make .onion domains declarative, site updates, add helpers

secrets/hidden_service/forgejo

@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 OPPxWw EI6x+qUDXzqxQSlCYUbP+7QPZMnjXpltYZtqKGTC0mA
+CRKukPnjX7UkoUhvbRqp9R7okrCXSdFOKQ6NqOJOQPM
+-> ssh-ed25519 aO1l/A yYtKmIaqYqE1GtbpZ57LSOvIk3ShAKRxwLhF28+kX04
+G3LaXN/I2MQsibGKQFhaN9fozZc3WTDfduVNpSs8c6c
+--- l669kOCRaI4AYjSfEnh3ipLsLClXVtsZ7XeCVtYe76A
+S'`–G¡Õhã6mÕ­×ÜÃÝ8Ý&‡Õë#rŠÔå%‡ì@ïòwŽ`oÉ"ƒBÑXeœ¸gN fŒÞPÉd!ÉÞÝ¥©‚Cý½È@Ç<Ypž<70>Có˜Úðˆ3›ýAû/sê"§²¯RÓ<52>¢êwP±ÉJgÔewÇ7®T'# Mÿ`

secrets/hidden_service/lldap

@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 OPPxWw uTCw+F+4qeg9cwzmqutlo73TKh+3gHLlKiNnGtH0pBg
+/z43V3RLple7a9DQryhGlIuyr4zEkb1VeiP5a/Wj1uE
+-> ssh-ed25519 aO1l/A 6taX73uwY+2dvd4urZsYuzdz+nCeT1esrgwVK061/Hc
+hijoJqXSWN2yWwm8wJAzn0rxYFVKboov6auJMWJiQoE
+--- on7Z0/l1J9q8zvDBrcLV4vDvfuSpEIuuAAOaMCywwF8
+k×hÔ<EFBFBD>LJ‚8rs°¸1â/}9gîÁSÎ<53>-ˆ€ûîë™—ºÐzUÿ/é$àõlH¢¬
Ytq¤•ª`C25Ÿ‘U‘Í ØtK	>dq¥qp‹ëÒn¼åyxí"4§DÝ~"ÚƒeLAãq¬ÍzW°¤	<09>%V}âk<C3A2>âŸS.™ê²ô

secrets/hidden_service/microbin

@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 OPPxWw iecDZG4hirn38+rgldEWI2+8/8rq71uWNT+SHlfAiDY
+qx6clYF4hxRBJYYu0KKB7hRfPZwCbHcQpjLL941Z83c
+-> ssh-ed25519 aO1l/A l5cKreKOle24HArdayk83bPWXfXsRJ+Ra+hQJ/wIbxg
+so31JolmVJl3EFNBMY0+iFnt68e8IE21hPgywlgKEIA
+--- hde73O1LCWGqO/2nrIg8SefxAzPp8ZY1lJFzEOCkNEs
+9Q<02>•›Ú~=÷—{XCϧq†ŽÅÎÇÅ
²$4ü§N¢lkhë˜Ë	©õáÆïŒÜö‡5W³…5bäQk†”jŠÛº2„q¬‘½/}õ<>B<EFBFBD>%Ô+u<>wçŽ6
È-èõ0_;ÂÞ3Êãn¼£ÛdŠ\l—ØÑÄ÷÷> чÉC*¥

secrets/hidden_service/vaultwarden

@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 OPPxWw yYJgjjH8GaBc+bDIPHIyyG5tBqDjIe7P/9gNhnNcCGw
+SomRbtpu4TqEa16yGBImEXWKNIUGNs5RIw1AT2YrEQg
+-> ssh-ed25519 aO1l/A 1qypu4ZiyZTqEEVEo9Rj8BO3SlPgoPHzn5gMA8SaajU
+zPPbrM6mWhhtAuU/3h8/ess31XjHf4kct9HRslv/pwM
+--- rF+OjMZvtrB5BSHs89xn8i+UitXqqmmDf+UFliwOxgI
+ô)Ý<>BZ׫JÐB1dφ<C38F>CÀF¯ÖI'¸º ü„&nb`éöi<C3B6>ùêï…¢<E280A6>^)@Q¤uÍŠ0þ‹'°–´¸f<C2B8>‡àò8¨gé¶ý0ÏgIAÈ<07>¸Ø°4Ë›£÷<C2A3>å}Ë uíþYÕ›ÙÔv,}<7D>jC§5<C2A7>ÂÔ®‹

secrets/secrets.nix

@@ -10,4 +10,12 @@ in {
   "bind_pw".publicKeys = all;
   "nextcloud-admin-pass".publicKeys = all;
   "vaultwarden.env".publicKeys = all;
+
+  "hidden_service/akkoma".publicKeys = all;
+  "hidden_service/forgejo".publicKeys = all;
+  "hidden_service/lldap".publicKeys = all;
+  "hidden_service/microbin".publicKeys = all;
+  "hidden_service/nextcloud".publicKeys = all;
+  "hidden_service/site".publicKeys = all;
+  "hidden_service/vaultwarden".publicKeys = all;
 }