From 35f8c10e7ce9a49ea31a92b8abff069437a77f3c Mon Sep 17 00:00:00 2001
From: Your Name <you@example.com>
Date: Tue, 1 Oct 2024 16:04:55 -0600
Subject: [PATCH] [NixOS] k3s registry file working in principle

---
 nixos/k3s.nix                       |   2 ++
 nixos/secrets/k3s-registry.yaml.age | Bin 0 -> 2698 bytes
 nixos/secrets/secrets.nix           |   1 +
 3 files changed, 3 insertions(+)
 create mode 100644 nixos/secrets/k3s-registry.yaml.age

diff --git a/nixos/k3s.nix b/nixos/k3s.nix
index 7c79aabc..64dbf1da 100644
--- a/nixos/k3s.nix
+++ b/nixos/k3s.nix
@@ -13,6 +13,8 @@ in {
   };
   config = mkIf cfg.enable {
     age.secrets."1896Folsom-k3s-token.age".file = ./secrets/1896Folsom-k3s-token.age;
+    age.secrets."k3s-registry.yaml.age".file = ./secrets/k3s-registry.yaml.age;
+    environment.etc."rancher/k3s/registry.yaml".source = config.age.secrets."k3s-registry.yaml.age".path;
     services.dockerRegistry = {
       enable = true;
       listenAddress = "0.0.0.0";
diff --git a/nixos/secrets/k3s-registry.yaml.age b/nixos/secrets/k3s-registry.yaml.age
new file mode 100644
index 0000000000000000000000000000000000000000..93903499bc932dfc5e5b22a7c15f2c8118249868
GIT binary patch
literal 2698
zcmZ{mxytkk8OKFzoXSRQM-UO>XOhV>ljcD7$u`+n8?*1pB$=#*r#Xt2RyLNF-h+*x
zjW=O)P!0#HgCdBph0XWk75sSq8&8<0AJQ%!_vfqZyC3yq4leNN!zbryDn6vi1;b$C
z9OR=lkY@<J(6OzMO_0HU2LpD$;&=eAl}A}5qq*ynzx;vD)+#<>^G?neKjY~d0NN!L
zUqME^Zn3>OQPwVt+a$wqT)ZMg-_b%UG4nI0jf*bC4rVTK+en7Hu~KWQ2R7vKfo!^{
z3`lJn5op*a2s+q9Y^n_4F>z+Wqff4hJ6y4ZiH(7~qw-p&79s9O|1nLu2Ya)gSD)WJ
zxxenO^zu@UNUmFIjyt`RObXxxDCb*S#M^*&^V6%=X-$e0vC(5p9~P=7`)iuC!J{m7
zN@!76_bJT{Q(^s>HVJl)=V#oMU^=)(_vL^+8pt2al8D*X%5i()VUGpoX%ZcKdT`{)
z3KVA8O#mXI6u0XZ30FhC-$_o=ZuCxD*hD4@)*^wNe@wHwuv_(W?&WMXKx3Dxo_s?X
zb&HZ*qHjW;k(rItZ`$zYGF`KcJT;8vAn{`mH5kR2Ty{HLngM|oA+4kh)y_>PMG9rI
z%ldz`aSG4*DsGT|8lD$fa1nt*m1!AN8U<pgjD>&%%9368uwk(AmQV7^qQY2@V02gY
zG@4p)m7}z!;FCVWh24g#B?C-fXt8?D!2MYa`h`3?b*H0>5FvD6$UdKMD)q!Ib6zbS
zXCF(;MPYO@7Vw2uG~=>s;}^MYNM>+x)<?B8h7BXxn~_jHvj9wUdTriOaAB5GPqxm1
z2uPp%)66Trkj^`RR1c=>;wQ+|6R1udr|-8tmIGEKT64dQV#m)~ltFxXS9|s5TL=!b
zIDJAdQ0Dn9RyMPeM1v1$LP_03?s|~VeoAT<aAnEVFzp%>R_H^%%Zc?ELlMIW1!Kgg
zoqSRxl=KZY6^GJCrW+b>sr#stJ}2~d@*K|j#a14(=oc{Zx*qnd?KcSQhiew;l|V5h
zm0z|>eN?y8i}Hdo)q&Xx3G=aC35@G&6r6fEbna!V1y0wvdg=)z`7uq>v$9{$G?6Y@
znY<nbuD~zx7SRf_7ml>REXQdivx1;H+$RB}^b;?^nXLj|kPn$ff-GR55^dSUtFXyC
zi}}++`w^V3$nb6fYBLtL{4BSRF)tcA(m8j-z}UGaV;>sFgNTEoymd%iNx+6aqE$J$
zX&p`E>*lJ%gX%b!J<LR3DSn6sxu~^^HB(zpRaR8K>*W3L;A1@_H7va%6&8v_=Hte_
z*)~P+>V78`Z6x<yz!67q4HGiS(-WMRzR9J_%`$wi4x&UA41HiLu{GOK*ND4?SSb-h
z{_X!LN%?moeuR*v4Q<IgJ-jf4d!2&g&@_4x+3G%-I3JC^y`H!`T-|3;PFC=01l>gi
z+NX&Jgmkf)L|wL?NCXG2iGX?M8{A(!Xg#OF>|d_brjs*pz4do{#5m(&b9OC0Ub$i+
z*g$V03atEkDpjkCv*sYf9`3|r+8v@P<Y%7hn2ofhM%^X>C#BGeg!i{$rA?mOT0v88
zbetlfoNzQ#-yKL|k9D(fMQfIk><t@$L-)4ao^@RrsIZ^R{FYXhk$fX1t`gw2!?T=3
zSLhr>cZyq9vmet)iLaUU9Fb-cxj|UGsFbs5P}<ZYMfOTp4;NI)HD%+<z}((0*;9Re
zRpDe30$M(48zHXG)FCIZ80aowS2ulzul+SJXcfJqL8*xW<hk%GCWX@}(`4%|h?uQP
z3$lUtYTy_#)&j$vEE3fU6`D>)AFGbvw>a%?D;zU*Fx6b*a?|G1bZ?3%Htg|uCuIK}
zjQ~+?eDm#<h;FMN*B%9(POT!JC7zl?D;CT}2Hi<G_hj`2=5_rPmAE7J3Rh%!fSJ!W
zdI@ZB01zy3E&Z(Gh2Uj@1H{9LKUOj)YXs2GMl?1po6Tv{w*e8l%CKz9jxVpg2MqU~
zBNU-yzOcKVa9Y%B@JLwJ6x&WHeMLL2{;e9*A(9k%!dfqmcLP|F&VAQ64^R1*ex6*n
z3S2|SYY=Rn`D?w_>f@3}!lS4a%0!S<?^Y~g`-^?TH@Lba;R8?j_^5*(i1C}Z?eNS!
z7oN9z*QpWFZ_(L%M}yk%Mz3d|$<h3<HMnt>4qi6T<8wokW!KRhF0l8V_XkBor3Ri(
zDvTQZo9v6UdQa2V*wnBl@Nt-1NcLPRJLDbN4YLI_<zpqSCltW?IXeQLdK-vXX8Yk@
zkxN=9bdj=yfZiM_Ft>)JHcN43mOMcU>lvmv<&b^6wiVxO>;lxf;SH}WyYWrkh~Dk_
ze74oQb`N@a-N`dwwk}$_(IGS5C@TG>1WUSV+lh>juo*#b_K-c}xE6^|@qdlc6Vp5r
zwR&;I+Y2$=Hl)*?x9n4<UO=+M2z%{i)9J&959cVZ=D7!kgb*sp99>XWv?jzV=pvT%
zqQGjf*uqH4vZS28_4z-3{~7YhAJf15^V2UC|EvCs?|%9#@7q8A_h(<TfB4I<e)EH0
pf8%Gi@we~&x%lEcfBn;Mhkt$ZYrpvN^WXjC58wak*MI)^{{U4SZ&m;R

literal 0
HcmV?d00001

diff --git a/nixos/secrets/secrets.nix b/nixos/secrets/secrets.nix
index 9c03edd1..7c22bbd8 100644
--- a/nixos/secrets/secrets.nix
+++ b/nixos/secrets/secrets.nix
@@ -15,4 +15,5 @@ in
   "ryzen-shine-kubernetes-token.age".publicKeys = keys.agenixKeys;
   "1896Folsom-k3s-token.age".publicKeys = keys.agenixKeys ++ keys.railbird-sf;
   "api_service_account_key.json.age".publicKeys = keys.agenixKeys;
+  "k3s-registry.yaml.age".publicKeys = keys.agenixKeys ++ keys.railbird-sf;
 }