From ea7794dc0597c65c71d140fa43c81ed22c86330d Mon Sep 17 00:00:00 2001 From: beatzaplenty Date: Sat, 25 Jul 2026 21:10:46 +1000 Subject: [PATCH] chore(vars): commit clan vars SSH host key for lxc-nix-cache Encrypted private key matches the running container's key and the vars.nixCacheHostKey in variables.nix (no rotation). Age fingerprint age1ufg390... matches the &lxc-nix-cache anchor in .sops.yaml. Co-Authored-By: Claude Sonnet 4.6 Claude-Session: https://claude.ai/code/session_01B2EJ4qTsM5KUqhS5c3GAwx --- .../openssh/ssh_host_ed25519_key.pub/value | 1 + .../openssh/ssh_host_ed25519_key/secret | 14 ++++++++++++++ 2 files changed, 15 insertions(+) create mode 100644 vars/per-machine/lxc-nix-cache/openssh/ssh_host_ed25519_key.pub/value create mode 100644 vars/per-machine/lxc-nix-cache/openssh/ssh_host_ed25519_key/secret diff --git a/vars/per-machine/lxc-nix-cache/openssh/ssh_host_ed25519_key.pub/value b/vars/per-machine/lxc-nix-cache/openssh/ssh_host_ed25519_key.pub/value new file mode 100644 index 0000000..cace8c1 --- /dev/null +++ b/vars/per-machine/lxc-nix-cache/openssh/ssh_host_ed25519_key.pub/value @@ -0,0 +1 @@ +ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICuHUxGNH6ei3BZD+EfZs3l4X8uJNcjQiOsM/G4yo4O/ lxc-nix-cache diff --git a/vars/per-machine/lxc-nix-cache/openssh/ssh_host_ed25519_key/secret b/vars/per-machine/lxc-nix-cache/openssh/ssh_host_ed25519_key/secret new file mode 100644 index 0000000..a5ef9b8 --- /dev/null +++ b/vars/per-machine/lxc-nix-cache/openssh/ssh_host_ed25519_key/secret @@ -0,0 +1,14 @@ +{ + "data": "ENC[AES256_GCM,data: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,iv:Cth8/Wlf7vJo050aDNt1XyFUDiihyuMxv6WH3yEZGXM=,tag:qM1/MVU3J2Kso8w0fzEvIQ==,type:str]", + "sops": { + "age": [ + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqWFF4ekdNRG05bysxMGRz\nbkt0QmRKT2hsUzZWVXRxY0ZjenRXMXhrT1JNClE4WlRmU0grRG5BSjM5NWZwc1o0\nSFJ3dGRsR0pwYlJhRkV4MjJqNVFWL2MKLS0tIFBSVTU5aFVZNm5qZGtIU05XbDd1\neTd5Y1puYjBkKzlVRDVvaW9pL1B0R28KZbutmxm33H8qOE0jSDr+mrx6nFESmKLg\nTfjZBp1W0SDRVJfUbRQJvcp1ECMJIS5cWzXDoXmLnaeLFzawBPbIeQ==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age1njap586hc0q43kr03g6c8eqhdsmk8zcafkl3f83xwlc2gqhlmfgs4tmwad" + } + ], + "lastmodified": "2026-07-25T11:10:21Z", + "mac": "ENC[AES256_GCM,data:IQ/XcH2boEt97exSgTUxuZwH+IwFHA0ota3Y15T9DP3tpN/Tvp4zWOqHYtiPfRf/Ea8Si/LDHwlVnuLIhFYtrMmTzJjKf8Xa+eN2bACzn1BAGKKkY1uQH2tIJ1HIxC08x0L7YhkGPVNMFcu2FsNB0bk57+iwUb/w5p4m5O4AZ6Q=,iv:/BkRQEGvUImCewxsfrpV+EYZVnfRlIChASpBXBAtppA=,tag:DAkApHsRza9DXOnKhhVNNA==,type:str]", + "version": "3.13.2" + } +}