feat(hakurei): new ct

systems/hakurei/nixos.nix

@@ -0,0 +1,19 @@
+{
+  config,
+  meta,
+  ...
+}: {
+  imports = let
+    inherit (meta) nixos;
+  in [
+    nixos.sops
+    nixos.base
+    nixos.reisen-ct
+    nixos.tailscale
+    nixos.nginx
+  ];
+
+  sops.defaultSopsFile = ./secrets.yaml;
+
+  system.stateVersion = "23.11";
+}

systems/hakurei/secrets.yaml

@@ -0,0 +1,57 @@
+tailscale-key: ENC[AES256_GCM,data:HmowloL0TsKM/XFI5GDd6Nl+9uSZcYevB6CObq1Eg5cvyhtb4pJgMA2GRxE6mJQXva5cet56Udlj,iv:4gSDgWIAAZLokvJzEW+JF0xoNzHr4zW1Zc9qJdpgcc0=,tag:hWMRNc6Odfi19HnjwQSGgQ==,type:str]
+sops:
+    shamir_threshold: 1
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age12ze362pu5mza6ef9akrptr7hfe4auaqul4rkta7kyy2tnrstqensgmujeq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5RWZXeVY5dEkxaEJGRUMr
+            b2s5ODlvaHN3MTBrWTJUU3o2ekphWnMzaER3CnFBZFM5ZXlVcnJMM25aUU5EMW5X
+            UzJmVGxtZDlHQ2UxQWhFTnFFeUhVZW8KLS0tIDdEdlhwT3MwM3IyMFF6NGtvcU5w
+            ZEpzdWJZWGdEaElLZUc1YW5ON0YrM2MKk/dZvaFVzfkMD3poreaDGfJwG5j5fL3L
+            kuV/3fEHBf5HszR/VTy/bZ2+abN6x3UG5h0l+QaS9ux+mtwFCyYYjg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-01-19T18:41:54Z"
+    mac: ENC[AES256_GCM,data:ZBHhH10PYH6TTzezIRORy67C8n1ItvLLlhHs+n7gB09JK+IsdKh4MDWtCNdo/2lLBFEKknn46HkOqFeaGrltkb/DryzPdRKBQSV6aj2Tfk52t8RrvgcG14iFqoifZ30STFkipA4jMuSuRnlk4VQfrZMyKJj2RpcpqNn5pYLdXJM=,iv:rvzixIXKC+E1LS0yYHhIwh0Z2aQ1vgd3laMPV6GCKD0=,tag:Oc1xnIuq8C5IzZAfpoargA==,type:str]
+    pgp:
+        - created_at: "2024-01-19T18:57:37Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA82M54yws73UARAAsgP7VIg7ScHm0ak5pam0y3lIJrirZPLaiGL//eFABMGV
+            13FiY4eRbZkhrMj0GhgJAygq7jayBk/u6YR1+SIYhVQywfAGFpoZOofmu0x+wCJS
+            z6VQzKONLc3V8oIAJk1xnb+wO6foz6RJdgb0h+L1OhpjrMhm3VoNgBfD9P2uNLE4
+            NZVIOUHO/kGs3rwnKX6dA44qfRBEB1ZkjjDcIiLVOCAZJXyoLf11CPP1TnUPdlIP
+            CWcY9V63B1k2VtUZN/ohdQVuDb9Kxlp3cRHvTZozWcHjtGmyuUA8wKpM4cN28eS6
+            lohxzRuwzWQ2iGpXCA5Ezni1C9+DVjAFwr7diqPm0+R0UCNSuJhKnb8ToijScRAI
+            OgN60BUsl2+ZDrmBOdRmqeg/7VlsWBera/a4awfoXjcZrkW4GY8W7CiRs6ESZOm9
+            Lgj9c90yjm4pimdQpTECpcmzV8baeoOKlJDf8UerXEYWaRiO5cpvC8Zg1v8+pw9E
+            ulq7K8LTOdnGP9DlxpI/CpArq9AlgSq59Z7gtizwfD3B61Ws9iAQ9v20pcgcucxe
+            Zce+HkrAlI4Y1r3nsf7WWXnTBzuLGeNq9vRmgEHI/i+FccuuitMadNQrAEKZbMdM
+            RYpve/5QOv7p9OVncZyKtRjh27E87rVZTCNTRWLbK7QFWahV8L9q1mTV05HQwKLS
+            XgHkiwskvurbzoZ+/TTGJrwnV6GMeiGZQzXb3DtfuNs3SUKpDl1a6oOCmStmJEuf
+            2+5F6VPSveZPa6dBOwB7kz5ceMdXRjjDaEkPaqcABbki5OzN2uSOVoVA/xmuWT8=
+            =R5yS
+            -----END PGP MESSAGE-----
+          fp: CD8CE78CB0B3BDD4
+        - created_at: "2024-01-19T18:57:37Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMA2W9MER3HLb7AQf+MnNQniN4JGQyzaHxCn8nmE7xsBtSAhc5ryxJfBBkFsog
+            1pKjSwYFNA7kCYD3TY38FG9vfWyjOoDiMgnbTICZUYdDhn8Li3OL8x2YD+e91jt6
+            NrVXoBJUwWTnBDCpa560QVUzDEwv+pJWZHDB2VrS7nfL+LqY6jOFCAgGYZjVC5Wu
+            WidT5xslLMlgMfcR21KnShQVV1a++G6119aIia/BeDTF1srqXssW+LyWfNRkQ16v
+            1EaXKpIst+qJReX2bEDZYIWC3ce9nshLDsU3gaFb5XsJPJcVcd5uuZ82qbEvgjEB
+            NVk03qRhjV/ATRJR64jz6iXXVj2yKN+s1mpTHCS8tNJeARDwG1pULFEdtblqeMON
+            bGG8AZpYhcJ4Bh3TLCzIVa0Ijqy90VYRI2gZdAIl9ECwM1VV95RHEKeSs1M6WDTF
+            xUX3fnEq4mQCKcTtPQoU8z6aiglVRmbRMApw9tAAcg==
+            =jMl8
+            -----END PGP MESSAGE-----
+          fp: 65BD3044771CB6FB
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1