update config for toaster, roate key

2 files changed, 27 insertions, 32 deletions

diff --git a/hosts/toaster/hardware-configuration.nix b/hosts/toaster/hardware-configuration.nix
index 318ff03..37449d9 100644
--- a/hosts/toaster/hardware-configuration.nix
+++ b/hosts/toaster/hardware-configuration.nix
@@ -56,7 +56,7 @@
   };
 
   fileSystems."/boot" = {
-    device = "/dev/disk/by-uuid/A170-F83D";
+    device = "/dev/disk/by-uuid/C769-1AAC";
     fsType = "vfat";
     options = [
       "fmask=0022"
@@ -64,12 +64,11 @@
     ];
   };
 
-  swapDevices = [
-    {
-      device = "/dev/disk/by-partuuid/037518f2-9fa0-44f0-9550-745e27bf1c1f";
-      randomEncryption = true;
-    }
-  ];
+  zramSwap = {
+    enable = true;
+    algorithm = "zstd";
+    memoryPercent = 30;
+  };
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's
diff --git a/hosts/toaster/secrets.yaml b/hosts/toaster/secrets.yaml
index 701733d..1ca60d4 100644
--- a/hosts/toaster/secrets.yaml
+++ b/hosts/toaster/secrets.yaml
@@ -10,41 +10,37 @@ mail:
     tlm.solutions: ENC[AES256_GCM,data:ncTMh/jw+YmcmcVU/c1I36vV1CwtmtYwfyDUx9w9,iv:vPnmdvDnEJ9FF4rDkSfPnLWebleSgI/yG7qOgJfq5ic=,tag:z4w4LOGf2v0TBSxrHULBsw==,type:str]
 senpai: ENC[AES256_GCM,data:nLMlw+Gw5p9pcyElvHy/d+GV0/dbTj3+Et+lzBs1YEUcsYT2lM7sN+5+4PEF6weJgHUreTl007fh8+FO8S+mUg==,iv:+5szUWaARn93RTQvY13JGn2zJ3y8iyjv09i3KtbhaTQ=,tag:OsD4IoRv8wGuUbEnsld7Dg==,type:str]
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
     age:
-        - recipient: age1avaphjah4k8n80jrnraeqh9r94fu6awd6k37z4zfjssl5ft07qkqmuehcm
+        - recipient: age1x5cpzua9h9kz772d0udvlmvpmk688ua4fxjmmcqfm2rnpxsp5a5sn03r0z
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBibGw3UTUzNHg2dDJGYmYx
-            Vis5WlhqeXUybmtxTU9XWEFLcjc1VEErOTN3CmZYa2kzcUdNQURVTG5NeUpSb0I0
-            STdQb1NqSWJoK1pmYXA5UXM5NDRFWVUKLS0tIDNWTmVTcDdneUEwemtWZVNZVFdz
-            bDRBWjJJSDl3bDkxenR1S2NMZW91dW8Kzhc/6HeEJfLGDaKdRSbpaMdR7XaBxdQI
-            jnAySJCGsXxCPebRtCIdDnoLjdqdzEggEhRh27JOpeOiEukLmakPMA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDMk9uVmNoVjQvUS93R2R3
+            YTJHTTBieVdqU25uRTJmeFRXTFNJWWxRUGw0CmpnSTVrcjhWZnJQZ0IzVHJ3eXNQ
+            UFpSYkZTSXZscEdSOXNlOFJTZjhoWTAKLS0tIFp0bzVsYThMeEJtclZsTDZpc0Ns
+            dm9iYllyWjRiODY5cW9aalJhNjBYQTAKEzY8tpMfLAWujcqFPLi8YCWhm5SjAWNz
+            mCRKbkAlB5pS26vu9KHt4Agri3zNZBy3yqcwwp4b8zR7fSzU/GOKsw==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-02-05T19:41:58Z"
     mac: ENC[AES256_GCM,data:5u2hJYMHwpFd5fcHXKzOblHfgnRTjNIEL+glBsHct3xZ+G1APQg9WdgZbRWc+ypdYPFfhqXKV9RBl/UHtFEyljL7JQV0U8EfumP1WNjPaMgnWftm5qLOe0PxmrPbwsYYBdotO9GVoplghrNd1euvMsxd3F+YtU+MnY+u4dcr4C8=,iv:A61rDNajtU/NOqcemmCN348STdMI9qqPRvdd6n/EuKg=,tag:Y1zi86LNX1xlXpjbslmRAA==,type:str]
     pgp:
-        - created_at: "2025-01-02T22:57:16Z"
+        - created_at: "2025-08-15T19:49:16Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA7zUOKwzpAE7AQ//fH+XzwM0ARlUGFK0/WDVXb4fR8364JdtrWp1njqYQBme
-            rRtIuyYWg7b4c1K9frX+3Ftei6EhZTejgyoSulQkOD5X7L726iik8kaJxtkH0Ubl
-            Hmak4viT9r4cCBYBBCsDQgojAImgNvaW+DyX4UFOyr0asnUEVj4N1/eejxPteXfj
-            c4+PzKKkliRpwUj4OZufmxcZvFi3XBy1AIgji9EpZkG6mGeeRpchJdA7kFWlO0fl
-            wUuDjudqSMr2hOySfOI/AW+4QgWo1t6uZwIi4VWMmI2h3hlAbsWfYiLMXqIB8RpF
-            lx30HdcFmZwfmVyT5n+oFlV4kPWPNvc0lLDvoZdKpsXIeuhMWKdrRZ2XmDE6F+rQ
-            PE4tT46vR4uCHNSAiLYhAY+yr2ic5w+Damv80mxsnGBrFhh93/5grJRSQ+iZcr1D
-            hu4nMAiw7xdkjgVHJrZZ0YEh9cXD74oUfvE7T201h2ppFEAzYaDrwuIuFqJmFew/
-            /meRImzoCpp2H2cAsol90kxVdNc+yQerNqknkNBU6TCWB5HkcEa1xM5PER2s8cHd
-            KK5ej1DzNgQHN41N3zv1xyd2HXOOgVXYwITkHU0BNFBowpf2JScUcVMWYtuZ2Mlh
-            izVM0pJwx7bJgZqVnpZsxyzSOD3I6ufS61VMp5RVOS/58qih2BNsTys3DtmaFcvS
-            XgFD1Mr9Ul4xIyF2akUeGU5n+fRZnIwtM7JmcJGjlg1nQPvRFZSLrYBs83TPrftS
-            zQv+xyb6mPo91iHqe/ey3JbB/+/uSkVSZsBL05thYNLucQJ0L3r0qhc6gnQxNNo=
-            =DYwa
+            hQIMA7zUOKwzpAE7AQ/9GOZwDEObK1jE9T0JUFsJDtFQKnLZZGGkvRx5fouMqwV2
+            u0/F3vWDxPeXWZ2x6SrEgFeRMDwmPj87+lq3r0TB+iEsql6VQv9iqpFL33W8ElYV
+            /uuLP4VGJMr1v9/NIGlyV1iFZUDzoOxwHtaRrpgzwE8iHVS1Ct9LFGIWhTBMr8Ae
+            1x/SDU0mHUB5RYM3hfLsOvMqCDjpfwV/Om0wr3Y1n0CEEtFi5/gTK+f3/7Ymf2l+
+            tPRFojWZlp94DVCu9lLOJKP2bS6HVulJ7TmTOPnWs3graXfd5H3BxsdzHvePxGXO
+            QGrcVR3YhZYl0pc9m4QRs4/y3/DA5LvYBV+MLRwa6M3Tjp9i97HuMT9e0y7hn4Kt
+            eNA4MbjaNdwo+3wRfeUGX7rBClZG32XlZgzyFRFxDFtqa3erUlp2/PXMfYdOeCPq
+            dazfJT7GLLYgBZAneV6/WdpuRIil3oDsmV8mbmzG+zuS8tG3w9hjYq3zip3JO9GP
+            gtwVvpN6zI1d80gOgIBzl3C4SpfDEGGLr9bs+z6hnJimfKY41CeF2POaLeSvtp3F
+            jhnHDF/gC22YDbY0z2ClUwx4erT36W3WN+qnxks7Zw767CAQyKf2P5yhEh2crhY2
+            ZBiESxcmXy84O7qqys2TRIQsJmjYjeT5293Dl56RgQZT3gXoOdmlYa3F02LyCIvS
+            XgEI129p+h+dLED4+3c6C4ANV8P3Q5lKVYnF5yBjLb0rzhqxyEJtFjrYFWC8gxd9
+            0vZNMalKIISawlaW+K6W42EgonbvUKfZSOwC7yLxuNRDgwGPUCfpAwXYS83mGII=
+            =fUR4
             -----END PGP MESSAGE-----
           fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
     unencrypted_suffix: _unencrypted