Updating apt key (#716)

* bumping nix overlay for expired gpg apt key recreation

* updating ansible hetzner playbook with latest artifact ID

* updating nix build comment

ansible/hetzner-single-deploy.yml

@@ -1,7 +1,7 @@
 - hosts: all
   become: true
   vars:
-    artifact_hash: f97a141ff9484810164510bf872bd2033ec3e7ff
+    artifact_hash: d8fe36747614968ea73ebd43d47b99364c52f9c1
     ubuntu_version: 22.04.4
     ssh_pubkey: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDPTGTo1lTqd3Ym/75MRyQvj8xZINO/GI6FzfIadSe5c [email protected]"
   tasks:

nix/overlay.nix

@@ -33,7 +33,7 @@ super: {
       # or whenever this derivation is built again without having the result in the binary cache.
       # The public part of the key is shipped with the offline bundle
       # ($aptly_root/public/gpg).
-      # Bump the following timestamp to force a recreation: 2022-05-17
+      # The private key (Github secret) was last replaced on 2024-07-12 and is valid for two years.
 
       install -Dm755 ${./scripts/generate-gpg1-key.sh} $out/bin/generate-gpg1-key
       # we *--set* PATH here, to ensure we don't pick wrong gpgs