Hermes Agent
ab03b394a0
Module services/ygg-mesh : Yggdrasil en réseau privé (mot de passe partagé, clés publiques épinglées), liens Tor via une instance tor dédiée (onion service par machine) et lien direct multicast prioritaire sur le LAN. Chaque machine garde une adresse IPv6 stable et un nom <host>.ygg. Secret dans secrets/ygg-mesh.yml (règle .sops.yaml dédiée) ; config rendue à chaud au démarrage (ExecStartPre + credential systemd), le mot de passe ne touche jamais le store. Identités et clés dans la table `nodes`.
44 lines
2.8 KiB
YAML
44 lines
2.8 KiB
YAML
ygg_password: ENC[AES256_GCM,data:Q4FzDijhqTI05cbxmq0T1+uaoQR4UC3Ju323dQnkshmVzqB4Rxm7cbFNd+Lks1Pf,iv:9xemRlxAJBhxxnGqjnXIJAgehYmL9nS36mhR6DhpHVg=,tag:1ny83dvGbBEwhyMPHewgXw==,type:str]
|
|
sops:
|
|
age:
|
|
- enc: |
|
|
-----BEGIN AGE ENCRYPTED FILE-----
|
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlRTZsa1dHVU5sU0QvdWVx
|
|
Z21kOHRFVXkrUncvOE8wNVJ1YktGRVBsQ0RzCnQ3eFpNODVXUWE5WE5rVDhicHQz
|
|
WEdKUkN2TXRxaFdVQUhyc3BkdklaWGsKLS0tIFJ1NEVqV3lyQ3MxUnpjSURGRzNX
|
|
alF0RXZFS1ZYNHpSR0JORVFCalBvTXcKIbDdKh4NDE8LWbojePgTMJfDJH0+ChBE
|
|
0H4UvZk2JvRRMv8X626umPUI9I6LxCY0wRBfpMPtTzssKdoVdbwmIA==
|
|
-----END AGE ENCRYPTED FILE-----
|
|
recipient: age189v3q8quejkaz4r8u0g2aechsfk4sk3465khx35erd320rea5scq98v7er
|
|
- enc: |
|
|
-----BEGIN AGE ENCRYPTED FILE-----
|
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArNXlJUFpnUWVUOWRQbE4r
|
|
UkRTRGN6dVFzNWo4UGUwejAwYy9Jb0ZYZVZNCmxnYytlYU9vazV3WVFON3ZQcEJO
|
|
S0xrRURiSTNVS3ZVeGxWNnBHWVhnNWMKLS0tIHFqdWFUUHF3KzU1UlgxcldxQk5L
|
|
bWpUaExRbVQramNucStJS3dMVzRmcGsKy2We7ZkZlGL0tbdBA1AzY9MTlvTdTt9e
|
|
b5Ym3/++u/bnWrsnA8UezIOZjKD/+lr3Hyltkfm91Pvxxke/h7cRtA==
|
|
-----END AGE ENCRYPTED FILE-----
|
|
recipient: age1usm3v0ugducrzcwud60dda7xfnj49fdhecj7kcsfm7dzwzrzeyqq2jc2hm
|
|
- enc: |
|
|
-----BEGIN AGE ENCRYPTED FILE-----
|
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBRlN6RFAyVjlwZFBGMDkw
|
|
NFo5SDJuc0VSR3ZyWVYvWEY0WUVzb1JDdkNzCkF4MzVLY0FRWFd4clM5bUFwWGU3
|
|
YTkwWjdzVDI4QTFBNkdjSUNEY0g2WEkKLS0tIE15ODZwNVV0eXY1L2tmaW1vSkNy
|
|
bVVmQ2tuTEpkb2hDZHFQc2kyVXBzNXcKbzOQ5d+EuOtOr9F9/B1F9jRMOz9pGiBY
|
|
LUw8gwFKk7osv4zJvN6jLUyyHzMLdojUhPgaMzRZbYYEqb8WOQ7+FQ==
|
|
-----END AGE ENCRYPTED FILE-----
|
|
recipient: age154uz4pavaj5qth25ytj0q8chsya4y65pgel04zcrm02je9w6uc9sug7dp2
|
|
- enc: |
|
|
-----BEGIN AGE ENCRYPTED FILE-----
|
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLblB2UnlweHNrYURLWHZM
|
|
ZHFycEwwWENqcUluRm50aVA2ZnJwWktPcUhjCjVDeWw1OXJCVmcyeGhpd0xnaWZk
|
|
K0ltOStMT0ZBY1BWUldmdi9CYTd0ZEUKLS0tIHN1L3VqaHM3bkg4TlFKem1ZZjR0
|
|
YjZWbXRQS05Ncy8ySU05STlQQ3ZWb3cKLpusOOeKlvHzgA0U98ykaHYh06Pg/MJ3
|
|
S89WKR8btX4Ccb6Xhr0Dtlqo4Pnkd4QXqH2tMxzoUuf2ySpT0pJGaQ==
|
|
-----END AGE ENCRYPTED FILE-----
|
|
recipient: age1rhnaejc5nwcqcuq5qt45wzr2fncurlwqw0adhnavfraqsdzffatqh5yhl4
|
|
lastmodified: "2026-10-23T05:47:22Z"
|
|
mac: ENC[AES256_GCM,data:Xq+lKojxaNUkhwqjXKJMxPEAjTlxwqk34KHwTwvdjO01GbkFlE3wM21+Tbd5h3EMO64dp/b6i8dkVQ+7iydWEFSbqT1t2gYrk7QTTC/h5wVt3+dTKmbdFbsjiOk6mDOPDhRSipvK4AqkYHvXc+WfVm9T+joou8almxSOxlB6FPs=,iv:zCIyPinmE20hE149oNZoJeAcscyjSWG+8wpmVrtT5lA=,tag:g1/jZDpCjX/qf6giD00nOA==,type:str]
|
|
unencrypted_suffix: _unencrypted
|
|
version: 3.13.3
|