Skip to content
Snippets Groups Projects
Verified Commit 1950fbeb authored by Kristian Klausen's avatar Kristian Klausen :tada:
Browse files

Merge branch 'wireguard-vault-removal' into 'master'

Remove the WG private keys from the vault and store them only on the servers

See merge request !891
parents 6d39c3c6 27553ab3
No related branches found
No related tags found
1 merge request!891Remove the WG private keys from the vault and store them only on the servers
Pipeline #114660 passed
Showing
with 10 additions and 100 deletions
$ANSIBLE_VAULT;1.1;AES256
61343637613538316638633261366364313430343464663133316466636666366233643062373133
3335333266643631623933646261313532393564653631380a616561636336643139353039626431
63303531656163333965653262396536353631353366373135313666393236383633363434376535
3161323733613963340a623733633362306465653162663434363838326665633338333836646236
61383336623365383236393866653465633834376139366435303839343032303430363736306533
33633434356563373932313861363666376432376264383933323262396430656630633862383237
62333435303239396537306362323866653230313733386332636164333066633334303738333061
30633265623035633231
......@@ -16,4 +16,4 @@ system_disks:
- /dev/sdc
raid_level: "raid5"
wireguard_address: 10.0.0.28
wireguard_public_key: rg3PyaA3nXNZt2C8l4tvzMiTOT47a/jU11WR3EzU0Co=
wireguard_public_key: 3C9yMutZJfOn2UkOhnGeM9DnLFJaeo6uTY9CGRlBZVM=
$ANSIBLE_VAULT;1.1;AES256
63336430306539626434643065393363633038356666376233346339616663636266383961333234
6636383163326238373837613831316633323762376634610a353266623334323232353362373432
65623034326266313135616235313663326166616534376530343032373865313938333831393961
6436666262353331650a336465636435383635326433353735663135343931346531643533633735
61343064353137626635353361623334326436393366376161633337333161396466666138623533
64343937313233633834306337356136333339633131663130653966303164343436383238653036
39323461386631336230346461323161313361386332383730316162636434623234613932363132
32383662633166383530
......@@ -16,4 +16,4 @@ raid_level: "raid10"
archive_domain: archive.archlinux.org
wireguard_address: 10.0.0.20
wireguard_public_key: 6foPuhPBEUi+tPP7PjFT1nKpEksyyqT8zAX+yOjWDVo=
wireguard_public_key: GiMqMcJ7aEuW6rRwXsj27S+w7orx7Etnjq+dE6RhoSc=
$ANSIBLE_VAULT;1.1;AES256
38353761363039393465666663343232333730633633623363626238313734316466333038623563
3539363134386663623837633332623062313537613137390a376261626466616138613838386664
62366238373334346335356330393737383531353862616564336630326435666362646634313137
3336663535333266660a626336643663343764346637303635636338346430633066353965633331
63353131616434376238306165616432333331646334316262613564396535633831646235636339
39656335656663323131613033373136613965343266316631366437343139626333313735346230
33623532356437363262353330656431336238323535376633336262643836616334306463373064
32353562616465323637
......@@ -3,7 +3,7 @@ filesystem: btrfs
enable_zram_swap: true
additional_addresses: ["213.133.111.6/32", "2a01:4f8:222:174c::2/64"]
wireguard_address: 10.0.0.5
wireguard_public_key: EbZisS0fwM6B8Nkugy1lyox+A8L13hniucVIPVCK5R0=
wireguard_public_key: ebEWzriL3dohjDP49Hp+SGHZBnzx8fjnohDN3igQlCc=
hostname: "gitlab.archlinux.org"
network_interface: "en*"
ipv4_address: "213.133.111.15"
......
$ANSIBLE_VAULT;1.1;AES256
62333862633232666133396661646562343766373561306530393438666532333766316565396439
3139653036626231376135353438643164633632333430330a313836393862396636303539623732
36396438616364396161333837366630373033326165663566393638623664383062663036636161
3333623232393932650a343530616562316538366236376133663161353432656232366639316333
34373232303731356134646437666432613931363863353934393338636438663133366131633765
36626163623832356264326637363664303532383236303066343730303338343164616331616130
63393830313239336662386563303763336537636364396265653763626231323535623931663733
31643134323036366535
filesystem: btrfs
wireguard_address: 10.0.0.36
wireguard_public_key: iiwiHp6b9fmepXLNZ0xFMWIhF2u2a8oEpQI1TTDR4zI=
wireguard_public_key: YqQMISqTUwXPphhfBDXGcbwjEkz8xgtsnaazFCIGgmk=
$ANSIBLE_VAULT;1.1;AES256
35653438346435353864333261343463303935353839656630646562383533343363343737656261
3232383964383163666464626464623861373838316630390a346232373835623531616530363839
32656164656234626231353938626431306265623939343334623938653530306665306338363365
3530323765396365610a643364333239666533366231633964356333656531336438656164343034
30613066653961343066613735663161626361393863656135326162666632646237383037383464
62313230343739316137303134313161633331393165636138376666303431353430383265343361
34353339643737366331366631383736356564623436306266663233333033383134393364653538
35313833623238383263
filesystem: btrfs
wireguard_address: 10.0.0.13
wireguard_public_key: 0MrXhX6fmtetZ1Rnu93+rQ8yWgOmxrwyY/hXSsy98FI=
wireguard_public_key: 67qt5z1YsqhLTnMFo96YoDwtXDFmukF3EcWtrV5ZCHA=
$ANSIBLE_VAULT;1.1;AES256
30376666373438653038303032343464623137316436326166623165633662373332643862633430
3233323766326364303664396461303734323237323938640a373737383531336433666136653335
35343036333037316536323335393562306531616565343533613663356635366365313565646437
6262653233623464350a623561396338306465633836386639383837323963643163313539346135
62366663393561613562336363626431646161356233336332363863343835303535353465653731
39383539386136666230313537626664353531613063643534346237336566656232336239623439
63316135316439626431633737323539323235383564633438653264323164386634656336666665
37383966663335333639
filesystem: btrfs
ipv4_address: 95.217.236.249
wireguard_address: 10.0.0.34
wireguard_public_key: t6Er4qAMe/lWNnAByWdXhbUwXKYfj9CkkJgMp28UQl8=
wireguard_public_key: XUbI7fDRKPbG/MIfgH3c4fNhC28F4aXWvknOEV3CxUg=
$ANSIBLE_VAULT;1.1;AES256
30376334303766393530356533356236313866373362313461306661303663343764313238333064
3332633062616133643331363765636534646666336634360a373630646436623962643532353430
64306462373461313962636535613831623336303231643665303962353263323533313361366562
3937393761303434330a663366623862636137346230653665343238323166303761353231643633
30623061343234643136323338386333363336366162656463656439363631636661366535326264
33616636343239383735373230306164346163663765633165376136626430653238333630613033
34323863333865386535343032373531626464356537626531353563633239356665663463343435
30313365356632356336
......@@ -14,4 +14,4 @@ system_disks:
extra_disks:
- /dev/xvdb
wireguard_address: 10.0.0.43
wireguard_public_key: FuhMj8Vrk0HUR10O2dmgeXtw+bMAuhNesYD+h0lKgSc=
wireguard_public_key: PRjfJjtYe8GtihCw2cm+ocWFZpEtVdKC3B1C5AsPC1A=
$ANSIBLE_VAULT;1.1;AES256
30663137336130633937383231343062333664636631323739373164663563363565383435633362
6331356532616630373432373031383139613633646461330a373936663337326633656464353862
36326239373864383662343737313436653639383562303433363634323562653637373236653736
3765663532643338650a626433353131353730623864646535646138333236316563353032616235
38653765306433656539383533653930376564663361356134303539316335636435616130383234
63346238323761343635326263396362656663363237336232663039346465656265616366373433
36353862386661366563366535383439333531656564366238323032656232633462336166343766
37613432323131623461
......@@ -11,4 +11,4 @@ fail2ban_jails:
ipv4_address: "95.216.189.61"
ipv6_address: "2a01:4f9:c010:3052::1"
wireguard_address: 10.0.0.14
wireguard_public_key: +RJ/ZNRmw2uCHxSjJZHftk7lWUl5nJ6VSZww8GPwhEI=
wireguard_public_key: zB4ALQPMOYu8yzGdiDL1AHgowmVZHc2OUJq1igy3Ixo=
$ANSIBLE_VAULT;1.1;AES256
62626465353239316533326230313635626163313135623035626565326434663662646638396434
6366633335633138616232313937373137656461346533630a306261643164386537336632306165
34656236666464393437326662616264373564326533636333353037663439626331383836623364
3261336364376535360a313531333734346361313565666463393133633232363264653336363962
64616239366539643664343664313763613739336665313965366134383534646439373535333064
35366237636161636638653264313161633664376439336431306238646631303364653733343363
38336430316636626633376464366135666465393133313664303766366662386135343562323961
62316563313335653738
......@@ -5,4 +5,4 @@ fail2ban_jails:
dovecot: false
nginx_limit_req: true
wireguard_address: 10.0.0.32
wireguard_public_key: PkAuiYdsDs4eI9JytK8MUCK1umDblQHg1SH+Z80zs30=
wireguard_public_key: CuhJyhmHsi0ccdeXgXRacqnFVfYrjVDHxfPPOLehkhw=
$ANSIBLE_VAULT;1.1;AES256
38616234353738326336653335323964663662306561626566643536613433633836386661366531
6437303134663639633730386132643239363338346631350a343035326230623337636539653163
39333736623832653661663237366632373835653536323038333966646330643433363136303232
3133306331353433300a653031313937363932663333373639343030313539363361653239326634
34623736646634626263636430303863336364363731386335666638383530626630343534396363
37383865643135356463656637333535343130303736636162363437636338643866333263616565
38653133336666663336346535376362333730323831626666346231343431333662343562656238
63336131343538623136
filesystem: btrfs
static_dns: true
wireguard_address: 10.0.0.15
wireguard_public_key: QWkTL58mJd0+Lz5AvGVmbdSSk29y/W60WUdhTgyGLCk=
wireguard_public_key: Oh6gZG9HbchVM6xiYOJQ6JpF6QD7EeRD7Xa6c5fr5CA=
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment