add taskwarrior secrets + keys to config
This commit is contained in:
		
							parent
							
								
									0a0da37807
								
							
						
					
					
						commit
						b120f59cf9
					
				
							
								
								
									
										29
									
								
								home/profiles/task/ca.cert
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										29
									
								
								home/profiles/task/ca.cert
									
									
									
									
									
										Normal file
									
								
							|  | @ -0,0 +1,29 @@ | ||||||
|  | -----BEGIN CERTIFICATE----- | ||||||
|  | MIIE/zCCAuegAwIBAgIUTLEuHYBh/sST/IrIhs+pWjDjW3UwDQYJKoZIhvcNAQEM | ||||||
|  | BQAwFjEUMBIGA1UEAxMLMTkyLjE2OC4xLjYwIBcNMjEwMjEzMDUzODUxWhgPOTk5 | ||||||
|  | OTEyMzEyMzU5NTlaMBYxFDASBgNVBAMTCzE5Mi4xNjguMS42MIICIjANBgkqhkiG | ||||||
|  | 9w0BAQEFAAOCAg8AMIICCgKCAgEA8ZyNGBoudva5KAe1F281Fe3u91whLPB7SWv4 | ||||||
|  | zvN6n81NaMtl+rkfcO5GrYSbtemeQUz04N9dUIRABPyHGO+y0gQn/1p1KMdFzhH1 | ||||||
|  | wDR45h/Eo7+U+2Y/qjyvdjNU9aPe5yymuqSm0cTdFbRkXBoZDSDrwA0U078oYCBo | ||||||
|  | yDxubKK7H7jWlSVyaBmsWDA72qdZhcOGKy6YoIEiT18V/57wTXBacBZvs3ORbOR6 | ||||||
|  | SMPjq0Pr32+kDriRbb9lQ9TAAGLE51hM8IBMnAZVvgS5GQ1y8elH4WJc7caom5B3 | ||||||
|  | l1MVQKEtgxU+QA4ZqGr9y7H4ey4Xf0V9pvrnsUTu1zCz+P4wd8jS6toxCnn8A8Tq | ||||||
|  | c3ytA7t3o7BntLSWeQV5LKEiXqF3n3njqXk5Z0ZxDkI+FkhbnOytwGvUEpanTS1d | ||||||
|  | z3EyZA8h1huoDdTmL1hVrg9pIaFJG5S9GuwcJiFPFo0QN6lcbhJmKrCOzPKb8Kwn | ||||||
|  | zhymN7vtskSeqPZnQX+/tGupMzeITwcudoBg7zRUNKikIsTwFze+QV+puGFCjH+B | ||||||
|  | BIe0NQ+rzpWOyI7FDYIMb5q+/PJKTkH2Bu5qYhgebzdCxKcJGBNoWsgzvl+tofQw | ||||||
|  | XchzIqR35xbkmvLeuIIABd8BKaowrAUGrRxtp7IZqxcR3XxH1RIimkHzeRHTphU2 | ||||||
|  | oycB3eMCAwEAAaNDMEEwDwYDVR0TAQH/BAUwAwEB/zAPBgNVHQ8BAf8EBQMDBwQA | ||||||
|  | MB0GA1UdDgQWBBQBl2OoCoAweUqsfVQNmL9H3jtl2DANBgkqhkiG9w0BAQwFAAOC | ||||||
|  | AgEAypV1zutIu7an9tansll20LH2WMAHqi5JrALPBCO9yTqnCS3xZg8VZott/qxm | ||||||
|  | /SsdlhKtekpvljiQhKqB4wROTf26GjxB9iAzdfxAZEcpYWkyXQ6qzDpjIHLLB3X2 | ||||||
|  | 31KHbMc63GOI4wmpGY532tt3qDb+VhgfK25GyvUvvw5qvFsYeGHdSD/HIEJHKlOK | ||||||
|  | 8esaF2/r+wuOWABbbmSBaCtR8H8T4Z/B5l6PoVft9uu8IQbtuhiDn08mZHat8tUq | ||||||
|  | nxm3O1JsV4ZNtvqh5st1Qn32f7buM6AFMhMy9bcXwR33TJBuv994zRjJQYk+FKzE | ||||||
|  | UzrWl9mlglWV34P0+xMxpDFEgQvkJAFmdhcVsZlDwILWzEa/ZrS2EQGsEuzHbfFo | ||||||
|  | oVQuXjzQkX504kAypwQBwbqPfwwYEev7EPVOj32/ke1TzBLaqqJ5AMABShOUJD3L | ||||||
|  | pNOWMD3B23lRDll2f/Tkhqq4qriqWmtn7urC5ga6AlnAUueiORHTTcA9XBuAz68q | ||||||
|  | dVfU3cIwwnGhDAYUB27yeb0mhPGnTz2Xr4tn8TLrL7c0tXZPjDCttr6hUnB+X/Yx | ||||||
|  | tBxT1fJMZR7lzRMvnLJJQKC5rVKE4AAy+FJb3JvhQw01CF4odCmgWT3y+MG4RxnN | ||||||
|  | sqTWkKoE6bRT9rnRAG8EntRycibGKH0b1PhpY8ngOgMbfCw= | ||||||
|  | -----END CERTIFICATE----- | ||||||
|  | @ -5,5 +5,7 @@ | ||||||
|   home.file = { |   home.file = { | ||||||
|     ".taskrc".source = ./taskrc; |     ".taskrc".source = ./taskrc; | ||||||
|     ".local/bin/task-note".source = ./bin/task-note.py; |     ".local/bin/task-note".source = ./bin/task-note.py; | ||||||
|  |     ".task/keys/ca.cert".source = ./ca.cert; | ||||||
|  |     ".task/keys/public.cert".source = ./public.cert; | ||||||
|   }; |   }; | ||||||
| } | } | ||||||
|  |  | ||||||
							
								
								
									
										31
									
								
								home/profiles/task/public.cert
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										31
									
								
								home/profiles/task/public.cert
									
									
									
									
									
										Normal file
									
								
							|  | @ -0,0 +1,31 @@ | ||||||
|  | -----BEGIN CERTIFICATE----- | ||||||
|  | MIIFRDCCAyygAwIBAgIUCsfV17Ag4utaNHY9sv6x7g/Z3bgwDQYJKoZIhvcNAQEM | ||||||
|  | BQAwFjEUMBIGA1UEAxMLMTkyLjE2OC4xLjYwIBcNMjEwMjEzMDUzODU0WhgPOTk5 | ||||||
|  | OTEyMzEyMzU5NTlaMCgxFDASBgNVBAMTCzE5Mi4xNjguMS42MRAwDgYDVQQKEwdt | ||||||
|  | b3NzbmV0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA23j6Xo+BlPpM | ||||||
|  | APbncIztaYOfL02lvCOhbx5sxPk6TH5dIxzkBAc3T9X6uY+hTY36QT+SjN5z0EBi | ||||||
|  | UghxwMM8r2G4ip3XLEFgyFDuDzVgRRuGBbSGtOEIqt49lvmBEWKaxDdYftdlDpKq | ||||||
|  | qV8NlQJJnBJ9cNZlWzlheRALHMvCUsfnX60piWbQjYrq6j+lF9VjUKUClD92/jhS | ||||||
|  | LaeaQ6vMlCabYNOf+vq8J3L2oRwHkLMPHBa/a5vNT3bL8Q/Sjuegi+zD68k/fobt | ||||||
|  | Y7gYL/qyhrFfIvGyN0Jf92DTKdj+1ma3kIaG+REeAx5W8NtRdfnSlS+DA5O0mp0P | ||||||
|  | oMZICs0Xbq474XYkhBoz7smWA4DLT86on7qcCo24CvII9YU0VDYHNtnDi8CaStea | ||||||
|  | dvGFDiQS5X3Awwsgt5OWJSgBx+NL9piiZq9Eu5E3CGpoYNiTCANrRV21qmyf090h | ||||||
|  | md01QUU/f1IMa+wBgryTW94OUhSMmknB9roFAmQaD9Xnj6ecGJkq2ZiytpJ37QiV | ||||||
|  | 8h2ZM9K1PUD4/QulCG/U4IG1II7ef1IUyEFpj6BB7CGCHq+qJ7QKT6Kc/quEewHB | ||||||
|  | eUjG+FvSmCCgfVf/hqYvul7ybbiqMgCSTSziKF7tN8DuFfIZo9EGdckKXxBgQ7ua | ||||||
|  | BRVnSZw2vh8nJ8jtGkrw/grKwHL/yA0CAwEAAaN2MHQwDAYDVR0TAQH/BAIwADAT | ||||||
|  | BgNVHSUEDDAKBggrBgEFBQcDAjAPBgNVHQ8BAf8EBQMDB6AAMB0GA1UdDgQWBBQi | ||||||
|  | MnF9Np64W1zshqQxe8Cgvm8hFDAfBgNVHSMEGDAWgBQBl2OoCoAweUqsfVQNmL9H | ||||||
|  | 3jtl2DANBgkqhkiG9w0BAQwFAAOCAgEAsNqR/SziOtCRS+n7FGxJ+3FpfACqV4Yl | ||||||
|  | MDTbpRe0qUcbMDetWZALdPS5gNW/4rj2cpacd3eQI6qRLtUW/l8QGqZl8OjslA2X | ||||||
|  | /N+9Alza8D+cv6Almx1TclcYJF/Z0NneJ4DgdFXJAPK3zf5eD73N/7EohNWy70Bj | ||||||
|  | J/4cmYL3T1Pq/FhN/9DV9HoSaRxy9naRjZ3dZXC4CgFRExXw+sEHLDzOHrLDz2xN | ||||||
|  | 4qOjYUH3I1rGWXsSGRFztgNTnA02hPxG1VHzmTvwPjoBxn2/QGTMuXnk8xQGGtdy | ||||||
|  | G8oav2RLBqvh0AD4fqd2fnMezJiRipXzYmWb1bySe48HRtHJrZ/aQQrUlPdNQwAe | ||||||
|  | EeixS97JEdBqtag41VhRBFxF9nML8ozA6cgj+Jm2M6OGU+M3tVhioEiuKPm6jXgl | ||||||
|  | 3v8AA2CQrSJjhkTzinxE4FXa9O8INwziHSCE3GNIZaDCMYj7R8tTVcLaQWzUtdj/ | ||||||
|  | i+0fI61n3ZOabvhLXttsdrtqcfNbrxCBVezoweg2RrVFcJc2GojCwJWt6a0cO+69 | ||||||
|  | ggHZgpAwXsMmyMhhCbBXhnxBrsuGbN7f3YN2ty2veeFtp8uDvjCqmgJ5AG32w5E4 | ||||||
|  | Ck9Rup6lwgq3YTQ4pTxl2y26HinobPrMzsZiWkZhN7elnVZL00kSF2Qn6x6xuAap | ||||||
|  | Z5oPkwZtYnM= | ||||||
|  | -----END CERTIFICATE----- | ||||||
|  | @ -15,7 +15,7 @@ data.location=~/.task | ||||||
| taskd.server=task.mossnet.lan:53589 | taskd.server=task.mossnet.lan:53589 | ||||||
| #taskd.server=10.0.69.4:53589 | #taskd.server=10.0.69.4:53589 | ||||||
| taskd.ca=~/.task/keys/ca.cert | taskd.ca=~/.task/keys/ca.cert | ||||||
| taskd.key=~/.task/keys/private.key | taskd.key=/run/secrets/taskwarrior-private | ||||||
| taskd.certificate=~/.task/keys/public.cert | taskd.certificate=~/.task/keys/public.cert | ||||||
| taskd.trust=ignore hostname | taskd.trust=ignore hostname | ||||||
| taskd.credentials=mossnet\/anish\/1647259c-e340-405c-a38b-11ac18e34688 | taskd.credentials=mossnet\/anish\/1647259c-e340-405c-a38b-11ac18e34688 | ||||||
|  |  | ||||||
|  | @ -28,6 +28,10 @@ in | ||||||
|   age.secrets.mossnet.file = "${self}/secrets/mossnet.age"; |   age.secrets.mossnet.file = "${self}/secrets/mossnet.age"; | ||||||
|   age.secrets.mossnet.owner = "anish"; |   age.secrets.mossnet.owner = "anish"; | ||||||
| 
 | 
 | ||||||
|  |   # Taskwarrior private key | ||||||
|  |   age.secrets.taskwarrior-private.file = "${self}/secrets/taskwarrior-private.age"; | ||||||
|  |   age.secrets.taskwarrior-private.owner = "anish"; | ||||||
|  | 
 | ||||||
|   # We don't plug USBs into servers |   # We don't plug USBs into servers | ||||||
|   services.devmon.enable = true; |   services.devmon.enable = true; | ||||||
| 
 | 
 | ||||||
|  |  | ||||||
|  | @ -7,9 +7,10 @@ let | ||||||
|   helix = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAKrL6IDHNnHmxi0q9nzu87NOyidPm3HpE7klU368lEf root@helix"; |   helix = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAKrL6IDHNnHmxi0q9nzu87NOyidPm3HpE7klU368lEf root@helix"; | ||||||
|   curve = [ system user ]; |   curve = [ system user ]; | ||||||
|   allUserKeys = [ system user mossnet ]; |   allUserKeys = [ system user mossnet ]; | ||||||
|   systemOnly = [ system mossnet lituus helix ];  |   systemOnly = [ system mossnet lituus helix ]; | ||||||
| in | in | ||||||
| { | { | ||||||
|  |   "taskwarrior-private.age".publicKeys = curve; | ||||||
|   "fastmail.age".publicKeys = allUserKeys; |   "fastmail.age".publicKeys = allUserKeys; | ||||||
|   "mossnet.age".publicKeys = allUserKeys; |   "mossnet.age".publicKeys = allUserKeys; | ||||||
|   "curve-wg.age".publicKeys = curve; |   "curve-wg.age".publicKeys = curve; | ||||||
|  |  | ||||||
							
								
								
									
										
											BIN
										
									
								
								secrets/taskwarrior-private.age
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										
											BIN
										
									
								
								secrets/taskwarrior-private.age
									
									
									
									
									
										Normal file
									
								
							
										
											Binary file not shown.
										
									
								
							
		Loading…
	
		Reference in a new issue