chore(ops/secrets): clean up secret config & reencrypt

This grants access to all relevant keys to the new machines.

Change-Id: I78a7003181ee9977e548fbfe0d78afb67357b56b
Reviewed-on: https://cl.tvl.fyi/c/depot/+/13064
Tested-by: BuildkiteCI
Reviewed-by: sterni <sternenseemann@systemli.org>

ops/secrets/depot-inbox-imap.age

@@ -1,15 +1,17 @@
 age-encryption.org/v1
--> ssh-ed25519 dcsaLw cpeIOVtFcfaHZpIAp495fkQLJoT++h1v6p0crBeuzFM
-+zomKCg7UVNl/FlfcZflVPbo48C45uGoGoR1tbetEdk
--> ssh-ed25519 zcCuhA loSmQUCnO0EBaGg+wFYYkXOdLBQ6Z+pPl4Y3oGx6xzw
-+RdXNYYtIDDXGr1Z0Mh28psvF9gzg12M3EJTUqmdFtU
--> ssh-ed25519 CpJBgQ 0W0LWu8WW6pQzUhK21CeNDUtW0srwR5gNCRjwTy94B4
-A02F+AyP+DajnVTJakx+0jynYRDix9I/9uZUDPjXpis
--> ssh-ed25519 aXKGcg SVBo2urAYGSYrlj3ieoi9nkrffcZ9ZroCn86pZkn4nI
-xQRrLNeNcI9cpQY+X2xfLDoBqLNQixGjaYtMDWtHio4
--> ssh-ed25519 BXptmQ UKNJPPjIiqPQndZ6/yASSg+5PQIn2N9nUy2hQMREq1Y
-X9zM/ji9R3jLOEDGLpIVESjU13VU0e3cTAR1xEMhY5I
--> B-grease Y
-vUOYknqY0okoUOKZD/8MpnpwkOU31sszuUZfeSVsuVyUMPEbFjWQT74
---- ymKMaoUQXFPRc9U0ZvULBEC0Az0ew2oEyHwH/kR9ETI
-Š
Eu”…	«¯­x§áÍÓe_)zPºåh‡ÓÓÊùˆ–<CB86>s£žGàè´Ê•BLQ
+-> ssh-ed25519 BXptmQ Vs02ZiJLNF5EFwROHDRmK6c63B+i34O4iUe5px+ylVI
+oAlTA+SCuWdg9GDRRIAzZ8dzm1CeJ32v40i2uuCUBC4
+-> ssh-ed25519 dcsaLw 60SJdc9bFol7lRKarzH/0SSHTdvOafJw7LM2Ryg9ORs
+nwwIlne48VJ1Pf8fen3Nw4Z39d/4aU0HvlGoCtiKhWk
+-> ssh-ed25519 zcCuhA sZSaSac/2iB2RoNKkD1IRDHW8efafmfWzHg5zp/680E
+HndqDG6ErSmrlpY08HoJ/2O+xeNRTqhdBVP1ZwfokfM
+-> ssh-ed25519 1SxhRA 9AjHrUjAr3O02Hsv0Opx9ge5bx8qA/Kvra95Kz9augo
+GZOL8dR+36ObR+fPAOzp/1jyuVlgcakQhQ7ewbCo3O0
+-> ssh-ed25519 ch/9tw Qjlt8WTWe77gz37/oIK5pwpSL8rOic8vZ5cFFeIaqng
+h7DbM8R/hQzaVgYx+PS7p4RHYtA0GTpF/6/Y7gdS9EM
+-> ssh-ed25519 CpJBgQ RIQKivyWL+MG7E/IgmjOyU4NEWqI6cxD+F1tZ62fcgw
+Lz/XRQ2UHT1RGIZ2HS/IR/rYdR+AynaKIkhml/RPRbA
+-> ssh-ed25519 aXKGcg pMzqW01tUgywYyKTeiI0zmlM961kAf4R4OQdjOlmKA8
+P//iqR6HJ0eQodv4F/4kVDzVUwJztsbfrxqonJa1aQQ
+--- /vmQh4qM0gBaIDcZGNKwsHIKZYJanwpqowpjuke1Q1E
+˧|H$<24>ÿ^8&Ïz.D
j	“ïÌE®É/<2F>…nA
Ó2yÀlË<17>»%<ØÞÄ6‡

ops/secrets/keycloak-db.age

@@ -1,15 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 dcsaLw tWBrwZf6FNYAHRjoVV9/X6gJCXPqxZSoA01dvIrIOzg
-6W2A3smrrosM3sJgl5CT9vkCWqVKR3SaSxWS2nnwKJU
--> ssh-ed25519 zcCuhA IS0OcHfEfb01xe+FJUe1poruK+uuP0MaJpeoGYyVAFY
-eEzcEYcW4KoKZZUEH/ha1nn9NudeK9HgPRgmrCWMjug
--> ssh-ed25519 CpJBgQ 4mjCHMHfnGu2bhANPBNmcrZQrKBcPgZU+ll8opmvGCk
-0+Vd6pRPovUcKa9i37JVU/DUeYAmJ9D88MR4flA8gY8
--> ssh-ed25519 aXKGcg WGCgCoViKLqndC35OTaExqZlPBDRwXRBJFuS7fw8n3Q
-kUHunOUgIsxXmOzMCwUFF/0dYiae8YZGmgZaz8gXPJo
--> ssh-ed25519 OkGqLg LLIDJkImcqMjwRitnGevcav5YjDwYsQ//elx7fgbCQ4
-EnYTppSr/GKug9T+bFLGxrxUnNiXD5ODhB75OcH/h24
--> j@-grease @:arA
-8EFNz7i8N3gbZEMaQw
---- RkHJIg9pif/R47lgqrZD/XgkTETxXWkwW9QnFFsmfOA
-«oâ]Ù~¿…6Ë+jøn]ŽlÕ+úÚK=ʽ	ZÛp9<70>¢ó¿ÂRìðzVg u2ÌÌæ‘_
+-> ssh-ed25519 OkGqLg 85hbcQ9r29CC95B1CXO+uftm7ywhTeWCpklX4hOc2gU
+7EO8O5/eg1noB8nbl9XL+m8WAvLp6QnA25CiTsp5jfY
+-> ssh-ed25519 xR+E/Q Hefp9fWCq9sWdgyKp3gNEO1p9yWFK4sYX8xMxkyy9G4
+JXofip2LGkJFDBb+6DegoFGDPjk8FGF+AqaAy5FPqwk
+-> ssh-ed25519 dcsaLw IUoPTD1SfnY/wXXFcIc6h47fea6ukWAurUmfqwTQOAs
+G/YeKUk8IQXBQ1q8338HxUg2vXqmh8LOIHSX4Qn1CFo
+-> ssh-ed25519 zcCuhA 2LrAbe+Jpsg6gFzbnx3ppDesbQSWqzHs2uOv9szb80U
+idJNMv6Lf0k2NsfOcm7it8LwPYxjdq7+LS7PUzQ89Qg
+-> ssh-ed25519 1SxhRA idcz/kk9WyIA4I2NwzzPiMX0AmXkV3FTHxoE12n2eWQ
+e+4am77QT0fDv9Xgci4L+VsgFyKT4ZHjB0FWe76hV3g
+-> ssh-ed25519 ch/9tw RNZWeD7W18wpcpBksipmib6vhHmaCP5iQeK4uLHU604
+bH/PJprw6+jEktmPnS3OrGMtJ/XHYVZQoQRdReLkLYM
+-> ssh-ed25519 CpJBgQ w9gTapqMBoJl+C4sWIGIDCZpemRCEu1iDUUWFt2rW0A
+1nYU4UiHYT9vPASYHwunK2Td+acAmjzRpFpLioNneJc
+-> ssh-ed25519 aXKGcg evsnA8cq5xz+0GdKT7cBZWckBpX+w05yLOOaOL4+0BM
+LigkUyewAl+O0KBKuykbwKzFTCY5n6lnCcarl2Vu0NE
+--- KhA9LmsAYYPMrJrsJYZyEq04LvrMZkJaCL5Bt5ruYD0
+VÚOÜ{$®ÞÁ[ônÔýG7
/ÀgÔ0¾“ÊqCnˆé9ÝíÙ(g¼ô<C2BC>¨®áb@¢

ops/secrets/litestream-glesys

@@ -0,0 +1,14 @@
+age-encryption.org/v1
+-> ssh-ed25519 dcsaLw 1vQZwlLz6KEyzNB7mtPpw/V3587IfMfyzTbo415W8l4
+eHrGv8UAlPHGrz95qerbeKALKdE3WAsgaG0iApapw2s
+-> ssh-ed25519 CpJBgQ OM8rXUX7/e+OUMzeg5l0/4iDpN83E0bizA0sSEQ1Bik
+Rv1dgo2nWNFp1RtxJzd1Bs/rSVJlQuuRRcfabneW54U
+-> ssh-ed25519 aXKGcg Y5jY0MG1AkE3QnUSbVgpo03ZmjisTEaE092001svumY
+yEfLoBPkq3c8svnRSSRynvePXel3f0ExxWiMlZOQL5E
+-> ssh-ed25519 OkGqLg 1MKnCM9FC54nDkjKvOyrbv5PajZILWMGyZn3etmvHm0
+ZZKJ3B4dVK+zs05o1TWdnG3nvsgWyCncblVq1jB9OsU
+-> tTdCE`G-grease V<"wt`:| V^yWF$>a ]0K Z)k|}v
+ZpwiZsQkV71PhB/NRKrwFxu3HlJkerPtAjB5TintCRjogQlfB1DQTv47jnsui4hJ
+
+--- v9cVC9zi/w4pqGPUtc3jrAg8sMHtlPGuXyDIimEQpok
+OöðÏ”d™mn®—2|Ð[“ÉÉñu#êI0^<5E>‘<EFBFBD><E28098>Á#\
2¤Ì!*³j”¼çÄɤC\­)QÙi2Ã¥æ|ku¾Íñ(aëý0×Ôþ¦äÓÝ"t‰=²…5¯ºÊb•÷Â×Á­ÒpŒÔUöÁ»éfŸC{j‰ñÛ÷H<C3B7>…¥ðr&ï§Mùð‰/ÎÒk8KÄpFh:+ 0º¨¬Î£A8w½›ˆÅ„D·<0F>7ùçÊØ]Ê p$.5¸Í

ops/secrets/nix-cache-pub.age

@@ -1,19 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 dcsaLw ZBYqyCd+eJH8b6nuG3Off01ZRz+C8wBlXzXsHtKrPA8
-6xsUZDVJ+gsKW2XdEdRUlQv6enO3lSy7pfydhAhA2UM
--> ssh-ed25519 zcCuhA aYLfg5xvfDAL2fRCd/cKaNAf3nuMUKqkqtLQyPN6elE
-vfVIu+7QKOzrmZ08drUdBYTksaT+kHbj7kVxl5QPb9U
--> ssh-ed25519 1SxhRA x9YVX3XS0BNy6uWPACM+Q6dNY2/Grn4gBAZt7ZCc5GQ
-m7KFpWpsM/5tNeFgPQb6VosYJv/IJES79H3E5epvvgE
--> ssh-ed25519 ch/9tw MtZL+fIC9PeF4j4mJY+oF3KurgBtIrjP2Cnga6VV/Uk
-wGMsl48+SDfskXjtsMRheWvelDON6pMR288GAKhY2PU
--> ssh-ed25519 CpJBgQ ICy5pQo+1pEXDvvvCHJahEnt8P0Ws/KSLg5eruNNS1Y
-JBds2McxDga23lojtVlm3QFav9D/SnfO14RCkz/vy3o
--> ssh-ed25519 aXKGcg sO0sT+XRpZ05yn49HlPYHQi3/wrJ7dpy+S7L5HJjCVY
-ZDMWrcYhie2tzad5qPuAU1E978LVLTkQGb1rrjWsxeo
--> ssh-ed25519 OkGqLg rl4dVxI+gUNyjdrQpRpAV/7HHrcY6sT8a/mxBWidmCM
-HCF9eR6GstX9FOHkTpTU8oulphwu+LCbsr1NyWktWPQ
--> ssh-ed25519 xR+E/Q lhTKIL2kGhR/de7kRShGCHMRsZVPlXfGxaMX3Q1Op1M
-fYiPRboq/bAsbtZQfbS1zlV7HjxeOKwFcafZSDETpdI
---- /UN5QN0v3yyH0Vh9tv1u8GXnBX9j8nTkzezYVIXK+ds
-©ÔÀLÀÞÐtYS¿Ì°íÛ²²2ûEqnêH‘¬`Ÿ-­<>(Ï0}۱ʬ¯í&Ù¯CÅéíLþá‚#.yM¦yw¦„y¤9mF‹¾„å½QhÍL¯u
+-> ssh-ed25519 OkGqLg +GawUpoCoveZOVr8oFF5Cx87JrHB/DLk8+ctBYy3mGs
+14pGg24B55KpO0m0Y8h7WaXswuXN3fYOklYJpUNlO+Q
+-> ssh-ed25519 xR+E/Q PamJ1jmdaXA69yen2yaiEYBSOzemjMK7CJtvqHIF+l8
+4fm0atyNq7lGXKBJBe+qj04hDZyMv0aLAYB5do04p9Y
+-> ssh-ed25519 dcsaLw 2spxBNvNgrfRRFmw4+3qOXJRyOSpqIM5LjWwxw3nKXQ
+bkUj+mwZIGH8ollRJ4Fo0m/d2SjYHvtJ+XQZ1UyYoJM
+-> ssh-ed25519 zcCuhA b0thXNRODt5ex8V8nhnsRkTV0tJIKYLTOstdla4hLSI
+BRqHrvCRVua/GeAm//7lTCcvUd5rnfUjp3y7rlVYlck
+-> ssh-ed25519 1SxhRA JMqW8QVkIYI3EtOacMpdgVJ6bLyy6OmVCsTpN3DlpyY
+GbIpKf+cISO6oOVEZPvv1pcvHWsEb/N1Xi+Ir4EGDJc
+-> ssh-ed25519 ch/9tw +ysMVMAXfw1cL0a5JQMEoKA0qc3YvAnk+/OzL4ObCiw
+eBpIZy1M2jvxfZQcxiQj3xUSd2xRISjp/EX5v2Opoac
+-> ssh-ed25519 CpJBgQ oII0q9KXaP2qbQ4uvDHCwNURojZVV9XTuR/oh33pPT8
+lv5XPdZ6Jrk2+RQKgq585fLN88Fy5daslIzrLX74VR8
+-> ssh-ed25519 aXKGcg fkMoxXoGVVBb9Hw1hpq42cgEimgitgdm2MeLu4zPlFA
+KV3ZcS87HMYikFsDZMLYfZn3oANuhziTB/WQOS7BZZo
+--- yQHOSIohfnwePFQjAJjRAPetIbhhdHlGEdfVZ1TKmso
+Aéþy~}³Ã}<7D>F\á?ýQo슴<)ÒÝ
Î/<2F>¿æÝO\üÍ5}…‹`ÄCóÚ"<22>œOìʺN.(“=oûŽºEP¤påÎßìùŠé>äÑ<C3A4>mÏw…r

ops/secrets/owothia.age

@@ -1,16 +1,20 @@
 age-encryption.org/v1
--> ssh-ed25519 dcsaLw 8XtdgZ++/ZqmK4j8CO8oiuskTxjvKhWDK7fet5hbqiM
-Fs4O1vFtQL1JamnuCMPLzfzRPb90nxfXB6OXkyCMoHo
--> ssh-ed25519 zcCuhA 6PNsPMdRXM77ci+mBQNRxr1oMGDNdlQilpUB0Q5es28
-APw2L/0htM9U0fJ1IUthdkoem/UTM/6NNQrgn4Vmpcs
--> ssh-ed25519 CpJBgQ ed00il0q23M+3KH6hf5fFPaXGUKcz03Bn01jSoKiB1U
-jEN0Dk2edJBQreAlNE11sx0cI5u1mfFDT11Ev0KJ+gs
--> ssh-ed25519 aXKGcg NocBhG6QGlWDZhjsA6Sxvjv9Gs+3Pq5gcOqnVdiefBg
-HYnqBv0pdPz8bqgZ98VDfYFeKcFNeuJrlOsyWt551Sg
--> ssh-ed25519 OkGqLg e0081m/IkQafXh1gAWUZ2glYG7bklCG/LaUy63rK6gc
-G2RNMxCxRnqocYhiq142T8EPZQD8cRHHs7AHKFrMLaU
--> +J}@hPk-grease
-406BMfqUt/KjayTopj4dNa4owPZphR6AsBXPurJwU/zV9ipirfW3oEeaprdh4uLg
-RHO0bSZQV1uu1YmbXkuwMaVj1cVn2vsDPEv3xG2SRzMoEpAAKaFCBba8
---- 5ncLI9pS25vz5CebIZjPPDQ5cHISlyRFF55rGgFQnnM
-á$"‹PKª&C·\å(ÕGÀ[›Ï(
š¬·DðÖlǺ¹8¡<38>4çî®P”Æ)©µ‰¬¹™ºB‚¢®Ô¼£®ñc\¥U:øʬ(<28>
+-> ssh-ed25519 OkGqLg V7q6p9/JpvhDiSZelm6WUm7K8k1JPiG881M/CcD61j0
+CyWBMz5f2rOS3nyASYoNfRUyGdk4z+azqWca5Sm+Rn8
+-> ssh-ed25519 xR+E/Q m5zf52PK6k9d1slMbFi1kLHzjcwPTvS/pxpLxFkWEh8
+hgBAxWxRSoVfL5+RUcMW3+H09HpZRK9UYKexgwqCJVM
+-> ssh-ed25519 dcsaLw eoA43fKH9hP/rdX7G3Kk4nBeqZsqIZK5WJ8fOFz93Hc
+NaxeAjxHL7UnoWEYpCWnroe0VQVz+TdYxFhzgEJvCO8
+-> ssh-ed25519 zcCuhA WKauLNBLl2IazpVCfYSIdR7IHouKrUUPRNbso0f5dG0
+ixod/zrotKIrVKTWAvo0bebJRuIeKbAkrjM2sF14R2c
+-> ssh-ed25519 1SxhRA uhklukoJL+Un1OLTjzu4/tW5FlnI5PxHmqkPEjqqbBg
+DPiA5zqTUlTdagC6gaz/vlEWP71DCEVWB5DWw1s61GE
+-> ssh-ed25519 ch/9tw Oml7do+MW+p8DYOyEazBjbdKNSSUUTAMPsr44xr5Zyk
+CrIGkD6qJYKcYLaV2yOqaTzlPjGUZ5dTjOQRyeDJ+C8
+-> ssh-ed25519 CpJBgQ fVac72oIPKjTYdnWD+g0AmpioPwtCo7AH94DNroyB38
+1Y1CBtJGgqYhXWRst0vUlcUhV3wQ8ONgJd8P3JbcOLU
+-> ssh-ed25519 aXKGcg G6ic4O1dPsnWSntXoK/85BdyMkeRb9sp9eJwuBShJAc
+AyXRzW7Mn3zB96SiUpaX/gnnbbO/2AszySviul96xNg
+--- gMS+evsP3XoJC1Zo8AWqNoThdm6KQ2ZiU/+/DWfB5/w
+/¯ð±büU†–ê­NØÏy<07>Ø݃)¤Í`†a9s<39>DÛü#t‰Ð«]ý©	7¬½ßkÁ†ð´<C3B0>1Cßã"=Ââƒ7¶\
+C%òó$a

ops/secrets/panettone.age

@@ -1,15 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 dcsaLw zzUe0JqhICtd/kgZnXFpwaQ1Ma6nqy/hMWaOJpRHmDs
-4cR+OnWShG6MpB/u0yfsSxplEch7x7DbygfBiJGxOOs
--> ssh-ed25519 zcCuhA 0RZEYC9IuazO9fROalwoOCIgc0j+rNBP3gw7SKG0yEw
-mPRhN0hvccEr1A9ihWAFMH4/24vpBKpxBVq4BKBMmYM
--> ssh-ed25519 CpJBgQ VrmfTtTVxuQmpUxMxtXtCnr8pFyqwtdyLHdbzYrlKlM
-kHgEdPmoIOLnGuMF5F5Ol1yZWcactSE4OZI0BSmDN+g
--> ssh-ed25519 aXKGcg On4jwgsH504ZjYRwfw5oAfIDk3wU0+xgd43ryAn9H0I
-fayzht1ZPPiFCjuYTdwVtJu2nOUg4wtp5IipOR4oJm8
--> ssh-ed25519 OkGqLg mubp0xI0fvsKOAUaNaftFkHJ+bxgFHbgjn+A7sR8XVs
-X68Zr8HvC4/XPC0AFIA5f1SKu7NSR/23oeX8cW1qfis
--> ?`-grease
-hOy2Rwvk6+vXpHWWA49Wp10wKbw9TfsLXw
---- 9MLGx6BVm40C0CSV3bq6dnXrpy3QunBlh2/uO5OisUU
-dzGž<ÕåÁÐY×A÷Vs³ð/-%ügªú.Ýe@†,Zñ‹æ•üF˜W收&æî§ó<Oöq@¾>wå‡Ì›Q‡>™-gÇ“'©Ì†`
¡¶¨XöÒŸÏP8—³x<RNv·9×#'/)À¦g‚¦úèÝm2õ©Ôvðý<,ß7…÷ãÉé‚¢ÐÇq¯¦ªvç„<17>Q»·AOÎ-óÚ˜†+gåcÊ#Þµ<C39E>—å½î¢*–¢°Ÿeí -§·)Ò ù;
+-> ssh-ed25519 OkGqLg BEro34+d66EFK/Pt2zxpaT51YTaLeOPw6lhNIIZagz8
+Bx6cUI3Ga45MvZtTCSbpoXAaQL/gi7zQp/4vyTtToFk
+-> ssh-ed25519 xR+E/Q 7/gSLPTDl4F3LINdadlCa5b8MQC4y+p3ZYNlflxrdDw
+VK3WOVkKjola4munAfp0JMKYmnoLLIv9OHfZh9ysbkE
+-> ssh-ed25519 dcsaLw Ln1sLkvM+qcEkEhO7u+lYahwmNA31wb8/uxJJ9AVWDc
+aYTOrKKROC3giyyK+3oB2weL1OU0fognHy3KEMKv1Q0
+-> ssh-ed25519 zcCuhA c8s6YX+iduL0LROMQzOrIlyyMVB0glpO9fadGtnBtRM
+xKS+rami2JqtA3358i9ZmUald/l6RfZO3oYCXMGsaQs
+-> ssh-ed25519 1SxhRA QQhuhBCDNNRDjMwLXmdENnyQ8FLMGPPslz/n8HJskwg
+UFYbOrYp4Iv5bFGva60DoDnili4pu3ddQwkc6D7McWI
+-> ssh-ed25519 ch/9tw qbpidc793ukjbneLp9APflMGwUv1uz396OQHWDo7Ezs
+vqWqCraCcf7JfVUHXipXF4MIsWZJ8ctdIqlMQWTFVbw
+-> ssh-ed25519 CpJBgQ KUTLbnm2fGlMTBReyTkZ4vH+17rBbJEvNKMXEeKGcy4
+LyAz0fKXJwBleg078S4SX445hG9s/Wpowecm/dMVG24
+-> ssh-ed25519 aXKGcg /e2fcowJ2RNt70e2RuwSe0aTCTR7zX2m6EGWyizdvEk
+JWkvonXii+mquOF88RLyYTf/E/UDfvHrc8B6gptWkzo
+--- VJw7GLwGofsvJj+nlHgWDOnCud/Qjmjy9oeN15npnpw
+wñûõåé{L…x÷©Ç-]dŽ
XÇ@,§™.1Î<EFBFBD>Ÿ%ÇI“Ep—“2:R”XNÒU<>nl­<6C>ÿ?@*âºCß©‡‚‚ÞhøÜÍï
è4U‚–@í£¨IânÜÄ<C39C>—­J‘Ìž%ˆ-IH ¹ë‡Šçž.ùù§µÈ™ÍÖ^I]ÒäËÕ=ØöÀ´PgÉ:›xSö<53>Ñ<EFBFBD>¼KùņùIâ(ÿ5<%HÈbhEµ{…8¥6N</%#“ËÖg`	[YÅÕóÄýðö¡Ë

ops/secrets/secrets.nix

@@ -1,8 +1,4 @@
 let
-  flokli = [
-    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPTVTXOutUZZjXLB0lUSgeKcSY/8mxKkC0ingGK1whD2 flokli"
-  ];
-
   tazjin = [
     # tverskoy
     "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM1fGWz/gsq+ZeZXjvUrV+pBlanw1c3zJ9kLTax9FWQy"
@@ -25,45 +21,44 @@ let
     "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJk+KvgvI2oJTppMASNUfMcMkA2G5ZNt+HnWDzaXKLlo"
   ];
 
+  flokli = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPTVTXOutUZZjXLB0lUSgeKcSY/8mxKkC0ingGK1whD2 flokli";
+
   sanduny = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOag0XhylaTVhmT6HB8EN2Fv5Ymrc4ZfypOXONUkykTX";
   whitby = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILNh/w4BSKov0jdz3gKBc98tpoLta5bb87fQXWBhAl2I";
   nevsky = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHQe7M+G8Id3ZD7j+I07TCUV1o12q1vpsOXHRlcPSEfa";
   bugry = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGqG6sITyJ/UsQ/RtYqmmMvTT4r4sppadoQIz5SvA+5J";
 
   admins = tazjin ++ aspen ++ sterni;
-  terraform.publicKeys = tazjin ++ aspen ++ sterni ++ flokli;
-  whitbyDefault.publicKeys = admins ++ [ whitby ];
-  allDefault.publicKeys = admins ++ [ sanduny whitby ];
-  sandunyDefault.publicKeys = admins ++ [ sanduny ];
-  bugryDefault.publicKeys = admins ++ [ bugry ];
-  nevskyDefault.publicKeys = admins ++ [ nevsky ];
-  cacheDefault.publicKeys = whitbyDefault.publicKeys ++ [ nevsky ];
+  allHosts = [ whitby sanduny nevsky bugry ];
+  for = hosts: {
+    publicKeys = hosts ++ admins;
+  };
 in
 {
-  "besadii.age" = cacheDefault;
-  "buildkite-agent-token.age" = cacheDefault;
-  "buildkite-graphql-token.age" = cacheDefault;
-  "buildkite-ssh-private-key.age" = cacheDefault;
-  "clbot-ssh.age" = whitbyDefault;
-  "clbot.age" = whitbyDefault;
-  "depot-inbox-imap.age" = sandunyDefault;
-  "depot-replica-key.age" = whitbyDefault;
-  "gerrit-autosubmit.age" = whitbyDefault;
-  "gerrit-secrets.age" = whitbyDefault;
-  "grafana.age" = whitbyDefault;
-  "irccat.age" = whitbyDefault;
-  "journaldriver.age" = allDefault;
-  "keycloak-db.age" = whitbyDefault;
-  "nix-cache-priv.age" = cacheDefault;
-  "nix-cache-pub.age" = cacheDefault;
-  "owothia.age" = whitbyDefault;
-  "panettone.age" = whitbyDefault;
-  "smtprelay.age" = whitbyDefault;
-  "teleirc.age" = whitbyDefault;
-  "tf-buildkite.age" = terraform;
-  "tf-glesys.age" = terraform;
-  "tf-keycloak.age" = terraform;
-  "tvl-alerts-bot-telegram-token.age" = whitbyDefault;
-  "wg-bugry.age" = bugryDefault;
-  "wg-nevsky.age" = nevskyDefault;
+  "besadii.age" = for [ whitby nevsky ];
+  "buildkite-agent-token.age" = for [ whitby nevsky ];
+  "buildkite-graphql-token.age" = for [ whitby nevsky ];
+  "buildkite-ssh-private-key.age" = for [ whitby nevsky ];
+  "clbot-ssh.age" = for [ whitby nevsky ];
+  "clbot.age" = for [ whitby nevsky ];
+  "depot-inbox-imap.age" = for [ sanduny ];
+  "depot-replica-key.age" = for [ whitby nevsky ];
+  "gerrit-autosubmit.age" = for [ whitby nevsky ];
+  "gerrit-secrets.age" = for [ whitby nevsky ];
+  "grafana.age" = for [ whitby nevsky ];
+  "irccat.age" = for [ whitby nevsky ];
+  "journaldriver.age" = for allHosts;
+  "keycloak-db.age" = for [ whitby nevsky ];
+  "nix-cache-priv.age" = for [ whitby nevsky ];
+  "nix-cache-pub.age" = for [ whitby nevsky ];
+  "owothia.age" = for [ whitby nevsky ];
+  "panettone.age" = for [ whitby nevsky ];
+  "smtprelay.age" = for [ whitby nevsky ];
+  "teleirc.age" = for [ whitby nevsky ];
+  "tf-buildkite.age" = for [ /* humans only */ ];
+  "tf-glesys.age" = for [ /* humans only */ ];
+  "tf-keycloak.age" = for [ flokli ];
+  "tvl-alerts-bot-telegram-token.age" = for [ whitby nevsky ];
+  "wg-bugry.age" = for [ bugry ];
+  "wg-nevsky.age" = for [ nevsky ];
 }

ops/secrets/smtprelay.age

@@ -1,16 +1,20 @@
 age-encryption.org/v1
--> ssh-ed25519 dcsaLw CW2Lgm0tSWUDwKSNSX/aLkVzQ/QeEeQgU3NITpz2D0M
-F7dA+zWdCz21s443bj9zCz6lBsRlFIxiG+l8CdbuPFk
--> ssh-ed25519 zcCuhA l8rsBoYDwhUB5stbeGXYTQ4Fz745ywXFCOQZn2cMBW0
-TycVcUZjR2TDv5DPC54+RwoU6Fj4QpRUJj1j0HM/JCE
--> ssh-ed25519 CpJBgQ CbwZO5LmSxd0HRYkf+lV+ymFcXSn/49GAPHG4l1I7gw
-xSmab5+BnAZF/B0n32xX1qZPdHgfoEMGIuZqlpnISjc
--> ssh-ed25519 aXKGcg Tr+odf9p1RBrQK1guR6ToeN4wG1KLA3jwiPIkgyEjws
-TaeCnjiRp8VZoMS5qs+OfVbBc6zudayD693h/eGvVOo
--> ssh-ed25519 OkGqLg Dmnsqz6PKzMd6w4t+l6+EWuia+stPwSEtu00KVuAojo
-rZ/i1WJhrCM/ZQTAroRRSjzUVJw2UJlPUe1uHYqSscw
--> w!^Z-grease i86O2 i0.Rch
-/zsRadAGYzAY6F/J5m6lMjmojkN7NbY3TbfQbA
---- /rQgwuY9SVGLKeUzY5P6c+sGQ1I1aw5cQxmO46QKDSQ
- é(`¯¯¤U ¬ù‹š,ãÃc¼é|Ò‘Pæç• ¿9á@&	«ÇgMß’
-CHâž3ik÷ÁÄ3#|ÝåÖgž¸MÒÖ³A•´—g¢AÖúnZóÇY—ât¨Øû¯Ì2¹‰±ÿK2Þ˜…YÚ
+-> ssh-ed25519 OkGqLg 7zaZRWxX/e7RaqYsQkiG8tm2V8rIZi1bpuYj+ZF+ix8
+H3etDuPK8PPghves5bnasQ01WTqvBnqnvVDGAd2SpO0
+-> ssh-ed25519 xR+E/Q MGbPr/UpqvzxoCsfyXrWhpiB+IGk2qaprlDnvQAdHiE
+n9ikSISxTS3etvJxudA2sNgGkm0ZH8SuyuDxjc0ts2Q
+-> ssh-ed25519 dcsaLw bHbnaG2LHkdARhDRUqCZD0FCoB6TakuSFDrXskAz0wg
+hav1GWBSzhXPvOQN7Ta3nJhPe4LU1arrZmhFGnDhQek
+-> ssh-ed25519 zcCuhA wV0ejBHKzTn1kQTm6apJy9GmiycPxiW+OO7VM5zjnGY
+lBpcnbmSeqgAolJ8LWlr+ZuUEM7Pn8yLbptahmuSWRg
+-> ssh-ed25519 1SxhRA Yz9ewxHm0cAc7t5Htm5eoYjXaGeYE35PPIWL5d1awgA
+5jbHeDlD1ttxzts1+7ZFczHo/Jc1gxZ6/j2IauPFV0g
+-> ssh-ed25519 ch/9tw tE5DuYHdqoiHrQlEfMcql1EXa6IWS9OSb3YE/hJaYCo
+ovcxm/RHfY5JMQ4Gy7sjLWw3kPNo9roLeaZKGe7GYLQ
+-> ssh-ed25519 CpJBgQ 6YQWpxreZnaZQzB5nnE6BIY3mzKh/jyGfo4d1DIZMW4
+ZAkw1azFo06HCc4kr6tETekIYde8fZmqTB50EpxYqFY
+-> ssh-ed25519 aXKGcg uPId6FHvRb0G//LQsZydlL8V5qaVVyR3uMa4NtUtqwI
+165tSBFCGp6kQSXtmtT61r5v6v4zDzNGEh8hXNPu250
+--- A5ibslMc4EiRcYPX2he5YSB/u6BrHF7+2Eh+yQzv5BU
+´£á#Ë„›§Ö¨Õ
+P<EFBFBD>fþ|¶H+ …Ó
Vk<56>Aîe$ùËF‘bYú?üA¬(€~n*N<>?¨<>©æI#\„õ°œ.¬š¾P"齕ݲî«ôb÷¤ë)¢Iûšˆ%e6>Ðøt•e
ûg â

ops/secrets/tf-yandex.age

@@ -0,0 +1,17 @@
+age-encryption.org/v1
+-> ssh-ed25519 dcsaLw M/Q/SPfYHbP1Fu58r9+YzPemEVwycadHiwpsT0EgG0A
+YRwnS7LID5jRppBKONHTnYAG9yL7iGzqE5Kb5We/YVA
+-> ssh-ed25519 zcCuhA 2E4mTf1KRjknhvfNQsvJ3n2PxI0H8PwJ42yAJd15BCw
+sunGwSgkNJUBjqgouuCfbC2jVgRLCxah1pyJBsnxs20
+-> ssh-ed25519 CpJBgQ hxMK7R7fcZhy2JAKjIgVVoCDFOyJcRT9EVPD5HQ7/W8
+dS3dwz9nyfGKbmG/MxKN5yhtsoFjhxu4ODUQBd2SnXE
+-> ssh-ed25519 aXKGcg XX5nMPWQvaazgGpuRyCpdnUit0EwYUc5ZfU/Y4PfzDA
+Avqf9E83/z5RTJy85IP5gFuw+HYdNCzGlvfUaQyU4c0
+-> ssh-ed25519 C2zWnA JwQkckkpIBznH8d+xqbH/BQ542lJfhOEeC2Zy35lmlU
+unCT8sZn9es9lZb9NzXZvk4gu/kM2dlmeGzYfvA6Plo
+-> Jg6zP>5r-grease xyn
+HbAOtgdTIPa25802PNNPfTvtpiZSTzonaFO87U/KV+1LTRhI560rGjckMLaf2MzC
+xWW7qwSg0gA8uVec99KugA596W8x
+--- W60cYV6jeVgGngYnbG8jLUUQ5O/UTgjdpqYFGZxxDyY
+=^Ò½¯4+<2B>ÎnLÝo=³MŸeô2W·/}i·$¾+Ž[³eþÒo ¥A‘MðÈNy5¶“!t)†w 4óUÜMŸ¸'@üFâ·Ÿmæ§ AÒ×
êÚ\
+ˆ—…w)žiazËzbùÚÉ;…¿âùᶷË^±’s^,nœQ4´™
¼÷{V@lˆðÓ£òRiúþŒ¯JPV
/k|wÇ

ops/secrets/tvl-alerts-bot-telegram-token.age

@@ -1,15 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 dcsaLw JGXCnhez0LnlUV8eOitxizmxw/gV+1taBRhNvwvVcms
-qsRTOpifnoc0eorFjd4UlP7O3hkRR3KjDUcImASK0jY
--> ssh-ed25519 zcCuhA KUcyaHcmuqCGtJBzvc2UK17gRrjzuzIxll+TS9Q4nWs
-CAJ19ClA9Tqj1fcYySq+K9gdZe6Uv0toZLnhlovr3tM
--> ssh-ed25519 CpJBgQ OAE+u9JuC6KoefjCOTj4NkQElZRe6/EEIAGBN/XelnU
-M9MHlKxbEBJ+gACo2FiYqmm1cAoYW31+nP16qnVZ7Zw
--> ssh-ed25519 aXKGcg Ll6v6v5HpUIEuOzjpVsPMmPQMnNkmyB4fz/YwNXfCHU
-MmFQy2WkKn5SM0bhe4NNe/lMnneKoOF+Ufq0t0QjNbw
--> ssh-ed25519 OkGqLg PS6KLwat1z2BSQ9sIKDaryVU39EJR+iiAaKSP/KSPk0
-qUQP2f4MFk83zQ9edlSNC8jwpJvmp2xhOysd8rnYzW4
--> >NI-grease @mOcHT z|%,s- mw^c *
-zu0M2pS6v3zehnLg
---- jltBYy9brAtpkEIqPoGmIVe3s5XnWtpa9EmuXlAf91c
-št”dX2-¹"ÄÓ#Æ1›ín'þƒ\‰ø'{Dlw;PÖ´Ð@ÚÌ<10>™Þ{ùßB	!y£+™xõË
ÐíWµ¶ÄB:wtÙqph
+-> ssh-ed25519 OkGqLg FOAaUDj6nO1t5hnf0aGzWpmQkhqU9VP+SRUompxV9GE
+JK4da9hBvI7NN3gnCUI/tmhUFEtt5KUuBoLfRCoFhqw
+-> ssh-ed25519 xR+E/Q wJGkb4gj0iz3E+W5mIbTAeGFVdlznevKH4EEibecDF8
+WUAFLhSrjQgUTkZ3xzVuT7HHwAc2N1HKrIdGRIEutD8
+-> ssh-ed25519 dcsaLw QkXSrs57caaESWsgGx2oIpbZd7eNL5UH6bU0g+hFxEI
+zbNePgbWmX+87aIqGvY0HEpvxxUQB3b4qoGImH28m38
+-> ssh-ed25519 zcCuhA FNZlnMpL4AhOu9PWTDNHbWhOGcJYPAdcZA8YNmgGTR4
+rbE9zXLbKEANF1jc455/2G9wXbvaeRwbw1JdfceQo8Q
+-> ssh-ed25519 1SxhRA rii+s4GOfeBz7n7aRVTkT97vORRvdsR1mX0Bbgri434
+dmMbDxVKk6zBro9hZ53JYZNlUa1et0ZYvvf3ko+QbAQ
+-> ssh-ed25519 ch/9tw ACKJ0RJknUewijCbuOaBv4qNleB3gXYnPo/cnjnoWkk
+GKEZVXPUZkwQ++quIUWxJS1MCo1Bg+naHiEhzMiB3kc
+-> ssh-ed25519 CpJBgQ d8Dewm0HC+bMan6QB8EPL+tQGoem0Vx5af9UehAq7UA
+Dcf4qudBi1z5PAxxhm82nBQFQx9TFeHLfcsV+XcdwQY
+-> ssh-ed25519 aXKGcg Icrf3Vs4SyRWqbnvfAJURuaWEORyGqOxONcdCakWfwg
+wVdLjQuvuTc/f/wDZIv32udqpVNdlLWZ4mpzT6Pur8A
+--- mk6kDLN1EEhHZgUbS/RRqardbjWFBXvQZJV5ikc7vu0
+ÌÕÇ'<27>'c3Q˜t™¾¬àÍ·/ä°º-¼‚Ó_›ÆîÊ[p¹Ú…Ðt,%ÃѨü{O‘a©Yª©¤…Ôص––"WÊ¥Oøó¹›À(£÷0

ops/secrets/wg-nevsky.age

@@ -1,17 +1,17 @@
 age-encryption.org/v1
--> ssh-ed25519 dcsaLw fAd2MnJBU3OG7KpHvd6rhRVQuMl5pGUOlx6zQ1HVpTU
-hwoKpHUvpHp/gLFhtwTOyJLBeUyryrZAf8TzDsaoMUg
--> ssh-ed25519 zcCuhA B2ZIcHgTjg69iprbGkKPyGGExK+kP1l6MMYX4czpOVM
-xomAnf6WhEM78GWvtAtCS/yw4UfeCT3Ph3evbLp0yQk
--> ssh-ed25519 1SxhRA uJNHTJFigivTGSKNzd4oqEhEIFF/aWwWQzovxwiVSHo
-VAzriez/W6hZKicze7rOYs7YL8vxPxVoWzMe9yawyqA
--> ssh-ed25519 ch/9tw nBm9P9qvUkZSYI+CKN0kjXzSuD6sg+uMvTux9yTD7V0
-Kt+R1s9tEPk+e5ZeskmZtBzEvm25B33KCQwmjnfuVNM
--> ssh-ed25519 CpJBgQ 6g8GbJ/zZkAb1pBpqA5Jm929aIAJlepe1sPNqhAuAWM
-gYCkgAQw2nF0wcPMZruvhBqkC4a2BxYK8kWo+R9ll44
--> ssh-ed25519 aXKGcg rfGH2EO9/soo/duaZlt4hBic4KxMDR+tw8JJ1Un+u1U
-FzyiK9NT7NUM+oQph/EB26PfuLsLQVYsKwqeBHGaRI8
--> ssh-ed25519 xR+E/Q 3w7vMdS+Iragj8garW5/F0ZL28orsyewbvp4i8szNl4
-zuEEaHd2rTfMYuLvQ19TuHOX5UMmSZABD3grJjEnsG8
---- +e2kcaRvPwsUH/XG+ChROPjyZHLv4mfpSBmmJCr/4UM
->S1	:ÔŒuÎ5ܘ¢ªÇ‹Æù@Št)šïOéQ7õõn^ïY,µFMͤ6€^õ„»¯>»¬eÞÇ”+~]Ûù‚õÖ
9<>ê.Z
+-> ssh-ed25519 xR+E/Q pAv2Rm0oj9HJu8LAIRbT+bvNOufRcDTLlLfanvM84y0
+eTOICFyxEt3b6Kh9NbKMmt9i3+GFsgk4K+jBuR8LjUs
+-> ssh-ed25519 dcsaLw cYYa3+xqONMvU4y4LsWZ5VZBrQoMdoRYbII70H0x7hw
+w7XolSOTiX5WdrnURn/PtAGriMz4n0rBUAulOU4pP3E
+-> ssh-ed25519 zcCuhA xwUsUilN81ZHuqE6gCzmUddjD+gLd6bkDclSb73K+08
+H2uNajL/IDn+hXJyehDG22Zu5k7RZmjWyWtJnzCxAEw
+-> ssh-ed25519 1SxhRA rkPyrom+2W0BWU6S9Vy+h5ggrdjEQdVcFd6onYENNmE
+AuonnG8d2RwpLUR+FAgf4TrWCmB3dxnO3OFLM4+EVH8
+-> ssh-ed25519 ch/9tw DJs3TcbTmAx0HqTWoyvugqfqxdZ13kqerOlaJKADljA
+bxyxi0/J7MBm+Hlq6CUM4s9+j4M3E9f55lUgMKx+ABc
+-> ssh-ed25519 CpJBgQ ralv1E55uSriSrM8X+rOr/h70dbEOVOfux7U20cky0k
+lflA+jocbQn7dricKpH6iBQ3P2K+g8ZDvyuRkyCUL7c
+-> ssh-ed25519 aXKGcg Fb5vBSvT0RaO5yXhd/b/75QdC6IPSDpntUHhtdhhFGw
+UASa/ristknh342EyYO24qAT+rAaWI5ks00mSTjPOQY
+--- e8mOir6/NeozcVmD17lJkrFVIffhOAXR3kKq5OgqbRw
+%…ç»Õe¸Ì‘×lAظ>5.48ù}ˆ¼@þáÆD*uÏGˆ×¨y|S„—-F‰ð*&áªÅúLa¼
µþ,XY¹À·=õ'H