Initialize perception

.sops.yaml

@@ -3,7 +3,7 @@ keys:
   - &nathan age1ud80054jwf6ff7xx65ta6g7qxx2flc24r5gyyfjz43kvppjutqyskr2qm2
   - &levitation age1tsq68swufcjq6qavqpzrtse4474p5gs58v6qp6w7gum49yz45cgsegxhuw
   - &oracles age12ayrv88xjt4r276fzc9du70x8q0r7xutt85vj627ykf4k8kgms4sc6wywn
-  - &perception age1r0aszjkyp4zlcw2w2vrk8hmcyvntshr8rew4ehlu5zad4eh6mspsatuczd
+  - &perception age1rztv2778cf2dcpzcpth888cq7u3rdsl7tfuhv4sddysdnqjxaevqg72t5l
   - &shadowchild age10zd0y2zpty2z39sh2qe66yuu9jd6hrcd3ag2wqtjp8tc579nmphsymhdla
   - &matrix age1pm647k04hhwm2dmqh07hnzflkurfevefcyf8xlhmc83a07n77e3sltyt0d
   - &tounge age15vjvppw2gzjwmtlptefhrhqtjyu0a07v488a9s25a3k2vtpqc9uqvw6vl6
@@ -40,6 +40,11 @@ creation_rules:
       - age:
           - *nathan
           - *matrix
+  - path_regex: secrets/perception
+    key_groups:
+      - age:
+          - *nathan
+          - *perception
   - path_regex: secrets/tounge
     key_groups:
       - age:

flake.nix

@@ -145,6 +145,15 @@
           extraModules = [ ./machines/tounge/configuration.nix ];
         };
 
+        perception = makeNixosSystem {
+          system = "x86_4-linux";
+          hostName = "perception";
+          extraModules = [
+            ./machines/perception/configuration.nix
+            ./hardware/perception.nix
+          ];
+        };
+
         fusion = makeNixosSystem {
           system = "aarch64-linux";
           hostName = "fusion";

hardware/perception.nix

@@ -7,49 +7,54 @@
   imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
 
   boot.initrd.availableKernelModules =
-    [ "xhci_pci" "ehci_pci" "ahci" "usbhid" "usb_storage" "sd_mod" ];
+    [ "xhci_pci" "thunderbolt" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" ];
   boot.initrd.kernelModules = [ ];
   boot.kernelModules = [ "kvm-intel" ];
   boot.extraModulePackages = [ ];
 
   fileSystems."/" = {
-    device = "/dev/disk/by-uuid/49959c20-a0d0-4b9b-b5bc-f7601640d252";
+    device = "/dev/disk/by-uuid/94a2074d-be66-41f4-b92b-cb3226ab83a0";
-    fsType = "btrfs";
+    fsType = "ext4";
-    options = [ "subvol=root" ];
   };
 
-  fileSystems."/boot" = {
+  fileSystems."/boot/efi" = {
-    device = "/dev/disk/by-uuid/68FE-F04C";
+    device = "/dev/disk/by-uuid/6787-5C66";
     fsType = "vfat";
   };
 
-  fileSystems."/nix" = {
+  fileSystems."/mnt/plex" = {
-    device = "/dev/disk/by-uuid/49959c20-a0d0-4b9b-b5bc-f7601640d252";
+    device = "10.0.0.139:/mnt/tank/root/data/plex";
-    fsType = "btrfs";
+    fsType = "nfs";
-    options = [ "subvol=nix" ];
   };
 
-  fileSystems."/var" = {
+  fileSystems."/mnt/scratch" = {
-    device = "/dev/disk/by-uuid/49959c20-a0d0-4b9b-b5bc-f7601640d252";
+    device = "10.0.0.139:/mnt/tank/root/scratch";
-    fsType = "btrfs";
+    fsType = "nfs";
-    options = [ "subvol=var" ];
   };
 
-  fileSystems."/home" = {
+  fileSystems."/mnt/things" = {
-    device = "/dev/disk/by-uuid/49959c20-a0d0-4b9b-b5bc-f7601640d252";
+    device = "10.0.0.139:/mnt/tank/root/nathan/things";
-    fsType = "btrfs";
+    fsType = "nfs";
-    options = [ "subvol=home" ];
   };
 
-  fileSystems."/etc" = {
+  fileSystems."/mnt/music" = {
-    device = "/dev/disk/by-uuid/49959c20-a0d0-4b9b-b5bc-f7601640d252";
+    device = "10.0.0.139:/mnt/tank/root/nathan/music";
-    fsType = "btrfs";
+    fsType = "nfs";
-    options = [ "subvol=etc" ];
   };
 
   swapDevices =
-    [{ device = "/dev/disk/by-uuid/522c68bd-b23b-487d-80e3-fc41e2be130f"; }];
+    [{ device = "/dev/disk/by-uuid/06554e1d-4e6f-4693-88cb-ababf5e98d3d"; }];
 
-  # high-resolution display
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
-  hardware.video.hidpi.enable = lib.mkDefault true;
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp100s0.useDHCP = lib.mkDefault true;
+  # networking.interfaces.wlo1.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";
+  hardware.cpu.intel.updateMicrocode =
+    lib.mkDefault config.hardware.enableRedistributableFirmware;
 }

machines/perception/configuration.nix

@@ -0,0 +1,50 @@
+{ config, lib, pkgs, inputs, ... }:
+
+{
+  # Sops setup for this machine
+  sops.secrets = {
+    "borg-ssh-key" = {
+      sopsFile = ../../secrets/perception/borg.yaml;
+      format = "yaml";
+    };
+    "borg-password" = {
+      sopsFile = ../../secrets/perception/borg.yaml;
+      format = "yaml";
+    };
+  };
+  # Setup system configuration
+  nathan = {
+    services = {
+      borg = {
+        enable = true;
+        extraExcludes = [ "/var/log" ];
+        passwordFile = config.sops.secrets."borg-password".path;
+        sshKey = config.sops.secrets."borg-ssh-key".path;
+      };
+    };
+    config = {
+      nix = {
+        autoUpdate = true;
+        autoGC = true;
+      };
+      harden = false;
+    };
+  };
+  # Configure bootloader
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+  boot.kernelParams = [ "net.ifnames=0" ];
+  # Configure networking
+  networking = {
+    domain = "mccarty.io";
+    useDHCP = true;
+    # Open ports in firewall
+    firewall = {
+      allowedTCPPorts = [ ];
+      allowedUDPPorts = [ ];
+    };
+  };
+
+  # Setup home manager
+  home-manager.users.nathan = import ./home.nix;
+}

machines/perception/home.nix

@@ -0,0 +1,3 @@
+{ config, lib, pkgs, ... }:
+
+{ }

secrets/all/backblaze.yaml

@@ -1,4 +1,4 @@
-friendpack-backblaze: ENC[AES256_GCM,data:m1QFetDGUMQabN5waGU7tSaxLQm42n3HViPVATiICg==,iv:VpDfdQ8MqqRje6DlZOJ01b7ZHmrD0g+ADtj/KQY+LR0=,tag:EwlRWLqtuldTSdFsaetisQ==,type:str]
+friendpack-backblaze: ENC[AES256_GCM,data:yafGzeKPXujuTW8ur57WNTQLiwrMeffz2+Mj3+Iuhw==,iv:VpDfdQ8MqqRje6DlZOJ01b7ZHmrD0g+ADtj/KQY+LR0=,tag:u7wTFO+bIUZSiWUbm4epVg==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -8,77 +8,77 @@ sops:
         - recipient: age1ud80054jwf6ff7xx65ta6g7qxx2flc24r5gyyfjz43kvppjutqyskr2qm2
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqU3NiYlRINjZlN2ZkeTZY
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBcjlrMVVCdE0wdTFESHgx
-            Q0RnUG9yN3RyWUt1ZTlSUkh5RS96MUc3aWpVCmloTm5IcmI2Qmk5Q1RsWWdzT1Rn
+            OXVRMHBtTXhIbmZVc1BNYUNDTVk1b1U2NlFrCkhQVmN4QnllSm5SazNFRzhiZ1N5
-            c2dQdTUvK3Uza0NWZHc5dnhwT2hLQWcKLS0tIEtlbHBuOCtOSDhseVlTUS85b0o2
+            MmpxejRqSkRPUFo3TkpDM25hdUtpL28KLS0tIEkvRjN6Z2hIYThKZ1JSODJUOCtN
-            aXFOeGU5SlpXS2RuYkFjQlhoS0JFYTAKb6qDVqy9IfSdIKP/L28Z62jVJpZyVHja
+            bXJWb3kvNHVaMUlkMzBDMVVFakhYM0EKskwmt2p8XNCndfStD4n/xz0hpWAYAI73
-            Yqmfv/Nk2lFu0OGK9uoeJyYXOuwreG8rbAcET8CsW+QJ1xEozj6T7g==
+            dfseGvD+bOXPa0HpmzufTFs1VPn10AvVxXJ1XBMxrwKIYhiCTEqUEw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1tsq68swufcjq6qavqpzrtse4474p5gs58v6qp6w7gum49yz45cgsegxhuw
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpZkFxY0Z2TjFoWnYvbkUv
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsVnRzMVRPQmw0Yk5VbTA4
-            ekN3RklZTGF3QU94K2xkaDU1SC9XNHRLN1FBCkpoeDI4emVYc0RXVUZYalhrbXhj
+            Wm9BaXM0aUdaOEVmYS85L0JIdzlQNzlUYWx3ClBaeVB3L0YzbVJtYW9iNi9ydU01
-            RUhUUkZFRi9CMmVMQ202ZElZRk1TUGMKLS0tIGVSWVZ6TzJqdmIxUVdESlcxK1lS
+            allTVjVQUDJFTWZvKy9rOCtoeENBS3cKLS0tIGhFaU1Qd2FwWFBqV0lLSkJnc21W
-            bDJvWFF3M1JGQ1oxZ0RhSi9hSEdQVGMKyCkiRJT0RZLDBg5VMWB7hVoQ2TWLlW7k
+            RWovODNVaTJ3QzZMcmNPL2FmS2dFYkUKgFviRkY8PyGtFHYBbVc3rfHDnSjz0Njp
-            5cYUhvEVJZADCV6VD6RmEwfJuuk4QsIxHg4kzACDc357mh8BeidgSw==
+            PI9TH0FEcxIup4BNHA7sH7rEGDfo0InjyGCM8vNhTqf6e8+ilky2oA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age12ayrv88xjt4r276fzc9du70x8q0r7xutt85vj627ykf4k8kgms4sc6wywn
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4SjdkZmdpVGk2bmxnSE9H
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByUUc4aUgzaTRGZUU3eEVP
-            MVV4Y3VCazcwRnc2NTRXVXBJcE9hT05laVJRClA1dVFiSVROWHBNLzh2U3NKeDQ0
+            QVM4aDJhdzFsNys0bmI3UlYrbS9HcitGcmtnCi8zcFRxbDk4MjltM0FScm9LRk9S
-            NWozWDhhQVhScGdiNlR2WWh1RVgrOGcKLS0tIHh5ZGliL3J5S09ac0dQODhCQWdG
+            UVhrdjhTUEt5REFmcmdsOHFlRXMxQUEKLS0tIFdOdUNQSTFHdkcrQ2tQdlJQS29L
-            NDFSaWo3czAvMlRlOXpnZE9LSVZqaU0Ko4ZNMoBczWeDhA2BlDAmbB/oOzpxHq7r
+            NGJOc0xMQlVUUG5Xak16bjBxcmx3MWsKALxXIrQiCAX2b1os0irVN0exmE/HGzac
-            Ubme3sRNOrNKJiaHntgoIZMWOukAVKBOmboAYjtvU7mlAk/zX4jVyA==
+            uAKlnrIqsH3PJO8d1K2fJFSX0Pf1nX+AB4b3F7vj6TEcAwvmJkrjig==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1r0aszjkyp4zlcw2w2vrk8hmcyvntshr8rew4ehlu5zad4eh6mspsatuczd
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiZWZ3VFhjcjUxa0Q4b2lM
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1UVVLSklFRG5UOGVRdjBu
-            c0ZLY3Nka3pXOGJqcE9xVFJOdUZwMDA0c2lrCjdLaWFqWC85Q0E5U3VOcWZhY3JT
+            TlFuZ203SS9VL2RJOHQ3S1NaUC9DK1ZhMUJRCkFUa0xNMnlRTlMwRnRHQ0FVQW5M
-            eTN0SkszWk9YN0JBOHZ5Z1hoc0hNV28KLS0tIFBiN0lZbk5hdEd6bXNIblZQT0h2
+            VTFjeFBaaGU4ZlJ2aUlxdUtQNGJQYzgKLS0tIHloL3U1a1RwTVJjc1BDcG9UZWk5
-            YnB2L3J5cDIzYXFscVd1QUVwZ1RraTgKv+/It3YGBzwtuKIuXCaG/QguSl6xTbIp
+            aTdzZmJ6THhRSUxSQmRmZnR2N1k1aGcKBq5D7KM7lgHAPSkEbbvV5HIQBGba4r0Y
-            ZN2PUuVxrMkfy6wBph5WF7Za4hR1uIDfVf1HEgOo75Cry62VOr1RBA==
+            ynm16OZxpfWIzdi9uUnY2HivddIk3Ryjzf37qQ7u8qzI1rxByWRbCg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age10zd0y2zpty2z39sh2qe66yuu9jd6hrcd3ag2wqtjp8tc579nmphsymhdla
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1akRwaFc0TW11Nlh1Vjdw
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnN2hzWHFVMzEwYi8yWlpa
-            ZXY5YTNMaFluMFlnZzFBdFprNGdFVjRaTTBzCnpzM2Z2R01nVDY1NVplMGt2Wk5P
+            RmdzTEVOdmVYaUZocWxaeHhXN0hrYzRSSkdzCk9WVFhDYjVqUEFmZU5HWnlERjFw
-            V1JTekJyR1R3RlNKZkdlTVJuMHdGMEUKLS0tIDhHNkIwT3ZlNkh0NDVQakh1Qith
+            SUxmZ2RMR29pMkNUbkxnU1pSbkhRV1EKLS0tIFJlOXZoK29LQkg5bVNwelgvbW1K
-            QkpKakptbGtsUDhISFN0K0FwWXAxT28KA2F8oCyPpuzxEoh9Gp7YceLmsOApU85o
+            QW9Ibm1mdlFzZUNITDcwQUdIL2RoQ1EKFs/uuO0Rgv7cjy2zSDaikNubtsJGcCxr
-            zX9OqFoiLDI4oqR7io1LdpQZYgsslNRIDLAtN+7+0gyKeCeBC29LdA==
+            FUdNRJzQbEhUYexSJRbkfpigXGhpII8adFN56lqfHVKg9jJSPHlsgg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1pm647k04hhwm2dmqh07hnzflkurfevefcyf8xlhmc83a07n77e3sltyt0d
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6bS9FRCt6Ujd1NFJ5QmM1
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkTml3aHUxMUg5N3kya2JJ
-            MXcxQ2RvTlJ2cUdIYlhXenRGQWxQbjhSYlU0CklDaXZKc1QvMEpHNHl4MEE2Zlln
+            UnFEa1ZiS3Y3bVhycGVMU0xjNUFSVURXUEdnCklFUW9yVnhoMG5ldUY4aG5SRW50
-            YlBzTEc0Z2xlbWZPNUpGc3UzL1RoS1kKLS0tIEtnc3Z4aldYaG5BVHRmamlLOTgw
+            SlNpelIvR3hmdXRENURBcS9zS0pKbzgKLS0tIEJwdnBUV3hpZmNjMGRuWUMvT1J4
-            Q2VzOUJvUDFPQVBjOU5VeSs1THRia0kKwRyeae3D/xC0NpR2ZCj9X95RmsHJ31vg
+            SDZmY0JEaFpzVlFoeFplYzhmNU9ISFkKPcXjvRAqufMMPRafwjcEX8TfpQnukI88
-            vPg9f5tUr0Z/6vmIDCIKiTe5ZrbKhrzGXz/i/wvRJNwvlD0stY3yiQ==
+            flVPDqE27tyPsB52ozOWbuGBGSdcsiQXOk+qJL82pak8XZVqI06R5A==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age15vjvppw2gzjwmtlptefhrhqtjyu0a07v488a9s25a3k2vtpqc9uqvw6vl6
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuZFRCVkp4SlNiWFZOQ2F0
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkU3hYZE1SR1RNRm9teEdh
-            UUMxeG11bjZRNDBFL05jRmozZit6U0hJSjBzCkdCcmdTblVEbGhybVFXOXBmbkpx
+            SXZvRUhiY2NoUGxZQ2lRS2VPSFE0T0pTTFgwCjRJenYrM05PL3BFZnhWeHFzK3E0
-            Zk1SSFNhdW0vTDlZK3BRNnhHMEZyY1UKLS0tIHdSUWVOWWk2OGZ6b2NJSnRjUms1
+            eGoyMzd0R2paSnVFQ0xHL0VlcXcvcVUKLS0tIHdBMXRQMlQwQmJQTmQxNW5GL1lr
-            ZkNwVkI4UGdvaVE0QVF4RkM0KzRldjAKN5bVMzi1N83Mt0G+qBEq6AuajSulep7H
+            VmpFQ3dUWTA1UzBnKzFpMkZTSUxudUEKm/BslZ37XDD/ljIpHQelgpd/fFrpOqV5
-            NUDlYjdZPREcoeUR78Ywni1AmXfnsazt91jaJN2n+IKnsoqcH+Aa4A==
+            9Fd4bAPsRFLakvRb9xaqBGLxzjGH5+3mi1gPLYWTbU8nWkkH073SSg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1fe57fel46lk5n9t34lh5nl909gk88trwy9ttgxqk3up9d83wxsnsdmuu3a
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhTE1lUWhra1pOcUF3WVRP
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOK0ZCWVhoZmtQZGw3Tm9s
-            MVFjamxnbnBZcmdwMUFXaDA0aWVHb1lrblhrCkdOZXN5ZXRQUVN4R0NVN1p4YTlQ
+            b2F5YXpXQWhxWDZxOHZrUm9JeWFhajQyaWljCm1CalMwQTIrTE5hMjl0WjRpNEt2
-            VzlydGsybjVocXFUWFVCZVVtNUFhT28KLS0tIGkwZkI4MjNFWUM1c1hJZWNKdVZo
+            dXFLQlVvZ3ordFNvUXhmem8wWjEyV0UKLS0tIHRqVzByaWZad29ZcDFndWdRRkZE
-            THJCcitiVmZlUlNJMGFHcEVFNkQzMEEK/d1EwRaD7lAJtmyIK6DtaQs6NIQCirlo
+            ckJBYmovZ2JNMnY3dGxMeEk5MjljeTgKg/guYf2aL2iwHs/nSLkgTrIf+IukKRQl
-            plFpHYkxxnfXRUtDSyK/hhnZiyAsXBhxo/yr5Q1v4mnMK7xG67aubw==
+            SCCVgllLkno87MJYOLCJxLfo96i9cixXdDuP+qt34dnRvglZsUkXeg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2022-06-29T08:33:24Z"
+    lastmodified: "2023-04-09T03:07:03Z"
-    mac: ENC[AES256_GCM,data:532kHcb/qLZSePtoxTwk7497UShNpmklNnMCU4WVWBAkyT5XRvIpKHJRWl1A/Ll0/w9Y9fjVxD97PjxE18LLsP7x8t6dj54Z9k2PVEd7U+GP3iy6QhJYJCwehYLiMmqf9T8wsiLyEVyXDn04pN62NQNw/F5n9kBbeWxSk3wuDtA=,iv:OaWeCvIr2mSUzVgytKcueeFN3tzfBoydyXgMxLSE/pY=,tag:bDkmi+W9cd9avpIVEJTEHw==,type:str]
+    mac: ENC[AES256_GCM,data:nnGvDO7znv2oxWYZqwct8WmGIibsYWAAJlAI6vkLqcodqv+ifsPjTOEj5uZPNP5/uI/DpBxj6en/OwQT/hONEy1qIqza9bXJzz8uE2LY+Gp76pWY9RG4RD7/XYlHPrCRlnlXQ4OuCtr9mUkxCjr2iM6475abe3dZ3XnciZwJ7IM=,iv:m/L2QE9/B+lWvzDvBOJwAt67Tg/OkT2kKoSifAdXM6A=,tag:neDhfjzomskfxmRhEhiDGQ==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.7.3

secrets/all/tailscale.yaml

@@ -1,4 +1,4 @@
-tailscale-auth: ENC[AES256_GCM,data:gIlUyatbZxVrPAm0JS89OZiym07U6YHePSQcC0QlImSY3yfPFRO2izi8IcXFlqMcdUz1MOiOAIw=,iv:xTEvf1VSkoS73ulmFb/yJ37vVm8Kt3klzixgFR8w8Oo=,tag:xAj9JmUc3waoLsZ0bkZciw==,type:str]
+tailscale-auth: ENC[AES256_GCM,data:eQaM1qg8PRYVBLAPwjOJhq5DO+MC+8fhZ68XDhDx1xv2i5G+wHhnC/cdF2N9v+ow6CaBMEa2eQAN,iv:gQNKvAugadsW65XsD0dLpCyT4CI1Is9QTrwC6hk1pLo=,tag:tSRK2brWv0ZP4gXcokok2w==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -8,77 +8,77 @@ sops:
         - recipient: age1ud80054jwf6ff7xx65ta6g7qxx2flc24r5gyyfjz43kvppjutqyskr2qm2
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrRDExTkNUdmIwK3d5NFR2
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlT2RCenNWSDJQdEptMnBK
-            V25tTCtpT3M3bmdHWkkzcko0bGJKZUNCZjI4CkttQmR4Vmw1aVlpdXB0d2hkM0NU
+            dDV0SDN1ejZoRlVDWXZ2RUhyREtRZkU2SERRCjRBYUcyQm9IRy9QU2wydHl5WW5L
-            Ujg1RWQ4MzdweHlTSzViUE5sRFA3Z0EKLS0tIEZZN3Y0R1ZWekdIRjFjUG9obFN3
+            NFJnNk14VWV6VzBWVVpoOTg5WEVTK0EKLS0tIG4yVGxNWUI4Qzl2UTRXQ0VGV0kr
-            ZXFPOUhnTmRhdmtwMHVTYWNJUVpRTnMKIVKqX9q848MlBrRxjZ0sVqXI1WPhNGQn
+            YVczM29EM3NpWHRmZEdRY2cvRmN4T3cKus4LvS4V4yGv0WAnFmJS5A2SxeVccW06
-            IeuJy/GjqCi9/WSKy4+gyHIPRnu30xylH/5pLpmKHBtHA5hYcsx7FQ==
+            lSHOwVJmxinEHJo/2PEm2b/BDOtqF0xV9Oj6qZurhAOHchYarHmEvA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1tsq68swufcjq6qavqpzrtse4474p5gs58v6qp6w7gum49yz45cgsegxhuw
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMeDRGS01ycS96MG1CQlJW
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGZFVEY0ZUbW9ENmliMEJm
-            dzlCTWd0Zyt0NDlvVFlMMkY2RlJlcnJkTW1RCkxLRWpQOXAyRno1M2l3R2lUOWk5
+            WHI4em0zM29jc1JXWDVsZi9zK3lmRTlFS0EwCmhhY0ZXbFpVd0J0T01jQlhXSUxO
-            UmlzWVJtaE1KdW14ZEN3dmp4bkwzbU0KLS0tIEhOU1FvS1BYdFVrb1puNWo5YlNP
+            ZlhPcTQ1NHA4MHhMWm5QektUb1FQZVEKLS0tIG5zK2Ira3VRNk1IREdLMnRaU09v
-            UFUwSWJBV0VaQUI5a2VyWExLREZPZU0KfC2WeexDykrdoO1isYDr9+Xjt981+vzK
+            dm1ITjc5TGxpT0pqeG45dlZGZUlUUkUKNeOKy39YKawnH93mOq6EI6RkpHuasrYR
-            lBaNzKfOcHO1XyfJFpFff1thcMg8RkyMyUMYL6sYSkpcn9HO5mvy2A==
+            pyJx05yMP7y+c2cb5kUrr9R0aiYjTDQk0WiUikAhj+UGINQBmS/sSA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age12ayrv88xjt4r276fzc9du70x8q0r7xutt85vj627ykf4k8kgms4sc6wywn
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxbSt6dFB5WmRtcUpOa2ZD
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxak5teVE5VzlqQkN0bnVC
-            SlBZMS9UNTd2SFRHRm1NUGEwL1kxc1FSNVhrCnp4ZUlOcGhPM0NsbHhueVRhdE5l
+            b3BpNGpDRmE2ejkzM1BxeXUvZWJrdytSelJrCm9EVnllYm0vMGpscHlsZWVBbzN4
-            cmhHZnErdzlTRXdqZEVlY2xvK2x4bmsKLS0tIFBBNU8yNTFiK2ZnbUZtODNaT2sw
+            Yk1FL2tyb3lVL2d1T1U0OVE2TFBhZjAKLS0tIDlxbjZCbjQ5V3lCdmlzeW9CSTNq
-            aEdzV3NkeVdleWIvaG9KcHJwL3FFVmMKUW9HS+8Hz1AyA3gOWmBeva8jvQHK45e+
+            dVZwSVJKUndSUkdtUy92bEZaanhDMEEKJtxus+E5IaCYzeWyZNRxzkGmzxpNskEu
-            YfmRXwUsNE1bTnayf0ecf55kBxlJPVFWjo3ray3dp34V1gW8BEMq6A==
+            0uYyT+56dvf2oHqrrNOguS965lDXOepBjE+eU+g2iqtsKt64vy4tig==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1r0aszjkyp4zlcw2w2vrk8hmcyvntshr8rew4ehlu5zad4eh6mspsatuczd
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNQUVHVVI5a29JaWVPSVUx
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMaFdJY2NLcFQ0d29RYXRp
-            TUt5UWFqL0lrL25PUElma044UW93a0pXOGpnClFIeFBtVWRTN3orOXlFOWdWREVt
+            RGsrenkzSlV3SHdpYit1ZTFxS1Btb01ycVhJCnJwT2ZaN29lWVZCWUhzdzBjY0Nk
-            RXZxSEEyM2Y3VmdqUXRXUEwxV1I1QnMKLS0tIGc1RzdaM2pBUnZYTFlMYmZJU01l
+            ejEyZ0hNY2MwbERZTnQwZkFHcEpZdnMKLS0tIDY1b29vN2RCWXI2Q0MwbnFicm5U
-            UU5NTFVCcE9OMm1BMUFaZWZta01NU2cKUT6Ba6FOWPWrCHf4eMrtDm3eWdT0QX1/
+            ekFuMzBMckNJT0dLeXViUEsvRXVpOW8KgIM9qt1hnPG/MEcK8Jyw1qaV2/Gq6H3q
-            MzjwX1vJ0KyKwvZrOshEfoEdBl49u46hZLyMApH1i1Q5udMptAmUng==
+            AmVMUGe9gp0WyscIA0izJEYS7RTZXU7kIiY8uAKrmPfqNy28nTRssQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age10zd0y2zpty2z39sh2qe66yuu9jd6hrcd3ag2wqtjp8tc579nmphsymhdla
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGcWlEbG9UVS9RSmhZNkpV
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0M244UDc5SEVNalhMdzda
-            dVkxalE3T2xGSGR5RkhxUlFqMjBKaS9aeUF3CjRjNmZ1NmlPcHpudXh3Vi9jYm1L
+            aHdtOCtUUXNZeW00TGpnSUdNOUM3bFgzY3dBClNiTndyYVhqcEJ3bm9ZakxBQzgv
-            YnpLU1lLSzZkVkJ5eVNycFlZMFBpWEkKLS0tIGk4TTU3SjNTUWltem5BUXM1NFla
+            VUVyVHRqeCtxUjM1UVlXcWNBWHcydkUKLS0tIGpkQitoWEpFN0pQVXo2YUdyeTky
-            aktzT2FJYTJZbTlCVTd2bHE4eVQwSVEKcWRoSEMoH4b9v5z9CaO54F6CYxABZwyh
+            dE9GTDQrTWRPZGluNFo4UkhxTTVmcUUKUqaeUW239hp3qFPJHECA5j4LmfV10CQF
-            Xnx+go/wgosgt37XyaieldnfoWsXnXOJ60vFKVzKVP5lD1Do/2e4vQ==
+            vOgnIMQvZU+SoUvICwgItJYLMlTeCkwrNXJY1zR+RFbpWue+wSoDBg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1pm647k04hhwm2dmqh07hnzflkurfevefcyf8xlhmc83a07n77e3sltyt0d
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFY1dVT3hUTjdxM1RCbE0v
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4YzkrQU5MNllUL05Gc1Iv
-            WWppZlRlcm4xT2l6cTNVNGhJWlhLZUNvQURZCkx4QzkwWlBYUFZ3Y01raWduOEtu
+            YjhPQUhsR3hlYnB0N2FhVlZhT21pLzBnZVhJCngvMkFhQnJybkVyZXFaU1E0Z0M1
-            WEw3eEJqeEdtOTgvN1ZERjhIUGw3Z00KLS0tIEJEYlZ6aXEwcnY0Ly9nU2NlWGEr
+            ZmIrWmlmd3pPLzY0ZS9yeHhTVWJEUFUKLS0tIE1JRGE5Ny8ybDlLNDhGamx4cWlJ
-            d0tkVjJBYzd6Q2p1cmU5SzRYK1B5ODAK2YPxyLWmTh+HkHHXXL5v0thHyHwCmsus
+            QmhWVnA3d2oyaVhNUm1TUGFHOHk1UGcKGhsdX7+Ai0DtuBFrhGHlfnUtC0NKiZ2f
-            lwJ2iDFUKKyzTGgY0WJskTiLVgD/P18FpQTRlHtUttAVME/iRZCSLg==
+            eMSuZs+allpnPNx5F4lmHvFUCU5/6LrPSxwGzQcpJXDL4rYarVpUaQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age15vjvppw2gzjwmtlptefhrhqtjyu0a07v488a9s25a3k2vtpqc9uqvw6vl6
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4M1BxTEZxRVJpZmw3OXF3
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjdlRPUjByakFZSE1tdnd0
-            THhzeGNvRTgrbllsVU1aYTY2eHV4QjBpZEVFCmRXeXE3bUtuUFFZRStTbUQ2UWVh
+            dFFlVUd3TjJNaW9sbStlZE55SVlxNmtrU0NzCkNXSG95MzcwNlBTdlZxdVh4bTkv
-            VFJDMndzQit2ZWlrL0ZJZ0VWM01YWHcKLS0tICtIRVNhWGI0K0xpUmNRMWVRNUNp
+            NTZ1b3BTOHRwb0kwOENQMkRVMTlFRVkKLS0tIDdiSWpFMjZTUi9HL0pqdWhHT1pv
-            MWw4Nm4zWTVtaTlUQmdTSGhGbGdHSFEKIUpFBnJ2X9VeBNEV6Ww+xsZIBsBojlJX
+            Zm10OWwwTjRmeXlEZTJTdnpHaDZUWlkKkR+Ri5M/+gC6KN4oBUMuLMyvHnTgM6Ew
-            4eavwJ94yzJBwWDsFPZu7UberGy+N5+MnyuYhnfIEQAfRson6DP39Q==
+            csFSHZ/6p4vLPwqwICX8vUmGvZVZHSF8d2OW+rbnbjbstiH6LFvEOg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1fe57fel46lk5n9t34lh5nl909gk88trwy9ttgxqk3up9d83wxsnsdmuu3a
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLRlhyU1FGWWRLQlp6TU5p
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOb0p3WFJmV01VQkNsdjFQ
-            UGUzS1ZoaENPN3Rkc1dVQnliTEhDM2xmanc4CnZXdU5NRjFPeklDdXkxQWpmVThs
+            dkZmREM1MW80dGIzS1oyVmh0VUJxclVRcTBvCjlMNGVoRm1SR1FlcXZKc0NMakh0
-            N3pCdEo0NVpMQ3FsM0ljL1lMdE9ieTAKLS0tIHltck9Fdk4wa3hXMTQ3UEpiYXVh
+            dFpTcUNFUzZkUm9UeXd3c0JVK0RER3MKLS0tIGVNdit0NTlRYkttYWhTY2VMS1hP
-            cE10ZjhzQ1lrNVRMc0lVNU9vTi9RYU0KGvngbl9KxKxnyFTzOaxERZOi3lWeS8F+
+            Y25xOU5wY3FRbmg4Q3RtVWxJU0tPMDQKasUmTfJz39Yw1w3RcqNTkHH5s27XeOlJ
-            kRm7vkdY1Lk5jnX9RIau31jgJsQzJSdxgMUD4rtx4UFpeuxHicmuWA==
+            sUGrZ9SDlFsCTtCS2srSuZQoITF3JwuXOsjq7GrpU4KM40rRBSM15w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2022-11-24T01:56:30Z"
+    lastmodified: "2023-04-09T03:11:28Z"
-    mac: ENC[AES256_GCM,data:AG0NvPmjpFAMGVjVw5aZRWrlmnRhGTtUQQiqc++7uhkD4BLxwCdBye9D2E+BWwelul1g8+WvjtTETOdxy9gZcMLlYnEQfAlLSXBMV3tAuMAsX+tVgaeaiChadAoUV6ybVo8CqjyisxXGoDD5csY4BwvqPvHZnOmsM6/M1rbRSEM=,iv:MTHdjmUmfmYLm2/ZsSxIAvu7z3ng0O8kTD14G5gi7kw=,tag:SCTVw57hf70ULmLPPctS0w==,type:str]
+    mac: ENC[AES256_GCM,data:SpZeHtv9fc0vhJpgRe7lV/BXjZV/5R07cRODvEuaPa2fhQzxio2hTUuKVmT1KqorMqple5XQuQgfzivkj2Pq/UNvxVDj+yo+o7p6yBBRcG4TOZBliVNksFrpfEbycfQY/8qKicL9CpBs0mnRnQKHC7jatVSW0VYbmmUXw7yNRYc=,iv:gXSe+6CFOc/n5/1aDhS9QIe1hM1pahcYKriykW/XLSk=,tag:h/1dicnfxU0lcD6JeEFWFg==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.7.3

secrets/perception/borg.yaml

@@ -0,0 +1,31 @@
+borg-ssh-key: ENC[AES256_GCM,data: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,iv:tMHZzbOZZ4erq7kJF7yXamdzQ2h7SAsWWx/AxeGwZvE=,tag:vhpN/2fmsDipoI5D6a2piA==,type:str]
+borg-password: ENC[AES256_GCM,data:WbYuJDQ6EIUmA8qM7cRFAqCPv1VJZMX/zlnAVRkFxWvs2JW9uL0If4zkZz9YXrE=,iv:Wy5CkS8x1Gpspr1FbcUij+dSkIBhlmr5ZwmUaICeVDI=,tag:ZfdVAUWcOjw9OKPYXb0vhg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1ud80054jwf6ff7xx65ta6g7qxx2flc24r5gyyfjz43kvppjutqyskr2qm2
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVV2R5Q1VaSjFyL3JQTFVZ
+            SWpvQWVmTkYvZzdUVGd2Z0FPdUdwZG9VcVJNCkNPRzQvR0xCVE9BZlhRRWk1TnZk
+            c2FXVkJiU3dUZzB6b0E2czc5akRJTWcKLS0tIHZubURnbE1uVDlzM013TmtmQ2pi
+            anNVWXR4NFpLTGpyaHpSd3dkZWNydWMK7VlEJeLqm0h+uCostW/NqTzqE6a1BG0n
+            tgceY4yIRBcG1IxKBCRmzEbmoZFGJm6PucvZgd45oBk17Q1O03hGDQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1rztv2778cf2dcpzcpth888cq7u3rdsl7tfuhv4sddysdnqjxaevqg72t5l
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwK2FSbWVvS1ZrbnJzUHFy
+            RUtBN3IzaEFBalRnNm1SdTdDY3VrQ0NLejMwCjQ1bWhNWHpyL2ZTaUJRU1N2ajRh
+            cFN6clJRMFZUcENjTUtWTklabUlnZ2sKLS0tIHVLU09yL0FEUlJZdHhFQ2VnUmJs
+            cVJRN0tLZEtSQk11Q2s5dWhTdjR6N0UKx9+pZQCQP5FQATcNYLksLGuMJR2m8AR3
+            Iw0Ty8crcp9Kttx7Bh+RJJLlh9TTtB3mgeZO7fWA2H7xu+fOm32IAA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-04-09T03:05:47Z"
+    mac: ENC[AES256_GCM,data:AiocyLeU9bFvfv09IV35fWCWmQID2bjwWOyqbPOL0H7oZRq2ovzARcJOxyROWpQVgnUJ3mnl1IlDu/PlXXZ3Ll+o5otxjUjzTb7Ygn/2mNqXCl1O70LdP/UyCWNP3cAK8psoFKsFVN7N7+3/Em9Xf4xfLLUa5RM7llvLohNnTSc=,iv:UAa5/oM5agDra6xsGalnjECxkBU4/Piynmpjvys6hHY=,tag:feYWOa8GEpV8Tg7lSHFjbw==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.7.3