treewide: init kanako-hkg0

.sops.yaml

@@ -3,6 +3,7 @@ keys:
     - &marisa age1sfnct03u4cvfj98x4yjrcrrnu5gg8qgxrwk4uqq8w4e6wveeaedq97rn44
     - &flandre age166kxtrcx99fxlgtvz5mvyt5ctvk3dt09f42gvm94ngnkyztmmelsyzdn77
     - &reisen age1uf2h3hlv373ppdstjlngyuu7q5mee3u3ww3674lsj9rlt9ax7vqsv7wpe8
+    - &kanako age1798e9rralft7ac4w8p8d2hnj5p8m3ajnnmykgn4p7apx57pcaeqql2c4jh
 creation_rules:
   - path_regex: infra/.*
     key_groups:
@@ -19,6 +20,7 @@ creation_rules:
           - *marisa
           - *flandre
           - *reisen
+          - *kanako
   - path_regex: secrets/hosts/(opentofu/)?marisa-.*
     key_groups:
       - age:
@@ -33,3 +35,8 @@ creation_rules:
       - age:
           - *marisa
           - *reisen
+  - path_regex: secrets/hosts/(opentofu/)?kanako-.*
+    key_groups:
+      - age:
+          - *marisa
+          - *kanako

flake/hosts.nix

@@ -139,6 +139,11 @@ in
       system = "x86_64-linux";
     })
 
+    (mkHost {
+      name = "kanako-hkg0";
+      system = "x86_64-linux";
+    })
+
     (mkHost {
       name = "reisen-sin0";
       system = "x86_64-linux";

infra/hosts.tf

@@ -30,6 +30,12 @@ locals {
       enthalpy_node_id           = null
       enthalpy_node_organization = null
     }
+    "kanako-hkg0" = {
+      endpoints_v4               = ["103.214.22.143"]
+      endpoints_v6               = ["2406:ef80:1:3c5e::1"]
+      enthalpy_node_id           = parseint("f87", 16)
+      enthalpy_node_organization = "core"
+    }
   }
 }
 

nixos/hosts/kanako-hkg0/default.nix

@@ -0,0 +1,10 @@
+{
+  suites,
+  mylib,
+  ...
+}:
+{
+  imports = suites.server ++ (mylib.path.scanPaths ./. "default.nix");
+
+  system.stateVersion = "24.05";
+}

nixos/hosts/kanako-hkg0/disko-fs.nix

@@ -0,0 +1,68 @@
+{
+  disko.devices = {
+    nodev = {
+      "/" = {
+        fsType = "tmpfs";
+        mountOptions = [
+          "defaults"
+          "size=2G"
+          "mode=755"
+          "nosuid"
+          "nodev"
+        ];
+      };
+    };
+    disk = {
+      main = {
+        type = "disk";
+        device = "/dev/vda";
+        content = {
+          type = "gpt";
+          partitions = {
+            boot = {
+              type = "EF02";
+              label = "BOOT";
+              start = "0";
+              end = "+1M";
+            };
+            root = {
+              label = "ROOT";
+              end = "-0";
+              content = {
+                type = "btrfs";
+                extraArgs = [ "-f" ];
+                subvolumes = {
+                  "boot" = {
+                    mountpoint = "/boot";
+                    mountOptions = [ "compress=zstd" ];
+                  };
+                  "nix" = {
+                    mountpoint = "/nix";
+                    mountOptions = [ "compress=zstd" ];
+                  };
+                  "persist" = {
+                    mountpoint = "/persist";
+                    mountOptions = [ "compress=zstd" ];
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+    };
+  };
+
+  fileSystems."/persist".neededForBoot = true;
+
+  environment.globalPersistence = {
+    enable = true;
+    root = "/persist";
+  };
+
+  services.btrfs.autoScrub = {
+    enable = true;
+    interval = "weekly";
+    fileSystems = [ "/persist" ];
+  };
+}

nixos/hosts/kanako-hkg0/hardware-configuration.nix

@@ -0,0 +1,14 @@
+{ modulesPath, ... }:
+{
+  imports = [
+    (modulesPath + "/profiles/qemu-guest.nix")
+  ];
+
+  boot.initrd.availableKernelModules = [
+    "ahci"
+    "xhci_pci"
+    "virtio_pci"
+    "sr_mod"
+    "virtio_blk"
+  ];
+}

nixos/hosts/kanako-hkg0/networking.nix

@@ -0,0 +1,32 @@
+{
+  profiles,
+  hostData,
+  lib,
+  ...
+}:
+{
+  imports = with profiles; [
+    services.enthalpy.customer
+  ];
+
+  services.enthalpy.ipsec.interfaces = [ "enp1s0" ];
+
+  systemd.network = {
+    enable = true;
+    wait-online.anyInterface = true;
+    networks = {
+      "30-enp1s0" = {
+        matchConfig.Name = "enp1s0";
+        networkConfig = {
+          DHCP = "ipv4";
+          Address = hostData.endpoints_v6;
+          IPv6AcceptRA = false;
+        };
+        routes = lib.singleton { Gateway = "fe80::1"; };
+        dhcpV4Config.RouteMetric = 1024;
+        dhcpV6Config.RouteMetric = 1024;
+        ipv6AcceptRAConfig.RouteMetric = 1024;
+      };
+    };
+  };
+}

secrets/common.yaml

@@ -1,5 +1,5 @@
 user-password:
-  root: ENC[AES256_GCM,data:kRmWP8njGn+oMdV6PQSxeV9tdTrAGjcJGAYM522nxz5gtr6b0XDoTxmhrNLPDZqcI9l8Xhh8ER3OShZMzvVKcwXfpBgqcS4csQ==,iv:RlNTT7L5DRkQ2Nq7te4fUZYspmZYMEDK1UVzTVE5WPw=,tag:gVokqSdkfYNySo9+of5R8Q==,type:str]
+  root: ENC[AES256_GCM,data:BHSPDzc9MgXawA9oSQvnymk7YT+OpuVCvg/jfvDV5bKZ5NHsY/fhELstukoICFfVgWTEErHpYuGrcFp2A3qR+ASBbrtdnmJPAA==,iv:0UN5uL8e4mqkDQL7q4M3gb6S2RUfbg7c8nPO7mCuzHc=,tag:Ku9W6s4Lz1RHpypNg3xtVw==,type:str]
 sops:
   kms: []
   gcp_kms: []
@@ -9,32 +9,41 @@ sops:
     - recipient: age1sfnct03u4cvfj98x4yjrcrrnu5gg8qgxrwk4uqq8w4e6wveeaedq97rn44
       enc: |
         -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1K3h4aW1HU2FPZDFDSzc5
-        Ri8ycE5VR0ZpZ3R1QTlWY1VIZ1plazZoZVFJClcvcFV3ZE1lZ1ZnT1JacUYxV29B
-        dEtrZTNKdEZ6bTJ4VnVWb0REbDRRMXcKLS0tIHpMYWREWG4reWoreFYyMG95WEk0
-        ZkUray9HY3gwV3hmbEdIVVY1VElQVHcKWMYjkiqNVq8MMOxZ83kN1XL1Orlg78ww
-        QCoKw3xD25lStf5CIGOgHZBmtvhgnImj+7NiCz/Pa+LtUz0SQSp+/Q==
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIZ2g2RDlibWNVMWFnVUhv
+        WWRRQVRUaGNNZ09ibzNKZ2FUTFkraUFwN25VCnFxc0lWRVIrVTB5c3BhNThzQXRN
+        Q01FZWd4Qnc0dXBkd2xPZjFTVHlYZFEKLS0tIEY4cnlLRThIellvZWdnVDFPVzBN
+        eG1GV2c1Q1plb3NMVm1CSHhDcC84bjQK0nK1DPkDyvcEQaAYgLPLgHyuCcbYqQR7
+        Lq/zHjLCHoYC09hLicV9bKiRN8+REGTcaDN+lNBiPe9LdB37Z9pzeA==
         -----END AGE ENCRYPTED FILE-----
     - recipient: age166kxtrcx99fxlgtvz5mvyt5ctvk3dt09f42gvm94ngnkyztmmelsyzdn77
       enc: |
         -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyVlcrN1dySmtCSWY5VTJa
-        WHFETXZoOGRIZWhOTGphK3gzUERxSkpKUGpjCjJTNE1EZFg1M2xPRU9XOGtqTzZj
-        S21HWmlGRGdMcHJBNzZwUW9aU3JsUlEKLS0tIGlxcWFqQ1psdWVabTFURVhsaUF2
-        bTVZdTRnVkhKa2x2T0lGUU9jaTFJcmcKtDjAosAhPWIPNfp2wsB7/2ADF051dTCA
-        PmPY15/snA+bT8Ihbt61lZ+8YoS8InnzoxZMPPwSZOSQEQ+ASH5HZw==
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzckI5Y0xtOTZqVjVicWpu
+        azNoc0FxdXZQS1k2SVZMalBKM2w4Nk43QmpvCkJJK1RoaUxaWi9KMDlIcFY2UVgx
+        cndsdVo5VDNXMVRBbVNtRFJUaDJTM0EKLS0tIDNMdmV0ZEw0aUNZdWhPZFc3M3NL
+        MVJsMjh2VDJrbjZWejF1SnNzdXJ6YkUKVUYeF52d90WwFW0ez0VzCdC3x3WIbwUK
+        Cf1qwDrfzO7FcpEcfxi3yOxqaKKSOS6Ugc8j2eqZlCigFm7RqqO+5Q==
         -----END AGE ENCRYPTED FILE-----
     - recipient: age1uf2h3hlv373ppdstjlngyuu7q5mee3u3ww3674lsj9rlt9ax7vqsv7wpe8
       enc: |
         -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNVndwNlg3QzJaYWRQeldn
-        RW9LdXRIaEFtWVBWSnRXNW5pZzVzNHl5Sm5rClNhVU0xbjZmQXpqUEZYa0lmTG1a
-        THhOaUhrbFZxM2xnM1d4Yi9DNGVydWMKLS0tIHpMUVJHQ0NxSjQ1YWdOb1dGbW8v
-        SEtlY1ZoZEkrSU04VmRRTVYrTS9mbUEKt+7p4KMFFj9+4lRhRhUOFUl9EPljV8Co
-        HPaO9E3PrsUtnPObwzHUhIOdugOWCzhUSUklCI2k7u6TkCnzqTzTyg==
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkeHpHT3BwYU9sVmVEYXFF
+        dDM1V29mTWVmZ1NGdzJrdnNOc2dyb1dyYzE4CjFIanh6VzNyeGJZeGovTkozWFBK
+        cHBibWovNm1PVGJkbGk1eVc3eDI0Y0kKLS0tIE5rZ1BJNW1pYTgxUjNTcmtmVkQy
+        eVI2MjZuUVJscU1hckNxZW84OEtvRWMKHP/R2bMc8s1im4iS+AKNsBXrUNw7vR7Z
+        szwaiWyPqKYC+luBJE/bGclqt5rrK+canJhNMdinTyEe8Oxkpa5/5Q==
         -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2024-12-12T11:23:56Z"
-  mac: ENC[AES256_GCM,data:ZiGNQCdn26oArPFDw5S8NFKgM/SPP5H0rPWWqqtrfDK3nE5zZ3txrZrF+8ZEUqs0WdV/P5FZm5WL/ek2LUD5OFCzwtbGnFkATeFqt+kr0vUZ5M0gUT+fiKQ49WuntviZng9S3iIH59/rgRwe+cOpakpWh4RgQkdKDTsthekv1Pw=,iv:vfwGjyIRppw6pXVLtmeMd6zbnht8fpLSZFHhu5F4swk=,tag:6T9dthM3uKDDQxFH+ieaRQ==,type:str]
+    - recipient: age1798e9rralft7ac4w8p8d2hnj5p8m3ajnnmykgn4p7apx57pcaeqql2c4jh
+      enc: |
+        -----BEGIN AGE ENCRYPTED FILE-----
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjQkM1TnU2aGh0eTNEaTln
+        N3JxNVVWSERTcXNWblNpdzJoN1dtNzZTZndNCnpXMWtjNFU0cVYwUmlGY2ppOVhx
+        ZjBISnZRZXJrS2xVb0VnWTk1SHZDRGcKLS0tIGNrZXB1bWZBVEVuRWRma2Nqc3lY
+        OVZKeUQzSm5BWGRQQ3IwVUZ5Umh3RzgKc/mu6kYUGz8Om1asdQqQ3SPGdc9kYqLW
+        gVRLhblW3HdjM7el+16goXOoAsgzY25NezZUnm1W0STO82SMQf7nsA==
+        -----END AGE ENCRYPTED FILE-----
+  lastmodified: "2024-12-12T16:59:57Z"
+  mac: ENC[AES256_GCM,data:gIgwx8sYpFNs6jEv1gly8P7HlMWhnJepKqdHBYL3AY5FhSSug0NyyE2kuTwBDlbTZQJWKDI8MlTr1EV4r7QcUxRnCiViTUor/3neUJFA+/SRP1G/p+DMpCyLapcmVaPVMdn9TTtctkkp5KZhNZMX6+1QhDY4+/lhznYaGCbkJiE=,iv:7oYpGu89ZtO+vC2L0uXp2gS2xD6kZCymF+MQQaTJcVE=,tag:E6R/dkrfdpo5TnOFF+eQ/A==,type:str]
   pgp: []
   unencrypted_suffix: _unencrypted
   version: 3.9.1

secrets/hosts/opentofu/kanako-hkg0.yaml

@@ -0,0 +1,32 @@
+enthalpy_node_private_key_pem: ENC[AES256_GCM,data:08n5N4n4Wc4GR76I9x8V27MRjlJ1ocLxNbYv94YdKVzLVhFW3QVxMjslZbixumMK83MuoUu2oN6Tr8T36beD9ejhn094x1Hs+2e2W5YUcUJ2J2HTDKblWYq+ZnyzX4OZ9SCLpI9qPqhuDFFj5/MM0A11HAZ3GPY=,iv:IRmKyVe8EWpasIHd0cE7iqVHSc92RW2gmMUNSGpMSvw=,tag:87liH4CUn2/xZyXj84OuqA==,type:str]
+ssh_host_ed25519_key: ENC[AES256_GCM,data:5sqZ0fqyTgEDST98BFwf0aK6I3ONcR0b+I7wy02P/LxVRK/En+Qr7v08PEYneFhKS25rxfWlaWbdJDh056OzZByd2jEqJwEu9EjmdOuyIrFDwP//s0Fdu+qu4lK5+XX2hP0tsyt08p7Ye4F/fKQeAIfbMofff1BMP58ScBtRfiwcD3XFTJDuEVEmqQsF8iI11TCZx1HWXoOCYIr4ZkXeUz4RzDemftJT6xUK7ZD1/2EeVgRRX8wA1pqz675axexU16DfSgaO5yysqCxNTGnt3K18zGQ3ref6JXBiNjtEk40F09JEof4CIpsw+zdBZ2gx6RCLxqRL1GApJctvjfDLaEET+EmdGUVXZo792aMaPVBdTYWl5yR5AySa1zNCrA+4xeP+Z2XIwlLUOgeIAdUizf4cKOqwk6pF1NbcJxAuFucX0BpO495ssUekaUerRdilofYubsnRThTs3OceDmTfpAj/SMYm7zKv1k2uxUeGWjf75F082jBdITsJrvVw7Nz114sM,iv:8JxXt+8qG3j2SrA/5At8k7e8ikkcIhl8KsylIV6eb/s=,tag:3PLzqdtIp3eqwJLb/pL9gQ==,type:str]
+ssh_host_rsa_key: ENC[AES256_GCM,data:SXu32wQAH7UmKgiHh1a18EWH8rAkkXKSuAXI7d83sTeIVuOxp1tq0TXiz2BKDMTvAlYQXezQWU3X5OWevdTG6lrEUdvWLmya+D25gpTZ7Hw9w/Kfz8lbCSj/2/fp+juEDbbiVvRhryADV7HGI1jL/VrmEs42m6xSSy36A3M8QEmpcRkG1ukrenH7v9ZuenLd3398a8hOqO2t+JoOun7uEs9g0DpAhlteLg/FgfLEWZ8cV7LMv48fNQrfbivhRITEyoDCMyqklrtJx29wCQCISkxM6LCMdS060rVQjoum7+GutUfdnmAg3hPCez/fG+g9imqqv1mRFBddTohqoztvhSX6jLjbmMmIZLKAb5cogkJWpyh/mRahzK2+2WP+25G39r/UfW6vvbO/czAjUxGcqxNZcNeolnku7i2u1wwBRVlg8AV2gllaZC9RBbQZlc21gSST1taVdTtWG+cwIvRF0fbYX4QC1EQ9HZp40ToGI3kIxmPU0sCxvyn8vhXq84GcYPC5ZHEsTRIo5nF2in47yw3VgCaZxtOMuEvpZmCCw8sIqWogj+wQGHm+hM+tyN4SBBCUyt5oTYT7HqK4gtWoVXLoXYq786DC1TFp85PG+t4pSEE3hcMNc9HqMsKxPKIWvnSUqtz+PObJTkkBQbuNvtxzTrryezNTh5Z9pje2CeIw/C3YbyrLmLvNsL4vr8Elml2VrVxe5yg4UZpzVYncv0Ns4hBodJkRo+Dtf/cyZTIMQdh40Wwf1o2bs5WHS4CaiKXFHfX3sPF5nd4GQp59EHWH0RRL2rSFS9WUwmynGblLkWe1B8KyDqtUYyGvcbYF4qduyvGvT917p1tdm1Msgvfvhoca24/YnLP+CH1LwhoOJUYEMSqF/LTvf7awjuscePvViJB4lOx4r7vtmPi2YHco+uKQbz8iH/9rEK8p69FIzUo+PKa0ZgW6nHCAwoOa8NqPLysss3lq/ojoO51JSxTH7tt7qIPWy0rDgn8dnT3G990hSxj8AkCTnluPSkH/miIcdaXog1X7MUgs++xmfKkhDHpQBvbi7t9L3jU81l9L84W91aMOey0EhKY0Fh7ctvkH73oA9foBdXsfo9MLo1Jy1A6d3GPkbM0adnuAMPH4H1aDVGTs4fV8JXGmm//SwsHFcuE+YhVthptkwDFiuqhBdPhGE59H6zAXNprY4jYHqEUTroM/9neYIhvTGdOhNIEloqBaxxoy33bYH3U6XyerFLIhsku33W/4s6sJC3ri/STpegQkV/B9Hlmmmtim/fMget0T6QwGhPqRBySbBz8Jrw81b5KuDCa9hrhYeowc9LPwky1Xt+1LE33QwTxA+biPNahsmjbYbiu5c5PEsie769gYfNirN6eVleV1A7CMkhQ1U2oWiOo0dtAA3+BZSErtKAfAJvCyI2qbS9ogGCfq6yNQIKDo0VCyiUfMIQIZrUrJ4iuC1nRDVQ1MOKWz6YQ/IZ+QDoymS+tLykObag0tI0uJCB1uc8L7+ClLzG5FShvr7N+Uz8vFb5xUrOY8HzNgsthwQhFFDSawti0/7LUykXNDeBpQf8kTPwChKFb3Xbuwm3CUJ8qVgyULNX7X4k8pVqlG8rEpj3JyvATPoXOq9TVFYjNjzVGBMQJlzTcHvr4i4lUmWezwyB72/8elYp8jcR+MlSoOzGZrKEmoCuiOSk4xzY83CISl6NDtU+vsYsyZeB1AerexLrOWDkhIuj7E4cG1tCCKbi1MzeXMMPhACmMCa9k0IaIElKWPv97KducT9aVLWfNENpK7N0SqkrcdWetN7Mtt6MpED6ZOXTcqfHJGiv9H6q2vjFDvmvNgqsZrdO+87EH+pe7FKO000DwpGf5/JESO01YyJjyHZZZenM1LBdGCODiM2KH1jCmnFmGvad69RCkUUGB0lQSe4CosVHJIL8345bYyLbAl9aqwTmeL7RGzsX/mn2rgIfDYQ6FE0CP+4tAzhdPl0D9/U4eXInwYCh5pv7TZ2YFB7h5OKzZrOxSaLkuuUGAHYUJ2pf8zOO7XknchLdbEwjpie6BPxSXCbsf1t283yFOlvm/yHkV4laliJddGUF+hgTNgnSt3bojiAQEZxWJ0qbqUqMBhssSl0axQ+l24ptUXKhATnqpEYS0pcJ2HMCA+unW+Oikbwp8KkFszIBKkD/2V4zn6mkSK5neLzq2csxeYd68za3LG+PVaPW/C1PYK5T3z+9X5NtSoZs9NmTdinawOSgYjQViQbdnzn108BDz9ObxjdFjdJ4zyTRVyXn6xrtPH5Yx6NZduXy1IE6/3wepmFTWx03EnAbD7AdugZqcThCkVVHbNkMjzCscgTNioKcqDgJbPT1VghahTOoiAaYm5a+7+PwZW2h40zM4BXhfZ/EWb96Q3mjxCn739KoBXXvBJa9r9ve3woVCQgiwMQJUWLiMwLl+UT1662PeW5+EnaumQ3VHttaINdMD1EzmGIV+RBHcLzegMaLxuhCowJ/euPudbClfG/h69GeKOnwvOd6P7uaDvfsl9Hf4OzCTvtKOzCl3NKeETK1fYyl+5UXnef+DCmFMK3JVvy9jjs+iKjlUD9s3N9XHEr7sFOEA2FSXrHIeURt0OwmHrYM02ia70brdXhxzWDUbtT8mnG5Mvlh0E5kDxeOGRkvd7ptGKwEcMWlgmcwgca5tMkWDvpqrf/rVThLY1w0TXyYsI4TPXPMWWlIDEGDq6vWgy2Zv3hBjJWoIEP+QEAcl0aq7mpIOC1cWgidcd2QMm7X/D+NJxtgOFzgvo3p4DYcmfs+HZqCDFP0TmH9YHliPeOq7vjttJCz02eKERVrDy2PaqvT7QQ53OxpBRQ4uHEV+u+Eo15NdU9XShvZytetUwOOfUi+kVIY4cEJqQUj9xN9MvePCPsrQGmuG+H8RF7GDHzRvqJA4WxtAui5dc++57RbwNVbTOw1n7RBxuiHxKHrqARdGZIZJwT+dSmGojxSsCkyxtY+0apNN/gsq77P4lk2fva+Q5LtK5nDLAQ8dxbl7Rb9f7ROabYcMPCz/dN+jeG5Z0kTnFeoWL3Pt+2ihuuSThL3WvxzRK9KIBlHBcOM/iUftKB0+HJnknw92NihA81uyiOys9yk93WzmqJsCUZPbEsCXkaIfQMJGFjNPjKsZy3Ni3QU64KxDgeR6Tc6StsqbdH/zO6EWgYOp5049wsc5JCplMHJHt+CU4okEM6HSFuiEychRYhQ+lJwSQzkkq5ju91r/dAXzymI1udIZc3K0BPERNJbEwaw6+cDViCd1wbgr0Rssy2h9UG6i4a2bACbZzkMJDYeMG/i8QpmD5rJFxO44F99phgjoEHowHfOzQU6SsQzWCOSsP5tnKhJSYLSDCbvAb+8u81l+9j1GmBqAsPjeZwtnruECoNPZBeMm3QTIKhSHLZuNjKKxmu6GCj58iQElEaOlSBtI9OrVAAxDs4JlpdVVlTePuVPpuCURhZxZjom90BCMj0v/o4+abxRRJV7KvYGKDPieaj6aFuneh0EVuo2zxh1rkBPIW0xS+dw7Wm3maxC28LfbGv4YP6Vv4zT/ZkyGtkitKTqbWeYs+WHr4lYqHtpOMkWdoySakE5nUG7nUlmg4N3s1DIVsrtcCIJ+Bsf1i6OySp5jwGrd2NWDq+4j2pscoKzanNQ1TG/U04elM9SlCoVsPZFrwbgZ9qj/2Ya8vueTYiYJNR/4BKQ7hqFXxEJzlH784TD10OQBmnB65sCNOmh9F80lvpFRCIakVECx/W8x5ZcYSjU/MQI1w/ZYMh4DAWHV012hfUdYXOd7UxkC/q0B6OGXr5FKZi9ze4sz0Izm1bvoAYLF/QhSaYcZ3eJafEotDpt3IZ/3IDM8f0E7luXdsBEc9jWcKkA4G25usOVxPYPaej2/HMCfApemjxQbhFn0se6+z/+fH9qC8x7DIqnGeTKyYmmRdZ6B1oabwGBASFs/nkfXdzX3nJCu3SsRM5up/IqRpRUaOx1mm1/cwhd4jW9JIxzki3wvsTEnfdwh7QNg6EHnw8sTlvUIRlY2DhU0yYTxwApSdFWpkByoERoHDrzwizhlNFMhzr4Q2odCVftob0PBHcsxDBSyNfJSZ30iofRarn50m8TO9J2J++A+Fx+Ni+lzXcqhfo/o0zUSgZKB6zXXoLSReWouxg+FOdo5RF7EyugKZak3bf+W29CtHsJ/T0ZSSztHTkF7GX9tTeu/Q2aIPK0NhBdK/vOA3Fg91GAc39CQKxpPGMhgnbgJwHuUYvGwx9ywkc1en/j59mGlGZSGnlma9QeS5RzjQVVOud0T6E1RpxOATbVeN01m35h403BPvBUXXPmzPkcCup7XdriStXJCC0TfoxBZNUHs6qlZqyhg/oud32a9TecYGERL+NOkgybo2pkpC9e8W9Qi+fG/DeqDK4EuU0EIjfJ17v8RD50L0xSYcoe3YHt+aMTkObVz5r122RqN1lYl7dl9m+vWgODgwPw==,iv:evZOPqnj7ZcBjtTyktL7mYxHBxGFzBLVyFATw0uBTx0=,tag:H6vDaMmxr48pATRXZ6Ez4w==,type:str]
+sops:
+  kms: []
+  gcp_kms: []
+  azure_kv: []
+  hc_vault: []
+  age:
+    - recipient: age1sfnct03u4cvfj98x4yjrcrrnu5gg8qgxrwk4uqq8w4e6wveeaedq97rn44
+      enc: |
+        -----BEGIN AGE ENCRYPTED FILE-----
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvOU1DdE9kdWFzMlNyUUhO
+        MHU4dkp6VUFHd05GSmhub2l3L0dVUFByS1J3CklwMCtoRFMya1hzVFpHWkh4a2Ez
+        ZUIrWWw1M0tFN0pJc0tzK1NXQjhhODgKLS0tIENGSjJienN5NmRiK1hhS3FUMkF1
+        UGwxQ1VaNkg5NGorOXY3ZE8xM0VsNEkK+l9kjV/P9XkqvZX0ncJKu5keQ78kD03x
+        kGgDs9BJO2LRuJZ6iIRSZgBVnJkEMVZiyk7WDQJ9TvuXKgeRKD51OQ==
+        -----END AGE ENCRYPTED FILE-----
+    - recipient: age1798e9rralft7ac4w8p8d2hnj5p8m3ajnnmykgn4p7apx57pcaeqql2c4jh
+      enc: |
+        -----BEGIN AGE ENCRYPTED FILE-----
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTRXpjclhKKzBPUm1Bd1lt
+        QXg2NDl5ZmFndmRyRWRYRWlQb2RNZjBIZG1RCjJnYWZZVlhVblQ2YkFEK3RRMnU4
+        WnRuNE8yeFppWTczZWU3RnpFUEhoUWMKLS0tIEFsY1VGVnBqVWN0UkhaM1pBMWhZ
+        UWZTRlkwZ2JGZDlUblZCTFpiNi9xUzQK20jW+sdbuhTKll8Ya1oEmDsJ2OeRrrGW
+        WzzEZb8JngzusZFcO4WmA7eV/K5vhfOyreZ4bpxWhfzdovd/MVOFrQ==
+        -----END AGE ENCRYPTED FILE-----
+  lastmodified: "2024-12-12T17:00:20Z"
+  mac: ENC[AES256_GCM,data:t/UzOKWVr1odMFz9/oWA2Z8/KIm94dmExAfwCTek3Mot5dQe7VWZRTRCISlgLmL6JSHiXXIwQ2HAYWXXvi/hU81nUpFxSLmwTIjap9AK5SneeIljK7fE/A3sVajhibqzYVCOg3iW8Tk8Ghe5TlMQj0a52Mgtqzggk2K3zY2Jmq8=,iv:2tS/EtBybqnUbeul+LDEkhxJ+eG0C3vbzAmyaJKdTMM=,tag:vzXXtz0r/8145XpLcWco/g==,type:str]
+  pgp: []
+  unencrypted_suffix: _unencrypted
+  version: 3.9.1

zones/data.json

@@ -20,6 +20,17 @@
       "ssh_host_ed25519_key_pub": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDVLnLJQLiSquUSKC1aH9+mZuCHJex5B73BGY4TNDlxv",
       "ssh_host_rsa_key_pub": "ssh-rsa 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"
     },
+    "kanako-hkg0": {
+      "endpoints": ["103.214.22.143", "2406:ef80:1:3c5e::1"],
+      "endpoints_v4": ["103.214.22.143"],
+      "endpoints_v6": ["2406:ef80:1:3c5e::1"],
+      "enthalpy_node_address": "fde3:3be3:a244:f870::1",
+      "enthalpy_node_id": 3975,
+      "enthalpy_node_organization": "rebmit's core network",
+      "enthalpy_node_prefix": "fde3:3be3:a244:f870::/60",
+      "ssh_host_ed25519_key_pub": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJyPw2xFqXfW6s/nPGT+qkwTw4fEYhSrUadqPryAO4xd",
+      "ssh_host_rsa_key_pub": "ssh-rsa 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"
+    },
     "marisa-7d76": {
       "endpoints": [],
       "endpoints_v4": [],

zones/registry.json

@@ -3,6 +3,23 @@
     "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEA8Oqlkh1JAW6IbMOVlhdlVKC9xQ75hzBeWHklcdJENFE=\n-----END PUBLIC KEY-----",
     "organization": "rebmit's core network",
     "nodes": [
+      {
+        "common_name": "kanako-hkg0",
+        "endpoints": [
+          {
+            "serial_number": "0",
+            "address_family": "ip4",
+            "address": "kanako-hkg0.rebmit.link",
+            "port": 13000
+          },
+          {
+            "serial_number": "1",
+            "address_family": "ip6",
+            "address": "kanako-hkg0.rebmit.link",
+            "port": 13000
+          }
+        ]
+      },
       {
         "common_name": "reisen-sin0",
         "endpoints": [