hosts/gatekeeper/configuration.nix

@@ -100,7 +100,7 @@
       ];
       listenPort = 51820;
       allowedIPsAsRoutes = false;
-      privateKeyFile = config.age.secrets.wg-vpn.path;
+      privateKeyFile = "/var/src/secrets/wireguard/wg-vpn";
     };
   };
 

hosts/gatekeeper/secrets/wg-vpn.age

@@ -1,9 +0,0 @@
-age-encryption.org/v1
--> ssh-ed25519 HwR33w mc6hKfB2yixGjxjDoUlz5e+KQ9CdlTveXhecg+fnBz0
-PvS1xgw1EpHKjHyjnAQQ6bt5wZF42rE5TE/tNJ4KEKU
--> ssh-ed25519 W4Oy+w Cfmoqb/Odb+XJECaXhm7yDqdOi0776l8I3rsZimfNkw
-86jSNwg/eKkxCvncnnVDwc6OZovXFMwLnqPeCtuWGHg
--> c-grease nQ | u[<tiR5
-ZJfBhhmLf64ruvxrxxHtjSuZ00snW+w9
---- f8ZhZlLEbwre1PYWOGu2rBVllDbDIjj7FmW8Jrq9EQM
-W*àË:§ºA˜Í2¢‹°¢Úú^<5E>-'‹ÛÒ¦qé_©ì-ÂøWd+*EŽäƒ¿ÿÿ
GÊýY$ý©—t\b™Ï\Ô3º[}a}\âˆV3ïg

hosts/hydra-1/configuration.nix

@@ -84,7 +84,7 @@
     enable = true;
     port = 5005;
     bindAddress = "127.0.0.1";
-    secretKeyFile = config.age.secrets.nix-cache-key.path;
+    secretKeyFile = "/var/src/secrets/nix-serve/secret-key.key";
     # Workaround https://github.com/NixOS/nix/issues/7704#issuecomment-1409480909
     package = pkgs.nix-serve-ng.override {
       nix = pkgs.nixVersions.nix_2_12;

hosts/hydra-1/secrets/nix-cache-key.age

@@ -1,9 +0,0 @@
-age-encryption.org/v1
--> ssh-ed25519 HwR33w XAZWRRep4zdbZFwRvWGa9yyLe44TlOGIMwtLo/WZXyw
-G8Rv8Oqbvx5qYr8ZrQlmIyhYqUG6aJArfhMoqu4U/Uc
--> ssh-ed25519 UgSomQ sP6Z3WzhBXDaDfsSNHY7p/vV20/eytII2VhO6+vUAhE
-q6+FH+k04jG0417KvY8cHnNeb8hEzEtxX+hLmKWqvdk
--> *A>\V=-grease
-wpRswQ45ywiN+jit7kj5p0s2a+WloUueeu5E+Nn41WOMNQLJ3RaJqxRk
---- TVK8uHcE2tn7qfDF2oAGb24N6a670Fc+QVU7agmJYNo
-_	aà­	˜-è¦'ÀÓ³ÞýAbSØ	ÆXÊ2Ñ$À\‰M³œÅ¾ç×ý¦#6žwP˜çÉ…<18>²'ÚGK‰<4B>&Ü´|œýó7³PŸÕŒŒ-v¨õÐ_Sb&^YÒ±bÍ(KÏñ´9o’À¢í¼ß‰{Cž³m<C2B3>F0w
¸î±Æ£-¨9õ<5	LÌ¥ì

hosts/hydra-1/secrets/nix-cache-key.pub

@@ -1 +0,0 @@
-nix-cache.clerie.de:bAt1GJTS9BOTcXFWj3nURrSlcjqikCev9yDvqArMP5g=