn4PaC8M=", - "owner": "nix-community", - "repo": "nixpkgs.lib", - "rev": "719359f4562934ae99f5443f20aa06c2ffff91fc", - "type": "github" - }, - "original": { - "owner": "nix-community", - "repo": "nixpkgs.lib", - "type": "github" - } - }, - "nixpkgs_2": { "locked": { "lastModified": 1761313199, "narHash": "sha256-wCIACXbNtXAlwvQUo1Ed++loFALPjYUA3dpcUJiXO44=", @@ -470,7 +441,22 @@ "type": "github" } }, - "nixpkgs_3": { + "nixpkgs-lib": { + "locked": { + "lastModified": 1765674936, + "narHash": "sha256-k00uTP4JNfmejrCLJOwdObYC9jHRrr/5M/a/8L2EIdo=", + "owner": "nix-community", + "repo": "nixpkgs.lib", + "rev": "2075416fcb47225d9b68ac469a5c4801a9c4dd85", + "type": "github" + }, + "original": { + "owner": "nix-community", + "repo": "nixpkgs.lib", + "type": "github" + } + }, + "nixpkgs_2": { "locked": { "lastModified": 1736657626, "narHash": "sha256-FWlPMUzp0lkQBdhKlPqtQdqmp+/C+1MBiEytaYfrCTY=", @@ -486,13 +472,13 @@ "type": "github" } }, - "nixpkgs_4": { + "nixpkgs_3": { "locked": { - "lastModified": 1764517877, - "narHash": "sha256-pp3uT4hHijIC8JUK5MEqeAWmParJrgBVzHLNfJDZxg4=", + "lastModified": 1766309749, + "narHash": "sha256-3xY8CZ4rSnQ0NqGhMKAy5vgC+2IVK0NoVEzDoOh4DA4=", "owner": "NixOS", "repo": "nixpkgs", - "rev": "2d293cbfa5a793b4c50d17c05ef9e385b90edf6c", + "rev": "a6531044f6d0bef691ea18d4d4ce44d0daa6e816", "type": "github" }, "original": { @@ -502,7 +488,7 @@ "type": "github" } }, - "nixpkgs_5": { + "nixpkgs_4": { "locked": { "lastModified": 1728956102, "narHash": "sha256-J8zo+UYNjHATsxn2/ROl8iaji2RgLm+sG7b3VcD36YM=", @@ -533,11 +519,11 @@ ] }, "locked": { - "lastModified": 1761781027, - "narHash": "sha256-YDvxPAm2WnxrznRqWwHLjryBGG5Ey1ATEJXrON+TWt8=", + "lastModified": 1763662255, + "narHash": "sha256-4bocaOyLa3AfiS8KrWjZQYu+IAta05u3gYZzZ6zXbT0=", "owner": "pyproject-nix", "repo": "build-system-pkgs", - "rev": "795a980d25301e5133eca37adae37283ec3c8e66", + "rev": "042904167604c681a090c07eb6967b4dd4dae88c", "type": "github" }, "original": { @@ -554,11 +540,11 @@ ] }, "locked": { - "lastModified": 1763435975, - "narHash": "sha256-SKdpcVuJKMNEXloIpLXY+jDI42+6Ew21vdkl894DxHo=", + "lastModified": 1764134915, + "narHash": "sha256-xaKvtPx6YAnA3HQVp5LwyYG1MaN4LLehpQI8xEdBvBY=", "owner": "pyproject-nix", "repo": "pyproject.nix", - "rev": "7d3d8848358ccbd415afe2139f12b9e1508d3ace", + "rev": "2c8df1383b32e5443c921f61224b198a2282a657", "type": "github" }, "original": { @@ -574,7 +560,7 @@ "devenv": "devenv", "flake-utils": "flake-utils_2", "generators": "generators", - "nixpkgs": "nixpkgs_4", + "nixpkgs": "nixpkgs_3", "terranix": "terranix" } }, @@ -641,7 +627,7 @@ "terranix": { "inputs": { "flake-parts": "flake-parts_3", - "nixpkgs": "nixpkgs_5", + "nixpkgs": "nixpkgs_4", "systems": "systems_4" }, "locked": { @@ -670,11 +656,11 @@ ] }, "locked": { - "lastModified": 1763421857, - "narHash": "sha256-8JurcmEzAkrpm+eUDm8W/+KkU/w/viAeyJhJlIX2qOQ=", + "lastModified": 1765631794, + "narHash": "sha256-90d//IZ4GXipNsngO4sb2SAPbIC/a2P+IAdAWOwpcOM=", "owner": "pyproject-nix", "repo": "uv2nix", - "rev": "c9752c6c5915eece99505612d8f7805185cff990", + "rev": "4cca323a547a1aaa9b94929c4901bed5343eafe8", "type": "github" }, "original": { diff --git a/flake.nix b/flake.nix index 0a2b9d2..bc58d82 100644 --- a/flake.nix +++ b/flake.nix @@ -7,7 +7,10 @@ generators.url = "github:nix-community/nixos-generators"; terranix.url = "github:terranix/terranix"; devenv.url = "github:cachix/devenv"; - authentik-nix.url = "github:nix-community/authentik-nix"; + authentik-nix = { + url = "github:nix-community/authentik-nix"; + inputs.nixpkgs.follows = "nixpkgs"; + }; agenix = { url = "github:ryantm/agenix"; inputs.nixpkgs.follows = "nixpkgs"; diff --git a/secrets/auth-authentik-ldap-secrets.age b/secrets/auth-authentik-ldap-secrets.age index f3e27ea..815adef 100644 Binary files a/secrets/auth-authentik-ldap-secrets.age and b/secrets/auth-authentik-ldap-secrets.age differ diff --git a/secrets/auth-authentik-proxy-secrets.age b/secrets/auth-authentik-proxy-secrets.age index 9f00c9c..21c8d38 100644 Binary files a/secrets/auth-authentik-proxy-secrets.age and b/secrets/auth-authentik-proxy-secrets.age differ diff --git a/secrets/auth-authentik-secrets.age b/secrets/auth-authentik-secrets.age index 832e461..4f64704 100644 Binary files a/secrets/auth-authentik-secrets.age and b/secrets/auth-authentik-secrets.age differ diff --git a/secrets/db-postgres-initscript.age b/secrets/db-postgres-initscript.age index 232fc12..1b77823 100644 Binary files a/secrets/db-postgres-initscript.age and b/secrets/db-postgres-initscript.age differ diff --git a/secrets/finances-app-key.age b/secrets/finances-app-key.age index a977be2..a016412 100644 Binary files a/secrets/finances-app-key.age and b/secrets/finances-app-key.age differ diff --git a/secrets/matrix-maubot-cfg.age b/secrets/matrix-maubot-cfg.age index c7e5e13..9ad5680 100644 Binary files a/secrets/matrix-maubot-cfg.age and b/secrets/matrix-maubot-cfg.age differ diff --git a/secrets/metrics-pve.age b/secrets/metrics-pve.age index c528f96..e5715fe 100644 --- a/secrets/metrics-pve.age +++ b/secrets/metrics-pve.age @@ -1,7 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 jxhkLg fMyFt2LR3vCmiEBnsa8l+66q41O6so6vIfwwfR0dXVk -+eW719i/+MlQgJVbM9yP95FK+akVScstte2wWYulBGY --> ssh-ed25519 hKRBdw DjmDRh5sqxmbSckrYIliu8zFVZDIpzltqK5rCO1qRB8 -8isUMp0G0zE/MK7s3ubTzEZlFh3DSJVYD3hP2cfBODo ---- JOvIpPS8459oTkMN0OqtifBDC3I5ccn/A64k6WLbWbA -udD#«< Zu"UYb]!N6SO;ߋ3WixWY{,żJ\lٻJa^8 \ No newline at end of file +-> ssh-ed25519 jxhkLg s68L/ORJQ1LJF5F3CZ8z/2FmCYlXllFHrJjMxov0qlc +42ABucRpgxxvNWm/ufA7V/b7m2XWK+3xcHzymPF0VaQ +-> ssh-ed25519 tqMvRA na19byAvI21z/+ODPL3qafqdVd32oLdAN88tp0f0GU8 +6RSTSy0TCy1BVcyqijU/Dg5eBkREEiT5off75G+Flm8 +-> ssh-ed25519 hKRBdw 2/X+Dv3TEt21SF1i6tQ9AMLfd7KQ2NCyiiZzHIMFrUo +Em8FjDhe9J6G+awK9zsdrd+LtC5DT7u4+tvVSb1/pYY +--- t+oO9p9wqHWOuUsy2EdGff7SkywtlWyk3PhXriJ5rLk + FLWΣYAѳv+k\SFC/9FW#қyw'm^^% ssh-ed25519 jxhkLg a0rOqllhr8SnSsM53G4mAp2pSRRX1/EYLJQKgjPrjAY -UXUdyiq1ojxH9YZ/PwHf7+pGYtd5sKtA9aPccYB0wKM --> ssh-ed25519 5VK9ng bd37JC2kqvXrsZSsH+fMt0S1ULiehdub0wZHVAUzNCY -U3VFp17t8ZiHjsGRJSQVD3+z2cpiDHSQkQo0RRWeklk ---- nPOOj5Xq2B4Ts830QorRYXwxAkt1MQWLyUy8A6hhOo4 -KKgd(A_RiŲ5[X3:garsV| !,|E8#j \ No newline at end of file +-> ssh-ed25519 jxhkLg zgYm0/IF1/Xdj7JBp+oICW/bEuZZD5rWRmrXCGx1qXI +OXZHX6sVWb7YKg0xApx/yRTRQ4O6U/7Awuh3LtWDZJ0 +-> ssh-ed25519 tqMvRA WxKTFFHFMROV3FGz5n5En8Ng3ZA6ri7lTln+LmBW5Ds +BJ9hp5Xf43hOFVlXVdu5rQCVYgfvn2K6JRmK/mnB2Ps +-> ssh-ed25519 5VK9ng 3HOprdaCdSOsxy4H4HulGTgxmKNHq3M+1eeGLxtXH34 +WLZ1xsVS3dg5yP5FabuIEjm/lgl3GLq9fbhfDgQ0nXM +--- aAncZ/pY0yGb3QZeBpew12pY8ubrL2PO0l8DZqTcRMY +*Ņ:Ay"EyکNCQh;[9}L;ciz)IYt+e \ No newline at end of file diff --git a/secrets/mqtt-password-frigate.age b/secrets/mqtt-password-frigate.age index 2c60aab..97c87d7 100644 --- a/secrets/mqtt-password-frigate.age +++ b/secrets/mqtt-password-frigate.age @@ -1,7 +1,10 @@ age-encryption.org/v1 --> ssh-ed25519 jxhkLg rr+vKs1Qgs8MDzYUezyf5INNH7AJZmiGNtjDxcClfiI -bUYhP2R9eT4jJ1EV8eSJ+xCltXeaCgPkfVzM2Qun25Q --> ssh-ed25519 5VK9ng RZl7w8xP1fONgmk8iI8iyLIw+8SWjp2OKU7W0y/0PQg -9fLYbhO9Idn0qPqaI4aYFOL57Q3jPmJuHRK3UtqJ00c ---- bYV4tQShFjdGpmMKM3Ox2TCheNBG/Vv9VsC3r/o1tDY -}ƐbiB0c1p`q3 \ No newline at end of file +-> ssh-ed25519 jxhkLg irrsKDDay7MES1geZ15cqL3AyqBBzJ0mEC1kVeX97TE +9dOyx3LRjDa6RREeHel08qKEMtmTvuH3o3Rit/lq9pI +-> ssh-ed25519 tqMvRA pWZspBwWS1WDlHBMW4V3FzhmrHY+pSGGnoVLgqXK51M +ob4bkKrj/UIpQlZpqra6hH3fS6p9aSCz0z1EYc+85cs +-> ssh-ed25519 5VK9ng Ws1aNLFLK7OaDzX3x2h9QuJJ143Nx6jvxbVqhTYsahc +2Pn1ndhbAO7axpfmfmaeLo37zSy2ZbIjpstwMJMERVM +--- WtjXEKoVwsTHH7OjsMlTAc6iVjh35tiRwBKcMgsqnDU +q4|A"2d&4,;uH0 +O-`FGX \ No newline at end of file diff --git a/secrets/mqtt-password-ha.age b/secrets/mqtt-password-ha.age index 9dee2d2..c31652f 100644 --- a/secrets/mqtt-password-ha.age +++ b/secrets/mqtt-password-ha.age @@ -1,7 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 jxhkLg MjLm6icSBfHv1BBG02B+lhz0YvPji9Om54M5XqHAFXY -4ahvZ3SBT5Xrr2BwmtBCcDsVlYC1tPIcB5D6UA/WCEA --> ssh-ed25519 5VK9ng /kynjS64KZzh0hbozlWC0cE13NXNYNetcP/H3b0rE10 -fwol5+4AGj4i7kF0LzV/eNA/fnGSZzCoNQDAH1pAyqE ---- vsPRvqoFaVl87PWj7vSzHFafPdUbld2hVsARvuz0pLk -,Br\|mdeQ 2:nN#B_4[CY6sY*"4 \ No newline at end of file +-> ssh-ed25519 jxhkLg Uc9jtkuMKoM3Dq9XrknXoDQB2RmegRPI8C8Sl6bk6xY +WUE0ti7WHxO9xBtQRIqh12LdV7c25paqBVXPFwmgXYc +-> ssh-ed25519 tqMvRA bfIfKq+o0mdMIxJ6PoGS9fOH7EE+XEeCCe5xUms0CE4 ++NGLKID+i6adDd9o5FvkJhiUJzHDCtQ2ryYZ7AxqJpg +-> ssh-ed25519 5VK9ng tdcfRS2iT1z8cDR0Wxia60Yg8/bRmov5TgA88R7Sixg +8wNwRPn6xdMfjf5lUGu16yd5HamnC2urrp1XsYBoZdw +--- 880QcBbcatDgFTx0Ywqw7XRhKjRLAkh282Ur5YJeGlw +&,&6G}[BQ^7n@Iֶ5 9DzPɆ@{ \ No newline at end of file diff --git a/secrets/mqtt-password-mqtt.age b/secrets/mqtt-password-mqtt.age index 0047eae..7d4fbd8 100644 Binary files a/secrets/mqtt-password-mqtt.age and b/secrets/mqtt-password-mqtt.age differ diff --git a/secrets/mqtt-password-z2m.age b/secrets/mqtt-password-z2m.age index ea9d4b7..9228de1 100644 --- a/secrets/mqtt-password-z2m.age +++ b/secrets/mqtt-password-z2m.age @@ -1,7 +1,10 @@ age-encryption.org/v1 --> ssh-ed25519 jxhkLg 84dBTYr7B4bxbAisPICSkRNek8NW2Kg6wstpKbG2whI -R6zotscZ9DT9hUJs8+H6LkFxj8I1OQhyDbTxnOOk3jI --> ssh-ed25519 5VK9ng jrwdT0rYXg2Ab3M7L8VVVmZ2GCU/LwQ3jF0tqzA3ljo -GOB8/g8xPU7lQ7JS87P0K4rM1gyqnHIGkuL33+s7dHo ---- BLqErP1g1Gw/8bWlHoD/w2LIM73NZTAmXVZY23tPM+U -~H{榝i}# _ywRkϭK D␊2 \ No newline at end of file +-> ssh-ed25519 jxhkLg NrGG8qgpth4esKSjjEX5KZlVevWZ5KpPd3yNOOJCblE +9GcLLdSiUFbR0pqjUdr2GB4EEwivBWeLne2To2O0T/M +-> ssh-ed25519 tqMvRA Cdfw+1e6E9tV2me/22OPjb7w0ncoS0TgFlcscZ17RDc +Wucu5fsX2auUZ6B6+NncOFqTlSr7v+qhOhY+mwqI758 +-> ssh-ed25519 5VK9ng hlWUcnMHVCa7eqfg20vcQ/f5jnZghCmoF+CX32gd80U +WXxYipBo4pgZ9nxqiVT1GRePAXqDWqnb5Eq23qbTrug +--- GcWiqMDG56mMLPju+NaLmBBpfJ7LAmeQ43+4FCN6cA0 +8siK^_=+Oo Q +\I+q \ No newline at end of file diff --git a/secrets/power-password-file.age b/secrets/power-password-file.age index 3a277e4..82d9f95 100644 --- a/secrets/power-password-file.age +++ b/secrets/power-password-file.age @@ -1,7 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 jxhkLg oln5ya/9gIVWvlWBE11ZgUQYCN4tZQFa4Fe13q3o81s -69a7qRWUtQ6KAgT9zH6HzPqmoBx5OPMv8mhoc3F+FlQ --> ssh-ed25519 DVDL4g m2lTL6SD1HxqSJelHrpDli1uOCgM6/cjJApBQ0a4UD0 -QhjMpiWQcovOPMxwX/658PkO0hgppG0rs5wQO5OUH78 ---- IW3/EHx3kYU5kLkRt9x2SQtqx/+krXcT4aPv3zh+u+0 -8PRD37dR3܂w \ No newline at end of file +-> ssh-ed25519 jxhkLg bicqQd7H4Q9AIQYnh+WOH2l/mPCxEMeYET6aEtDDREI +skeR6/zF0dpsbl6nKIVWhPQ6hI8+MY78ize9d0dB13Y +-> ssh-ed25519 tqMvRA MKQb4Tn0dvZQFnGaKEFaqMFWFGZvuwgjufBhNsc40xg +PhtI3AcrjCP0IvdJoWQSLBTeb9wpEBJdfNk24jBIWbY +-> ssh-ed25519 DVDL4g IzPTDKLmUpICvbhPLIss/4kh0QhkTMllkJlj0hj1U3s +iWxFdt8BMuUjSy3ngYytg0+ayXDNt//7OWiyWPUuOB0 +--- OBusaZYu8lY3b+x54m2MFFkgd83kKjL8hjLFIV09GHU +Rq=AEj6