sops: update secrets

hosts/sora/services/neko.nix

@@ -0,0 +1,23 @@
+{config, ...}: {
+  sops.secrets.neko-admin = {};
+  networking.firewall.allowedTCPPorts = [8085];
+  networking.firewall.allowedUDPPorts = [52000 52100];
+  virtualisation.oci-containers.containers.neko = {
+    image = "m1k1o/neko:firefox";
+    ports = [
+      "8085:8080"
+      "52000-52100:52000-52100/udp"
+    ];
+    environment = {
+      NEKO_SCREEN = "1600x900@60";
+      NEKO_PASSWORD = "forsen";
+      NEKO_EPR = "52000-52100";
+      NEKO_NAT1TO1 = "5.161.102.107";
+      NEKO_CONTROL_PROTECTION = "true";
+      NEKO_VIDEO_CODEC = "vp8";
+    };
+    environmentFiles = [
+      /run/secrets/neko-admin
+    ];
+  };
+}

hosts/sora/services/traefik.nix

@@ -189,6 +189,19 @@
             tls.domains = [{main = "*.flake.sh";}];
             tls.certresolver = "production";
           };
+          neko-insecure = {
+            rule = "Host(`neko.flake.sh`)";
+            entrypoints = ["web"];
+            service = "neko";
+            middlewares = "redirect-to-https";
+          };
+          neko = {
+            rule = "Host(`neko.flake.sh`)";
+            entrypoints = ["websecure"];
+            service = "neko";
+            tls.domains = [{main = "*.flake.sh";}];
+            tls.certresolver = "production";
+          };
         };
         services = {
           gitssh.loadBalancer.servers = [{url = "tcp://100.121.201.47:2222";}];
@@ -203,6 +216,7 @@
           hedgedoc.loadBalancer.servers = [{url = "http://100.121.201.47:3300";}];
           vaultwarden.loadBalancer.servers = [{url = "http://100.121.201.47:8222";}];
           searxng.loadBalancer.servers = [{url = "http://100.121.201.47:8100";}];
+          neko.loadBalancer.servers = [{url = "http://100.104.42.96:8085";}];
         };
       };
     };

secrets/secrets.yaml

@@ -12,6 +12,7 @@ tsauth-sakura: ENC[AES256_GCM,data:iN77ArKDnltxrWGCz8bMqMHBAp45oGUk+n5ilAE0tY2rz
 snowflake-runner-token: ENC[AES256_GCM,data:CYtnZeCCd3IbNq95xCAoftYRxYf5QdZk1cw2PgRQMkBBc2kVkBpluQ==,iv:zoUvBD0QYk3rZytVjKZ8qizLxiBdzkRnTowXUULgMZY=,tag:J5vg+ipkcPKUSmbCq0Yoiw==,type:str]
 basegbot-runner-token: ENC[AES256_GCM,data:US3VkT2+S9sKPJ7zPNNBudV/884/cNfmEZVdmWHnL4WWdvUej5aIbQ==,iv:mEjU7DF4NCX7WwLP4+CxlV3aKZOkL7t6wyM4Mz7sPrg=,tag:JrMiiQ2TT3OET4iyO6pUog==,type:str]
 searxng-secret: ENC[AES256_GCM,data:SSvspQVRp79zJq0hzaqzuJIWFtVUoaqHGH9PXUViiXb9UKJM34t82o2J5K69RcOSBL7HadqmxcT4Eh8e8ZUJnquD7rrPdWb2Ih4zS7MmG94=,iv:wrQNNU7CjzfePNe1tWEXmN30vC0jTp+PtgfI3/XH22g=,tag:QAt/QL846hLLIMLQZUM3mQ==,type:str]
+neko-admin: ENC[AES256_GCM,data:E5goYrVyM2uQ1WLLHdcOzqX8gGO5EXJRqCRtaqAjrbUAeFRDU8A=,iv:Osh2SCeFYIvossZZ1NZH0xMrfhTcYAa6nssJhhmNNP0=,tag:m7shoTDw+Cya6Cg50yWaZg==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -27,8 +28,8 @@ sops:
             YWNQcURKMSs2U0pOa3E0cTdCZ3RnalkKGayA7DBUQS+kn+6OYVBc6oTunF0qeZdt
             5b9DLHgh0HRWFm09XGSOog8K315d93Wzblw1My1/dXeEQX/ryinqUQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-10-20T05:26:01Z"
+    lastmodified: "2023-11-30T15:51:55Z"
-    mac: ENC[AES256_GCM,data:biOG5oEJBeVjIWd8libfHdXH3fuJ1oge7QCT2RyxtwKHu4cgNj3ZmBgI204WEygJNDnHAg2X/ndc7uZflILT30xSEy1QYEkHzV9PBoznQaFotz1BsoIbFUMlNcpheL/Ew8vqC4Yu2p7PBX1SL5QSaBdQy3x9G6+6xcCISSS5PjI=,iv:ZONoT/slAIzE91TdAlwfeEjJVdDXb/OeQ8T+HDwS/FY=,tag:J3CdVUnkeMJ3VcwJnXeyYQ==,type:str]
+    mac: ENC[AES256_GCM,data:ACaSo0nbReuQzTUXoxfq4mjOvu6izHabaD+76mlsMdDE+3+c2ZLM1v4ZfbsBjWR+IHBv3L3TI0dF0PaCDPQygygDm9Lrs9S4i0bKineH7jou17dIe2BSaCQlMZMJBhPI3h37FyCJ42Q6Pmes398tbZmIvcvKJ/gYhreLdjXyjdQ=,iv:sydAeuO3sQetLcv8Lpx0ojCzsbMiofDdnzYczTI9SsY=,tag:qGyhnnxYT/CViiezEOFU3w==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
-    version: 3.8.0
+    version: 3.8.1