these 24 derivations will be built:
  /nix/store/266d1i7ls6fx48x300pjd5vzkwxhxqih-Caddyfile.drv
  /nix/store/lpzqsyqjyml11629r2wnjrxsv4migszk-decrypt-age-secrets.drv
  /nix/store/5z4iwys74rh7rm3h8i8ikhfj5c5im7zg-vars-check-authelia.drv
  /nix/store/8nlnnfp01lmkna065mqy85hxjkp4qw98-nss-cacert-3.126.drv
  /nix/store/9csgf3vsmz3s055kyljynml0wf1kxv8n-Caddyfile-formatted.drv
  /nix/store/p4c4d0yx6464vhmykhkh53qf1pw0jcgj-X-Reload-Triggers-caddy.drv
  /nix/store/dsh6bsm1ws8dhps1cdlqhna61hf4vdbg-unit-caddy.service.drv
  /nix/store/by1pz3lim6grppzzy7j474bwj2nvnpm2-punchcard-19700101.drv
  /nix/store/5rg6ywxpq7xp49a2mljl8y266szvz0lg-unit-script-punchcard-punchcard-start.drv
  /nix/store/h2h3869cf7vqsdgcaw1fnslzpalsx2da-unit-punchcard-punchcard.service.drv
  /nix/store/bik7fllcr0w0p7v89a84v38y6fsc3n55-authelia-oidc-input.json.drv
  /nix/store/jh5jxzjprvdazjghcjfcz8bkbfr7pzms-authelia-users-input.json.drv
  /nix/store/lgslcanc3d255hfm4rlavp7jd5ypsm74-unit-script-authelia-authelia-pre-start.drv
  /nix/store/naxydhk7kbmyamxl38lmrbc7cyg2jm1c-unit-authelia-authelia.service.drv
  /nix/store/vsrlg0za75cr258i1hbmw09pdh899dwi-unit-nix-daemon.service.drv
  /nix/store/nzj8ng9csnwgd096lc537y11ri7dn1qx-system-units.drv
  /nix/store/m9274vzrrrrfdb01zv2f2iqcai7qb6md-etc.drv
  /nix/store/7gvd4z3mdqd8lj3ks991kddiag2mkqhy-activate.drv
  /nix/store/iq4fb4bafkqv1qgvk6lyk6p2xcn46a77-dry-activate.drv
  /nix/store/74pxy9hfw7h9q9y454acxx68mvi5c915-nixos-system-server-test.drv
  /nix/store/6v2y20p05jfhjz65vr7llp9jc9d8dyr8-testScript.drv
  /nix/store/z0y2in7hkbdcxvk0pbj3nfxqw2vyz1da-closure-info.drv
  /nix/store/2ijwx93b4y9ilwyjc4sr5kz74v8mx5p1-nixos-test-driver-authelia.drv
  /nix/store/g3ljdy7f83rf0mxv2bi1ajjc29372382-container-test-run-authelia.drv
building '/nix/store/bik7fllcr0w0p7v89a84v38y6fsc3n55-authelia-oidc-input.json.drv'
building '/nix/store/jh5jxzjprvdazjghcjfcz8bkbfr7pzms-authelia-users-input.json.drv'
building '/nix/store/8nlnnfp01lmkna065mqy85hxjkp4qw98-nss-cacert-3.126.drv' on 'ssh-ng://builder@build-x86-01.clan.lol'
building '/nix/store/5z4iwys74rh7rm3h8i8ikhfj5c5im7zg-vars-check-authelia.drv' on 'ssh-ng://builder@build-x86-01.clan.lol'
building '/nix/store/266d1i7ls6fx48x300pjd5vzkwxhxqih-Caddyfile.drv'
building '/nix/store/6v2y20p05jfhjz65vr7llp9jc9d8dyr8-testScript.drv'
building '/nix/store/lgslcanc3d255hfm4rlavp7jd5ypsm74-unit-script-authelia-authelia-pre-start.drv'
building '/nix/store/9csgf3vsmz3s055kyljynml0wf1kxv8n-Caddyfile-formatted.drv' on 'ssh-ng://builder@build-x86-01.clan.lol'
building '/nix/store/naxydhk7kbmyamxl38lmrbc7cyg2jm1c-unit-authelia-authelia.service.drv'
building '/nix/store/lpzqsyqjyml11629r2wnjrxsv4migszk-decrypt-age-secrets.drv' on 'ssh-ng://builder@build-x86-01.clan.lol'
building '/nix/store/5z4iwys74rh7rm3h8i8ikhfj5c5im7zg-vars-check-authelia.drv'
vars-check-authelia> Running vars check using Nix-based executor...
vars-check-authelia> Executing shared generators...
vars-check-authelia> Executing shared generator: authelia-oidc-punchcard-punchcard
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin:/nix/store/gqv7phqvmll7dprdmya6102ph64wvj0h-openssl-3.6.3-bin/bin:/nix/store/d3ra8isyv80vkrpp6z8whx2x9f3xzbid-authelia-4.39.20/bin:/nix/store/svl89366pvzz5s3myh1fjniz9l0x17fh-gnused-4.10/bin:/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + mkdir -p /output
vars-check-authelia> + openssl rand -hex 32
vars-check-authelia> + sed 's/^Digest: //'
vars-check-authelia> ++ cat /output/client_secret
vars-check-authelia> + authelia crypto hash generate argon2 --password 454c0206b5e3a9e7a356614dc835b52d990f8dacfbdb83aaf50776894b62b202
vars-check-authelia> ✓ Generated shared file: authelia-oidc-punchcard-punchcard/client_secret
vars-check-authelia> ✓ Generated shared file: authelia-oidc-punchcard-punchcard/client_secret_hash
vars-check-authelia> ✓ Shared Generator authelia-oidc-punchcard-punchcard completed
vars-check-authelia> Executing shared generator: pki-root-ca
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/gqv7phqvmll7dprdmya6102ph64wvj0h-openssl-3.6.3-bin/bin:/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + openssl genrsa -out /output/ca.key 4096
building '/nix/store/8nlnnfp01lmkna065mqy85hxjkp4qw98-nss-cacert-3.126.drv'
nss-cacert-3.126> Running phase: unpackPhase
nss-cacert-3.126> Running phase: patchPhase
nss-cacert-3.126> Running phase: updateAutotoolsGnuConfigScriptsPhase
nss-cacert-3.126> Running phase: configurePhase
nss-cacert-3.126> no configure script, doing nothing
nss-cacert-3.126> Running phase: buildPhase
nss-cacert-3.126> Running phase: installPhase
nss-cacert-3.126> Running phase: fixupPhase
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/j26v5qs4ngl4dgvnn7nmyh946n1h7qnc-nss-cacert-3.126
nss-cacert-3.126> checking for references to /build/ in /nix/store/j26v5qs4ngl4dgvnn7nmyh946n1h7qnc-nss-cacert-3.126...
nss-cacert-3.126> patching script interpreter paths in /nix/store/j26v5qs4ngl4dgvnn7nmyh946n1h7qnc-nss-cacert-3.126
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/dcqd5zpnsrdbyf2pp63kf91hcm08mp6d-nss-cacert-3.126-unbundled
nss-cacert-3.126> checking for references to /build/ in /nix/store/dcqd5zpnsrdbyf2pp63kf91hcm08mp6d-nss-cacert-3.126-unbundled...
nss-cacert-3.126> patching script interpreter paths in /nix/store/dcqd5zpnsrdbyf2pp63kf91hcm08mp6d-nss-cacert-3.126-unbundled
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/xisrq2lfvgfljhxji1jpk60hy03m3bm4-nss-cacert-3.126-p11kit
nss-cacert-3.126> checking for references to /build/ in /nix/store/xisrq2lfvgfljhxji1jpk60hy03m3bm4-nss-cacert-3.126-p11kit...
nss-cacert-3.126> patching script interpreter paths in /nix/store/xisrq2lfvgfljhxji1jpk60hy03m3bm4-nss-cacert-3.126-p11kit
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/2maz777311mpmadxz665vpkbzhij84jr-nss-cacert-3.126-hashed
nss-cacert-3.126> checking for references to /build/ in /nix/store/2maz777311mpmadxz665vpkbzhij84jr-nss-cacert-3.126-hashed...
nss-cacert-3.126> patching script interpreter paths in /nix/store/2maz777311mpmadxz665vpkbzhij84jr-nss-cacert-3.126-hashed
building '/nix/store/9csgf3vsmz3s055kyljynml0wf1kxv8n-Caddyfile-formatted.drv'
vars-check-authelia> + openssl req -x509 -new -nodes -key /output/ca.key -sha256 -days 3650 -subj '/CN=Clan Root CA' -out /output/ca.crt
vars-check-authelia> ✓ Generated shared file: pki-root-ca/ca.crt
vars-check-authelia> ✓ Generated shared file: pki-root-ca/ca.key
vars-check-authelia> ✓ Shared Generator pki-root-ca completed
vars-check-authelia> ✓ Shared generators completed
vars-check-authelia> Processing machine: server
vars-check-authelia> Generator execution order: authelia -> authelia-user-alice -> authelia-user-bob -> cert-auth -> cert-punchcard -> state-version
vars-check-authelia> Executing generator: authelia
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin:/nix/store/gqv7phqvmll7dprdmya6102ph64wvj0h-openssl-3.6.3-bin/bin:/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + mkdir -p /output
vars-check-authelia> + openssl rand -hex 64
vars-check-authelia> + openssl rand -hex 64
vars-check-authelia> + openssl rand -hex 64
building '/nix/store/p4c4d0yx6464vhmykhkh53qf1pw0jcgj-X-Reload-Triggers-caddy.drv'
vars-check-authelia> + openssl rand -hex 64
vars-check-authelia> + openssl genrsa -out /output/oidc-jwks-key 4096
vars-check-authelia> ✓ Generated file: authelia/jwt-secret
vars-check-authelia> ✓ Generated file: authelia/oidc-hmac-secret
vars-check-authelia> ✓ Generated file: authelia/oidc-jwks-key
vars-check-authelia> ✓ Generated file: authelia/session-secret
vars-check-authelia> ✓ Generated file: authelia/storage-encryption-key
vars-check-authelia> ✓ Generator authelia completed
vars-check-authelia> Executing generator: authelia-user-alice
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin:/nix/store/d3ra8isyv80vkrpp6z8whx2x9f3xzbid-authelia-4.39.20/bin:/nix/store/pgbl42r1nhkpqjjnb0fism6sw58p1s2j-python3.13-xkcdpass-1.30.0/bin:/nix/store/svl89366pvzz5s3myh1fjniz9l0x17fh-gnused-4.10/bin:/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
building '/nix/store/dsh6bsm1ws8dhps1cdlqhna61hf4vdbg-unit-caddy.service.drv'
building '/nix/store/lpzqsyqjyml11629r2wnjrxsv4migszk-decrypt-age-secrets.drv'
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + mkdir -p /output
vars-check-authelia> + xkcdpass -n 7 -d-
vars-check-authelia> + sed 's/^Digest: //'
vars-check-authelia> ++ cat /output/password
vars-check-authelia> + authelia crypto hash generate argon2 --password outmatch-confused-immovably-cosponsor-spleen-exploring-cinch
vars-check-authelia> ✓ Generated file: authelia-user-alice/password
vars-check-authelia> ✓ Generated file: authelia-user-alice/password-hash
vars-check-authelia> ✓ Generator authelia-user-alice completed
vars-check-authelia> Executing generator: authelia-user-bob
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin:/nix/store/d3ra8isyv80vkrpp6z8whx2x9f3xzbid-authelia-4.39.20/bin:/nix/store/pgbl42r1nhkpqjjnb0fism6sw58p1s2j-python3.13-xkcdpass-1.30.0/bin:/nix/store/svl89366pvzz5s3myh1fjniz9l0x17fh-gnused-4.10/bin:/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + mkdir -p /output
vars-check-authelia> + xkcdpass -n 7 -d-
building '/nix/store/iq4fb4bafkqv1qgvk6lyk6p2xcn46a77-dry-activate.drv'
vars-check-authelia> + sed 's/^Digest: //'
vars-check-authelia> ++ cat /output/password
vars-check-authelia> + authelia crypto hash generate argon2 --password trinity-robotics-calzone-expletive-photo-reassure-numbing
vars-check-authelia> ✓ Generated file: authelia-user-bob/password
vars-check-authelia> ✓ Generated file: authelia-user-bob/password-hash
vars-check-authelia> ✓ Generator authelia-user-bob completed
vars-check-authelia> Executing generator: cert-auth
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/gqv7phqvmll7dprdmya6102ph64wvj0h-openssl-3.6.3-bin/bin:/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + openssl genrsa -out /output/auth.key 4096
building '/nix/store/vsrlg0za75cr258i1hbmw09pdh899dwi-unit-nix-daemon.service.drv'
vars-check-authelia> + openssl req -new -key /output/auth.key -subj /CN=auth.test.clan -out endpoint.csr
vars-check-authelia> + printf subjectAltName=DNS:auth.test.clan
vars-check-authelia> + openssl x509 -req -in endpoint.csr -CA /input/pki-root-ca/ca.crt -CAkey /input/pki-root-ca/ca.key -CAcreateserial -days 365 -sha256 -extfile san.cnf -out /output/auth.crt
vars-check-authelia> Certificate request self-signature ok
vars-check-authelia> subject=CN=auth.test.clan
vars-check-authelia> + cat /output/auth.crt /input/pki-root-ca/ca.crt
vars-check-authelia> ✓ Generated file: cert-auth/auth.crt
vars-check-authelia> ✓ Generated file: cert-auth/auth.fullchain.crt
vars-check-authelia> ✓ Generated file: cert-auth/auth.key
vars-check-authelia> ✓ Generator cert-auth completed
vars-check-authelia> Executing generator: cert-punchcard
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/gqv7phqvmll7dprdmya6102ph64wvj0h-openssl-3.6.3-bin/bin:/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + openssl genrsa -out /output/punchcard.key 4096
vars-check-authelia> + openssl req -new -key /output/punchcard.key -subj /CN=punchcard.test.clan -out endpoint.csr
vars-check-authelia> + printf subjectAltName=DNS:punchcard.test.clan
vars-check-authelia> + openssl x509 -req -in endpoint.csr -CA /input/pki-root-ca/ca.crt -CAkey /input/pki-root-ca/ca.key -CAcreateserial -days 365 -sha256 -extfile san.cnf -out /output/punchcard.crt
vars-check-authelia> Certificate request self-signature ok
vars-check-authelia> subject=CN=punchcard.test.clan
vars-check-authelia> + cat /output/punchcard.crt /input/pki-root-ca/ca.crt
vars-check-authelia> ✓ Generated file: cert-punchcard/punchcard.crt
vars-check-authelia> ✓ Generated file: cert-punchcard/punchcard.fullchain.crt
vars-check-authelia> ✓ Generated file: cert-punchcard/punchcard.key
vars-check-authelia> ✓ Generator cert-punchcard completed
vars-check-authelia> Executing generator: state-version
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + echo -n 26.05
vars-check-authelia> ✓ Generated file: state-version/version
vars-check-authelia> ✓ Generator state-version completed
vars-check-authelia> ✓ Machine server completed
vars-check-authelia> ✓ All vars checks completed successfully

post-build step Upload to niks3: ok
time=2026-08-20T08:12:31.432Z level=INFO msg="Uploading 0 paths to niks3.clan.lol (1 already cached)"
time=2026-08-20T08:12:31.434Z level=INFO msg="Upload complete. (78ms)"