Expost postgres cluster

Expose the postgres cluster outside of the Kubernetes cluster
Give myself the option of connecting to postgres from my own machines,
so that I can hopefully leverage the improved performance
Update some file linting issues in Nix
Add necessary gitlab keys so it can be updated properly the next time I
deploy to it
Add DNS entries for postgres
Update the configuraiton of Traefik to expose the appropriate ports

secrets/gitlab/deterministic-key.age

@@ -0,0 +1,39 @@
+age-encryption.org/v1
+-> ssh-ed25519 64uajw pGArtr7GB1lyaooKK46PBygPCtdQmFfEpk1rA0molCA
+8ssJyIFriGAp9BQCYMyTf+S2HmMeOC1UH2QXqbqBFLQ
+-> ssh-ed25519 oyEmTw AZbFjT/AjhDQOVHQYiZAKwZyUZar5uMiM2r2B3IpN3A
+FQ3cu6l6KZbHB6vSatiLWV/ntDoc1zVT4/QUinPVZCc
+-> ssh-ed25519 mOmPfg Ru0AM8rjvVpn3PjWp7KPf/wtdBAphHfpNJ9bbZZVdmM
+sphzkfNpy3GiLSXo5U9ct8t55tLGE+Lt2MVglsMCu/E
+-> ssh-ed25519 YJiRbw UuAcR0LT/TWfWI1Ba8cm6iv/aYY+eADglTwPBAyjP1Q
+NxxO5o0G+PQZBRTC1pdAFNr28+ijKUEXAZJDsbF2sLg
+-> ssh-ed25519 aY2AXA 4Y8xviHTR9/fjycJHzcHLzN1txHl1+bGHG099CNnDm4
+Y9IQVYf5KQ1qDdFwPKpWxsCwdy46OYRlYCncvEMHXO0
+-> ssh-ed25519 xNtnoA CWVPYtuxcHQLtSd9cWLs7yuPgAuaY1hRGMesA+HhGCE
+5LFGLF5uRxHkbSp0WenWH5pBpEDNr269GmTOrSA5F90
+-> ssh-ed25519 AQhf1g bjCjRVRxIWGPIbXg6QvNwXjiXajyuwMXbLu/3EDxp3Y
+zHlX3WzfAccjVyksrzsdWfVsx2ia2oXBdTWLGroP1BA
+-> ssh-ed25519 B8wa7Q zr+NOkU1OAJPvpN/MXECQAowUKWIbnNLJJsGeGUydww
++we1cguTwDROfIAJJYrExz9Towmr18JXVY3oRkpv14w
+-> ssh-ed25519 8UnW5Q QjneH4f6Oly7tnAMLiLMwUIjAsaSi5ZFoC8TQG6GkmY
+kspnipzqALYSiT1jJRhF1yZecxbkXv70vlBKMUxBPZw
+-> ssh-ed25519 0/WsKg Ep9gDq0DtcGbdQh/PrYe+iBv6OSeLPWxICjXbKjFJnE
+2g526leouu0mRQBJSebsQ2h/3UF2fqQe6P8PnSLEhWA
+-> ssh-ed25519 Nl/5yA ki1Df4IbjbBJsBuu0i7mlCDkIcp/238uCzTq2xxo3SU
+0KPSkglgV55rtv0cJ0ZHxXXrrd/kFWPieM1RSSz+KKU
+-> ssh-ed25519 GdLgCQ L+YIJXArLcYoRNBOEgSrpM0fNQHWTZn3AKmuue9s1Hs
+Y7dOqUW2+/6DTVHfitXWPRQTn8dAXFaO848XhiarYYI
+-> ssh-ed25519 tOH/HQ rohrw+mCT7L76YNfHG2kZ//3+0BvLE5adIv4iDCYPXo
+7VsJeUR655/7Rl5+aT3OUK1iUHL2xaz88VblWxyzDbk
+-> ssh-ed25519 FpzvfQ v8DOcm6/7afe7hqJLs4yS9QsoaKrtmft1nUbVMIQbiY
+zPtH/T7vUG0TYAImLK4a4i8ta/n4Iu5qUIHNzj4AExk
+-> ssh-ed25519 kdPvzQ TVIyKHig7iMyCx25roaLgF+wbm8r/FdDmYzsn47mQFY
+7FGAj3og7JONhSZFjywwoc41lGSaUvJb2BaFjc7Ymlw
+-> ssh-ed25519 onmXpg yr5rUSP7BVin9iRa8dbhsqkhzMNBgk03kSj0ne+9cxw
+5fYMGMVh4lxXuZzNIOUhXj9B43RIEzI2mCy9urSSEng
+-> ssh-ed25519 CnhD0g 7hvSFju7gEZ3z/wh7vYErWG545rqx2Vw+uoOk/QplEs
+UOPP23HMYyJ5w/3qbtEmHZU36F8kwiCVBsaZHTeOJgk
+-> ssh-ed25519 4ep2UA SSi6Na4Zkz15jv9AIQV9UW0xr2YFmoT5s96Fz0X0nmk
+BoSwO6G8pMUt/N8RRLdVxzmQsn6RK655j27shIV5xq8
+--- FsKrB9/IGIe8BxDxJDSnAnm84SoJAPZFawQjoAUTbUE
+…¤ú¦\86IrwN[]¬å$é`uù8BÞ„�HŽûÖƒ.§ñÓa‚#Â|³b¡�Ëi—Ò®*é›>KpÈØÏq

secrets/gitlab/primary-key.age

@@ -0,0 +1,39 @@
+age-encryption.org/v1
+-> ssh-ed25519 64uajw 65up4NePHDRo97ryHxOcL/ZulVqH6bE8o0HRwKaS/zI
+c4XtvR4EeZ8G4iT7sEj9prfvAoDDMnp8dUF2JSc/qPU
+-> ssh-ed25519 oyEmTw QiQFAuLBYBQmiJ8TAGagLqfDFktf4mwsOhmJ7ZBIM0s
+fdpvwfAKAWJUrFcGNA5NmH14Weixfp8NUqoPA/mw+4I
+-> ssh-ed25519 mOmPfg dPYBhH6jodNFeTNTMwPuEq46i7DzKq67tMlYWkw3+T8
+Z4Uh0YhUL8KWqUCmr/AFILazC7v9L2poNC7IUbE6Uu8
+-> ssh-ed25519 YJiRbw RvWUVFSFOvz7q5mNBg1FoYLi1jbpMPvImUlJSy5zBTQ
+nNuNQnN/RhtFUOsbezo8LP8ceY/yqFSYDCo7igujiqM
+-> ssh-ed25519 aY2AXA LbCZXvEeHWVtlvecusaJVdRSUjsCONHhD2ADA73FGy8
+4zNv08Z7vvS1c2/BOdL0JxAX/Y+kU4q/WWlfxmA6fVk
+-> ssh-ed25519 xNtnoA fZVGgBdLb47UmapPENDK6nxICXx+KeIEhBQ3UKIi7HM
+dTJO+0qXtgpzjCe6K4+FQa0nynH5qEXebyERRQEBDzE
+-> ssh-ed25519 AQhf1g 8Srs6GErqaEibInARo/dzXwXdNqNTFBk/kgPyXGlEAM
+K0Ol9j/Uxw1up7xEapKwtoTAc2ZgoHuqKiHFcdrM4IY
+-> ssh-ed25519 B8wa7Q PZekZdp5Dj84fnRopshQYTZu7ue8A92PMfMqGMyPIUk
+Y6WvNhXo2nQI/nmI2gGdO9XCjjafpAai+fEGeYSGCHA
+-> ssh-ed25519 8UnW5Q AsNtL1dQUNeKHaatp/85nVUe1jLL5WsviNpKXQEBqkY
+z/9Q/DJQqVGNYHHJ3fU/EFPfTREZSJMxxlm6fhVGpME
+-> ssh-ed25519 0/WsKg 4TV+ryC7wbPQGTnU7TzuwCJz+iZEluBFAlnk23deA0U
+h9JoILNlSPX+dePFjSYM8vvetXINWAJ+DIXcStM+D6M
+-> ssh-ed25519 Nl/5yA uw7SLz+XPRnHb5ux2mp1VEL/cwnMFMhc86UnglcwARI
+k7lt+0yFMqAcepklurzW0MoB+yr3HL9DLTa+1+PPETg
+-> ssh-ed25519 GdLgCQ t5aY2s4XfLnlmAjB5k8UpEy2iMm2K8NFeowDyP9nliY
++x0yKD0pDecGPnU/ijJ7WRUm/UNoQu4EX4/azB9Og6Y
+-> ssh-ed25519 tOH/HQ Cc06HO0i/Yy65bNTREl2r0qd8sM+vhLyVxB7Pm8pemY
+qy1juC+a7BjtMZ2XoFvfCkIEI8ihTCs9ThAkTSvEsVg
+-> ssh-ed25519 FpzvfQ MdxHv8FxO4tRbiup4k6N4JUFtnofB6WJ8xn8KTUSjyM
+Mx+0cPM5bq/qJxKXSmzneL/Pg5CBiO7bjHjyFT05exw
+-> ssh-ed25519 kdPvzQ Tww+Oh8cQV9/qUw+2FWpRJTljjsbFB7T93xrRJcFGwo
+lGyd6FuQ3Y68pVn/aZCCtxVEoc9gn5Nc42peuFy68dk
+-> ssh-ed25519 onmXpg asPPNt+wiRFWgaBaie0voK4Yw5R8t8r5I3t6qujAsx0
+oa8Em8djkwbKYUQkPvZ3YMvvM2x9NEtm/f6Y7PoWmmo
+-> ssh-ed25519 CnhD0g lfXt1ZIhVWv84cvAykGjO44OvVny+U1Rju+17gx6qR0
+7StUFJgr+8zVr9OAmtgQk+UoBaQ8LqIUmttqlXdpX+s
+-> ssh-ed25519 4ep2UA ued9/iPni10UpRf/RM0wesnRfp+lpoO99831MoShxnk
+k5t8fmGnoCkHskZdvw1fYyCdns7BZsPUaLlJ6WzQgHc
+--- HaCc7eAoVLgJf982a8aRJPadwoZ9WAQ2jH1+j5Z2w8Y
+W»Ø÷!Mø¤CuÊ¥õX?„l=?˳êé[ÍÕþ(¹üMªNµÆ�ßqh^"·Ž›…`#A4&qhšßE¢

secrets/gitlab/salt.age

@@ -0,0 +1,39 @@
+age-encryption.org/v1
+-> ssh-ed25519 64uajw RdFMAWftlhzUEqoxui6a0IBxI7KxrU6C5uQeJwhUAzg
+UO611nUdfsLfG+LRhPVkX+BaVM2NoTB571nDdy7nn6E
+-> ssh-ed25519 oyEmTw 3zfLtPD8rpTSaVSMQCOSp38S9fywd6e+V0e9v9JGgwU
+qjaK+z7HDjmLdViDNjCj6rm3bNjc0xrrUVlwupkXd5w
+-> ssh-ed25519 mOmPfg weCYfjyuqqPcEVNM7+rqE/x5ZL8Mifp+obzMULqZgWU
+0HTPHd8Hq8qJOfVzP/kczVQYaXKJykT9KCK9Rn6r/nI
+-> ssh-ed25519 YJiRbw 0ARXvdUzE670xRni7RRnyVhzFURTyoQ1GTNtfY+MWU8
+jlt7BMNJ/AwOOIkIDAyiFyy8FV5PYlcqwB6MOLSZce4
+-> ssh-ed25519 aY2AXA CyalC9EQJFdNCl+BNLKrt8KKZBPnaPzH3t25F9otkEM
+m3mig+c7SvWuxUIorZcVfzIqualwTC+xJBDKvB+zCcU
+-> ssh-ed25519 xNtnoA 3n7J6GMt64Z9+0M89QTmZaeJ2/A7JdMl7TfC2nUt+xQ
+wk6G2SZL9VTzFlyIzc/EulzzG5P9EG9M1652aapvT+Q
+-> ssh-ed25519 AQhf1g ksxGPi6mYEhc1X2waHMXkTFgnB6lpKWKUeyMxFOnMkM
+Jj6fEbw52O3I9wUyk9of+NSJmNZC1U4+7UF98ChEbQI
+-> ssh-ed25519 B8wa7Q yMYUdu6A9dEmiAgYveyxSKoUL5XkmMdnyOIwherXzyc
+4n87yY0czhQib32cxQ8XH6tepRIzjmE7ewWCRaY0Dpg
+-> ssh-ed25519 8UnW5Q PLN3cqCd4t1m4bNbRjFNAs5k2hwTUxRV02DPgpZ75Uk
+tRwglJ5sPoJzp9Je5xEXlYM2kbUUd+xwawZIBYKZKZk
+-> ssh-ed25519 0/WsKg V0GKvQ3KdATmhVHlXyL95Lb1bZ7uTBMHH+1DloQwaWA
+UDb0UWGNzjY7K7qNqhU88+ViGoP7msG73sxmiTwaKgQ
+-> ssh-ed25519 Nl/5yA eyZT6r909dv5ClBxUhCflv1676VV1uQALhsrHJycRQY
+0AkXJLRwKURIXPhnM8VnUVkBl9Oq4LUHTs4n7Ai0X0w
+-> ssh-ed25519 GdLgCQ bIMe/3XDR7HCZOzxG+n8ud5bzMMDrZSPCDoPnbX7clg
+XGRkbM1xkZzhaCa2frDhWAZkJ0RAlbBx7IcJrCzhXWc
+-> ssh-ed25519 tOH/HQ 42VvN/DyV1VjbK0sI3/AWGCByXw+W/atfLUjlEIkyCs
+f2DijeqBQss3f44fFIDC5M3SXRRpm3Cl0iaLLOyAD68
+-> ssh-ed25519 FpzvfQ iRQ1JgNvo6mpRIn4HiF3dOul/ZhzQbjP8MCID8sFY2k
+SL9kRpWY1SigL2MVhy99hB3ACCHIPTK/IMIH98epch0
+-> ssh-ed25519 kdPvzQ gleTd+wfxQgl4IcQDqw5SmdRQvOV5MRHtSh1XeXz3wY
+5fGWJak3xivrRJS+dfiUWc15KaVTIXe8xlLhr+lgIR4
+-> ssh-ed25519 onmXpg SU/B3Y0ddUAUNDPwSeAqaG1ICihEQRglorF1143KC1s
+Qm6GGzluTIvEVnXTbl3z0LcrzxXpdN5hOksc03giazY
+-> ssh-ed25519 CnhD0g GVlnY0nuxGqWn3y7CPIk3p5P/bJ2ovt/DCpsemTwnRw
+vleILr9u6erKyzgofdIZuVShrilviX0New95Xw3+0pM
+-> ssh-ed25519 4ep2UA xSlFMYDkUBAzs+xaJJr29rbaC4L88ARUG6zq8v82cng
+C/i6coQ1Eg1Kka6sDXFnV7bMTekcKJOf6Q0gc6scFJA
+--- sx1TUDKIOIimdMTVBePkZzcfpJnvHddO1itsV7adTSo
+¼ñ8¼Z4bÉ‘Le×	@B¹'Æ Œj§O©áÂiþZÛ•’pù
ŽŽI[!o8ÔÉ›ÙÔc<Г�眗®PÞ½

secrets/secrets.nix

@@ -92,6 +92,9 @@ in
   # Then pipe the resulting files to agenix -e <foo>
   "gitlab/key.age".publicKeys = everyone;
   "gitlab/cert.age".publicKeys = everyone;
+  "gitlab/salt.age".publicKeys = everyone;
+  "gitlab/primary-key.age".publicKeys = everyone;
+  "gitlab/deterministic-key.age".publicKeys = everyone;
   "gitlab/nixos-qemu-shell.age".publicKeys = everyone;
   "gitlab/nixos-vbox-shell.age".publicKeys = everyone;
   "gitlab/kubernetes-k3s-local.age".publicKeys = everyone;