add gitea ssh keys

home/private_dot_ssh/config

@@ -1,3 +1,7 @@
 Host github.com
   AddKeysToAgent yes
   IdentityFile /run/secrets/github/starr-dusT
+
+Host git.tstarr.us
+  AddKeysToAgent yes
+  IdentityFile /run/secrets/gitea/tstarr

provision/modules/system/secrets.nix

@@ -13,6 +13,9 @@ in {
       # Github secrets
       secrets."github/starr-dusT" = { owner = "${user}"; };
 
+      # Gitea secrets
+      secrets."gitea/tstarr" = { owner = "${user}"; };
+
       # Wireguard secrets
       secrets."wireguard/kestrel" = { owner = "${user}"; };
       secrets."wireguard/bulwark" = { owner = "${user}"; };

provision/secrets/secrets.yaml

@@ -3,7 +3,7 @@ homelab:
 github:
     starr-dusT: ENC[AES256_GCM,data:/188MCdN6ls5tJ2URQ4hz2Ku7bOHPsR3/i2t9oH3HSwGEzghpwFfasc20mb5AXMa0+SUWRxfd5xKESo0nlnHlM4OCuS2oNG04Y1KXxCYb71EgKn4GhCY8H3/LN7AdlJ9yAi3wEk3cYZUPHTAmTgxuegiJ3+VlZpjikKDM/fvYq7Nl5SPdRrDrjTDEKn8pgeGoBYQnCTSAl86kVRzSqvkqCNThu4f+ipXw2vBCz0nN8aCj/OyTQwNUerPNiWzzCRN9rQr2cGKMiZ1zqpGalBFfmxhNpZxDzSHbvAA5Q69IG+Uka0dSaafPYTw6r8imEp0jHy8GfVHF/nhSv3wwMBjqBd1iVeyZ5EAYTUoMD3hlxASUnSL6OZkPlEZsEue5eGp0r5T7zwejefcxQ/4Tn46xKezybck4pjIb3txSl8Hvsjt78+CNO3Uw2k7B8SM6xsN7igYfcLXuUi1vYCB3Yhr6pRbEU5dAaLNYIPCTfX7tpFYHF9Xh6d60Y5YsgoXg3TNB+sbzkdvvT6q3w==,iv:fZ7nConYY/OhIqHrxxKXUuugMrKjvVBFuTFgq+w/yvM=,tag:awLu6xhqtJOkEGkde50vzQ==,type:str]
 gitea:
-    tstarr: ENC[AES256_GCM,data:7mZYvfYIL+kSu0ai/w6XzwkW5mwhgk9bP1du7pkS0Di/B+3vn/BubaGheB/Y/XgvADzFQIiDqu5tQH/ArqXdYMv79CcRTUxqulPm1GC74fBeXzS+ktKEoUrdjC0ZUIJeega/WGchBKmOxl0Y70s40srhPNddlSIkDJ4WY4WS7/8AbGfz4XLBhXLOI4gXpFT264YFM3PR2JpAsIgpMVDufKTaXMlIcH3lJO2uC4YEa6gb/g1vsBVTGG7OnM5gVnJWD21hFTNVmBT1amOU81k9RlEGSlKSik+s187SAickz6sYf7l1j5wT6PCoG7beoZiEsZmbQXo6FzgIWn8OpKZ56f7e73QmEkvWJHudUe8WlMZ3zV15I9knUFKmgUJfzT3RSEx3XV0jreNRK7IuMODjNNV1WGpVTMgui2sZVt5nYtcivAEuAtV75bVBflZRrqYT/O4u9rm59f5tPKyBZhiDCF5Xz+dlTOVQHZUEd1eOvO59/RAlcWHDAwGM9/9wEPAqdmyin26OmusTtH76liC+eLJd8VbCKreFlStlSu5+gJu/hUyr5RKqB3nIPUdsgJRrM9LanITkPNOFjQhDGdx1BAj1OvxhFqlsTTSIg/B1JbRRKKeKP1fSl1MLlUeEF+u+XnRp+hVsOXQfOCuXsFxzvnLe/sLQ7+bxp71nw4sLo2uBS1PaU946/TBC+2Yt4nInwqIL2hzgvCG+aYNPIjv4ogqTj6XAQACwweYd6SF8AjR9hrh2aaZPvJEq9ZYyL2wOrjMld8qLAIuSQ7ebmicmjk25uHz58kribsLgdBlGrif55G6bHnBHRnYuYYrtosy8qun5DsU1PDy7fe5pQUsF9nqpWdWKmAtITmX7bqLlfCeKIDyl6l3vwjOnUpxPrsH2dILXmmKtmLiBrQ2/sbjyKOtULfkZBVT2x7PqUF+Tqhi/nLbuc7E6UtI1qg+LkRO4bcM33pkhizHkMLY8bdQZpyTSqQ63XKm8vBvpZOpahYSjeaHdI3sAXCXRdAWu63DVwmHEfVTZPxnUZEOPyfWDPfr8t7YMDv2rJXkin8+fc5a5LN9z0xXUcXMOnWm4zgp+H4pvDjDvG1NZx/VLoQ0IUl+yBzreke6gPoKtPbhC4fhq0ZvOSe+tWOvYJeylB5jS7youYOuvV/ra9kR/4spjdUrMPrbbpkqkaF9RevLMmiYBCCFhBaPstapEgD1F5c9oOWIXws2JxhnVZWxU8x5S7Cxe62J9ykbz8OZHfsLD+KMrfrMdOoukYhXyrzKLyzCFPGyszE/6omXiw87nbUwU5hJim3xYchTfx9rG1/59kfbUtepO3xcxqWx3Ov3zvoa5PkbvVVmETuEcLgHISrDprIJWFm5/K/C7js3R414VPCbkga8KUAArHSOT3+1wBqbFw5+7W6218jsc3UUhh6jCbSd6ViVePscD9GJqmhnXF+Ms8LADQbNUvHdwPPYMsP1e/z8AGxaM4LfrXXF+bTGPJOj6qeeWce8nTE7nqap2GERUF9vd3ZsSxiXtU6x5ceyEbGKXOMYBpUVUypW6VcWfPmU1uxULg+0Frfa3D/D707ss+Lp+gwydm/ODJL3zS4EgATEUiEWMu1u92WezLBNobffdmWv1dS4+Hy1VTzlXHD1wDqLEgjr+3MHcyvftTV0olnpfmj36I2aAFpYVtH59fnRtHpwkGq2zVmPYmlT5Zgm9d1ZTe1AEYxrPjdSedQJA/w58kDQzOVDJiFBoPBfjDhEFXYRqxnqmJbvsfKucFOvc6dEDQtvEhi4ShuvpnWQVywLfCR4IqEjROyBBq5Y1ilIXRCxz57037Pt+neof7QSwemJBrWHYSXYGDSi5Me+CuxkByhaRo+Oc9MJKG0AtEoO5v0VpwXsOmHCCJioyI55pXRo3LnSQ4MuODMvXQFwZu8qGqikCqXryKyYOrskwe0V9E8i4eQrBaQRt+oi+3jpwjnL80bhqjC0w4E87401jrmh/LAvgQw+1cSxjPtxaClpk9SZS4mfqZZXQDPfHuig1ZFW9fYunNZyfk9/8yx66V1SmjUqqhmY5g8DLqQBaYrOFB/LjBgafLI+d1Q8WQdv2EBFma5TGcojlL8JumLbcX3kzQCbbDXxBpZzbYK234geyk7P/a2IBoh5eRldQxgDkIPBNwo0YYYmnA+sJm12/lwXNfKbBxV/df4Q7CK7nM4cfsjecEYvVbhmOCnu9dW1ozYASB+Tg/qHAS87tnGrhWrAhceakl31W0HFSqXANx1duh6tX1DvvAjyetIyYa27OmpfB0KeyL3gyK5Siz976AJtzY6K7IW6iPFc1AfZfTFkCxbfSK3keLle0SwmCPGITS0mPZZdhxpK9HpCRgW4OzAAyZGmw76/J8uJKN70h9clanwGgtA2K8m1IiVPNhL5b9UYSf9b/1mIoMr6JpoYl2OVSK4YVDMdiBdGz+4xlkH2sN14W5TTjrLm4oe1DKhschxqhK9TqU8jHoD/t5twA5kbxhIqUAYnjzJbjYH9IDS620P/umLzprjSs+ArQ2EHZ//oWaNqXPiF85OPSPEzWQ7cLiTuFny1vBI+mx7QBXkExtWBwAlMy06KP2sTe2TV9KNHqo0yIqL/NDQfnkJQ3VXu1rYgPVEpND7SnzEdeTV1cCj8YTAATlUiBXNnEXw142bHKP2yIZpyvcohqlPy9k/2apm4el41IrVeku3L2Sx+ZdRPAFdGbSsNd8DWezVtDTqAEJfYoDAJoeMiJ46mAg+tJyGxR6tzSEY46uNwjZHkXXMv4Pt/lTD+J+ym5Fmlxqm2b8gdTZoEMKRGgZ1RbM2PCHXiRCOjinwRYn6s1UEgRrFsgIEXVdHPb7AszyvayjYAuneQPudBoahIQZ1gHHwjbyf3uICkS6S9GvqeeEW+E0h3P3VGBN+b6H7YrT2px7fZs/Urob32sYuon8Hv3Y/ImgM1d7AwOOF3ZbmfTwcU1EQQjmqslGiEBYqTGx8rb9eOuknf49uosmOvfYWyJF0Zx4huq3Q2r6pTSWcC7mmqHskrlVCgO7QwTQzGZvy09CYlMFsIoMz5RvxxnLMbEwt6DFNYm7Ul6TvNoRqCMBfiuMBY/A8nX4c+Y4bijZVjCLcf7Qvtmhl2XTwaxag+LkRLpBo0z6UUkIl8qXuwB9lEPGQAAOVWHHTqxXdCQP9EcdhDim8P8aykdzvIqZ1rf+UhZquV79KSiGUWatttTZgOUHRfablHhUgxUAvM/ROoWWpudq1ZWiYneM6PutXkBBr8DwnbBnyvxFYy0+PZbTAQeFMtMKSqSBZ0JfhcfDHeOvaC0ArEzbpN1FWDKynopH9AR0eemGJ/zkaZ+/xfzOCErkD4Fq7fvC+fPurTZhsjeW054OYtf/MwNTzxyer4ZfvNxEwye9Q21oB3atdXtICDLNcVpn/1iyXW3pRbzQiuMBd9Ju/45TXU=,iv:PekiYvYc7y00O5Xkb6RyL6moiVZcawbUJIpMNFDkqjU=,tag:eumHpqUXRLMRgMw6Px3bNQ==,type:str]
+    tstarr: ENC[AES256_GCM,data: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,iv:hXjqKvvI/KDDUUcBR2jdXJ1ppY3yh3sSnOsxgoDBcR0=,tag:t+vxMd8knIn6xQF+TrPRqA==,type:str]
 wireguard:
     kestrel: ENC[AES256_GCM,data:RLDesKMUtpurv+C2YkxMcbBdiP6cHHUGRCYkgO5Qf6FZLxl4vKRyhTdDzWc=,iv:V/9bpCMTT9YQ8QCNYdpfrhu0lc4Yt5Eu0DJMc0uZkNA=,tag:kFnN7GwT4UKqUyvOdlbXxg==,type:str]
     bulwark: ENC[AES256_GCM,data:wMMZ1zJ2nPvkAFA5SgcSyl1z+9blDqf/6pVp8olmGaXJsbWc+/gBtDKzTog=,iv:2lZdsFYZhiTumRmYN/q2606gpyS7lCjf4cgeaCIjoxo=,tag:o81+t3pRwfomEys1veQecA==,type:str]
@@ -16,16 +16,9 @@ sops:
     hc_vault: []
     age:
         - recipient: age12g0gtcnhyaghs9vc5528yrstq4spe8p36fflhpwj79yz8jq9qg2s4v6mms
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2RTFNMDd5K3Vza0plMFJr
-            ZFdpZ2VWV2JEdE1yOUdtS1FLbFp3alpIR25NCkN0dVhYaFZkY1pUQWRhaEY0SjYx
-            MFlaTjlYWFVLSnY1UmtJcmZobUZUUWcKLS0tIHBJb1lPRkJvcHNiVXhZeStuN2c1
-            ajM3YlJYU21PaHRyaGlUNy84RHN2SE0KAvMFdqnfV0TzfNcBdY7OvRLZrBb9uXSI
-            3y50yFhYnyXtWKLQFTwjN6S5dLaZgqhaGhEQyNCQxb5RGZJDR6g7Yw==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-01-07T18:00:07Z"
-    mac: ENC[AES256_GCM,data:O8Ml5iVTIuIXnRuJGiB9OX87GmDuD6ua1xctOGtMEag2LkNxb5Zn/0ncvaC9imW8Pto1r0md9XQRISXUhOWVfTYVyqnDeGHD/7W2Xx/ad9zI4vpr1pFrZL/580XkpmEYAnnQaCH0R0Ji2t6urNYvMXztDAk+yfK+5LRA3y/6pjc=,iv:bHoo3mM1MbCHcRgIGF1XM5xVhQewQjZBHXeeflN1xM0=,tag:voqKvZEVNBT7ylahDS1h8w==,type:str]
+          enc: "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2RTFNMDd5K3Vza0plMFJr\nZFdpZ2VWV2JEdE1yOUdtS1FLbFp3alpIR25NCkN0dVhYaFZkY1pUQWRhaEY0SjYx\nMFlaTjlYWFVLSnY1UmtJcmZobUZUUWcKLS0tIHBJb1lPRkJvcHNiVXhZeStuN2c1\najM3YlJYU21PaHRyaGlUNy84RHN2SE0KAvMFdqnfV0TzfNcBdY7OvRLZrBb9uXSI\n3y50yFhYnyXtWKLQFTwjN6S5dLaZgqhaGhEQyNCQxb5RGZJDR6g7Yw==\n-----END AGE ENCRYPTED FILE-----            \n"
+    lastmodified: "2024-01-07T18:31:33Z"
+    mac: ENC[AES256_GCM,data:dP6cK5lIzcE7e3ImEMWyBxa4OpjNatUKfF7kG6sksi8SpBO9ywChNiUx5uyajvyUIWMmlsITfapnuuWbn5WyXtfFAK1bcLk9QnDlp9ImtjZAnDLFGoP+TUNPtmavhLnuz4Lt2cV0TIrZEPvoPEWNUyWy0Pzi2ng5lxhqz4k1NAs=,iv:pVenOugFhgdvI4v3UGj5PmrTU3FPQQLmWxU9s+o3o5Y=,tag:NinFr0jVrqFgRuimQuHUsg==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.7.3