chore(hosts/luna): rekey secrets

hosts/luna/os/boot.nix

@@ -7,6 +7,10 @@
     ];
 
   boot = {
+    tmp = {
+      useTmpfs = true;
+      cleanOnBoot = true;
+    };
     loader = {
       systemd-boot.enable = true;
       efi.canTouchEfiVariables = true;
@@ -15,7 +19,7 @@
     kernelParams = [ "audit=1" ];
     extraModulePackages = [ ];
     initrd = {
-      availableKernelModules = [ "ahci" "xhci_pci" "virtio_pci" "sr_mod" "virtio_blk" ];
+      availableKernelModules = [ "xhci_pci" "ahci" "nvme" "uas" "sd_mod" ];
       kernelModules = [ ];
       systemd = {
         enable = true;

hosts/luna/pubkey.nix

@@ -1 +1 @@
-"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJO2ufKRT1NCwp4c9cbOjxfb+/XlY8AUgnDLObA0gYaB luna"
+"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJZzZ6q/V7f8zbb9Xm0uZPn4zfdXAj3QgwGkGKzEV9Q5 luna"

secrets/luna/gitea-db-pass.age

@@ -1,15 +1,15 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDFmRzBvdyB5Sm54
-eEZVbVJZeENxVm5YWjBzNHlSRG1FTEJvRm5QU0pnU0RSSkVPMlFJCk1mTHQ2eUVs
-WUFTa3hwM0Ivc0JnWjJPdUJLWTJxUnIrcVkxV29jQmF1R0EKLT4gcGl2LXAyNTYg
-ckpzMUhBIEF5T2FReDJ6akp1MjBCMWlKTnV0NnFyZVY3b1hnbVhwZmhVN3c5TDVP
-YW9DCkxUNk1lR1N4TzFHSGdLNERaQ2wxdXd4bjVtUWFKT1h1QWYwUVpjazZPUlEK
-LT4gJjVRQU8tZ3JlYXNlIDpICkxWSHdOT0EwSVpXdzJoQmVEeHdIdGlxVEdXUk1w
-MkoraTB5anIrUStOMGpMbEdpYkhadUliZTA1R0N1d3h1Y1IKWkc2NzVRCi0tLSBR
-Y2cxTnB6bElHWHlMeXhxajhjeDF2TTJqMndJbjlNUWVUQ1c3QjhJTVdnChQsSDjC
-IWGSOJD8wfLlou/BFvp7x/e/dobgW3FMazunhUqV5K09jp1Ak7nTeeyRDUz+Mpv5
-HaZqL6aCWNn6ZhprF+ZBZfYVyw7EdaCWNAFrR25DP8/JQrQ3lrJIoJZ3VF1a4y+l
-55rLJIfBkho6HHycZ6hde8fo4lGUMhsSC2cKviMwa4FvMH3QpodOuN0h5PAX20mg
-19uVVQnw4AOUgzm7QZ32Gesj8vORnQHQbFhERlooDuxTSrvnkpBztaxSTVPcv5d+
-wDf/rxP05UA=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 -----END AGE ENCRYPTED FILE-----

secrets/luna/gitea-runner-token.age

@@ -1,13 +1,12 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDFmRzBvdyBYTndG
-b3pCWDA0T3hnMC9mOXlEaWRLMVpSbzhmeWliMVc2MElsekJhc2dVCmFicFY1WXAv
-ZEZNaUNLcE11V3pqZHBBWHZXTzRXTnBHN2h3a1R5ZkhzaFEKLT4gcGl2LXAyNTYg
-ckpzMUhBIEE3V2dzUkhYYmFTSHAvdlNmeUgvRENzbmV1N05QQUNoMlRMMjZPVy9w
-WmV0CjJsZFowa3d5dEpZTXF2c05tSkJEalc5bFJUNmxGdUZwQTlTQjVEQXJxSkUK
-LT4gQUZ3c2BxRS1ncmVhc2UKa0dwbElwS2NYaU5ubzdUSHpQR1RTWmFXOUxweStD
-Y0Z4emdFNHpIb2ViQnZmWFdnUVB3YU9CL3I2Vk1Nc2Y1MgpGdTFLeHNwVlBzd2la
-NTdNT1c2T05uQkpUT0t4c2ZSeFNiZ3ZXSzhzUXNHOUtUMDRKQyttQVF5QXB3Ci0t
-LSBqYUdhdGdqckRRcE5IS0EwTlZ1dEZlRm90TStiYkxzdTZabGV0VjlSK0N3Cu+b
-4KRcjCda0CxdH4Z2pw3ndhUU596wdGT7Py92uIiV3kdPLFgaUXHL8qMiAoC74o9T
-BzCx4IobN6ysTTSqT3awzFpJGt8Mqt4sjt1zEz4=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 -----END AGE ENCRYPTED FILE-----

secrets/luna/users-price-pw.age

@@ -1,14 +1,14 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDFmRzBvdyA4VGhH
-VVZrUUE3SUg3SGNMTWdYUDROZFRqRW13WHVjQmpmWHVOdHFtakE0CkRiQ0VnQ215
-bU9XZDlMYWVtcEd1c09BYlFkcVZnL0xYLzd3akREdkxoMTQKLT4gcGl2LXAyNTYg
-ckpzMUhBIEEvSytKaU45NC9Pa3d2OWtFUWltdjdpM3cwRmhCOU5YRWlSNUFFZThP
-NWp3CjF5YzlYaU9jOFlsZ0xBWHdXS09TVHc4VVBxOGdoR3kxcjZnczY0cWhJRG8K
-LT4gOXN0LWdyZWFzZSAnSnVjMGpPdyBWbXN8WEkgcX1eQmFpClY3NlhUMFRyMURJ
-Wmw4d0plM3R4VzNCeXZnK29jbVl1NHc2ZjdCb1R5M2xEYlhXMFBTbVlHdngxb3hJ
-Y2lIdlAKVTF3Ci0tLSBZR216cXRYNmJ1ZHJ4RHlmaWdTcmpSR0cwMVpDVTh4QjBl
-Z013Uktsbjg4CnXf38il0oLVMjg7GwLmE6GCh4R3EJ7Bs6fPZLf7ktcCmy3FAiVQ
-nZ3nndURKmcvawZHCnnANYKxzILcwgF1eQrtV4Mf/giBJGQASu8zx/F7NIR1vXnt
-IOXiboxism7lhh2Za+qK0hdxaDsmXvB46kuxgtG0x2E3jC0NaANKFEmE+aS3iMTl
-q1cdOuM=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 -----END AGE ENCRYPTED FILE-----

secrets/luna/users-root-pw.age

@@ -1,12 +1,12 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDFmRzBvdyBJbnRJ
-MTl2TGR4OTQyV0VVSm9CQ0F3K24yZmRpK0xrODdHWDZTTUtyRFFvCjB1dnAzdkxu
-REREamdiZmRqdmxSQm1ONHZiKzVpZnZBczFrcklJRnZzSDQKLT4gcGl2LXAyNTYg
-ckpzMUhBIEFzMFRXOEJPUDIrb2N5MzdoQmZmR0VlQ285SnBxRk9heGh1SmxaYTJR
-MmhECmhFV1BiL00xMFdpOHlublJHamhmOVVaODB5TE5uT2NCVE5Uc0l2SURWU1UK
-LT4gWnxYO3RGLWdyZWFzZSBxVQoKLS0tIE13WGJqR0dpY0p3UlBkeWFVVm96M0Qw
-Y0ttK0FGTHZDa1I2b0xCeE1aT1UK7DcEAWPiclnaKA9MZNtiIf89clLK3aADLgA1
-Dj3VvSYQbC2/GlS8KKpnB5KrwuMHEiCFk8QNzP3u5kmxtoxR88mxGgOczNoQu8Fd
-2rDXEQGmt+1xt8mO4nj0THABrxvQTr1lYappdvmuT1w8py1ip4qTZWw2hv9kiCQ1
-Lu6rJssCAUEs/NWAWfD2Mg==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 -----END AGE ENCRYPTED FILE-----

secrets/orion/users-price-pw.age

@@ -1,15 +1,14 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IGNmNCtpdyA3UHl3
-QmhOR0tjcFErNVpJd1JNbzZoWmRmVEtiNFR3d0xia1dNOXd2WURVClc2S1laWDZ2
-Q2E0dU56RUVoN1RmS2lpazlnVFhEUkJyUnE4WmZ5OGNnL00KLT4gcGl2LXAyNTYg
-ckpzMUhBIEF0emdpQTkvaHoxakRIUHFNZnBKNzZoRkpmYzM3L09yeko5SW91ajRH
-dy9iCklwTFB5Z01pc1A0ZnRKVEFoYlZsQjBiL0l0cVVwcm13cnNHTEN1ZDZnV0UK
-LT4gfDZrMWtaPXEtZ3JlYXNlIHwrfV8geFY1Mz53Ogp3QTdqM0wyMGx4ZTNicEtP
-UktIYkpMLzhSaC9JSG9FeWNvNGlvQUF6VDE0bW5HSEUvVCs3L01FU2lnNVNqNysy
-Ckt0WFg5REJRdnZ0ZDF4T2I1eFRkb1ZLcjliWjNNNytxYk5RcWpKSDR6MUpsWURu
-OWdDQWlBQU9rWTk5RU9sQ28KblEKLS0tIEF6Skh4N0NWMVlZOXcyWVhiMUtWRXcv
-dUpNS2xnMHBRd1djbC92TUI5bFUK1ZM/H3yxgBVHspKrfNM6sag7ZiT+ZypSDouI
-RoNZBcEjQUarcS2Dxn4G9amAUor0gZcl9hlx3OQnG8HLrFLhryu/550aKeVJZxtV
-9AJdDMV2XuEqSEx+mjNeUwAc1nvO9nTC0YKwvFILtvJPPateLZhbGfOzba2UO4EM
-aoX5QgifkfqJx7ZZ9Qmb3Q==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 -----END AGE ENCRYPTED FILE-----

secrets/orion/users-root-pw.age

@@ -1,14 +1,12 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IGNmNCtpdyA0T2Y3
-RjdlVHRGVzdTa2VmQ05tNFUvc2xVV1NxZ0xRV0JXOXRCa0V6ZHowCnVsaERWYjN5
-c2J3V3A1LzRqZUNUQWU0Y0ZMSkQ2OHRkRzJIY045L2VjQW8KLT4gcGl2LXAyNTYg
-ckpzMUhBIEFsMnJ3ZGhkNHRaTi9BNjk2MnBsMnprNE5CdEhTVGJJMHR4aG1CbVZJ
-WnhYClVvNUh6L1AvaERGb0pZVU1kUzZLWGNLSVo3NWZSQ0dZSFI2WDlxcFlpNDAK
-LT4gPmZIbidXYi4tZ3JlYXNlIEdLKDI4cmggSgpOWDVqak1iald1ZlRPcm05VVEv
-ZXhzMHE3RGo3SEs3blRMSHpoRU9QeFVpdENERXFnNE04NDBuMzEzSUhhRUw5Cjh3
-bUNYRkl4L1plQk5mRzZHSmtPUTZaMCswR052bndrbWpNL3lYRQotLS0gQ2pMTVBx
-VlZyaUFvc0NJOTFkZGVsZnJUYUlnVmdlem5SdFV4OGMvYUhvQQocxqI0TBwKWsSJ
-amGmeBJsUze1Rhlg9ErW7ei+dA//DuPIEK4nqCpwTNyhJGbBUBJKOW3plX2NyQwH
-ReC0GvHQRSxQWUyzPdDRefAhJpbFX/TB/TlB5k/iq3/BgXacLOuUtbkUWtPu0X+R
-jdYtCHiJGY5IuXrfhP4OZcPbVhVGEx67e5ca0RMbsAqJ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 -----END AGE ENCRYPTED FILE-----