From 428a1756f3b356067158277fb47e1f74908cd24e Mon Sep 17 00:00:00 2001 From: marc Date: Fri, 14 Mar 2025 20:01:35 +0100 Subject: [PATCH] Renew consul certificates --- README.org | 2 +- docs/consul.org | 9 ++++++++- .../samfelag-server-thingvellir-key.pem.age | Bin 548 -> 548 bytes .../samfelag-server-thingvellir.pem.age | Bin 1302 -> 1302 bytes 4 files changed, 9 insertions(+), 2 deletions(-) diff --git a/README.org b/README.org index 13579ad..95ad142 100644 --- a/README.org +++ b/README.org @@ -1,6 +1,6 @@ * NixOS ** [[file:docs/install.org][Installing]] -** Rebuilding +*** Rebuilding #+BEGIN_SRC bash sudo nixos-rebuild switch --impure --flake ".#${HOST}" #+END_SRC diff --git a/docs/consul.org b/docs/consul.org index 6a416db..fcc97bf 100644 --- a/docs/consul.org +++ b/docs/consul.org @@ -1,6 +1,6 @@ #+title: Consul * Server setup -** Create a server keypair +** Create a server keypair <> Decrypt the CA (from the agenix secrets) #+begin_src bash agenix -i ~/.ssh/id_reykjavik -d consul.d/consul-agent-ca.pem.age > ~/tmp/consul-agent-ca.pem @@ -78,3 +78,10 @@ JSON config: } } #+end_src +* Renew expired certificates +** Find the expired certificate +#+begin_src +openssl x509 -in /etc/consul.d/certs/samfelag-server-consul.pem -enddate -noout +#+end_src + +Follow the steps described in [[create_keypair][Create a server keypair]]. diff --git a/secrets/consul.d/samfelag-server-thingvellir-key.pem.age b/secrets/consul.d/samfelag-server-thingvellir-key.pem.age index cb10845b1237f4e281fcdad1793c1aafd54be1a4..760023e3a5a7689e10141c691c28c98ce698e22e 100644 GIT binary patch delta 514 zcmV+d0{#7@1f&FzEPr!FGdEUaR4XS~V+t)k zAaiqQEoEdfH8n9gAZt!)X--ifZAL3cd1PsAHF!riPef8UGJkPaHf4BZG<7&jFj+K7 zWo&F!HdS_RZdq+-3Tkz2F>XOpLTFY;cS~e-a4%MGHfwHXWlUx=OmcEsVR$$&V>wJ! zOJq$j3N0-yAVg|$R!K!}O=Cw#V=zKyWJ70eGGsP#Sxj$aGDTN!NO)v&LQ6$NQFl>Q z3XO5BK@+Ou?0=10l&dXK0MybkJiKKil5;HkpceVJ0k|f+wDuj$Bz132 Eo+U2WrvLx| delta 514 zcmV+d0{#7@1f&FzEPr-zX-qM5Q#nj&MOR35RCI4{VP-*fZ$d*gWH~}jW@mFZXEs+) zQBg!icM4HKR%by}YjRmNb1y|~Pf|!sGcZO)ZCW%@FfUeCbwWo-Q&>xJWq3w(RSGRW zAaiqQEoEdfH8n9gAZt!)X--ifL~c}4XE9A#Su03NaC%fVVSjp7QaNKxcWiMoFKlsa zMRRgja93$BQZ;UO3TS3>Z%j&RM>#`wHAq8FPIF5uc~xp_H)Uxxc2ZJAG+1JINK-X8 zNMce=3N0-yAT~oXN?|!KH$qHGW_Bw#aCmxcOH5T&PeL$EY-e_KRXIdyNlbTaMO1TD z3UL_6EBhkCvaarzdLMs646XxMf~I6 zLh!_FLB$64Ccdt2NuBkBk*Db0lF~MFet%(n!x`dDM@0SpL27Vw@9o*xUc=z(1X%8> zY3U1X9eODSVq~#Lx<$cC+Az|$u9;9m;pzjdVI%@D5ql9rmJ@gFqVw&F_^^}zN|CH8QilG+%Jf6(=B8Z7-rra zYI09`48^+lFA>OJ5vu5XC@vg9CRBicCaWKY_LwY+SCdp=0V6>AOw=GVZ{;JE&h7Qe EdoJ9~-2eap diff --git a/secrets/consul.d/samfelag-server-thingvellir.pem.age b/secrets/consul.d/samfelag-server-thingvellir.pem.age index d517710ac9ffd5f70b4b5e1362e6b251b73f78fe..1c3e824c0e5adacf394cb058656546ea8185a3fe 100644 GIT binary patch delta 1274 zcmVD7Gzu*~ zAaiqQEoEdfH8n9gAZt!)X--ifQBE;4I7n(mNM|ucMnPCJOn-TDGjLT@YGrV7d09<3 zG)Gr;MKN)6VpnZN3RrnGZ#i{wFjrDkL2*lBIaXy^Wn^PnGDRz8FjjX)PH!=FFmg~d zQ9^7<3N0-yAWBnCOhr^@HaU4%L}X5GS~6>IZbx)+No`h0S9D8nZh0?hMQBw^aaLtj z3Pp+FYlsG;uYbL0bH`2kTc{580F9N;fq1x+u4D~f_)99Mp5FMSB3T|W8pq*d29I;J zp6&7{<9~iBR9~v5GkfhN4anTvx|ZD(4WPgwa@vi)F?WQUo2ss-);Qx%4Pnj3*?$JT)vBgX|3zIC1sv44AarFqz@N#*Q`sh=~}8<(y9 zRG})~t7oSiSQ@R(3=OKU!=>C+{#i8rfG#<560m{qJBTct+}T-~F5%tx^%)SLGPb70 zR){|$+3-+>#Zah#=<+%}U7&61Eil%K^gVPCI-D4DOt8isC zSIL2mcYnHfD_U+q7+c=g*0-Hf@xPSCS~bxy$j9Ao*9&1l zSCVXJJ@peYN2~;dNpcdwMMy%n=y8Ol{3*&MwK;xSqeQ8g^vE+U3CDGz97A8ABuL=` z{e+HEWCCaV*1iVevjJXUqaGaXsWjpGs>GxzV1IW6WqRGa)us-IvC*ilrY0J`RboAYXux%SEKj?#LGhZu?WIS3DAPk?V(VPa5_z#%#Tmk< zWM`rrEAT9P1(PZGek>MhNK`;<*M(fqiU#~wGDk7=Z-@D?^HQ`S8*p(GElge|ldX|p zDSsE`0T)9H%^g0Vo%X6B`IEqRjB}=(_Ds8ld4!!2`o{=a5=~pIiwg5tm&LD##@MdY zxCLnS%R#upd+0+vFZkzopGzi9+KQ$l=ipwx>O!WxSrt5xOn;aY zS(33;>}}Jy<93Znf6$&xkC7DMGR8EG{?oHKw{wq05Qlt|{Pn~&juNy0^vQEMBH*xm zzFk+z-doa7qjJB1GA)m*_I4RHY7(ULV{jyn^y0gqJQGnhPtwhZg1lDP(!~MEFD`I* z3C(u@L?^e@xJ4P;>)w%6d&8HIy zDHip^O%W_loKdr|{_xmp=#o_W3rZ+tNKJD>5Ouqk;?pElKI6U6nU8^lalyUMb)}B< kCX!+p8Y0~(v1pF%QTH%!QMtL<=YIJmVYfp1*D{CuQdU#ZGc6MYha8ECJOJ+woSa5N5OJjOhYYHts zAaiqQEoEdfH8n9gAZt!)X--ifIahLUPBCq3R9QuDXk;)hI5TBoWp6KcbXs9~G-OgsHBV1=b3#IA z3Oh^s+Rvqs;4)7@aXy0YS?`2r9fuU6Xfr_g#+ zK6%AD&o~i)wEU}0xsEq(BxF!rYBbqQ^)JP zit5hTuzx?;o}y3c+6&J|TsA;*a^y#zwoV>U>9r=y#S6mK{6X^7)mMcvTdsH1G459O zrd9){H;7RbCw25omJ)o9v>{^P6=hjI^Rt4{MY5sA0nL1;)V7>_e^_1lp2>np<+zx~ z=1X2wiU2wT}KNO)`?&;rvh9eAInU`;`P7)ee0b2k8+T869LH zhrnOUAi@asPRyU!-#1aue$&aIfO)_!4O*jOYrjQB-aallm6h;DWS?Tw7r*7ur+Pv+ z9)H9gU>=9DAM?_rWcTz}q6;jzCkO}*VV;gCkAZ$ZQ2T`W2|JBp<;hb2y-jzmH{ELz z!3j7AC%KAdXK?6z{k5|GS8%UN0E1d@_DbsJAxdx0MQU~Xwom7D%_+11(2srl)U1}l z+kk>A33bF*Aq$Hwx?Yp);9ro5gS9D<41Z?kAIeiAPW2OwfK>`%5S2sDe^y|cJY+zK z0_MhjC|Ge!v7la1Q&?c2_Gy4Burawsg3=%jfxI(oXb_wmuM>^>m9m4ERAATh=n-39lyBHdzo=@EUD57z zC@I1ZuPZ%NzK(eGu*ps5Z3rr%5Z#`svWeA@{{PvyU-t)G2qSV#%P45HR8&FgT0Y`7 zoFLeg%c`ekX)$vyF3B*@)l$Qx?{jKB4faYo$_+ohzhU5|ESP zTT|RBIG^7jTrbJ}#H;DPEKvA`jt^eZ>plIepbcA<^M(+p)=KQ(6``>RbbO}zIS^cx kUz?l5EHzY6f|BGAJ)L&>=