almost ready. now to harden

secrets/bind_pw

@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 OPPxWw Slc68CGLIV6b8991IWvlIPpkdBxDG6hH3ytF+eWlZS0
+CZFb1fdZ67vbZHwhQUokWwHL7NOapVfOgx1sk+Z8rp4
+-> ssh-ed25519 aO1l/A R8fGdM3+lIABd5s8uPQUibKm3zhqYvvn4w4mEZuy9B4
+J/YMkcSa76rhuq64UCYc8Q4GVRh/jdYVKWU8V7LQ+i4
+--- tD1M4bRODHpYr9AnDocT8hN+TZUB11QMq9KytykLb5k
+ﾚｷ
+ｲﾄNﾍｳ式y<EFBFBD>疑<EFBFBD>、gY0ﾏ2pLﾐDｾﾄ=*ｳ｡k蚯ﾆﾈ<EFBE86>oを

secrets/secrets.nix

@@ -0,0 +1,14 @@
+let
+  user = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHxah5pnxmk+P7HtwRsryDoAHZsDs5RcGP9IPCNg1KFe cardno:16_179_196";
+  users = [ user ];
+  
+  system = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMKxw1fDsIUUh3vWCD90LDgDMAG/NSVRg7QamUbknz5A root@distrust";
+  systems = [ system ];
+
+  all = users ++ systems;
+in
+{
+  "bind_pw".publicKeys = all;
+  "nextcloud-admin-pass".publicKeys = all;
+  "vaultwarden.env".publicKeys = all;
+}