From 718ff1780a6e0a9dbe3f3d01f8b1874bdc4b44cb Mon Sep 17 00:00:00 2001 From: chn Date: Sun, 15 Sep 2024 18:33:02 +0800 Subject: [PATCH] devices.srv1.node0: fix --- devices/srv1/node0/secrets/munge.key | 24 ++++++++++++++++++++++++ setup.md | 4 ++++ 2 files changed, 28 insertions(+) create mode 100644 devices/srv1/node0/secrets/munge.key diff --git a/devices/srv1/node0/secrets/munge.key b/devices/srv1/node0/secrets/munge.key new file mode 100644 index 00000000..c4e20f5a --- /dev/null +++ b/devices/srv1/node0/secrets/munge.key @@ -0,0 +1,24 @@ +{ + "data": "", + "sops": { + "kms": null, + "gcp_kms": null, + "azure_kv": null, + "hc_vault": null, + "age": [ + { + "recipient": "age19ax6vm3pv8rph5tq3mmehd9sy9jk823tw8svsd790r0lkslycquqvlwz9m", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArVDdTdHo0Z2hadnBBK0FE\ncWlkVFNrQVJSTVp5SEJqa1ZwNGlyMTJSbDEwClNQZWswdEFjZmNPVEpDK0tRTzhQ\nRGRMeE9VZmZFMkI4S0lJM25DWUlRaEkKLS0tIGl4MXlkU285eHVxKzBzeG5KMDhE\naG5iL3JyWFpoZFl1RU1HaEVlcjZDV28K9tMpcXrC3B2hOsAQpyeXgOyJ6P66/+NM\nL7nPulI4L4intRT69dGsmCv5G9VTzhbxeOr2OEjYiRlO9w6JwICw+g==\n-----END AGE ENCRYPTED FILE-----\n" + }, + { + "recipient": "age1nzetyehldf3gl6pr6mu5d2cv387p8wjqn6wfpll7a3sl8us6n38s0ds633", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDZ2NDNHVxYTh4VkRaUGNW\neHY3Z0MxY3R3N0pWS3FXTzUvdmh4NVY1bUgwClFJWGlJNjNDbGZrL3czbnNsYjBF\neVRNbzNqcER6eURXeXl2bEcyajg4WkkKLS0tIGUwZE5tVGVVaWdnSzI1dTU4ZU9Y\nOXhEd1VUYjNOVC9KeDExN050MlpSVE0KKtxLm1k7PIofruBG3Fag/+nr6NbHPUEG\nTaOjqNugU6PpLgE9qy2cSvCEWgHt7t7ocumSMVTH+hEB5f4zq+vokQ==\n-----END AGE ENCRYPTED FILE-----\n" + } + ], + "lastmodified": "2024-09-15T10:32:46Z", + "mac": "ENC[AES256_GCM,data:cAFChQCAEzRw0dQFd64vkdZieGNfmwW0J4ly9Q/yMY7NGNawGDQWWvxrErDc+oBkaGgMr9OY74w2BBg3sF5vM+REHUy9vtAqiAnoEV0LrQDGGSObMsbrNdcZrtVe7KsDoRO/KRCwfOeZSl3nVEeuDHJBJWFB2bBum6W7+Nvm9Co=,iv:RVyh0gZJwusrfwalwPsCjfJNqrqWp0yfKA+Qd43eeeo=,tag:7+KLugGvcBWbFJzzF2MzkA==,type:str]", + "pgp": null, + "unencrypted_suffix": "_unencrypted", + "version": "3.9.0" + } +} \ No newline at end of file diff --git a/setup.md b/setup.md index beebc3b8..54bfdd72 100644 --- a/setup.md +++ b/setup.md @@ -23,4 +23,8 @@ systemd-machine-id-setup --root=/mnt/nix/persistent pg_dump -h 127.0.0.1 -U synapse -Fc -f synaps.dump synapse pg_restore -h 127.0.0.1 -U misskey -d misskey --data-only --jobs=4 misskey.dump cryptsetup luksUUID --uuid= /dev/sda1 +mungekey -k munge.key +mv munge.key munge.key.orig +sops -e --input-type binary --output-type binary munge.key.orig > munge.key +rm munge.key.orig ```