From d7e82621c8eb85aeb5b6f824c5bf32b454415c62 Mon Sep 17 00:00:00 2001
From: Andrea Ciceri <andrea.ciceri@autistici.org>
Date: Sun, 25 Jun 2023 12:15:18 +0200
Subject: [PATCH] Please work

---
 aws-credentials.age                   | Bin 0 -> 1911 bytes
 flake.nix                             |  24 +++++------
 hosts/default.nix                     |   5 ++-
 hosts/mothership/default.nix          |   2 +
 lib/default.nix                       |   1 +
 modules/hercules-ci/default.nix       |  21 +++++++++
 modules/minio/default.nix             |  17 ++++++++
 modules/nix-serve/default.nix         |   2 +-
 modules/proxy/default.nix             |  19 ++++++++
 modules/transmission/default.nix      |   5 +++
 secrets/aws-credentials.age           | Bin 0 -> 2000 bytes
 secrets/cache-private-key.age         |  60 ++++++++++++++------------
 secrets/default.nix                   |   2 +
 secrets/hercules-ci-binary-caches.age | Bin 2097 -> 2141 bytes
 secrets/minio-credentials.age         |  32 ++++++++++++++
 secrets/transmission-password.age     |  31 +++++++++++++
 16 files changed, 179 insertions(+), 42 deletions(-)
 create mode 100644 aws-credentials.age
 create mode 100644 modules/minio/default.nix
 create mode 100644 modules/proxy/default.nix
 create mode 100644 secrets/aws-credentials.age
 create mode 100644 secrets/minio-credentials.age
 create mode 100644 secrets/transmission-password.age

diff --git a/aws-credentials.age b/aws-credentials.age
new file mode 100644
index 0000000000000000000000000000000000000000..3e1ea6ec76f30c95aedc547975fb0d0a730dc53d
GIT binary patch
literal 1911
zcmYk6$;<Qx0f(*Lf=WRUEk#~ES%$aSlgXu!J(*-CnQW8EMUqVR$v#;xE_kp9m(vG|
zdQcR#_2ws9FM<_sdMU*!RTM!#4|=GycqsKlsQ4E=zr*wV{3N=Ms<2y{TUJ-k)?EUQ
zFmV6eUEinoUGLw4w4X2&V8&BIN$QTq#bcvgB_)>;teZj3n0j0v)T3XDwRlvK%hK#`
zaV51ED#Ry4Cu|Uj#v3qM^we5p45I>Q-&9hzEYgPt($xbNA@c+~!BtLP7A*ngEjo_r
zhNLwxh~{h@NQdBoc$#O0vd4Z3_PAoDn~F6EnQPnq%s`-_koj>TMy4dSZ6&R)GPsDB
z_)&n;2j?>QR{%c-Of&g-X4p%T8HjUsCUB~DxX>6{Pga?L)fG;_Gvad)+3qjCU(ZT^
zY4v$tG8hJ0^NbCql;Aext#endbJd7?ozu12YJ71Wx{yZt=Ei44rx2TK=!xAHw$|`8
z)bo~-fB>D0jp~)`Wh)pI2kj`<v``OLLCbR{R%R|RC<<Yowge%;Hm29}EV=@sOIoyp
zoju@&(dlrdP2>zQaeqk1&N54gOZ{y_9ic<3wrIP{1#+RbL*HQ;d7P~3H0aw&K1H3s
z00;RDw%VC1vwH1()b6#WRk7R>h;Z1#ygh@iy#bfGOWfY^am<a+8<&-<d|-k;X9EC1
zZPIHZk=`)tl7Iv1MPBUJy2mT=qN8WU!Ikp7O3l78_BN<kBDp3UpPX=CIxZj&oQSqI
zieeN^4%-r5TX-@qGEvzHc-zM}`y5#rRix@5bQ{6j&t@xGtBV#D8>rVS#{yS=MuoZ?
z;||0^i4K@im`%+RSVl=RVoQUxN2-p02zdMdJw8eu3erH=A+&oP)h5c8)$n|mLm<}b
zJ((#unK^0BRlIZ!Pfppilre7Gb=^f_%qVn}g1pQCSVcl(MGM0zg4m7E?8InroQm%J
z!y4@(V_3G>#&%I#@6I$>mp7v1gX5vaPAD|zb_pQcMa;0em_$L!V~#U#<GGZfl5_^D
zO+6@v*M?1o5cR=nGmhkV61TcWaPWn~_d1>cs^@I?JxLV{AzjIGY6!Ivj~0t?MA@CS
z!fQItfwqJ^6dM<3oDISlhHPe#+OKi};ef})sNRf$;hE8@58a-nBpY#k`<!=L?W-;3
zh)UwtiaO3mf(&WaC>Ncp3q5neC0>EnDA?N&VJm)W@$^KGDiIwze0NK1PA%PLxxyYV
zE@9f^8x3}tSzm`R@w?P~Jl#lTU?tYtRE8nU+hJydwBR$r@;w>O>2e6;Zb%RNmaJl2
zVok}k%VAlXHjws3w(k!Ki~{g(ad^p{(twF}yC6M>X-@6k*kqPtuixAY-g}(idw2{Y
z%4C@^;RgpQqs!68oMOEJGT{=olg2d5bi?tA(dKm;2M20v%xt3=C5RK!Vk{M2nj1m(
z+AM(X>KlxOFbM%I5&&x<YMv$hP<Q#`kkoj;?l^|p!G;6-$cpV+Wq^`MuEpJP=IRKc
zMumh2&S)N6yt`O{TV_i(Vq<<T%M9E=0;6$~*63nCPAjvOX6XX2Gkd-C#k(Fy7X-&)
z>aN|`dPU#yy8yaq5sb1+OTdEKlqc0cX!>-1EHn+0d1};pMm8$H2ZAO;I{_?XFT>!{
z1DmVs(?-!8bgg3D?IG#OM#3(~2>V|(@6v_^bd}>B=5M#D1);tkWw*Ff&D$)Am_fj?
zf!wr+b54^x9k;oc9Dy0$lT|5iLWDm}Gk8ESq9`{zTZS&gaH{qNajl`UG@|amH03_&
zBEOIB;@jOt{&)@q)8RmGwBnW?)MlY~N632oiv8ns_Zo12e}C6_bm*lLwwxAp6^Ba4
z15mucsFmvMuIoG^?W{(I`9zw4-@fP7^zHZu#V7ypqkld5&p!qqeEyX;e<?kBK<|F~
zxwqf?+Nb#sy!g9cfAk*@9zFV^@ZgzuzVPP1KeGSIr?hXf*&E+^E&t6!Dt+}cZ)6{v
zzw!E0U;Xe?Uw_}d^78u9w_hk<c=>04qTl(|FaGv(>d7DfJ^rrw?6<!E<?O-JpZL)4
rpZm+h)1RMs{)ewT@ma6^(of$1`a|qR>3e^DO?dC;tGD=Po_^^+-Wifo

literal 0
HcmV?d00001

diff --git a/flake.nix b/flake.nix
index a6d5945..42fd667 100644
--- a/flake.nix
+++ b/flake.nix
@@ -95,17 +95,17 @@
       herculesCI.ciSystems = ["x86_64-linux" "aarch64-linux"];
     });
   nixConfig = {
-    extra-substituters = [
-      "https://cache.aciceri.dev"
-      "https://nix-community.cachix.org"
-      "https://rock5b-nixos.cachix.org"
-      "https://helix.cachix.org"
-    ];
-    extra-trusted-public-keys = [
-      "cache.aciceri.dev:4e9sFjWPUOjGwTJE98PXinJJZLwPz0m5nKsAe63MY3E="
-      "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
-      "rock5b-nixos.cachix.org-1:bXHDewFS0d8pT90A+/YZan/3SjcyuPZ/QRgRSuhSPnA="
-      "helix.cachix.org-1:ejp9KQpR1FBI2onstMQ34yogDm4OgU2ru6lIwPvuCVs="
-    ];
+    # extra-substituters = [
+    #   "ssh-ng://root@cache.aciceri.dev"
+    #   "https://nix-community.cachix.org"
+    #   "https://rock5b-nixos.cachix.org"
+    #   "https://helix.cachix.org"
+    # ];
+    # extra-trusted-public-keys = [
+    #   "cache.aciceri.dev-1:aNP6f+rRTuDHi/45L1VBzlGchuj54/mI2N/22qTWgzE="
+    #   "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
+    #   "rock5b-nixos.cachix.org-1:bXHDewFS0d8pT90A+/YZan/3SjcyuPZ/QRgRSuhSPnA="
+    #   "helix.cachix.org-1:ejp9KQpR1FBI2onstMQ34yogDm4OgU2ru6lIwPvuCVs="
+    # ];
   };
 }
diff --git a/hosts/default.nix b/hosts/default.nix
index 2d0af7b..057cdeb 100644
--- a/hosts/default.nix
+++ b/hosts/default.nix
@@ -188,6 +188,7 @@
           "rock5b-wireguard-private-key" = {};
           "hercules-ci-join-token".owner = "hercules-ci-agent";
           "hercules-ci-binary-caches".owner = "hercules-ci-agent";
+          # "aws-credentials" = {};
         };
         colmena.deployment.buildOnTarget = true;
       };
@@ -208,7 +209,7 @@
       mothership = {
         extraModules = with inputs; [
           disko.nixosModules.disko
-          nix-serve-ng.nixosModules.default
+          # nix-serve-ng.nixosModules.default
           # hydra.nixosModules.hydra
         ];
         extraHmModules = [
@@ -234,6 +235,8 @@
           "cache-private-key".owner = "nix-serve";
           "hercules-ci-join-token".owner = "hercules-ci-agent";
           "hercules-ci-binary-caches".owner = "hercules-ci-agent";
+          # "minio-credentials".owner = "minio";
+          # "aws-credentials" = {};
         };
       };
     };
diff --git a/hosts/mothership/default.nix b/hosts/mothership/default.nix
index 08b5e07..638ab7d 100644
--- a/hosts/mothership/default.nix
+++ b/hosts/mothership/default.nix
@@ -20,6 +20,8 @@
     "nix-serve"
     "cgit"
     "docker"
+    # "minio"
+    "proxy"
     # "binfmt"
   ];
 
diff --git a/lib/default.nix b/lib/default.nix
index ec40a1c..d461516 100644
--- a/lib/default.nix
+++ b/lib/default.nix
@@ -4,6 +4,7 @@
       ccr-gpg = "ssh-rsa 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 andrea.ciceri@autistici.org";
       ccr-ssh = "ssh-rsa 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 andrea.ciceri@autistici.org";
       oneplus6t = "ssh-rsa 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 oneplus6t";
+      hercules-ci-agent = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGPupm00BiveTIYF6CNwuMijF5VvEaPDMjvt+vMlAy+N hercules-ci-agent";
     };
     hosts = {
       thinkpad = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDZMyLFfuBeDfPLn8WL6JazYpYq3oVvCdD4ktyt915TL";
diff --git a/modules/hercules-ci/default.nix b/modules/hercules-ci/default.nix
index 86b786c..14b9940 100644
--- a/modules/hercules-ci/default.nix
+++ b/modules/hercules-ci/default.nix
@@ -12,4 +12,25 @@
       # secretsJsonPath = config.hercules-ci-secrets.path;
     };
   };
+
+  # Popola /var/lib/hercules-ci-agent/.ssh/ e /root/ con chiavi in grado di accedere root@cache.aciceri.dev
+
+  # systemd.tmpfiles.rules = [
+  #   "d ${config.users.users.root.home}/.aws 770 root root"
+  #   "d ${config.users.users.hercules-ci-agent.home}/.aws 770 hercules-ci-agent hercules-ci-agent"
+  # ];
+
+  # system.activationScripts.aws-credentials = ''
+  #   install ${config.age.secrets.aws-credentials.path} \
+  #     ${config.users.users.hercules-ci-agent.home}/.aws/credentials \
+  #     -D \
+  #     --owner=hercules-ci-agent \
+  #     --group=hercules-ci-agent \
+  #     --mode=770
+
+  #   install \
+  #     ${config.age.secrets.aws-credentials.path} \
+  #     -D \
+  #     ${config.users.users.root.home}/.aws/credentials
+  # '';
 }
diff --git a/modules/minio/default.nix b/modules/minio/default.nix
new file mode 100644
index 0000000..8d13d92
--- /dev/null
+++ b/modules/minio/default.nix
@@ -0,0 +1,17 @@
+{config, ...}: {
+  imports = [../nginx-base];
+
+  services.minio = {
+    enable = true;
+    rootCredentialsFile = config.age.secrets.minio-credentials.path;
+    region = "eu-central-1";
+  };
+
+  services.nginx.virtualHosts."cache.aciceri.dev" = {
+    forceSSL = true;
+    enableACME = true;
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:9000";
+    };
+  };
+}
diff --git a/modules/nix-serve/default.nix b/modules/nix-serve/default.nix
index 7fd1f2c..df73cfe 100644
--- a/modules/nix-serve/default.nix
+++ b/modules/nix-serve/default.nix
@@ -16,7 +16,7 @@ in {
     services.nix-serve = {
       enable = true;
       secretKeyFile = config.age.secrets.cache-private-key.path;
-      # Public key: cache.aciceri.dev:4e9sFjWPUOjGwTJE98PXinJJZLwPz0m5nKsAe63MY3E=
+      # Public key: cache.aciceri.dev-1:aNP6f+rRTuDHi/45L1VBzlGchuj54/mI2N/22qTWgzE=
     };
     services.nginx.virtualHosts."${cfg.domain}" = {
       forceSSL = true;
diff --git a/modules/proxy/default.nix b/modules/proxy/default.nix
new file mode 100644
index 0000000..3d58631
--- /dev/null
+++ b/modules/proxy/default.nix
@@ -0,0 +1,19 @@
+{
+  imports = [../nginx-base];
+  services.nginx.virtualHosts = {
+    "bubbleupnp.mothership.aciceri.dev" = {
+      forceSSL = true;
+      enableACME = true;
+      locations."/" = {
+        proxyPass = "http://rock5b.fleet:58050";
+      };
+    };
+    "transmission.mothership.aciceri.dev" = {
+      forceSSL = true;
+      enableACME = true;
+      locations."/" = {
+        proxyPass = "http://rock5b.fleet:9091";
+      };
+    };
+  };
+}
diff --git a/modules/transmission/default.nix b/modules/transmission/default.nix
index 04b85f2..f3a000e 100644
--- a/modules/transmission/default.nix
+++ b/modules/transmission/default.nix
@@ -12,6 +12,11 @@
       rpc-whitelist-enabled = false;
       rpc-host-whitelist-enabled = false;
 
+      rpc-authentication-required = true;
+      rpc-username = "andrea";
+      # Generated with https://github.com/tomwijnroks/transmission-pwgen
+      rpc-password = "{9d03dda3243ebddfa44b0bebe099f611941e2fc31/0vvwdP";
+
       upload-slots-per-torrent = 1000;
 
       alt-speed-up = 1000; # 1MB/s
diff --git a/secrets/aws-credentials.age b/secrets/aws-credentials.age
new file mode 100644
index 0000000000000000000000000000000000000000..2cd90c2b698cdc396862e5d3ebca05127ee999bb
GIT binary patch
literal 2000
zcmZ9L$?NoX0mcPAXinlqgdTo)=q3J|Z8FK=MwZF?%{obDG9onlB$>%NSv?4z>cOHE
z^rS+u7eSEX3W6Z|f`S(*Eh=L1QV=SNC@6@&JqY4o@H{-9&l6<HV^T%k(%kd9damv=
zWW=DyPdxPf<+1C72ZRYSc7hJG;*(ooMDR`5RcGHFjwE4FZNJ5sAdvRLsiFtRq6{Ba
zjl9E-a@99DSZC+58`^vW5hE6vb!VVFd=DG?T3%{uzo)cWX=mQtl`?Ofl^vUad|rd0
z6R&qy$Q`&XuE@Q#VHQdWmV?{lJZu0dvY7>}MJik2w2Q7+lay}f8p**x;2g6Kx`2lI
zh3GD<lidqTI$K2v`Ik7XH*!Y#_w+j9iR_nbTOb^f!qyP0_>7$Kcqc6cD&L$V8O-SJ
z901(m$!zk5jSR&xC3;iqi}y{szXlT+X-jkgJ;sFKp@}C<WG$htYmxY*ES}S_3S0BY
zcn<G@XQCN|!{;R<IN^4>+-GM+yPb+>I*E9w8IlpI&y80J94|$LqxnYb$MK$^jbnku
z95M<L47E;Pv8UZ-9LemE?`3Ph((w^(B-qk-_nE5?WR{D7FYcVcUT8pK3xhW_w%@>b
zn-eya8Ohq`svQ8B14-v-;yqWU;H1omA@b8m&E?9hKsN4f-qrCo*MN4U&urP2I#MVO
zWVGD8w!|Xf;!5jUA00Y8C?z%P!VM`Xz+$&%na`Lj`M$i9c2j%Jy!fVYg`VJnw}%cg
zOi`VeMKxkCr5>M;9LX>HI2F%Zf}LpV(v}QB3rk2#bf)*G5L2wUE3uta(KK2?HK+SR
zxq~%&8C^9(GD~qLKCcFaRm+<-`fkDMph}jq{9lhPsUr{u(zSGAoLyQ8HOXV)7Mo^L
zIn0FJFjA1@3D2e0GQr>kYSwj3XOr=nLTJ&6$_#~-HRxb2yNwf0v){p&<}{<=QW_k8
z)QQ7wAK;>Bn=@m1n`FbX;xrcXWl6$!6t?Y)oe?6W;0l;vSen#QhR;>7-Cl%cF;>-N
z*5%mj4q38vd+Caw*YnV?-k#NIFMNtto`|7u6bRRJ`GT;{1y5Di*~ntCqTAH%gU$v7
zxoXT+%+!v)MTEP_RrMOcF@g;DjSnsgMz9jpRgQMrP@A3Elgyg55~gJda?-Y3i)_(g
zAqkbcNm0Z+<)Knjp@zYcPG&?$R8vxSEObS?Fgk9v3%DH!otEI5%p>zKc%d5=nyWX6
z?F(n$vi4c%I^!y|n7!2^or?yZkedt|@dlh!C%*0v8!+zq8Z%+LksP`AJBJO}*mRm6
z8-cgXTVE3;O%$b~v3hBajGLg?kXIhkG^CI|vTCI`X7Dgu>2BGEMQYu$6@X&wD?*?v
zpFodVx906O7citpI1cu!hK8J@zIst}K=($&QD<-B&oH?LARj>)d$__`0$V*DZUU>+
z$l~Rwac&`?K_DL0N<4T_=T`O{&PLn0Q>O-<viif(nR|*uS#{CVgKx$*@Ux`mPZBSu
z*u<Omz;l2O0~YUAC{LYUn8kXV+mzv*#x~iXPe?SVCruYA#BtT9uR(!4w%UI^PGX!S
zvE4%pyJp2aAn`1qON8hmW+-IGDzVbR9E)`GqKQRp*`3asjPB8;2IXp!+(zOMpy&7q
z00PoZ+9neoT~X@Fr0(5O(iTobzR&(YZCH?#YCVuMf6<qEw{?`+Zi~e}=%=|vF&7S4
zS80&&x~MfbB^vHSi-Qi9FLhq4X--s}5^wcWK;b4+UfZ&)MZ-+#n(BF1ekaY;=Etl{
zf<Ad*(?{dE?L(gFeTLK!u7@|Au1&m&RF5+ZT+%$Nsxl)F*3D8_OZ~LYSuu_bF@@bI
z6b%U7I$skC6@5caAUm+<lE@aDy1)u&U$X*B6$WhBV=&VEMouSUB}=d(F#|n5K0d_h
zJ`KqYcO%b?Eyk8dO&sfcC}FLHCUmyGW6ILTbkvxjx8C)&KRx;O2mbiQSKj{o$NoKh
z_Cpr;_|MOL&U*JJe<gq6C-kdt$G;Pm_kQ|i<q0vp!T<F4-vci+fBw<nzWD36zW%c}
z&hL49|K#<LEI&qn@RhIrb@<I+{`TzQeZ2prmjL+GGvXiq^~3Lf3%Si7fB7HB4})h=
y>7`eG{^qMM=xXxaUw(%UPtQO5-1C2bvG{26+H0@B`HgRW@XNnI-(QHuZ~p^m`lUMn

literal 0
HcmV?d00001

diff --git a/secrets/cache-private-key.age b/secrets/cache-private-key.age
index 43af2dc..191dd9b 100644
--- a/secrets/cache-private-key.age
+++ b/secrets/cache-private-key.age
@@ -1,31 +1,35 @@
 age-encryption.org/v1
 -> ssh-rsa /AagBw
-Mvd5yqG8TvsmjbSB3l18/IYLIHVgocQq5cPsxkSUon6FdxllS9Jlk8Tm7PwrZ1lX
-VCks42+wowt/e1OMEyYb5GFMAqqV1V0esqGwtmmDj6Kqmak1R7NhK1gsSkW/rmJV
-mW5Azdd2yiQOFmTg4AjZBd6HSG3OxuIxsQGQf2YKsgbXqjyfmvqRKqj4iePTEhk2
-On20v5pK4BvgGHN/Z1BPn/6bnu369kLrEQaA+dIAWji0uWRCw0U5etT3jNZ5F7St
-EaiO80IEkxGNErO4KoDyKPVORwV2YwSzx0fkvCqjNfUKoIf9QactY8fYRtOAZA3R
-sADoHgT+dFIJaUXVPl8GQXdsGTGWVPutAMPciFh6u7q1+RvjrDScCR/wQm799uqr
-QS6zu2MISSFGiwq2VPWrZ/5VTplIALWW2SXhyRFVHSWIo5IgRlw0HHXm+0EVEPD8
-e8iGC2DpzLVTTKoM7a2jIzQWitjcunPjg/I0UMFwV50VI5xRQVvxQSvmmKWi82St
-k70ATzyruvDKYU2NhvABAnBHCLBzUmcdFF/N1suv9bC0lUnx/6b2AD3HFkAW3X3f
-WfhWX4PfVq/VbGCc+Pb481M6cLLmyoY0TYa0kWiJ7+RZpkHYFmOlbfhXpmfOgK1n
-Q56bqK0lfPIkUPXC121AdLHmS53F80CfhWB3YCQfJC8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 -> ssh-rsa QHr3/A
-MAoefMyNPytb8ps8uxYm+G5qdlNAq/RxCarVKILMqMdHKRjN7jGlC1Ek9UkfRC94
-RL/g7iN3MtH20/7AJc9ZNAcfmi/2IhgD+wXAqTeqBvR8FnwUb4Cp0hhq7wJBboTw
-IASoqB7c00RdZICx/aPtTVRZ7IYpBKGoIQJvX0YcMxN5MzJIVZWt7dYrUuzpjUry
-VmIZkiC5qwtrH1cOmo+PeQuZFnkRDEV5H5oPw9/dssnmxlC1oz4TxXTDpKuf1aIP
-tKnHtHtoTjXHenGTexkjF40SZnOfLxPo3f0CXsyZg5bNHv5wRfKSBcP6mye3SMWY
-UOvlL3vjcPGJFhYL05mhjHfLNvbdYD9E9+bL9E9mj2z2xTaiy38yXuU1G+8PFOsn
-tmDc79T0ti6cV2hNGlTbVN84Fq8MvtSEokU3CjRFO6y/opfAKRQm1zXTm+dYx/8n
-Z6AEr8bglgGGk4/Ix3e47/SQwUSpHqgyqK+u0aSKvCHJWGDQIO+AiPlc/NxuP10J
-+LPohQcl/pWy5sLI0Vmq/WcLz2a+G2MMQ7zTlhwGhYdltX87u1sxp8oarjlEmVcB
-6Vj8srM6lDhh7gvdcghFxS2wq92sGjFXK+IM788O4rnj27crHKARrjZUFZkeIHUl
-9ZbKbW4qIItvodA216d4lq/NwpLp9oK/w/sgNVJFAf4
--> ssh-ed25519 q+UPnA DDbKB9Jig+8Bo9SyvyFRGPoBe00ur/ZOLkFV+QTw9Vk
-H7eNU0ye4m9J8XYPVDx3+rcTo3ZCgzuJ+iYuT0LHpz8
--> x-grease {=+p/ IjewDI O-Ve~-
-j7i+qmbUzxywqb7PLP+3Fnn2Vbfa17HUJjUh84KxtqxAY0QQvJeYQloj
---- GEBBo85Rl8asnNimvsLOVlWw+Aybn4SsaPO8D7cQZok
-a̱�e�1�������Q���djN�Y��L����ғ��X��/-�%�*�Y���'����a�>U�~XZ��=�fQpz����ރM���\'WŸL{��䐶��(���$:��N5��Fj_u��$�+Q�2�zz��!Bm��
\ No newline at end of file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+-> ssh-ed25519 q+UPnA KJ0BUjRchm4pzRdms1t0CncO6xIlo7TBsEYrpypz0jQ
+6E/K4Fc0x+WOcsBuQhIsULDB3cydaemXJK7GFXH/ZSc
+-> o-grease 6C*X{Mz ;7f"Rv
+/uRuFT4WRwLVSBkDtkZr+zylF1+6u2MEIRH70YVeG65J0hVC45lf/vQQhela7DhE
++m9iGkU8Kg
+--- dxP5GJFTUBrDcja5dJPuDjH7XJH4lY/s3R7EDhdhcO4
+�A?T�$�����Xω�ɋ}�/Κ �N����[,�f���
>�YY
+�l�]�c<hѰ��%
+��7��^i
+�r�o�F�_��	!��Sϟ�I��z�����D6��dK�j�@8�u/4�f�D^�
��o�
;9^
\ No newline at end of file
diff --git a/secrets/default.nix b/secrets/default.nix
index 0622a3f..27fe2fd 100644
--- a/secrets/default.nix
+++ b/secrets/default.nix
@@ -12,6 +12,8 @@ in
     "autistici-password.age".publicKeys = [ccr-ssh ccr-gpg thinkpad];
     "hercules-ci-join-token.age".publicKeys = [ccr-ssh ccr-gpg mothership rock5b];
     "hercules-ci-binary-caches.age".publicKeys = [ccr-ssh ccr-gpg mothership rock5b];
+    "minio-credentials.age".publicKeys = [ccr-ssh ccr-gpg mothership];
+    "aws-credentials.age".publicKeys = [ccr-ssh ccr-gpg mothership rock5b];
 
     # WireGuard
     "thinkpad-wireguard-private-key.age".publicKeys = [ccr-ssh ccr-gpg thinkpad];
diff --git a/secrets/hercules-ci-binary-caches.age b/secrets/hercules-ci-binary-caches.age
index 03278e8b2b961863fb3418f4bae23795786d60a8..87da2f783e8b4b096ee9face77e7a25aad6e35c3 100644
GIT binary patch
literal 2141
zcmZ9Kd*~zu0mqT!x|*X-$r5_qFH!Uuf6dI!%<imGGOvBi%<jB*9z-~=-Pzrl-JQqI
z%R27rj1w)5BPr=cq-jcNrEvJ*%+iDMd}Ib%*-?fT2mT>Zpk3D=LG<?*KA+DYUuPEV
z1}iVEH~D<M`oub&K?MTrerhMn!re4;b|BK3Q6(U|zCu?uzE}%Gj1Fg0QD&T2A3{=(
zT7Z*a#7t6yZ&gwu;<A7`B7<zkJ+d0lQaYN46fj16)|i*a6(3LO5KTE{UQq!PNbMAf
zZIUjaSOocHw$|pB;y2TTp_5>iB?)aClIeTEfQX7#Ec2cDGEcN_Qsgi`*VHk?yD8lC
zO@fWbg;vXXN7P3&72}w@?b_M8Tn>aricA0!nqU(ak{hpjTHvO(YS1C%u{K^5)=(I2
zEjTO7nJ&d0t3U1;Mlz^KpO{98rEbEW3-qv+8>WVy_6Oy1PGH0)>C5O0t5dHVYGV$S
z%n;4(p4G{EGTu#dbf#aZ=!#ofsVj>H49(s)pfp;$DA^<&;u;*ak?TC5T$s<q@q*dN
zddAPu(DN6jD3xoyYX&0$8*?pL1S_DDu(qEk1hi~KYUBi{*olm?F6W@zh7^wDA%B^5
zroN@>R?z8cc-UPMg9h~ZvBr|I43MMF%D26Iz06|4z~)|CGZf3zJd~^4I+qo<<w0Vc
z`SX-AU3P(*w!z8Hb~;f#5}(2VR!w+Ju24hGvjBkueIl1Lg@J^jfnd}OwL;lsoxC5C
z3FoykW`)Odu^nm{xLQo;00u-x&&Mc~4}!9@jP341Ut3UQ%J>qhc`w1FxP&O$jORGM
zsg&7h4a1&2HwYneR$PUzfRs`fv1n^Z3k)$cigRv;u$!gJkvRva<<jtn+jZp%MKS!}
zAIpOjg-C!?m-K3DlLR^@Cso)o$q8W)NsBBJOkFovB8Y<6i?-g@knlFW48|j0l6s6D
z4vZ#S&;VS}eF?EdbL#e8xgR=<0V&bxa8YK1Ry~pXgT(>|sR>J14BO$-Nh_2>f6I2M
zX{t)x0$@T%P`WL%AS2&(NV@b_)pRb?cvxvzlyo7FSSApJMQRbx?LJr59U~S8s3k;U
zd&{%|TW<v*i1O`TIf@_~)XZ{YncYV8iS;NJgK}jIb<c*XrR1tU$lEGR`DO`cu&|P=
z+PzQ!arna6Xac@5xiL82av-VAwq{K?SRAGkF&Ol=Bs6d)AvZ2z9}W`H=An%j45u+q
z0sX2lioUAzjWHy{=ECOrQ_q|;PF|{N<S*e(R>l5k8s@%d!qHT2kd3mOMBQ}TMff3*
z#CYsW5u&i&#Ja#zi3ztIRa9-U2-D|KMJ1!YEG)-{w~k^IO=WA+R+`W=?Q{s&B%sXw
zMB!H<AuJrE0=2xgok^mI(1V#)=>63+U;}MLtp%zqdYyqW<rQjEaD`CTgxqC0pf+@`
zwJ@0;x{fH&Xf=GNM0~K;{1LCjD<?D}ZQD;dnjuqWK65dL&3kHZYFV>1@dq}b+E9lb
z#jLk=EUM>~Y%UN`12#kX0#K~gdZ@tZwBDrt6j}u+y5&ZMtMv*@L86k<Szv?BEh|A9
zdA(h`{Gz+I;LTcP7$V61nF5ijkHj85CPQrf-ya8l3&)Y}P6F!EirgVQLr&DOQBELX
zGh`DIg9Y3tf*}}*pvHJ0Rk$U>qjgyVW!4wSB`#Y5!RmA+;Q_-y!}TO4Mk}-3X$n>G
zX}R85X!-xPZ4H^cyt8OiA(3OKt2va<qIDc0+<1U&JfoMZte35@nrjnEuiwjnjR<Qx
z!nQh&)_}1+pE1rRbs)=f{S~6=#vDx{$*(+b!T!f~{SBYqouz@31%R@|INGXu;UZeN
z$P#7SI5P=!k>f{R%2|#e8`E~4TcicmaFL0otpmHeyF2ZMK}xewCXR`Dni)e1hEfrs
zTWgp$E8ee$kw9yayS0{p+H{UReDd-8Pu%>+CHU4e`yRjQd~x01Mvq@}*RB3nK6d)l
z?z#6Lx_{4)U%mV7k01Qy)!CEL73wQG@{9nP*M2o^>D7_lJy(9<rWY=L;jR;>UOM>{
zt?K?h$-i{>xnqxB^1z?>?7iW|myXg8&fmVIJlneB#XCOy(NUmW_m1_wM?U!TKha-$
z?$9SMdi~`C&sraO?3C8D*SG#KPx$@6{?7K=&)nC%DV)3P&}r!O-8biVu;ZP<6W9L&
zf8=Ou?}@`dFt2;hEgC7b-njFvOCP!B6?5OSe^7p9-}fYR?`QY^=+TSbcUZh{|CwiB
zyZzjEkKM^czj^!6LGdyrdF86d9{$(fZ$7ObIdI!+2VTAD_Xpo{deiCWj~>6}&FsrJ
zKGYn0;-{CZUsO*Y->*GCz2iyZuV?q%?w^0^@+1FzXy2J{yrKN=FR$+2`K{+4_{Y<i
zf!{y%^>>{-fAqldbAKP5N$z>)%HQ65&vA}bUcd2cFW>g=!<}!R1+RXP|H2iY`^lp>
KeCXo${_Nkrd;7Hj

literal 2097
zcmZ9N{qNia9mkCeAY~aF33Cp%3_?J;eC_qx>-BJo?e*cV?cMd^dcErpX6?1T>+|FF
zdd-Fr9l8i3Qyj*JAS5s{<7ONh9}+||F+Rma7UxJnB*skR6f;zulKJHa6XRd-O5U&c
z`}5J~)`k_%(si6WQTYBSor47gY<y^6mMu2YOy39M`kYt+Oq7+iWICZN-;~G_3rO1<
zPy%BFD*@>aq;*esrmOj~He@Dbiu$?Y`b)-3%YKj;QdkGjxw;;P1Y)6xV^3<C0t(=?
z8bLE{up(5!au_w~HxN56TYeeTA}Uz$QKV#3o$BYHI|Z^%C3HZ!10%TF@Fq4c>4a}6
z>v04k6*gF{<%XW-P2YfmrDqG4i9r#%7V412&wPi>0p1B0U??wKk`9ewqfScAuE_hU
z(Cd+HKO+%o)c`$b*~yr(H-vDvBf<(*<8V<csV-FkcGqRv#Y`<(J@#5-97lvnbJVS8
z4G)`vL|^hJGBh{()102?e(HA}T2V3%s{ENF&_f-l^g-rQf;*RDI2sqGAG?t^aIBD>
zuD}kl2whlh86_>!jmk*eEG6>^2U_zc>nIY&H2}?R`+;jKg&#mArPAJL(rP5~jID>7
zJ8l?CL^fwLZqBSXeJ<5`3lnU9n2H%f%%<J20*r<p&ix>(A}@%8YQZp_A%eh^h&bGm
zW-xrLjj>b~YpaAqV@>oBDjz%M$iaM0Q^XnoDJUB^GN(<%CMd<wWGc^7wqC48aXV;)
zc`CUrtAabzDLY=9NQ6^iJ{ya&k{M+TkqAI7#mG_dbVPSIV<hw%ox_$VyY-@GMxxqQ
zI@*G7TG|p@H7rUuBe=QD#qKaC;aCtGC{V}~LPSJlvPhhMmiE^ZuW}MX0<pS_jt#Ig
zL>Y80_h!oKe|s!;Qy9bnGG2IIKO6)ILn}qAMCqV`j`KAmkByp9gTkS`5}9tCM!dFk
z_<AH^SR-mT>>*WlVgUu5OcuJhZUk9RDxlQF%~5kR4JuxG2^;%rCL`fkNr)Z?7dmH*
za@<_xNk1-T^h7ty5#Xvl1p|@Q)EE|Cp^z}m_WU7VPkJ)m@5E(hLfEpZDI<FxWOOCl
zXw=5%6b^PsBi=Ly<T)!5X+G}yiAFkMlt>24l{_cXeFbtQIs^N{#P>8f_NQ8k)Z4L|
zHJkCgPJrnECvw2A1`BbM6LdzsJm@)|YxXirMLbCz__oDnkOwPuk4Y1xF9mIX0F&lu
zR!;nsf#s&s1u{D#OCo8e^T?;;y3`)n5~+3KUXBr1qG?90yCe#bY;nm#!USu!G`;#P
zL#EnzI_OprU=RvJE{Kkc>m3_5i9DU)=m@fwN`E=*;hbGi@d(3;1RJ0u*KjtqQaq22
zXB?N;L9hu_;A#kakx3105pHZAB)Y>)gH_EePy**cMhehS9WH#zFjGcd2&^Nvpx#8+
zN}5qaZvjXu7EzoPjwRoY42Tkh(yf+lV$qEk6k>~lTxnCQN%3X1v|Fuw7*bwe&O##W
z+lc@LK+`e0U>tfr)xt!{N<^obp%rMxpwf-tz%Hse+Hbp%Hxa`^tS>Qi<<&?sCV8r!
z&p94Qz!qx{+$Di&=G2hjF{+r2t^#IkI3EsGnI2la*QwDghWxk3mf2`Fq4vI{rU)Uv
zj~Mhuxfy#UY_R5dHW1}?FZB3EtG(*jJzglu&Dp~?MiUf(ppyaYP04W6B$4QrQjM@~
zuMaI6<BpCC9hK2reR66!a{vEn%QZOR#J3-Uw7Cywh_O>qo`ssu35wm%db(lrRWGaa
zh3*uHl8i)PD6K)z(;$7|B@9eyyxK~#%+4toVWzZ6(M4%M`cmOs?`>MbZp>3l&#Zm7
z-Mb&WX9-lE9xm`Kq+2~;V`F2Vy0X^@#3pJD&g<baD7$)q&q%I-J#E5t^pdSAI*m)Q
z%7D{<{n;-5;IohHzDBOj+|DblKkxqa`AcW-ym0y0r=C0V=Ao;9I`FxNP9OR1h?~Cn
z_?DgOxm&aQFE?*Lzw`d<oC_C!a07Db>hZ1k9pC@PYwx@8iv8>j_p<D79z3<<`YZe2
zefdY+eJ{N6@*7w7y!y!#pRV&z`@=68Cm;CvEf0Q2eg44LSI__C*b@h@-ZdD1?8Ggn
zkH16a{%+p%=*9Bb&98rpEPi~~p2sex2fy~Eo3|aRpS$+>p0{>AuzyE!@EQ1Z`_x;v
zo(Z<UaEK_bJ-mPS*7_4qeq{ScU(B~WlwLh^>C~0R<G&>jAN}JWj{Gir^XY|*U9+X1
z-Tlfpzx@m4nSbqg=Z$ASbK<(>9{JJjon60r?7(X;!=FVzfAlNASMPj^ZLdH0>iP@)
zgMZt$xA)a-$KE>*{N<M)f9~8<XAl45UG<aOKXA18=l6a(2k$HI{=~L}H~RPwpL|4n
k>0ut<dEUJ3J@W&4@#Xj4)IP~iwe|I1-2LyZNA^DbAL7U9>;M1&

diff --git a/secrets/minio-credentials.age b/secrets/minio-credentials.age
new file mode 100644
index 0000000..251b003
--- /dev/null
+++ b/secrets/minio-credentials.age
@@ -0,0 +1,32 @@
+age-encryption.org/v1
+-> ssh-rsa /AagBw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+-> ssh-rsa QHr3/A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+-> ssh-ed25519 q+UPnA VpMqbg5IEpxuMj2GS5r9CN40y/nIgUiAJOH8hvY2XXY
+dCL2qldd/NqimS1g2YQO4wmFcrXrh6zYl7n8cYzb9Qc
+-> 5NK-grease 5:2y*1h hXl .}3!u|0 S.-n
+8fYoUtYyn9ZRTIhokto0EqcRqnAZ3F3zlea8stOOtGmhSYyz2d2wDUCqNTkedsRP
+3231
+--- w09i+6RiUi9ZGC/6yGPb7EX+278oICoGsLS5mksQguo
+*o�^
r��.��Sĩ�,M
8:_�D8w#[�J�8Z}�%���1�:��!l_�I�&{��P���̣^�4�X���)�7��E�Y��$_
\ No newline at end of file
diff --git a/secrets/transmission-password.age b/secrets/transmission-password.age
new file mode 100644
index 0000000..33cb322
--- /dev/null
+++ b/secrets/transmission-password.age
@@ -0,0 +1,31 @@
+age-encryption.org/v1
+-> ssh-rsa /AagBw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+-> ssh-rsa QHr3/A
+otnMUWxU6M3umaEVYAAD1khz5rNOYc/SEhTls/uMuNz69JJbt5bTwQW25AhrbJM4
+XmMnyfV9uT9wUhm5Kl1RALp49Lk8O+OVU9j3I57OQfAOBqM3xHYwKvaZx/ilf4we
+atQa/Loi6NiTX3Q1ZWK8X7iL9g0FujhFisC60oHedctO0LUxOuSOulV1bjwm9Fn/
+sMzq6dSWTrPn6hUg+eh02Wi4Tx0qfn5D9bzYIG4bPEqJ25Ex6LVVL1ljMoqOO8I2
+rxKdET8kjRRAorDlMxeDZXoJyUl8zCV+LejgCP8MKKlWjS96IRtKhC3Z4+hmC/Jx
+PwwketOwpsRoLF216KDNPW0mx3W09zKQrb+aIZs2Q1NYvVGRe6FjwJdghl13LjQj
+DXUlWgcb9Laiq69+qXUptPtb+rk72Pevf7d/1cFc5nqFEYIQ97gKsIiD9et5fJVr
+PjG9SKslih2ujqb1rvGi943RDcsqPQhrWwYhffw912HEk6X7qndWluvRBv7Cbqy5
+cM3vSSRdkfzcY/ZPYTzBKgVD8d6dWKGxPi+MA3jcloJzIP7N6Jp8YJiKzEQlD4b6
+LLfriYUEbt2fZlr73sTbxW3PccvWSCXP0rK5VAx1aGoURGCfgPT6dJlvXz0XvBJT
+AZl4zy8Tb9cM7gGb7URKAtgmv826Z4RoLbzMJxQA5CY
+-> ssh-ed25519 uy/XKQ qbtV8pB3IfyhpYWmHhpeXhKc5afjWi0ol9FBco67emo
+Qg1C5qL0uHE5oSHirkElcYfz9oGVyMym/buqhpZj7/Q
+-> +RX+-grease .Y~^(
+B5cjq3aMbIUhkqde3jbzNmk75u5h7UfjN2a3MCTDO4mx4z/iXdCpZYtI
+--- RxhHJzByHlwEzzzV7fS5Iy/O/d/NhxQHQ5kRBHO8FdE
+8�̿�~���ue��[�	4�tF�pKɽGn���ڇ��B���PF�
Rr<��$�fو7�y
�$�7���P�U
\ No newline at end of file