hydrogen: +hoot

nix/configurations/default.nix

@@ -195,7 +195,10 @@ in
           # Raspberry Pi 4
           hydrogen = {
             system = "aarch64-linux";
-            modules = [ self.nixosModules.i_am_builder ];
+            modules = [
+              self.nixosModules.i_am_builder
+              inputs.hoot.nixosModules.default
+            ];
           };
         };
 

nix/configurations/host/hydrogen/default.nix

@@ -1,4 +1,4 @@
-{ modulesPath, ... }:
+{ config, modulesPath, ... }:
 
 {
   imports = [
@@ -19,4 +19,15 @@
       host    all             all             10.0.0.1/23             trust
     '';
   };
+
+  # hoot, the discord bot
+  services.hoot.enable = true;
+  services.hoot.environmentFile = config.age.secrets.hoot_token.path;
+  services.hoot.configDir = "/var/hoot";
+
+  age.secrets.hoot_token = {
+    owner = "hoot";
+    mode = "600";
+    file = ../../secrets/hoot_token.age;
+  };
 }

nix/configurations/secrets/hoot_token.age

@@ -0,0 +1,13 @@
+age-encryption.org/v1
+-> ssh-ed25519 MpsldQ zxw2spOI1UfE5uXTEgJFnIpRPJlWyL883pWvW7lprXE
+E1z0nHV4kixW9y0th42yzjXKIR2kXG1XqLabqIPqrnI
+-> ssh-ed25519 mb5p2g nBNkieu56+sSmElxAtJ/PKtwuS4gi6QoeOZMYz+WOUc
+Yh20CBPlOsJNstJQuQE/fxvBGR/ZzNTvPCH1liAQFyM
+-> ssh-ed25519 psbyeg SJkcb4MWmmZrJiYUVxzvOvQlf3c3ysGoCjFTNd70uic
+dxDrqffqeepttaR15309K5vSknYJAb0Rs25v0wVH868
+-> P5==-grease WCaKBg|S ~O"H |_p*V D4h/>c
+d74EwiOKdZF4r9OAziDXeveHfayi8iksklevtR5bZUslnVnuQF9zMgftlh06Cx4m
+69eCGvkFN0q5S/5QMrWO45yoj8OIvqux0yYnUsGrpmGNV0ebYw
+--- 9ZxP7G/SO2YCGC4v2rIl1Bd+KQ9OSh7fS+pFPyUoaAE
+ÉŒLH¥÷Žøä1:j,4fÅ<å2/æ†4˵¦†#®¶,KÊ[ØQ«XûëD‚DK!Ø%¨¬œ+ßcéÓ
=ÂbÌT
+u1É
jæN ú,fH=Tr@Ê‹—V<Òg˜<)z”¨%3£I€À‘(<28>Ü-*¹YæªÎµ$耯tW

nix/configurations/secrets/restic_backblaze_repo.age

@@ -1,11 +1,12 @@
 age-encryption.org/v1
--> ssh-ed25519 MpsldQ DlnCn7QWh7TtY7NbPiTBoIQwLHeFTxrHgyKPBP1hAxk
-/za9VsSudDv39eSMzzfrFmcc5tnaMNCfsUcmaW7bqQc
--> ssh-ed25519 mb5p2g +bZ2KINf5nr73nbfOnIYmAo42IEPENB6gIlADXDsfAw
-9/MO4sfKE65p2o3bcwLEdA1jEvvJJuuEJ6KglXMFz5I
--> 8-grease td:w96 H PpMYye%0 6xQi4}
-EEw5WdqpKeHzzgrv+eWk2w
---- g7N/xgt93ygNPdmjVhL1fhfVsZr0QVpzoZChU01Wrpo
-FÔňÄ(wC
2«óq`ŘŰ+í|}čv<C48D>Ó>IˇGążÎ4ń¦Q\m~ę“I)MážÎGŚ
Ŕć˝?eÔžWß
-f9}¬ô¨÷§˛pÔg‹5Jş•ŢCâĹ
-x,>
+-> ssh-ed25519 MpsldQ KVGW78dxYDmoDYKPT8Y+WD1KYZxMWBRxpbsOrP+ArRQ
+mrVMh4WMnHWy2R/fsQiUz39iTg3PKNzSk+Y+JcZQ4Hs
+-> ssh-ed25519 mb5p2g YuL2syRtkbprejmn4W49uI3SmDG5nBhqcFgw8cI94gQ
+Tjy3yhgHT/+Q1F494f9Z+XQC4J3HLx3fIt8dBZBZ0RY
+-> ssh-ed25519 psbyeg f0UAqxkqbJhvxhzcRuEIykvhS2g/AERuwk2sRkpNUTc
+hqHXtrF4QehMRsXjnJvtJ/BPM5gEkcOue/W63gXukNM
+-> 'blw8-grease c/x|ZF \f m?L6&2Tu ||k?VBP
+w/6IGpFbgaD27JwbTuW3EiVD8JrSdhSHVD1DLHBsErIem1kVVV7/QTyS00phOcVJ
+GcIc/S5WawpC1/jYKEWMrCJIMUp3Urq1uqS57xy2kGJUTBmKjgTS
+--- ke6452dFEGikXLKbmbNmMEEig9DSfSBUt9tsKB4S0No
+ñe3Ý]*“ ¿¾Ö<;’ÃØä¹­ÿŸl<C5B8>@±
»8ú:)–ÀÞÒ­zª½èkk7=€ªò^YØšwDä¸ó}<7D>½c‘<̺¤d´ ÕqW÷q<C3B7>âÖiÛHR¶‹

nix/configurations/secrets/secrets.nix

@@ -1,10 +1,12 @@
 let
   carbon = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKf9AFsIEjkf0c5Hu73Vr4rKkGKzMkgYBJODw1Vvi2DL";
   bismuth = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBt+MINzxBF8uyFIuz/UvMZe9Ml+qxU0hxxi7UAmUzpc";
+  hydrogen = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIISE88i0IvL1l4snmMH+ygsOkbSPUZxvhfCgo78S1aRy";
 
   all = [
     bismuth
     carbon
+    hydrogen
   ];
 in
 {
@@ -18,4 +20,6 @@ in
   "restic_backblaze_pwd.age".publicKeys = all;
   "restic_backblaze_repo.age".publicKeys = all;
   "restic_backblaze_env.age".publicKeys = all;
+
+  "hoot_token.age".publicKeys = all;
 }

nix/configurations/secrets/wireguard_psk.age

@@ -1,7 +1,13 @@
 age-encryption.org/v1
--> ssh-ed25519 MpsldQ f53rQ1v2Y6ZARyUJomr2Fc3RgxXwDZMAPABUpDVbpVo
-8E7UgrxqldRnQ/f0O7D/8KELzK+o3kYE+KFjsa04i7E
--> ssh-ed25519 mb5p2g NkeIOZCYYKmedF711G6TmLhvqQKUaMYAmIJ+NA0aGU4
-k3mQmsUV63ZztbIafh/kFVX2ZbS3qBPDM3pyiqaFe7U
---- azw9C4GqoBUIeNW59TCYFOuNDBj6qKuPF2DVOdX23GM
-cšhòŠiglzJ!üöÍl”ùfT%³<>«ßñÃH”˜*ÅÌNSSEãNËëT„ë>¿ð’›´ÂÈäÐ~•<
è^ªyÞŒ1óNHõê¨
+-> ssh-ed25519 MpsldQ 5iHGQAogH6wXGwnfThzuQhPjpWEHmn9DrZ+seadO1Bc
+Ht2XvL6aIJ25jSDzvkcwfN/MUDLTtQ5SSGo/KE5MyHI
+-> ssh-ed25519 mb5p2g vlfxHS7400pQ+zSBysB4kUoaOstKhLFg7m7SHN3Z3Cc
+1CwM2CKEGX6vyjrqCEwYQp/ehPsMggK3dtIoPab0HfU
+-> ssh-ed25519 psbyeg OJ8Y6tY9qTHXCb6UzIqgXrPfq16MlHt1hbRZ3XvQdRY
+Sfe2c9DXwtL5tl75Ah66x0hOnG0h4ZUseNsVVszDDVY
+-> s=?q[yn-grease
+43C5I6pBXZZcncfqjaNjkwrOo9i2jvKEG5X+DEDs0Nf5vfe/5KPjkZTHQPrGzspP
+1W3XSg2QOUZwjUjXyxFLhxbLVlq7Bm+JCatylGZq9zbf3bsWggMkNzI0aq1L
+--- Hu/fnz5vEGiWlIGK/fnNp0B6fN0lWWOznVD4ADQyy9Q
+F%cÞÆÈ—N»›Å=æ¨ãa^Aú…“`8ëImªµ“{½<>r3e=ß„g=DzYÐF=€v<¼	D¼‚‘
+Òž£"w=kyC»:JÄ3™>