Hermes Agent
2edce1cd20
Rustguac : guacd en loopback (tls=false) + vhost guac.marcpartensky.com (sans ACME, TLS par Pangolin). KasmVNC : display :20 (pas :1, session X existe deja), desktop lxqt (lxqt-wayland refuse), mot de passe regeneré par empreinte sops, auth HTTP 200/401 testee. Rustdesk : ports reels 1.1.16, hbbs/hbbr corriges; nginx guac/kasm en loopback. Vault/rustguac secrets lues par le bon user (vault, rustguac, marc) au lieu de root. WireGuard client sur wg1 (10.100.0.3/32, endpoint VPS 104.129.12.158:443) desactive tant que le secret sops wireguard/tower_private_key n'existe pas (evite le blocage sops-nix sur tout le build). hermes.extraGroups += systemd-journal.
17 lines
1.1 KiB
YAML
17 lines
1.1 KiB
YAML
kasmvnc-password: ENC[AES256_GCM,data:nWz603CFpDptabxC1NOeWLitIjCzPa4onOvIxhJ+asU=,iv:rWp7H10pfPbN8a/ti+6/ZnEOqp2p6M1TzXyQa9nA6yQ=,tag:wp8XCDNAanZ0PW0wipty/g==,type:str]
|
|
sops:
|
|
age:
|
|
- enc: |
|
|
-----BEGIN AGE ENCRYPTED FILE-----
|
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3QjYyQWVheTNJYjNLaHNz
|
|
b1laZGlhdXRrM0o4RXUrMTVXUEFsVWpyYVNFCmtlWWk3OGNkWW5qaktIZkgzNVl4
|
|
QXpWMnZqdjluTVp4SDQxeUZCOURTQmMKLS0tIGdUczM1ZUJhM0hrdTNpVzF3T3lV
|
|
OGYxNXAvdjE4S3BKcVJUaStUbVZ1VlkKu+/dDDpIrxji+3D2GBh7gjNPqC80v+En
|
|
zB1x5KuxDnCAHFg6me1O+1/U/exnHf8vajdsKMDskk43bph4iz8c+A==
|
|
-----END AGE ENCRYPTED FILE-----
|
|
recipient: age1usm3v0ugducrzcwud60dda7xfnj49fdhecj7kcsfm7dzwzrzeyqq2jc2hm
|
|
lastmodified: "2026-09-30T23:17:44Z"
|
|
mac: ENC[AES256_GCM,data:sVxMPrPooqDN1TufskrKZSo7X2myuwmQiVdn0ZpmuIAZCDI7wdlgsBbEq8nkr1H+D9ni0sE51b6bkCtY9gGHNOW51wq5ZxpES9Lvyjn1BZDK/9C1BqLAIYlbDDnAAVS4xUlWjVpLQpCWLvknCNqexW+Yy9YF8HOcTCn4e1LsirY=,iv:fVtM3XmycJBDEu+k2MyCCMNuvYdNTk/9zhouUI1qOg0=,tag:YghF+Z2o5vkk6450pRgBXA==,type:str]
|
|
unencrypted_suffix: _unencrypted
|
|
version: 3.13.3
|