diff --git a/flake.lock b/flake.lock index 3442e64..474e699 100644 --- a/flake.lock +++ b/flake.lock @@ -541,6 +541,22 @@ "type": "github" } }, + "nixpkgs-unstable": { + "locked": { + "lastModified": 1690179384, + "narHash": "sha256-+arbgqFTAtoeKtepW9wCnA0njCOyoiDFyl0Q0SBSOtE=", + "owner": "nixos", + "repo": "nixpkgs", + "rev": "b12803b6d90e2e583429bb79b859ca53c348b39a", + "type": "github" + }, + "original": { + "owner": "nixos", + "ref": "nixos-unstable", + "repo": "nixpkgs", + "type": "github" + } + }, "nixpkgs-wayland": { "inputs": { "flake-compat": "flake-compat_3", @@ -615,6 +631,7 @@ ], "nixpkgs-2211": "nixpkgs-2211", "nixpkgs-2305": "nixpkgs-2305", + "nixpkgs-unstable": "nixpkgs-unstable", "nixpkgs-wayland": "nixpkgs-wayland", "ofi-pass": "ofi-pass", "salut": "salut", diff --git a/flake.nix b/flake.nix index bd91e12..92fcb48 100644 --- a/flake.nix +++ b/flake.nix @@ -4,6 +4,7 @@ # flake and infra basics nixpkgs-2211.url = "github:nixos/nixpkgs/nixos-22.11"; nixpkgs-2305.url = "github:nixos/nixpkgs/nixos-23.05"; + nixpkgs-unstable.url = "github:nixos/nixpkgs/nixos-unstable"; nixpkgs.follows = "nixpkgs-2305"; flake-parts.url = "github:hercules-ci/flake-parts"; get-flake.url = "github:ursi/get-flake"; @@ -176,6 +177,8 @@ pkgs.fontconfig ]; }; + + nomad = inputs'.nixpkgs-unstable.legacyPackages.nomad_1_6; }; formatter = pkgs.alejandra; diff --git a/nix/os/devices/srv0-dmz0/configuration.nix b/nix/os/devices/srv0-dmz0/configuration.nix index 3fb80da..66e15d5 100644 --- a/nix/os/devices/srv0-dmz0/configuration.nix +++ b/nix/os/devices/srv0-dmz0/configuration.nix @@ -1,6 +1,7 @@ { modulesPath, repoFlake, + packages', pkgs, config, ... @@ -123,6 +124,91 @@ in { containers = { }; + sops.secrets.holochain-nomad-agent-ca = { + sopsFile = ../../../../secrets/holochain-infra/nomad.yaml; + owner = config.users.extraUsers.nomad.name; + group = config.users.groups.nomad.name; + }; + sops.secrets.holochain-global-nomad-client-cert = { + sopsFile = ../../../../secrets/holochain-infra/nomad.yaml; + owner = config.users.extraUsers.nomad.name; + group = config.users.groups.nomad.name; + }; + sops.secrets.holochain-global-client-nomad-key = { + sopsFile = ../../../../secrets/holochain-infra/nomad.yaml; + owner = config.users.extraUsers.nomad.name; + group = config.users.groups.nomad.name; + }; + + services.nomad = { + enable = true; + package = packages'.nomad; + enableDocker = false; + dropPrivileges = false; + + extraPackages = [ + pkgs.coreutils + pkgs.nix + pkgs.bash + pkgs.gitFull + pkgs.cacert + ]; + + settings = { + server.enabled = false; + + client = { + enabled = true; + server_join = { + retry_join = [ + "infra.holochain.org" + ]; + retry_interval = "60s"; + }; + + node_class = "testing"; + + meta = { + inherit (pkgs.targetPlatform) system; + + features = builtins.concatStringsSep "," [ + "poc-1" + "poc-2" + "ipv4-nat" + "nix" + "nixos" + "holoport" + ]; + + machine_type = "baremetal"; + }; + }; + + tls = { + http = true; + rpc = true; + ca_file = config.sops.secrets.holochain-nomad-agent-ca.path; + cert_file = config.sops.secrets.holochain-global-nomad-client-cert.path; + key_file = config.sops.secrets.holochain-global-client-nomad-key.path; + + verify_server_hostname = true; + verify_https_client = true; + }; + + plugin.raw_exec.config.enabled = true; + }; + }; + + users.extraUsers.nomad.isNormalUser = true; + users.extraUsers.nomad.isSystemUser = false; + users.extraUsers.nomad.group = "nomad"; + users.extraUsers.nomad.home = config.services.nomad.settings.data_dir; + users.extraUsers.nomad.createHome = true; + users.groups.nomad.members = ["nomad"]; + + systemd.services.nomad.serviceConfig.User = "nomad"; + systemd.services.nomad.serviceConfig.Group = "nomad"; + # This value determines the NixOS release from which the default # settings for stateful data, like file locations and database versions # on your system were taken. It‘s perfectly fine and recommended to leave diff --git a/nix/os/devices/steveej-t14/system.nix b/nix/os/devices/steveej-t14/system.nix index 4f768f2..9ced0b4 100644 --- a/nix/os/devices/steveej-t14/system.nix +++ b/nix/os/devices/steveej-t14/system.nix @@ -132,19 +132,4 @@ in { sopsFile = ../../../../secrets/zerotierone.txt; format = "binary"; }; - - sops.secrets.nomad-holochain-agent-ca = { - sopsFile = ../../../../secrets/holochain-infra/nomad.yaml; - owner = config.users.extraUsers.steveej.name; - }; - - sops.secrets.nomad-holochain-cli-cert = { - sopsFile = ../../../../secrets/holochain-infra/nomad.yaml; - owner = config.users.extraUsers.steveej.name; - }; - - sops.secrets.nomad-holochain-cli-key = { - sopsFile = ../../../../secrets/holochain-infra/nomad.yaml; - owner = config.users.extraUsers.steveej.name; - }; } diff --git a/secrets/holochain-infra/nomad.yaml b/secrets/holochain-infra/nomad.yaml index a203484..89bcb33 100644 --- a/secrets/holochain-infra/nomad.yaml +++ b/secrets/holochain-infra/nomad.yaml @@ -1,37 +1,39 @@ -nomad-holochain-agent-ca: ENC[AES256_GCM,data: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,iv:QgOfg6sSs1zYtqHFCKy+94qx6edQ3iEt/JtCIoUEqGI=,tag:vSzK1bNTRZA0ytKLITXF9Q==,type:str] -nomad-holochain-cli-cert: ENC[AES256_GCM,data:+SMQfO1zyJ6EW44IIe3uouLJ4lkwlX5y1PFpNMFLXVySsAQpwlLLXCRvTlt8r53xXJglQ4vI+CpNyaE++0A+a7/cXa0rOmxweJjN+LNI9kRR+DdAtR0tGPDiSge+tc7/penx1LJd81SIahoMjZj8Q0Ua3YO8VKKLZKq+jCfTYsWWkGYFVmrUjBZMc6X6l49mo8efmKUbOVvhZ350qfTKDuXjRewcI5vJdW1tm7Gcb5nMA+31lgXgWPOURJIOHnicuHLEYLUEEspRYy3IRuonQHrCeydrKTjRW7YTDr8GgjVBz/HwuoFdCSZ3iqf4YkxSloYfxAzG1y9/FEf2xNF2xOp3w3Pygkb8YtN6ZBX3UJOcisouyYmLc7s7FXfnrDyOlozQmb0IYBUUfrtFWTE/uvWKsRiyaWBkqgfPkf1BH/zFuhwm0nPFH5meC7ILaD71mCXG7cESo2en52AGe3i1fec+kLmtpeGAad6iET9nZxXE13bHI3WycfgpAnBjyyWVwQ6zblZMz6f0U3PgJ/l0HydgFuWE275ClE5M4o/IN+HJNk9/ehM7V/aII7v3eKVhFljNI1elF2OsDag995CyyipZ8gw2PU10XVVBBW4UZuwRpJDkKyoQI9+IR8iC4JHJ7dZpV+Wsv08KY1HHWqtW63bVrrgh7fruMZJ2OX1bgAWwTyeYkCljjm+h3A+xvhoG8Hu4FjBAb0k6FD2emwR5YkjZA9hw1gYZjvDt71X0N2Zz9n/LHZdgNvK6iVN9XRgF7h4w5oRTCVX9wjCASuTE/K01HNMOFBZZA2PdE+dCRgg4ybvtCwvmOQWE/GEzOZ1PRVdxmc3YEru/rUNDRqeTaje/buQCk7RM3mg/s+y6Gl0nrQ05UnUNKPn802bR2fyRi6SohES39O7Xp8IERFOqhzZMqliKvmamAbk4oQ0sfWnp61gGOOpd79hI9Cecxcr+AMlCeIF9RJeywgMbONGrt6uONsd92aMKr9zCaltiWa8A9dH2D3c5rNB5l/qvQVU5RVSDAwo6sCulbpmy6tn+6EAWLjxrTjciK3li/GT6bfO1HVlx+V32YgZ3pPdkH3VQzpDOaCEqpX0gkgbXWIRWQoFBNp6jgLHcB7+DBgV9DFrmThqQsqQzB3PY1s+Kyeejo8xTRmKf6YwjfbP3z3ZhUfkbP1Au7xw5/baSPf7+2u49aUNSa6j46DPzahIym9wT,iv:Spx29A5n1kLZqE6EHw+3N3Om7V1kgnM2PVk7d7wJzqM=,tag:LCvfCpldN29iRPhxzbsU0Q==,type:str] -nomad-holochain-cli-key: ENC[AES256_GCM,data:G633C4SWwAoM9NyBEX7+xGzEondw/FY5XXqbRZxPtO8if+pWHnLRSkc9/fIs4mmCJxB89C2RAxb4tvuwCXJUZyWVQ1xEMwYXCDvJ56ggtrcDyw48iRnF/kNTIIkkHO3mWbpf6OALekcSNRZlznCUcq5K6gSgYECGuVeqcTA/NVH7q8mmBxEicUEyeO6bHopge4bz0o5Bnbpy86Ux2aw2HzSS1qreMpzEVcXIPgo4vlhaeaHj37rUHos2gKGD+GR/wD1n/D12qMsxRXlSz9N0vC50BI2QkqKtlVsv0PNib/MqjiA=,iv:SrPwR1EGCYh846luAX3RMJq+vG88NO3g/IqcjKcFi+o=,tag:ytA4ZwZ2wXz9K2trL6MU+Q==,type:str] +holochain-nomad-agent-ca: ENC[AES256_GCM,data:DeB3Poq3v4mMfT4Hc46QNOcXuztGzU8X5ilGTMjjRWH0XuCju282XDMjO1eaoOzdZAHSRNKgSITJUgL7hj90CBb0YgnF0irLLKXCJftseRw30fIaJkvgESFT9CaUJkiOd9Ke0GGWWCw6hQj8KK1N7BItYiOrl1zp28Ej0oLcc+qwMMb9L0eiNmlVBBrb/o2AJuD8xvQzO48O9LffrNAxhrd5IbDxrAiu1n+2eSeWwrlmiK/sGqNw4UoJ98K1uraxWcBcrudwWwMBkPE+UTanqq6jjUMCGLtjMphs34I/pNrRBWS1KFUSdvUNMzlCGL8WQXjYD/7z0JSVxqTgaIHpiRG2NjCz1oFxNU594sXlwK0kCMgNKqa47pomWeYQ0jSuup1NVUy5wEECpc/5DlpYIP+c094PMz2jXF+kFMXohOMpT88GXlxQK1Sxpyn7rp1e+rGHeK3pENos1gedwqNW3WzCpm7Wmvc8aZvTtDXfo6XZlcpllPivKJmYz2o9Dxz0w4n7U5nic1cji0ZhqrvXWO3rsVQ5IKRkWVH6ralg7OvdkoyRDRxETmlPio3ykGbo/4D9hEh4+r4Etu+pPu0eZ7PmrCQ8rhHPNBOPEQPHnLa81r8gygEzwb7VcLii5S3/tnO9cPdFMpHfpcIHtFA9qRONlU6jx/RaDjid3BESjoDdWULtIn5JqborcomTg6BJ3lUz5zgm5nv0MY84VGuwafDyy54OelAdD0QWJdgYhyX4FuJYgVhuctJEdvJ9y1bpogpcCIf8STdy+eSP9cWHBMNI/CwKszyXI8AGH2jw4V3BxNbglUycmE7xvunmbkt/Yg+2UdKwDYHGzD4NtqY3YL+kLnpSh13XR80RdVM6EMeithpO8Awze78NWZw7I6UMIe1FqJKUlq18HdA3xUQLs4zTFWyxOtn05o1tZ2g6FFTKmkzfySDkCBUP6lDGUl8Q1IpePoE3geyIoEuO4SgszN2T9/Ncefx/846j58BvzOX8l0umdiyESarVhkQ692T5mKu7RbeaoyERj4ilUogYhtescB/ACWsbBYjqby++qBehsJMfjm6yNSalbspK4ZStBX3gv4v9YP3iSZJrnrusyVw/5WwGL0Fh/mlIsUfMmIlFzT7nMCvJZMWOk+zEX62Em+O6DhX4zuwWCasSqhPKwQLOba0ZpKpJfgiW9DhwUlZz/6VkCsOXED6K+dugT7nqbvY4JH+0LJCm3v0bj03i8vHpLGCiajcLi3t5ivSpHRrCEY/8WjTyYDr2Y+cCjjLy8GtBtvO6FTpzwmyQsCpOrTd3cw1jwvA4vmkZ/DF8sn8Za8vxYaJZAglLuZICPNIeCdhA/I767MRIosV9TL4KNlahaY8FQYdUbQtsHlpNn6TLucKiAjPWpd8MhuSMQ8EGEIUEBbyU0ZvdV1CzmuHka7QA,iv:jojLi4+X6BVLcBiDTgcrwdh/H73sQW9l1n+SrTa8HEE=,tag:2vRZsuWyR0LMlSmzILflwg==,type:str] +holochain-nomad-cli-cert: ENC[AES256_GCM,data:5XIGPcjlcVShrNMso1E3LlDfYLRac0uOqFl1kkuIw0Br0WrCelmUYrBya/QXk3IHxzl+mjvW0v9Y7qsYn6tfs+XMz41QUOQ7CKPLkK8jlCi25FXfxClh/gL5W7M1iBgZ6PZth20frszSD9dWk9DxuJHWq+Xg9hVlOyGA9I7mws5FEsLmpCKEF8Vfj7g6oU1IhJSkYawmku8r9bTyYrPH2EWy7nuFn694ddpsud3I0WBK1KI2D5coIg7uIqJO7JF65I12PLGW418mkI+CmOkanx23dOpY0H103T9IJUAYAShGbw/laPaPbF4Ms/FG9174pHROWSTM+1AT2bI/jFaFv6DUE0elnm/Bi/V6i6RPOwrBmO+KhyKX3c+5uAvWGsewKiuUVfbRtTCT3n85Bh5EoE6gzzTGE4xIDqixzthzBkLczIMbx0br4rFlcXwifNWGa6tfB0X/jI1lQEfdyu6mXzhjXLP/CoXz0pGZ3r5EkvsdU//cOkBmK8/Dg5dDsH4pIdw3Zxy41yIfciBpuMRzi23tLGtha7VtdnMelKO47d+LPFezvIIgdPtvgjTCy2Ltl2paD/UM2L39fP0G6DabNYC6QzF3p/2q5ecZUEJHDLsH0Pf+BBEvvsftb7ZE3cA8Xij/0ExqRSFY4Ndo3d78onE4jiYH+cWFGBN971sbypF9D+H5SYF2PJRVJjqYlr65HZzrLQfmTcFa7OBB+jXv8LwEFuMfVIvhRZCPULABjWRakikMT5WLz3McRP/zi+e1kUnmP2Fr0zrXUznmstO9BObUFkCW+ieDOCTDQYAqMK0H6ssPLVekXhBaqVqSqPTKt9PD8EES/rhs2qp3/OaVeznW1dA160YvM8Ahnq5Qcy9bPb8KFBFfXPvhNBjXFBSvUx5+nYA1IWuL4djBPa0WiGnPyxPeYNCT2+c5SUEOeEy0ZTcK0xGKKM2h4veJi7UA9KdSoeGisYKJ+hJTVC3lST/qN8sBVRpAp5UY6gt/cAL5yzJRn/9PtfGVKU60odwRwaZEjnNricqHpMyF8RVMZ8lkmaHAolgzXWNRtiQ2Tl0Q/Tc/qCHf1AKPqCjMGWXmLmoW5wAaaCt3V9giyi+Pn6GiIc2fY8xetp3qpBfkDHz4Kk3WtbofOBWvCaxWNShHAsNq2An+gWNidNlhVhdHCxolRmYyBftw81Pxpy9KkYQ0kC7QvAVFgUrphMDQGRm/,iv:1x4/kBIMbsB87MN+a8keJxJMVZZXRJ9WvozckByPLqU=,tag:l2WBaVhcP591TtEoZmIkUA==,type:str] +holochain-nomad-cli-key: ENC[AES256_GCM,data:Kl7EJI1V5HGeE9nogY5rujwe8MQYA6tIc3bLiyGdWHTtIbUGfp5wQ5p5zTyDBzA1IeWfTBIaM5dLyw7W+95KENaahJph+HrNbvLvBK8CXmTp7bRFJOgXIDV7CkxnTTX46Qptd17F3gY/4/HeMYsGJ7cZYmLYjW2UiyT6NmrivcaPJmECnuPPJV8aN3Kofm2gL9jbw089IiG6yksT1Y+AQUt/UQBzjYGpaYPHYaldgPQkb0+yaSb+DhF8/fr9lNsCyUbtnHFVNfiQj64IDw68jBohIMQzCMd44plJI8dcJNoA0TM=,iv:qShNRSKgqIe03a1K3FqTpDxogf4Uc25UsZXpwd6cHT8=,tag:9zr/wfR4umX6JCMslrjQjA==,type:str] +holochain-global-nomad-client-cert: ENC[AES256_GCM,data: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,iv:nSXO+1ALy6Ie5aNIEm1ZZgZwOdJLrHjO+BwKVbbZQ7c=,tag:n4V165c86IQ3QHzYb1ThJA==,type:str] +holochain-global-client-nomad-key: ENC[AES256_GCM,data:9w+1CYOXgm+xvg9iER+cLJBlKLyYmanr93tZ8xTl63ZIKho6DJLqGPCYdjlG4sHWyQUM6/Dpaa490yC4CToLX5MuUnSvqiaSgugcGqPa1DhlRYVsa8j5rdp90EDMoarN7xKe0ShIRW2GTT9S5EEyF2qdZUAFybpDPX2laZZ44UBz1QvlCp7gzs0duO4b95WPTHmlhfaw0BVF7FhFqkAHtH6qg24qEtwB3I4NmW5UsTKR+tbUCEyQcADQr1CrXhIHkQ8yZ52rc42H6gRQXoVrJomJgtiXf28ARY5K1oZMmICLDw==,iv:FSiRHgbqpKEYINVBLYp1A9YgroLT07GMDFqT/k8Vyqs=,tag:XX7oQhllDmrRLCEiMMYsfA==,type:str] sops: kms: [] gcp_kms: [] azure_kv: [] hc_vault: [] age: - - recipient: age17jxphuql70wjkd84azn62ltx9ky69hyvkac23lm8f2j92lznf9hseqq0vl + - recipient: age13cyvxrd28j68f97q2dwsn62q5dy8tdxtq86ql2dxv2ncwfrf63dsmkj7n3 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwVTlaZTA2WVZWWXIwMkFu - d0lMN0tEaUVMeHY1SnBwTVVFbnVPRlFEalVRClliR05oclI5eDVnclBrY2tKK3JS - NjhTOG11Nkh0UWF5Z2g5SzdFT2NpaUUKLS0tIENPU3RHSEVVdzhKV2lQYkR3RnM1 - c2tjQjk0TG1IeTRYdjlPeER2ZlNHMlEKMlWrDV9aNY9AbLp3BsIUZ8W1b94ue4dh - uBPpeMLHB0T2q3C1MxnfBa8h9lZyePd3L4zYFUAX+I8CGECZNx9C3A== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtQmFtWk8vSHYydmt5OW5I + Z2JCVFJ0MHRoWkU1QXpzY1NGOFU5NHF1SkNzCkN6SEVXUlhnRHZKVXcrVStYRHFL + R2g5WG5tbExSVkVYMFlFL2tnWHlCNW8KLS0tIG5CaURNSjQ3QkRUS1FkdjljbmNB + YUwvY0hIZkhJcEZLUkFMWXBjMW1VSFUKBDDoDAbVaex00VRjuWKifbTrtKaHz7m8 + M3nrwfIcjsJiMs9vJXWh5J/dhRTWQp0kEZRaCtxN6gDz+dDE3TVAiw== -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-07-05T08:26:42Z" - mac: ENC[AES256_GCM,data:g3wOkP8M9eLwhccPLV2WbpsnNUyYxILstOqkmyPQ5JPaOQJpGLr0AesN8E+wVPb2cVuUJ38+/xVdWubuFXx0ptZtLoEItnXEwmTxfvRk1veyknxMvX9f4XGfeSunoOFCMNnD+C5tZncJuIeHPcSz4bObHBRbCflMblmz0cthF78=,iv:oxEeAiHqZHEkvs7OxGwO+quxj+yD8nAH2pTGSs/eNes=,tag:VFgDVJOt9qYd4k6j1t0GdA==,type:str] + lastmodified: "2023-07-12T09:51:29Z" + mac: ENC[AES256_GCM,data:Eq/hdaWf9+CG2jLQsL2Sw+IHy0vef7cC0IR5xL3jooYbmilRYS2Lj+lRckVcLKTRHjLBlJmnY20wbL/iNwlyTsY3MkCTEMAg1aY2GVPq3/gL0Gl0/Em4pktfVLZGVTZLt6mKzAJMWM9RdTapW5sRlywZ4/fa1YQwoQQ3tFVWm4U=,iv:+Oy+dBT0B5k5eItscLlXrRzbPO1u8eQNBwoDLnZC06I=,tag:hVwJwd6m6oCOlQ0jC8H+Ew==,type:str] pgp: - - created_at: "2023-07-05T08:19:26Z" + - created_at: "2023-07-12T10:09:31Z" enc: |- -----BEGIN PGP MESSAGE----- - wcBMA0SHG/zF3227AQf+M3metU+UqXIGIVmdw5qLqw6H1h4JPk0DFWzJRZqtt5U7 - BBdvoGr6COYFjYx3CRzXVkC/0ldNTsCnM1D2QZTbnqivP5P7L5Bp/y6jHxacBtq/ - erv3doofU54weKBFvm0xh564P7uL5+IRxbSidJhYAKAwYzvptuhEA3R1Y6szzlKY - l6kYgROiRnOfWk8iOKBYCbcxZ8VrmRoohuky6PKaCewESNRiOR3vzkumDE8mbnLH - /QuufFhZbg2wA8ZkG54tSBIRz8gjanQDNhh9sYtPp+PWnuDiyyZhSJef6ruT9v1f - IUP1ybuVsMyRmMKAL0NAbW3UleoIY/GcH9nVaeT+TNJRAXS5BVX/guduIFWqqbwQ - 3fbN7k5JS/VwKCIf8kI6DOVee78F0o/C7rA02CZU9PqeX0hc47wEFvlgNn/TepON - eFWOScb0W7O0Ug+3lRnVdLHO - =8m42 + wcBMA0SHG/zF3227AQgAlXTAMih9lsxCEvh3UyK8vxuhnmnlluf22D+oz/e0JabE + DirPEM4FUlCV+8j+Hia5mKpgWJFDcMK0FqxIQvUwTj/I9AnIB740kcr5TVPcOWOU + 9TPmhjLT8RRhQWu8/URUnjdiF1YypOHYfUItSw/agTJa89T4ZJFsaA9IjNdZBUq8 + e0eTF+7Ha0wfll+V+veOPfL53uYuuIoDXoi5wwAjYa2433QsdLwUTKrRi4dNrQyo + dYnYltYRAe/4w/sFCkMlLRpo47J5m7SEggXrM8wni8QpTOJzOIqCP7XTm8MX3MKE + pU25kh0iCsBaNfwD34NF2Ti5l9aUuRWmy0EI+wcTKtJRAaMojKInR/TB8Tj4OD2O + p2IVFwZlPGgOOwZUTn5wyWWSuZD8JRJHxrYETpejXtPIGtnSkiVgphYlD/bagPA5 + eHRQH6uDdKM+/6FXnNMiu50G + =itdA -----END PGP MESSAGE----- fp: 6F7069FE6B96E894E60EC45C6EEFA706CB17E89B unencrypted_suffix: _unencrypted