plumjam/nixos - Change UH6ZL2HFCGZTK5LBAIWXYWP7F7ZO5ZY3OLHVCY6DOCDSH6ATSILQC

chore: Move all secrets to `secrets/`.

Created by PlumJam on December 31, 2025

UH6ZL2HFCGZTK5LBAIWXYWP7F7ZO5ZY3OLHVCY6DOCDSH6ATSILQC

Dependencies

In channels

main

Change contents

File addition: secrets (d--x------)
[8.2]
File move: z-ai-key.age → z-ai-key.age
BF:BFD[9.9] → [10.724:767]
BF:BF[10.767] → [10.130:130]
[0.2]
[10.130]
File move: password.age → yuzu-password.age
BF:BFD[11.16324] → [11.16960:17003]
BF:BF[11.17003] → [11.16342:16342]
[0.2]
[11.16342]
File move: id.age → yuzu-id.age
BF:BFD[11.16324] → [11.17948:17985]
BF:BF[11.17985] → [11.17005:17005]
[0.2]
[11.17005]
File move: password.age → plum-password.age
BF:BFD[12.7] → [13.513:556]
BF:BF[13.556] → [13.225:225]
[0.2]
[13.225]
File move: matrix-signing-key.age → plum-matrix-signing-key.age
BF:BFD[2.917] → [2.937:990]
BF:BF[2.990] → [14.5240:5240]
[0.2]
[14.5240]
File move: matrix-registration-secret.age → plum-matrix-registration-secret.age
BF:BFD[2.917] → [2.992:1053]
BF:BF[2.1053] → [14.5687:5687]
[0.2]
[14.5687]
File move: id.age → plum-id.age
BF:BFD[12.7] → [15.1010:1047]
BF:BF[15.1047] → [15.596:596]
[0.2]
[15.596]
File move: password.age → plum-grafana-password.age
BF:BFD[16.447] → [16.2065:2108]
BF:BF[16.2108] → [16.1727:1727]
[0.2]
[16.1727]
File move: forgejo-runner-token.age → plum-forgejo-runner-token.age
BF:BFD[17.1162] → [17.1943:1998]
BF:BF[17.1998] → [17.1601:1601]
[0.2]
[17.1601]
File move: forgejo-password.age → plum-forgejo-password.age
BF:BFD[3.156] → [3.177:228]
BF:BF[3.228] → [18.1344:1344]
[0.2]
[18.1344]
File move: key.age → plum-cache-key.age
BF:BFD[19.304] → [19.751:789]
BF:BF[19.789] → [19.323:323]
[0.2]
[19.323]
File move: password.age → pear-password.age
BF:BFD[20.169] → [21.498:541]
BF:BF[21.541] → [21.100:100]
[0.2]
[21.100]
File move: id.age → pear-id.age
BF:BFD[20.169] → [20.910:947]
BF:BF[20.947] → [20.187:187]
[0.2]
[20.187]
File move: netrc.age → netrc.age
BF:BFD[9.9] → [4.644:684]
BF:BF[4.684] → [4.328:328]
[0.2]
[4.328]
File move: password.age → kiwi-password.age
BF:BFD[22.2123] → [22.2538:2581]
BF:BF[22.2581] → [22.2141:2141]
[0.2]
[22.2141]
File move: id.age → kiwi-id.age
BF:BFD[22.2123] → [22.3305:3342]
BF:BF[22.3342] → [22.2583:2583]
[0.2]
[22.2583]
File move: environment.age → kiwi-github2forgejo-environment.age
BF:BFD[23.442] → [23.1361:1407]
BF:BF[23.1407] → [23.801:801]
[0.2]
[23.801]
File move: dr-radka-environment.age → kiwi-dr-radka-environment.age
BF:BFD[22.2123] → [24.4282:4337]
BF:BF[24.4337] → [24.3333:3333]
[0.2]
[24.3333]
File move: key.age → kiwi-cache-key.age
BF:BFD[25.1717] → [25.2113:2151]
BF:BF[25.2151] → [25.1736:1736]
[0.2]
[25.1736]
File move: password.age → date-password.age
BF:BFD[11.30764] → [11.31400:31443]
BF:BF[11.31443] → [11.30782:30782]
[0.2]
[11.30782]
File move: id.age → date-id.age
BF:BFD[11.30764] → [11.32389:32426]
BF:BF[11.32426] → [11.31445:31445]
[0.2]
[11.31445]
File move: context7-key.age → context7-key.age
BF:BFD[9.9] → [26.514:561]
BF:BF[26.561] → [26.100:100]
[0.2]
[26.100]
File move: environment.age → acme-environment.age
BF:BFD[27.23] → [28.3469:3515]
BF:BF[28.3515] → [28.2885:2885]
[0.2]
[28.2885]
Insertion in modules/common/netrc.nix at line 1 [4.82]
[4.82]
[4.83]
```
{ self, ... }:
```
Replacement in modules/common/netrc.nix at line 6 [4.82]
B:BD[4.153] → [4.153:182]
```
    rekeyFile = ./netrc.age;
```
[4.153]
[4.182]
```
    rekeyFile = self + /secrets/netrc.age;
```
Replacement in modules/common/ai.nix at line 1 [29.3345]
B:BD[29.3345] → [30.105:145]
```
{ pkgs, lib, config, inputs, ... }: let
```
[29.3345]
[6.105]
```
{ self, pkgs, lib, config, inputs, ... }: let
```
Replacement in modules/common/ai.nix at line 21 [29.3345]
∅:D[7.133] → [31.1360:1392]
B:BD[10.968] → [31.1360:1392]
```
    rekeyFile = ./z-ai-key.age;
```
[7.133]
[26.605]
```
    rekeyFile = self + /secrets/z-ai-key.age;
```
Replacement in modules/common/ai.nix at line 27 [29.3345]
B:BD[26.680] → [26.680:716]
```
    rekeyFile = ./context7-key.age;
```
[26.680]
[10.995]
```
    rekeyFile = self + /secrets/context7-key.age;
```

Replacement in hosts/yuzu/default.nix at line 38 [11.18645]

B:BD[31.5012] → [31.5012:5057]

        age.secrets.id.rekeyFile = ./id.age;

[31.5012]

[31.5057]

        age.secrets.id.rekeyFile = self + /secrets/yuzu-id.age;

Replacement in hosts/yuzu/default.nix at line 51 [11.18645]

B:BD[11.19832] → [31.5103:5160]

        age.secrets.password.rekeyFile = ./password.age;

[11.19832]

[31.5160]

        age.secrets.password.rekeyFile = self + /secrets/yuzu-password.age;

Replacement in hosts/plum/matrix/default.nix at line 13 [14.560]

B:BD[2.1230] → [2.1230:1272]

    rekeyFile = ./matrix-signing-key.age;

[2.1230]

[2.1272]

    rekeyFile = self + /secrets/plum-matrix-signing-key.age;

Replacement in hosts/plum/matrix/default.nix at line 19 [14.560]

B:BD[2.1389] → [2.1389:1439]

    rekeyFile = ./matrix-registration-secret.age;

[2.1389]

[2.1439]

    rekeyFile = self + /secrets/plum-matrix-registration-secret.age;

Replacement in hosts/plum/grafana/default.nix at line 3 [16.2110]
B:BD[16.2181] → [16.2181:2227]
```
  inherit (lib) const enabled genAttrs merge;
```
[16.2181]
[16.2227]
```
  inherit (lib) enabled merge;
```
Replacement in hosts/plum/grafana/default.nix at line 13 [16.2110]
B:BD[16.2364] → [31.11549:11581]
```
    rekeyFile = ./password.age;
```
[16.2364]
[31.11581]
```
    rekeyFile = self + /secrets/plum-grafana-password.age;
```

Replacement in hosts/plum/git-runners/default.nix at line 4 [17.2000]

B:BD[17.2465] → [17.2465:2538]

  age.secrets.forgejoRunnerToken.rekeyFile = ./forgejo-runner-token.age;

[17.2063]

[7.2254]

  age.secrets.forgejoRunnerToken.rekeyFile = self + /secrets/plum-forgejo-runner-token.age;

Replacement in hosts/plum/git-runners/default.nix at line 7 [17.2000]
B:BD[7.2283] → [7.2283:2336]
```
    rekeyFile = self + /modules/common/z-ai-key.age;
```
[7.2283]
[7.2336]
```
    rekeyFile = self + /secrets/z-ai-key.age;
```

Replacement in hosts/plum/forgejo/default.nix at line 13 [32.3]

B:BD[3.306] → [3.306:346]

    rekeyFile = ./forgejo-password.age;

[3.306]

[3.346]

    rekeyFile = self + /secrets/plum-forgejo-password.age;

Replacement in hosts/plum/default.nix at line 40 [33.987]

B:BD[31.12368] → [31.12368:12413]

        age.secrets.id.rekeyFile = ./id.age;

[31.12368]

[31.12413]

        age.secrets.id.rekeyFile = self + /secrets/plum-id.age;

Replacement in hosts/plum/default.nix at line 58 [33.987]

B:BD[34.250] → [31.12459:12516]

        age.secrets.password.rekeyFile = ./password.age;

[34.250]

[31.12516]

        age.secrets.password.rekeyFile = self + /secrets/plum-password.age;

Replacement in hosts/plum/default.nix at line 114 [33.987]

B:BD[31.12572] → [31.12572:12658]

        age.secrets.acmeEnvironment.rekeyFile = self + /modules/acme/environment.age;

[31.12572]

[31.13161]

        age.secrets.acmeEnvironment.rekeyFile = self + /secrets/acme-environment.age;

Replacement in hosts/plum/cache/default.nix at line 11 [19.791]
B:BD[19.1030] → [31.13565:13592]
```
    rekeyFile = ./key.age;
```
[19.1030]
[31.13592]
```
    rekeyFile = self + /secrets/plum-cache-key.age;
```

Replacement in hosts/pear/default.nix at line 28 [33.1239]

B:BD[35.5939] → [31.16786:16831]

        age.secrets.id.rekeyFile = ./id.age;

[35.5939]

[31.16831]

        age.secrets.id.rekeyFile = self + /secrets/pear-id.age;

Replacement in hosts/pear/default.nix at line 70 [33.1239]

B:BD[35.7521] → [31.16877:16934]

        age.secrets.password.rekeyFile = ./password.age;

[35.7521]

[31.16934]

        age.secrets.password.rekeyFile = self + /secrets/pear-password.age;

File deletion: 8be44a42518b7cc3ef8f315a982caae3-forgejoRunnerToken.age
BF:BFD[31.16983] → [5.1501:1587]
BF:BFD[5.1587] → [5.1208:1208]
B:BD[5.1208] → [5.1209:1500]
File deletion: f88fe8d8fae7fb5df68e60276f3f307f-z-ai-key2.age
BF:BFD[31.16983] → [7.3365:3442]
BF:BFD[7.3442] → [7.3018:3018]
B:BD[7.3018] → [7.3019:3364]
File addition: b89508e549172d011314b01bbd1d7a39-forgejoRunnerToken.age (----------)
[31.16983]
File deletion: forgejo-runner-token.age
BF:BFD[17.4752] → [17.5495:5550]
BF:BFD[17.5550] → [17.5148:5148]
B:BD[17.5148] → [17.5149:5171]
B:BD[17.5171] → [5.1599:1952]
```
age-encryption.org/v1
```
Replacement in hosts/kiwi/git-runners/default.nix at line 1 [17.5552]
B:BD[17.5552] → [36.689:729]
```
{ pkgs, lib, config, inputs, ... }: let
```
[17.5552]
[37.2246]
```
{ self, pkgs, lib, config, inputs, ... }: let
```

Replacement in hosts/kiwi/git-runners/default.nix at line 4 [17.5552]

B:BD[17.6026] → [17.6026:6099]

  age.secrets.forgejoRunnerToken.rekeyFile = ./forgejo-runner-token.age;

[17.5624]

[7.3892]

  age.secrets.forgejoRunnerToken.rekeyFile = self + /secrets/plum-forgejo-runner-token.age;

Replacement in hosts/kiwi/default.nix at line 36 [33.1791]

B:BD[31.23140] → [31.23140:23185]

        age.secrets.id.rekeyFile = ./id.age;

[31.23140]

[31.23185]

        age.secrets.id.rekeyFile = self + /secrets/kiwi-id.age;

Replacement in hosts/kiwi/default.nix at line 54 [33.1791]

B:BD[34.396] → [31.23231:23288]

        age.secrets.password.rekeyFile = ./password.age;

[34.396]

[31.23288]

        age.secrets.password.rekeyFile = self + /secrets/kiwi-password.age;

Replacement in hosts/kiwi/default.nix at line 115 [33.1791]

B:BD[31.23344] → [31.23344:23430]

        age.secrets.acmeEnvironment.rekeyFile = self + /modules/acme/environment.age;

[31.23344]

[31.23430]

        age.secrets.acmeEnvironment.rekeyFile = self + /secrets/acme-environment.age;

Replacement in hosts/kiwi/default.nix at line 118 [33.1791]

B:BD[31.23476] → [31.23476:23526]

          rekeyFile = ./dr-radka-environment.age;

[31.23476]

[31.23526]

          rekeyFile = self + /secrets/kiwi-dr-radka-environment.age;

Replacement in hosts/kiwi/default.nix at line 124 [33.1791]

B:BD[31.23645] → [31.23645:23701]

          rekeyFile = ./github2forgejo/environment.age;

[31.23645]

[31.23701]

          rekeyFile = self + /secrets/kiwi-github2forgejo-environment.age;

Replacement in hosts/kiwi/cache/default.nix at line 11 [25.2153]
B:BD[25.2388] → [25.2388:2415]
```
    rekeyFile = ./key.age;
```
[25.2388]
[25.2415]
```
    rekeyFile = self + /secrets/kiwi-cache-key.age;
```
Replacement in hosts/date/default.nix at line 2 [11.33086]
B:BD[11.33096] → [11.33096:33128]
```
  inherit (lib) inputs enabled;
```
[11.33096]
[11.33128]
```
  inherit (lib) enabled;
```

Replacement in hosts/date/default.nix at line 33 [11.33086]

B:BD[11.33707] → [31.26854:26899]

        age.secrets.id.rekeyFile = ./id.age;

[11.33707]

[31.26899]

        age.secrets.id.rekeyFile = self + /secrets/date-id.age;

Replacement in hosts/date/default.nix at line 46 [11.33086]

B:BD[11.34113] → [31.26945:27002]

        age.secrets.password.rekeyFile = ./password.age;

[11.34113]

[31.27002]

        age.secrets.password.rekeyFile = self + /secrets/date-password.age;

chore: Move all secrets to `secrets/`.

Dependencies

In channels

Change contents

File addition: secrets (d--x------)

File move: z-ai-key.age → z-ai-key.age

File move: password.age → yuzu-password.age

File move: id.age → yuzu-id.age

File move: password.age → plum-password.age

File move: matrix-signing-key.age → plum-matrix-signing-key.age

File move: matrix-registration-secret.age → plum-matrix-registration-secret.age

File move: id.age → plum-id.age

File move: password.age → plum-grafana-password.age

File move: forgejo-runner-token.age → plum-forgejo-runner-token.age

File move: forgejo-password.age → plum-forgejo-password.age

File move: key.age → plum-cache-key.age

File move: password.age → pear-password.age

File move: id.age → pear-id.age

File move: netrc.age → netrc.age

File move: password.age → kiwi-password.age

File move: id.age → kiwi-id.age

File move: environment.age → kiwi-github2forgejo-environment.age

File move: dr-radka-environment.age → kiwi-dr-radka-environment.age

File move: key.age → kiwi-cache-key.age

File move: password.age → date-password.age

File move: id.age → date-id.age

File move: context7-key.age → context7-key.age

File move: environment.age → acme-environment.age

Insertion in modules/common/netrc.nix at line 1 [4.82]

Replacement in modules/common/netrc.nix at line 6 [4.82]

Replacement in modules/common/ai.nix at line 1 [29.3345]

Replacement in modules/common/ai.nix at line 21 [29.3345]

Replacement in modules/common/ai.nix at line 27 [29.3345]

Replacement in hosts/yuzu/default.nix at line 38 [11.18645]

Replacement in hosts/yuzu/default.nix at line 51 [11.18645]

Replacement in hosts/plum/matrix/default.nix at line 13 [14.560]

Replacement in hosts/plum/matrix/default.nix at line 19 [14.560]

Replacement in hosts/plum/grafana/default.nix at line 3 [16.2110]

Replacement in hosts/plum/grafana/default.nix at line 13 [16.2110]

Replacement in hosts/plum/git-runners/default.nix at line 4 [17.2000]

Replacement in hosts/plum/git-runners/default.nix at line 7 [17.2000]

Replacement in hosts/plum/forgejo/default.nix at line 13 [32.3]

Replacement in hosts/plum/default.nix at line 40 [33.987]

Replacement in hosts/plum/default.nix at line 58 [33.987]

Replacement in hosts/plum/default.nix at line 114 [33.987]

Replacement in hosts/plum/cache/default.nix at line 11 [19.791]

Replacement in hosts/pear/default.nix at line 28 [33.1239]

Replacement in hosts/pear/default.nix at line 70 [33.1239]

File deletion: 8be44a42518b7cc3ef8f315a982caae3-forgejoRunnerToken.age

File deletion: f88fe8d8fae7fb5df68e60276f3f307f-z-ai-key2.age

File addition: b89508e549172d011314b01bbd1d7a39-forgejoRunnerToken.age (----------)

File deletion: forgejo-runner-token.age

Replacement in hosts/kiwi/git-runners/default.nix at line 1 [17.5552]