lldap: automatic provision + system users + stalwart + whatever

secrets/default.nix

@@ -17,6 +17,7 @@
       group = "secrets-lldap-bind-user-pass";
       mode = "0440";
     };
+    lldap-user-emails-env.file = ./lldap/user-emails-env.age;
     lldap-bind-user-pass-hedgedoc-env.file = ./lldap/bind-user-pass-hedgedoc-env.age;
 
     # mumble

secrets/secrets.nix

@@ -28,6 +28,7 @@ in
   "lldap/admin-user-pass.age".publicKeys = defaultAccess;
   "lldap/bind-user-pass.age".publicKeys = defaultAccess;
   "lldap/bind-user-pass-hedgedoc-env.age".publicKeys = defaultAccess;
+  "lldap/user-emails-env.age".publicKeys = defaultAccess;
 
   # mumble
   "murmur/env.age".publicKeys = defaultAccess;

secrets/wger/env.age

@@ -1,11 +1,12 @@
 age-encryption.org/v1
--> ssh-ed25519 QSDXqg KGoB/V0cCAZsfVmoLDmA5Xs2HOHqjg54TYqixYQduEw
-sqDb6QnEbwEncAbxKLRLkjCQIwMLBTNMVcejFOwhZWM
--> X25519 o64XZRaiK7ZEquTMmXTyhpdArawiuXC+5W5seFrJclY
-qTLXrNGMTPAXs5EzMuCiQ07Ho2LT1KTku2f1AlCHPlk
--> ssh-ed25519 n8n9DQ a8ESfbksuY++k52UJwTKJtb4/aiYzQqUgyYqfug5oyA
-bZygFOW6YSg83CmZRpsNDux+UgOxCfja1eQ/R4NyLXM
--> ssh-ed25519 BTp6UA yFBZAlGtHV98t6UA8QbELjOW/Pu6KYVPjbXFvijl9m0
-+eobFp5YNBsr2+10Huimwypn3S4/lc7zoX5Ldko9mhA
---- g7w825LgydJlmyZiqnIL0ofUsTn+e47rFmSG8ft6Qqg
-!lï•:^çÄÙƒ}R&X‚º^_ã213·-éŒË£0ÅnBþ–<C3BE>DK€­æ&Ù©Dþ:¾^½ÒUwÃÌóŸ
8(£‡ä X‡¾QZsÖªŒ<C2AA>â^(CÂ!ÍìÊ$ ™Üöý×(‹wÎ8t“ô¾<C3B4>Ñ!Úç²±Ð̈ït;¥ÃNgÚÛ§ˆ<C2A7>Ž[²f+Ù‚Q°
+-> ssh-ed25519 QSDXqg 1g79p7fDXhx/jHR4Z6PY4MsJyITD84/bimvr0jRcgCQ
+41z4XNjkwik7rdj9UdJs/ZR+gUGa+rTOXFEQz50UWlo
+-> X25519 XzyBVMh7elt7LdkzGAG1qz5kiKAZIeFHJeYVhYCh+gY
+cbEWc7hdQ7ddoBnFRUFYzvunIGn/tNMckaEao7Lcxw4
+-> ssh-ed25519 n8n9DQ bl0lknR3pVULG/2mRe7rtb6oFjBgr5zVayHM8Oc0dCM
+gYkyO5PNrzwDMqcS5s5RnXH7kLIw5IdYB9qLzXTraX0
+-> ssh-ed25519 BTp6UA D36+NXsMYDzeqgFbMTsdTuKWgHbQUcTw0jheGX3ndmw
+pTtYYl2jLimVJdGAKhRqgcBg6tpg0LOvNnY+QoRgomk
+--- lsPTx+ZG4T1MFVjue9ceTeieyEI99LF0D9RNBTnZG08
+ÿƒ¨
+-¾w¶ðf²Brî6Îö´ßH^»»ÇõÄéPÉE­ÃŒó¨žœ¬ßà3×B-áû-‚ót?³nd^ë7¬có/[
z‡f˜xŠëû÷{	ji1A°BŸÛ¢7Âø*ú