[nixos/server] make regeneration of all mTLS certs possible

.gitignore

@@ -10,4 +10,6 @@ emacs/.emacs.d/eln-cache
 emacs/.emacs.d/transient
 x11/.xmonad/xmonad-x86_64-linux
 x11/.xmonad/xmonad.errors
-.pre-commit-config.yaml
+.pre-commit-config.yaml
+
+nixos/server/mtls/certs

nixos/server/configuration.nix

@@ -20,7 +20,7 @@ in  {
         ./modules/radicale.nix
         ./modules/systemd-email-notify.nix
         ./users.nix
-        ./secrets.nix
+        ./mtls-secrets.nix
       ];
 
       nixpkgs.overlays = [ (import ./overlays/paperless-ngx.nix) ];
@@ -46,9 +46,6 @@ in  {
         "radicale" = { owner = "radicale"; };
         "restic/data" = {};
         "vaultwarden/env" = { owner = "vaultwarden"; };
-        "mtls/actual/crt" = { owner = "nginx"; };
-        "mtls/adguard/crt" = { owner = "nginx"; };
-        "mtls/netdata/crt" = { owner = "nginx"; };
         "smtp" = { group = "mail"; };
         "searx" = { owner = "uwsgi"; };
         "geoip/key" = { };
@@ -843,7 +840,7 @@ in  {
             proxy_store off;
 
             ssl_verify_client on;
-            ssl_client_certificate /run/secrets/mtls/netdata/crt;
+            ssl_client_certificate /run/secrets/mtls/netdata;
 
             auth_basic "Password protected area";
             auth_basic_user_file /run/secrets/basicauth/passwords;
@@ -863,7 +860,7 @@ in  {
           };
           extraConfig = ''
             ssl_verify_client on;
-            ssl_client_certificate /run/secrets/mtls/adguard/crt;
+            ssl_client_certificate /run/secrets/mtls/adguard;
           '';
         };
 
@@ -886,7 +883,7 @@ in  {
           };
           extraConfig = ''
             ssl_verify_client on;
-            ssl_client_certificate /run/secrets/mtls/actual/crt;
+            ssl_client_certificate /run/secrets/mtls/actual;
           '';
         };
 

nixos/server/mtls-secrets.nix

@@ -0,0 +1,24 @@
+{
+  sops.secrets = {
+    "mtls/actual" = {
+      sopsFile = ./mtls/actual.yaml;
+      format = "binary";
+      owner = "nginx";
+     };
+    "mtls/adguard" = {
+      sopsFile = ./mtls/adguard.yaml;
+      format = "binary";
+      owner = "nginx";
+     };
+    "mtls/netdata" = {
+      sopsFile = ./mtls/netdata.yaml;
+      format = "binary";
+      owner = "nginx";
+     };
+    "mtls/paperless" = {
+      sopsFile = ./mtls/paperless.yaml;
+      format = "binary";
+      owner = "nginx";
+     };
+  };
+}

nixos/server/mtls/actual.yaml

@@ -0,0 +1,20 @@
+{
+	"data": "ENC[AES256_GCM,data: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,iv:0+ttaqKOAjxpaXnflNg87YUa2e80DYlg7c82TFbifZ0=,tag:azXT6UmLPjbVEiA3uXx9mg==,type:str]",
+	"sops": {
+		"kms": null,
+		"gcp_kms": null,
+		"azure_kv": null,
+		"hc_vault": null,
+		"age": [
+			{
+				"recipient": "age1pvfpke4hylqf6ntrltp6vanqy6z5v64l2h3x5cxydn6lksgs3e5q2z9t57",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqRmV5L3AzOVM1cVZIMlgz\nTExQMERURDJWSUY4Ly9hVlRGSUpmekNWaDNRCmdHZHVSQnZNbmxSRUlaVlVnbFk1\nMkt0TTBZV1lGSzRsZks2R1J5ZGZHaDQKLS0tIG40cVRXUE40K25GN0U4OWltUS9J\nY0NKOVExVitYdkhtYlBNOVZWWW9tMTgKIe5bMJFOeaTUjyVUVCHaryzUXMuPHptR\nohsRyN0gt1rQX0LQLLe50wRokv7KwjBirJNRkazUpITemkqSsgSIfw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-01-26T22:08:37Z",
+		"mac": "ENC[AES256_GCM,data:wRCoJ94SrzQzXf9d9LE3LQheWrhfXouzi/++qv2tUeq0ZtdKYbtZ/+nJ2kL7gc89BrI3wuQ9RC8mFVSdlA/A8rbshfgwdlgJbQPstUj533yTgJ1zeqwNT7kywQ+HqxL9I3FCeko0ij7qQVubf9OfSEbeMcovvz+SADS0fRnDFso=,iv:Elb35iu8qH2/JDoErGxfDXVL3iLyV3O2d8OL6061gVQ=,tag:hu1JCPuYWZh04xToAbWNLQ==,type:str]",
+		"pgp": null,
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.8.1"
+	}
+}

nixos/server/mtls/adguard.yaml

@@ -0,0 +1,20 @@
+{
+	"data": "ENC[AES256_GCM,data:HG/51jmrVYCcxYVd8L7tpR7Wrk1eI9c2dUs+wrszXhgrahY4w80nyBjvW+nsXJI7D/Ce1zQuek2fVXhY8J0mpthe8LIrE4RjGJEJuCT4dWyV5W0fgvRPhhvEwBCrEvXAEQDwhMbzuOqdgsCFoaiVEt5t+Lh/XhjDw20QHzqx/MjeYxMryG33uhfQv/R9CZBhEog97L5ELpfKwzKiwSiEg+DyTJXT668HVe3vfm1fXR8R0XZPcnWhV2jBzTTf2LbbGKML+Q7CFGG97akjpZn9iy84AWEtmjH8uYUCxrOeBBxGFbcanUOfNpHTejyhNPn6ZrDwXcLLBlHqlaQbCM2NIgXa+PWsc7lCUXMr1ngfKG+AuUX62rRiyt+0aors1kMsR7VxdC/Vm7Uw4YyewhfwKoeAt7GWQDQO7MXOK255rrgSnyMTK/yj8MllCqTw9wxH2cNNR10A3nnTBOyZVeSNc0DYBP2Jk3qAHh95O66NQINMlsgFmI0ZkG3EpNlobDHfEOn2PWx9Rq/HClEqkaCfxujs75Dn8lAv49CrfB5AZl/ZbJVwT2Pc97Y1ruTzLET9ugiZlNee9J9LXj5pZoqmibezFb2D44Mx4skngPkISkIAuePtG9JzIwgTZ1AgQTcyo8RefmSkvRQhaZCfyGu3tOJgTIYqQOnamk+vAxS9DEli+9+AlNmKt6uXQ9hdsfPttgNptFKXxkJtG/iNzqrFTUaWyeGsVScKYgz2g4orCCEO35wonZPKe49hk1SsAy0YVau0WmpzJFWx4QpBFwqZ9bLkWQMYUep/0Z+CEfr8hmFsKdoh616tH33SQIJV8ofd2WzHOqwqUpG85avyC8zmfQ17orxQHWwqM7wJvlMwHLJmIpVImRQmeAQMki7OlEKElP0PGgEqCsl6poYosx7cw9MBngYKN0Gbu0IMLdc6fufgB0RmnjXFcg8LteeX1npK2y/5bjFx/xVCBK1LpS8jzD9LfcjYW5u12RYxnlCl2pooD1NUuWTMvOz6eFicoR6UgPro3VGXKgFwBUHr1jQrBOYYArGKHXFV3i+5Bw5BhIlpuDUdhzq/EcfLwm+7J1QpyHKFe68PMYN/3itHoHEMku6J6AnnUaKkTyh06Zt/ifT+lXc3GPqW26OChF5T6ognCof18+rlO3ErSC8zs3LPdWiwYpuIvNAeQ4gYN/PJEp9trIAFd5USEArBRX8ksrBIPlJIZVkchi9ak7dxmhiUHQg0qveGXWN1mmu2a3+KEIqxYMuwji0jFrsuGkJ7SmSucOx6dYd9apc+1/038EFE/LYH4jAlgRwxa1pAIi0k5vkFno0VLy15TSapZkfFab+N45QHWY56fVQ2S+miQM0+n26td9lCufig0IryHv5skZ1w8XMC0lOWKGJA5hskT/2cEURAWBGe6Lffr1O3d1vfoNnRb3xgI19bN+z6vgGVP5ddvAYMCrf+kvNcTyW7zfSUxvKMJOgpzN7+jvnvee23f4taubr9u3lh3GPm3V/eoguMQle4/13lZan9vmb9aSPNSVyldUZQlXtATm+3PvspRv61gO/u3uxOcTYhxm9w+rxqLWBrYZTGb2fHQ/bZmKiY/+QqKwXHKFeKMAZKHZkPRxwE58/espjZ+RjkBmtaUrX6XW7mhNiOf1o0YdGDkmw55QSZ2mv51jzX5/OZRZT10jUK1dUMMojtLhi4k/MM8tL3KbOgnw4SKtAhUMJpOol+g7UnVxUkR/bSNaUNBhqxfzgtXT7OZwMyrL86+szq+FflLjn0C/KmDC1P+oJwNXyimQDree5eLdQJGtPahDHyBtpFjvyyyX+y/qq0s7PxZEzvM1vpOFuWDMr730mngV44hiMumc/A5FzR25YtXu+v1rvI0Wno2L1hfZfVyCVJxQrOh8pfHHvNpV0RBkRUWz1B+2+RhtebrIy5vLPMg1+1SUDa95PUcWX3Gfm9Tritzz4Bf3Qyb+VIRX2BRI/CYR8m+TGDfhmzsEKrUhgzCrvFliupArg3u3ahnEcFcnUEW4Q3MdEaHCUug0/X8jk4SsV1itHYM9xdtmtRgkRH48OU67yQVqF6wAbMJdxl7cr2sKiaiibj2OontN18lEWLVoLM+tZ2yzKxSypFaSU2Pzx4s6l/b0CTe60HNLXXvd9CJRYUGFkXyfCjvz0mdXkA+wNuE12H4ZEw3EWZxnyrucA7GLaJS4pRSTP107QmtmrM/P7TTgkZurwSO8uyxpw42u7Ofly1lHeRpbKQ7V5ygkH0JeX/bz0xasPDmstpnS4Ca3js4YtOcy9dzyhwdEn+equhnjomX3ELwVkJXjY9l4lEe9M7xyChov209ZvgIgc0kLdWu4NOWLRj9nDzkoSDrcXVIrlXGMOVu59JF6S/xlX9XCLJ29I2oiau5ndYIqpBuwbLi/Bi0kHhGm18ojccNFagvMFsNW41TscuzvjdgsPBFBXiqzsEjGhIoI0E/qTQU3xKlR3R+0deilZl/falPf+15R4ZoZEz1g==,iv:JCRnkxkDZKPW/PABWDWkqHSUCTGsFR2WDWhterV/1PA=,tag:IQsCbq6WFyM7Ju7Bf01YuQ==,type:str]",
+	"sops": {
+		"kms": null,
+		"gcp_kms": null,
+		"azure_kv": null,
+		"hc_vault": null,
+		"age": [
+			{
+				"recipient": "age1pvfpke4hylqf6ntrltp6vanqy6z5v64l2h3x5cxydn6lksgs3e5q2z9t57",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTenhWbFF0VXltbFZWeU8r\nTnBQNVI4K2ZXaCsrcE5TY0xjZzk0eURCSEVRCjBFb21XdnJQbkFPeUpkTGw5dVJI\ncjVieVN4bnpyNTA2Mk9WUjhXRXJ1K0UKLS0tIFA2S0Jra3RiUng0MTk2eXpiTW93\nK2MvaGlHOWx2VXZhMWNvQzU1c1BQYm8KI9GA58p33a/kJi+a5yBEYm0gLEjdklNF\nOzTsx5rtbdSiyQ8SOtXo258SV+KbmFVn5XWxAqnqzlmkiUu47t4EYg==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-01-26T22:08:40Z",
+		"mac": "ENC[AES256_GCM,data:zUjSbdgEc9ACE6vHIVgDnnUcF9SqhGYhqhvcijHApe87mSGqkpz6cmeGsHPuVP6bYO1xHGf1Do8jDDT1zDm+Di0TtXntgTQxU448FHH3VCMmAkeWBtciziQxy9L3nw4RI1uhdubIGUftCIBa9zKV620xN58EPWD7ZWHEug0Mz3M=,iv:kb06UdpiIfsH7HXRZSQ1mPnl2uMk+jhnkuedGaQM2uY=,tag:pLZbIqmFf/F3ulyvuydHTg==,type:str]",
+		"pgp": null,
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.8.1"
+	}
+}

nixos/server/mtls/netdata.yaml

@@ -0,0 +1,20 @@
+{
+	"data": "ENC[AES256_GCM,data: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,iv:0GcHOKclPe4w0/liw3SI8gb7NKOZ0Ghc5nr3Eo0NjO4=,tag:5hGIfUTbRlf2npf01+IKdQ==,type:str]",
+	"sops": {
+		"kms": null,
+		"gcp_kms": null,
+		"azure_kv": null,
+		"hc_vault": null,
+		"age": [
+			{
+				"recipient": "age1pvfpke4hylqf6ntrltp6vanqy6z5v64l2h3x5cxydn6lksgs3e5q2z9t57",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTVWpqSmRhdGdPVHhqM3VV\nS1FweW9VRUhTaGhMUFp6Q01URGJFR1VJT2dzCk5mVVB1T1F1cU9BUyt4aHNYalBS\naG13U3lOZ1RxQ0thanRzS1pvRTBlZmsKLS0tIHVvZ0x1SEN3ckJUZ3VHSkt5Vmhz\nS2tKMjNDS0kxeHVNcy9WNHQ5SXk5OTQKVRC3Je41zoauXdHhBlBeU0lIk8fvesKF\n25779gxaxF5e9IkHmQv4j4PwPzetlQxUsWh1vugkLak4xODKkhveIw==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-01-26T22:08:45Z",
+		"mac": "ENC[AES256_GCM,data:k6NKph1xT92D2rPrjhq7jSyg0jYNqIy1ULU1kNSESUE3nMz7VaQoo0TUWuAwLb/P7I6FS+9/4SshASv0QDt79NKjj+pOjBQhCiMh+lK3a/6tqbL9vnOFBRiRTHubqc/2vGk2sSCmoh4UAS/xfjTVqSMkM3VZAE5ddsQHmzDhsBE=,iv:X5hzjgLyDYKQKqMQOW1nb5idB+B1pRWkXfByZdWibeg=,tag:V85XI1ZlmqthiAPTww5ePw==,type:str]",
+		"pgp": null,
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.8.1"
+	}
+}