From 98705a218cc1fa01bdb18aecd267ded6a3a3fbd7 Mon Sep 17 00:00:00 2001
From: clerie <git@clerie.de>
Date: Tue, 16 May 2023 08:13:12 +0200
Subject: [PATCH] hosts/storage-2: set secrets permissions for nginx htpasswd

---
 .../secrets/clerie-backup-job-main.age            |  10 ++++++++++
 .../secrets/clerie-backup-target-cyan.age         | Bin 0 -> 509 bytes
 .../secrets/clerie-backup-target-magenta.age      | Bin 0 -> 429 bytes
 hosts/storage-2/mixcloud.nix                      |   5 +++++
 4 files changed, 15 insertions(+)
 create mode 100644 hosts/minecraft-2/secrets/clerie-backup-job-main.age
 create mode 100644 hosts/minecraft-2/secrets/clerie-backup-target-cyan.age
 create mode 100644 hosts/minecraft-2/secrets/clerie-backup-target-magenta.age

diff --git a/hosts/minecraft-2/secrets/clerie-backup-job-main.age b/hosts/minecraft-2/secrets/clerie-backup-job-main.age
new file mode 100644
index 0000000..463bfad
--- /dev/null
+++ b/hosts/minecraft-2/secrets/clerie-backup-job-main.age
@@ -0,0 +1,10 @@
+age-encryption.org/v1
+-> ssh-ed25519 HwR33w VOKZmTkEoyrKLAN6uNv+LQHqc4avP8iwH4BiM+VueGM
+G69PUY0KeW5uKCS+v2v3BWtaxWLTVUx3PIztgBVenNE
+-> ssh-ed25519 4YRm+g qCBKNpb6kkqKoHMe6oXJL9yRjY5Re8WJUy/Vm6nY5GY
+gRYAzyHROciCgZJQQ8RpxbZ2LMdkvklHfIggLq9J4yk
+-> PS60>-grease @iB[%' b&A wKA5$@K
+nSwvNJ6vCt24R7Qok7jLttjUQ+Vx1G2tO1Kw1htdZbYy3GNIl2jnkJtn7NJcA6hM
+9sgcnQVetxr93l/uiwKyIhQTPcuwuLY
+--- GVqzFN33Y1T7jgvEqQqQjBMR3VuEnXY51eKmI9/bO8s
+52�V�f��b�sD��*�FW�
.:��[�����]=&�{��dS�� 9}�#�R���
��׽7��o�����3��Q��*̫;��R���M��_�
\ No newline at end of file
diff --git a/hosts/minecraft-2/secrets/clerie-backup-target-cyan.age b/hosts/minecraft-2/secrets/clerie-backup-target-cyan.age
new file mode 100644
index 0000000000000000000000000000000000000000..772ccf306da06b4a4b8a6a4a2fcd2bd41eb9060c
GIT binary patch
literal 509
zcmZ9_O>5I&003YQo^laE6g))`HtDkL%}1Lu7^Z8wq+PP6Nt&c6EZ<Grq-mQrd80@1
z2gsPmP0)*Y@}L*NT|^MUiw6-;B7)#?;t)2(tIr>JtiZ#(*qOp44af27cpBgffM6Tw
zY}Us-m!N4-Mft2lk{LP~FuDowUO2D0V~Fn*J);@ZL#UXkFo$u%c>dh&q&CTGNan-R
zuqrsR*NqFgYRJTp#VvZfVpInsj)Yr+$Ru8-j9Rn*H_Gfpr2wTDx+2E&SQ=@$x;ZYX
zi%4``S(f{d)<aoOgDpEYWa#89(#xrqGf_Af1VEQsHd7;EXo%6+*4j?FQY3aWXSOr0
zo0|W&W&gURZkSjw^{knPCONvYyGS4)W{BvH#I=M1HXk@800)G`K!Nduw%YJXuD%o6
zTwyoYv?%gB{Y_Qy3O7z#xKU;$z6*eXC~OT7bB-Yvot938ygl(C$cTu|5Ddf6x)pRi
zs)iR$NvG60JFrVr$)p<Xl(9^W4+uuBbjw;htY^sCqsD-2KRvwq@cWIk{rgY8T{`&u
z;yJ!P&EDen$;I8r!QGutdw-6&^B-y#gag%mdG7MwvT_fsFa7+zLSFfCb4faR@ao#@
c)8jY!vtRE%uD-wXrSkRg){$R52DkUazaW3LiU0rr

literal 0
HcmV?d00001

diff --git a/hosts/minecraft-2/secrets/clerie-backup-target-magenta.age b/hosts/minecraft-2/secrets/clerie-backup-target-magenta.age
new file mode 100644
index 0000000000000000000000000000000000000000..8ef7bb0ca3d8d6d617c20decc731d919bf72837d
GIT binary patch
literal 429
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCUlC=W6=E>}oT&MYv`
z4bO7&G&8Bn%qXo44>X7>Omj-HNDp*ME=tcz&eAstE=h@UPv$BuF9>r=^vXAg%uFfP
zcaEqG3ky#P^zcj7PO>Pl%nNd<GB!yvE6RyV2}QTfBr+&hJ6$2g)!WH1&pgF7$j!7W
z!!yy-&DAN*Kd7k0%P=LSxXLilz~3k(-Ly<Qq?k)vKfBzxAR{r`$h^qJwJ0n!*(sth
zCn+d0Kcuq2A~H41G~Bl$InOl8ClF+tzk{Mfrf;ZjdQoa(ajHULzMVo)q?1NLZ8ld?
zPPSW6kWYZQw+WZ7uC9W%k6W-yaFDBZpms@RUP)Aem$r7Ao0q<cUy(tQUtU>7ex8w^
zTa=?up$S*(V!zP!sp;3YFL6nG<$PwT4g(Kc^!?BPS@Zox#n;(;OkePS3X62uD(-S*
zzT>GcHJOthJLI3;5xh8H?eevCotrjfUw-koQvcr}DU0=O0coqI$G&@0Cz-yih$;Et
J-33gdaRAhFnYI7`

literal 0
HcmV?d00001

diff --git a/hosts/storage-2/mixcloud.nix b/hosts/storage-2/mixcloud.nix
index 23f207a..0a18e03 100644
--- a/hosts/storage-2/mixcloud.nix
+++ b/hosts/storage-2/mixcloud.nix
@@ -46,6 +46,11 @@ let
   );
 
 in {
+  age.secrets.mixcloud-htpasswd = {
+    owner = "nginx";
+    group = "nginx";
+  };
+
   services.nginx.virtualHosts = {
     "mixcloud.clerie.de" = {
       enableACME = true;