From 0620ebaa2a1461ed32d46589e0db6b5591996151 Mon Sep 17 00:00:00 2001
From: Rouven Seifert <rouven@rfive.de>
Date: Mon, 12 Jun 2023 20:11:19 +0200
Subject: [PATCH] remove exposed keys

---
 cache-priv-key.pem         | 1 -
 cache-pub-key.pem          | 1 -
 hosts/thinkpad/default.nix | 2 +-
 secrets/nuc.yaml           | 8 ++++----
 4 files changed, 5 insertions(+), 7 deletions(-)
 delete mode 100644 cache-priv-key.pem
 delete mode 100644 cache-pub-key.pem

diff --git a/cache-priv-key.pem b/cache-priv-key.pem
deleted file mode 100644
index 7bea3ca..0000000
--- a/cache-priv-key.pem
+++ /dev/null
@@ -1 +0,0 @@
-nuc.lan:wrXtiqfGMAxEKq/M6oU5Rg0tSGXnchYFtWiUoVAhImiYutqZvBJbCqWp7ThxLHKVZuXlwgiJmwS+aCrb41P/DA==
\ No newline at end of file
diff --git a/cache-pub-key.pem b/cache-pub-key.pem
deleted file mode 100644
index 08ea819..0000000
--- a/cache-pub-key.pem
+++ /dev/null
@@ -1 +0,0 @@
-nuc.lan:mLrambwSWwqlqe04cSxylWbl5cIIiZsEvmgq2+NT/ww=
\ No newline at end of file
diff --git a/hosts/thinkpad/default.nix b/hosts/thinkpad/default.nix
index 1e7ba0c..841d529 100755
--- a/hosts/thinkpad/default.nix
+++ b/hosts/thinkpad/default.nix
@@ -35,7 +35,7 @@
         "ssh-ng://nuc.lan"
       ];
       trusted-public-keys = [
-        "nuc.lan:mLrambwSWwqlqe04cSxylWbl5cIIiZsEvmgq2+NT/ww="
+        "nuc.lan:a9UkVw3AizAKCER1CfNGhx8UOMF4t4UGE3GJ9dmHwJc="
       ];
     };
     distributedBuilds = true;
diff --git a/secrets/nuc.yaml b/secrets/nuc.yaml
index b8f872a..326967f 100644
--- a/secrets/nuc.yaml
+++ b/secrets/nuc.yaml
@@ -1,6 +1,6 @@
 store:
-    secretkey: ENC[AES256_GCM,data:hS0sCB66drf8flpuvc+yBAFAx00I6T74T0jWGQhNhe4zlZV6j4LAW/qwrlT/XKCEYY+KGk/lMuJ2RwX+i88iHQNVJtliyjKtnMJ6nzGyn6HJAw1mnJHI9vqj7rdhhV1U,iv:gN6tIGNmG/EtadhxsoVVNQ5zrXji4uaWY3257/pWKT4=,tag:P51ngidK6s0JRFdCRZdJ7Q==,type:str]
-    publickey_unencrypted: nuc.lan:mLrambwSWwqlqe04cSxylWbl5cIIiZsEvmgq2+NT/ww=
+    secretkey: ENC[AES256_GCM,data:mfqSl4ZPML3eAQ0txmbjNcIlDSL/z4b6ot4tzzC4E929nTNTNa/K9e56UpSKpG+ybRM4gTdaAJYpXbkVia4OdoWkYaBoHeQqOzEHcWBPxHLFILkotbRQ8NZx7K1y/NyE,iv:bWRx/W7c4kXUj2XKSNkLYPkvd8S+/CYW3UoztTzQ/ZE=,tag:UYgFx6vVNCU2E+V5BzS2kA==,type:str]
+    publickey_unencrypted: nuc.lan:a9UkVw3AizAKCER1CfNGhx8UOMF4t4UGE3GJ9dmHwJc=
 nextcloud:
     adminpass: ENC[AES256_GCM,data:lfx7t/ewN23/O0qvSVHrX70W4NygAA0zTA==,iv:Px32DXH8BKQphldeW3CdJjRCXnmMgRx6g0YWZ6ON/pY=,tag:3Effg1hKNNlp+intUEmzxQ==,type:str]
 vaultwarden:
@@ -20,8 +20,8 @@ sops:
             V3l5WVZhL1dVMUxoV1NYdFhVaElYUU0KtYzj7r6+/j2Sqo7AiVdPPKBqsFBiefpj
             4nOJD81tJYMqh7deydKFB1kEYOX4HJ9HfQURzcdbhgWbUv6xys2eyg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-06-12T14:21:14Z"
-    mac: ENC[AES256_GCM,data:oq2rEKv4MTm1VSVHTJGTO6rVeZsr6s47AHyRYQqr17Sm1jVx6QDnOUI4sxE0hetNEqoKm/rokjSuV2yZBTTfZec3wgCGcqHyBCeCt+HqRaYtVYU2czUTSmDSqGIozin84IEloOcWmnFburfQNaIzIYlio4KgtP+P13Y0aV4UJi8=,iv:0CyOdfN05YltBRIBlZWYC9TeI3uWvaPGJBYu0dzv9Rc=,tag:yXmCk/oc5+sTgfK5CUBCkQ==,type:str]
+    lastmodified: "2023-06-12T18:08:48Z"
+    mac: ENC[AES256_GCM,data:YOYNDKkKr8OF3/NIplPpLQe0MnmqZU+yAFWqpMdIDE10oa4AOcC0XCQxsbLCguT3RH4pxJykYtbuRwfmXQzmKDOrZj4cEcr3MpCYHyJR/3GJvTaeHHsfgom+5q3casBhG/wVHMaVbHrK+IoogekP0+sIONY31KZbhj3ot585yo0=,iv:OODBeUeP1VYxw6Gps0QQr6Waxx41Zcrz7OpjaXiqQWM=,tag:Y5CiUpvVq4nXcQ7kQfl6lw==,type:str]
     pgp:
         - created_at: "2023-06-12T13:53:20Z"
           enc: |-