refactor(secrets): add additional master key

secrets/default.nix

@@ -2,6 +2,7 @@
 let
   masterKeys = [
     "age1yubikey1qfnj0k4mkzrn8ef5llwh2sv6hd7ckr0qml3n9hzdpz9c59ypvryhyst87k0"
+    "age1ur2lr3z6d2eftgxcalc6s5x9840ew9x43upl9k23wg0ugacrn5as4zl6sj"
   ];
   hosts = {
     luna =

secrets/luna/gitea-db-pass.age

@@ -1,15 +1,17 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFdvUU04QSBDRFJ6
-Yzd5dTVSS2JYYTROQkJmbmhoc0lQbnJQaFFRdlR0bDJYblZjT1dRCllHeVNSSmpq
-dHRqeXRITWVveUdFOHFSSXhqNmk5Qm1TWENEMk8vbnQvM1EKLT4gcGl2LXAyNTYg
-ckpzMUhBIEEveEkvWWQxQWt2RGQ5RGtGeG5xRTNRdkZRNzJIQ2ZVdVU3OEcwbkVn
-MENEClpsbzZvVVR3L3VOcyt0M3FZN05MTGxFUXdMNERLdDcvdjFzcTh5QXB0dDgK
-LT4gQVNpSm4sZF8tZ3JlYXNlIFUzdHZgCk5tTWgwbCtXcCtpcUorTW1Xb2NOMHpB
-U1crZUpuWVBxZ0FVV1FRSzBKdGJ5U21TbDBZa0oxTjJGZXFMTHRKRE8KVzZRR21F
-QjR6VTl6WmpVMkN5T1BVRHVCcGZPbW0rUQotLS0gNEdETzduNUhEV3JvcGEwczZV
-eXUxREZOVVdxMHhObk9LOXBSSjN3U2gvdwozi6VTRpR9IbD3Zq170Yvq2e1trUAj
-YlTiojTiHQUPDmaril1FxoZVHJpwMngTPk0iDzb8BdrVwrD8oURH2CGvBvGUoTig
-/tMqox+NOVg5a/+6hmN2MldoV1ecWbFswBIln8/BE36M7HRTrUny58zguw6mT+62
-Ca6z329mULHqPSxt2cFHaDSxwaiJj7FoOwy6P8F8RY6EX31vWmXmCHgOSUXQ7kVy
-KgdYvJds19sod59QrcvgMs5wjeyBlNAYCv2YLLQj202Zp60E6aaA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 -----END AGE ENCRYPTED FILE-----

secrets/luna/gitea-runner-token.age

@@ -1,12 +1,14 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFdvUU04QSBOaENT
-d2o4dVRxaXh5cVltNS9ob3oyT0E4YVFrSm5va28wVmV4YkdxZVFjCmUrY09scUwr
-NE8zdEVmREpLZGZEUVo4bnVHTHM4blJVNHl2Y05ERlhyVjgKLT4gcGl2LXAyNTYg
-ckpzMUhBIEFwenhTY1JrblZCOHRZdldpMXNDMGwwRDgwYkJwV2Fza0I3eW04WGJX
-ODFRCjAwS1Q4L2R5RWZxUldvdWZUSzRxSTlUWWRpMTBhaDR0aW5ZM0JxVjUydGMK
-LT4gbS1ncmVhc2UgdAppWDAyWnFvNGtxSWlVWnlCU2diYW11QW8xejdFTkZYejQw
-bnhPVGZPRzZ5aEU5bGxKdGh0aG0wL0J3aFZ1d1RTCnM2S1BzNTdkN3cKLS0tIHVa
-Qk5jcHdmdUJPb0RXZVRpRVRNOGlYdndZQVVZYUQ4S1gxRDNKMGpxTUkK5Rjeq+nK
-qfdNFv7evcxmfL6AvINareVNi5c7d5G9buRRTre3me9PmBv3u5NXbvspLY1SRvax
-NPR6XbkoDLVZolOAWeEgpXEE+1surFkVFQ==
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFdvUU04QSBUQ1Jj
+cnZQUytCZHRSRVl3Q0QwMXloUTljYmkzY0dEOGo2eGFBeDNUY1dVCjBjOFBUVVpN
+U0xzcFFhd2hsekl2dWlNb0FUSlNzR0VxNXU3aWo1d1I3Vk0KLT4gWDI1NTE5IE9V
+a0tvVGdxNGdvTlZYVkZKK1B2Z29zSEJ3eTZRYUR3M3JNOERXMEJ3RkUKM1pHUThZ
+eUNBTHVlOUttNzR2cVF3WlhMQXRNUUlmU1BEK2h6UmpzNndPcwotPiBwaXYtcDI1
+NiBySnMxSEEgQWlyYzUwY1NaWml3MDdCbGtjcCtZdis1SU55ZGFNV0QzUXI1Y0I1
+dVRiVisKM29WL3JPNXpSTkdTcW1WVCt4U1djbk15Y2FSV3RabFZWeTlPQWdBQnYx
+TQotPiAiQHItZ3JlYXNlCnB5eEpIMlpyQWljRVg1MU93TzF5UTJ5ZGJKanNUQjRR
+K3lSSWVDV1hDMXl3QU44ODV1dGszTS9pR0hJSWhFNWcKekgyYlN6ZGovcDAKLS0t
+IG10YWlvY3RWUVQrWUZJRTBEQkgvNU1wcjBkaWxVaTdMK24xVmhYL1YyT0EKFhLJ
+06MZA1CJAInpHNFw6y9bWMiLmc2yOxLa/1/HW6iMgRxzG6ZTGwRuzQBpdkZ2H380
+aXkmMaTnRSsOV97gQUeU/wx+b3quPY4qqjcZKw==
 -----END AGE ENCRYPTED FILE-----

secrets/luna/users-price-pw.age

@@ -1,14 +1,14 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFdvUU04QSBsalFx
-SHhwamNrQTZ4RHpSRGRmblhjQ1ZmT0RYNDBzR3JYWGM0em1pNnpRCnMvdklzeExS
-eU1hRno0c1lpR3AyL1FkaE91VjVBQ0VwQzJqaHJCQ0JQNUkKLT4gcGl2LXAyNTYg
-ckpzMUhBIEFsNkh3VW92NkdQZEhYemNiOGFPa1VSdS9keEVtLzUxakFNQ3JlanZT
-a1BBClBJa20xem5VbVlEWG9OK2ZBN1NUWUVtekVQNklkV3Bndml6VFI3Q3dQTlEK
-LT4gdUw8RTR5LWdyZWFzZSBgeXdFST0gQGRLdCxLXwoxWWFkV2tCem53cVpEK1JR
-dHhCMmdpZEovOUk4b0VPa0p5MnBNRzhnczN2S3NORTJpRUpwVm5DNzhndlFPa2JG
-ClY1L2Z5NHBqRGM4NmxiVTU1bW8zTG94eksxK0xtc3IxdFY5Rk1DNAotLS0gdHhZ
-NWFlUitjRFBQOEF5TTZXSlMyTHlTblNZOHpicFFRazU3NFdTVzQzUQrc8qpgfFHH
-03zJk7Ru1ybG9EIDcnAEW0itJex/l70m7/Ckt6B4vwczDlEl3YKvdFwHbSkfpM08
-ykmzrts0vqA0rBYRXxbuVfV12kemhuIQVAHglpy3MUQJ8a7oSfKokCuxqIpqBIW/
-UoFw9HGH8Dmk3SWPuddgyJxbtFT7ugP38AE/2F50D/ceEk3Y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 -----END AGE ENCRYPTED FILE-----

secrets/luna/users-root-pw.age

@@ -1,12 +1,16 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFdvUU04QSA1a0dM
-TVh2SkJITnc5RFFoYXB5WFBFdXBBZXBDb0U3UkVoK1dhWWl0WWcwClliSWR4MWR2
-VnNEZkpTN2VYWVpRK1FqSHdESjBxMndIdk9zVnpNdG9JcGsKLT4gcGl2LXAyNTYg
-ckpzMUhBIEFqd2Vtc2tDLzI3dEFCWk4yTiticWhYWUszZitNek5sVXF0QkpNMFcr
-MDZUCk56Q1JUSW9CcTEvMjZlelZya05HVXZSWHFXU1BXU3p4enhGREErY3BNdzgK
-LT4gZ29rX2V3Ky1ncmVhc2UgblQmRHQgJyBECjhJeG4zTWl1S1ZhcAotLS0gYTNK
-K25ESFV4c003RUJ3WnhKbG1Zd04rYStaWmdEbm5QcGREVHNyb04wbwom2cKrI3/i
-dSD9FChcxABPd73Hx5n+hLv+FHEcg3VrLRByhfdYRlUydRlj2HRZox5qju4yqF7x
-3QoWfkTM9oelWXXXbhiWnNuNyBo2/DUjgV5IQfY/8kSXGxN19tofRS516uQJYrDU
-2UaPa3KnTOnlXIiFceUpP8enWfD0D54SYBQkhosbiI6PEXrv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 -----END AGE ENCRYPTED FILE-----

secrets/orion/users-price-pw.age

@@ -1,14 +1,14 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IGNmNCtpdyAxMVBR
-YVMxTmhkUllvZDVtUmZ4M0krcE9hNmdtb01McTdCZmFFVk9rT1VNCkpRSWlMcGpt
-cTY1T1dOK21Kd1M4MnRJRHE3SnRTdk1WaDNiWE1wTGd6TUkKLT4gcGl2LXAyNTYg
-ckpzMUhBIEE2WGczY2hUeWJOSTFoTk5HekN1ZEZCZ1hkRUJyMmRsYWs0S3BBUDhI
-azNXCmliaVVXVndIb01scXRRWE9uVnFReEhXNmRKNDBoWXltVzhjZm0yUGlQaUkK
-LT4gIy1ncmVhc2UgWXJsaHlgTCBCWWZPXlRhICtbLmUpfmkKVU4weDhWWVh6bWk4
-Y2ovQkhPVzRoaDE3Tnc0RXJRTitHSGxJaHNERXNjQTlKZHVrM3B6bVZlVksyTGtu
-a3o4QQozcnJvRXhYdFBwRTU5VCtRTHlwczAvYlR1bXNoOEZDOUR2OHF5NmJxTG5R
-WFh3MAotLS0gR25tRXN0aWpuQzY5cVFVcXhxcU0vRDl5VTcrWFdvdmxhT2J2amhZ
-aTF3SQruXpwozUYt5QoeEDnn6aY8OU2J1FN+zYrXh72HCdHC3DWxiBjEcyZaim+1
-mUL3N3FbGXA3ajwGe1Eke1GBOz5tfEJJMjRKbiqFE+uwxsKVlanq9MrZphnKzjsB
-5Kza9ETW1p72EtOAbYLh78040gUvtRNESwN+/QFgiWK5EMlY0pu3+LKNZdRjFl+v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 -----END AGE ENCRYPTED FILE-----

secrets/orion/users-root-pw.age

@@ -1,12 +1,16 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IGNmNCtpdyByQ2Z0
-Y3VqTTFPa21BOXZ5cGQvNjQ4TmlzWEVOb0s5d25hUFI4V1pWRlhzCi93Nit4cVMr
-RDg2TXBJY0lKbjFpaWhlZ290dDBxa2V5aTN3SjlPYnZzMEUKLT4gcGl2LXAyNTYg
-ckpzMUhBIEFxQ3JYUjJNQ2YybXNZTStEVVFzUE9TVnBIYU9UK3B2WGMxeTNISUNO
-RnhOCjg5Y0toMFAzeVJMamh6TWhreTMwaStyY3NTUmtWd3lZTmhycmVSTGZEdDQK
-LT4gITRrLWdyZWFzZSBtKCBtNUgKR3lUbmFpRXh0MHVwUm5FQkY5bmRLTVNSbjhV
-WnprMAotLS0gQzhTcVB0VnZKUUJHcjk3ckJXbFcrVVJ1YjRvNGhOemxsd0o5czhE
-MmRMMAqf3WKatFl4s/TjRG/6RHPa0DXeePrJ+YJ67csK1sUBMQwJqA7OhoL2Y0lq
-x7Vjn0IfRkFK2vPg1Xgz7hnQ9lgMOdgu08GY1NeMnuKGez+ZyjV9aFz08Q9I8Zrv
-4YZ+NMhMefndUWn/645DiT0fL0H/OWol/FDnhPUIPSeP7cnMp2jJcZJRBX3oQri9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 -----END AGE ENCRYPTED FILE-----