fix(stalwart): cles de secrets explicites, allowed-ip, meetup

Renomme stalwart_mail_pw2/pw3, spam_pw, noreply_pw, admin_pw, bob_pw
et acme_secret en stalwart_*_password / stalwart_acme_secret, un
fichier sops par usage.
66.108.44.154 passe en allowed-ip : l'auto-ban persiste en base et
bloquait le domicile sur 25/465/993.
meetup@marcpartensky.com partage la boite de marc.

Les blobs common.yml et anywhere.yml sont re-chiffres dans le meme
commit (renommage des cles Stalwart, rotation, postgres_crt/key).
This commit is contained in:
Hermes Agent
2026-10-19 02:07:32 -04:00
parent 7655391102
commit 8e604e3f8f
3 changed files with 107 additions and 129 deletions
+27 -51
View File
@@ -1,60 +1,36 @@
stalwart:
mail-pw1: ENC[AES256_GCM,data:dwv0Z9R8RESFXz1dAL5tY/FKsw==,iv:C2TRuWLtjKJztz3e6K/fQQUNbFfTvp6Mq2IOvgok5kA=,tag:lLnLdA2dK5GSe43N1khKYQ==,type:str]
admin-pw: ENC[AES256_GCM,data:LojzavD0gTNTkC73XoJZaf0SLw==,iv:eDrYfSzSNTf9/tTmdqsZjpt2Q4L7dtOvVwncTf9/rTs=,tag:gdYY49ohQUtC/MHTy8S0mA==,type:str]
acme-secret: ENC[AES256_GCM,data:WZpSBdcMfvaIkjLo/g7IOimZZg==,iv:XTeODMGO5lEW28uNtoT8kzK3gash9kexYUHSxuOGFy4=,tag:NPicNQ0aFlYNe1VQFNHSzg==,type:str]
nextcloud_user: ENC[AES256_GCM,data:TKLOVc+5EW/9,iv:iuLuhBHJb0gW5NbWNCSHBxXxFYLhfHosELidTEt5L1w=,tag:We1TQdvhKDhXmXeuxTxU4A==,type:str]
nextcloud_password: ENC[AES256_GCM,data:dq1NL4UaHg/6Qqzn8bZ3W/ZN+A==,iv:6GzEcrdADi6+4Wqb8T2aI6+o3MQuwQpP4wsmDs7oMRY=,tag:XdQF3w2o1Sqx13GVsg0PFA==,type:str]
nextcloud_admin_user: ENC[AES256_GCM,data:ZH4BYQ==,iv:OiLCzzXC8pfAnpyTFuNkFMvBk3+EdtlTPw68sKW6mEo=,tag:jgr9y16mra2jOcOHa6HAlw==,type:str]
nextcloud_admin_password: ENC[AES256_GCM,data:Ctm/q5NL4eyiK8qa25E7i/FO0g==,iv:4tWa9Ai1HpQAS/ZcNAsm8U0XjDV0t7zKOPNHkG9ezOY=,tag:sqW+rzRG6I8YpsQ76raEiA==,type:str]
chhoto_env: ENC[AES256_GCM,data:v8J24PT3H6WMNogx25gNkp/WQTCBONeCSDum4wv8fwC9xnCbF4E/8Zf28uXfA4CBP/jxpvmnhWiWyZmK7OMCs1AYBWQTQSxmvYh9hGK0ZkQT0TTKwGabl/A31QVclR8RA6c6D3kA4MBUBmBJAqUlzGYkXHImmmMJNKm/9wzdm8alrE+aI4pwBqaAzsZWf7CWX/3MbnQZn5p/tuGY3AEVnwMbMx6Jcvog,iv:Kvcp2+axFQVtNSm/033g8TvVWkLJNt03wVKOMGKPoe0=,tag:FpxIOOyCQ/NwAZ3vkdP1CQ==,type:str]
zitadel_db_password: ENC[AES256_GCM,data:6ZjHdmloPUhnraows80TP8tXfjxqfBVUEXWX+A==,iv:DSzvQ9gBXp+GOOS1wq9h/Rm3KFZ4FpdLAk6VBVzCxYY=,tag:d42c7BUVcE4yaqyaQwPMrA==,type:str]
zitadel_admin_password: ENC[AES256_GCM,data:1ItexD5+r0sov0HA5rCEsG/N9nqrGKVrpwfIpeXPhg==,iv:YbPABopLAxszDbYdqqvgFoqeijANEC48D8dNPLThHlQ=,tag:QX84GyN0h1+otMDGpnjqXQ==,type:str]
zitadel_master_key: ENC[AES256_GCM,data:WkseypyW/QbohI5Kee6uFhlcQVRwgV37NyyXuRVzD7s=,iv:mmwIub3YEykQ+Hv8eSyUx1kzTUAt7Fzd1BAqF8/hhCI=,tag:vnCPcXabSwlZYWFeoUXiTQ==,type:str]
zitadel_steps: ENC[AES256_GCM,data:UQ==,iv:KGjPqN5y6XKWEkjP6e6cIrLspY6UFPsCcGV3d5vppOw=,tag:Re+SqAQYgAdu1chah08jHA==,type:int]
chhoto_env: ENC[AES256_GCM,data:skeMBo5McXjSG6kfEt0Gr9bJNVT/x4O+hJ/gzu5W0bCfJNtm6v67eJr/HaGI0BZymGE9HzvJEjws+bAkxPGog0vxYExX8pf6GN1llGrDCdzT/Hucx7EZk6xsCSLzkalM1OmPUZ5jcxi614GBzhf3rN32SPB/64OOIVbd3o8JmoNPEG/gXMMcABWPAwI/n4AZxibw/Y5xnmrgmKJvqXNcKFs/htGEdcL2,iv:fVvKFcEH27MNN3sxZFIm+jBtGxrmSllwLbDNskA8y5s=,tag:bwcRBmzNsUFJPEopD7uhsQ==,type:str]
hermes_env: ENC[AES256_GCM,data:iB9kxSZIlljUhTy21IXGf9MA/5ZkLAcIXosJNCQl9KOY2wjbtpoORmje7wRQp9lzhsCF9kKzmzdpFty1wm9rNb7IEDf4NAvdmVBZmkteH83MEOouuHcOdARL1sf3CsO1YcKPWc7E6KhwbCjp8EFt3QBDP62v43s+GiIciqM9Q5xUcjPFGJC9ukBLU/E6rFkeV190ePu7OImmZwmsZyL9wDw+Ol056n6cD8avmDU9bxPgcrjRAnSTL4KX821ygmUPJCTysQHpnI1n6JWgwUP7CRYpKi/WKKc=,iv:IScLAv/5YyNlUVeDu7FYDZ6b3FdZHdaHr7wLQqyZqME=,tag:0ZMK9U2C6/Ia7/c1ziNUYA==,type:str]
nextcloud_admin_password: ENC[AES256_GCM,data:yiGLYxgERKHfnQ9HIpZ9plqSQQ==,iv:KiIA+z4lgbQuM4gxBCOW3oLWHaqS57PViix+MmPr80k=,tag:lADrSUiKcoBHa4zWug1wRw==,type:str]
nextcloud_admin_user: ENC[AES256_GCM,data:+4j1tw==,iv:0UCD9GSthfqc6A/UvRbZyfuYRAXuAK28NXdaPf5k2jc=,tag:v0H5nvFEZ3F/poQefmjHhQ==,type:str]
nextcloud_password: ENC[AES256_GCM,data:Z8pbVvtsQv3pHPIu6QFdScsggA==,iv:Cbu/+BElt4X3BNGG7oHmAxm0JHBcDCwbAJBZ+dWnkJI=,tag:sdElvaP1NV+nY+hZagNPrA==,type:str]
nextcloud_user: ENC[AES256_GCM,data:MoI3cGQeqEhW,iv:fSAXmNddV/vDorrR+tkOltZ3hRvsOs9RIfP3uhDupDQ=,tag:qDHAHGO3TxQ4x4a+7kjsIw==,type:str]
oxicloud_env: ENC[AES256_GCM,data:oPLGIA7+Hmz64BVR4PTqIHkiuJzHHto753mTfsbzWpMQ/vQwpWs2WelYC3yBiXhoHEUCle/gvcGeFvw+2nctLVCd6NKRz1SOf4jXiSTJrPAnNIMnR4a51aWipoqEtky5vwTYryBX+mBXozKuu4HO1NnJg1dMwlBwAHKHKzr+jRyA2T184KQOA2syIqSwBjgJdai+Wo+fAMRD96pm1A==,iv:miH5yjKFYwVMZdi5h/Zp7n1cPShJEMaA2FRPlEPjz3k=,tag:IIgHrAuog0TxTVWpuv/0VQ==,type:str]
postgres_crt: ENC[AES256_GCM,data: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,iv:LJR8x8v7ug//MM0Wu5A0tCjfLlnU+g5Vin8OSTs1VQE=,tag:uG6MIRLabLdDg5H9gKveTg==,type:str]
postgres_key: ENC[AES256_GCM,data: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,iv:aKVgHe/tNf/gn+kF6xNhaVlzzRzYz2OLAOqmYMkvXl8=,tag:ZqPPIzilqMpZ04LhBR981g==,type:str]
stalwart_acme_secret: ENC[AES256_GCM,data:6DsoA4wxCxNkNEMNwxswXgGHkaXuvLVWE1aiRVWZnUlcq/vfzNjy7MsRHBVuIZBz2wF2Y+4=,iv:/OBOsB1T5vbHfUlBav7z2fayuJnudd3GO45KAyzdIIo=,tag:3QfAxlMHU6vWMtl2slGZKA==,type:str]
stalwart_admin_password: ENC[AES256_GCM,data:+j5GCSNmqYPk7DkPaCQOpEanQm8=,iv:IVL0gHnvKnAklPnpdfztcd1QvKEgc1G2pA3/sylcvg8=,tag:Ho7VwzelgK9cPe3fteSMdw==,type:str]
stalwart_bob_password: ENC[AES256_GCM,data:mnWu6zG3rf3xpY2T8NT9aoQTDrY=,iv:KQDMmgSmgfTcpoix3qHSndRNraVmWXitxIIEoIsrtKA=,tag:rsJT4UI9O1XXTV/euEzm6g==,type:str]
stalwart_mail_password: ENC[AES256_GCM,data:/IRF1PYfcSgcPg+CwfkiC7WcMVo=,iv:ktEjxdYHOGDy6M5+/D0UInaPqy2Gzmt+avVlkC/lqJU=,tag:/z086QzXc2DWbehwWxBuhQ==,type:str]
stalwart_noreply_password: ENC[AES256_GCM,data:YD8T1+aV7P3074Dz2GM1MZ2KOa4=,iv:9kMPxlJMUQjmUBLor7/9d+/osVmPipQhqZJCsAfYQAQ=,tag:1PyZozogP5pllguTEK9UTQ==,type:str]
stalwart_spam_password: ENC[AES256_GCM,data:2/qWmOTdAkxX21Ye0VNDGpZoKL8=,iv:yIjmD9n11of3oXb/Ih0WqI3GarYSOUPMQSSWgPOaV5U=,tag:b50nFkS+ifezWP2eTX9ivQ==,type:str]
wireguard:
vps_private_key: ENC[AES256_GCM,data:HxDP6mQbUJ2FmScJB6Mm6YMzI6QNR3GBJ7Xpubt6KMInj66hy0MxuVU9JTo=,iv:KPPSGaIELxfhsbLwYLeKWvXgiXctrR0+udN7Zig54F0=,tag:IOuEPVbxcJIHFFEnyLQEhQ==,type:str]
oxicloud_env: ENC[AES256_GCM,data:sfbfxfEfRSNfKj8pJ6GFi522nwi2zAReZS0fiFkHsi7rQ7rjPiA+ZjFFE9n5zF0YjOqFf57Kr+YRld/lhnikl9w7oYmSG3JOUrxMJEQD6zfCeSokjeDsklLLSbPylBSRd8n82R/pteuhL1iPrv1Vt/KWUf3bPx92MH+wk21krJ4u7/UebaxCwbeImv018k6OE9lhEnXnT66wlDlpww==,iv:cJh137Qa0ma05sbplo9hXEDqpr3sjxzteae4alVSk+w=,tag:Yg+F81iuCYI2yHSsYZKhBQ==,type:str]
hermes_env: ENC[AES256_GCM,data:15QTYHuFxBRpayBA/rLVJXfxSaZRRWVUSvesTcIBjHmIpNBX0+DqJfBNX7lkfMifH5Ta5bWqVpfj3W9ANtQUhs/3yYSBXOE0d3WmbKUPIPYmG8WsjHfz9RTkOgJjgRiDjUZTAY15i1rEMOaCryWx8Y1BXPrAgJa7W1JGCCUf0ULDT+D5HXQf7bPAmkFjsg0lxy8knj/CZRFBLN5uQDHu5Kc26Tn/4IsB9enNu8gu7jMwkD5mbq+LBnSHqIXT2v0XtpWArHU+ertueG881wIG+F9qMxPAXg0=,iv:6TQh4Xt5Vd1/9gDkn1S6ZJJiGjqoMYrMttp+26hVTn8=,tag:7EB1dVebsmmaF/cKtdP1tg==,type:str]
stalwart_mail_pw1: ENC[AES256_GCM,data:q1Fxli2SBgQtcnSSU2ikULHGQRY=,iv:sXOzH1RWYpAknKmooEHqZ36o9WS+W5EwYwaRILWVxC4=,tag:CfXGgoZ8omllfVw2nZJe/w==,type:str]
stalwart_mail_pw2: ENC[AES256_GCM,data:Zb1mrOIUAYqWRXG3MhIL15/iWjQ=,iv:lQwE63u7gXjWCNr5hqFWvLIxtFTxiX6SK87ibJXUD1I=,tag:jZbN7qUYVeIaDTU4C75bhg==,type:str]
stalwart_mail_pw3: ENC[AES256_GCM,data:UdaMzKFoyFROPLRzb3ZV0712arU=,iv:nqgNhOHQ7XnqD9tPl1NGdksdsIoMCFnikKBjwAYu1/I=,tag:OIc22jyuw+chBiDJQYpQ3Q==,type:str]
stalwart_spam_pw: ENC[AES256_GCM,data:tokU7Cl6lbC1fJPVMAUC9kXPp60=,iv:jQPjA5WaI3pCKkcSMQYAoTz+hA6xsHFNxJUukUDLhGc=,tag:YB/8YBrxBcvj/xzjFLgLbA==,type:str]
stalwart_noreply_pw: ENC[AES256_GCM,data:yQfmlsvUNOtYhTd5U6iV/fcIfJI=,iv:2C6GJHnyZmqiE4dfbL+dLtb/pPR9esEujsdjjG7SNNc=,tag:rEHE3BtNpIKE0Gb47uw1Ow==,type:str]
stalwart_admin_pw: ENC[AES256_GCM,data:scgOIN7dEpQEQ8lgdjr7mIb8IBs=,iv:HOlPe3YhnFBKxCA9ItaJVrbuFOvSbG9JQ/DX7tUqyRA=,tag:FJOqfRsKwwTuHzMXU8L5uw==,type:str]
stalwart_bob_pw: ENC[AES256_GCM,data:DuyBs3qvEMdqd8U1Iq8zeCNgZ7g=,iv:6l68YCQmgJ4A6DYvxBRw3Zifl1yZQl9LLFMFsMBI6J0=,tag:J1Vnu1kBT6jp840mHVkSiw==,type:str]
stalwart_acme_secret: ENC[AES256_GCM,data:dGl0Pz/1xqUQ5skaP9SHcx5DLI0vxMGaxcKsY/7bq2DpQMeFbrGJtMfA/nUi1QpWJiRQlGU=,iv:r8DTKdmggX+C2MDym0UEs8r7qpejnfu5LsfjygxR3S8=,tag:GGQ9fgDN0CxkqqAX4JCOOA==,type:str]
postgres_crt: ENC[AES256_GCM,data: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,iv:CUOxMtHFI+12GX9vrMSosHkCX7Yynsv9WtU/Boh6OhE=,tag:sdA7ePYwlUD18X3JORX+bA==,type:str]
postgres_key: ENC[AES256_GCM,data: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,iv:uqwNlImbrvsYjtel3YmzREGmvJ6eOIL93UlmQWaRey4=,tag:fGBFqJp8KAV9jVw+BYeL7w==,type:str]
vps_private_key: ENC[AES256_GCM,data:zP2vgTR1U9pH1LlQfW0u00EAQKdOBngNA3y7Lnrgy/ivBBbq5Jm93CZ9Z/4=,iv:JWBQhp92NnF2PyJu+fFne5YOXrFuDyJubloh7hbfdmg=,tag:W7/E29lkzNz7ceqtaB/EnA==,type:str]
zitadel_admin_password: ENC[AES256_GCM,data:lANHRRx+aPymQkV68qo/aF5P1ZuygPlP4bUD/b0ghg==,iv:ssI1oMbNNV8dCC8k0ngD9VkELiyxtOGgWY+J7cQGJQs=,tag:3OvfMaQU1ra8vRR7o6NRuw==,type:str]
zitadel_db_password: ENC[AES256_GCM,data:ycYcn/Co1zwWptnOPxKck2nnsukJCKDl45MfFw==,iv:JQIkgtlQ9qQs4zE8UXshMSZdVKPV12alnGfdFGgQP/0=,tag:MsaqlVxhplKZYPmu9zjQBw==,type:str]
zitadel_master_key: ENC[AES256_GCM,data:8b0nf01y//WDCVmI9lUNTu5j1Ka76fWK3RtLUoEQ4jY=,iv:kGBJBn7pbvzsLLw36sUFiATNXanA81zk+Ewysh64pgs=,tag:h8HCQE5nvgTn9zZ0ZmiDJQ==,type:str]
zitadel_steps: ENC[AES256_GCM,data:Zw==,iv:IRHFMBGuchoFSo49Mr8Luf7VXsE4232j7/WzMosNN8Q=,tag:ked4mupCXyb6iPBcwkEswg==,type:int]
sops:
age:
- enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYcDl4STJxN2JnKzlNc1pN
QkRibnBsZlU5b2pDRHJuaHVrSk5Mb1pEMHgwCkxhdkN6QjlpeDJ0c24zWm1wTnRY
cUovMFRmaG9JL095cjVKQ2xGTnU1R2cKLS0tIGhxa25lS21LTEJqbkZrZndoZnh2
SFVsS043and6QmFlcFZyVHNtVU9WRlEKaat9amb//F31oPc3vcWqESU2extfraqK
0++wCF2tzQM4Yh2nEydj0kR/AZIZazf4G68+xoj/zIzS9C9EpvC+rQ==
-----END AGE ENCRYPTED FILE-----
recipient: age13tc3mtr45glx0msgsygf8zc3dh9kaxcestdx8uhzztpy0mawhems4l0wsz
- enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4RW9BMzB2UkhHRTJlODFE
TjJaZlRHcmloVjZpNDN4QUl4Sm5xQm5ObHhNClA1Z1d5b1pXcHhKeGRqT0FxY3Zm
WDhJSUxGaTlzcnFxd2diNHQzeHJmd1UKLS0tIExITis3b2tybk1tWXZwRHdGMktT
dUVBUjBnMFVFMzd0OHdpYUFxdkIwZEUK3/FD+DMo+En4CUMYydI0PVo2n4ub9FdQ
hgP3/+qFZ29qPlRUIaj6hMzP8P2fyurWqr9VdUOHIq3I6hVGNNLCQQ==
-----END AGE ENCRYPTED FILE-----
recipient: age15n96t74lj62gxyk2wd8ac9aew5lpfkx2l7p8u3k5hc0hcek4hejszyp48h
- enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJalFiRzI5ODloYlpmTXkx
S1BEREpMNUdwVDV0cTRncjk4aTVqVktSSDNJCjBKZWFXZ2J5TFREd0o4KzhhUC9J
dVh3TU9rY1BMNVpTNUh1RHVCNDQ2T1kKLS0tIHQxMk12TlFORnl2bzErZ1BRUnFi
cWh4Z3c3UWRNRG40TkxCTzRKOHZ2eDAK8ElreFdNPiDNrMCipQzi/hjk2alyD738
0ia0DbiriLVDSyTrDc4BwsW1TvR2Vn0o+erjEfU4PaCF8MLH4SJxJw==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwcVpVWVFvUCs4K0tpYks3
cjZ6QjByUmlGWTczRFB0b3k3ZC8zN1Fxc2lFCm8vY2J6V3NZMGdMS3R5Y0JKREw5
YmtRYWtqY21zVGxiQWpicUN4ZTNrTkUKLS0tIDJtNXFyeHY3SkFXeHc5aWJLL2Q4
MWFpejM2NzZKcXdRVlNoVkNhcDZZZnMKyjD8VukG0ELBqduEk9KzCkhRuZedagE4
YPOuezO38I6uDhRtrVyzTYHhL8abTR/19P26ywthYpWfT5gCRVktsg==
-----END AGE ENCRYPTED FILE-----
recipient: age189v3q8quejkaz4r8u0g2aechsfk4sk3465khx35erd320rea5scq98v7er
lastmodified: "2026-09-21T02:31:30Z"
mac: ENC[AES256_GCM,data:8EAU1ozzidQaGbFz3SLRzSh+pacTRH5lagk7jr6LjfSyMJGYaajp5WdevKRBxxU+oTTaVpjQ5vyqHOUs+a/Bcgbk4npolvm8d9ovIDi4zLo9DeveEihMQKoYmznaMzGALiWE9uCyx5/l9rNJXaD8Qk55RK+EkXPLx0eh/jDQv/M=,iv:rTD8sYa9D2Uqs9VxPgoe6CVfWX2vdorxPiuPf/jI8BA=,tag:VjYPN6CHwAgziq4UlXL43w==,type:str]
lastmodified: "2026-10-19T01:30:23Z"
mac: ENC[AES256_GCM,data:oY4t1C7NrRYqLe6iitzlx8p4BMNbKQLylLNoz7dC57rIbnR7qpWWcvsvbOkDuTQL9TaNRHAv2K70amtCe/hxmaXq1j3Ly8kMyyvCLRgiHStV952GC3b/erV0pmfuHksiM2GuoDj6QOtmoz/yvYN48wmvMP/6YsY5Kqbl3pkkv5k=,iv:9L5oAt+C1gYK9dgRthFgCoQ02UXUH52KN+A6QOLZC2Q=,tag:wg0za395DIpBLqCCwB25iw==,type:str]
unencrypted_suffix: _unencrypted
version: 3.13.3
+43 -50
View File
@@ -1,70 +1,63 @@
gemini_api_key: ENC[AES256_GCM,data:Vg89eEvW1fqGcJjYH84Eqrv+CGYS7Biyzty0qw/njLiaLVa2DcFa,iv:qjtUV1lCMEMHE2vrITXPxN2aJAdpI9DEujzH9OBXm84=,tag:+DxplL+xbSedRWlno4wdPg==,type:str]
anthropic_api_key: ENC[AES256_GCM,data:0s2zG7ZzmdUNju8OpKlRwxfubd/y3fATwnnVNv4MTfEjV8e+j3SZsGbvoL2WbTOnzvzyEaFX0aB0fPCTp4uxfhBufUl29OXyJrXyJIOvpM6ZI7PwuWvEkAki5pFYZgFjNmlz9lULwNh4n6VL,iv:ijC33I8Vg8zO0K3XX1adnoduGZr9qYjabUUCsPISzeE=,tag:zBeyZg4kMKxFgX4ZKceFVQ==,type:str]
nextcloud_admin_password: ENC[AES256_GCM,data:MXTO/0BlGdizWQ==,iv:sEY2fN6u2a8NprLhru8O0HhG/qiWntyC7ivgbNcD2Zc=,tag:aFi8dIBQzU1HGgAlQBeXIA==,type:str]
nextcloud_password: ENC[AES256_GCM,data:dvYrWhtIypHcGw==,iv:G3Jhg3vYOQb8ru4AH4HNQ3hBgc/OxaNrDDUxKL/3glI=,tag:56SAS9IBFg6Vn/jGqtgO6Q==,type:str]
nextcloud_admin_user: ENC[AES256_GCM,data:4G4OLQ==,iv:r5Mf4UG3CCi5PfLZw6Ly5jgmlfJm/bYNuh/fq/muc5Y=,tag:qAOWEMJN7BS3Nu6lUmyOFA==,type:str]
vaultwarden_admin_token: ENC[AES256_GCM,data:CQDoFfH9sKifl/yMQZmCFOlljjWS/bxWKd05,iv:YY8gXi3Ibis+AuHe6y3rUPkAW3pqGpHaYi84kjtLuOs=,tag:yHQBQcm1AdrgIWYZ1EGKAA==,type:str]
vaultwarden_db_password: ENC[AES256_GCM,data:1mnXJFCUgwemDfLOZn7WvF4o+8wVoZ/kRyDhMSucr3kkRMNsZ7Jue4C/13rZuSYh,iv:/u1xXrVT4JdOBcW5A2QFudenq5iAsK51agvPXp9U6F0=,tag:+lX6ftrV220vX4blJvCj4g==,type:str]
nextcloud_user: ENC[AES256_GCM,data:Ha4Uwg==,iv:cvS3E+ynqHoHm2FD0I/Mp0OWJfoE9DtdtDYXkK4LKZs=,tag:3hKkCczwWo6yCOJlzgzoQw==,type:str]
wifi_ap25g: ENC[AES256_GCM,data:IaMchO3+mJSsB5o=,iv:ToxPMHuj5nVewMJxNnopCmQkuizdji+hOye6loiDFnY=,tag:khhHRsOhz3qN8G4bUW/OxA==,type:str]
wifi_hkt: ENC[AES256_GCM,data:yh1n7dHSUof/6zM=,iv:57B721emA50vRPXhjDMNFsm/nZBHpFdsBAlatQdCpUQ=,tag:T8hnp/65Nf45+zcpxBfzMQ==,type:str]
wifi_wifi_de_marc: ENC[AES256_GCM,data:8iQ4dOFboI/8pUkVRhgC7/jDXCo=,iv:SAlVjCtoljMb7tODHPcfrTgqkZiPjrcRLnMN38HVudo=,tag:FQa3fqPm5E++azNrdmmFJg==,type:str]
wifi_wifi_de_marc_2_4g: ENC[AES256_GCM,data:ER7IAhvODiuVjao8c5or2+hMc/o=,iv:J9JOqQ0ifqGztblmdRR9GrtJz24Pv3e0+Y6QkH1vSHo=,tag:JfzAC09aQi7fgzKKoMSFyA==,type:str]
pangolin_env: ENC[AES256_GCM,data:HM/s+i55RgHLSL4KNwsyEUEMTy3zSrSrwlmWt7/pb3z11htSHZDjNIjPJHPdfq7gvXSYZGGValgglrCxuwD4Bhs3k97e0H4f28WSu4ZQH5ikvRZKeySdpKGK7M5OAVYwo8C7rNeLDbIz5sNghaH8xc3yUNzsn9y4J29ufUiZ1wwzxITsCL0yOabN3GJc1s0lpLlh5M140kAjBueT9BgBj9+uLwUo2yRD8V/0m5Qk0bnSOGP86eSopu8gDQ==,iv:YMVlcailneap9tYuGx9KFBo6cANaYR15091uWysXOIY=,tag:6/ralsNNHf0ZOqu+SOu0pw==,type:str]
newt_env: ENC[AES256_GCM,data:ZvbK5GLIdZW4Ry9VO8ssqYEKFThOqe4x391sK/SD6M5XPCct7L49apyNu7PygtnNwJbAg+qW4TD6SlWRYMYBGrvD6GEN5CBA2W5WkxVb1X/LEVM+q/DIAQGnJh1ZZ9Tle1ZJLScWDG0w9JhTCZ6z+rYRjmxuwu4cAd2nmBeJqLK1PgYWoX4/0rO9ns5wog==,iv:ptI1gXb8Q1T2UIKFW3DGmbg6sVlxwnsoQ4GvRCnSTrQ=,tag:OLLs2htywljkus4u7EYhAg==,type:str]
zitadel_db_password: ENC[AES256_GCM,data:SoWp+EaEr8Vvz+PQ1CgreLIMXV3bzUir9HmF6g==,iv:QoWO+Iqio5JZpVm6NfI6tMp4C+1ekj04/4HJbjSXfLA=,tag:+d5cWEmJpk8PyyZ5F//XuQ==,type:str]
zitadel_admin_password: ENC[AES256_GCM,data:WzJ9gNMC9Co7qj9sdeu+ftr5AqjWjwUaYBWNJVqDEg==,iv:LLNkLn7o7DMOKI2ATePGUAlti3gpQ9hOoVlVVpHF6Jc=,tag:PkbXTbCNRzpptgnPtyVbFw==,type:str]
zitadel_master_key: ENC[AES256_GCM,data:YJr2IoueNAuJtegeeRoRF635PyGZ8mujk/oGoP3Ukc+alyw=,iv:75jT+RTDIF3ayCzRyhLUCpgypYG/TVNdbcu6u+8NoEw=,tag:00mTMqsq79ol2gRzIvmxqw==,type:str]
anthropic_api_key: ENC[AES256_GCM,data:BBbuPwQXViNh1BefLevUMiGNDCuE9AiCZ9xGyHEx65fSV6a/08tFE0sPqxmZxgcXqbBsV24iNFRUcW9GGw3klysOf9IMowL+mcBRFpP0pDxdnNmP4VUlluBielYSM2SImVvGrVj2QCWNApee,iv:zoz9UB3XsLWtXt3z+tsnQpIvfWRFVmlN9q1BbYv7W90=,tag:R6viYE33YPDNqWPRJw/N3A==,type:str]
gemini_api_key: ENC[AES256_GCM,data:GJp42jbgM2vXOmeW4gulylpkbkyOmgxNd0O+E5re5z3TSKaxTucQ,iv:K8bmlQ89zMirxBzlqooeUx6Gn053jn0FpbzsQSCwATg=,tag:jesIZPIXObxj7NHxJijETw==,type:str]
newt_env: ENC[AES256_GCM,data:O8NUurcl1DPyPTi5zKO6BumzakaIiNhnziOvWOfd81XJ87BP8FQuYyn7ndWiGiyX2/ixX67r94E/TSEH/Sl36wxUowDAri6oiCSu2eZ9YsVbh9jCVGDllYNwQz/3YHoQqTKjOuXdRNmc6ArAZk0fpR+kF9rPbwES6jSdYY5B/WBufY7hianFPD2NwiIxNA==,iv:4sfyrKHYzqrfew6obItlvNHteCDiKC9LbTWrjwwRemU=,tag:89ivP2aephwR11Gl/hZLJg==,type:str]
nextcloud_admin_password: ENC[AES256_GCM,data:7YUHsJ0x7oXNPQ==,iv:WrM879CVOwhxE+dSYLeAtj2mve5E3lcqRhxMHnXKY7I=,tag:ExFxvD6o+fwNXgBf2Uv8EA==,type:str]
nextcloud_admin_user: ENC[AES256_GCM,data:A1+V1Q==,iv:Mz5kMVqcmYsnHwTyz0+roSbzJHNwQcnoBDH1d2nIrT4=,tag:G+S1epiA60Yk1Tc4z5eyRg==,type:str]
nextcloud_password: ENC[AES256_GCM,data:B9KOeUWloTN0dw==,iv:6un2R4efNbnEKpWIrMr+JUVAo69WhvwkLM8Ha9stChY=,tag:93bol0K7iJZPyLoHEw8fhQ==,type:str]
nextcloud_user: ENC[AES256_GCM,data:tYgsqw==,iv:RlLzM5bbwPe7JKnPgCUanohQuUxccNSf8quFHdmO0SU=,tag:iqGY0T6NdOOp/13rRgvF/w==,type:str]
pangolin_env: ENC[AES256_GCM,data:nDP50MFKAuFrsYG9Ygm+CEhEorwWTibsYpLeVTrxjHuZpY4on91R3KGumvyeXFQd4zoJY3xrPZtImZfjby+IuL7xkJ+ft9Kzc8dqgZvyb47hw7j+6jX/q1AnxYgVgaYBZc+yt9/7wBpH55LDdkwJfn6SNp4pgyhb4OdLlD9FnuX8FBRYCN0VO3a7LdZPztaC2tQ1fYPrFFXzxaFJdTu0J2Kg/ZXwHdVw7dWxygLWgUIbvK94mOyypTeL6w==,iv:52ADFRjZkqXQXGGKF/IKk6t/MvXWonfx/LiBTY1+XgM=,tag:SLgGi0lKG1QCauofNFmAGQ==,type:str]
postgres_crt: ENC[AES256_GCM,data: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,iv:WsRDI8P4tiv5Ba17XSfE82DjOWyvOT6Cci4oMlfxlxk=,tag:2YbkeO5bq11JB8qHiEvckg==,type:str]
postgres_key: ENC[AES256_GCM,data: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,iv:PCfabOVlBUciVm4P9mnH2IJpbNRTeuzfoEizDwbEGM0=,tag:PXfM7GmVpdQdGHN22YTc2Q==,type:str]
vaultwarden_admin_token: ENC[AES256_GCM,data:8VMUhNpZz0SqyVBBNRFoMLlr84nivD6kjzqs,iv:O/P5fpExC4GlkFL30fQvPVGAxpeG5tjRfzb/4MCjWGo=,tag:iSawJIGrX9XPVp/P9qj3hA==,type:str]
vaultwarden_db_password: ENC[AES256_GCM,data:lH7Mz0NEbaI3QXkAwhlJdWYUKBVSn0obLSltem4mLKhHTeYyLy1fde7lUpZacoaN,iv:kiYosei1RJs3UO/K8bF+EHcsuyjiHR16qbFSdn0l1/U=,tag:qvmIjrJE5E09vZ3vWEqbpw==,type:str]
wifi_ap25g: ENC[AES256_GCM,data:tDuELUhXQu/0KLA=,iv:wjNPd2raYU18bJo+Mimb5jglWoDXknOn/ukerFnJg24=,tag:FI2r339WLgNnl4si4KY0FQ==,type:str]
wifi_hkt: ENC[AES256_GCM,data:LnJ/3+gh+qm6PH0=,iv:3wDRYTi7FOZMsAf5TBzxWXnHHdUxY5VqrMDh9NF4Rr0=,tag:Rt3l2PqeloNkr89Afa/91g==,type:str]
wifi_wifi_de_marc: ENC[AES256_GCM,data:C+1hKXmEHtoS6TU/glDxZ9Knji0=,iv:0FVGqZAzjLP0sr11WQUYMrQxeOuga3tj74ypz8aO1QI=,tag:heoPow+Ig/GwwSgDwlf08A==,type:str]
wifi_wifi_de_marc_2_4g: ENC[AES256_GCM,data:PVOPynoCFL+DrfzpEgt9M0tFlMQ=,iv:aUIC5EnT9svcshHRnLSCpTnkE5m8AH2IZizq+Ms4e+k=,tag:4fS81IDzwJSPQID26zDycw==,type:str]
wireguard:
vps_private_key: ENC[AES256_GCM,data:0HfmUgfc2mocOTSnMhOqUOEqwXP213yHMnvTUReSgez6zccTxC5TQqdtzu0=,iv:rjBs6pztAXh1GehbM5LfIGQnUX1HplYXqYQwfc186sg=,tag:OL5HSXJqAeWrqPXDDkzhyA==,type:str]
stalwart_mail_pw2: ENC[AES256_GCM,data:c1qUp2tzvyqwyWmCI0W6/Zrts+Q=,iv:xG3pLzXWCzK5BftLSZ/dSyped/MmqX185trotuhBSFY=,tag:awRlTnXlcH48TwnlFzeTjA==,type:str]
stalwart_mail_pw3: ENC[AES256_GCM,data:/OWDgDc6BmQgF/GpgiubWsLpJ0w=,iv:w74nNmLh/KGvj2nvsNk9NE0bQJng9/zCiMdNPzeRhZA=,tag:VqrSX+ttWcJSo8e8gOH1Zg==,type:str]
stalwart_spam_pw: ENC[AES256_GCM,data:1asaL2YWMZ8GAiuDrANmxD0chpM=,iv:4CDiwdJQsYMgcc1N1P4pNvybgk3U2r4VbwcoSHMimUk=,tag:TceG/xF46HKrrxMwrcLW9A==,type:str]
stalwart_noreply_pw: ENC[AES256_GCM,data:uCXJOno/HYugBTkXIQv2ZZyvepk=,iv:RCHSPnmRBbIwCaVLDJwWZKLUJ8f9VttOVhmf2nF3uqg=,tag:rXmOSfocUiDrsG4FKFbsCA==,type:str]
stalwart_admin_pw: ENC[AES256_GCM,data:MuQDJ+cE79QwlLr5/E2Gk/ja2f0=,iv:myvTPdk8hDFvVArpeWfaAICVPwg5nSW/MrXkiEh8Rak=,tag:4SbEdoO+QZsdnoOBSuyDpA==,type:str]
stalwart_bob_pw: ENC[AES256_GCM,data:TvqOpc4DpEWhenLVukPknf8ZedE=,iv:BgmaiIOwxwN46sgy+ddvA3PPUvbXOb/FVUef70fzcnI=,tag:tW9zry7qQLKxeTbsdit5tQ==,type:str]
stalwart_acme_secret: ENC[AES256_GCM,data:C2rEVN0QOchPfNFTiJNgxzYt9g01AMeiECw43JP5LByRy8vX70Ze+sRHvQPrX/CHgRRmTRE=,iv:DChSa5fQv5dPRljMLdwMBLRLrfdUef6hPcCJC4+kAos=,tag:Uy6a7qWxtvEVdesaff1ZtA==,type:str]
postgres_crt: ENC[AES256_GCM,data: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,iv:1VOV53zaJgE2IsxWOCjvxyC6vVV+Q8eQZr0ZGf3YVP4=,tag:WTaW+9B0PhVBskApePW1Mg==,type:str]
postgres_key: ENC[AES256_GCM,data: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,iv:GutSu4hsM/5vpj8kBIr3etyJydKblaopparN4/6Tf94=,tag:Yt1k6rKyeSP4hZKuZH5qyw==,type:str]
vps_private_key: ENC[AES256_GCM,data:PjKpr8/5PdEThY/hQuUpoMUKK+0pd6pYRnFpwWVXU7+IuQaRnwUhumjOWXY=,iv:/63P3Xa5kTanGsRbuWT6nUSi8iM2qVEyqSg7LDek/M0=,tag:miOjNtOI4HU1/9QmijLpIg==,type:str]
zitadel_admin_password: ENC[AES256_GCM,data:JlRLz99ohIJNshB5IfFKAMQdhNymoq7O7zW3BrBhjQ==,iv:To+CqmC4fMW8jH0fCk5vfu4BdoTzuUyl7MDNXqlTdUQ=,tag:v1yxFq+pjJza8/6NA6VoKQ==,type:str]
zitadel_db_password: ENC[AES256_GCM,data:v2fnbTAc1WbWW3L7rGsICW/LjIYdGCJXOo/WIA==,iv:dKWGaXbLhme9a9YKaX4AqAmymn/MGGenNymwiD2LR4I=,tag:T3kYsg5DuMYrg9ySinl7qQ==,type:str]
zitadel_master_key: ENC[AES256_GCM,data:zNK4FUYfs5/B7shNDNMTybVFG1UHv6pz0LpRNMRZUE/iOnE=,iv:6E5qmd+T+I4OOp76WetooVIf0vZop2Tjo9imPeXrcJI=,tag:eXk2ryWSmnP87ApjEiFjPw==,type:str]
sops:
age:
- enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2dFgyd1VSWUxLZTZNbkZa
c0x5Uk9EOGtBbTJXQzVwQWpGMFAyRkRmQWlrClVBSzFxR3VtVEdFdVpOZ21xcXl4
ZndSaVgra3oyQ3ZXQTRnYTJWUEJncWcKLS0tIFRGMDhDZkZJNTRmdXhESCtrcDlK
R1FONm52SFYvZ2hnUm9MOWhBbGU4cFUKAzvxN3xv9DeRmlWxVKjLQjvifRLkuzOL
kg1mjiNqbLDTge6wFyjmpOpOpuqDzlv7lLJH0Af3yLt1ghPHeiehcg==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkZWdHZHFiRDRRaGVkdHZ4
TkhhUkQ0eEZtUEtGZHhHRXdiTXc2cjhEYkhVCkhqMWFCTFAxTmlWSko1cW5GQVpj
azJrbi9QMnUwM3lSY3ZKS1ZiU2lIUEkKLS0tIDNxN0dXKzFaVTlxZVY0bDY1U01F
Z2pDeHRWSHFCWmRJVC9ObWZON0RHR28K+gsPEjdWKMegGBREpMAa9guvNJ7gsYcK
FJXtHzXOwKuS9mQCveMsjr/o+xdqE/44BpiSos78Q4iaGhNGoI8Wuw==
-----END AGE ENCRYPTED FILE-----
recipient: age189v3q8quejkaz4r8u0g2aechsfk4sk3465khx35erd320rea5scq98v7er
- enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXWmlpZFBqM1lteWhacHcx
ZDdZZUpQZEdCaVI5b3kyZkt5VEMveVNYbzFJCnEvYVlFRExzR0M5WjRZUjNvbGcw
NkMxQWtodTVVdUZzcS9pYXJPV0xoV2sKLS0tIDhXVWtyeFB3ZEx3cjZqV1lwVld4
VWFSakJvZTJFOXBkaEVOaDYrSlo2aFEKyN2A4vPJ8szeIhwVC/VExXj7kDggJE02
FtzFIiwHVLzWkIlUc6SFFVX43Q1Z3aYmQtnDuXDBZVOSQfMtg96eew==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvaHJkeFhxL3QycUZrTjAw
a3QyOW55dUVYdlBhSWUvcytISXlIMDBtUVJjCkIrVlVWWGpGak53UkU4YXpkUzk4
SFpVSDFtbzBTQ1ZwVGpWa0tGYmVnQjAKLS0tIFl2N1d4eWZCVTZYRjFGWkliS25j
a25PN3dHZDRiWkVDUDJwUXNUQVlQRDQKYp/akAfOPAuSopIr5lzVU1lkHx6BNfq2
OVsRGBlyyEXc800DaE00PS/ass4Tl245JlhD3Uxkb4V/NnyUON9YNA==
-----END AGE ENCRYPTED FILE-----
recipient: age1usm3v0ugducrzcwud60dda7xfnj49fdhecj7kcsfm7dzwzrzeyqq2jc2hm
- enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0N1FWaVV4MGNnWmExaW8r
UjlnMlZEQnlrSDA0RERONXBYdTM3bDFLZ0VNCmEvVFhXT2lhMHV0QlRWbXNFYWRE
WXlVTDZQVXIzT2FvSW5yN2VIQ2tMd0kKLS0tIC9qMW14QWJIei9PbDQ0L0ZYaHRB
U0NCT0ptR3dlNjdRVlMwZTR4UDRGWEkKiLgiuZWVKYGEtoh4o0iEwdzzngUAkFn1
YRpNjwSqiCIsoerTyN7oghbRnNKY8kSl4TyNGiaxwUprLdzEqgwLbw==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzUG9tQ1lkKzJaRXlXZUtp
bTFkU0s0Mm8vY3o3S0p0bnVoMXc4RkVuL1JFCnlzWHc5UkJjWExIaStpZ3Q3ZEJG
eVZCcXZFL0dpbzFpNldoMXNjQ2xyaVUKLS0tIFNvQVNpZE80UHpBRHBodkJ5UXBQ
VUM2SzRwRGF0anZtdFkzUHYxamc2azAKgz8fTHy0DXHmP4nBkGp3qcXNq5V01/96
xG9UoXVfWlO+t561khy2WfMlSyYJVXMNasJFyno5egvWl23C+n+jUg==
-----END AGE ENCRYPTED FILE-----
recipient: age1fwgg9h68zz8s6xa8qt4yn7gqcqp59s0mma8xdfq9hunksqv8fq4qd9yfaz
- enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXcXFPV0g4c2ZSOWdhZGhl
SUh1K2NMSWEyTWU3SzJIUGd1L3g0MEdlVWs4CmhXdTkxT3lQYWdDa2ljYkg5cXUz
Z3ZTWmE4RTNacXM4RFNmWUZ1WU1qZXMKLS0tIFFTR0YwV2RVcTZ3aXBtNUs5UE9s
anFCMmpFNzBob21LMUprdzkwV1IxUHMKQ+BcKYxGY3Lph/byMfUjf3pDgue2Q7up
PbCNf5QMRd82DCYnCIMk5WD/A5kQArnd+jDjaHuaQp14SRdZ4ph+8Q==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhWU9Cd0UvU2xnRmgxMU90
YndudDVob3JLV0NQMHhtV1BSdHNTMk13SVFJCm9ReXpseW9RMkVXN0RLRWw0aG1E
NTl4Sjgxblhad1FzTERIdk51Ky9aS1kKLS0tIDVCYjVxYWtMTnFVcEFSVG0zSVdx
TWlCeWxiMWhrQjhxYWd1a0kvUEhRZFEKMTSKqcA1FKH2JBqarDBS5S/asiP/Egkv
QMVvqwQpbA5kSrIgzDoGtrx1ieSRmmJT/7oOclLF4cOKReXfSQQUXw==
-----END AGE ENCRYPTED FILE-----
recipient: age1rhnaejc5nwcqcuq5qt45wzr2fncurlwqw0adhnavfraqsdzffatqh5yhl4
lastmodified: "2026-09-28T04:48:43Z"
mac: ENC[AES256_GCM,data:SlyWkzQqqgsDT1uLC5LwWhPhGyexjK1+7Qq02OECNXmr9dhoGzNf76+G1nCoLP5czd4MpaCnk7//aN6Qs6M9DhBV8GG4wDN9pFGWq7JgE7GvPTzJ3J3Ady+yaat3k1HdAE775lIHERa79lxMurzJn66ctgSmsYuIf52qf1WI3GU=,iv:kbawvEBfwyJHYJ0+Q1e0fGTmudPj+mwptt/NxH1u87o=,tag:UYBB28ndbNFSdV0Pf0ncAw==,type:str]
recipient: age154uz4pavaj5qth25ytj0q8chsya4y65pgel04zcrm02je9w6uc9sug7dp2
lastmodified: "2026-10-19T01:30:24Z"
mac: ENC[AES256_GCM,data:tGMSIo2zXAYg6NvNpllU7KCpXoY8kSYZ+WENF9MfHWmionchjHKp+ydEKjaVASUwKanZiZmRTp6KzFxLiPhIacSUL/S2X9fVsaT3nI4i0mYF4QkGYI2VgjhlHkzDvjzWdMeU7iWYrwU37ZyNmPdRfVOJE5khgM9ezjY1jOpK3CI=,iv:jGXETHicyfxlhkOxbKgd2f4vgUthqTCehbu73xygkzI=,tag:X8gUauCMiRDFddxbl2bAOw==,type:str]
unencrypted_suffix: _unencrypted
version: 3.13.3
+37 -28
View File
@@ -9,44 +9,39 @@
# SECRETS ACME (certificat) — injectés dans /etc/stalwart/ pour le module stalwart
# ---------------------------------------------------------------------------
environment.etc = {
"stalwart/acme-secret".text = config.sops.secrets."stalwart/acme_secret".path;
"stalwart/acme-secret".text = config.sops.secrets."stalwart/acme".path;
};
# ---------------------------------------------------------------------------
# SECRETS SOPS
# ---------------------------------------------------------------------------
sops.secrets = {
"stalwart/mail_pw2" = {
key = "stalwart_mail_pw2";
"stalwart/mail" = {
key = "stalwart_mail_password";
owner = "root";
group = "root";
};
"stalwart/mail_pw3" = {
key = "stalwart_mail_pw3";
"stalwart/spam" = {
key = "stalwart_spam_password";
owner = "root";
group = "root";
};
"stalwart/spam_pw" = {
key = "stalwart_spam_pw";
"stalwart/noreply" = {
key = "stalwart_noreply_password";
owner = "root";
group = "root";
};
"stalwart/noreply_pw" = {
key = "stalwart_noreply_pw";
"stalwart/admin" = {
key = "stalwart_admin_password";
owner = "root";
group = "root";
};
"stalwart/admin_pw" = {
key = "stalwart_admin_pw";
"stalwart/bob" = {
key = "stalwart_bob_password";
owner = "root";
group = "root";
};
"stalwart/bob_pw" = {
key = "stalwart_bob_pw";
owner = "root";
group = "root";
};
"stalwart/acme_secret" = {
"stalwart/acme" = {
key = "stalwart_acme_secret";
owner = "root";
group = "root";
@@ -75,13 +70,12 @@
# Les credentials sont passés via systemd credentials :
# disponibles dans /run/credentials/stalwart.service/<nom>
credentials = {
mail-pw2 = config.sops.secrets."stalwart/mail_pw2".path;
mail-pw3 = config.sops.secrets."stalwart/mail_pw3".path;
spam-pw = config.sops.secrets."stalwart/spam_pw".path;
noreply-pw = config.sops.secrets."stalwart/noreply_pw".path;
admin-pw = config.sops.secrets."stalwart/admin_pw".path;
bob-pw = config.sops.secrets."stalwart/bob_pw".path;
acme-secret = config.sops.secrets."stalwart/acme_secret".path;
mail-pw = config.sops.secrets."stalwart/mail".path;
spam-pw = config.sops.secrets."stalwart/spam".path;
noreply-pw = config.sops.secrets."stalwart/noreply".path;
admin-pw = config.sops.secrets."stalwart/admin".path;
bob-pw = config.sops.secrets."stalwart/bob".path;
acme-secret = config.sops.secrets."stalwart/acme".path;
};
settings = {
@@ -90,6 +84,18 @@
# par aucun enregistrement MX) : le hostname annoncé en EHLO doit le
# suivre, sinon rDNS/HELO ne collent plus.
hostname = "mx1.marcpartensky.com";
# L'auto-ban de Stalwart (server.auto-ban.auth/scan/loiter, actif par
# défaut) écrit chaque IP bannie dans SA config DB, donc le ban survit
# aux redémarrages : une IP de domicile peut rester bloquée sur 25/465/993
# (connexion acceptée puis reset, log "Blocked IP address") jusqu'à un
# déblocage manuel. On autorise donc explicitement le domicile de marc :
# allowed-ip contourne l'auto-ban (127.0.0.1/::1 le sont déjà par défaut).
# Si l'IP publique change, mettre à jour cette entrée.
allowed-ip = {
"66.108.44.154" = "";
};
tls = {
enable = true;
implicit = true;
@@ -160,19 +166,22 @@
{
class = "individual";
name = "marc";
secret = "%{file:/run/credentials/stalwart.service/mail-pw2}%";
email = ["marc@marcpartensky.com"];
secret = "%{file:/run/credentials/stalwart.service/mail-pw}%";
email = [
"marc@marcpartensky.com"
"meetup@marcpartensky.com"
];
}
{
class = "individual";
name = "postmaster";
secret = "%{file:/run/credentials/stalwart.service/mail-pw2}%";
secret = "%{file:/run/credentials/stalwart.service/mail-pw}%";
email = ["postmaster@marcpartensky.com"];
}
{
class = "individual";
name = "pro";
secret = "%{file:/run/credentials/stalwart.service/mail-pw2}%";
secret = "%{file:/run/credentials/stalwart.service/mail-pw}%";
email = ["pro@marcpartensky.com"];
}
{