up

.sops.yaml

@@ -1,6 +1,7 @@
 keys:
   - &host_tahani age1njjegjjdqzfnrr54f536yl4lduqgna3wuv7ef6vtl9jw5cju0grsgy62tm
   - &host_jason age1ez6j3r5wdp0tjy7n5qzv5vfakdc2nh2zeu388zu7a80l0thv052syxq5e2
+  - &host_chidi age1tlymdmaukhwupzrhszspp26lgd8s64rw4vu9lwc7gsgrjm78095s9fe9l3
   - &host_michael age187jl7e4k9n4guygkmpuqzeh0wenefwrfkpvuyhvwjrjwxqpzassqq3x67j
 creation_rules:
   - path_regex: secrets/[^/]+$
@@ -8,4 +9,5 @@ creation_rules:
       - age:
         - *host_tahani
         - *host_jason
+        - *host_chidi
         - *host_michael

hosts/chidi/default.nix

@@ -19,6 +19,23 @@
 	networking.hostName = "chidi";
 	networking.computerName = "Chidi";
 
+	sops.age.keyFile = "/Users/${user}/.config/sops/age/keys.txt";
+
+	sops.secrets = {
+		chidi-syncthing-cert = {
+			sopsFile = ../../secrets/chidi-syncthing-cert;
+			format = "binary";
+			owner = user;
+			path = "/Users/${user}/.config/syncthing/cert.pem";
+		};
+		chidi-syncthing-key = {
+			sopsFile = ../../secrets/chidi-syncthing-key;
+			format = "binary";
+			owner = user;
+			path = "/Users/${user}/.config/syncthing/key.pem";
+		};
+	};
+
 	services.syncthing.settings.folders = {
 		"Projects/Work" = {
 			path = "/Users/${user}/Projects/Work";

hosts/michael/default.nix

@@ -16,6 +16,7 @@
 		../../profiles/fail2ban.nix
 		../../profiles/gitea.nix
 		../../profiles/nixos.nix
+		../../profiles/tailscale.nix
 		inputs.disko.nixosModules.disko
 		inputs.sops-nix.nixosModules.sops
 	];

secrets/chidi-syncthing-cert

@@ -0,0 +1,26 @@
+{
+	"data": "ENC[AES256_GCM,data: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,iv:xtsQp6M0J99w0t/P2+2O3s0gEZ0ZpDwXABRBksLyrGo=,tag:ydK61E1tk3r2guo+N6fW4g==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1njjegjjdqzfnrr54f536yl4lduqgna3wuv7ef6vtl9jw5cju0grsgy62tm",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3anBxZ2Iya0xYemg4Q2or\namJDQVNOSDg3WG9RTHZ3WUIrV01EbVh4UVJrCklYUXZ1eGltZS9LTTZYSTM1NDUz\naDBzU05Obld5ekdzSm9teFVVS1pzM00KLS0tIDNONXpSNGdBUFNUTlhTSHhsT1hm\nOFl2dU9YOC9IRzZBVEVnVkhNbVAwNVkKwDIzX8J6wqUYdYlc4ouOaMoVAlYiW/yn\ncQm4Z1lHh1yAVpOR6jcPYzBq+zmNgWWNA44TDBdIiWlLFHt5HcSG4A==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1ez6j3r5wdp0tjy7n5qzv5vfakdc2nh2zeu388zu7a80l0thv052syxq5e2",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLOTBsTm9BbTJwemJhQ3ZR\nYVZFT3UxZmhwSnlDQ3ZDbGNUakFramtlajBrCnBtTUlFR3pNd1FqMFhUMmRKd2da\ncWl5Y1kxTWtOQXNRWTRudUoyeDN0aXcKLS0tIFgzM2UzMWorNWxmeXFjMHJWNDRD\nTlN5K0lYODNmeGpmMHpYZ2VocCszMkEK+aDl0Wkk1DzLZr3ojXhQnAJrG9HIeYFL\n2CkK97Z0Eaj+iB8b9ZLmuvcErjR2IwbSsPRGGP+EIjmRH8mSb8PAlQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1tlymdmaukhwupzrhszspp26lgd8s64rw4vu9lwc7gsgrjm78095s9fe9l3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5RHQrWXQvN0ZmVXY1UDJv\nNWNhWTRsaTlHNDBCRzhoQ2RDV2c4bGxlbFVNCkFTTHpZQ1dZakw2dmxNQjZsS2k3\nRHd6eTN0eUpUanlpM1pCMk9uWXA3L1UKLS0tIG9ScTFreHgvdXk3WU91UUx1cU1j\nS2xSSG1sZzBKdWZ0RFlkUXJuMGl6UU0Kpv+SYvBpDDWYKcQoyZc02FD9iCQ2+KlF\npM3aCUqjBHtpCzSGt6bfldem4ZSJZ0awAbYPz0fRzMTycGvqs89ccQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age187jl7e4k9n4guygkmpuqzeh0wenefwrfkpvuyhvwjrjwxqpzassqq3x67j",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0UEV4bHNMMDJxYVpDdTJ4\ncjcxb3ZJUmZqUm52a08vOE14ZkNJenRuWEhRCkhEOVlEZUlVcGlTMVZWb0Q3M3pX\nUEpoc2Vhc3VPSENpVUU2NmdyWUpqUm8KLS0tIGFqaXlQbWE5a0F3NFNMM1NvQlpS\nR0lDVTVXcUhkaEdBenZOVFFOY1N0ckEKovJ7hFnec5tHvNlKupeW7y54sq+TXsMj\n8SyTxj6xLq9B+ZlSo7DZkbGqOWgaU8UrphYFMz55oJCZObHAc0ZBnw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-18T17:18:17Z",
+		"mac": "ENC[AES256_GCM,data:9ihbLJ6n7cp8fFueLyQ1K2acrGS0gq4sv2sDojYP+hb8ZZYOVJZJF5QRtD6sf0tYKqOPXV0njRgK0fI3cSTAJchR68jaNEM2nDO4dbvg7MeAQg91Y0A+P1nt8nCXqGeeFiT1rihjYJ1JcLwf3TghK6vP4nxpBV6zwQGMO6V20rU=,iv:Vz/nxm1N+9UPM85XetyikZUGo8wqvHxILqvasz9Lm6I=,tag:lUVowr+zE6GT1vfJm4R5lw==,type:str]",
+		"version": "3.11.0"
+	}
+}

secrets/chidi-syncthing-key

@@ -0,0 +1,26 @@
+{
+	"data": "ENC[AES256_GCM,data:1az0ByaqxOhYKG5mmLfEg+iZG3fbdkdtfI60mCfgPwurVYjva/IRbjEHnVJjnl+KA7jyAiWJ0wvehcg0Ylukn5WoFZ3aA4Mb7Swn/0EoH+8P/U2ftCR/G3W0S67w8lQFnIli42AZJ6LWcqVab5DHVmy1/XtP1PAveOMvrEVmjmBipF4JMLbyymGPQ8moT8P9GXXWK5MvX/FzEBjsoECwTyjFpSQM7pX2IDRL+zr2gyMB7+INdeecSr0R6ebhj+TRItjDxfts/sSAMOuY/eFYUItZncd9OMXKwU3X75AgtdPu8JvqKYjAtllvsocP68lcRYda5X6rJNybAJc/Yr17WX8i+fWsBTXbrqPo1thGdDoicK9Uy9sIX+/CVfqmmnGs5A==,iv:XZuOgGL8retOonsTLE59H1Y6ZH3SMdxD7tmSEop4ONM=,tag:Cmdri/crMdRTaCNGM74W8Q==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1njjegjjdqzfnrr54f536yl4lduqgna3wuv7ef6vtl9jw5cju0grsgy62tm",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPV3diUGM0d0NmWTF1VEZw\neFJRSi8wM2xsREdsYUwxN2pCNVlxVFNKSkdFCmNHTCtWdHBmK1EvQWlRZ09uQkhT\nMllUYU92Q1loNUpqOTF3S0RPZHpGbGMKLS0tIFlINEtSekdiWkVGZDhzVXM0Q29P\nU2pQSStEa0dzVEJIRkhvZXVuMU1jbzQKtCJDniUaMcgG7vg8BuTNDsubHmBV5jdj\ncpD31lYaKmFLLe8n8+QNZ+D9PV7UlaRbAYsfgeRTV/MuE9XcYO0kKA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1ez6j3r5wdp0tjy7n5qzv5vfakdc2nh2zeu388zu7a80l0thv052syxq5e2",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1bDN5YnE0TGI5QW16aGtP\nUjhlZUQxQ1dHcnpFU2lLQ3ZSeXpZQ0g5Z1VvCmN2T25MMDdVYVlxckVBQUc2RVRx\nVm5WWk9yNmR3elhpQUxoSlBmYmFjN2MKLS0tIGh2ejMwayt2UDdxK1JYRS8xb3Av\nbnU2d0txbitHQzVERTR1bUt1YTNTUWsKUN97NKQw/KsEPR7BK3ADB+EGRXKr8yww\nbCMKrMSfrwggsQr46v+am1NXXzUOaq1MW3uih7LXTrcSH95tzcp8Yg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1tlymdmaukhwupzrhszspp26lgd8s64rw4vu9lwc7gsgrjm78095s9fe9l3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqa1FZM0RxelptZEVqbzl4\nMWRrZHJFbVZlWmNCa2NDQWVHYlpvY3BpSkVrCkVGOGZJSlJEdE5BMWQ1VmMzaVdU\nbmlJSldIYlRDejF2bHhmQWZCZWpiMGMKLS0tIENkVC9PUWpOZmV0cVVmbExCSmtY\nNm9xakFuVjJuNzZrMFVUbHNpQ3FSa28KV3idFdyxag18Z9B7Ci3KznWEj92F1EwV\ne938xoxgkWuBICXsrUoGWzuwJHR34GmrwLaoGqA1+otsghVVo9Ee6w==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age187jl7e4k9n4guygkmpuqzeh0wenefwrfkpvuyhvwjrjwxqpzassqq3x67j",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0K0t0MGlXOUVXZW9wL0Y2\nR3JSSkpqdWMrRlNZcm52bGlNRmpBbG9CQlQ4Ci9JT01ZUyttYmRLZ2RCUXlveWRB\nOW9ibXJuYjNYdVBIT05XdE8zbys2eGcKLS0tIERMQWxlSnJDNEVzUzFFMmJSaThL\nczJ6UUdVSVVuZWNaODFCbkhjT3BxQWcKVK982PVutdc7mtgGq0w6uWv/FdGEKObX\nS3mzSs2rjtDHVlE1tAxRysWJsdIc/GN5x3qoeKzjSaY5d4QhV+944g==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-18T17:18:20Z",
+		"mac": "ENC[AES256_GCM,data:hbo44/HRswuBDgc59mqsP7LGyiQbsAgC78nAfH3N9p7IXK2A3Rh0jDO6gU3C9Yv7A5ca9I5dwT1ploX2yJHI9ObChcgHU8am+qJDmu2dhPhFxKoW7GZfWnV1RlnoqePUYY24A3nF66H1FXynzVQC18W+XW06fqvj2Hz49v8YPyc=,iv:V5IUy3qCQjVl5su1X0qwkhlOXw3uAHkzX4u2wLb1U7A=,tag:rRZz37UTPWxhN6P9IarRVw==,type:str]",
+		"version": "3.11.0"
+	}
+}