From f3ef4ff11cde863ed43f38172f5dc005a8374486 Mon Sep 17 00:00:00 2001 From: Dominik Polakovics Date: Mon, 9 Feb 2026 03:06:46 +0100 Subject: [PATCH] feat: change openclaw to a vm and give read access to a db --- hosts/fw/configuration.nix | 23 ++-- hosts/fw/modules/dnsmasq.nix | 16 ++- hosts/fw/modules/openclaw-vm.nix | 206 ++++++++++++++++++++++++++++ hosts/fw/modules/wireguard.nix | 4 + hosts/web-arm/configuration.nix | 3 +- hosts/web-arm/modules/mysql.nix | 31 ++++- hosts/web-arm/modules/wireguard.nix | 14 ++ hosts/web-arm/secrets.yaml | 114 +++++++-------- secrets.yaml | 34 +++++ todos.md | 2 + 10 files changed, 372 insertions(+), 75 deletions(-) create mode 100644 hosts/fw/modules/openclaw-vm.nix create mode 100644 hosts/web-arm/modules/wireguard.nix create mode 100644 secrets.yaml diff --git a/hosts/fw/configuration.nix b/hosts/fw/configuration.nix index 4b54b16..083913b 100644 --- a/hosts/fw/configuration.nix +++ b/hosts/fw/configuration.nix @@ -38,7 +38,8 @@ ./modules/ai-mailer.nix # ./modules/wazuh.nix - ./modules/openclaw.nix + # ./modules/openclaw.nix # Container: gateway/webchat on .97.60 + ./modules/openclaw-vm.nix # VM: daemon/onboarding on .97.61 # web ./modules/web @@ -71,8 +72,8 @@ ./modules/setupnetwork.nix ./modules/set-nix-channel.nix # Automatically manage nix-channel from /var/bento/channel ./modules/grafana-monitor.nix # Grafana online status monitor - - + + ./hardware-configuration.nix ]; @@ -100,8 +101,8 @@ hardware.graphics = { enable = true; extraPackages = with pkgs; [ - intel-media-driver # VAAPI driver (iHD) for modern Intel GPUs - vpl-gpu-rt # Intel VPL/QSV runtime for Gen 12+ (N100) + intel-media-driver # VAAPI driver (iHD) for modern Intel GPUs + vpl-gpu-rt # Intel VPL/QSV runtime for Gen 12+ (N100) intel-compute-runtime # OpenCL support for tone-mapping ]; }; @@ -114,15 +115,15 @@ sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ]; sops.defaultSopsFile = ./secrets.yaml; - + environment.systemPackages = with pkgs; [ bento - conntrack-tools # view network connection states - ethtool # manage NIC settings (offload, NIC feeatures, ...) + conntrack-tools # view network connection states + ethtool # manage NIC settings (offload, NIC feeatures, ...) git - htop # to see the system load - tcpdump # view network traffic - vim # my preferred editor + htop # to see the system load + tcpdump # view network traffic + vim # my preferred editor wol inotify-tools ]; diff --git a/hosts/fw/modules/dnsmasq.nix b/hosts/fw/modules/dnsmasq.nix index 9e16d42..940eae7 100644 --- a/hosts/fw/modules/dnsmasq.nix +++ b/hosts/fw/modules/dnsmasq.nix @@ -5,7 +5,7 @@ enable = true; settings = { port = "53"; - bind-interfaces = true; # force dnsmasq to bind immediately + bind-interfaces = true; # force dnsmasq to bind immediately expand-hosts = true; log-dhcp = true; @@ -67,7 +67,7 @@ dhcp-host = [ "24:df:a7:b1:1b:74,${config.networkPrefix}.96.101,rmproplus-b1-1b-74" - + "30:05:5c:56:62:37,${config.networkPrefix}.99.100,brn30055c566237" "1a:c4:04:6e:29:bd,${config.networkPrefix}.97.2,omada" "02:00:00:00:00:04,${config.networkPrefix}.97.6,matrix" @@ -85,6 +85,8 @@ "cc:50:e3:bc:27:64,${config.networkPrefix}.100.112,Nuki_Bridge_1A753F72" "34:6f:24:f3:af:ad,${config.networkPrefix}.100.137,daikin86604" "34:6f:24:c1:f8:54,${config.networkPrefix}.100.139,daikin53800" + + "02:00:00:00:03:01,${config.networkPrefix}.97.61,openclaw-vm" ]; address = [ @@ -92,13 +94,13 @@ "/omada.cloonar.com/${config.networkPrefix}.97.2" "/web-02.cloonar.com/${config.networkPrefix}.97.5" "/pla.cloonar.com/${config.networkPrefix}.97.5" - "/piped.cloonar.com/${config.networkPrefix}.97.5" # Replaced by Invidious - "/pipedapi.cloonar.com/${config.networkPrefix}.97.5" # Replaced by Invidious + "/piped.cloonar.com/${config.networkPrefix}.97.5" # Replaced by Invidious + "/pipedapi.cloonar.com/${config.networkPrefix}.97.5" # Replaced by Invidious "/invidious.cloonar.com/${config.networkPrefix}.97.5" "/fivefilters.cloonar.com/${config.networkPrefix}.97.5" "/n8n.cloonar.com/${config.networkPrefix}.97.5" "/dev.cloonar.com/${config.networkPrefix}.97.15" - "/.ddev.site/${config.networkPrefix}.97.15" # Wildcard for ddev projects + "/.ddev.site/${config.networkPrefix}.97.15" # Wildcard for ddev projects "/home-assistant.cloonar.com/${config.networkPrefix}.97.20" "/mopidy.cloonar.com/${config.networkPrefix}.97.21" "/snapcast.cloonar.com/${config.networkPrefix}.97.21" @@ -167,13 +169,15 @@ "/bath-bulb-0.cloonar.smart/${config.networkPrefix}.100.42" "/paraclub.at/188.34.191.144" + + "/openclaw-vm.cloonar.com/${config.networkPrefix}.97.61" ]; }; }; systemd.services.dnsmasq = { requires = [ "network-online.target" ]; - after = [ "network-online.target" ]; + after = [ "network-online.target" ]; }; networking.firewall.allowedUDPPorts = [ 53 67 ]; diff --git a/hosts/fw/modules/openclaw-vm.nix b/hosts/fw/modules/openclaw-vm.nix new file mode 100644 index 0000000..a4d5508 --- /dev/null +++ b/hosts/fw/modules/openclaw-vm.nix @@ -0,0 +1,206 @@ +# OpenClaw VM — Ubuntu 24.04 QEMU guest for interactive `openclaw onboard` setup. +# Runs alongside the Podman container (openclaw.nix on .97.60) on a separate IP (.97.61). +# The container serves the gateway/webchat; this VM is for the daemon/onboarding workflow. +{ config, pkgs, lib, ... }: + +let + vmName = "openclaw-vm"; + vmStateDir = "/var/lib/${vmName}"; + vmMac = "02:00:00:00:03:01"; + vmIp = "${config.networkPrefix}.97.61"; + gateway = "${config.networkPrefix}.97.1"; + tapDevice = "vm-openclaw"; + + sshAuthorizedKeys = [ + "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDN/2SAFm50kraB1fepAizox/QRXxB7WbqVbH+5OPalDT47VIJGNKOKhixQoqhABHxEoLxdf/C83wxlCVlPV9poLfDgVkA3Lyt5r3tSFQ6QjjOJAgchWamMsxxyGBedhKvhiEzcr/Lxytnoz3kjDG8fqQJwEpdqMmJoMUfyL2Rqp16u+FQ7d5aJtwO8EUqovhMaNO7rggjPpV/uMOg+tBxxmscliN7DLuP4EMTA/FwXVzcFNbOx3K9BdpMRAaSJt4SWcJO2cS2KHA5n/H+PQI7nz5KN3Yr/upJN5fROhi/SHvK39QOx12Pv7FCuWlc+oR68vLaoCKYhnkl3DnCfc7A7" + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIRQuPqH5fdX3KEw7DXzWEdO3AlUn1oSmtJtHB71ICoH Generated By Termius" + ]; + + gitRepoUrl = "https://git.cloonar.com/openclawd/config.git"; + + # Cloud-init user-data + userData = pkgs.writeText "user-data" '' + #cloud-config + users: + - name: openclaw + shell: /bin/bash + sudo: ALL=(ALL) NOPASSWD:ALL # needed for openclaw onboard --install-daemon; VM is internal-only, SSH-key-only + groups: [sudo] + ssh_authorized_keys: + ${lib.concatMapStringsSep "\n " (k: "- ${k}") sshAuthorizedKeys} + + package_update: true + package_upgrade: true + packages: + - git + - curl + - build-essential + + runcmd: + - [bash, /var/lib/cloud/scripts/setup-openclaw.sh] + + write_files: + - path: /etc/cloud/cloud.cfg.d/99-disable-network-config.cfg + content: | + network: {config: disabled} + - path: /var/lib/cloud/scripts/setup-openclaw.sh + permissions: "0755" + content: | + #!/bin/bash + set -euxo pipefail + # Wait for network to be fully ready + for i in $(seq 1 30); do + if curl -fsS --max-time 5 https://nodejs.org/ >/dev/null 2>&1; then + break + fi + echo "Waiting for network... ($i/30)" + sleep 2 + done + # Install Node.js 22 from official binary tarball + NODE_MAJOR=22 + NODE_VERSION=$(curl -fsSL "https://nodejs.org/dist/latest-v''${NODE_MAJOR}.x/" | grep -oP 'node-v\K[0-9.]+' | head -1) + curl -fsSL "https://nodejs.org/dist/v''${NODE_VERSION}/node-v''${NODE_VERSION}-linux-x64.tar.xz" \ + | tar -xJf - -C /usr/local --strip-components=1 + # Verify node and npm are available + node --version + npm --version + # Install OpenClaw globally + npm install -g openclaw@latest + # Clone the repo as openclaw user + mkdir -p /home/openclaw/.openclaw + su - openclaw -c 'git clone ${gitRepoUrl} /home/openclaw/.openclaw/workspace' + ''; + + # Cloud-init meta-data + metaData = pkgs.writeText "meta-data" '' + instance-id: ${vmName} + local-hostname: ${vmName} + ''; + + # Cloud-init network-config (netplan v2, MAC-based match) + networkConfig = pkgs.writeText "network-config" '' + network: + version: 2 + ethernets: + id0: + match: + macaddress: "${vmMac}" + addresses: [${vmIp}/24] + routes: + - to: default + via: ${gateway} + nameservers: + addresses: [${gateway}] + ''; + + ubuntuImageUrl = "https://cloud-images.ubuntu.com/noble/current/noble-server-cloudimg-amd64.img"; + ubuntuImageName = "noble-server-cloudimg-amd64.img"; +in +{ + # Ensure KVM is available + boot.kernelModules = [ "kvm-intel" ]; + + # State directory + systemd.tmpfiles.rules = [ + "d ${vmStateDir} 0755 root root - -" + ]; + + # Init service: download cloud image, create disk, generate seed ISO + systemd.services."${vmName}-init" = { + description = "Initialize ${vmName} disk and cloud-init seed"; + wantedBy = [ "multi-user.target" ]; + before = [ "${vmName}.service" ]; + requiredBy = [ "${vmName}.service" ]; + + path = with pkgs; [ curl qemu_kvm cdrkit ]; + + serviceConfig = { + Type = "oneshot"; + RemainAfterExit = true; + }; + + script = '' + set -euo pipefail + + mkdir -p "${vmStateDir}" + + # Download Ubuntu cloud image if not present + if [ ! -f "${vmStateDir}/${ubuntuImageName}" ]; then + echo "Downloading Ubuntu 24.04 cloud image..." + curl -fSL -o "${vmStateDir}/${ubuntuImageName}" "${ubuntuImageUrl}" + fi + + # Create qcow2 disk from cloud image if not present + if [ ! -f "${vmStateDir}/disk.qcow2" ]; then + echo "Creating qcow2 disk from cloud image..." + qemu-img convert -f qcow2 -O qcow2 "${vmStateDir}/${ubuntuImageName}" "${vmStateDir}/disk.qcow2" + qemu-img resize "${vmStateDir}/disk.qcow2" 20G + fi + + # Always regenerate seed ISO (picks up config changes) + # Cloud-init expects files named user-data, meta-data, network-config + echo "Generating cloud-init seed ISO..." + tmpdir=$(mktemp -d) + cp ${userData} "$tmpdir/user-data" + cp ${metaData} "$tmpdir/meta-data" + cp ${networkConfig} "$tmpdir/network-config" + + genisoimage -output "${vmStateDir}/seed.iso" \ + -volid cidata -joliet -rock \ + "$tmpdir/user-data" "$tmpdir/meta-data" "$tmpdir/network-config" + + rm -rf "$tmpdir" + ''; + }; + + # QEMU VM service + systemd.services."${vmName}" = { + description = "OpenClaw QEMU VM"; + wantedBy = [ "multi-user.target" ]; + after = [ "${vmName}-init.service" "network-online.target" ]; + requires = [ "${vmName}-init.service" ]; + wants = [ "network-online.target" ]; + + path = with pkgs; [ iproute2 qemu_kvm ]; + + serviceConfig = { + Type = "simple"; + Restart = "on-failure"; + RestartSec = 10; + + ExecStartPre = pkgs.writeShellScript "${vmName}-tap-setup" '' + set -euo pipefail + # Clean up stale TAP device if it exists + if ip link show ${tapDevice} &>/dev/null; then + ip link set ${tapDevice} down || true + ip link delete ${tapDevice} || true + fi + # Create TAP device and attach to server bridge + ip tuntap add dev ${tapDevice} mode tap + ip link set ${tapDevice} master server + ip link set ${tapDevice} up + ''; + + ExecStart = lib.concatStringsSep " " [ + "${pkgs.qemu_kvm}/bin/qemu-system-x86_64" + "-machine type=q35,accel=kvm" + "-cpu host" + "-smp 2" + "-m 4096" + "-drive file=${vmStateDir}/disk.qcow2,format=qcow2,if=virtio" + "-drive file=${vmStateDir}/seed.iso,format=raw,if=virtio,media=cdrom" + "-netdev tap,id=net0,ifname=${tapDevice},script=no,downscript=no" + "-device virtio-net-pci,netdev=net0,mac=${vmMac}" + "-nographic" + "-serial mon:stdio" + ]; + + ExecStopPost = pkgs.writeShellScript "${vmName}-tap-cleanup" '' + if ip link show ${tapDevice} &>/dev/null; then + ip link set ${tapDevice} down || true + ip link delete ${tapDevice} || true + fi + ''; + }; + }; +} diff --git a/hosts/fw/modules/wireguard.nix b/hosts/fw/modules/wireguard.nix index b8bd074..6a16ad8 100644 --- a/hosts/fw/modules/wireguard.nix +++ b/hosts/fw/modules/wireguard.nix @@ -33,6 +33,10 @@ publicKey = "tLsvuXo6Cp8tzjJau1yJZ9apeQvYa+cGrnAXBBifO3Y="; allowedIPs = [ "${config.networkPrefix}.98.205/32" ]; } + { # web-arm — replace publicKey after generating keypair + publicKey = "VjbYy4qKkFrjxxNU+fCam+FycBOkjNiB0t5YOOCIpFU="; + allowedIPs = [ "${config.networkPrefix}.98.10/32" ]; + } ]; }; wg_epicenter = { diff --git a/hosts/web-arm/configuration.nix b/hosts/web-arm/configuration.nix index f4e0e9f..932e29e 100644 --- a/hosts/web-arm/configuration.nix +++ b/hosts/web-arm/configuration.nix @@ -40,7 +40,8 @@ # otherwise the build will fail ./modules/sa-core.nix ./modules/scana11y.nix - + + ./modules/wireguard.nix ]; nixpkgs.overlays = [ diff --git a/hosts/web-arm/modules/mysql.nix b/hosts/web-arm/modules/mysql.nix index 23b8159..5cff9bd 100644 --- a/hosts/web-arm/modules/mysql.nix +++ b/hosts/web-arm/modules/mysql.nix @@ -1,4 +1,4 @@ -{ pkgs, ... }: +{ pkgs, config, ... }: let mysqlCreateDatabase = pkgs.writeShellScriptBin "mysql-create-database" '' @@ -71,10 +71,39 @@ in { max_allowed_packet = "64M"; transaction_isolation = "READ-COMMITTED"; binlog_format = "ROW"; + bind-address = "127.0.0.1,10.42.98.10"; }; }; }; + # Allow MySQL access from WireGuard peers + networking.firewall.interfaces."wg_cloonar".allowedTCPPorts = [ 3306 ]; + + # Read-only MySQL user for openclaw-vm (via WireGuard) + sops.secrets.openclaw-mysql-password = {}; + + systemd.services.openclaw-mysql-init = { + description = "Create openclaw MySQL user with read-only access to support_cloonar_dev"; + after = [ "mysql.service" ]; + requires = [ "mysql.service" ]; + wantedBy = [ "multi-user.target" ]; + serviceConfig = { + Type = "oneshot"; + RemainAfterExit = true; + }; + script = '' + password=$(cat ${config.sops.secrets.openclaw-mysql-password.path}) + ${config.services.mysql.package}/bin/mysql -e \ + "CREATE USER IF NOT EXISTS 'openclaw'@'10.42.98.%' IDENTIFIED BY '$password';" + ${config.services.mysql.package}/bin/mysql -e \ + "ALTER USER 'openclaw'@'10.42.98.%' IDENTIFIED BY '$password';" + ${config.services.mysql.package}/bin/mysql -e \ + "GRANT SELECT ON support_cloonar_dev.* TO 'openclaw'@'10.42.98.%';" + ${config.services.mysql.package}/bin/mysql -e \ + "FLUSH PRIVILEGES;" + ''; + }; + services.mysqlBackup.enable = true; services.mysqlBackup.databases = [ "mysql" ]; } diff --git a/hosts/web-arm/modules/wireguard.nix b/hosts/web-arm/modules/wireguard.nix new file mode 100644 index 0000000..3aa34ba --- /dev/null +++ b/hosts/web-arm/modules/wireguard.nix @@ -0,0 +1,14 @@ +{ config, ... }: { + sops.secrets.wg_cloonar_key = {}; + + networking.wireguard.interfaces.wg_cloonar = { + ips = [ "10.42.98.10/24" ]; + privateKeyFile = config.sops.secrets.wg_cloonar_key.path; + peers = [{ + endpoint = "vpn.cloonar.com:51820"; + publicKey = "TKQVDmBnf9av46kQxLQSBDhAeaK8r1zh8zpU64zuc1Q="; + allowedIPs = [ "10.42.0.0/16" ]; + persistentKeepalive = 25; # web-arm is behind NAT, keep tunnel alive + }]; + }; +} diff --git a/hosts/web-arm/secrets.yaml b/hosts/web-arm/secrets.yaml index d5b084b..9f07175 100644 --- a/hosts/web-arm/secrets.yaml +++ b/hosts/web-arm/secrets.yaml @@ -1,76 +1,78 @@ -borg-passphrase: ENC[AES256_GCM,data:LmeULsmBcG/IghoZJuy3xWJaEORb08N+NrJBWOvLNy/XS1YB9bZ0kBXwyo6hVBtW4O3oxQLCW3WXC8H9ExHeKw==,iv:mBCrGZ4vOwycfnMiZI3Va73piQ/0gzvKY0/cYn45II4=,tag:qVnlwtbTqdsvxlrpcsmJ6w==,type:str] -borg-ssh-key: ENC[AES256_GCM,data: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,iv:MrpYnh7uFu2zRdoedEqjmApNhu0yvI0WTsgyIqPU/Ns=,tag:n/QGmVoZRBoYS/2aj0rttg==,type:str] -vaultwarden-admin-token: ENC[AES256_GCM,data:cDP8ORsofNYgdjJtmuPNiIw+B6fZFunGMC+mfcqDK6oPPnTbJ8bJjgEYcDoBMnc9VW/CV+mnW+7QEgBJrsJBpA==,iv:v8N/avWQKlmFtJAH08tOKAOxaH28RKxVb+mkipPLKck=,tag:uFXeXWmWnIwxmWE3qCXOvg==,type:str] -vaultwarden-ldap-password: ENC[AES256_GCM,data:tPHHzmQGw8MqYus8tZYs73q2v5xXS+NWoRfnd8Xf7jf9iY92My45kgObQ3SZDeVHuLyvXQwvo2/J0h7CoYrUvw==,iv:G4rILsMvk8WUVY8Ro4GfbH3UlPW+NEUz4vxeWWI4TWk=,tag:Nl04bMnsscw5WXGgYDj3Tg==,type:str] -vaultwarden-env: ENC[AES256_GCM,data:uHZ8sKcrUDow96Zk97R4wyG7PnjMQy9mImpNyn0qAmYFnQ2F6QqwVj198+7jYxgnzqIaKINDOREbYoOF5N3+JTw0Ne97XhjUd0tj96X74i8jvLxLsnOHTd6WZuI+Npmdrejw9HmMjkJmHfMY+CRfpnEpAxBeo0PWXxyZTbs/Y3SkkuKvVD/77wXs2BYPKmowYhcXFwawh/2xdiGLpMY82qWXMIkkyqZ+yvJOjCemRE1+vbN5zS5XbXJlaZnbBkiSVw4PBbNo4E7Xbq8lwwaI0F0272S2/l+DymfK0sUNxX5Yp1LH/HBCzJvjsddS6a51DDNNjoj5OA==,iv:AxXmEe1+KnIc4xHZ+cDwhYa0UZe5jWnasU5zvRL1Vr4=,tag:v+t9npnU80qjc75b79H4vA==,type:str] -authelia-jwt-secret: ENC[AES256_GCM,data:s1y2hODqx1lxOn8PPbPekNFZkq5800iNI6vwOluqGPDrV0IZi2/LQ1GpuedPycTO9bpG7bGuVr72cIA1xhtYcw==,iv:NrjWdPZ+VPxn09WBuzBQm/lGBU/mxwGF4ouYwDSHQRE=,tag:ECSZW9flsUSwtHqtz0CW9Q==,type:str] -authelia-backend-ldap-password: ENC[AES256_GCM,data:/B/cg3s9DQeIbjYUCA2njXe3JGwIidsJDWaLBnAUo6Luf2sSBP/FmGCgplW+A+jh04oEVsbmExgdfcIR/wfIqg==,iv:r3+H9AM03Prbr8E8uApdVSBHTeaoi6HmZviBnS8GsLg=,tag:vMLW6hm0sB4y3Dq4Ljyqew==,type:str] -authelia-storage-encryption-key: ENC[AES256_GCM,data:NbsNmP1ZLiL5Fh0PzBfHVzAfp2GK1a2bJUFNvA43zaiGaATN0NX1giGZC2ItozE2vUAlJ9gMZ7I5UaHvI59cFQ==,iv:NS9NeRGYlhAiNellqCh6+Qt+I2ZEgHFHlY/WyTZZTjs=,tag:7tVIiR4taBSNVIuC0/AX5g==,type:str] -authelia-session-secret: ENC[AES256_GCM,data:0lQrbfxKn5y3LZW+HjUfuIWQW23y3J1pp7TcHNqYD6NgHvVDeROic9hzSe8bHTMgLlc+7wf7Glbiq9Zww6lZQQ==,iv:amya4RuA+TSuq7kcB0ln0XHTROYSzNRRmqi583o4Udc=,tag:Wh1jxnr73iweitbIi64KBw==,type:str] -authelia-identity-providers-oidc-hmac-secret: ENC[AES256_GCM,data:X2ZE5Qn1KrVN/WBWhbHqDEOJ6dxh09mLzKybW9tL0LCeeRA928i4ISelMaSbeMfN839hy8U6WjmObecuokYdyGygLb0fJGTvlErswjHhs3fZs27dOTu17LCSeEUatvYs1Hpqoo+t4PnZtHbhGtUw6KcliTzHxDTnBGAunFNLmQI=,iv:PD3tPdaxIaLSAjHz+Kd7oDqLIeiTsaFfSRTT2wf7G3Y=,tag:pXzgOJFkBFvtnv9I5TvAiQ==,type:str] -authelia-identity-providers-oidc-issuer-certificate-chain: ENC[AES256_GCM,data:cwN59aqz0b+arw4yQc6hQsRg7t+CUeyClWeQPnBt0v4J6X0gKbeShHQ8nJmDKJ5jBLmp6ltdF/j3Pl55jwNbRIEjF2XKcqs9Gd1B94Y97jyktVn2Av1fgAy3IwJcnOrVLGk3EHRdvYHe6jjVGVODYAk30qTA2Tbhxc8DPbR6ie6JFDy+ev5oAK/1EYRRhwcGq+ZETmuIQcGEpNF+EsXjVjcR/iIiJhAJzQ9MDTUrUKeD2a95tTno6J5JCRcI17LC7XYR33sjQVeAIIDEAn0FAhaRc/yDACImdzkufsjqLXZD3EcB+Px3hZHy6ZWfzU+1icys8wd7qt4O7wnGUPVwOkF06M1wYALXH3d+OnNo4so+s6Q2ZlS6yuAjudnyC6rqbzVJvY9PZF27Ogmj4hLN6O8dvsu6mPj49E4f/qsF/fgV+UkZA31cy8vWTLYnIZt3XMQLys0xsYUEAw8hvuRpwBFoGc+VGO1G68G/rO8CGUUjfzdwVa7Pip1JZ5uF5AJbEGYJ0lXBp5o7SI78quWtI6HKZoerfjXMawAUpPIp4HF9HnkVb1B8tXHOXTxLcnVebLEIeRO49qIBBIGK/PnGEkART4vwZEryHqAWxphq0c4N3HW1JG4GAERUtx4nWOD1LfdkgeS3uO+Pqh8T+qdYp8Saiq3g8HUDKq1JS4EFmSzJsEV2dXXJf7cha9v22tOY/Zi6IpdgSq1ohmwthAzT26YBSJ9ks7dcEelCoAY0WDTOHq3UDxUnbANIWReqrWZv97uetm9Nb9Aun0miS2FviFJQ/f6SZUZ437b/7TAoQ6gLrQ7FAvqU0KS1S6QHuxTYog/g8w54j62APlwd8M1eVlSVFYZUztgUff8nE1fSykz3jwwvtigDMFXsLsdvQr1jv7s5XHHmvIW17wMf5xq3hcgSIYqZx/+5nNXcA66iDYcMgJPzlr7Sd3lxWI2ZYBSGRj2Cp7zEDz8W2756Zgu89qTrKQw/VUtbs96WS2rp5bywZlstaYfXHZSTbpGDMF7yFZPXtBTYng==,iv:+zOfQNIXhA8/knuSL2V9lLunevgA541cbgi6UGMm2Tk=,tag:Y/o14+ElwwU8lVMQbTYu5w==,type:str] -authelia-identity-providers-oidc-issuer-private-key: ENC[AES256_GCM,data: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,iv:6cRckfpJZnXvkPwiQq2TrvhjbxHsPGnnuvF84OksMvA=,tag:i2Nlr9DiLt8fvg0SwDzz4A==,type:str] -gitea-ssh-key: ENC[AES256_GCM,data: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,iv:K6piANhGOcPKEvFmTEQiBQvzjPmnAjPfRvXTF2cxvHw=,tag:oUsJl+b1w0jE9Z69vJXS6A==,type:str] -grafana-ldap-password: ENC[AES256_GCM,data:QDerm+reNE4zeIzQtfLoAGlWNVd3KpNSDYr/S3GuNLgK4+3l5taoWdAmPrdT0oCUtxipnuUmlngaVAu6nvqes3XDrjs55cXoiBbDC1S3T2418R8EE6yKX4x0dGnvmm2QA6+YqBvP0xjIWXsAHOhIuBjKfQ38Ms97TBcEuS99XrE=,iv:HADBofo+cA5PkdXlLcemRlG3sgYcgdiVM8NR04Z7AUo=,tag:yIEMjP8PofGDskL+aYw+4A==,type:str] -grafana-admin-password: ENC[AES256_GCM,data:Ua8h43JzgRevqaHyjyTyth09qqU7VmFJXaRnqfZjza2u8jCUJgrqdLWJWn28B43hHbk62lP6vb2HEAf0FpuQIVziCXtcgCfy/CIQny5s005U7IE94P0QUWGQRernGM/rS9hNPC84RNOc6GJoJ+pyCHM6KQjYsQ/gNtH3WRCSTb0=,iv:b0kORK8iT4sr2frzIuAs3Rbz1BvusQFw/lWfE133k/Q=,tag:/KYLQ8GRrGuBLj2MoPOAnA==,type:str] -grafana-oauth-secret: ENC[AES256_GCM,data:0C08ak101LiimDPKUflH3VNzxpjq9DCq2vzeV6N/VmAKDpYm2syRYRWBbqqgEAZ6ivBGFedlUZ2cKvEKPE1oc4+Y1+U4dCet,iv:8w5yfdvx5A/PMEY1O8EeZoGAjvRBNs8PFpIgkTbRgYQ=,tag:Wa9PPht1F10UaobhH+nVAA==,type:str] -linuxbind-password: ENC[AES256_GCM,data:J99NNPSDxxdzEtzmefHt397yHNGPXLlUEbheegVvmAksbuFLnBD0DvOM/seIKGVxCWPq5pXviHD2uG3IBOuOJQ==,iv:Gmi/amlRQHSNCQrEp2wDzOKdqmEBubfLHElcDnpv/0c=,tag:2lKkwzK4dmNoc/kocqDq2w==,type:str] -sssd-environment: ENC[AES256_GCM,data:2XujyaAooH4rjPb+nMA8IzDvDLu6tJfQkS8Jo9+GN8hYITkPYOS2psjk2vv7FLtcd4/YLfktKvnfgLzn9KYW8AXOIrPRffsLfEXzbjXg5XcFvz4N4xZPJeDdoA==,iv:5z9EzxI5MftP0MvudDBeqlRm1FqlQJkLr6JhhCQEoEY=,tag:6yi/Fwp2WF8wOoVjqjay3A==,type:str] -promtail-nginx-password: ENC[AES256_GCM,data:z4p6NoIzEQgkmYWQODew/HM3d26DHJpxdZjY+enu5AZfAxN4jFEyrGd8e8qxhtdAo6t4aVWejyowTg==,iv:Ni+e5j8DnpY8YuSUHOuk+iM+SiJgJbfLGp0FkiIP5EA=,tag:dNC9JyZxqQPnRkJzCg8EOg==,type:str] -victoria-nginx-password: ENC[AES256_GCM,data:0hLUj4yo0kM2KtcaMlOLdumZWPOTMbxP9es9fkgdf45q9aEnVQhWZQRwd2R6MiU/2ShaTHA=,iv:XmiRo3UubWZifGAh7o56kOfr763YnBykGIBqi4b2iYQ=,tag:OcMmermERUnX2SyijZ44LQ==,type:str] -nextcloud-adminpass: ENC[AES256_GCM,data:nIn3sVSZNTXrq9CqWwDGN1fkkxuOST3jP128K0MEoOf8Ql5l8YwG7HfsbyJ90nl2gTLCKsNx3Ko7ocQiCWsrAI3vQLwvn2UkpFkuh4njGB8E8LJYPFSbJCOkKHnZVGvNGYlM802naAqxZqXKH5jOIGmhMq71cnPv/18UEeydOIo=,iv:6Rh5tZqRrD9pU9UwumYglgUf0nFJMWhu/eJSKXKfnPw=,tag:jDXC2ymBK6sB5arEyYpp+A==,type:str] -nextcloud-secrets: ENC[AES256_GCM,data:QSiOz9LyqAH4/fwFyeXlrpnFISK9k5IEHdffe6IqmqpA3zKyLWgTnWKh0N6fLwpnbfRla3a0OaNL+GRty0kJwL0a2EmdYjZFJgh3X5YoolTVb7+QHRNkSbMTBfJ3zkCvIW26giH44nqIuBaO+w==,iv:MqlpZMxzmOnqJ76SjAaodAZu9qtVeE0pRWMx/sStIlA=,tag:II5/3BQ/x5W1xFu5J0nUtQ==,type:str] -nextcloud-smb-credentials: ENC[AES256_GCM,data:v4R8pK/tSlDOkmEZH2fX3JwsipumiUPkAWnZX4c7nMysYQumXbBt/WSoP7lnp39u,iv:c1MtskjNTO8zx6/IOzkEdqHD+VesCo/wqOCO51wkn2Q=,tag:3qyOlqV6qA8k4KIPXp8bwQ==,type:str] -atticd: ENC[AES256_GCM,data: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,iv:kMwmfINpPlJHly+1ErUz52Fku2euCcU9IUj0HQBYl+4=,tag:4idMOhYq6yQwNPAqktaurQ==,type:str] -atticd-smb-credentials: ENC[AES256_GCM,data:5zKR9pHMhzze2myQgAudM6IIEccgz44FiANtMWkvvyncLo1MrZWvuNZ3iy0bOjNZ9FvVgCMt6e9DxdwmhUotq2R7BDKGzWjXh40Vcw==,iv:M56v+xznTLmKVdted3AP6//snA87CHZFRwSeTeeqgWI=,tag:YiJCYGhr4Ux2SAiLCkvyaQ==,type:str] -pushover-api-token: ENC[AES256_GCM,data:/Xn7Z6f7ag4uihbmgF4icCZygvOwfVp+L/jD4bzQ,iv:DCfpfnP4zGNoiAhw+Gh5iyrAMdUYk6fa8ZXlGxtVXpQ=,tag:0wUSuFaYZjLA7YN1P8daog==,type:str] -pushover-user-key: ENC[AES256_GCM,data:prvcht2nOamLADnhnWL9h40606ilFEMFQgNGq9Ix,iv:gcNZIHAzYMreS7aJZ+FhCWpAQFjoz51Q023uIpY56Ns=,tag:pNebHXoQrYsf/R5NIQ8Vqg==,type:str] -sa-core-mailpw: ENC[AES256_GCM,data:TCKzVZ/+dAGDmXZsMn9g1WTEg5YIMFxlTH7K,iv:+DdqpTnHlD4OY7GvSSgfJosxJDr+VRqsJyY03615VvY=,tag:gYG3bS4vCfKYgG0nwkW89Q==,type:str] -zammad-db-password: ENC[AES256_GCM,data:blsSgIEA93rPvaJGh+GBnSRuaWG1I68om7Rb00J8M9ZxUt6QQLiSGCCi2aHqCCLdUhDot7m9QG7m1+PtB8Xk3Q==,iv:viqu7uqDNQvN6In3ibWH5Mtje6R0ZifkWVy3VN25dtk=,tag:XCbrf331+VLsJD/xxH8ZSw==,type:str] -zammad-key-base: ENC[AES256_GCM,data:VqMBsOL6GVM1MlcnaDCU9Nl/zHEr4IFYRj5nlF531sZ8P3tM68TZ1X6ddWvdAcBRYmFJqREVqPA3dy1UeN4HPAbBeI9kyTGMcmfs6VzsoPgXra3nRdV3Hg/CRiwd0bD/s4S+n2ot+0nAe5O07wLGwE50+e909Tgg4r+VU1DSyVM=,iv:q78GjdjZAKzMoLycUe8TDydN8lRZNTLAq5cICosZC8M=,tag:1BqYc0MsBm1qiMCWH8G7qw==,type:str] -updns-token: ENC[AES256_GCM,data:DK1RJP4trOWjJSd6h7c7Yy81W7wJh0UlTTB9ge5Zaaw=,iv:9cF8rPZ0t/zqLFOVKEk9oZ1+Dfj8cSiK3l5sn4i0nfc=,tag:kuO4ebcjwfCHjG/qCmBMPQ==,type:str] -piped-db-password: ENC[AES256_GCM,data:yi4MYougsLwtywP4GSJHO3eP4VZEiZRijYuYKWkaTsQm8hOvqTO0kWcL3RQ=,iv:Y7e/wA4GtQTNl0Y3No2ynpexZM+oWNPAmOuOmMfepvY=,tag:r0EP1bOmwty1vI0J3h0+bA==,type:str] -piped-http-auth: ENC[AES256_GCM,data:PnbYFAzy6Hm4mhb34qC5hk1+sN53oIxMK4YYReUNG+udKi7QNbiAH0UGTOds,iv:zvyPCl8bVkBkXqhBaeuzQclNiXKdN+239Lwzv1IUmBU=,tag:8oP9HZGBpv4xrW8zsgVgAA==,type:str] -fueltide-lego-credentials: ENC[AES256_GCM,data:qHTwN7IZK2qzzI0ztZkgRO3Iv1vLO2XR47sh2XUiCNMdSRxrr27PizT0dEXaFouEODoTQAOLkSHg+WdFx/QRzjcKF5i2AeAz+VKM7s4TWqLUiw==,iv:iFUAD0Uc87z4mlo0oay4X9AbIuW1ND/u47QEZRptm6U=,tag:QXkQUAl68ngOpjFvJgQ1Cw==,type:str] +borg-passphrase: ENC[AES256_GCM,data:Lh5OC7ZwW7+hVJ8lKb/sDcPb6/nC8ZYkEFx8lYWfrMsGlftXru3UmzzpoI7hGo/AOeYPN0wBplSGvKRpAJpqdA==,iv:gmnwl6ibanMlUhrTvH7BZX+PUah8UIZ2MmPakWB9qtk=,tag:Bg/RALc3Wdu13Tr7aR6pkg==,type:str] +borg-ssh-key: ENC[AES256_GCM,data:Y6OzbVZSyrmQPjcADGDWxDPbxTHdfg34nk6X/veCmaYbRKQoCy0fBP7th+eAYwuKgdrPrVxEPLqKL8MNOgHWTtHvpsiwGQtb5yYjchFB0/GGp7eGH0wIuv7TeH79Qvmuk5s5ObRpWv2xTeSbpeiG+SsrJ5wq4BLjI/r0CuNAIJ/k83q5blAMcmjvSGObxqSczew5G8BieCaa/PgykpUixlh89+UgITc9AMAozcRzAQuusa8TIVC7yRCSk3SjpUkyArdwp0jCvn7IIuZg7P+Soq7WL5N6XsvkiH4WjPQA2taIOiE7uLf/l35DoDLDIoHS5VgUQa+DFVpJb6cpC8qGWas0KbN87B1qUDYa+z6Ccz0Leo+Kuy87pcuE58u0yDvnHzFBEteHbTsZDm8o8I8V8+Y7CIyKISFgxSH2xkYX1wadDe52S1pq3wBik9IYq83Ea03ej69NHF81THaRhuv6ePIgGWgbC8Bu6sZQysHLCPQO0+c1k5AoYwES0ZO4IWA+z9bE7/nLCJfMR9vy5Rjl,iv:MjVNeVORiu/CsSze9PB3P2U9jEJ338x+aNwY1Ok+OmA=,tag:PlSYvHvc4QjTgrrgTKk6lQ==,type:str] +vaultwarden-admin-token: ENC[AES256_GCM,data:r9CACx1Rj3B6aJthLnk0BbQ/rzwNr0Prskxk2vLYkWZ8bIT/ndXzsKBcZVut6MuZU20RJ/xB58RJku3i56HMqQ==,iv:dSTKC8Mtp7uKihYP8zMp68RqlqRz9YPsOyhEiDd64Fs=,tag:+u/+iWOhBoXE8v4NBnWJWQ==,type:str] +vaultwarden-ldap-password: ENC[AES256_GCM,data:+iX1uz6fPJq2JCqEp/sDvU62JXX87fwX+nJz1rWIwKocyx7HwoHDhXoosjSAcP06IwZw1pguQKhW/FehkS/tGA==,iv:+DQNMsML0Mtgjv7xvF0w64Ftn7i2raxx8YPmQNHIhKk=,tag:EVxwhz5ojlETgGO3vL8ivQ==,type:str] +vaultwarden-env: ENC[AES256_GCM,data:d9mOf3KZ1JpDtLFY+mFpShtUaOTKyHqJPnWJr5LaB3wX1p/YYdxzFwatzhoiTTeYpDtUE2QrFwTlOOpixlYpaKhZB6SkEP1Wb0TyXZRbs7i54oxzUVZgBAoX6IzgzsJSYbvdfCFjLnNxa6137x5kazLU1isLz+ZBIdMozPDWKkNIslxtjUUM0uOlL+e68gaeVw1n72GilL5VHFGZirzU3Wg5AkeBAkfSizJRLMfkt9Ly6l08XaEKfQ+/0cikL6MPosRplaSU9NW1gUJ0uqR8G0EUnAdQ+oS3/NXTOJLvALADSakSTfTo3QNy6izoL047tx7QL0WCbA==,iv:t6H67pD1pSOiyEdELK3NTi9v7Dz/D+J+d5towzu4ufU=,tag:p8AGJPR8Qx1V90kS1amxzA==,type:str] +authelia-jwt-secret: ENC[AES256_GCM,data:EK3xRR6X1WmCPk0JX2svcRpmA01ROryOwSgoSP8wzV2DeZm4+2sJq/4WfE7q5lsLOt0x+d7tIPOmLH11FVD6lw==,iv:MuJyOA/3Gi06U0wS3xPkZ65jucknSFsO/0Bg4GMO9VM=,tag:TjefmX+X3tF3EcRwsLLpJw==,type:str] +authelia-backend-ldap-password: ENC[AES256_GCM,data:HbGoj3N3yOGsj6BA/C2HIBMF74C3K5nLwv3fOdHzmcK6oDMhiK6zqhLP5cTltxkIBQHsFrW8wd9jKkMWFqf6Pg==,iv:zk1tpx63c5E1/eXOHjeYC1t73REOhzpJrdzXrvk+vug=,tag:o6k5f+PQqFuqSOXNbyDjFw==,type:str] +authelia-storage-encryption-key: ENC[AES256_GCM,data:Fsvev07/qOWA0oTMoXJenrmlxnFLZ9u18UI/avUqjlCpnxYtGxwz9y7Vt0FjTh6K4mQ7omMYhMFy3t6vp+9AZg==,iv:Ja404BfvjAqGW8ZfrDp1whmsl5J1TklPHrHS3G92uuQ=,tag:ovFcA8v7svFWE6yGYTCKXQ==,type:str] +authelia-session-secret: ENC[AES256_GCM,data:mFRzgFzcR0zOxjSxYDT0EX0rb3GfLFiPcqjcND5/7hsGj7KQ4UobGS7UKkHquhqPYun61FystUiz2jLInUYluQ==,iv:b2d1W6Ab69JkLXHA5mxXLoHH7iawsGg8foeO2MaR7nc=,tag:jo3j03Fqnhi8KG1+VJ8rLg==,type:str] +authelia-identity-providers-oidc-hmac-secret: ENC[AES256_GCM,data:Sbcd7v+a5RSTQW6txQEiwsNx4tlPh44GVnSawI1/tooKyvgL1tBdSSFn7l75NfQyK7jK4KZ2Lqhfi8Iff+AFJxTCc94UN9axrlKUq27UuvIdrvr33O9hacICuuXOTRFmHOh8ipNVP721jpOGtuB+L3MDG9RHLMk8tGhIe3L21Sk=,iv:SaUm9EtnheetwLtoOD6zamtyJ/uHr9dA4YPFWweqWsk=,tag:P4W8QIeL90SZxtCTMkA7Ug==,type:str] +authelia-identity-providers-oidc-issuer-certificate-chain: ENC[AES256_GCM,data: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,iv:HOsm8MF55w41zybErWIqLlzVi2dOVS38ui+F/mpEqZ8=,tag:UGoAVuHfVYU2jy8j7w50jA==,type:str] +authelia-identity-providers-oidc-issuer-private-key: ENC[AES256_GCM,data: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,iv:4l4BTCYl/ix7oT2Y3p4oQY4GLYbmVZpoGQ02Mg705Wc=,tag:TP5BGIIkpJLYR4KSCvjU+g==,type:str] +gitea-ssh-key: ENC[AES256_GCM,data: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,iv:owBhJUG05Qelj9u/MafjfLJBnFAMnQYXmBqziFoJHdw=,tag:uENfxVUZhG7QiBtbMvMYZg==,type:str] +grafana-ldap-password: ENC[AES256_GCM,data:bdXfRoUKr6wojDCM+wh/KpHCu5ZUPlrfgj/EkK90sZQn6iI5rB/R3g2+r3zZYhBD3lAeYQu+WtLR59eB1mgLvSAvwRUGrOBQnfWVh6WpAOFcqPihUy4Tpu/cE1Qk81W515aQLNWW9k+oqs6Yasl7ykwmd22w3NK7WoSiasti+Sk=,iv:hAOkJaJJPO03fKhDzf5j73I64v4c/W2xrXixR+H5uxo=,tag:8dodaafT/xgdEV3ypvEX4g==,type:str] +grafana-admin-password: ENC[AES256_GCM,data:7tWSPyJYCHAw9ftowrYNTYUBZYQb5OBEsjDVTodnrsTqZWtu6UKwPRhancRUcg375I5ZRpf+bMd5cXpSsVstHd+u/zYlfe2ScyH0qINu44JsZyEBUb6jZ4RW2MUucSAsXUK1badBdwmOCPVO+3V9wOc7yV47DLYOTRiLOsMLU2o=,iv:SYYFwxlWm9wl3kzEsZsZ0FeFC91ho1E6Wd3cMLX1fmc=,tag:ItG0MNRcncys6T4oT1hF0w==,type:str] +grafana-oauth-secret: ENC[AES256_GCM,data:LFzNHnb7WK7lnFqBqc+a+vgpf42+1TeUzad/a3BJkWTJ1kHRfeBD9LETXwy/lg6kAofQISjRK5LGNZK11OTii8xoG4TWidPI,iv:w8j8vlThcCuhUWSHyQ0CwXb+XRjKCQ0u1QV4JJCDqF4=,tag:amEliYePf9b+xHjkk0LKDg==,type:str] +linuxbind-password: ENC[AES256_GCM,data:RIBiXMrcKjfpLimX9CLAOg4oirPIXAWinh9nYqxiwKofZUtphH6+LPMmcAGtbh1Q99NvNiToGdq3CjO2mP7b+Q==,iv:MoWOPPC1X6ZeFQoJrNOBt+ekT5zqPPUcx4zm+j7y3bQ=,tag:AQAaiIBpwPcEu2bJxlx9ag==,type:str] +sssd-environment: ENC[AES256_GCM,data:LFxkBToE4D1ai0d6FfmhYam577Fo3HQs05n29nH4StBYeaLEQ2g1BLyt6f9B1k0RpI5MfzxPAJHRYQEFbcCNAc20VO2+0alTLsX61FLLhKMtvg2y7rEhsTGLvQ==,iv:GeM4ruyVqFd7mOtxlXoMA2sYwD5XDWQqauhhUrsiHPw=,tag:siGzNxkgcshYXyjn3/Cmjg==,type:str] +promtail-nginx-password: ENC[AES256_GCM,data:AKftXPlaYPO6MPlzii0/4V0jjmXCgVNFcBXjku9MGk1wqaGWn5KH4q2qAEwGwhWX4DoraIQaYzweSA==,iv:2xqraUqHVHFvA6vCqfOE1cwdFbEcxg225DHQRpdLmi8=,tag:togzAaJK9JuWXAOHLYl2Ag==,type:str] +victoria-nginx-password: ENC[AES256_GCM,data:oSh83mcpLTKN9oAP8UEZ8opEezlPdDIO5nOmrV3EzqOWYta6ffIg3XsYNvNQ9JWCY8b49CU=,iv:0R1P20nVJe7KuoVOCuAj6GbhnmTg4GVD6uAd8Z9PnPI=,tag:ReH9FfnAUM82B1CMdoVGeA==,type:str] +nextcloud-adminpass: ENC[AES256_GCM,data:WqaU8XyfgrfPVMrB8vpeEwtZ6RidzKsfl/RdOEar5KE0occ6cdehRF1EacGdbmKtM/5GFgCWVYVzyA3nXeqPU2Xnl3HMTwJGE1RPLAo66Zl6UCU27pYVrgJyBq+K195n1C1RzRXxNrLRMx8utRTVVKaf449EQdJuyZ8u2y+K86c=,iv:qPssMccTUeZQNN4PsokQPgv4WG8cVo0NI3jTH5Hqn7A=,tag:cNXmCIHPOIrvHXhlbNKUhA==,type:str] +nextcloud-secrets: ENC[AES256_GCM,data:OTvpnL/GJcQXg2Qs6e7EN3//VWsb3x/JqL1XIEilpPsvWUXEMjbYMz9NwLLdaJOCOLaSjwwz/5SzSeh85C9qQCcCWPXn5IW5WQ0TRD+XZC8ZfnclTVehpdTBA6X6doPYAOuEnW60DeTYiUyZVA==,iv:AWTuqd5kXrMsRVN6AROt3WROyjxpgtF0DGVIW8I8tnQ=,tag:MO8GIT1kzHGHDzV+PZW/yA==,type:str] +nextcloud-smb-credentials: ENC[AES256_GCM,data:RNTaQDlkBryt/HJsOTdnEFSzqiYaZKKn9zQ+t9yXHXgnv4CUmSs+ovkx5lTME8y/,iv:LFXTY6MiseiA+QmMTjaHHW9lISm9meOQaihxUGwen2Q=,tag:SPKOgwZTb4g1a2ej8XrV9A==,type:str] +atticd: ENC[AES256_GCM,data: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,iv:2xGVI73fNDJ05dyrliwZVynsS5TGqI6SCU2ydoZNvQk=,tag:ApeTDPUTUiq5wSgiF3CQ7g==,type:str] +atticd-smb-credentials: ENC[AES256_GCM,data:gCyQV9fndo0fUDZut27Zos6vMX+NyHL/UtDpXAQqdlB3MwKhazYLWTGSFC62gB2WKDA/IBxDxr6hz98O5PqC0oiFn7TcVlWPReieKw==,iv:7vW+kTaHwMghgdpt7LMHd0rCLtiR3qydtGC0/WhcozQ=,tag:6NI6ZsaPGMNmWqbxX2Dlyw==,type:str] +openclaw-mysql-password: ENC[AES256_GCM,data:HMqDZf7+HtW7DrcVaOH43j7Uzb+L2u4LUSaDzajo0p+/q1QrM5jixXc06E1yIA==,iv:yj/6Ei3vlz7CMmLepcQLHcZP5Yk7VQaF5vT59qtVbSE=,tag:l7jtPkmVxxWeRd9jtMb9FQ==,type:str] +pushover-api-token: ENC[AES256_GCM,data:YCBTFmboqBVwHM9RqKxyrZE6cQfw00SkDRAHucaP,iv:JqYe5QnRTSaR9W03mRk5DyObSp8MdVujoB8LtOaz5gw=,tag:pMPJdBAcii29fvENKBCk2Q==,type:str] +pushover-user-key: ENC[AES256_GCM,data:bu1f5SkNEn6lHipOaHqWCwoLqaHTJmxb3GlmVyvL,iv:mwERwbKhPv+tgChn/KG9MnZWakOlnrcZ60ffJboHhuc=,tag:gHn5FmY7EAsN7NhaqgZLRg==,type:str] +sa-core-mailpw: ENC[AES256_GCM,data:aaqDFZwDNOkRv0Ldfr4kq8kU3vAVVN72xymt,iv:prbR+BFnlHL/5f5dOkYOULFiSNTF0HII8QIWDyPw9rc=,tag:ufOTYkuBp70Kl8pCCaUkeQ==,type:str] +zammad-db-password: ENC[AES256_GCM,data:YYvi6X0iTmhPtDpGrmWldOjh79D4x4+jHfrosPeLUtvQdOFRo7FeN2ZnxaXMmlnguWkfgR0KGWK0We5khasEWQ==,iv:iA8hNG8bpAQO/UsO0AJTTeqzT8C9kqDHwkNeXc6p6ZU=,tag:8bq7aQfwLHfbvrbZzjJTcg==,type:str] +zammad-key-base: ENC[AES256_GCM,data:VykcvUeKy6112M6fRArncwoIGTN+KXifOUKvFDkhaqhyESJrpkywwTZdnHyWPHPDIa/0mWWYW2jqYY0PNQnovw4b0S6fvJKTQ8zwxeEp50jFuD+1CWjHoE0+ISHykOw1VYZCsHNjkj9nLdbQwwyqzYX2yQajMTPzm5hLZFonsuM=,iv:UwNWHw8GsibhYnV5XAFamHXs0Ma+M+9CgdhT54/4DYo=,tag:McKGVO1XbiJezvkmk3SVJw==,type:str] +updns-token: ENC[AES256_GCM,data:tm9+BATAW3JVeyRQ+uoJh8iKMkVXQV81+taT432vxgU=,iv:FV0VI6z2Qd2Jwjdfpon0StAkjsg2Ror70v2ijZwN8FM=,tag:PARnbBoc2+Em694nNgoc4A==,type:str] +wg_cloonar_key: ENC[AES256_GCM,data:VUL1wrSYUQcfcNlDFD992LiXboqqXb0eHCnc6hCRI+qy4+uN9KoJXkQ0eSA=,iv:B9D/WK88xi9kEuujlhaD55PLaQ/UhAa7VU1tIqcYj0k=,tag:3pOkFB3z9RyOv3B5O1B5/g==,type:str] +piped-db-password: ENC[AES256_GCM,data:Vm9w6zyagZXmTUacWBPea88JFtwBXX7hdmN3sOLA9CDwIcDP1eWLv7nDZfk=,iv:gKS6J2vl396O/r8Jj4/uoa1ehg06nNXVaaMhq9bissk=,tag:4l+TZ/6CJvS9e69Q5uF2og==,type:str] +piped-http-auth: ENC[AES256_GCM,data:PASSZN28JUCtQAiNlFx4QQzwLcm/ltmWm0OZVMgivXfDqfefGuRhUK6BByTI,iv:WxFGpKZXDRPYTu9W3XI6xm9+6IVOZ1MKjNkcSgUpJkY=,tag:KqDaAFTHzs07JHIy20W07g==,type:str] +fueltide-lego-credentials: ENC[AES256_GCM,data:qeQ1p4ZAqxjsF224gEE3dKMVUlCkBu4gw5xoBtdBg3FPu1NR4gSkrDmtfVai45GQEFxNG1+qwY09NYFTJJ4aTLvvEBZabdurivoCM0L1GPR2Tg==,iv:YunXwPQDDuS0x3sDjwOAE82KUo5rUGKJLhXP2fU+cdQ=,tag:3nl5qZpqBPgiW9Op/fyTjg==,type:str] sops: age: - recipient: age14grjcxaq4h55yfnjxvnqhtswxhj9sfdcvyas4lwvpa8py27pjy2sv3g6v7 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKTVJIZHQ2cTduNVEwRGtI - NUVlL2UxdmR1dmcyNkZ0ODZGVlRQRFN4czJJCjNFL3VtVEk4cW9RaWVEbmFxR1l6 - TlFoWDd3YmRBdm8yQWI0cVJMdTdpTWMKLS0tIHBiS3lkaFFtL29kdFJxSm1QMXp6 - TWkrcXNtOGhrSXpldGExam9zZTZUMGMK7Y3aFWrqH25tcEzeiurB30Dyxqcgktm4 - xRAWXIpjduDqqaoCekNfMBj8b0eVQxwz0p+XakCWTZx8BwvCJCvuVA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvODFIeWxGVlBJcUtydjRw + M0Zob3A5M21NNTlCNlhQR1FuUGpEWnMwRnhvCnVLazFqckQ0Z1llVFNZUHFraXo1 + UENZUStQVWdHR3lDbHUzMWRWZ3cyWDQKLS0tIDVIQW5scDFxd05yTnNuNDhJRU5j + N2tTMDhPVHB1emZ3TktHQXdYcWs2TFkKlpbNNNJyuZhOuhi2NzNpeZY8GOXJDGC3 + m/P5OjD9f5qCR+SLC1y3PhR5U81ZjOeB2nUpGrzQ8AW2pczZrcW2Mw== -----END AGE ENCRYPTED FILE----- - recipient: age1exny8unxynaw03yu8ppahu5z28uermghr8ag34e7kdqnaduq9stsyettzz enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPUDQvOWJrTm52UVd6Q1Ro - QzR0ZmFUMnhYcW05VEZjTjMybnluTTZMZDNFCjBldUJ2ditDQ3k3cUVQZ1NVMlRM - QkFiVnE3ZHdXdTJDaFpPbmVWOUFXYkUKLS0tIDlac0oxWnk3bE45ZUh0amVQWGxv - OTNkb0NqUCtxUmxxNHlEVlNzQXQyeG8KskwPMAzQI7AbN0TFuxi/Diis/0DPuwzU - oc93nTjFT3nmQl+JxfAD4oyGbuiKSWUQxXBugU9GPKacCGmNFDrHRQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUV1YxanJkeU5QRmE1YUkw + SVdpY3BvenQyZE1RL2FxaWptNUlyZkdhTERBCmcxRUhJMCtSc21QWWZDY1lqdW5k + Tzd0R1NOQlIyK3dheGVUWWxDeHMvV2sKLS0tIEhKWnZXMDFEblpRNk1ldS8wSmwx + UXRqUTVIQWtJcHJUNDJIalZGeUU3NE0KAcNAjxMcxaaULjh60pDh+nQ36+/s8DPl + 3HdveEesXixu2EL4gzo7/tmTMDkYE6ifT9w9HkON+X0dHXvnUokJZQ== -----END AGE ENCRYPTED FILE----- - recipient: age1v6p8dan2t3w9h94fz4flldl32082j3s9x6zqq7u5j66keth9aphsd6pvch enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUSUo1dE11TXNtaEhqaC9h - YWdnMkhQVTFaR1RRSFk1THgvNGVpZDduUUJnCkZsUEE1QmRvUnQwTVVUb3hZeWpC - TUJ0QS94eVAwRjE4dTVkUUQ1alBYY2cKLS0tIENURHNBR1FPQityZXNXcTI5OHIz - UDdaRTJIS0J3R3hZc2xPaVdOYmlWdmMKOYOtACao0QGmpJMuwhJgqnby8RWx78wE - zZMM031wVsATfOV0VtzhRWaFdSpPrRM1WggPzN8oEflIqvrtbCqAWw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlb1V2aFh1cnFmVEVyWnox + OGhoSzNCWmkxTEdxNnYwa1kvRkUrNzI1S3dzCkNLL3ZvUkJ0djVXQWhYRHEwcEFL + RE9VRThoYnZ5UnZlcXhvY05DOXZXdncKLS0tIFQzbTE4TVppOFhSdXhOVlN3eSt3 + Rno0QVU1emM2NmJVUkFDbXdqSFVlZGsKOLBbJMh4s4CEbdLoqNtLYVro32Fgjavk + RjLaZFMsR6iIBg/tbC+nmB366CWm4dFIBxtNXznI8VWg5CRTTdpguQ== -----END AGE ENCRYPTED FILE----- - recipient: age1ylrpaytkm0k5kcecsxvyv5xd9ts4md0uap48g6wsmj9pwm4lf5esffu0gw enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNTExoY3cwVTdLUHVqbitH - YWJlTmJ2ZGNvS2lNR1lmd0orc3NyZmNrWjFFCkhjcFk0N04wemsvM3RnRTA0YUov - KzJkOGJYK1hrZG1XektueEN1UVFKdWcKLS0tICtqOUNlVWJNYVRRMi90S2p3MEo4 - eUdjdmZGbFZzbVhkc0hZbVdSemY5RFUK9eVDd/b8ZZrrjrXa1fdYleYsreFgDTr1 - 5Xrvjsh3/LhOxFvPj7F7K12DXo/pKT2DANuk/i0EGiNXsSujm7zp9Q== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDMWY2UlhhQVd3Y09aM1pT + bUYrN0VIUTdpWGdDNHJSQjk5MEEwY1NrY0FNClF6L0lFajNZMzJlc2pQdXZWKzEz + bmx2b25NMSs0N25YUUd5MXRDN1JHd3cKLS0tIGVScll2NWNsSWZvd3JCQWFzZFlr + UEJmQTRzaUhlM20xZjROYnZyVU9uYmMKrikz0u0ITF2Os61K7vRDrIVfBnBP/WEw + OIyhfBfiG4ky4QfuW9XmUjO3MR3KGlWAR6K1fPfm3lwZU5YHzdpmDA== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-12-31T14:20:53Z" - mac: ENC[AES256_GCM,data:DAk5ygQbmMTjBVPs0O1cSXM4bQzEWSBMdE4RCbxvwLSWsuZQqYGzlObNC/oXQ8Nbc9S/DHleZPT0gRrHa3WW5kP+0hyCS6BrxXAwi0p6PDx1dyiKGfy+/DyrJ9YBQCw8SUQ9mAEprRJzSInKsUS79lSQU3saaZvRLI9KqIkYTrc=,iv:ggAmWYA5kpOD4Mu8mE6vhnKXbEwXqN2mxSQEOINvF8U=,tag:2oRhEvfltvqX6XqlfzkkWw==,type:str] + lastmodified: "2026-02-09T01:03:59Z" + mac: ENC[AES256_GCM,data:jUqRU0rZ3csCr/+tSPmEMr7rYhb9QHYe2IBvjW91fRD4ou7arD7A9MVVBCFgzU8R00rtumBfcnjeU5TETQGkirOt0ajWqjp1TimFl3VCFYdjq023onBvZDZmRGLIumazjIKt7FMUErUuXl1y/VIIgPu95zuASfV5m1HHG7M5l0c=,iv:YqOF25Skkrbj9X6zVJZZO4+P5KIEyrrZs8OrRWFv+lU=,tag:0y+MHDBDGs6atUSVevIfsA==,type:str] unencrypted_suffix: _unencrypted version: 3.11.0 diff --git a/secrets.yaml b/secrets.yaml new file mode 100644 index 0000000..8271154 --- /dev/null +++ b/secrets.yaml @@ -0,0 +1,34 @@ +openclaw-secrets-env: ENC[AES256_GCM,data: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,iv:ESd59A77Y7V4zNdOjGLRAL4HbhPN//YFRDCsnSThapg=,tag:VB+cDFVKnFGdt/GqKSDArA==,type:str] +sops: + age: + - recipient: age14grjcxaq4h55yfnjxvnqhtswxhj9sfdcvyas4lwvpa8py27pjy2sv3g6v7 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRZGozcTlYQjR4MHBYRGw1 + UEV6QlhXWE1CcFR2MitRT1RQMjdUVDY5Um5vClhCNmFYcGpJdERaR0RnTTBqajE3 + S3E3Wi82Z1lHZkEwQXJzL2tLc0x1YVkKLS0tIEtZM1hITFZVNTMveVp6SlBZaXM2 + WExzNkdta0pYYTM2cnQzTWZTMXlBb3cKvq3h9nFQV81rNJYLJ3xiD7RU5bDs4A2m + r9SQGOb/AXg+Vf3fMBsCip523A3YizoZvXE9OnjNfFpek6KS/lzLIg== + -----END AGE ENCRYPTED FILE----- + - recipient: age1exny8unxynaw03yu8ppahu5z28uermghr8ag34e7kdqnaduq9stsyettzz + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwdVpLMnFjTTJadm9wUTcr + UFM2Q3hSSDUyQ1V6dnc5UFZ3QUswYlYxc0UwCnlUWUR2WlRrNGdCZWl3dkhIQ0hC + YWU5MGtvSWxYV3VTdThHUGJKeGdpQ0UKLS0tIFA4WTgzUHJONjZIWnRpSUxiVFFp + WEg1RjhIallnSFlJUkgrV1NBaFpHSHcKa5seWBdmFh6XkFNNwCMInWGtdyH0Xcq2 + OTwL9NIvF/w4+cUezzWPgUr2yfN20K9oOcP4iOAXfpG7ALkg1AJVhw== + -----END AGE ENCRYPTED FILE----- + - recipient: age1v6p8dan2t3w9h94fz4flldl32082j3s9x6zqq7u5j66keth9aphsd6pvch + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2ZXBIVXhSelZwaGgxVXIx + Y0p6K2VuZjJSNUIwdmZQU2hpdXJyWGMrUGtZCmxmdkdhSmhUT2wzK05RekFaK2Ru + WFFNMW1GMjlVd1c2ZXNqVWtDcVRoeVUKLS0tIFVYV25GTU1rWktpaHJyZEF3ak1k + aGtrdk5SS04rOC9aRkRnSkxzOGZJYTgK/blrmaRcvpKrheMJOW44Lkasj93nQ3qI + V1wsU5W65zHMdX0R9FNhvjqRgdzbZGywI7/1O9Gsh8lP5ATVZI7nag== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2026-02-09T01:51:52Z" + mac: ENC[AES256_GCM,data:FB3wpsMzwkpj5+IHfWxePpPNZnasd2BtatQN9dEoCxTsWbnlqtmRv+hqW7v8ljo40QU3kVfUAQ5L7z9Cptzpb/N2EaGNj5ZD6wnN32zQ2VFB5EutebCbY29K3MFktDC5rQ6yZsK7iAw1mpehy8/bfLEuKKdhdEu5BgOMuEOBNFo=,iv:r/YQYlRxaynNPPzVvTAyG0g73XtzAbAqZ/dc6683DRU=,tag:PWEfpfr/tnkEcSBDrFMrxw==,type:str] + unencrypted_suffix: _unencrypted + version: 3.11.0 diff --git a/todos.md b/todos.md index f2d6bf2..b82dd72 100644 --- a/todos.md +++ b/todos.md @@ -5,3 +5,5 @@ switch from gitea to forgejo ## chache server https://github.com/zhaofengli/attic + +set ssh keys that each server should accept somewhere globally in utils and each server should implement it