feat(MOMO): setup syncthing and vaultwarden

secrets/keys/wireguard/dryborg/privatekey.age

@@ -1,9 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 lfMVeg wulS3MiEAmeRiQWR+2m6WB2lPgPvbGLIoPpIcpTjwEE
-I0SrCm+wG3tRn1St9+bnwAJGSWAIA2TP6LKPQCaVCdc
--> ssh-ed25519 2ycGcg +gfN9hAI6S+2CVGp0xi+M3OJ2JfqNCubYFhKwXa86yM
-yWls3U6P8ViO9a+gNuT/fW4txOfDD7wqOmQz6k6O2fA
--> ssh-ed25519 SiBV3Q 8+vLtNNsx2DWecy31lkXpGac78wpHu2xSu/NF+RDZGM
-l4FaoEWeMgPIGnEuPJkDoFAmoxAM3gFLmiASxqZ/Gt4
---- RsgxQpG7CP2JVKUmJC5975cY5hCuXeDYF4wMoOBM2XM
-,\à j^NåvÏ•Þì‘Çw‹‘”GÏ„I
äY‘Ô…D¨ËÕOÍÞÌ_‘œ@u¢“nõƒääúìÓàÙþ¶è¯”S'HŽ³&v)lQ
+-> ssh-ed25519 OFTJeQ GLjSObPnRwi54E90PLmN56+01/XWV4ncMb2hIQVAIRM
+K5wnX6U4R7vWxJIAhR46Y93nYbfY8ywgCBTpl32h3Ok
+-> ssh-ed25519 lfMVeg P/y5kw0684nepV8zw7AVrKJdVXp1m9QRB92emoZtgic
+3jdvPwfHqNCipa4FZCheRyloGTpl+nWopB+VmYxmnEo
+-> ssh-ed25519 2ycGcg i/V1Jxl9MZXbkFceyTx/jA5mgt55u6pXvyZMUnJKnSI
+mzZDa0QvpixtEyk7kR98a2MBTHq3FXLIifQ/RH7WsIo
+-> ssh-ed25519 SiBV3Q 3ihfgMuU8fsUkCHOjhg9+lZxK3hreLV+OD38nfJvNVQ
+TzKuRHW2Za7NLK32MFzXlXlBJnyTvaL7907Fv42s2/k
+--- fMhdIsuJ19h9GqERg+zyub8z2L46vIoIb/RF3NC3Izs
+¨Qg¢yzË„×1„Ör¤…&–ºÊ¿MÁÞV9*<2A>T#ÇýŸ`¦î:TÅQt™£„ ÓãÆ–92$vR_ïQ„4såßÀçFfü4

secrets/passwords/ddclient/cloudflare.age

@@ -1,9 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 OFTJeQ Duzy5R4T6qjIQNDaM/rMLtn6owinrOPR7bsj+zNyF1s
-vuz3upwrRY+p9neicV+/MYqIpqPP8LxKjb/MSd3AG50
--> ssh-ed25519 lfMVeg F5b0npiotrpPjEqEEmq13iIWrEG1duL/r+A+fFt9MUw
-hXV7o5UqSnrOYmTO4PudLMH2nTn3z134YuD78ogNS+Q
--> ssh-ed25519 ueRyzQ Msn3gbqPbt4anEbYGvuroa3Clgldv0c2yjJm8sviWig
-qwsS+8V0LvR6aWWlC6/8V7oP4ClTPIH6UF7vIbSFLM0
---- /UJ64tEwx0Jus9JEby8z4X9LtlPoYMCUTMk3T50Flbk
-Öþ}”ñEuKôh§°<}gîÃ×£§¸£“)íNGñxž©˜³Mߣ‘{*$ g`)?õrNýFò*ˆ(„é„Ìw	'i
+-> ssh-ed25519 OFTJeQ YV3PYBAAYyXqFKJZMzgWcvUiUMr0FXT1mIVu5c8ADi0
+iYOSAD0fp2AQx2xYrwZVKz8jcxLI6dZaUYAEeRco6n0
+-> ssh-ed25519 lfMVeg aTw9/kKTrhfe3wuJU61+4WWhu0boEmNQW4PH4WymfQc
+pW37WMQO10S9gn4FPlNQ9I8SZiJ8zrN539WjZ5riG4U
+-> ssh-ed25519 ueRyzQ jduJfxSB+1+TXaoZQk8IC2OluzEhIf2PKLrqgZPgPgU
+DFnKYH1DGcvdBblibUO+1apJ6658bUJOsb+ZCVPScy0
+-> ssh-ed25519 IYnDOQ ccAK15UhEam0UtwKEPpjPdIOdOFmBRY6riNAaoUNfRE
+RqOsV0RIp8kB+pDQeidONMviP4dKu1hiwTR73oa3Uxo
+--- 67ZWOJB/9Zc7tUTHgVFFMWWeHOU6RzIf2HN2qXH05RQ
+IÄ%8!Fê;ww¿ò¡kÌKÿ}¹¥äÇÚÿó?KùÁõŽ§dÊ ÈyÇþ.ù¼ÐN$»›£fçeŠð‘ü‡
?rÇò­

secrets/passwords/nextcloud/admin.age

@@ -1,9 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 OFTJeQ ZR/HXJbMffa0GONFhLI54XbnMfUa44IBtmc35WfFalE
-5k336aLzA40CP1qy1bhpAeOBMf/v8acDsbT3ehJgNH8
--> ssh-ed25519 lfMVeg rNkPlKPIOnU3MX1DRAAqUrVCl2aFCD1LiULqgT94ih0
-s1dizDfvjFexbtOaY+8LHT4rASAmna+YtI6sThwY2lo
--> ssh-ed25519 ueRyzQ yXUlKmMDvGQpYHDPax8AOmAupPm1MlOB8O0dWLZlPxI
-a/+l6l8f6Bwl6cmfob0lZnBriQ5uGE/zK/JDRwsp3+o
---- k6YDdEeu5493P74E1pt8yOaWrlKxq5KEEfokK+FaFq4
-€Є€¤u¨nh(§Qð‚yëòÈ5b¥¥Yω<·›ˆ—ä¦éZ„Döwæƒ0
¶Ì #8¥¨t¸Ò…!±¯‡
+-> ssh-ed25519 OFTJeQ Z0zahyJ9ZN+iPyEGZcdqkctRGtZHedg0n9hpw7yCr1w
+tTaDe8+Ki2S7v3F/+0KgJ6EyS89WETy3/pSWUf3qA2g
+-> ssh-ed25519 lfMVeg 7yJmsdpEXhgRekyoMU5Ut62hvo7sI+ZyLoasrzjtOmI
+qpH5kucqYFin9PZw38am7WkJWH+Cp0C7em22QiQsQJ4
+-> ssh-ed25519 ueRyzQ WGMVo2WuCuHNTZ6/a+3cPOXU50EEK/yhnyX//IrtUx8
+2t+CUgdBuivea8Ij4tavUQTX2mzTpIUz/8FuweVJ6uA
+-> ssh-ed25519 IYnDOQ P5amA/utlNaNK4/YP1L3RkL/k1N0MtucTobGZxeKqw8
+TBwo9Y/YTzJxw0rmzz6V1W8kmQYHw8YNt+/MLOQalyM
+--- Ykljx1ff/c4OkoyHs4rzrKnfIEuAW3zM5MCk5p/UT1g
+†„.˜ÁÙgåã:Õ¸¾…ód–§«¾J·¿~ËxíYe߬<C39F>ù,”«@<¹CKk0†w`¼rÆ~†} K

secrets/secrets.nix

@@ -2,6 +2,8 @@ let
   APPA = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGvQbYHiB17BfsvHBgPYJN50Th+da+rtbsTIjOSaT+1Y root@APPA";
   gandalf_at_appa = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFrE1fMXjJXI8f1mKvhLquwSsb4tvLh5Tq0n+yOakQks gandalf@appa.dryb.com";
 
+  MOMO = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQ8YOOaQj3NnMlTjlFX9iWDIpPMrO2W4EkL65GJP+y4 root@MOMO";
+
   T430 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGPQKzUqdLY58tFTB5zOeiTjbbrDvHA1speD/Rg6oOfz root@T430";
   IROH = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFYiK3Dl8QvAZfY7Cl1OlF9aXKa/an32mtrCNkavlSNG root@IROH";
 
@@ -14,10 +16,16 @@ let
 
   systems = [
     APPA
+    MOMO
     T430
     IROH
   ];
 
+  servers = [
+    APPA
+    MOMO
+  ];
+
   clients = [
     T430
     IROH
@@ -25,13 +33,13 @@ let
 
 in
 {
-  "environments/acme.age".publicKeys = users ++ [ APPA ];
-  "environments/vaultwarden.age".publicKeys = users ++ [ APPA ];
-  "keys/wireguard/dryborg/privatekey.age".publicKeys = [ gandalf ] ++ clients;
-  "keys/wireguard/dryborg/presharedkey.age".publicKeys = [ gandalf ] ++ clients;
-  "passwords/anki/admin.age".publicKeys = users ++ [ APPA ];
-  "passwords/ddclient/cloudflare.age".publicKeys = users ++ [ APPA ];
-  "passwords/gitea/db.age".publicKeys = users ++ [ APPA ];
-  "passwords/nextcloud/admin.age".publicKeys = users ++ [ APPA ];
-  "passwords/paperless/admin.age".publicKeys = users ++ [ APPA ];
+  "environments/acme.age".publicKeys = users ++ servers;
+  "environments/vaultwarden.age".publicKeys = users ++ servers;
+  "keys/wireguard/dryborg/privatekey.age".publicKeys = users ++ clients;
+  "keys/wireguard/dryborg/presharedkey.age".publicKeys = users ++ clients;
+  "passwords/anki/admin.age".publicKeys = users ++ servers;
+  "passwords/ddclient/cloudflare.age".publicKeys = users ++ servers;
+  "passwords/gitea/db.age".publicKeys = users ++ servers;
+  "passwords/nextcloud/admin.age".publicKeys = users ++ servers;
+  "passwords/paperless/admin.age".publicKeys = users ++ servers;
 }