From 79d5c1c0d6ec70b1a918cd315002eb02e1e48092 Mon Sep 17 00:00:00 2001
From: Alexander Heldt <me@alexanderheldt.se>
Date: Fri, 19 Jul 2024 11:52:34 +0200
Subject: [PATCH] pinwheel: Add secrets for `mullvad`

---
 hosts/pinwheel/modules/mullvad/default.nix   |  12 ++++++++++++
 secrets/pinwheel/mullvad-account-history.age |   7 +++++++
 secrets/pinwheel/mullvad-device.age          | Bin 0 -> 854 bytes
 secrets/secrets.nix                          |   2 ++
 4 files changed, 21 insertions(+)
 create mode 100644 secrets/pinwheel/mullvad-account-history.age
 create mode 100644 secrets/pinwheel/mullvad-device.age

diff --git a/hosts/pinwheel/modules/mullvad/default.nix b/hosts/pinwheel/modules/mullvad/default.nix
index 106b8c2..621b676 100644
--- a/hosts/pinwheel/modules/mullvad/default.nix
+++ b/hosts/pinwheel/modules/mullvad/default.nix
@@ -4,4 +4,16 @@
     enable = true;
     package = pkgs.mullvad-vpn;
   };
+
+  age.secrets = {
+    "mullvad-device" = {
+      file = ../../../../secrets/pinwheel/mullvad-device.age;
+      path = "/etc/mullvad-vpn/device.json";
+    };
+
+    "mullvad-account-history" = {
+      file = ../../../../secrets/pinwheel/mullvad-account-history.age;
+      path = "/etc/mullvad-vpn/account-history.json";
+    };
+  };
 }
diff --git a/secrets/pinwheel/mullvad-account-history.age b/secrets/pinwheel/mullvad-account-history.age
new file mode 100644
index 0000000..a6c4b26
--- /dev/null
+++ b/secrets/pinwheel/mullvad-account-history.age
@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 vxPbZg wpb2hDAYdugVkbO9NvmbGRIVpNVXFVmwxsMvBAlcwQU
+9+lGabyPcvoiN8WHtktQyWiCkh+f2p3+qV6UBl1xqF4
+-> ssh-ed25519 ek+b7Q gMzlFMTDt5gsoo7YoKOpyMbRVlFkeXWsyXI0+YRDuH8
+tcUbLIlf1wP+Hy70hNAD2tqFO+DUxskLperuOZHDFus
+--- lvXqjfpC+rTZxKZeBDSwAwsRZb8cIsErO4i1qQLQlvA
+E��cƨl��9�_X�3/&�/��Ԑ�bk&��d����+0"l��P
\ No newline at end of file
diff --git a/secrets/pinwheel/mullvad-device.age b/secrets/pinwheel/mullvad-device.age
new file mode 100644
index 0000000000000000000000000000000000000000..f23c9252d85e316d932a89b84015dc9f26bd1fc9
GIT binary patch
literal 854
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCSHs|ZMnN>?yVOEN5U
z4h=6e392kFcQkX>FUYOP$k#S;a?A8B501=?bTla}^EJ;24dgO*@k}?dbPo=<%nvJc
z%gN5rcQ(&SO%3sI%*o3SjZ8`Q^9ysSboNQkv_Q8lHCsE$JWwGhJIXL6KR3I;uiU#V
z(mBV%IN!h^Njq3OG0&{1G}kvVJviCJ)w?{%sGO^+A|*7jJU2VfEy6v~*t{yN&_6%0
z%*it#IXOAm%+fQoI62!tEi*Z&FqBJIS69Kc%-tZ#sMsSa(IC~$#L=WI*V5h4)z!5!
z!Xv`1%Ecwy#n;g_D@eQ8Fp#U->%y0?zxNt{O=h*?wca>${mW_B1qvTOs%3I~p6|Gt
zmG`ygpTlo=PLJQNuzn6F|2M9;jFY$i+r;3p%JJw`EuBxZ%<tL@H*jrxxwPn+$ib)H
z!hE~u$0a=|&;G{1e)iFHPWvL6Sc_fuQFFcoy;z+iHt)p2oFC_fuTE17n;vPR^e1$-
zDz~yk!IR2OZWB4C6l#@R*>F*_WBS4H{Zk%vrQBuK*_`@t`LQXLTb4NA?5YXVjyP1W
ze0$%$FJCfW1%z*&{F`Beg)M)eK=-yb-|6{Aehj5Gahl&^+sr>)^jW%Y>LtFU)QER0
z*VqPBKK77#A>11y>mVI+!}@FV7T16K>^pTmBGyc3_KBX}n)j;X=<+qr+Z)$g-irL7
z+VS|(<B2}!gVHyCv$<*!pY~&mrqk45cj>eQ!H-X0GdO6}-grB~)oX^f^aGcjHC3H2
zl%fxOy%{EdH;S8Ie!+sqPllyBn>iP1ONe*;diU}3lAXMrCdYqs%#_;2yZ_yF#+&&~
zj3<8_H0^roka_yj_j8M0?eLB?p1A$@9>X0+4-`K)_|~#CF*vRC%Hg1Wc5++`X4oD1
zdwh>a+51<)+Y7uZUM<?*_(Eag?~})>4(&deGi8q@Th%m~<!2T@)A;||?~iT_$26h+
zF-hK2e2=&(+{>P&ETY<$f0sr7$o$aN@76ARpJ*Ewa<D;g(lyQf+xVtF<iB4i{yhAH
wlgihQ>DvyTEcbi#dRP1Akc$}`l6_;?r5r4-FXKP9;E#p}``JEQhbJ~20Lr0$I{*Lx

literal 0
HcmV?d00001

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index a6d330f..cf626dc 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -6,6 +6,8 @@ let
 in {
   "pinwheel/syncthing-cert.age".publicKeys = [ pinwheel alex ];
   "pinwheel/syncthing-key.age".publicKeys = [ pinwheel alex ];
+  "pinwheel/mullvad-device.age".publicKeys = [ pinwheel alex ];
+  "pinwheel/mullvad-account-history.age".publicKeys = [ pinwheel alex ];
   "pinwheel/alex.pinwheel-sombrero.age".publicKeys = [ pinwheel alex ];
   "pinwheel/alex.pinwheel-sombrero.pub.age".publicKeys = [ pinwheel sombrero alex ];
   "pinwheel/alex.pinwheel-github.com.age".publicKeys = [ pinwheel alex ];