nautilus: enable thumbnails for remote directories

genepi: remove taskchampion (unused)
haze: add anytype
2025-11-21 23:29:48 +01:00 · 2025-11-21 23:29:26 +01:00 · 2025-11-21 23:27:34 +01:00 · 2025-11-21 23:26:57 +01:00 · 2025-11-21 23:25:53 +01:00 · 2025-11-21 23:25:29 +01:00
38 changed files with 241 additions and 94 deletions
--- a/clan/flake-module.nix
+++ b/clan/flake-module.nix
@@ -7,6 +7,7 @@
  ];

  clan.meta.name = "blossom";
+  clan.meta.tld = "val";

  clan.inventory.instances."rpqt-admin" = {
    module.input = "clan-core";
--- a/clan/network.nix
+++ b/clan/network.nix
@@ -17,4 +17,19 @@
      settings.host = "git.turifer.dev";
    };
  };
+
+  clan.inventory.instances.wireguard = {
+    module.name = "wireguard";
+    module.input = "clan-core";
+    roles.controller = {
+      machines.verbena.settings = {
+        endpoint = "wg1.turifer.dev";
+      };
+    };
+    roles.peer.machines = {
+      haze = { };
+      crocus = { };
+      genepi = { };
+    };
+  };
 }
--- a/flake.lock
+++ b/flake.lock
@@ -41,11 +41,11 @@
        "treefmt-nix": "treefmt-nix_2"
      },
      "locked": {
-        "lastModified": 1762423941,
-        "narHash": "sha256-2mahDC4N9CiR/VQR8EqHg0TZhf+ix8u4y2gbPr6qJ6w=",
+        "lastModified": 1763669555,
+        "narHash": "sha256-uYXZM7u2P6mAMH4JLWYrE/16tZlur+iiKTeYexobf9g=",
        "ref": "refs/heads/main",
-        "rev": "9ddcda8f10c96c790fb83cf4004899d95fae891d",
-        "revCount": 11011,
+        "rev": "edc92e561600b4f778ba1b88e357ee2305c5038a",
+        "revCount": 11117,
        "type": "git",
        "url": "https://git.clan.lol/clan/clan-core"
      },
@@ -57,17 +57,16 @@
    "dankMaterialShell": {
      "inputs": {
        "dgop": "dgop",
-        "dms-cli": "dms-cli",
        "nixpkgs": [
          "nixpkgs"
        ]
      },
      "locked": {
-        "lastModified": 1762704668,
-        "narHash": "sha256-wrLa8ZoEpAhQjIt9uHcPb47LvVcceA8ok6S7BeUeaC4=",
+        "lastModified": 1763701643,
+        "narHash": "sha256-6lytTY75PO2tIbptdF6xM9QMhoRE4O94/E1teR55LAQ=",
        "owner": "AvengeMedia",
        "repo": "DankMaterialShell",
-        "rev": "392a1c03c53ce916ec8d2ba61e852d34d2e1b9cb",
+        "rev": "dfe2f3771b10b5d042a2d7eca04361e64df6431a",
        "type": "github"
      },
      "original": {
@@ -92,11 +91,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1760612273,
-        "narHash": "sha256-pP/bSqUHubxAOTI7IHD5ZBQ2Qm11Nb4pXXTPv334UEM=",
-        "rev": "0099739c78be750b215cbdefafc9ba1533609393",
+        "lastModified": 1762942435,
+        "narHash": "sha256-zIWGs5FIytTtJN+dhDb8Yx+q4TQI/yczuL539yVcyPE=",
+        "rev": "0ee328404b12c65e8106bde9e9fab8abf4ecada4",
        "type": "tarball",
-        "url": "https://git.clan.lol/api/v1/repos/clan/data-mesher/archive/0099739c78be750b215cbdefafc9ba1533609393.tar.gz"
+        "url": "https://git.clan.lol/api/v1/repos/clan/data-mesher/archive/0ee328404b12c65e8106bde9e9fab8abf4ecada4.tar.gz"
      },
      "original": {
        "type": "tarball",
@@ -132,11 +131,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1762276996,
-        "narHash": "sha256-TtcPgPmp2f0FAnc+DMEw4ardEgv1SGNR3/WFGH0N19M=",
+        "lastModified": 1763651264,
+        "narHash": "sha256-8vvwZbw0s7YvBMJeyPVpWke6lg6ROgtts5N2/SMCcv4=",
        "owner": "nix-community",
        "repo": "disko",
-        "rev": "af087d076d3860760b3323f6b583f4d828c1ac17",
+        "rev": "e86a89079587497174ccab6d0d142a65811a4fd9",
        "type": "github"
      },
      "original": {
@@ -152,11 +151,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1762276996,
-        "narHash": "sha256-TtcPgPmp2f0FAnc+DMEw4ardEgv1SGNR3/WFGH0N19M=",
+        "lastModified": 1763651264,
+        "narHash": "sha256-8vvwZbw0s7YvBMJeyPVpWke6lg6ROgtts5N2/SMCcv4=",
        "owner": "nix-community",
        "repo": "disko",
-        "rev": "af087d076d3860760b3323f6b583f4d828c1ac17",
+        "rev": "e86a89079587497174ccab6d0d142a65811a4fd9",
        "type": "github"
      },
      "original": {
@@ -165,27 +164,6 @@
        "type": "github"
      }
    },
-    "dms-cli": {
-      "inputs": {
-        "nixpkgs": [
-          "dankMaterialShell",
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1762491516,
-        "narHash": "sha256-oGLH5Gje/p2Hc1kO3m8P5eAZ7JldBI30EmwzEET4cNU=",
-        "owner": "AvengeMedia",
-        "repo": "danklinux",
-        "rev": "050cf28a2963a7698ed4759736fe5fe77eee7cc2",
-        "type": "github"
-      },
-      "original": {
-        "owner": "AvengeMedia",
-        "repo": "danklinux",
-        "type": "github"
-      }
-    },
    "flake-parts": {
      "inputs": {
        "nixpkgs-lib": [
@@ -214,11 +192,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1762440070,
-        "narHash": "sha256-xxdepIcb39UJ94+YydGP221rjnpkDZUlykKuF54PsqI=",
+        "lastModified": 1762980239,
+        "narHash": "sha256-8oNVE8TrD19ulHinjaqONf9QWCKK+w4url56cdStMpM=",
        "owner": "hercules-ci",
        "repo": "flake-parts",
-        "rev": "26d05891e14c88eb4a5d5bee659c0db5afb609d8",
+        "rev": "52a2caecc898d0b46b2b905f058ccc5081f842da",
        "type": "github"
      },
      "original": {
@@ -277,11 +255,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1762704774,
-        "narHash": "sha256-iodz4xQbULkHqetbPu5BCSWsVEzZiiNSv0/dzfH4XiE=",
+        "lastModified": 1763416652,
+        "narHash": "sha256-8EBEEvtzQ11LCxpQHMNEBQAGtQiCu/pqP9zSovDSbNM=",
        "owner": "nix-community",
        "repo": "home-manager",
-        "rev": "be4a9233dd3f6104c9b0fdd3d56f953eb519a4c7",
+        "rev": "ea164b7c9ccdc2321379c2ff78fd4317b4c41312",
        "type": "github"
      },
      "original": {
@@ -298,11 +276,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1758101718,
-        "narHash": "sha256-qxY1q6ppBK5zWueAWVibiQLXUKbmot3/Zlb+J6q7RS0=",
+        "lastModified": 1762970543,
+        "narHash": "sha256-7ipFVC9pvI564c22b1dIEzSQ8dZXK3cxh/tF/4tX38c=",
        "owner": "ignis-sh",
        "repo": "ignis",
-        "rev": "57017f8fbde4c4c67bdd4fa69c72589358882928",
+        "rev": "ba8b0e11c2462afc9fdc30ce6a72b4e94e8ee7c4",
        "type": "github"
      },
      "original": {
@@ -355,11 +333,11 @@
        "systems": "systems_2"
      },
      "locked": {
-        "lastModified": 1762639445,
-        "narHash": "sha256-5E9exwTb7Tr4+SCJLJl/giiouHDmNGFb+pobScH1TkY=",
+        "lastModified": 1763355108,
+        "narHash": "sha256-u5gCg+oA1car16NA7UL2dVjZGdD/RXJCt0srVFwCnmA=",
        "owner": "InioX",
        "repo": "Matugen",
-        "rev": "4c8c1dc6055853eb62b1f15be2920961194ef4cd",
+        "rev": "e216c4bf66899694b19b10369f9fa0275d739cff",
        "type": "github"
      },
      "original": {
@@ -376,11 +354,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1762304480,
-        "narHash": "sha256-ikVIPB/ea/BAODk6aksgkup9k2jQdrwr4+ZRXtBgmSs=",
+        "lastModified": 1763505477,
+        "narHash": "sha256-nJRd4LY2kT3OELfHqdgWjvToNZ4w+zKCMzS2R6z4sXE=",
        "owner": "nix-darwin",
        "repo": "nix-darwin",
-        "rev": "b8c7ac030211f18bd1f41eae0b815571853db7a2",
+        "rev": "3bda9f6b14161becbd07b3c56411f1670e19b9b5",
        "type": "github"
      },
      "original": {
@@ -391,11 +369,11 @@
    },
    "nix-select": {
      "locked": {
-        "lastModified": 1755887746,
-        "narHash": "sha256-lzWbpHKX0WAn/jJDoCijIDss3rqYIPawe46GDaE6U3g=",
-        "rev": "92c2574c5e113281591be01e89bb9ddb31d19156",
+        "lastModified": 1763303120,
+        "narHash": "sha256-yxcNOha7Cfv2nhVpz9ZXSNKk0R7wt4AiBklJ8D24rVg=",
+        "rev": "3d1e3860bef36857a01a2ddecba7cdb0a14c35a9",
        "type": "tarball",
-        "url": "https://git.clan.lol/api/v1/repos/clan/nix-select/archive/92c2574c5e113281591be01e89bb9ddb31d19156.tar.gz"
+        "url": "https://git.clan.lol/api/v1/repos/clan/nix-select/archive/3d1e3860bef36857a01a2ddecba7cdb0a14c35a9.tar.gz"
      },
      "original": {
        "type": "tarball",
@@ -453,11 +431,11 @@
    },
    "nixos-hardware": {
      "locked": {
-        "lastModified": 1762463231,
-        "narHash": "sha256-hv1mG5j5PTbnWbtHHomzTus77pIxsc4x8VrMjc7+/YE=",
+        "lastModified": 1762847253,
+        "narHash": "sha256-BWWnUUT01lPwCWUvS0p6Px5UOBFeXJ8jR+ZdLX8IbrU=",
        "owner": "NixOS",
        "repo": "nixos-hardware",
-        "rev": "52113c4f5cfd1e823001310e56d9c8d0699a6226",
+        "rev": "899dc449bc6428b9ee6b3b8f771ca2b0ef945ab9",
        "type": "github"
      },
      "original": {
@@ -485,11 +463,11 @@
    },
    "nixpkgs_2": {
      "locked": {
-        "lastModified": 1762596750,
-        "narHash": "sha256-rXXuz51Bq7DHBlfIjN7jO8Bu3du5TV+3DSADBX7/9YQ=",
+        "lastModified": 1763421233,
+        "narHash": "sha256-Stk9ZYRkGrnnpyJ4eqt9eQtdFWRRIvMxpNRf4sIegnw=",
        "owner": "nixos",
        "repo": "nixpkgs",
-        "rev": "b6a8526db03f735b89dd5ff348f53f752e7ddc8e",
+        "rev": "89c2b2330e733d6cdb5eae7b899326930c2c0648",
        "type": "github"
      },
      "original": {
@@ -525,11 +503,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1760998189,
-        "narHash": "sha256-ee2e1/AeGL5X8oy/HXsZQvZnae6XfEVdstGopKucYLY=",
+        "lastModified": 1763607916,
+        "narHash": "sha256-VefBA1JWRXM929mBAFohFUtQJLUnEwZ2vmYUNkFnSjE=",
        "owner": "Mic92",
        "repo": "sops-nix",
-        "rev": "5a7d18b5c55642df5c432aadb757140edfeb70b3",
+        "rev": "877bb495a6f8faf0d89fc10bd142c4b7ed2bcc0b",
        "type": "github"
      },
      "original": {
@@ -545,11 +523,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1762630873,
-        "narHash": "sha256-3oBDTcYuTFk2e5xINUvXkmGy/NCosajTeFFZIgyrpZE=",
+        "lastModified": 1763600374,
+        "narHash": "sha256-CPBFJSZrHD/TguhjBzXKaqwtMGz7ac8bX5KZ9dJfdu0=",
        "owner": "nix-community",
        "repo": "srvos",
-        "rev": "84e1e515d32e2d92098ed2a8d102d71ac58676e5",
+        "rev": "66d01f019faeacda79b8d81cb37c8094685cb333",
        "type": "github"
      },
      "original": {
@@ -632,11 +610,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1762366246,
-        "narHash": "sha256-3xc/f/ZNb5ma9Fc9knIzEwygXotA+0BZFQ5V5XovSOQ=",
+        "lastModified": 1762938485,
+        "narHash": "sha256-AlEObg0syDl+Spi4LsZIBrjw+snSVU4T8MOeuZJUJjM=",
        "owner": "numtide",
        "repo": "treefmt-nix",
-        "rev": "a82c779ca992190109e431d7d680860e6723e048",
+        "rev": "5b4ee75aeefd1e2d5a1cc43cf6ba65eba75e83e4",
        "type": "github"
      },
      "original": {
@@ -653,11 +631,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1762684504,
-        "narHash": "sha256-mpZcCsX2DyRtPiSRdYQBXuZQ+exguXRtXzdUgh+h+Pk=",
+        "lastModified": 1763505293,
+        "narHash": "sha256-huleUPkt0iZJZy4e/KPhcHK4ueeqaqiMUu7Ft6NVDFU=",
        "owner": "vicinaehq",
        "repo": "vicinae",
-        "rev": "184387ffd4087de7313e7d1dca7477c7cfa61756",
+        "rev": "e600ffc4ad1e87f3389327adfab8bb8d2f34261e",
        "type": "github"
      },
      "original": {
--- a/home-manager/desktop/gnome.nix
+++ b/home-manager/desktop/gnome.nix
@@ -4,4 +4,10 @@
    blur-my-shell
    paperwm
  ];
+
+  dconf.settings = {
+    "org/gnome/nautilus/preferences" = {
+      show-image-thumbnails = "always";
+    };
+  };
 }
--- a/infra/README.md
+++ b/infra/README.md
@@ -19,3 +19,8 @@ tofu import hcloud_firewall.hcloud_firewall YYY
 ```

 For Hetzner Cloud, the resource IDs can be found in the URL of the admin console.
+
+## Outputs
+
+The nix configuration reads some values from the `outputs.json` file.
+When modifying these, the file should be regenerated with `tofu output -json > outputs.json`.
--- a/infra/outputs.json
+++ b/infra/outputs.json
@@ -0,0 +1,17 @@
+{
+  "verbena_gateway6": {
+    "sensitive": false,
+    "type": "string",
+    "value": "2001:41d0:305:2100::1"
+  },
+  "verbena_ipv4": {
+    "sensitive": false,
+    "type": "string",
+    "value": "51.68.122.153"
+  },
+  "verbena_ipv6": {
+    "sensitive": false,
+    "type": "string",
+    "value": "2001:41d0:305:2100::271e"
+  }
+}
--- a/infra/templates/turifer.dev.zone
+++ b/infra/templates/turifer.dev.zone
@@ -30,3 +30,10 @@ buildbot.turifer.dev. 10800 IN A ${addr}
 %{ for addr in verbena_ipv6_addresses ~}
 buildbot.turifer.dev. 10800 IN AAAA ${addr}
 %{ endfor ~}
+
+%{ for addr in verbena_ipv4_addresses ~}
+wg1.turifer.dev. 10800 IN A ${addr}
+%{ endfor ~}
+%{ for addr in verbena_ipv6_addresses ~}
+wg1.turifer.dev. 10800 IN AAAA ${addr}
+%{ endfor ~}
--- a/infra/verbena.tf
+++ b/infra/verbena.tf
@@ -0,0 +1,20 @@
+output "verbena_ipv4" {
+  value = local.verbena_ipv4_addresses[0]
+}
+
+output "verbena_ipv6" {
+  value = local.verbena_ipv6_addresses[0]
+}
+
+output "verbena_gateway6" {
+  value = local.gateway6
+}
+
+locals {
+  hextets      = 4
+  parts        = split(":", local.verbena_ipv6_addresses[0])
+  prefix_parts = slice(local.parts, 0, local.hextets)
+  prefix_str   = join(":", local.prefix_parts)
+  gateway6     = "${local.prefix_str}::1"
+}
+
--- a/machines/genepi/configuration.nix
+++ b/machines/genepi/configuration.nix
@@ -17,7 +17,6 @@
    ./nginx.nix
    ./pinchflat.nix
    ./syncthing.nix
-    ./taskchampion.nix

    ../../modules/acme-home.nix
    ../../modules/lounge.nix
--- a/machines/genepi/taskchampion.nix
+++ b/machines/genepi/taskchampion.nix
@@ -1,15 +0,0 @@
-{ config, ... }:
-let
-  domain = "home.rpqt.fr";
-  subdomain = "tw.${domain}";
-in
-{
-  services.taskchampion-sync-server.enable = true;
-
-  services.nginx.virtualHosts.${subdomain} = {
-    forceSSL = true;
-    useACMEHost = "${domain}";
-    locations."/".proxyPass =
-      "http://127.0.0.1:${toString config.services.taskchampion-sync-server.port}";
-  };
-}
--- a/machines/haze/configuration.nix
+++ b/machines/haze/configuration.nix
@@ -53,6 +53,7 @@
    self.inputs.clan-core.packages.x86_64-linux.clan-app
    pkgs.aseprite
    pkgs.linux-wifi-hotspot
+    pkgs.anytype
  ];

  programs.kdeconnect.enable = true;
--- a/machines/verbena/configuration.nix
+++ b/machines/verbena/configuration.nix
@@ -1,4 +1,7 @@
 { self, lib, ... }:
+let
+  tf_outputs = builtins.fromJSON (builtins.readFile ../../infra/outputs.json);
+in
 {
  imports = [
    self.nixosModules.nix-defaults
@@ -16,6 +19,19 @@

  networking.useDHCP = lib.mkDefault true;

+  networking.defaultGateway6 = {
+    address = tf_outputs.verbena_gateway6.value;
+    interface = "ens3";
+  };
+  networking.interfaces."ens3" = {
+    ipv6.addresses = [
+      {
+        address = tf_outputs.verbena_ipv6.value;
+        prefixLength = 64;
+      }
+    ];
+  };
+
  clan.core.settings.state-version.enable = true;

  services.nginx = {
--- a/modules/desktop.nix
+++ b/modules/desktop.nix
@@ -1,4 +1,4 @@
-{ self, pkgs, ... }:
+{ pkgs, ... }:
 {
  environment.systemPackages = [
    pkgs.mpv # video player
@@ -6,6 +6,7 @@
    pkgs.alacritty
    pkgs.ghostty
    pkgs.libreoffice
+    pkgs.nautilus
  ];

  programs.firefox = {
@@ -14,4 +15,9 @@
  };

  programs.thunderbird.enable = true;
+
+  programs.nautilus-open-any-terminal = {
+    enable = true;
+    terminal = "ghostty";
+  };
 }
--- a/modules/unbound.nix
+++ b/modules/unbound.nix
@@ -17,7 +17,6 @@ let
        "lounge"
        "pinchflat"
        "rss"
-        "tw"
      ];
    };
    crocus = {
--- a/vars/per-machine/crocus/wireguard-keys-wireguard/privatekey/machines/crocus
+++ b/vars/per-machine/crocus/wireguard-keys-wireguard/privatekey/machines/crocus
@@ -0,0 +1 @@
+../../../../../../sops/machines/crocus
--- a/vars/per-machine/crocus/wireguard-keys-wireguard/privatekey/secret
+++ b/vars/per-machine/crocus/wireguard-keys-wireguard/privatekey/secret
@@ -0,0 +1,18 @@
+{
+	"data": "ENC[AES256_GCM,data:9b2ag6EGvzC6t2cyXizkfrJKObu9JOUUUU9gytBHnxZJ0msP+3smDvWYz6o9,iv:HMNem8T09zQfa7Jyg6eLjCpIIYaRbPjqXtquUH4K9wk=,tag:Mp6cmcPm+/IgeuXmgdFy9A==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age10lf2vjmlkff25qyft9d3c0274gvkxsf255fw0ea60cuqc7703ajqu3yxx9",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnWFN2eTRhYkF3eGMxSVBj\nRmV6aEl6TkFrYVNaSkZNeUt4SkJ0eFpnc3pjClluVExKZnlmZXZiZit0cGx1bmt2\nSTVXVDlUTjJvSDhvODFJT3JSRmFxWmcKLS0tIGpzSzh1NHM3U3ZCYWlkUHA1c1A5\nUENpMW5yS0xXSjYwOG42NGF4cWJQVkUK+o27ZfTVlD1tmqOXll3mTNKDPbmdpqLf\nDd51tfokYg7BVAP4bhgL2CbkH2p8qJdHmo6UcT77Pxvan1MCcgg8tw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1mqnmzn203hyj200psc982ehcedjmcdz8s0ncc50fm9jszjx7rgmqqmppw5",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZY1VKMHIwbkNTRm91c1Vn\nOVZjWVhrTW5lMlFtaUdTcktWY2JrMFVHMGw0CjJrTWZlbkZKYm5XMGpZeW1pK0t2\nZEw3UTRzZGFBQlVRQlo4UFpLdjl3amMKLS0tIGdCNUtPVEd1U25pZVFYakR0MkR0\nSy9yQXBXOHBvbGdVU2wxOW5Kd0tDSU0KX+iIRVmYse0ECpDFXs16Rv6TE+vcX4qR\nqSBnIZJeeTsva/T0tXXnwSnIG8/nKtHzYPu+j75Sb3d7lXO6h0USGw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-21T16:53:25Z",
+		"mac": "ENC[AES256_GCM,data:gks9AYHofKUmYa9i7+8kpM3cEMWEfQmibjY7dLUqi4TDfLyxlUIoKmbptrwJgWTWBs+Tnb3YrU8RRTFGFXPyyiwForX0/mDHf1pK0+1NmxKWd8X/7hZmARaWXQGe3rwOLdlvgXyZ0qpTOYXa8vNCp14m8HHIvq12tY+RY7/l7dY=,iv:fz0Vsw0bmNr8wgVmRltk4xzNEGU9xGb0f/RilEyIBu8=,tag:AfYTEAUBoUw7sLd9NcMPgQ==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/crocus/wireguard-keys-wireguard/privatekey/users/rpqt
+++ b/vars/per-machine/crocus/wireguard-keys-wireguard/privatekey/users/rpqt
@@ -0,0 +1 @@
+../../../../../../sops/users/rpqt
--- a/vars/per-machine/crocus/wireguard-keys-wireguard/publickey/value
+++ b/vars/per-machine/crocus/wireguard-keys-wireguard/publickey/value
@@ -0,0 +1 @@
+aeI0Lu8Qr1r/qtMmSJzvg5Z5gJAWwSIhSmna3Pk9Rys=
--- a/vars/per-machine/crocus/wireguard-network-wireguard/.validation-hash
+++ b/vars/per-machine/crocus/wireguard-network-wireguard/.validation-hash
@@ -0,0 +1 @@
+c22fbb033348a79707ce950ed15bf06b539bbd4d374b95dace7a3057f2d06c3e
--- a/vars/per-machine/crocus/wireguard-network-wireguard/suffix/value
+++ b/vars/per-machine/crocus/wireguard-network-wireguard/suffix/value
@@ -0,0 +1 @@
+6db2:dfc3:c376:9956
--- a/vars/per-machine/genepi/wireguard-keys-wireguard/privatekey/machines/genepi
+++ b/vars/per-machine/genepi/wireguard-keys-wireguard/privatekey/machines/genepi
@@ -0,0 +1 @@
+../../../../../../sops/machines/genepi
--- a/vars/per-machine/genepi/wireguard-keys-wireguard/privatekey/secret
+++ b/vars/per-machine/genepi/wireguard-keys-wireguard/privatekey/secret
@@ -0,0 +1,18 @@
+{
+	"data": "ENC[AES256_GCM,data:U0tjahIz+X9nKrUH6urXjx8rfWIdPeF+0wMQtB2/JsCZ35E6w74wvz6xWACK,iv:CoD0FgB7gW22UjH44jhaatXrPt2qX0I+ZVDGyCCZ1oU=,tag:HZg5CnIr8ZRKwoXakilCPA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1h0vx6w4d89amt90j3u0vm96gvjt9lwczsjamaakyew524x9u8a8qu5qvg5",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2bUhRSkFEMnovOUdMQ0Qw\neC93QWhaNFpNWlVCU2hQYXJSLzhnYytZWUI0Ck54VDBJcmFxZ0lKVTlPcngxWEJE\nSWkrQ0ZCc3V6YWdqUGl1V3JrODRuYzgKLS0tIENpV2ZBVDREeUlZeTNERTBtMmEv\nOVVldU83VGRSL1RzczdwWmg5TjlXeHcKHKRYgpniwiy5trRK/udkePJ7yO4mO9oK\nhtC+BjcTnPXb5UJT+lP5QrX60Y5/a9DPeNjeVecU/kxlqZmCvhv0SQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1mqnmzn203hyj200psc982ehcedjmcdz8s0ncc50fm9jszjx7rgmqqmppw5",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3OFNtT1ptcElIcjgxNTJq\nZTVYb29DNTF4YkJOU2VoVnhJQmQ5NUVncmlVCmwwbG9yUVdQcUhSSUkwclROWUpI\nU1EzMVV1aHdNY0tIMlBuaVoyb0xxR00KLS0tIDgwZjlkekVqblE5Mll1TEJMVVJr\nSW92b3kvK3NIN3RPY2RaVFlsR2xPMDAKgzhOV+Ww+BivhDbB4qGafis7zadQaW98\n2Gs4Y8AiA0ep7TLMxbtkLLQsjLNZcOn62jdc7ISF/vMtlLMHeHYy+Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-21T16:53:26Z",
+		"mac": "ENC[AES256_GCM,data:UmzngDkTSBiZxhCTWqgzvZIAY2EqsrCcKGeBHRiwErqsC2jFyfUJNC11m9byh6mtYB81vrAFbsQq/kFN0ZAVUfVKqbYSI3ibEFXBbFbKX5oMhFgNs51Rvab61DVFyfn/36u6VXFdkq1FW58j7p8kQXXd/OarC02r7LJzQY0BdNs=,iv:ZJbEM7o1+rsG5/3Hxu+PQ8hARhmoC1QCqH2ElRxfJTo=,tag:HLfgcwexzIoe74Ym5KPE1Q==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/genepi/wireguard-keys-wireguard/privatekey/users/rpqt
+++ b/vars/per-machine/genepi/wireguard-keys-wireguard/privatekey/users/rpqt
@@ -0,0 +1 @@
+../../../../../../sops/users/rpqt
--- a/vars/per-machine/genepi/wireguard-keys-wireguard/publickey/value
+++ b/vars/per-machine/genepi/wireguard-keys-wireguard/publickey/value
@@ -0,0 +1 @@
+zBRJ8D6d3IiZ8HzwDq8FM0g/C+fxn2Ef0HGY5QgsiUc=
--- a/vars/per-machine/genepi/wireguard-network-wireguard/.validation-hash
+++ b/vars/per-machine/genepi/wireguard-network-wireguard/.validation-hash
@@ -0,0 +1 @@
+59769e148d924871d37bfb9d1d73953f1e7681d568eb584be88ffe6d9323af6a
--- a/vars/per-machine/genepi/wireguard-network-wireguard/suffix/value
+++ b/vars/per-machine/genepi/wireguard-network-wireguard/suffix/value
@@ -0,0 +1 @@
+ab23:3d38:a148:f539
--- a/vars/per-machine/haze/wireguard-keys-wireguard/privatekey/machines/haze
+++ b/vars/per-machine/haze/wireguard-keys-wireguard/privatekey/machines/haze
@@ -0,0 +1 @@
+../../../../../../sops/machines/haze
--- a/vars/per-machine/haze/wireguard-keys-wireguard/privatekey/secret
+++ b/vars/per-machine/haze/wireguard-keys-wireguard/privatekey/secret
@@ -0,0 +1,18 @@
+{
+	"data": "ENC[AES256_GCM,data:qEKpqsrZN2K5tvq3uUeQm1EGJFwF6Y/Gt/xI4PPRfCtqQujkFOtDcHfjGclX,iv:Qfv6vMwHfFp3Ao3rKsed4WIyj4qY68v18HoATl9GtYU=,tag:AvWpclBxN8cVvUswz57tTQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1mqnmzn203hyj200psc982ehcedjmcdz8s0ncc50fm9jszjx7rgmqqmppw5",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiRytnMit1Y2xmbVdCaDNt\nWFRSeEtON21CNUZvL3Jhb2dCU1pReDBia0hvCmh6QlNJbzdleUxza0hTVU1URXVr\nZkpjWCtWNlZzYkxQbzVhdnd0UmpRL2cKLS0tIEowaGV6Y0NCdDM3ZmFGMW1uK2hQ\nUUpBalNZUkNUTmQxREhjTHhCV2lMaGMKTj2V0TA5cDImdi65RKzhhWSY31ePpIra\nI0OJpHLgix4uO73kknrTsswt4YBzT58d8pWw5ELAA0OyOZbXAJvJ8Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1xkp0rmm5xwxurdxq3a0lxc77pjh5z4dylddvnf6ktrghyfhcxq4sdk3ysn",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzMU4zVUVZWW95RzB3bzB2\ndkhzNXNzV1A1VWlFQUxaYS83cWpQektVdERZCkZsUWtZUFlYVjlsN3VBcmExWnlm\nTEN0MldPMFc3VmFJMTB3ZVUxd0h5WTAKLS0tIFRCK1plN0pHSzVWeU5pa0FRNzRQ\nN1ErSW9qVmx0VDF3Rk5hek9WTFJZYXMK4t2d4oExSAkvzOo9nB/5k2S3asOpRcAc\nggj/Bgwlmli1M/rMQRgi3Bui2UwV6bcrQ/9kT0RDdHcYdfnMhdTPNQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-21T16:24:47Z",
+		"mac": "ENC[AES256_GCM,data:uW7rkOZGqrhOZr16MJZNiYD6niGqFdzbhC4sOmdY4l2K/Q+esAycgSakPrVGLi/h0QFGlo8/xBPu1wvCFWiklPDaoPLwyHpZefAr3szmJ751Zo8gJPUPvYFOkGgBNIDYDxg/gyCxAu63M1v+rY2YD2tsegMw0xEAAyusC9rxocM=,iv:fN1537itb9ohJ2dNuQaPRLxKmV7mWJSs15jkEBNjS6U=,tag:q62fQfBBzJ2GjybhbRCViQ==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/haze/wireguard-keys-wireguard/privatekey/users/rpqt
+++ b/vars/per-machine/haze/wireguard-keys-wireguard/privatekey/users/rpqt
@@ -0,0 +1 @@
+../../../../../../sops/users/rpqt
--- a/vars/per-machine/haze/wireguard-keys-wireguard/publickey/value
+++ b/vars/per-machine/haze/wireguard-keys-wireguard/publickey/value
@@ -0,0 +1 @@
+DX/Oxm7ESVkJlq8gkwGeLG8gpTP15URo4IBTAWcypi4=
--- a/vars/per-machine/haze/wireguard-network-wireguard/.validation-hash
+++ b/vars/per-machine/haze/wireguard-network-wireguard/.validation-hash
@@ -0,0 +1 @@
+8bdf8580329052d98be05520e25f51bc9be58da446951f95962e9924ca336235
--- a/vars/per-machine/haze/wireguard-network-wireguard/suffix/value
+++ b/vars/per-machine/haze/wireguard-network-wireguard/suffix/value
@@ -0,0 +1 @@
+840e:e9db:4c08:b920
--- a/vars/per-machine/verbena/wireguard-keys-wireguard/privatekey/machines/verbena
+++ b/vars/per-machine/verbena/wireguard-keys-wireguard/privatekey/machines/verbena
@@ -0,0 +1 @@
+../../../../../../sops/machines/verbena
--- a/vars/per-machine/verbena/wireguard-keys-wireguard/privatekey/secret
+++ b/vars/per-machine/verbena/wireguard-keys-wireguard/privatekey/secret
@@ -0,0 +1,18 @@
+{
+	"data": "ENC[AES256_GCM,data:Le4PZ5jFQXxJYGb8LgjrK4xWbjGvVgRziD1IYove4qmoIYfxNmbb8zZxctZA,iv:PqFFN7WM9oMXk1w8S3Gcqv5nIpaB7KrcqCIsX0L2ONg=,tag:SpVwb//AdQUmMhFf0RzMWQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1mqnmzn203hyj200psc982ehcedjmcdz8s0ncc50fm9jszjx7rgmqqmppw5",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGSVVjZklZalhseTVNQlpQ\nUG95b3FGeitxNkgyN1dCOFlKNWJMNk9BKzJFCmNyMEk3OUtiZWRhZGNuNGlvblVS\nT0hUZnMxQVJrY1EyUHI0dmNUZjloeUkKLS0tIEZRaWQyNWNjR1p6NW9zY1o5ODhh\ncFBxbmtDTEZ0aFRoelZOakxoUTJlOUUKN2AsY9Tv/5tpZarqpHyk0iBwh233bhVB\nHrFk+991bzxwZ5F0KeObg0yu10C7TfzxKOM9wYmbNeZf29yDSNKsPg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1teege0n8gf9qcheuxtpy7cltf8aczt9ugh8ztp9v4fftn3wwd4jsz0lpeh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYSWk4ZFB1S3ZPNlo2czJx\nZ0FWR1BLSEhxMFZtbFlVQzNtUHhub2Z0a2pBCk56QUJaejJBY3hNd2tNMDJqbmZW\nRVAvSVByZ2FuV2dVOWtjWEl1d0gxT0UKLS0tIHdLM2xXVlAvZkxvWmFyeVBTVzUr\naTF2cUlzMmpET01FK0NpR3lacFdPUzgKwy9/GGkmP1XKefAxxDEqqcIlhMjMm7Zu\n36jkKo3OqOScyW7F56qQ8dueukJcPMmuWl4zMKku+yyhm8pvmKtg7w==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-11-21T15:59:22Z",
+		"mac": "ENC[AES256_GCM,data:5b0R/lLXv2WL5WJ1p+lzzvU11VshSrs20eND7sROcvZ+9bIC0sX8wAozyTPMsPvXEMpgDk2HWkULaJH//zZ6jjC8i+b9c4vOvj+qF02uea6+KwhC/ZvAhZzNkHe53zyLcfI+N8/p2tPkZwEZfpNln36GKRtyxHQrzlCmSrRWrpI=,iv:gSN7EpfGZexA1pEIKel3Q6V2SPWXbfUXtHF2LqTm14E=,tag:JWkTFLOxsRP/phNLKBQONA==,type:str]",
+		"version": "3.11.0"
+	}
+}
--- a/vars/per-machine/verbena/wireguard-keys-wireguard/privatekey/users/rpqt
+++ b/vars/per-machine/verbena/wireguard-keys-wireguard/privatekey/users/rpqt
@@ -0,0 +1 @@
+../../../../../../sops/users/rpqt
--- a/vars/per-machine/verbena/wireguard-keys-wireguard/publickey/value
+++ b/vars/per-machine/verbena/wireguard-keys-wireguard/publickey/value
@@ -0,0 +1 @@
+KiRDNfRjn9Y8HmHuFdK4CgJyY5p9QLjgMAwhYJB+qzY=
--- a/vars/per-machine/verbena/wireguard-network-wireguard/.validation-hash
+++ b/vars/per-machine/verbena/wireguard-network-wireguard/.validation-hash
@@ -0,0 +1 @@
+bb4d45d8f4c57db556ce4fb89236761a1fce2b7815628b103932b895230c3acf
--- a/vars/per-machine/verbena/wireguard-network-wireguard/prefix/value
+++ b/vars/per-machine/verbena/wireguard-network-wireguard/prefix/value
@@ -0,0 +1 @@
+fd28:387a:90:c400
Author	SHA1	Message	Date
Romain Paquet	a0bec48175	nautilus: enable thumbnails for remote directories	2025-11-21 23:29:48 +01:00
Romain Paquet	080ec61675	genepi: remove taskchampion (unused)	2025-11-21 23:29:26 +01:00
Romain Paquet	3b9f67c0ff	haze: add anytype	2025-11-21 23:27:34 +01:00
Romain Paquet	f99575598c	nautilus: add "open in ghostty" menu	2025-11-21 23:26:57 +01:00
Romain Paquet	5ddfda7187	clan: set tld to .val	2025-11-21 23:25:53 +01:00
Romain Paquet	7256b7fbc3	clan: add wireguard	2025-11-21 23:25:29 +01:00
Romain Paquet	abaf429a38	verbena: configure IPv6 from tofu outputs	2025-11-21 23:24:22 +01:00
Romain Paquet	3834f215f0	Update vars via generator wireguard-network-wireguard for machine genepi	2025-11-21 17:53:26 +01:00
Romain Paquet	75b2307f82	Update vars via generator wireguard-keys-wireguard for machine genepi	2025-11-21 17:53:26 +01:00
Romain Paquet	98653cb2e6	Update vars via generator wireguard-network-wireguard for machine crocus	2025-11-21 17:53:25 +01:00
Romain Paquet	11c3e87132	Update vars via generator wireguard-keys-wireguard for machine crocus	2025-11-21 17:53:25 +01:00
Romain Paquet	08f14e8d9f	Update vars via generator wireguard-network-wireguard for machine haze	2025-11-21 17:24:47 +01:00
Romain Paquet	e42cb7edd3	Update vars via generator wireguard-keys-wireguard for machine haze	2025-11-21 17:24:47 +01:00
Romain Paquet	575e78e473	Update vars via generator wireguard-network-wireguard for machine verbena	2025-11-21 16:59:22 +01:00
Romain Paquet	92e49d0c9c	Update vars via generator wireguard-keys-wireguard for machine verbena	2025-11-21 16:59:22 +01:00
Romain Paquet	c048448b6a	update flake inputs	2025-11-21 13:07:13 +01:00
				`@@ -0,0 +1 @@`
				`aeI0Lu8Qr1r/qtMmSJzvg5Z5gJAWwSIhSmna3Pk9Rys=`
				`@@ -0,0 +1 @@`
				`c22fbb033348a79707ce950ed15bf06b539bbd4d374b95dace7a3057f2d06c3e`
				`@@ -0,0 +1 @@`
				`zBRJ8D6d3IiZ8HzwDq8FM0g/C+fxn2Ef0HGY5QgsiUc=`
				`@@ -0,0 +1 @@`
				`59769e148d924871d37bfb9d1d73953f1e7681d568eb584be88ffe6d9323af6a`
				`@@ -0,0 +1 @@`
				`DX/Oxm7ESVkJlq8gkwGeLG8gpTP15URo4IBTAWcypi4=`
				`@@ -0,0 +1 @@`
				`8bdf8580329052d98be05520e25f51bc9be58da446951f95962e9924ca336235`
				`@@ -0,0 +1 @@`
				`KiRDNfRjn9Y8HmHuFdK4CgJyY5p9QLjgMAwhYJB+qzY=`
				`@@ -0,0 +1 @@`
				`bb4d45d8f4c57db556ce4fb89236761a1fce2b7815628b103932b895230c3acf`