diff --git a/home-manager/homeserver.nix b/home-manager/homeserver.nix index 3d55146..9074db0 100644 --- a/home-manager/homeserver.nix +++ b/home-manager/homeserver.nix @@ -20,9 +20,20 @@ defaultSopsFile = ./secrets.yaml; secrets = { vikunja_jwtsecret = {}; - vikunja_dbpassword = {}; + vikunja-db_password = {}; vikunja-db_rootpassword = {}; ghost_dbpassword = {}; + nextcloud_admin_password = {}; + nextcloud-db_password = {}; + nextcloud-db_rootpassword = {}; + nextcloud_fulltextsearch_password = {}; + nextcloud_imaginary_secret = {}; + nextcloud_onlyoffice_secret = {}; + nextcloud_recording_secret = {}; + nextcloud_redis_host_password = {}; + nextcloud_signaling_secret = {}; + nextcloud_turn_secret = {}; + nextcloud_whiteboard_secret = {}; }; }; } diff --git a/home-manager/homeserver/containers.nix b/home-manager/homeserver/containers.nix index e6928d6..9b48a00 100644 --- a/home-manager/homeserver/containers.nix +++ b/home-manager/homeserver/containers.nix @@ -22,5 +22,6 @@ ./containers/data_handling.nix ./containers/caddy.nix ./containers/work_tools.nix + ./containers/nextcloud.nix ]; } diff --git a/home-manager/homeserver/containers/caddy.nix b/home-manager/homeserver/containers/caddy.nix index 7ef1869..b4115fd 100644 --- a/home-manager/homeserver/containers/caddy.nix +++ b/home-manager/homeserver/containers/caddy.nix @@ -20,8 +20,9 @@ volumes = [ "/home/cianh/caddy/config:/etc/caddy" "/home/cianh/caddy/data:/data:Z" - "/home/cianh/caddy/placeholder_site:/var/www/bulba.space:Z" - "/home/cianh/blog:/var/www/blog.bulba.space:Z" + "/home/cianh/caddy/placeholder_site:/var/www/site:Z" + "/home/cianh/blog:/var/www/blog:Z" + "/home/cianh/Nextcloud:/var/www/nextcloud:Z" ]; }; }; diff --git a/home-manager/homeserver/containers/nextcloud.nix b/home-manager/homeserver/containers/nextcloud.nix index 19f75ff..1728b17 100644 --- a/home-manager/homeserver/containers/nextcloud.nix +++ b/home-manager/homeserver/containers/nextcloud.nix @@ -12,212 +12,47 @@ nextcloud-net = {}; }; containers = { - nextcloud-aio-nextcloud = { - image = "docker.io/nextcloud/aio-nextcloud:latest"; - autoUpdate = "registry"; - network = "nextcloud-net"; - extraPodmanArgs = [ - "/usr/bin/supervisord" - "-c" - "/supervisord.conf" - ]; - env = { - ADDITIONAL_APKS = "imagemagick"; - ADDITIONAL_PHP_EXTENSIONS = "imagick"; - ADMIN_PASSWORD = config.sops.secrets.nextcloud_admin_password; - ADMIN_USER = "admin"; - AIO_TOKEN = config.sops.secrets.nextcloud_aio_token; - AIO_URL = "192.168.0.254:8081"; - APACHE_HOST = "nextcloud-aio-apache"; - APACHE_PORT = "11000"; - CLAMAV_ENABLED = "yes"; - CLAMAV_HOST = "nextcloud-aio-clamav"; - CLAMAV_MAX_SIZE = "17179869184"; - COLLABORA_ENABLED = "yes"; - COLLABORA_HOST = "nextcloud-aio-collabora"; - FULLTEXTSEARCH_ENABLED = "yes"; - FULLTEXTSEARCH_HOST = "nextcloud-aio-fulltextsearch"; - FULLTEXTSEARCH_PASSWORD = config.sops.secrets.nextcloud_fulltextsearch_password; - IMAGINARY_ENABLED = "yes"; - IMAGINARY_HOST = "nextcloud-aio-imaginary"; - IMAGINARY_SECRET = config.sops.secrets.nextcloud_imaginary_secret; - NC_DOMAIN = "nextcloud.bulba.space"; - NEXTCLOUD_DATA_DIR = "/mnt/ncdata"; - NEXTCLOUD_EXEC_COMMANDS = "php /var/www/html/occ richdocuments:activate-config"; - NEXTCLOUD_HOST = "nextcloud-aio-nextcloud"; - ONLYOFFICE_HOST = "nextcloud-aio-onlyoffice"; - ONLYOFFICE_SECRET = config.sops.secrets.nextcloud_onlyoffice_secret; - OVERWRITEHOST = "nextcloud.bulba.space"; - OVERWRITEPROTOCOL = "https"; - POSTGRES_DB = "nextcloud_database"; - POSTGRES_HOST = "nextcloud-aio-database"; - POSTGRES_PASSWORD = config.sops.secrets.nextcloud_postgres_password; - POSTGRES_PORT = "5432"; - POSTGRES_USER = "nextcloud"; - RECORDING_SECRET = config.sops.secrets.nextcloud_recording_secret; - REDIS_HOST = "nextcloud-aio-redis"; - REDIS_HOST_PASSWORD = config.sops.secrets.nextcloud_redis_host_password; - REMOVE_DISABLED_APPS = "yes"; - SIGNALING_SECRET = config.sops.secrets.nextcloud_signaling_secret; - STARTUP_APPS = "deck twofactor_totp tasks calendar contacts notes"; - TALK_PORT = "3478"; - TALK_RECORDING_HOST = "nextcloud-aio-talk-recording"; - THIS_IS_AIO = "true"; - TURN_SECRET = config.sops.secrets.nextcloud_turn_secret; - TZ = "Europe/Dublin"; - WHITEBOARD_SECRET = config.sops.secrets.nextcloud_whiteboard_secret; - }; - volumes = [ - "/home/cianh/Nextcloud/config/nextcloud_aio_nextcloud:/var/www/html" - "/home/cianh/Nextcloud/data:/mnt/ncdata" - ]; - }; - nextcloud-aio-collabora = { - image = "docker.io/nextcloud/aio-collabora:latest"; - autoUpdate = "registry"; - network = "nextcloud-net"; - environment = { - DONT_GEN_SSL_CERT = "1"; - aliasgroup1 = "https://nextcloud.bulba.space:443"; - dictionaries = "de_DE en_GB en_US es_ES fr_FR it nl pt_BR pt_PT ru"; - TZ = "Europe/Dublin"; - server_name = "nextcloud.bulba.space"; - }; - extraPodmanArgs = [ - "--o:ssl.enable=false" - "--o:ssl.termination=true" - "--o:mount_jail_tree=false" - "--o:logging.level=warning" - "--o:home_mode.enable=true" - "--o:security.seccomp=true" - "--o:remote_font_config.url=https://nextcloud.bulba.space/apps/richdocuments/settings/fonts.json" - "--o:net.post_allow.host[0]=.+" - ]; - }; - nextcloud-aio-database = { - image = "docker.io/nextcloud/aio-postgresql:latest"; - autoUpdate = "registry"; - network = "nextcloud-net"; - env = { - TZ = "Europe/Dublin"; - PGTZ = "Europe/Dublin"; - POSTGRES_PASSWORD = config.sops.secrets.nextcloud_postgres_password; - POSTGRES_DB = "nextcloud_database"; - POSTGRES_USER = "nextcloud"; - }; - volumes = [ - "/home/cianh/Nextcloud/config/nextcloud_aio_database_dump:/mnt/data" - "/home/cianh/Nextcloud/config/nextcloud_aio_database:/var/lib/postgresql/data" - ]; - }; - nextcloud-aio-redis = { - image = "docker.io/nextcloud/aio-redis:latest"; - autoUpdate = "registry"; - network = "nextcloud-net"; - env = { - TZ = "Europe/Dublin"; - REDIS_HOST_PASSWORD = config.sops.secrets.nextcloud_redis_host_password; - }; - volumes = [ - "/home/cianh/Nextcloud/config/nextcloud_aio_redis:/data" - ]; - }; - nextcloud-aio-clamav = { - image = "docker.io/nextcloud/aio-clamav:latest"; - autoUpdate = "registry"; - network = "nextcloud-net"; - env = { - TZ = "Europe/Dublin"; - MAX_SIZE = "16G"; - CLAMD_STARTUP_TIMEOUT = "90"; - }; - volumes = [ - "/home/cianh/Nextcloud/config/nextcloud_aio_clamav:/var/lib/clamav" - ]; - }; - nextcloud-aio-fulltextsearch = { - image = "docker.io/nextcloud/aio-fulltextsearch:latest"; - autoUpdate = "registry"; - network = "nextcloud-net"; - extraPodmanArgs = [ - "eswrapper" - ]; - env = { - xpack.license.self_generated.type = "basic"; - discovery.type = "single-node"; - bootstrap.memory_lock = "true"; - xpack.security.enabled = "false"; - logger.org.elasticsearch.discovery = "WARN"; - http.port = "9200"; - TZ = "Europe/Dublin"; - FULLTEXTSEARCH_PASSWORD = config.sops.secrets.nextcloud_fulltextsearch_password; - cluster.name = "nextcloud-aio"; - ES_JAVA_OPTS = "-Xms512M -Xmx512M"; - }; - volumes = [ - "/home/cianh/Nextcloud/config/nextcloud_aio_elasticsearch:/usr/share/elasticsearch/data" - ]; - }; - nextcloud-aio-imaginary = { - image = "docker.io/nextcloud/aio-imaginary:latest"; - autoUpdate = "registry"; - network = "nextcloud-net"; - env = { - TZ = "Europe/Dublin"; - IMAGINARY_SECRET = config.sops.secrets.nextcloud_imaginary_secret; - }; - }; - nextcloud-aio-notify-push = { - image = "docker.io/nextcloud/aio-notify-push:latest"; - autoUpdate = "registry"; - network = "nextcloud-net"; - env = { - NC_DOMAIN = "nextcloud.bulba.space"; - POSTGRES_DB = "nextcloud_database"; - POSTGRES_PORT = "5432"; - NEXTCLOUD_HOST = "nextcloud-aio-nextcloud"; - REDIS_HOST_PASSWORD = config.sops.secrets.nextcloud_redis_host_password; - POSTGRES_USER = "nextcloud"; - REDIS_HOST = "nextcloud-aio-redis"; - POSTGRES_HOST = "nextcloud-aio-database"; - POSTGRES_PASSWORD = config.sops.secrets.nextcloud_postgres_password; - }; - volumes = [ - "/home/cianh/Nextcloud/config/nextcloud_aio_nextcloud:/nextcloud:Z" - ]; - }; - nextcloud-aio-apache = { - image = "docker.io/nextcloud/aio-apache:latest"; + nextcloud = { + image = "docker.io/library/nextcloud:fpm-alpine"; autoUpdate = "registry"; network = [ "nextcloud-net" "proxy-net" ]; - extraPodmanArgs = [ - "/usr/bin/supervisord" - "-c" - "/supervisord.conf" - ]; - env = { - APACHE_PORT = "11000"; - ONLYOFFICE_HOST = "nextcloud-aio-onlyoffice"; - APACHE_MAX_TIME = "3600"; - APACHE_HOST = "nextcloud-aio-apache"; - NOTIFY_PUSH_HOST = "nextcloud-aio-notify-push"; - NEXTCLOUD_HOST = "nextcloud-aio-nextcloud"; - TZ = "Europe/Dublin"; - APACHE_MAX_SIZE = "17179869184"; - TALK_HOST = "nextcloud-aio-talk"; - WHITEBOARD_HOST = "nextcloud-aio-whiteboard"; - COLLABORA_HOST = "nextcloud-aio-collabora"; - NC_DOMAIN = "nextcloud.bulba.space"; - }; ports = [ - "11000:11000" + "9000:9000" ]; + environment = { + NEXTCLOUD_URL = "nextcloud.bulba.space"; + TRUSTED_DOMAINS = "nextcloud.bulba.space"; + TRUSTED_PROXIES = "caddy"; + MYSQL_HOST = "nextcloud-db"; + MYSQL_DATABASE = "nextcloud"; + MYSQL_USER = "nextcloud"; + MYSQL_PASSWORD = config.sops.secrets.nextcloud-db_password.path; + }; volumes = [ - "/home/cianh/Nextcloud/config/nextcloud_aio_apache:/mnt/data" - "/var/www/html:/var/www/html:Z" + "/home/cianh/Nextcloud/:/var/www/html" + ]; + extraConfig = { + Unit = { + After = "podman-nextcloud-db.service"; + Requires = "podman-nextcloud-db.service"; + }; + }; + }; + nextcloud-db = { + image = "docker.io/library/mariadb:latest"; + autoUpdate = "registry"; + network = ["nextcloud-net"]; + environment = { + MYSQL_DATABASE = "nextcloud"; + MYSQL_USER = "nextcloud"; + MYSQL_PASSWORD = config.sops.secrets.nextcloud-db_password.path; + MYSQL_ROOT_PASSWORD = config.sops.secrets.nextcloud-db_rootpassword.path; + }; + volumes = [ + "/home/cianh/nextcloud_db:/var/lib/mysql" ]; }; }; diff --git a/home-manager/homeserver/containers/work_tools.nix b/home-manager/homeserver/containers/work_tools.nix index e147694..df56b27 100644 --- a/home-manager/homeserver/containers/work_tools.nix +++ b/home-manager/homeserver/containers/work_tools.nix @@ -29,7 +29,7 @@ VIKUNJA_DATABASE_DATABASE = "vikunja"; VIKUNJA_DATABASE_HOST = "vikunja-db"; VIKUNJA_DATABASE_USER = "vikunja"; - VIKUNJA_DATABASE_PASSWORD = config.sops.secrets.vikunja_dbpassword.path; + VIKUNJA_DATABASE_PASSWORD = config.sops.secrets.vikunja-db_password.path; }; volumes = [ "/home/cianh/vikunja/files:/app/vikunja/files" @@ -50,7 +50,7 @@ environment = { MYSQL_ROOT_PASSWORD = config.sops.secrets.vikunja-db_rootpassword.path; MYSQL_USER = "vikunja"; - MYSQL_PASSWORD = config.sops.secrets.vikunja_dbpassword.path; + MYSQL_PASSWORD = config.sops.secrets.vikunja-db_password.path; MYSQL_DATABASE = "vikunja"; }; volumes = [ diff --git a/home-manager/secrets.yaml b/home-manager/secrets.yaml index 6294ab8..49d6eb0 100644 --- a/home-manager/secrets.yaml +++ b/home-manager/secrets.yaml @@ -1,18 +1,18 @@ -vikunja_jwtsecret: ENC[AES256_GCM,data:V+S3+TBloDVsnBu6HghMMioH6/fWMNGaInMu9BOI2d56xqVZvDmq2nq76j5U0b4+D21N74z+NdtM6T0HHh55Zw==,iv:irocW3a0njz9vm48N+KvfJWAB1nZFz5yfe5/Kpj9zRY=,tag:VEXVYWodP8kKDMlMrfplMw==,type:str] -vikunja_dbpassword: ENC[AES256_GCM,data:c1nXnCq0zkPukvauQLROA+wk1KlDrXlud/vGpF0HhPM=,iv:uBUpuMG6IJl9mS4vLdFuncYTtxxMv7fnG8JGOentPu8=,tag:etbne1MGh2QPP4drLvvzdw==,type:str] -vikunja-db_rootpassword: ENC[AES256_GCM,data:vzOmBuhbvyB21rugDcTTVDiVIDGjxH7g3PdapDEjBfKIpgJ4AX5X0B/r0yc=,iv:klZk7C3oQnhrY9qoeoc+GCrmZ0d644hGcWiysyNC7Ds=,tag:n1YH2UN1wDHwk5d4Z/m+Fw==,type:str] -ghost_dbpassword: ENC[AES256_GCM,data:QfCwX/GUU3OnKnqQIeL4axLuywOANtSkaDRUW7eZvygCJqEzJDSrr4bQ5G6RSJqQmk88pxlJimB/F/8YbqHHwQ==,iv:oKs553znybvJbj8OuVXtqgYCxnaNmUWPRlE0CLvsFHM=,tag:5EEX0p/oieYHW3vufG41+w==,type:str] -nextcloud_admin_password: ENC[AES256_GCM,data:uK82fO4AeB6eLuvnKRlP83MRdA1Qs3Z/3TH7LrV08CLCnDsr5ihOScOdbSd6a1i9,iv:dxho9Q6is3+5WXbZJ2ZHRl8OfUSNb8HFBIS+unjP98U=,tag:yTsRhMPtwZzzOVjBd97rgQ==,type:str] -nextcloud_aio_token: ENC[AES256_GCM,data:uMxWxEPs6tJwUf5BKLypjorMSiyxXyKJE7A27KZB9TK/nAhggbYlDe4Sykd6VvVj,iv:vJD+C6sv0K55IdSIGU3/svInE9aOlpBbywpcx8iI9g0=,tag:F2k5Uie0ZqUzdEf7ghKwSg==,type:str] -nextcloud_fulltextsearch_password: ENC[AES256_GCM,data:HE4NHkZ/3Xl0IfedsmvtIz0ULQSfMzDZmtrsmLdgzck03/CUTNRqay3Y1+gEPt2Q,iv:3JZ5a5DCg+hmdgQVfryyMvriQFkESyFtQHVD16fHmIg=,tag:OwB1VZRvp9Px7QMHpsdLnA==,type:str] -nextcloud_imaginary_secret: ENC[AES256_GCM,data:zmpkm7tHNCtck6Q1zuZtBrQ8/OVvJWYqPyFa/LmOcwDnaNqgYWbLPn/mhenSHJmn,iv:WmQmi/UEpKOzVC2kC8iLxgfaKsUAKUdTL3qCYUmOLvI=,tag:Olc9LQq1Kx8YSIE+v11pGg==,type:str] -nextcloud_onlyoffice_secret: ENC[AES256_GCM,data:fCkCXk7KN3XRhB9/PNGrb86Pzqew0Ad0cr6GCULwDYG9CiQATv3l8g8xpD6GbvUD,iv:azDeRT4knCIfWbZhTgMMbYYCIT6CGb5rhi7kdvehUoo=,tag:upwYdXgem9bQko1sK8lIhA==,type:str] -nextcloud_postgres_password: ENC[AES256_GCM,data:wf9UwXo0pS9hN6gjjHIdZRNZQnZ5Dt7M5eVFNRySLU6U5Nc8g5eKojcgtKepISfh,iv:CrcT3UxpJUX3CUWeLDHK/gFcn3KR6TEk4Jaug4aeFOs=,tag:fO2jysj+EEtFY7HZQsobtQ==,type:str] -nextcloud_recording_secret: ENC[AES256_GCM,data:r6TJDmXxmaa2tp3HmzWGKWQvyrOffDKvbVaGswDLL0MPKfdKmpyrUCEh0LfVqGNy,iv:Drjodww0DiaOj4sOzSSaoN0yqzfAEYlfVWDZMM8/XtY=,tag:iKoQvi9uC4r0WB7SWNSspw==,type:str] -nextcloud_redis_host_password: ENC[AES256_GCM,data:1l3dGkzuhJTgcgOjVxi5Bm2L+t9SzvPLh+Jy9FV+/0raaXGwymF6LnK7Zfi0FnOa,iv:4bnII5Btw+/hsEoUciVKhjqXtL4L0/8ZY9rexpfB9J0=,tag:G1LTz1zRba/RsbqGwoH/cA==,type:str] -nextcloud_signaling_secret: ENC[AES256_GCM,data:+Cb+saRM2Bl9kf/m8/XD3Lkya3/Yymep9E5S4Dguj/NSbNB5Qm8bExJO6o9k3cta,iv:yTDQqW6Rk7lWggmF39KGdDgQyy6CQNcNlnyGYqefMZw=,tag:ZOwg+m32PwWtzsE9WnZruA==,type:str] -nextcloud_turn_secret: ENC[AES256_GCM,data:pm1LLhKxrnxrLBGmPIeNfQ8znlVFmCr2sbivh0f4P5XEzKLQ8CJ7gcSClgesZn9V,iv:msZoWkb+RrwdLEgzlABk80NqCk2Tw3NKbwEE/7EzpN8=,tag:nSLH9ZmbbWPIzrK5GW3Emg==,type:str] -nextcloud_whiteboard_secret: ENC[AES256_GCM,data:gGMvuugXwRyXeQDFH4Ox2zCT+SZFgV7VnrtkkHSB350haHVigl1e+jDbKE54E2AZ,iv:jYZJQlw6nfb+OcA4DD0wjhKZjdKTN/4+UjM3BvT9h5Y=,tag:6+XNf3GAPQpcEPxvdaYuIg==,type:str] +vikunja_jwtsecret: ENC[AES256_GCM,data:Nk5aVSX+AAyGBx30FpbNnslH143AIVaMa1GikEB+be2nPu+Ce124tT2IiLC854kDVx3Cgy+3/eIlli3zgX6SKw==,iv:/J4tUFGXhl3bCz7rniaRSUcrNMiHHvjDqEFWx8wMdOc=,tag:gvlIVNK+jXnKoS05ER7wvg==,type:str] +vikunja-db_password: ENC[AES256_GCM,data:RqXltPEO1MQ8b41Jq8nUIrwc7bTq3BkD2wMZI9tvkkM=,iv:kD052v4HFTsjOJ64GSgbdamQ6iEes6z/y/2P2G+f6JU=,tag:hWlEl2G9lU8/Nhf6WEx8hg==,type:str] +vikunja-db_rootpassword: ENC[AES256_GCM,data:VIGKcF4aKbzflKqsGv8I2Sd+rl42cWRl/eAZ8OnQQ63YYmwsOFmYMMag1QU=,iv:TXPA0cT3T07JabC6s/2cHj3oh23ONGHRyxmr5NTRqns=,tag:cKs1dXlTcIClZE5am6bcCw==,type:str] +ghost_dbpassword: ENC[AES256_GCM,data:8k9ol02ErUJHGKSEtsLtEqSzHA13c8KyFGqp7kYAyRCwkuErlru/JlpEFlTnbPILw6gI6E8lJv9noS1cYQbwyA==,iv:jl8MN/1M9PxSU3Te4t4L/v/SuzP9r5RDZbtNUChIb2M=,tag:kr4zt1gTRa6CLm9ixvfGGg==,type:str] +nextcloud_admin_password: ENC[AES256_GCM,data:5Wh0PrcU+NZVOS6f2bTHIV5vsg+mGEjD7oiSzpM0UvTCdk2Zr3VJJuP3mkqerz8l,iv:sv1XUIQmXcpiKibJgS22eSEMH7M2RRYNQrijnfsmVrY=,tag:20ejSIDFa8gZHrm5typQSQ==,type:str] +nextcloud-db_password: ENC[AES256_GCM,data:hBRcRdMjBexYfxJkTEwZJoMYmi2rxnymX89WhbFoTcALAfIEfvHHVACU90QLWI5m,iv:nqw7V29ojD4UoQxq5HGWvOvW4UF4KZU4/IQBRB8Joks=,tag:upHYONV5wZcKbRSnoJo27Q==,type:str] +nextcloud-db_rootpassword: ENC[AES256_GCM,data:9mLl1D+ttwVQ6ZZ7RLMJxfhxM90NdsXG+AHbgr6ykmUgGUH09tdGlh3kMf0Yo0vv,iv:g5cL2Nk5QHsfE/V+RG+tPU85PTw+0+4X+s/i+fmpeNo=,tag:Sfz4Ojy20orARRyoQPI/wA==,type:str] +nextcloud_fulltextsearch_password: ENC[AES256_GCM,data:W246emWAzEeYb3p0mj/UCy7H86XzcDuDvGPOB5IkjNo/j/upJ1HsqVujCmV2m57f,iv:u9hQh7QuAKtovTucFkutCzbqwZUjG3dH6IBsQQekZ9I=,tag:sOVf1+989gJEDx75rty+5w==,type:str] +nextcloud_imaginary_secret: ENC[AES256_GCM,data:2oJXyP1FZZvpH1r/qpH9ml3c/1FOuJihxjSWgQkjAgRLS+M6v9Ra99Np4nr969vi,iv:CfmWfdCjMXWsz+pmr5a0ADbiO/AI6JLi8eUqI0QF+dU=,tag:FpohsLQxi+D1hqE0Q3Q9SA==,type:str] +nextcloud_onlyoffice_secret: ENC[AES256_GCM,data:lgjy/B7jhg0jkxsX5bNhl+BMZt6myB/THAIzlyjm7MFwzbWcBGu7OrLdE/kOX2jF,iv:sF24JJAC8hJ+dWp0X2SIZTuboVCO5EFmEMjxSSwRtvQ=,tag:vAfvpX5pj+JTOSIhfwdBYg==,type:str] +nextcloud_recording_secret: ENC[AES256_GCM,data:ILN6lq1eak3gyDKM34BKZvbjkzYgPoa+DnqvgrMGhTn+jTf+fMAqqhVZReinveWX,iv:nJVQRb4qEIud4IH6zIu2Wa+970gmJLHiIHnbtejacYA=,tag:9eA/F6jDJassC6juHxj/Cg==,type:str] +nextcloud_redis_host_password: ENC[AES256_GCM,data:FD8hMMhW9INeHucBXRxcLjG0EyTVXpIbvlS3qykabSzb+gVEK6DhbXdwQqR0J53D,iv:qYhU5NyamUH6BiD4osDCH7HU/qVIJG0e/nqPiye/hM8=,tag:+dZxHfpm1nBOgLGsUJqxUw==,type:str] +nextcloud_signaling_secret: ENC[AES256_GCM,data:CjchDO8J5uYEZt5QwecXbtB20pcrjvnPiQgm5t+WW0Moiqhko1nB4w5BQ3HbvwoF,iv:cvguQoXu+c44kBlkk/lK0HSEaVWJOl4V3j8ynKFMEJM=,tag:fUHui41SlZOLPj1cqem30Q==,type:str] +nextcloud_turn_secret: ENC[AES256_GCM,data:3AFAwKhIVffEC06nnwjY9dJSwWvzzkqxiBwtrxI6utfcpGEAnTjtWRocPvb1TdvB,iv:aUzTYIim5HN/bTm/eAxMMYt17+4J/QKp8CY4guTUnmU=,tag:19PilgPdveH1bJaq4uAvqQ==,type:str] +nextcloud_whiteboard_secret: ENC[AES256_GCM,data:ZrFlDuMGFfdAtCuzIV9ZWd0AxbZcRd1FUpob6dJYjUnwmappaTUL/XFs6eZZQeLW,iv:IWRkI61oraGfRcMLyfoaV+24eucma3TgxS+b8z94z98=,tag:Nn2cyLOuidRPS+zQFoxoaw==,type:str] sops: kms: [] gcp_kms: [] @@ -22,14 +22,14 @@ sops: - recipient: age15x4h66uk6ct3436e6r4l0tkpf86e7jzl3lqd2acndq2jjvq5za3stqg2fy enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwV0thb3pLVStPczVCUS9K - UkJudndGUEZEeWQ5TWVSRDdqWlRkQVFrVDFnCmpvRDlPaGRtM2I4Vjc2UUh5aVdw - NmdXcmdFSWoxaG1ueGlxdFYzMWJyQXMKLS0tIHpiTTFhZW1jYXBZMGg3ekhYVENU - bWFMdmtEbzlVU1NTcGFXWE95ZzR6N0UKEtkLR+3l2lmUUUu3kVYPbMKoxnQdDH08 - nS2j5YdYVtbiYzCzw9hbOT/jY7+Uu2ZDjGsJyGkTJAI09Ai+HBw2Dg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3aW1RbkpFRUgwU1B1bXRR + ZzBTcGRoSnRsdVJXWTFhZDk1TFUwY2t4SGdnCmJQZGhXRUFjclpZQXVjSXN1eTVk + UElycWg1enEwRStVUUdobXViWDk1aTQKLS0tIHhSeWFUeHNNcnV3MkpXUGtlY1RI + djh1T0RaK1k4anJNS3E0akNCemtiNmMKnR75Ob3I1XKUiy/FEg1ed3c8w4Ces7Df + QVrSKhlh1FJ3QjiRnPs1f/CYZW5FBxwaRhumWlUlE17nnS80rB8yLw== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-02-10T00:02:59Z" - mac: ENC[AES256_GCM,data:D9/BZm9bhMlHup9IarAJJNTir1+qu1P6f6KgKVxW5qdxA22JcAH9on9v6qbI6GBtGbF9j5fMtuoJAjkpXQpXGLxE3dR86ofJXwYFyRWJd84T38oSVGptM45cDvGy061po2yqCcsDhrpbEhoO48ZyZGDhGXba9OlF1X5eJqvFDMg=,iv:LbX/MrCMQH9BobY60HEf3mmsAYhoLCj7DOZr4hY7suc=,tag:H4Dr18tH9E/NONrtuTXLgQ==,type:str] + lastmodified: "2025-02-13T02:06:36Z" + mac: ENC[AES256_GCM,data:bkP/xdYwaJUSLNFB47ZPd7kTA9l5OCqnDCoCMQhXz1LZxLk+lziM963FSW7pCCXgRM5kXeZgrvCb9vtcCkpy72M89SeZoLDG1Kl3OpWiAHsx6/TaPnQ/O9pCITG0ANbajnUTjncXAKA0f8mL+J5BG5O1McT+7nz2seF3TXtoHQc=,iv:9+0Z3eiKjRFAqREXSQwfJD2k5nCnQggKviTk6nb8hds=,tag:hLk6yi4R2QsiPapPWjuLuQ==,type:str] pgp: [] unencrypted_suffix: _unencrypted version: 3.9.4