From 3952959a12d7446e00c57a7b4e6b366ff628095d Mon Sep 17 00:00:00 2001
From: Alexander Heldt <me@alexanderheldt.se>
Date: Fri, 2 May 2025 10:28:00 +0200
Subject: [PATCH] pinwheel: Add `ssh` key for `manatee`

---
 hosts/pinwheel/modules/ssh/default.nix        |  20 ++++++++++++++++++
 secrets/pinwheel/alex.pinwheel-manatee.age    | Bin 0 -> 787 bytes
 .../pinwheel/alex.pinwheel-manatee.pub.age    |   9 ++++++++
 secrets/secrets.nix                           |   2 ++
 4 files changed, 31 insertions(+)
 create mode 100644 secrets/pinwheel/alex.pinwheel-manatee.age
 create mode 100644 secrets/pinwheel/alex.pinwheel-manatee.pub.age

diff --git a/hosts/pinwheel/modules/ssh/default.nix b/hosts/pinwheel/modules/ssh/default.nix
index 2a77bca..5a90976 100644
--- a/hosts/pinwheel/modules/ssh/default.nix
+++ b/hosts/pinwheel/modules/ssh/default.nix
@@ -5,6 +5,13 @@
       enable = true;
 
       matchBlocks = {
+        "manatee" = {
+          hostname = "192.168.50.203";
+          user = "alex";
+          identityFile = "/home/alex/.ssh/alex.pinwheel-manatee";
+          port = 1122;
+        };
+
         "backwards" = {
           hostname = "backwards";
           user = "alex";
@@ -46,6 +53,19 @@
   };
 
   age.secrets = {
+    "alex.pinwheel-manatee" = {
+      file = ../../../../secrets/pinwheel/alex.pinwheel-manatee.age;
+      path = "/home/alex/.ssh/alex.pinwheel-manatee";
+      owner = "alex";
+      group = "users";
+    };
+    "alex.pinwheel-manatee.pub" = {
+      file = ../../../../secrets/pinwheel/alex.pinwheel-manatee.pub.age;
+      path = "/home/alex/.ssh/alex.pinwheel-manatee.pub";
+      owner = "alex";
+      group = "users";
+    };
+
     "alex.pinwheel-backwards" = {
       file = ../../../../secrets/pinwheel/alex.pinwheel-backwards.age;
       path = "/home/alex/.ssh/alex.pinwheel-backwards";
diff --git a/secrets/pinwheel/alex.pinwheel-manatee.age b/secrets/pinwheel/alex.pinwheel-manatee.age
new file mode 100644
index 0000000000000000000000000000000000000000..85d6fdff7bf8b977534eb0a169487634207ee31e
GIT binary patch
literal 787
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCSHs|ZMnN>}jl){by3
zH??$6GBHjoH;%0GbI}hgc69QoaLUaraxN;Y3JD7d3or6=%IES8%J(YF&Mj~Y@rjIx
zbTJ8baq<gvHT5jewk*gqa?JELD)R~`aZZfTk3_dkJKrzSBTyl~*udW@y&#~%FVxe;
z-8;Z6Ah$5A$|Em7%)&S?KQ!4jqQuCf#3;ovD3U8L)6C2(sJJ{YG*I8tDIhA#Da_F*
z-Pp}Jx3I#qG}R>EEGxSx)u<>fD3VK8S687Rry{t_xS}Aq*efM4GpE=+v?{_hIm^Yn
zBp@r>xjfO+J;%KyG9tt=!jY?c{h^)jZ~ZR_R@x_~DK_C-;j9pcZSwv1Z|g1d4q!U=
zZs}sLUng%g{5T{0Jm7fS5@~rR|5Mgi)UF$O-MSI(*~rWmxc=#V>2-3;{J&3b7n%IA
zZ*g+hrUjffr=x`L`m`~}9?nnaGU!}x%_L{PiDTz44o<cDFhN_c<6D2%aUT{cygYlg
z_>b1P6D~~htz4~qf3B$b!DBK{1e|q_@4P4w>rm%<Z>RVE8~3&q{xLHBxnSy#lE<Cv
z!!NFV$mZx$`E~W5_xIKbc$#0ov1@9=I-U~gHOtRtSk&1Tl>RuS*KgYNc3$f7J04$z
zH)_3^ykn|UrS0QfD~73)4F%7pbE*Ue^rqHoH_P?6^F|z%YqgW#ckH?S<kg?&R!!^p
z@#6l!x6`*<`|k7EI90Xc&!;Xs%Y)N4J>TGG@$sO~K6a)&4H?A;(_#u|&wh6+J~HY?
z694~DO##mi<*!GQw9<`kO<Z7Cski0f!Rkwm)eFU9cxPVaW)pY3yP?=psy^+x`{MA#
z_6bYs`TmKjZ)>R9_-N{X(?`6QL_4Yiit^U<%c{rNJd(?uxuW^}uT|UKJcC%ao7^q`
zTrH5ctzg!dfQ^}_Izrd{jeCD{ciQLbuk4xpJR5^FBU_D^#%efaY`V?*K5Je6vAx&l
cvs>wDY5kVlp#E9xlFEYY(n~kpmhz?p05)Y*{Qv*}

literal 0
HcmV?d00001

diff --git a/secrets/pinwheel/alex.pinwheel-manatee.pub.age b/secrets/pinwheel/alex.pinwheel-manatee.pub.age
new file mode 100644
index 0000000..70f6d20
--- /dev/null
+++ b/secrets/pinwheel/alex.pinwheel-manatee.pub.age
@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> ssh-ed25519 vxPbZg eRWhz6fZKuP5v5E16uZg6si0/vlp3FdzcWud0OfAV38
+9ipUEQuy7IZZRi5RtoiH5/f093YCicJ/3VpH0TC7lh4
+-> ssh-ed25519 wkRvNA 938EBkoteypEXGVYII8KP1sm4fpN7MmasqN+lxW70DQ
+qt5DS5u1oCPvlOwO0DsoZp0OdEgZ/hRIJkD77c19Kts
+-> ssh-ed25519 +oNaHQ LJSsvOsWwHm+JygGKZ31+IBLKPNadx1OvIcA4Zm34G8
+AtSUR73XCikmAovR8YidLDy7WqZhsvjozzZM82qLsQA
+--- wDbiqcaXCRtSYx4qTqxFe8xn56J5ZkdtPrMs5Ba+4No
+‹dŸíð¿RM“E¡ìþÎ4¬\û`ŸûÎÄXì0€ú¤=‡¾’lå€.À3Ò¡Îd&`‡øC«Ö'×Ï¿½'¿~Ï+£˜Ü½0ÁŠ`Gaù©b‘ÎR,d›:¤èQ|Ñ”…ãôùæÅ}BÏIߪ#‹c™©L§Ë%ö¿eD¾Rpú™Û˜6
\ No newline at end of file
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 69721ea..cd1a3b2 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -9,6 +9,8 @@ in {
   "pinwheel/syncthing-cert.age".publicKeys = [ pinwheel alex ];
   "pinwheel/syncthing-key.age".publicKeys = [ pinwheel alex ];
   "pinwheel/tailscale-preferred-exit-node.age".publicKeys = [ pinwheel alex ];
+  "pinwheel/alex.pinwheel-manatee.age".publicKeys = [ pinwheel alex ];
+  "pinwheel/alex.pinwheel-manatee.pub.age".publicKeys = [ pinwheel manatee alex ];
   "pinwheel/alex.pinwheel-backwards.age".publicKeys = [ pinwheel alex ];
   "pinwheel/alex.pinwheel-backwards.pub.age".publicKeys = [ pinwheel backwards alex ];
   "pinwheel/alex.pinwheel-tadpole.age".publicKeys = [ pinwheel alex ];