From c95ab6f0e7036f15d1cb71cd28ba4a59fcdef466 Mon Sep 17 00:00:00 2001
From: Jordan Holt <jordan@vimium.com>
Date: Sat, 10 Jan 2026 19:05:19 +0000
Subject: [PATCH] users/jordan: add access-token for nix

---
 ...0bb536b7199e7c6e833c9-github-access-token.age |  8 ++++++++
 ...fd538ad1d60ee660108af-github-access-token.age |  8 ++++++++
 ...cf292144e046cf99d936f-github-access-token.age | 10 ++++++++++
 ...c9241ed973446131e8fb7-github-access-token.age | 10 ++++++++++
 users/jordan/default.nix                         | 16 +++++++++++++---
 users/jordan/secrets/github-access-token.age     | 11 +++++++++++
 6 files changed, 60 insertions(+), 3 deletions(-)
 create mode 100644 secrets/rekeyed/atlas/87c466c830f0bb536b7199e7c6e833c9-github-access-token.age
 create mode 100644 secrets/rekeyed/helios/58921e5b7fbfd538ad1d60ee660108af-github-access-token.age
 create mode 100644 secrets/rekeyed/hypnos/595d3ac50c9cf292144e046cf99d936f-github-access-token.age
 create mode 100644 secrets/rekeyed/odyssey/49dc9431b99c9241ed973446131e8fb7-github-access-token.age
 create mode 100644 users/jordan/secrets/github-access-token.age

diff --git a/secrets/rekeyed/atlas/87c466c830f0bb536b7199e7c6e833c9-github-access-token.age b/secrets/rekeyed/atlas/87c466c830f0bb536b7199e7c6e833c9-github-access-token.age
new file mode 100644
index 0000000..5dd2038
--- /dev/null
+++ b/secrets/rekeyed/atlas/87c466c830f0bb536b7199e7c6e833c9-github-access-token.age
@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 mV4Rog RsFStWuGSIneEaNDw2ldx1lYbA2fCm8OFKn18JM2g1U
+oBja9LikuI5NOvFxrjMZjnJR0zHzsENQNFOrvf4eKTc
+-> t*-grease
+bFuU1K8Aer7iPpMfCN7gSZUy7+BFzrYVJGk5A911BO2M0aeM+xnKFuPyo3uva3Sk
+d+uqdAGwGoyF7KBhbbzkimVnivNTDbRzNwAwkeEeCflVDf+K9NG6Lg
+--- TyYJLAeoLk2gr7SOOtpHE0Y5LLFf/tQG1AgZmqxs4co
+-H�-~�I�c<:��<][?�[4�F�'�cT�\�R��ܦ�YI1r�|���Ѧ�'�4*��y>���#"��w��3fXU�,�ks�F�zK��#�~pN�&����X�jޑ�[�%�f9�AB�ܤ}Y�(�
\ No newline at end of file
diff --git a/secrets/rekeyed/helios/58921e5b7fbfd538ad1d60ee660108af-github-access-token.age b/secrets/rekeyed/helios/58921e5b7fbfd538ad1d60ee660108af-github-access-token.age
new file mode 100644
index 0000000..65f0d22
--- /dev/null
+++ b/secrets/rekeyed/helios/58921e5b7fbfd538ad1d60ee660108af-github-access-token.age
@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 3xQa4Q BKwS1pax5qHm4olS5x2K5oRPDcrS/R20UUqBBGkzZhg
+uc9wNsBgcVqbOqNeVilt0GqIBm0pg8p4Yz71QUHu8M8
+-> K)oG{6>6-grease
+H1IohPYecEXkBceI9wUNpWdn0bBjmaEy1R0ZdhYGifeyxsGYyONuF6Ec1//LdHRt
+CRfW1i2ea3V3sLk
+--- qSHkpD54+C9HDG1r023bRfSMQvLBTqqe02Jxtdhck+A
+$!�=k"�n&����Hi���P�J�
���J�n�]��>��s9_�oo������s��ߞ���_l� �̍? Z�H��%��kگ)�@]��Ǡ5d�,���νa��ގ�".F�o��4����
\ No newline at end of file
diff --git a/secrets/rekeyed/hypnos/595d3ac50c9cf292144e046cf99d936f-github-access-token.age b/secrets/rekeyed/hypnos/595d3ac50c9cf292144e046cf99d936f-github-access-token.age
new file mode 100644
index 0000000..b8ea0d7
--- /dev/null
+++ b/secrets/rekeyed/hypnos/595d3ac50c9cf292144e046cf99d936f-github-access-token.age
@@ -0,0 +1,10 @@
+age-encryption.org/v1
+-> ssh-ed25519 5PDipg SW4cFYmcO/Jeq1g4YMkroH0Z9myl9HZ1WeWh1R9tOG0
+WbRw56tX7IHcJlWjMtIntFZbTtkRWq8lGg/wyex9Fio
+-> K-grease
+hsvDJeRwlkId1Yh1nopz1QhCcoRRLwWFTmAuT/fI5mK7K5+yiRRWqiVkt73zJbLB
+oSi9wNPinY2ltyhtl/FVg+CgafHIiALgjRtBTQ
+--- 63fFUduk1IZb8Jjt1UnFmPpk7FTYCq8H+op/axtBh7Q
+°w���z��:~��O�:���W��VS6)�6D�c��v��h=������
+R-v���%�=�=F����`ZVᛊ*.>����B�B�k��n��huFv���y�<]�
+�/��y�	XnP߸
\ No newline at end of file
diff --git a/secrets/rekeyed/odyssey/49dc9431b99c9241ed973446131e8fb7-github-access-token.age b/secrets/rekeyed/odyssey/49dc9431b99c9241ed973446131e8fb7-github-access-token.age
new file mode 100644
index 0000000..cbd8605
--- /dev/null
+++ b/secrets/rekeyed/odyssey/49dc9431b99c9241ed973446131e8fb7-github-access-token.age
@@ -0,0 +1,10 @@
+age-encryption.org/v1
+-> ssh-ed25519 jqV4bA qeHcIgCroO0KhWMNVBJSOmbdq1Z+fsEArE8AWN7gLmo
+Qey5Eky9uJjpXBv2mK4pSesJO2CZHNaVTHYwSi1Cyq8
+-> DLx-grease yAUVn VU6r|U )^&`S)
+i/K7
+--- ANiFT6i0zBJVD94rcUawquSNOQLnK7j/btGzH+c1Dvk
+.D���%
+h��] n�1�D"�	c��n6ol�fge
+���_+��6��a����D��Qʨ�r۲��n�v�=L�0�Q<�1�&+�mCe2]����sO��	:
+��AΌK�ݶ%~&kd�K��t`�
\ No newline at end of file
diff --git a/users/jordan/default.nix b/users/jordan/default.nix
index 3ac63ee..efd9cc4 100644
--- a/users/jordan/default.nix
+++ b/users/jordan/default.nix
@@ -15,11 +15,21 @@ in
 {
   age.secrets."passwords/users/jordan".file = "${inputs.secrets}/passwords/users/jordan.age";
 
-  age.secrets.open-webui-api-key = {
-    rekeyFile = ./secrets/open-webui-api-key.age;
-    owner = "jordan";
+  age.secrets = {
+    open-webui-api-key = {
+      rekeyFile = ./secrets/open-webui-api-key.age;
+      owner = "jordan";
+    };
+    github-access-token = {
+      rekeyFile = ./secrets/github-access-token.age;
+    };
   };
 
+  # Increase rate limit with read-only token
+  nix.extraOptions = ''
+    !include ${config.age.secrets.github-access-token.path}
+  '';
+
   users.users.${name} = {
     description = "Jordan Holt";
     extraGroups = [
diff --git a/users/jordan/secrets/github-access-token.age b/users/jordan/secrets/github-access-token.age
new file mode 100644
index 0000000..0d8925d
--- /dev/null
+++ b/users/jordan/secrets/github-access-token.age
@@ -0,0 +1,11 @@
+age-encryption.org/v1
+-> piv-p256 a1N2XA AvvU++qPBFm4Dev/x6XD7+vdYxzm7cGV7hJUCCVDnXg4
+ksWN0G8QCFBx5K9Xbf5Hi9A1zvoeen551lxmRUDeMZA
+-> GCyG9-grease
+Tdy7Hcf/VvUmemUkSgz+0nFUIli4fe/Yal8Y7ZmRIZwuPCnMLyVAvCmox4TSjBnr
+/Z9LcY+G/o8BJIGIqU6GV01z/U2TlHefUW9BQULxDgeKKd3D6c4/VQ
+--- fsF0ebBZaIoDIo7Y6i6lYQOu9MmI3JyQzL1g9BIJCbc
+��38pZ�
+���eU{�
+8c}�Y����m2d��gB+�P�Q�OM�G�"
�E��k!��$�k�0���P����Q(�Ʌ-�{H�P6�L�9%x&
+=BEnC,��=ԁ�s���R:��� �{�r��I�
\ No newline at end of file