From 9a80993258aa9baf025dcacec4ecdc2621f35683 Mon Sep 17 00:00:00 2001
From: Alexander Heldt <me@alexanderheldt.se>
Date: Fri, 2 May 2025 10:28:00 +0200
Subject: [PATCH] pinwheel: Add `ssh` key for `manatee`

---
 hosts/pinwheel/modules/ssh/default.nix        |  20 ++++++++++++++++++
 secrets/pinwheel/alex.pinwheel-manatee.age    | Bin 0 -> 787 bytes
 .../pinwheel/alex.pinwheel-manatee.pub.age    |   9 ++++++++
 secrets/secrets.nix                           |   2 ++
 4 files changed, 31 insertions(+)
 create mode 100644 secrets/pinwheel/alex.pinwheel-manatee.age
 create mode 100644 secrets/pinwheel/alex.pinwheel-manatee.pub.age

diff --git a/hosts/pinwheel/modules/ssh/default.nix b/hosts/pinwheel/modules/ssh/default.nix
index 2a77bca..5a90976 100644
--- a/hosts/pinwheel/modules/ssh/default.nix
+++ b/hosts/pinwheel/modules/ssh/default.nix
@@ -5,6 +5,13 @@
       enable = true;
 
       matchBlocks = {
+        "manatee" = {
+          hostname = "192.168.50.203";
+          user = "alex";
+          identityFile = "/home/alex/.ssh/alex.pinwheel-manatee";
+          port = 1122;
+        };
+
         "backwards" = {
           hostname = "backwards";
           user = "alex";
@@ -46,6 +53,19 @@
   };
 
   age.secrets = {
+    "alex.pinwheel-manatee" = {
+      file = ../../../../secrets/pinwheel/alex.pinwheel-manatee.age;
+      path = "/home/alex/.ssh/alex.pinwheel-manatee";
+      owner = "alex";
+      group = "users";
+    };
+    "alex.pinwheel-manatee.pub" = {
+      file = ../../../../secrets/pinwheel/alex.pinwheel-manatee.pub.age;
+      path = "/home/alex/.ssh/alex.pinwheel-manatee.pub";
+      owner = "alex";
+      group = "users";
+    };
+
     "alex.pinwheel-backwards" = {
       file = ../../../../secrets/pinwheel/alex.pinwheel-backwards.age;
       path = "/home/alex/.ssh/alex.pinwheel-backwards";
diff --git a/secrets/pinwheel/alex.pinwheel-manatee.age b/secrets/pinwheel/alex.pinwheel-manatee.age
new file mode 100644
index 0000000000000000000000000000000000000000..7df5ea0556ae203a9a702e50c20e6760bba99730
GIT binary patch
literal 787
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCSHs|ZMnN>?y&vPiB7
zbIC2LDl{;T^bPcPGPFpK)UI$!E%wN%%uXxS&P$JQFAhr22;}nfDh#r4E-XvU&NKE(
z4-7DHuJF!G4h}G^3e&F44-PO14-Pl9tjvsv^hLK#JKrzSBT&K1w4$WI(ahN|JGaO&
zt1K-eFFD0L%-piT$1z9SuOQnnBec{Yt-!a~C6LQA#WktKyU;@0InuyF-!ZGW*eBG(
z$=fZ&#lt)xH>k*?%C*R#pfJtUubfL)S63mWz$DPHvNGE}H_bR*yD&H?rN}GCEZ5L1
zGq>2ZDk>;T-!CH1FfTpSt(a^5)iW~xm;Q}7cz&jR+V7K_zk4U>nJqCr(35;_hCiQj
zvbgJ`4O6B+*%t5pQK{S|oHgxylU4hlKkmx6#n^7Sr8D^{$7~HfJ*(hwe?zbNtyjL%
zK5jc^e>7{f-tp;=ZtpqW$p)PD_cGgJR^*%flfJ4ezTxLt;Vh2#`}^eCPp-ANui$Q$
zy8ANgy{8AB#@c9n>nX@&f4%T&-A5VL=d+VaW!yGC5P#8SSid4c`DE_5gxL#kFlNoI
zXPt6N{fcv1p4-ZU78_ruAF<lW)q7?8=H0I=Sf)wLvQDquFfqrj_xT?N$q+~L!%tfF
znl~@X5k9tO#$Cf@T`{^-jc0}T8k~CF@L+=W66;S>wc<m!?OEiQ`r%@4VxvF5;hS)V
zi=x^Mq48m%8m!^1g#ve4d_Sz^yB<1q;c=geCBZshSN;%R&D{T;O)jvY>u3?1dyVA1
z{vG*c4X#%@j@NILU!anECi3qrUcG5c_lw_3>0h~v@tNtF!0NE0iLos6W>4??w&5gu
zl)lE|4J&p>PJd!~&3XpI2NOeU_R2H$c?<{me|!i&Zn$IT*Uk6OcAW1Gs+w#5<D_)?
z@(rdL(%LzV6E3#ANLc*5^G#;I_MWy4dBRc_Z#7@)#eI6o!J^!hKC8KB&no#(2CNt2
abvq0G+Sjdc5K41b$ec1UShb+&C?5bZUQ)yW

literal 0
HcmV?d00001

diff --git a/secrets/pinwheel/alex.pinwheel-manatee.pub.age b/secrets/pinwheel/alex.pinwheel-manatee.pub.age
new file mode 100644
index 0000000..53a8ad7
--- /dev/null
+++ b/secrets/pinwheel/alex.pinwheel-manatee.pub.age
@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> ssh-ed25519 vxPbZg YW9lqVTRD04cADmnlqv5EiTAT0HeNIl5Av4CqgHk5ls
+3g+zkm7Qslg/mq+oxz2NhLI9vQCPNzri87a2AOLyxMg
+-> ssh-ed25519 Pu0HWg 2NCikdn506idPSo428BpwXpmjPJPlKl1WLQdKCcC4CI
+3jnRPJyMEsyic/ZQkalcZVDvdJSefkl3qlXwP0B7f1U
+-> ssh-ed25519 +oNaHQ dA/YOfXwPKXW8fHb8s9v/KwFJN3jrGJZecN5820/G2w
+ZcxfT+gWXtc4JPE0xTJ8rpWB/fubDBaNplF+V8e0PRc
+--- zfQyYuHOYPOiN7xOgDamuuRXdsZOCcLXjVpnojhFeQk
+崞兺椆lp匨諥p侲4s󢠯糒尧鎳Z�r{A耰#洡O穐鲲贚]\讬�����(鱚闽萑s�5Igye}H濉馧脢�軶撠鷳`y�'篢z*]庡咝-柛�"@	寅k
\ No newline at end of file
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index cade659..f08135d 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -9,6 +9,8 @@ in {
   "pinwheel/syncthing-cert.age".publicKeys = [ pinwheel alex ];
   "pinwheel/syncthing-key.age".publicKeys = [ pinwheel alex ];
   "pinwheel/tailscale-preferred-exit-node.age".publicKeys = [ pinwheel alex ];
+  "pinwheel/alex.pinwheel-manatee.age".publicKeys = [ pinwheel alex ];
+  "pinwheel/alex.pinwheel-manatee.pub.age".publicKeys = [ pinwheel manatee alex ];
   "pinwheel/alex.pinwheel-backwards.age".publicKeys = [ pinwheel alex ];
   "pinwheel/alex.pinwheel-backwards.pub.age".publicKeys = [ pinwheel backwards alex ];
   "pinwheel/alex.pinwheel-tadpole.age".publicKeys = [ pinwheel alex ];