From e5f15e8999fc0d04fe5f96603311b8bb9b4bf905 Mon Sep 17 00:00:00 2001
From: Yadunand Prem <yadunand@yadunut.com>
Date: Wed, 29 Oct 2025 13:20:51 +0800
Subject: [PATCH] nut-gc2 add ssh-key and hw config

---
 secrets/btrbk-keyfile.age | Bin 831 -> 831 bytes
 secrets/k3s.age           |  21 +++++++++++----------
 secrets/secrets.nix       |  20 ++++++++++++++------
 3 files changed, 25 insertions(+), 16 deletions(-)

diff --git a/secrets/btrbk-keyfile.age b/secrets/btrbk-keyfile.age
index 079bb9dd95d08efc1e7f8b3a1911596f17137693..348023052bfad7fd27cbe76429757081f3f78774 100644
GIT binary patch
delta 807
zcmV+?1K9k(2EPW7C4X!=cTYigAZvPTO<G1ZPG(|MD{NMIO=440b#6{HFF{LFGD0?P
zXlHC=axZgoL|8Iw3PopgY&3B(Wie4uRcJ_OL`PFFLozT(X=qkecTq1@ST}5WL`6?o
za&c5u3N1b$b8~1dWn?lnH8D9LV^B&jMRy=WYBX6$Lt#dCMt@IPXEb*!IW<sPPi#*w
zO<_i6MQ&Pca7{LJGj=miS!q!UVnQ-TX;fBJF?DiKIZtIuF>Z8PXLMI>PH#d_Fl|sb
zRc}F0QCCcMZdpwVEj}P~b7(DPWHL21F*zVdV=qlqQ6OeCXhAtoNLE&7SawBiMo&3d
zZ8UmOXmn3DSAR=1b22wYFIPlNK~*tqQ%MRrP%m&dR4`08Gd5&zM?y|zMPYGjbaHGm
zI59{?FECnBcrr#gRX9c~YE=p?EiE8RWn^$<a5*z#ba6>oY-v|=O=(0<M`>zdcSJ^5
zVQn^JXLfdZHe+vVLQx7lO|7px2;ra%TRN89qoi`I8Gq7l2?IYonS`ENNOI){?caW#
zU&khwDSsClpmPp!+Wnj<)LrsGm<nymJs%1aw2GT2)N=|&dxsI6>HG2MxPX!czHV3T
zj7a))?+u@I|HR(1h9cS9R?p{yt=Bhpu@A*3I^?t9O?v`!i2NjZEfl?BnybiF`L=u>
z4@cbzG=KeM_NN-tdZe&w<I@p-*!DA##0MgNsO{*8V1}eEx$C7Yl1j{MOCRnf?|_1b
zET5=`L0$nI+FCWp(0K*QEZi%IS!XAhE*!5SFtoR2!V~Hqwz;6XP&|b<!KgDHEj|N?
z*SkURGCP>KbUsXUU2;ejVgjQeQT>w3+i=W-Mt{kZoUqs);XfjrAD5tC@uqAU`LM#(
zJ|qf>f)L4J9_;_!UF*djNSa=#Bi7(v>M__DuEkv7Me*}<zM8m$ri98r6ULs^vawKG
z6~1W`y<;hsuzWLdgcp64Fas`1XHz{zO918#aJIW$>@?Iryx(QMZwgkG*SeJ=l3zkN
lnjl!Z{i4PxzXj7@*F|90eN0$-+0z9|48%ElE>n|%a-662OC$gQ

delta 807
zcmV+?1K9k(2EPW7C4Wa_FHKZYAZtrxH%LZjN_22+N^fXnV_8^tMolYKSXx4NLT^zy
zOG<ZUQ8H?HQ!-~X3VCu)MM+CaS!QNqW-m@hHCS#}Y%xh=X=5*ERaaJXL`yMbWN||)
zQCCSY3N1b$b8~1dWn?lnH8D9LZBI#SG<P5`GcPbrVl;3@b$>TuFEltXb8BUFV@O7C
zL1bidFgR#9IdO4JH&1GGFK0mtQ(;(Uc}Ge{L_$=0RV#XHM0i$AWi(SuHdRh!IWIP6
zGjViSSx-?fS9fm;Ej}P~b7(DPWHL21F*zV?Id@M%cOW=-XLE2?YidYvctkREdT>@m
zFnL;bX>fFCPk&ZdK{jnwS5{$HSu;#?GB65hQ$}|+MMXzxb~JTacQQ&-b~scpW>;Zq
zOhQ9pYFA59SwTp8c4|*WcWVkQEiE7`Gj2#kOKVX#cymijYdCjILS;5DSv6r(Z8$|T
zH7hq*Y<O~JLN-=6GG__{vp$HY+(ygezpIRM?kq;+DSxG#_*kdO{XV09U$cr0J6G^9
z`50;w|32%8-_FKoDu@HM*9RTcgQg)R-6dcack(;4_~%l{<98ak*YHX)OU<>+s8W1$
zK|)}~C|e31zJ6qe>XhzSO|HArT(jP6Z-ft#A3jE{4gtis?MM>R`nZY>MhC1v8?Ohz
zl(I&rhky2&t|;FzP}pDH*ViNYe4qTo_#Xc<3QuuxaDA?7#-@O$a(C%lL<zy0&HU>E
zwHQZZWvFLJqD&8uUReB8q>5&-)wK!w=!+^cMjUS()wXL_@5oESw4C8q6|bf`!Vjw^
zMK6!!xNSswjX6Dw8f7WnnHfyT28LtZz{(?!LVriA<kU_s<|E`BeISpWU8#2YUJe(I
zYo4OzVSU<`S$dX}M6}$vMbzVlY&tdBDFGy{T}Kc87_;zx;Jk|_PnPCGPO7mS{UY?i
z9Y;#GMfL$vYUnf@fT6QVlQ6fE_^y{{qVy^@<|ojrO7_A$wvD*|XvK#cQ^EzQwu(v;
lZ6M+Qv1Cv)0SC*@4?X7lb0Yqv_gkxXP{z2hYq3Q;`(z0sQ=|X@

diff --git a/secrets/k3s.age b/secrets/k3s.age
index 039de76..b35a81f 100644
--- a/secrets/k3s.age
+++ b/secrets/k3s.age
@@ -1,11 +1,12 @@
 age-encryption.org/v1
--> ssh-ed25519 Gc/MTQ NYxjxe8ysXtRUeA5CAXIFEFJ4JaszdsoRRYi5pohh2A
-1n4rLgK6IZAyU4QHdrt11qkYD/Y1JuzzbDxZXtLkRrU
--> ssh-ed25519 mOIk4w +An3vaQpvbwkDwMlf2krnz/5OpXE37KV0lw+yPtaRyQ
-OP8xX8u+zL+1cFnnAuxECWacvXwtvH7Tkpm582HKL30
--> ssh-ed25519 l9wOAw VAHzPwAZ0VW5QrEQ8FNqqj8fhmoyPVVu3MXDtTZBBT8
-VW7nb4/ahFuzU4DrAQ77UGQtwllIlFClkGn6clT2LvY
---- vTEXnvSOAaAZ3GBqA+bDuINY5i5WKlVT6dIs1/C1QzQ
-5����F.&	����ފ�S�a���Y{���
-�t��=87Z��_���',߹hX'C��`q�����pȢS�`h�
���lvfF���Bd����A���
-��x���T8P�o��X�F!�
\ No newline at end of file
+-> ssh-ed25519 Gc/MTQ 1VXVmIQH+4s2AkBbf8BdOp65oDDlxfMYYE184LUggFo
+xpUXhXkFiUa3FcWBazPt7l0bPYrurOsn2+MZVxHp0XE
+-> ssh-ed25519 mOIk4w jdEZYWfNwjmsVhKWo/ucReyRLVgeRICAGP5n6mvJOQg
+YuyZTijB3BNxTPKebLmEsfJkRh7/8JETG5eOqgU+fOY
+-> ssh-ed25519 l9wOAw /OGUnqDH738Yk51Snn7VC1JPBTMU497vBSaKD0qWbAs
++sgfXtvA9g3X5YPr5YcoWo7Ljkxrs3O++aNA6GphU/4
+-> ssh-ed25519 cPJ/Ew otg3F8Xt7vYkvjFv3/4OtSG8Q/8/z2IOF9h9q6wiuSc
+EI4BL10EGys4Vd1+DiU1u69CB8feEqNw9saqqclvgG4
+--- rqGI3Z4Pd3PDtH7RHfx5FRDu4AZudXZ1Cfv8Cvz/IAw
+�����}Av�!�@�h*���8H?�h���
+mr8��7M4>8��쬲�B��6��w
���M��`�>�:����v��0�C��9�4g3���/�5�gi�:�����nGb�xk9?��a�46R�
\ No newline at end of file
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index cab9b0b..3eb76fd 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -1,11 +1,19 @@
 let
-  keys = [
-    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJXOpmWsAnl2RtOuJJMRUx+iJTwf2RWJ1iS3FqXJFzFG yadunut"
-    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOEg5wsPLOZvU6lT8cMUsStQqalh/Hw5u104QhOYPS8E yadunut@penguin"
-    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF0NLOa9NNz7r3QODU0Oe/a5m+PFzcpM20aLwf+0wojT penguin"
+  mbp-yadunut = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJXOpmWsAnl2RtOuJJMRUx+iJTwf2RWJ1iS3FqXJFzFG yadunut";
+  penguin-yadunut = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOEg5wsPLOZvU6lT8cMUsStQqalh/Hw5u104QhOYPS8E yadunut@penguin";
+  users = [
+    mbp-yadunut
+    penguin-yadunut
+  ];
+
+  penguin-host = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF0NLOa9NNz7r3QODU0Oe/a5m+PFzcpM20aLwf+0wojT root@penguin";
+  gc2-host = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN2WBYhGKSXSYWwISsY1osfliVSS9J+W6uHBid5i2qey root@nut-gc2";
+  systems = [
+    penguin-host
+    gc2-host
   ];
 in
 {
-  "k3s.age".publicKeys = keys;
-  "btrbk-keyfile.age".publicKeys = keys;
+  "k3s.age".publicKeys = users ++ systems;
+  "btrbk-keyfile.age".publicKeys = systems ++ [ mbp-yadunut ];
 }