secrets: allow sugarcane to access acme_dns, and rekey

(cherry picked from commit c34578dd03)
(cherry picked from commit 3b5f8350e3)

hosts/sugarcane/default.nix

@@ -4,6 +4,7 @@
   time.timeZone = "Asia/Singapore";
 
   age.secrets = {
+    acme_dns.file = ../../secrets/acme_dns.age;
     passwd.file = ../../secrets/passwd.age;
     wg_sugarcane.file = ../../secrets/wg_sugarcane.age;
   };

secrets.nix

@@ -8,7 +8,7 @@ in {
   "secrets/passwd.age".publicKeys = [ blossom caramel sugarcane rin ];
   "secrets/wpa_conf.age".publicKeys = [ blossom caramel rin ];
 
-  "secrets/acme_dns.age".publicKeys = [ caramel rin ];
+  "secrets/acme_dns.age".publicKeys = [ caramel sugarcane rin ];
   "secrets/warden_admin.age".publicKeys = [ caramel rin ];
   "secrets/wg_blossom.age".publicKeys = [ blossom rin ];
   "secrets/wg_caramel.age".publicKeys = [ caramel rin ];

secrets/passwd.age

@@ -1,14 +1,13 @@
 age-encryption.org/v1
--> ssh-ed25519 U9FXlg U5BvNdCURLw3Za/EFnyiwJWE+nR05pw6N/gyCCtejRg
+-> ssh-ed25519 CUCjXQ ZrbLZXETJagm+HHfxYT0a8pyUngDlw6YKNG3xK5W9zQ
-UwW0knEEwdbsNIDF8pCIbwwf4X5hahwZ0Cx8w2+b6i0
+L8D/Hr/ir0BFnZrJKtCkfSQkX+/4OzHg0m26RzHCE9U
--> ssh-ed25519 Hx37cw vO0M5kzkG7BtuNpC5+xtM663HKqj80KQ0qWh+wkSPxM
+-> ssh-ed25519 krYeuQ 10ymP+C5ZeRwrnxtErKA9VKHuVPy8+bNHJObzX0Jp0U
-lbTCCCv+VNuGXPmpC7rzLeTlqZWqAXzc24eZ1gZShBI
+OCquEuxRe3xt12IkmkP8RnY8pz9KcRKNVIQVWA52eIE
--> ssh-ed25519 krYeuQ DCsEUqV49Wg4BdWydxKmVQnFZrwxpFd6ZhJ1w9RyC3w
+-> ssh-ed25519 Hx37cw v1nwWHdbSLdk8Wk0RF0nKBGIiANyXBxOEyU8jESA7Wc
-gio9eITeS3kjOW/jtm2ajmKqvBecj+rjlvAqLILuiW4
+an8NMIhDKgNhHBecOzEuXHKdcr3+aAQPXly88+791a0
--> ssh-ed25519 CUCjXQ eGjsQfi+/Habc+KcQZRtVp2T+Vs/QK+VR6tmouxkzWw
+-> ssh-ed25519 U9FXlg L/9mBIcwWLDcEZWT32Oo0WzWeoRVoZN2Rah7oNt7Gio
-y1aAwk8qJ4m0xmIGsQbMnT01+zawmp0B34tUX+mPkSw
+akZ3AdYuKAEfXiNKZk3XHm4IrwSCjCPKe9yk9mfYmVI
--> 4"nrU-grease hfIl x e)a
+-> +-grease Q{/
-xyMmSA
++e/clwQ33SN111HEvsNUxjXJl0NRROAK
---- ISCslqpC6CkOA7RcpPOtAC8JA68s3AhMdYdeDlJOW6M
+--- f0/c5YRQjnyZirMkYSA05W0meE1lOMXaDSh9xbwBiR4
-›\o°$Ò;ò|„Àªà*ýå,<ÅöÕç
+ͅИ¸_NÁÌ@˜üÖrÄ‹±nv_y,倬]!nìáDxÒ¶ï‘×ýñ¯®´ËSX¨BÝÅÖønz~Ñü°b–“79bÈŒÀeîH«AÖ®Üd÷!ÎŒþûìãÚOs¤‡JZà…}å„ Á»P3W¤&öSß\´wî_g¶C¬´"®
-úëyáCÆ Œ¦<C592>ŒYSAÇÚuÛˆËîû«ûà¿áUÂû2÷–Úøáî`DUÑwñ,±èf~Sà›â´|BØ´2÷é;˜Êc+Õ±aƒ)±‹…F$ï¶TܸrЫvš^söA”tdòÏXP

secrets/wg_blossom.age

@@ -1,11 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 U9FXlg Y/Q29duiKdP+fV11ellTIMtHFyi9saczXfbcnq7iB0s
+-> ssh-ed25519 CUCjXQ Fp3Mrgaw4yRKvdabJJ3dNcnKXJUqRuZP4QO8f3wN3SY
-D9P8MAHlFOLR7P8Ux90CjljnhExARGnuSuw24AXOr5c
+IkH7jnotoXzo8HE42s2pT3MR4JckFbdBWajnsOBJZl8
--> ssh-ed25519 CUCjXQ eGpAJd5fydYBlC7o34CP7091jg4O4NsuLji1/rYtQVg
+-> ssh-ed25519 U9FXlg 89PWDDxlJs2wAx0MpHQ4/nQOYBhDOW3IHbT8ZMNrW1U
-9/rgYCpe9wcCrLM7fTYI92oa+3+SAEK6ZgJNmBeOtnM
+5SqO0LRGbnPSaT4Wyskn+TjLROkBlXZj4CZpUdprASw
--> A-grease xTj~+6%4 aF]RZn tj](JCp
+-> 7.-grease "7|kya
-5iDN8bexrr7eNqyFwBNCUefrOqAIS10KppbrdDJH1+fD0TkUifEOjcM2uV/+3tH2
+h1PiRYdaZsbG0yfAlNY/jSFOwcKxWi5DhZqn20c8iQ
-dYX5eM94zkmwxw
+--- Z76EcD46quTH32YiSgnqhHpDdRcZJu5Q/+jtOutFl6c
---- QKnJmu6ICTTfadXCKLKii03FXVTBqAFvbAZVHGzGLzE
+xó•ÛCÓôª¯rÕw<EFBFBD>bk˜gcÄÞ¦ôqnòբͲæß’ËÖœd'<27>t<EFBFBD>ç<EFBFBD>s¯ò¶Ö<>ä>µ\ðnÝŸÓTo¤Ð/„»~4|Ö–÷­
-äï<GÚÓ4q§<71>#gàâ
ªJ_<17>ÿ^o–ò4G•Vð£æþ5ä§
-ÑÈŠ$½<7F>wŸTú‹œ‹Íl¡•t—‹!…a†wŘí<CB9C>[Å„›