services/paperless: init

secrets/alert-plain-pass.age

@@ -1,20 +1,20 @@
 age-encryption.org/v1
--> ssh-ed25519 GKhvwg ZvzKWT14nrdbiVRJf4hK3Gmb7pkLA1YrzIAXi7GqUm0
-OqGUgm/4oefj+J6JrIM42FPq/2tH/evQfKYQGCSMIc4
--> ssh-ed25519 H0Rg/A ucyXgt869tI6HWLjrsg5o65HBBHnjiAyJ2T7aCps7iQ
-h58tIKkuHEFM+7VRl6u+3vvV3XQ0r+XqvUo7OdLuKEg
--> ssh-ed25519 84j9mw 2a5d7xIwqwF9MuAKv490mGUMYiDvZWK8+sLDjShpnmk
-7CH1AzJQD7nrq7aKZJy54+74awO2MHO6RySq29/MH18
--> ssh-ed25519 5A7peQ 8h1pfClbTdBZuSZyw1LcntL6QIDXukYkJ+SBmcZMYAE
-d8gix1GBYjqe8nYc/gdOxEvsYNo7+W+vhQZq/RFPeRw
--> ssh-ed25519 g2vRWw E4b+U5rVKsurdddkOSeDKmhIQW5iK4hdoRePQjohM2w
-+WlMZ6Yd9iCqcm/WIrzRSRU9fmqdtc2Lb79wgB945Kg
--> ssh-ed25519 B2veVw 4APxbmXkGw6O319hX1rPpgCz2BNXs1fa71eopRvgsFI
-AQ3FsW+H7qYg90JG8904/N0FjxjH4S70S1Gyer1BiXI
--> ssh-ed25519 IFuY+w +W4IMgBS9ihPCEGWQw8DrsTkF8Ih5H1+ZjhmGdPimQE
-qlMFMVpw6uvH/OqGx/fIBFcP41RlXxyXKJ3//1N7mcQ
--> ssh-ed25519 rA7dkQ 1XI21LILuaiYGHbdgCllU+H8N+/YPq9FyrOUTp0AXCI
-vklhN/5KOmbB0MaQ4F/iIuj5ReLiBrmFQunPtJu0o7w
---- 5T2/adM9me57EcbMcLPba1MIisFzJnXLC+inc57bJdk
-ÿJi'ª©6£—&Ù&o
-k4-hu¨š}ï2¥Ú|‘Î1DIl9Þíܦ¡—ýY•–
+-> ssh-ed25519 GKhvwg /jQLcJCNx2g7rM8udm1ZyPDeqc0pJ95VpIsWObAG/xM
+0QCmRI3pXNLmzIENjDyVNQLISQd6uyA/HOyXB1W47X0
+-> ssh-ed25519 H0Rg/A r98Ge9hReVxBKmQuAfX63L8y9W2vQh2PC/VMtGnS/SE
+itKOWkxTHsM/SlhW+AA037ns0XmOaLHWrEtguC5h5Pw
+-> ssh-ed25519 84j9mw FlKDqV1OxbxZ3s6mtYS6hzdOrMvY+GuYrXWoBk2Xo0Q
+XqYK9dQXXx8eKlYhwQ5N+62GX/48VWQ51UyNialg5/E
+-> ssh-ed25519 5A7peQ MIpjM9J/7wAVGuB5eRStLAAqLEE9Ff4E6eoWqEE4lk8
+J0o+kgUBuk0odbuLvuRns699wfY/LPHc9RZydpnyVc0
+-> ssh-ed25519 g2vRWw eNdLCZX01DMm9nZgugFCXIoqANF4Um+xxKQQf8SOax0
+i7H34Lumyn5qtigixSRbaYf1bm92kQLCf+EZKJeYmlw
+-> ssh-ed25519 B2veVw DvHqN4AUU1mjB++Qwz1vNYHxST/8qZTM+p9PfIyFsHw
+BU+58wSWdknW6WbEr+uCenfaC1vLm3usdP1P8YBbn+8
+-> ssh-ed25519 IFuY+w d3WEXFMgaOUSo3jwkOBzmqTqYyZLkIWnINFj7FZCHlE
+u7KuKcjzTvCMJqiIzE2wNxNUjQuVaCcumnkNmVIg460
+-> ssh-ed25519 rA7dkQ XjfR8WOE/ajNfI2PvtjccMWt4ZA5ZcQfRLaswf8o/BM
+cjEt4pbJgoiqQYDMAeOEKO8IsGrutkbYiJt+s9v65+M
+--- Itt4v03PVRtcZ+msFBO6VKi3kDuK5+mjsQ0LZXQhWTk
+3²qš°oß…nÉ/<2F>¦Þ3Ø$? ’<>_m8¼<38>
+vê´:mj¥ŠËd|ôÅüw´r

secrets/attic-creds.age

@@ -1,7 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 84j9mw ZJAtY/6itD2g/hCRjxKrV1ZWQIzM/YgKGNa5CT71YBc
-mMGp1ZjBx0qEugMAnixkVn88HqdNui/gyJt/okwRDP8
--> ssh-ed25519 GKhvwg JbvduCfwAY610WxpitcGlScY98bGeNYDqKuxHkrqZDU
-4aCApDeZnE/7xA3JzxqD5awQv9N5oa2TcHQOZx+CBpE
---- nGz8lBsZ79RPshiTTFlSTVsZP7lfaNKBZFC7TtZ2ves
-œ[ü'²³!‡¯ëö™eç÷ÔâUTRÞGÌ 1òdI{aìϪ+'?Á£ýµ’"ʵ&ûÒNxkÄ<6B>›¢RÏ—Æ)¿¥<>˜\„a¼ƒ<12>~¬³Šo`hæ¸ùɧ¶ëtΖ¦ë-‡ë“Wð°rh‰‹x•Eÿ<>+'<27>]>“r9è‰ÿOð™Ža=+ïëÔW
’tå…}Ââ°
+-> ssh-ed25519 84j9mw NTO+6rjQ67mvDfLbkZNyuvxGXVlKjqnH5Wg0/qD8Zkk
+oIrs9tsRkEqIb9lLQnF61DefTWtF60iSJEfm2b4dkLU
+-> ssh-ed25519 GKhvwg 1URR/IKkYchQlxgQDK0Dh20KXTrulyJfnO3JXjECBjw
+K2N7/b88tkEa8bTSRRWLChPN5GbbNip4qDx4HubEP9s
+--- 4DdZ4N53a/aiMQcO0okbaeo3npYD+WrjoFYVnIMkmEk
+ýº<C3BD>Ó(Æ5š/©[p+&.$*Z˜¬µªÞ*ÿçb~ìϤ>"&À›!ïÂ9R´ÓGšæ7Ýârª?Kr<1F>–©ËÜDmEl~º1DѨCg¼Eþ?›qŠ"­wÿ7Ìû¨ª:¹X˜á¸|D›p<E280BA>êægµ4°Y4ÇãbÄ©-.Ù`#wCÝä,—ÞôyÊ|ðõ[í"k<>–*YF

secrets/leet-nrab-lol-pass.age

@@ -1,7 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 84j9mw 9ygN4fWQWX889zSTchiwqVwxTzHzl+3PSelEpeGx6yA
-v1GTvSMdbwC6U0QZtaD7/b5QbJ9j4J3F10eCUaT5COY
--> ssh-ed25519 GKhvwg 9I2sycYPtBMPZenbWLueANm46TTPzbgCa//4oKojGEQ
-aEX3TQpWRAcrtJaiTMxB08L8OY/O/4JR+/zoNPl7Kxc
---- 6EB80pdWxmL1yVM+klouel5E59m2C88Dz0SH2DiT6nE
-hkdJwÓ|g¾~ºvà^’Ëjq\<5C> 'ƒ™yöIícdW™YF?ÓNÍþâ/ä0ÄØý+h<>¶’…=œ85±#Š
²‘\bm£~ŽäÇú1æïy"úqÌAT<41>
+-> ssh-ed25519 84j9mw 7HLXJ0FPIlK/5skZB7HsmzyMX3S7I41wPsEPZ7Jb/28
+MJ9oeQWZ9QlL6kuB8QUHoOjdXqOqqpA3kHpr2h/6A5A
+-> ssh-ed25519 GKhvwg oVRn1+ZoRU39ucM/It+cxfLEMjF0uSV1O7k0J/8DgnM
+ATACnP4ASRJ1qhyrm8yhi2qtDftXMiQ91CbmuqIm2gI
+--- ucDElqkYHEoTy0c+vPsy2AQ3aqJmkDSBAADiKB71k2o
+.ÿ¸Æ›L¤–lCÆg„s.ˆãžüíI¡ÂžR²
.qxL¡Î2 B NjF
o9]9ögT®qNº©ÄiaØ]e ®a²Gœ¡»S¤kìY²$‘Ÿ¤¡<zöI›

secrets/miyagi-niko-pass.age

@@ -1,8 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 g2vRWw 8FCO/eYVK3KfOvdyk5Va3R9jXaSNzV+ArFVhJwJPDDk
-zRBpyAtdJxg4TSsgUep66Yv2CMUUAI8IF3pL5+MI/88
--> ssh-ed25519 GKhvwg eMLyDK82QCKJrVjtfuy5DKTNFOc39zdJxJNFEXCO1Ac
-6AamgzEBeT1018cy7N5GcvgjypGPLqF+2P14h//jTtA
---- jhq8ZEIoUjMq5PH7tktWMKQuCLMKifY/UfjjM1Qn7UE
-QÖ8cœV2ž
ƈ<19>4Ü$h©+e…yÖ
-0ç#¬aJ`ng{@½Ç.sªIgÏžåc*®Q'è&•¶˜‡k,CuI±†ý´w†™ɘ×Î
+rEÔNîÕ·@FŽP€I¸¸?ÐÑ’
+-> ssh-ed25519 g2vRWw btMiKwz3PwvUTHhz3eQU1PkMqSPJ9gpVZ9WC7u49xmQ
+jhQgjo4Vt7e6Q9uERj9UG4AM/gMhMUexBWHI4ofrx7c
+-> ssh-ed25519 GKhvwg sZvZftsPUAjQ27PleicM9It+gpRjwPWOdxx85Mr5fxY
+G3VOFsNg2p1/KTyACw9QlvfBsyNUG9v7LSkWJl8afrg
+--- letALmlj/zH1GJl31nWXeURJHZI6UkToZiTIUgZLv8s
+lžÕböxú­CI_·<0B>èƒó‹©Ñd:@÷–Æ@ØÎþ˜^ö	o:]1ä¦s;©¤°i“v"‘à̽ãéøthTwlŠŒÿÉË •Óiü¶ø¬l—ã{<7B>àAÅn.v§[ÿîGØU0%ú)

secrets/ntfy-alert-pass.age

@@ -1,19 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 H0Rg/A Gu5zy+v+SITLh8SsiBXDnFDW007MNnWQ3Qo1XnKQVTM
-0OLIB6bgEHct3n4ev0HgfaUOl8t93DM3qInsrfBn4Vw
--> ssh-ed25519 84j9mw XBb71lyuXkIGxSL+VHv4To64qjGv3tqGGMa5J414uE0
-kuVmbLJ4ZyC6rmNUZOEXfrYHm89iXRqwP2Gv5lV4XSE
--> ssh-ed25519 5A7peQ Zby6NTv0q8OQ9qvo7DvE4OVOpShVKE8K7QWTson0DCo
-eMTfWLUUImhEfXlBl8gYoA1YK0gfpB8VyWa2L3RCA1w
--> ssh-ed25519 g2vRWw W5ZMWxUBPvef4sWXhv2aMCLZKlW++4n78vjJ+UE8XFE
-0J4OEvtTaffnRHQdfzGOOtBdgmq9is63uSLNFfZ59Oo
--> ssh-ed25519 B2veVw tZ3sVtgqEJ5LbK3b2xcH+0z8LaNUPs4KZO9A/VLH71g
-MUuolaOws9FLq5MwrGKbseG5Xaok/gad6LQ5bxhN+ss
--> ssh-ed25519 IFuY+w sz83GwAlZD8Zp2kH+7pwnETPKSfXDRgSXzNteAAGXF0
-4ByeRXyTp9+XpOirDvPAfDqfxyQXXqdEtTSq/CqKP0o
--> ssh-ed25519 rA7dkQ b7UcNJ+8UhrBnJieRvNxHXFBmr6uyh9q4ZtD9vpsTRI
-2/jPFKnWvCwc+Ki9gWJ8sbGetH46DZMk7LyxmqSlAe8
--> ssh-ed25519 GKhvwg 1HxU3yc2MfaW6N/zOg5ZRD+imMAIhIdKCp5FYR1BXjY
-LlmcWTkjbm9Ig5rECdKieEsbmPZiFenZnLZ4p8YbUbI
---- 8E31okL3vgwlYthWyy+sshdJDHWGBjawZoS/3QaqjT0
-
=uÈ\e‡œFcêHère ¾t[92Á#Y®w¬N~GfÓ·	‰x¡þG^0=ü”WÜÓ“¬ŠEÝ&©
+-> ssh-ed25519 H0Rg/A ti8Cilk/v+91Nckt/CuYl6qRuRb3W60gvhB43FW1znI
+EeLV+OccotivcRsN/aB/UdF89WiPlJ6R8PeKN6b+OQs
+-> ssh-ed25519 84j9mw 5rRP84YZGBMCFStzc5aeOqBmsAmjSb3GkKl47Msuei8
+DLtAz8tWkLu3QBeR+M5ZlJH6c6+GKPwf+qy3NpdTCOo
+-> ssh-ed25519 5A7peQ d6JYwhySRN6B0eHl+JiZkxawZuMYuS7RDrSKMQYHLzI
+/Yg5Hx948SBDD8shA49Bnv8hooPokYG7Fn9roswNIWI
+-> ssh-ed25519 g2vRWw gltJGTfV+a8BKaAkBGXkiW57ymv0vPBQnCS2BWJ6fDc
++yBjIKMdM4eUVJvjs/UedjTH6hLRs56hDUpjpLC/q84
+-> ssh-ed25519 B2veVw GeSb9ZgzHNDDDa/X+HppmefkEelg6JaQr8uaaijjzFo
+LRzUrcmZAEosn0Sf4/YOLhbtdgYhWMYe9/uhvAMwcRI
+-> ssh-ed25519 IFuY+w gmfb2WEjP2BVhwnL+DzFcsM/ctbihlC6wOr7Bhn8r0o
+k4IEjoNZSukZtz+rkOjk/BfaZkJ7T1jNrweKpmGDRZU
+-> ssh-ed25519 rA7dkQ EWcPrbtHeD6Rq0mlnoVhgVTZQ586QdRVsZa1K9YkQzk
+EN5VG0U1KGdpcT64B6C7kVDwKM/h+gsiTgsKf11XP2s
+-> ssh-ed25519 GKhvwg jVotsPuVgxUaZUg5U6QwZO9O6DPsYv5Mp1rfsP353hQ
+c8uSgREFANKYeaafurp47MQiGnQxHXkFR5TGAQ7Ykv4
+--- unx7yN4JzSSku/QUYEEUSPxyyLrWLG4zEMB/yRqvKwg
+FâûEƒTAÍms‚°~_Œ'Ô‡§%…Áÿr“Ú=KÃxí—ÖÑ„Oè¿#Mqº'ëM_5FÇ%<25>P¬<50>â».Ÿ

secrets/ntfy-niko-pass.age

@@ -1,7 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 84j9mw 5fEqoBEGZ6AZRfWuU6mej6XNl6hDrxMIMMlccp9CVzg
-QvontdV2/amh/i1Ldmzup8TB+lN4b0+YuoT+UFWiPw8
--> ssh-ed25519 GKhvwg 5Qm1FPvbv0ZsJiJ0Rjm0CPm6eWKvfQ4XHAOmEUWWCiA
-eu1MXEWfo425lbnq5tAOnGqpLgRVIOCkZKegTQQjw/I
---- s1g2UCKwlew0wCJSxGosBzn1K0TEbPlrIl09iZ58bMg
-PÕÌ
ý®ü$<24>N{èLrÿxS:=W²x•Òc¤(Jµ£|ÁÏúõ»48ÙäS
+-> ssh-ed25519 84j9mw ryWkCbg6qUwncq/HkEIN8qgMjPKVRv86y/gzJFtlS0U
+G02X9Uacg0c5acyAmPHx5F6ImZQnjs45hH/tBFpP42I
+-> ssh-ed25519 GKhvwg LcIGEajShma720zp/yMndBnEOoZV9aYSsOFmN6yG9wQ
+lox/ZbORF9HCKl4lCkTrRQ240JEGljqoAf8+I5q03Z4
+--- 6a1rHleD/+yh+e+/0lm4TIvst9tjT7y6sr6ujApYuZQ
+$Q~¯<>C7ß|»A{3]&£žÍX''Ì
+PR݆L
6
ÑÏ
+QÞYù¥<EFBFBD>ÍÆÂmhmÛ

secrets/paperless-pass.age

@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 rA7dkQ sXPoNSctxQL6Gh1JrsMuUGp5/PW/v7zFzGzdncnVYnQ
+ETOeRcPPhV+RZSZEC2cGsKm2H6eAn8eKJTn1NkJqndQ
+-> ssh-ed25519 GKhvwg DWV3js/l+CYRHGgf0NCZwBCigE9U5tf8mkGxVNAIVSY
+dxHnQkWKB8+02j3zuaeGVq8+A5vA2ssTccTdFSn5FCw
+--- pu5uE5bsrnA7KrZSRGaD6xMKjzsx0ezXn9BbNVsrgAw
+éëÅë³Q÷¦ÀB<DfK@w)GU¾/úÿ+b^)™5Áþ¨8s±

secrets/secrets.nix

@@ -65,6 +65,7 @@ in
   ];
   "rab-lol-cf.age".publicKeys = [
     keys.system.kazuki
+    keys.system.youko
     keys.other.bootstrap
   ];
   "rabulinski-com-cf.age".publicKeys = [
@@ -88,4 +89,8 @@ in
     keys.system.ude
     keys.other.bootstrap
   ];
+  "paperless-pass.age".publicKeys = [
+    keys.system.youko
+    keys.other.bootstrap
+  ];
 }

secrets/storage-box-creds.age

@@ -1,7 +1,8 @@
 age-encryption.org/v1
--> ssh-ed25519 84j9mw tKQQB/cd6JHCLQLrix2WGW5hHBUNC+pqDZXvTmOlOkw
-lnx4olU3W8dgMwigYga/NYcjJ/C59J/uVdYNOfWmN2I
--> ssh-ed25519 GKhvwg iWTl/jvU1aBd78yAZUsOgcG6JaK+vO8Dpx61dYMjmhc
-2Iu6OHlLlhJLy/cxI/zSuqRhBnoeGLXINbDyMIvDZD8
---- eOl0sze0EOvfcAarBav7mb4B3jdBvOE+fF166oukbrk
-!żlćxq*T,.–ÄX˝k6ě^ů<†!żX5ŘČŢŁž‡‰·ÇŐáĄńô,`ßěY‰^đŮ›Čů.¬đÔÜ°úďeWßěµâOúyÖ
+-> ssh-ed25519 84j9mw MkIkHSzR3H+j9ul56t+CrVsoeGRgH2ocYRSBoH/z5SY
+0LNQmCBPvS5NiS66HCQ1Yifr/GkIYxrDj2Kfg/ZOerM
+-> ssh-ed25519 GKhvwg xp5j84RKQ56OFSak3IvHRG9TAv0XVYLmWJLImgAjmws
+gx1Ke3U3ngFsDswVVOnwbQUJNOUSdFgh/LUKkDH30Ug
+--- lWb3NlBy8n+NWGQ+M75RmWElXXLWWpl38aRYTVMm5GY
+qA	ö[þVpŸ‚¬ýHêéÛ0I†	¥*~ÓhÞ »¾­6û‡B˜<1E>ëZ±ikʤVý
é9sÆÇ;
+ªÆ³‘8žˆMdÙ¬¥Õ¬=œ

secrets/storage-box-webdav.age

@@ -1,8 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 84j9mw C3TpEZsxJIYJ3d5vsQkCcCTity80nLsyxm5zCBZOMzk
-56z54taf+KUJjDugfCGKlcbeRZfDzi3+eeanKPINS6E
--> ssh-ed25519 GKhvwg uUXJkGw54Q7dCnYobwV1zihOPa4R1FydJZehlFc5MA4
-6Zbym9jLykqsYjmb6rKIa6GExAKVVvEkvCQrzl6HB/M
---- QICnyH0PORBpoNgT3pjuhP1p8AHn9gD2OIae/9G23x8
-±(¯}¨{¬¤Ôœ2Ë“¿ò‚i]UmiL­mÂvé>ke<7F>ã'6“AÀ̯¶XÔi<¯á:òùÓfÇU)á<>È~Ÿ
ú&A¬Ë¡çj°–#à
-D·?_“E-éH
+-> ssh-ed25519 84j9mw aSPnpUfj2PBYycEMzcENn30pzhrSEAatTOdoDhoPQVk
+PzcdoYgIHJZqOHE36gynF7r1LgFjoX2hEfCf1Emb2gg
+-> ssh-ed25519 GKhvwg HlibITP17XIxE8t8Kd9NtC6n696fQJu78lE3Yp4lFyg
+hmPEscf5AzMWq7NJSX8WxuRZ3bV3nMDAZZnZ8/Xy+rg
+--- gSATPThFb4g1a+5/hwps5NGAEsd3VUlYtzy0vTySXyM
+<EFBFBD>gÛ<EFBFBD>lüøÇw_0¿](t€9©ÌÂæñ‘%9šÒaWŠÍ¬ý@dWý©‹@µ÷SÓoˆ’€*&þàX¢-@Õö¬ª<><C2AA>ƒc~#f¶o<>†âx‰•°=;‡Ý

secrets/ude-deluge.age

@@ -1,7 +1,8 @@
 age-encryption.org/v1
--> ssh-ed25519 IFuY+w ZigoLhwVERGG/r7uYI3DKX7jijKt+4tsiTWpbIdUTXE
-k4jmQIJXr7yJOY3pkc1VnoqDgWkNr84k1AgYF7jNjRs
--> ssh-ed25519 GKhvwg FMZOLDeE2Yw1Kd8V7NTL2oQtWo4IKDUoHu/Z8Su2hHI
-QF+L/Qf35wkOcgGWWRGANMJCG5Vz80epjQuwa4IdYQM
---- ZUTRNDrgxdsZsNSP1Z3BLxw4EYexr873aJrbUvIgE2I
-‰yâùZͪëú¶
M¹®Ë
Xd識塸*ô5ð‡øj"‹¥¿íí*ÃÖ
ZU³åÑ„²|Ý•]¼ßa8	ð"Zœb<>][9S÷Uµù.
+-> ssh-ed25519 IFuY+w YhrlFN7mVaYlDC0YyEYwHUw/Dn+AJS5LcdYH0CHNhHM
+2Fh1Imyut/Fs3nAUQAYNHuR0DPRCnDDv0fuLI1hQc6k
+-> ssh-ed25519 GKhvwg Iuw+N1SD8On8HqpoinMoXFJ+QRS7CRyjVHhI7LE83hs
+yTdsv1DKQUSG1hFyxanahMiagPumuuVH1S1uLwoX3aU
+--- fGCYe4oLn1ucgnXuuecwD4nHMkiqxy2kSTYp79y7sR4
+ÚÑ­
+QýÉVCs`ËʦWG<57>#‘uÍ‘+K~˜!æ:â#ËÝ'¨¹jƒÀˆ
QDŒYŠ‚zžƒ'­ ¾†‚%Š¯@ÏâA¼´ÊO±Õ`剒>

secrets/youko-niko-pass.age

@@ -1,7 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 rA7dkQ ucrMqUlwttyHHFkJ/c5tYpHohefNYe6aJnxHMUjkUxU
-RgsGaMLmtziGu/n6MiDJmkTZORTh2yYWoSS0eu9i6PA
--> ssh-ed25519 GKhvwg u7Fjda07e17aJGV0ZFK/Mt2ZbF/3b38MLydE8WKs2gY
-gO2rNP64Nkhr5GShWP8zhxeT2YUKEkqN1Oc6/3l6PKU
---- H9oqwkU/uI5fZAdy+qkCW5vw1PBaahe28FTUxhEFsds
-xSæmL6îï9ÊŽÐîG›Ž×3Ñ<áò4[ZÀ Œt»}å¶<OÓÃØdšÊcªYûé–}>XQ^]<5D>–ŠñKiƒ|B¶ÌwDmÓq×HïX©]FñeÄRt%¥`Ò¤0†»IVÂ×
+-> ssh-ed25519 rA7dkQ HZF6g+17SHv2P0Agh9/rJk5yQkjqxmOKF+F5dlcHkUI
+WimAhXL0UU2JXUlruPnIwi7vkjQ7YDWsyK5yB006gWo
+-> ssh-ed25519 GKhvwg mYJ6EJxisRlPtWzBqAsQXF4sivQP86rr03qIQvJGumY
+Y+dGZb/F1jddv04tFFPSSyTTJjsBTbQUocNg+FJuX/E
+--- mMUDr1Q6r/fEIejP+0yBj8D09REx3bj51XpaJiOO4ns
+Íî<z
A"¸ó³eÛû9µæ_þ<Õ<>
b“¸ª…7wªtqî[£ë¿Ä‰ãkCýå‚t]Øh§ÕUY67^‹#PT#Aõ(ñµ#•€Tßú}˜œuæÍå f&¼Ë–à
—/¶<)Þ<>=´

services/default.nix

@@ -3,5 +3,6 @@
     ./attic.nix
     ./forgejo-runner.nix
     ./forgejo.nix
+    ./paperless.nix
   ];
 }

services/paperless.nix

@@ -0,0 +1,61 @@
+{
+  services.paperless = {
+    host = "youko";
+    ports = [ 28981 ];
+    config =
+      { config, ... }:
+      {
+        age.secrets.rab-lol-cf = {
+          file = ../secrets/rab-lol-cf.age;
+          owner = config.services.nginx.user;
+        };
+        age.secrets.paperless-pass = {
+          file = ../secrets/paperless-pass.age;
+          owner = config.services.paperless.user;
+        };
+
+        services.paperless = {
+          enable = true;
+          dataDir = "/var/lib/paperless";
+          mediaDir = "/media/paperless/media";
+          consumptionDir = "/media/paperless/consume";
+          passwordFile = config.age.secrets.paperless-pass.path;
+          settings = {
+            PAPERLESS_CONSUMER_IGNORE_PATTERN = [
+              ".DS_STORE/*"
+              "desktop.ini"
+            ];
+            PAPERLESS_OCR_LANGUAGE = "pol+eng+jpn";
+            PAPERLESS_OCR_USER_ARGS = {
+              optimize = 1;
+              pdfa_image_compression = "lossless";
+            };
+          };
+        };
+
+        services.nginx = {
+          enable = true;
+          recommendedProxySettings = true;
+          recommendedGzipSettings = true;
+          recommendedOptimisation = true;
+          recommendedTlsSettings = true;
+          virtualHosts."paper.rab.lol" = {
+            forceSSL = true;
+            enableACME = true;
+            acmeRoot = null;
+            locations."/".proxyPass = "http://localhost:28981";
+            extraConfig = ''
+              client_max_body_size 24G;
+            '';
+          };
+        };
+
+        security.acme.acceptTerms = true;
+        security.acme.certs."paper.rab.lol" = {
+          email = "nikodem@rabulinski.com";
+          dnsProvider = "cloudflare";
+          credentialsFile = config.age.secrets.rab-lol-cf.path;
+        };
+      };
+  };
+}