From 5e7c0e94a092591c6324132747b5abb2c5837938 Mon Sep 17 00:00:00 2001 From: David Kebler Date: Mon, 26 Oct 2020 10:43:32 -0700 Subject: [PATCH] set specific conf files as secrets --- .bash_history.secret | Bin 0 -> 595 bytes .gitignore | 4 + .gitsecret/paths/mapping.cfg | 6 +- conf/238lights.conf | 32 --- conf/238lights.conf.secret | Bin 0 -> 759 bytes conf/645lights.conf | 32 --- conf/645lights.conf.secret | Bin 0 -> 759 bytes conf/caddy1.conf | 366 ---------------------------- conf/caddy1.conf.bak | 366 ---------------------------- conf/{test.conf => example.conf} | 4 +- conf/nadal.conf | 53 ---- conf/nadal.conf.secret | Bin 0 -> 990 bytes conf/trantor.conf | 57 ----- conf/trantor.conf.secret | Bin 0 -> 877 bytes env/AWS.secret | Bin 610 -> 609 bytes env/aws.sh.secret | Bin 628 -> 628 bytes {testweb => example-web}/404.html | 0 {testweb => example-web}/index.html | 0 18 files changed, 11 insertions(+), 909 deletions(-) create mode 100644 .bash_history.secret delete mode 100644 conf/238lights.conf create mode 100644 conf/238lights.conf.secret delete mode 100644 conf/645lights.conf create mode 100644 conf/645lights.conf.secret delete mode 100644 conf/caddy1.conf delete mode 100644 conf/caddy1.conf.bak rename conf/{test.conf => example.conf} (77%) delete mode 100644 conf/nadal.conf create mode 100644 conf/nadal.conf.secret delete mode 100644 conf/trantor.conf create mode 100644 conf/trantor.conf.secret rename {testweb => example-web}/404.html (100%) rename {testweb => example-web}/index.html (100%) diff --git a/.bash_history.secret b/.bash_history.secret new file mode 100644 index 0000000000000000000000000000000000000000..5c1b6b5355c2908997f77625d359c7978e48fcdf GIT binary patch literal 595 zcmV-Z0<8Uo0gMCgu7OP^x^5Ez3;>Lck^DY)?Ksmk>vUt5Qd!?_e1~1-M5#aEocMjH zjI)U*;4F7%`U*vw?t?(~wyddvRtEo@s}T?G)S6ospwV=^irfQ5mfl8s-KHS*iz?Er z&mbZIi}>MR!atuxvG$+nI-$ZHB{=84J8FyAx>E|4-ixFz~%I|Rbh&2R6{m4^`mq)Ew>F<`NfkdUaT5xEGauho2TBYS?A-kme*My} zVoA;J^$U){XkpxdukFdxw%&xgvh#$rTs-9OOyiX&iDu$=ua|+qZ;cfYdw5i0T5deA z$ic#CYDtVpM$n8jj&}hJSM}aVx2{d8=@=l1=z{NjQ z_w+?)gLZIobW&+8eVTnfsP3$S&%C1r?%Qu zn-7V$?nfNu^9rv!c{eVSa)NZX;lWj2pp_H^d7vkIV!&mVuoF5v7)g$+dLJ3R`RO)0 z(vr~pVchl0Me4IFYnyU-rnmC_7%#zoTGur|{W<+ArY}~4V-0vOTZ*k62{quM$Y=j& zHWD6$vomHteW#qP+@z39)>5DMGp@MdBaz9OQ9r$>8@i8c{M(5hS7Bx>){;-2YA_}= z%v%0eJigRm>)Y#G|lGGNlRDZLb6>yjP&HFFmA>ljWjhFr zWA_xZO$d*CZS^1a53-l!g6Qc1aT}jN z)~DrLlC3tH1}88KZw5C&JDgp9kQ8uePEPW5md|Utvd!;a2{syTxfLItKWeV8Jy8a_ zVZhP{oi|*8?@?vOI=vT?U$;BTDW*~Lkc;1cvP7PAXV{bLdee6*dor|a*&|g{FwI84 z=<6tKcd#KcvqJI6Yr2#lq2I@xo zcdqx}aBtOg)#CC)hzNOV{}lQ|Y%%c2(q1q?>iudx3Q6TLi2Ge2%v>8#1vdO+vUW58 zYg0Ya4Ri_WdY2(rtVJT!y@AcFuDo0&Hz;iwdda=ql7m;M&TmVy#dbZ6h;=i8LLsmP zWUuxFC4|;hLP85dOg|1QuPvXWrkCbFLv`Sc{EJzt5aG6pL81RBF*^*_e?qFU22uyNy!c+^qruma zI|1F{Zegv6PB9cOf;=X6ZVKKbqOI|4q*0*^xkM1WXmGzI=U} zv?}zu7B=-6dt-j1 -(baseurl-gateway) { - filter rule { - content_type text/html.* - search_pattern - replacement "" - } -} - -# inject in all pages a -(baseurl-nas) { - filter rule { - content_type text/html.* - search_pattern - replacement "" - } -} - -# Only allow lan users access -(lan-only) { - ipfilter / { - rule allow - ip 10.0.0.0/24 - } -} - -# Only allow US users access -(US-only) { - ipfilter / { - rule allow - ip 10.0.0.0/24 - database /opt/caddy/GeoLite2-Country.mmdb - country US - } -} - -# Only allow US users access -(admin-login) { - basicauth "sysadmin" ccbigsismyfriend { - realm "kebler-admin" - / -} -} - -#send logs to alternative location -(logs) { - log /opt/caddy/logs/log -# errors /opt/caddy/logs/errors -} - -#send to stdout instead of logs -(logout) { - log stdout - errors stdout -} -## End Snippets ############################## - - -################ REDIRECT ######################## - -# Main http/https redirect for anything arriving on port 80/http -*.kebler.net:80 { - import logs - redir https://{label1}.kebler.net{uri} -} - - -# Git Server -https://git238.kebler.net { - import wildcard_cert - import US-only - proxy / http://nas.kebler.net:3000 - } - -# Home Assistant Server -https://ha.kebler.net https://ha238.kebler.net { - import wildcard_cert - import US-only -# import lan-only - import logs - proxy / hassio.kebler.net:8123 { - websocket - transparent - } - } - -# NodeRed Server -https://nodered.kebler.net { - import wildcard_cert - import US-only -# import lan-only - proxy / trantor.kebler.net:1880 { - websocket - transparent - } - } - -# portainer -https://docker.kebler.net { - import wildcard_cert - import lan-only - proxy / http://nas.kebler.net:9000 - } - - -##################### TRANTOR ###################### - -# portainer on trantor -https://docker-trantor.kebler.net { - import wildcard_cert - import lan-only - proxy / http://trantor.kebler.net:9000 - } - -# discourse for nick and david -https://geeks.kebler.net { - import wildcard_cert - proxy / http://trantor.kebler.net:9292 { - transparent - } - } - - -# mqtt broker setup interface -#https://broker-ui.kebler.net { -# import wildcard_cert -# import lan-only -# proxy / http://nas.kebler.net:18083 { -# } -# } - - -https://social.kebler.net { - import wildcard_cert - -# rewrite { -# if {path} is / -# to /proxy{path} -# } - -# rewrite { -# if {path} not_has /graphql -# to {path} /proxy{path} -# } - - proxy / 10.0.0.115:3000 { - } - - proxy /graphql 10.0.0.115:4000 { - websocket - transparent - } - -} - -https://npm.kebler.net { - import wildcard_cert - proxy / localhost:4873 { - websocket - transparent - } - } - -##### status.kebler.net ########### - -https://status.kebler.net { - import wildcard_cert - import US-only - import admin-login - # route to phpfpm's status page here - fastcgi /phpfpm /var/run/php/php7.2-fpm.sock { - env SCRIPT_NAME /phpfpm - } - fastcgi / /var/run/php/php7.2-fpm.sock php - root /mnt/data/webs/status/dist - } - - -# Router Status running on router -https://status.kebler.net/238/gateway { - import wildcard_cert - import US-only - import admin-login - filter rule { - content_type text/html.* - search_pattern - replacement "" - } - proxy / http://router.kebler.net:19999 - } - -# NAS Status 238 -https://status.kebler.net/238/nas { - import wildcard_cert - import US-only - import admin-login - # add base tag to all pages - filter rule { - content_type text/html.* - search_pattern - replacement "" - } - proxy / http://nas.kebler.net:19999 - } - -# Systemd Cockpit Access -https://system.kebler.net { - import wildcard_cert - import US-only - # add base tag to all pages - # filter rule { - # content_type text/html.* - # search_pattern - # replacement "" - # } - proxy / http://localhost:9090 { - insecure_skip_verify - websocket - transparent - } - } - -# local redirect to 645 -https://status.kebler.net/645/nas { - import wildcard_cert - import US-only - proxy / http://645.kebler.net/nas/status - } - - -################### LOCAL WEBS ############################ - -https://download.kebler.net { - import wildcard_cert - log /mnt/data/downloads/private/download-log - basicauth "elf" ccbigs { - realm "Protected Downloads" - /private - } - basicauth "download" espressobin { - /espressobin-router/espressobin-router-ubuntu-18.04.tar.gz - } - root /mnt/data/downloads - browse / -} - -https://lights.kebler.net { - import wildcard_cert - root /mnt/data/webs/lights-frontend - proxy /socket.io http://10.0.0.115:3031 { - websocket - transparent - } - } - - - - -https://wedding.kebler.net { - import wildcard_cert - root /mnt/data/cloud-user-files/david/files/wedding - index wedding.html - } - - -https://admin.kebler.net { - import wildcard_cert - import lan-only - root /mnt/data/webs/admin - } - -https://phpmyadmin.kebler.net { - import wildcard_cert - fastcgi / /var/run/php/php7.2-fpm.sock php - root /mnt/data/webs/phpmyadmin - } - -https://smnordic.org { - fastcgi / /var/run/php/php7.2-fpm.sock php - root /mnt/data/webs/smnordic - rewrite / { - if {path} not_match ^\/wp-admin - to {path} {path}/ /index.php?_url={uri} - } - } - -https://nextcloud.kebler.net https://cloud.kebler.net { - # import logs - import US-only - tls d@kebler.net - fastcgi / /var/run/php/php7.2-fpm.sock php - root /mnt/data/webs/nextcloud - # log /var/log/nextcloud_access.log - # errors /var/log/nextcloud_errors.log - - # checks for images - rewrite { - ext .svg .gif .png .html .ttf .woff .ico .jpg .jpeg - r ^/index.php/(.+)$ - to /{1} /index.php?{1} - } - - rewrite { - r ^/index.php/.*$ - to /index.php?{query} - } - - # client support (e.g. os x calendar / contacts) - redir /.well-known/carddav /remote.php/carddav 301 - redir /.well-known/caldav /remote.php/caldav 301 - - # remove trailing / as it causes errors with php-fpm - rewrite { - r ^/remote.php/(webdav|caldav|carddav|dav)(\/?)$ - to /remote.php/{1} - } - - rewrite { - r ^/remote.php/(webdav|caldav|carddav|dav)/(.+?)(\/?)$ - to /remote.php/{1}/{2} - } - - rewrite { - r ^/public.php/(dav|webdav|caldav|carddav)(\/?)$ - to /public.php/{1} - } - - rewrite { - r ^/public.php/(dav|webdav|caldav|carddav)/(.+)(\/?)$ - to /public.php/{1}/{2} - } - - # .htaccess / data / config / ... shouldn't be accessible from outside - status 403 { - /.htacces - /data - /config - /db_structure - /.xml - /README - } - - header / { - Strict-Transport-Security "max-age=31536000;" - Referrer-Policy "no-referrer" - } - - } diff --git a/conf/caddy1.conf.bak b/conf/caddy1.conf.bak deleted file mode 100644 index 250104b..0000000 --- a/conf/caddy1.conf.bak +++ /dev/null @@ -1,366 +0,0 @@ -##!/bin/bashit -# KEBLER.NET WEB AND REVERSE PROXY SERVER RUNNING ON 238 NAS BOX - -# 238 238 238 238 238 238 238 238 238 238 238 238 238 238 238 238 238 - -# TODO -# change proxy to redirect for crontab-ui as it doesn't work as a proxy, add authorization - - -# COMMON DIRECTIVES (add by using import) - -# Wildcard cert add to all -(wildcard_cert) { - tls /opt/tls-certs/wc.kebler.net.crt /opt/tls-certs/wc.kebler.net.key { - wildcard - } -} - -# inject in all pages a -(baseurl-gateway) { - filter rule { - content_type text/html.* - search_pattern - replacement "" - } -} - -# inject in all pages a -(baseurl-nas) { - filter rule { - content_type text/html.* - search_pattern - replacement "" - } -} - -# Only allow lan users access -(lan-only) { - ipfilter / { - rule allow - ip 10.0.0.0/24 - } -} - -# Only allow US users access -(US-only) { - ipfilter / { - rule allow - ip 10.0.0.0/24 - database /opt/caddy/GeoLite2-Country.mmdb - country US - } -} - -# Only allow US users access -(admin-login) { - basicauth "sysadmin" ccbigsismyfriend { - realm "kebler-admin" - / -} -} - -#send logs to alternative location -(logs) { - log /opt/caddy/logs/log - errors /opt/caddy/logs/errors -} - -#send to stdout instead of logs -(logout) { - log stdout - errors stdout -} -## End Snippets ############################## - - -################ REDIRECT ######################## - -# Main http/https redirect for anything arriving on port 80/http -*.kebler.net:80 { - import logs - redir https://{label1}.kebler.net{uri} -} - - -# Git Server -https://git238.kebler.net { - import wildcard_cert - import US-only - proxy / http://nas.kebler.net:3000 - } - -# Home Assistant Server -https://ha.kebler.net https://ha238.kebler.net { - import wildcard_cert - import US-only -# import lan-only - import logs - proxy / hassio.kebler.net:8123 { - websocket - transparent - } - } - -# NodeRed Server -https://nodered.kebler.net { - import wildcard_cert - import US-only -# import lan-only - proxy / trantor.kebler.net:1880 { - websocket - transparent - } - } - -# portainer -https://docker.kebler.net { - import wildcard_cert - import lan-only - proxy / http://nas.kebler.net:9000 - } - - -##################### TRANTOR ###################### - -# portainer on trantor -https://docker-trantor.kebler.net { - import wildcard_cert - import lan-only - proxy / http://trantor.kebler.net:9000 - } - -# discourse for nick and david -https://geeks.kebler.net { - import wildcard_cert - proxy / http://trantor.kebler.net:9292 { - transparent - } - } - - -# mqtt broker setup interface -#https://broker-ui.kebler.net { -# import wildcard_cert -# import lan-only -# proxy / http://nas.kebler.net:18083 { -# } -# } - - -https://social.kebler.net { - import wildcard_cert - -# rewrite { -# if {path} is / -# to /proxy{path} -# } - -# rewrite { -# if {path} not_has /graphql -# to {path} /proxy{path} -# } - - proxy / 10.0.0.115:3000 { - } - - proxy /graphql 10.0.0.115:4000 { - websocket - transparent - } - -} - -https://npm.kebler.net { - import wildcard_cert - proxy / localhost:4873 { - websocket - transparent - } - } - -##### status.kebler.net ########### - -https://status.kebler.net { - import wildcard_cert - import US-only - import admin-login - # route to phpfpm's status page here - fastcgi /phpfpm /var/run/php/php7.2-fpm.sock { - env SCRIPT_NAME /phpfpm - } - fastcgi / /var/run/php/php7.2-fpm.sock php - root /mnt/data/webs/status/dist - } - - -# Router Status running on router -https://status.kebler.net/238/gateway { - import wildcard_cert - import US-only - import admin-login - filter rule { - content_type text/html.* - search_pattern - replacement "" - } - proxy / http://router.kebler.net:19999 - } - -# NAS Status 238 -https://status.kebler.net/238/nas { - import wildcard_cert - import US-only - import admin-login - # add base tag to all pages - filter rule { - content_type text/html.* - search_pattern - replacement "" - } - proxy / http://nas.kebler.net:19999 - } - -# Systemd Cockpit Access -https://system.kebler.net { - import wildcard_cert - import US-only - # add base tag to all pages - # filter rule { - # content_type text/html.* - # search_pattern - # replacement "" - # } - proxy / http://localhost:9090 { - insecure_skip_verify - websocket - transparent - } - } - -# local redirect to 645 -https://status.kebler.net/645/nas { - import wildcard_cert - import US-only - proxy / http://645.kebler.net/nas/status - } - - -################### LOCAL WEBS ############################ - -https://download.kebler.net { - import wildcard_cert - log /mnt/data/downloads/private/download-log - basicauth "elf" ccbigs { - realm "Protected Downloads" - /private - } - basicauth "download" espressobin { - /espressobin-router/espressobin-router-ubuntu-18.04.tar.gz - } - root /mnt/data/downloads - browse / -} - -https://lights.kebler.net { - import wildcard_cert - root /mnt/data/webs/lights-frontend - proxy /socket.io http://10.0.0.115:3031 { - websocket - transparent - } - } - - - - -https://wedding.kebler.net { - import wildcard_cert - root /mnt/data/cloud-user-files/david/files/wedding - index wedding.html - } - - -https://admin.kebler.net { - import wildcard_cert - import lan-only - root /mnt/data/webs/admin - } - -https://phpmyadmin.kebler.net { - import wildcard_cert - fastcgi / /var/run/php/php7.2-fpm.sock php - root /mnt/data/webs/phpmyadmin - } - -https://smnordic.org { - fastcgi / /var/run/php/php7.2-fpm.sock php - root /mnt/data/webs/smnordic - rewrite / { - if {path} not_match ^\/wp-admin - to {path} {path}/ /index.php?_url={uri} - } - } - -https://nextcloud.kebler.net https://cloud.kebler.net { - # import logs - import US-only - tls d@kebler.net - fastcgi / /var/run/php/php7.2-fpm.sock php - root /mnt/data/webs/nextcloud - # log /var/log/nextcloud_access.log - # errors /var/log/nextcloud_errors.log - - # checks for images - rewrite { - ext .svg .gif .png .html .ttf .woff .ico .jpg .jpeg - r ^/index.php/(.+)$ - to /{1} /index.php?{1} - } - - rewrite { - r ^/index.php/.*$ - to /index.php?{query} - } - - # client support (e.g. os x calendar / contacts) - redir /.well-known/carddav /remote.php/carddav 301 - redir /.well-known/caldav /remote.php/caldav 301 - - # remove trailing / as it causes errors with php-fpm - rewrite { - r ^/remote.php/(webdav|caldav|carddav|dav)(\/?)$ - to /remote.php/{1} - } - - rewrite { - r ^/remote.php/(webdav|caldav|carddav|dav)/(.+?)(\/?)$ - to /remote.php/{1}/{2} - } - - rewrite { - r ^/public.php/(dav|webdav|caldav|carddav)(\/?)$ - to /public.php/{1} - } - - rewrite { - r ^/public.php/(dav|webdav|caldav|carddav)/(.+)(\/?)$ - to /public.php/{1}/{2} - } - - # .htaccess / data / config / ... shouldn't be accessible from outside - status 403 { - /.htacces - /data - /config - /db_structure - /.xml - /README - } - - header / { - Strict-Transport-Security "max-age=31536000;" - Referrer-Policy "no-referrer" - } - - } diff --git a/conf/test.conf b/conf/example.conf similarity index 77% rename from conf/test.conf rename to conf/example.conf index 7176d45..7f14385 100644 --- a/conf/test.conf +++ b/conf/example.conf @@ -13,9 +13,9 @@ handle_errors { } } -https://testweb.kebler.net { +https://example. { import r53 -root * /opt/caddy/testweb +root * /opt/caddy/example-web file_server import errors } diff --git a/conf/nadal.conf b/conf/nadal.conf deleted file mode 100644 index a8523ac..0000000 --- a/conf/nadal.conf +++ /dev/null @@ -1,53 +0,0 @@ -#!/bin/bash -# ABSOLUTELY DON'T MESS WITH THIS FILE IF YOU DON'T KNOW WHAT YOU ARE DOING -# Caddy Server Configuration for Nadal Server -# After making changes from terminal -# sdr caddy@nadal -# make sure there are now errors with -# sdjuf caddy@nadal -(r53) { - tls { - dns route53 { - max_retries 10 - } - } -} -(errors) { -handle_errors { - rewrite * /{http.error.status_code}.html - file_server - } -} - -# Git Server -https://git.kebler.net, https://git.645.kebler.net { - import r53 - reverse_proxy http://nas.kebler.net:3000 - } - -# Home Assistant Server -https://ha.kebler.net, https://ha.645.kebler.net { - import r53 - reverse_proxy /* hassio.kebler.net:8123 - } - -https://gateway.kebler.net, https://gateway.645.kebler.net { - import r53 - reverse_proxy /* router.kebler.net:8080 - } - -https://docker.kebler.net, https://docker.645.kebler.net { - import r53 - reverse_proxy /* http://nadal.kebler.net:9000 - } - -https://power.kebler.net, https://power.645.kebler.net { - import r53 - reverse_proxy /* http://192.168.0.10:8081 - } - - # Temp Lights Frontend Server (using dev) - https://lights.645.kebler.net https://lights.kebler.net { - import r53 - reverse_proxy http://nadal.kebler.net:8080 - } diff --git a/conf/nadal.conf.secret b/conf/nadal.conf.secret new file mode 100644 index 0000000000000000000000000000000000000000..bf606b45173a3a8fe1e4862a598a305f7c128ccc GIT binary patch literal 990 zcmV<410no{0gMCgu7OP^x^5Ez3;$bt&$viXRG~&ueTzL#gVEM>*8>Z$wXoh{%@{1;4+g!SRlz z+n1YVqK{76A8)}#BK^pN9W?wINKj&Q^Dr)}aazmz{<;&B_De3OfeSFKK zOm;-qCRmU|9iBT}ms;1#_ied@1T@b*1R_{FAzak@RSUlXy6)Zxt zi|n}jQfe7@^_v#uajnbLIkzs{lr~8);K{~s?3AqB@W&%?CWQ79D}V(9KKmhh8T_D# z@OHk)lgdCp!H*_H1y^sxCpq4|Zl8i9nj1@irCL(V8ofe8LTheyZ*ATb^LZlqb{U(5 zHL{4M+l_CcCam?#j;~8!VZ03zoR;Th*FA{_p;4FX9QAF9%kiorTk?@nJG$JynG^V} zGw0^X+O+N}*^H$`B>4;l2Zlt32dTO(41Ks%YKyNum+%aGXy3GrtR$hG4hI6?6xaO) z6xVHoCa8`*Tm@vQJN*KKx}Woufw)cXd|3RoFn|c+8{N**Q&Lq*agkVyHDm?YuA;EC zw1@O>vDff!^l^`IE}A{9C<9j*Ql|-=;7RMbD9ScN3gv$xJ;f>t2BMM-u#am^9NpZU zvkwsl)t@q8GNC+xg(>EGeYE+eKa$m!6yYracfbKpRKAR(wlrm5&i9b4Ib0gkNQkeq z70cs0Bw`2lxWLn^3Ioa!WKHszb8gefQFsi;cxrblSp^6#Oy;D`<2s-E=Oi0hvNYf$ z9?-GXeO!RYkXL!jXf%3;m^WI$#W5IB4mGb@cj;`U!}P`63&*CwUIEx6LQC}{z?gos Med=%t`bn;k8~xkoxBvhE literal 0 HcmV?d00001 diff --git a/conf/trantor.conf b/conf/trantor.conf deleted file mode 100644 index 9f58dd5..0000000 --- a/conf/trantor.conf +++ /dev/null @@ -1,57 +0,0 @@ -#!/bin/bash -(r53) { - tls { - dns route53 { - max_retries 10 - } - } -} -(errors) { -handle_errors { - rewrite * /{http.error.status_code}.html - file_server - } -} - -# Git Server -https://git.238.kebler.net { - import r53 - reverse_proxy http://nas.kebler.net:3000 - } - -# Home Assistant Server -https://ha.kebler.net, https://ha.238.kebler.net { - import r53 - reverse_proxy /* hassio.kebler.net:8123 - } - -https://docker.kebler.net { - import r53 - reverse_proxy /* http://trantor.kebler.net:9000 - } - -https://geeks.kebler.net { - import r53 - reverse_proxy /* http://trantor.kebler.net:9292 - } - - -# not working -https://dashboard.nodered.kebler.net { - import r53 - log { - output stdout - format console - } - # @ui { - # header Connection *Upgrade* - # header Upgrade websocket - # } - rewrite /* /ui/{path} - reverse_proxy * http://trantor.kebler.net:1880 - } - -https://nodered.kebler.net { - import r53 - reverse_proxy /* http://trantor.kebler.net:1880 - } diff --git a/conf/trantor.conf.secret b/conf/trantor.conf.secret new file mode 100644 index 0000000000000000000000000000000000000000..724be6699f2631c75237dca8d84244d09ae17cb5 GIT binary patch literal 877 zcmV-z1CsoO0gMCgu7OP^x^5Ez3;@OTuq@cN>26neT{~79^DYVK9JWCqVP{PvsN6zO z%Nwhj2RfLv+*99t{k;|^KeF1N1s4HMK)W4L4UvI}BpvL>YCNK~d;HIm za?4LBdG=3!x04xNJA@ecc?9OaM&ui%2ANL9i(ZXhKt+HO*V8ZRg=m?HqYrKG7^gbC z+&^8kDYj2b=vRfYS3JaTdXULIg0Q>vC7yGd;=CgsPva!R`7-tk^*Te_JdK=bwV;!LHTZ z?tI6(IJPuXsJK5hmaF7`UH+uN0$Ldip{(aJ4YB9{e-)$-v~pE=i!jo`8v(&x=S5OY zhNM+QyTKW}RQzC>>Vc+E1V_jeM}#3bu&kbw-&Dt2g=Y128NB=fVm=)kB=yu=ZnUnP zg0sLCH;>k-aZ*`rE?=hg=e7Dbc*17%PVOGPK+>Oe`qfadKHowE^gLCN9>TW1?@K%s z>}WTH&z;)#M&9PS=*oF0Q0fBT!WNy9_iDM_1#7WVoUlvY%u&5?!c&EyPLf7`nYj?=mtI^xMJjIVpSl|Wg9 zc?#zrX0ia?cU4a50GNxA*XT!&X!z{CM%ktwlK5ojCW0Xd7?-VnJ2!9)>8@C{o1j#L zyYzXkSw|Q%343bXYYy^uNpb^5VL5)(rpEiS5E8(%*YPMN8}gCo-=^VF26D?b|5*5e zFoNOIrPtf6k#)~yIHHfnX;Z%WrDIBS(gvus?j_F`)~rrRo;)tej!W;($pu<6aYHvsf4pO``u8K$xP zR_4*=Ws_7^cGT{-5Do_2YVTNgh^6e-@|;Pex*73Lsa15-GJa_{!hQ%NwGuDUR#T@f zF7LSo9fLYYhE>EFtr(3vCwdpf7b4^Br$Yy*K$_?5?7~KffG9q(1f3?r+}wfDSgDl6 zLMv(|HFQ>M4w3OreSO(=#4b^gzID#&@Xrj3Xc+H>jfHL)BSt!;{3;W^6&CRJ7jv~J zK$=iy87fBU-)=v03~XE7e~RV**DBful%v?+jjf*nP}w*U|0&)pm5|cF4*~0O6?etv z+?YtThaSZz{^no&|u^DA8^++=5VoYvnE}4 zJh)m5?8FeKj(hZQM+fmH^T6wIpI7fNx`BrQFouPKkl>w6*?x24sX|v4!orWuD#ZxC-kI*54RbvNy<3`MRmi74oeP|$@$4K zuG-bh*~{jO-qoJ1p?JzQn`s{1c`h@k+9t1Mxw?$yoFGB=0b#Nbn*#2@O~-mdeFR7H zH?Nt=%f1OvbG)qlpbbZLSqE=F%m6A=AA+MCTTlSHUvke@wU-wS4KtK^>EH^H z(Kh_T{g{AT+J>3z^A@Y^$XqekPNBy_JPf%Mgql@u6qD|OoN#Eu2>GI;*b{>6S<&M* z+Dh;~1?UjGCa*ANnX}J5K?;64|66JBQq@`UR5U-(LBH~nTM7-Rg6a%02b^>G8{+nf ze`le^u}tDdz}eul_*-%}););(<4aF$jU)IOP3O$B@;qM3r)nUn6u#HqRZDApRVHFu%TZ?mr9F)Xpnmm|Bl|@k-;-D;736ObwJ1%!YrUKHy5CP?9-W>OQ zo77J5L~A2Y%bpO~#7XSo=o?6zyYx>+`4jU&RVu_RheIj@i6ZR9y3NFOu&m@BM?xbs z*6EHK4jcyop_}@~OgJeeLf@xpTgWF>TRM!{n6hy+g;t!FU6fK;R&QYMgJjwg=GrT~ zExP{3ZNc=V^stGl-vX>$1ejZqwPiPHxWJtJ15`dlP2?pU6TMxd!e8u~4)lpj)faFgyd;kCd diff --git a/env/aws.sh.secret b/env/aws.sh.secret index e6e68eb1d721d7faf2e46ddb0a3c2e5a5bcdd0e2..a1e979e5692e6d18d3dec862734a9996ca4c0963 100644 GIT binary patch literal 628 zcmV-)0*n2H0gMCgu7OP^x^5Ez3;YdD@iQhg=Eb*dV28k?((eiB!P{g`1O$t{EhmkQ z!$bxK`j_c9Y)3(9<%Dtx-6h9$2XxOAVo3l(_=iBIfZ$?t1#b>+sTJX@S}p*W^Z}Y+ zJngo1A+JK&=ZxMig10cmk{ji5QUh$>_MLHhEC#=MHzn~_^n|W6B4scW|JwBLocNBJ z`)sO^|CQmah$<1C?kfw~+^I1UF>W||*B1J^=}B8f09UuH%M0y&;dqcfOPIn|ag?%~ z;xmZh?^)sY{>d#^laQpFrNg+33;6E+kD8ag7jZLp;r>!c3m7XE+d2e2pM1hrkhVYQwfXJPPQ`_tTslJm zabqj$(1I|GLQzB|XSKG`5Mz*4dR*~@W~lIbG;)=j;zPGui7bzxo_m}-{b2>fgXmIK z!-BV3cAA&Ht!cca_YEb~6?}l72sR1H%5H&RKX9)w>w z!01`BSgWb}KydGGMDy?{0PhVBW6U>Yo@>L*r5bJBB}}$+N&yAdp>zkZ&UPi%gf`^> literal 628 zcmV-)0*n2H0gMCgu7OP^x^5Ez3;@e+-3cT0{VgM6|Z;zpuaX{|Og3%4 zY%PlA!h3G;OB+_D(vkQ8{7;geYL{?Qv%hI8O666%merS|a<{XZ`WkNQ@sK1-hQ&Ur zbD+3l3k%2^9_kyJy^CHGLcNyq*A(uE=ICn7)j}u^VgGkXJe1w|B&ErBuYlk=E_T$l zqLpTGH^|fUOr6`Ov+^^Yu0zhnjgX9bxS(&;ioGA^{#J99Rmm zGJ=N{7tu|SvOv?~w{1_?l_FIMu`ESL);MNNos8_*+P7M4kZe7wM3cS?l>wT*w@3zp zXfnz9s~L*>uG)`4amPd#8BjWXpiut|yClPZqp(2WEkbz9^9JpE>V#6?)E11KXsd_Eh