From 2df53fd5d74d639cf2e0884abeb68ae6867b003b Mon Sep 17 00:00:00 2001 From: beatzaplenty Date: Sat, 25 Jul 2026 21:31:56 +1000 Subject: [PATCH] =?UTF-8?q?chore(secrets):=20Phase=204=20=E2=80=94=20remov?= =?UTF-8?q?e=20stale=20sops.yaml=20anchors=20and=20re-encrypt?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Remove four stale age key anchors from .sops.yaml that correspond to non-lxc build-type variants that were never deployed (or are now superseded by their lxc-* counterparts): &docker → superseded by &lxc-docker (active running host) &server → superseded by &lxc-server (active running host) &nix-cache → superseded by &lxc-nix-cache (active running host) &nix-minimal → superseded by &lxc-minimal (active running host) Also remove the secrets/docker.yaml creation_rules block entirely since that file does not exist. Re-encrypt secrets/common.yaml, secrets/nix-cache.yaml, and secrets/server.yaml with sops updatekeys to drop the stale recipients. The four removed keys can no longer decrypt these files. Update README.md and CLAUDE.md to clarify that deployed lxc-* hosts now use clan vars (vars/per-machine//openssh/) rather than the gitignored host-keys/ directory. Co-Authored-By: Claude Sonnet 4.6 Claude-Session: https://claude.ai/code/session_01B2EJ4qTsM5KUqhS5c3GAwx --- .sops.yaml | 16 --- CLAUDE.md | 16 ++- README.md | 6 +- secrets/common.yaml | 266 ++++++++++++++++++----------------------- secrets/nix-cache.yaml | 49 ++++---- secrets/server.yaml | 49 ++++---- 6 files changed, 170 insertions(+), 232 deletions(-) diff --git a/.sops.yaml b/.sops.yaml index 92d1f8e..6e40a79 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -1,9 +1,5 @@ keys: - &admin age1njap586hc0q43kr03g6c8eqhdsmk8zcafkl3f83xwlc2gqhlmfgs4tmwad - - &docker age19gfn2yedg76dmztm4hncr7vf3r3c9j0qpt4rap7y7gersjk4m3ks2lhd0e - - &server age1ll6hj5ggruetgjwjfnplpn5xtq35uhlcdflksx3xmnjm6s3uad9sz70jkf - - &nix-cache age120le4a5l8dh3lyfgvmj3d9ksmej6ajs5mer5y7r0vfg3x9fn69dqf8xgzu - - &nix-minimal age120whqj96g26lsgy4udvgsn8dc9lumh8jeu3a564fx79rjr5lxffqmrljuu - &proxmox-minimal age10at8862478urh0eeuwh8hzln6ck78jgwtztgxatwqlzwagg77y5snm4xzg - &lxc-gui age190htw7prp4vln076dxjx3gxxaq06h0zl0te7cqgpx79vl3lhkaes8suy05 - &baremetal-gui age1adur9g330gua4l6ndk8cqjg35qc8yxwgme6wrl2hpylcc7vxm38q05ejuy @@ -36,10 +32,6 @@ creation_rules: key_groups: - age: - *admin - - *docker - - *server - - *nix-cache - - *nix-minimal - *proxmox-minimal - *lxc-gui - *baremetal-gui @@ -67,7 +59,6 @@ creation_rules: key_groups: - age: - *admin - - *nix-cache - *linode-nix-cache - *lxc-nix-cache - *proxmox-nix-cache @@ -76,17 +67,10 @@ creation_rules: key_groups: - age: - *admin - - *server - *linode-server - *lxc-server - *proxmox-server - - path_regex: secrets/docker\.yaml$ - key_groups: - - age: - - *admin - - *docker - - path_regex: secrets/tor-relay\.yaml$ key_groups: - age: diff --git a/CLAUDE.md b/CLAUDE.md index 14e523d..fc160bd 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -27,9 +27,12 @@ machines when deployed. template for a *real* host — every other host uses sops-nix (`hashedPasswordFile`, see "Security Notes" in `README.md`). Flag any *new* secret-like string you encounter instead of committing it. -- `host-keys/` is gitignored — locally-generated *private* SSH host keys for - the auto-installer (see `docs/auto-installer.md`). Never commit its - contents; if `git status` ever shows it as trackable, something is wrong. +- `host-keys/` is gitignored — locally-generated *private* SSH host keys + for the auto-installer and non-LXC hosts (see `docs/auto-installer.md`). + Never commit its contents; if `git status` ever shows it as trackable, + something is wrong. Deployed LXC hosts use clan vars + (`vars/per-machine//openssh/`, committed and sops-encrypted) + instead — those ARE tracked by git and belong in the repo. ### Two Proxmox nodes: `pve1.sweet.home` (production) and `pve-test.sweet.home` (sandbox) @@ -203,8 +206,11 @@ instead of copying it. - `scripts/secrets/sync-host-keys.sh` — generates/registers SSH host keys and their `.sops.yaml`/`secrets/*.yaml` recipients for flake targets, idempotently (`--all`, ``, `--remove`, `--regenerate-all-keys`, - all with `--dry-run`). The primary tool for provisioning a new host's - secrets access — see "Creating a new machine" in `docs/auto-installer.md`. + all with `--dry-run`). For lxc-* targets it stores keys as clan vars + (`vars/per-machine//openssh/`, committed and sops-encrypted); + for other targets it uses the gitignored `host-keys/` directory. The + primary tool for provisioning a new host's secrets access — see + "Creating a new machine" in `docs/auto-installer.md`. - `scripts/secrets/prepare-host-key.sh` — narrower predecessor: generates a key by an arbitrary name without touching `.sops.yaml`. Still useful to pre-generate a key before its flake target exists yet, since diff --git a/README.md b/README.md index 9b5cf18..8e4bad2 100644 --- a/README.md +++ b/README.md @@ -72,7 +72,8 @@ nix eval --json .#nixosConfigurations --apply builtins.attrNames | jq -r '.[]' | `modules/common/` | Shared NixOS config, Home Manager, aliases imported by every host | | `modules/nix-cache/` | Binary cache and remote builder client/server modules | | `modules/installer/` | Auto-installer environment (ISO, also served as PXE netboot) — see `docs/auto-installer.md` | -| `host-keys/` | Gitignored, locally-generated SSH host keys for the auto-installer — see `docs/auto-installer.md` | +| `host-keys/` | Gitignored, locally-generated SSH host keys for the auto-installer (non-LXC hosts) — see `docs/auto-installer.md`. LXC hosts use clan vars (`vars/per-machine//openssh/`) instead | +| `vars/per-machine/` | Clan vars: committed, sops-encrypted SSH host keys for deployed LXC hosts; read by `create-proxmox-resource.sh` at deploy time | | `docs/` | Operational notes for cache, builders, lock updates, boot services, the auto-installer, and Proxmox image builds | | `scripts/` | Codex setup, validation, host-key, release-bump, and Proxmox resource helpers | @@ -162,7 +163,8 @@ sops-nix-everywhere: it has a hardcoded login password instead (no stable per-boot host key for sops-nix to derive from on ephemeral media) — see "Host keys" in `docs/auto-installer.md` for why, and how the private keys it *does* pre-seed for target hosts stay out of git via the gitignored -`host-keys/` directory. +`host-keys/` directory. Deployed LXC hosts instead use clan vars +(`vars/per-machine//openssh/`, committed and sops-encrypted). This repository's git *history* still contains secrets committed before this migration (see `remove-sensetive-info-refactor.md`) — those are being diff --git a/secrets/common.yaml b/secrets/common.yaml index 0fa9210..1a31a6c 100644 --- a/secrets/common.yaml +++ b/secrets/common.yaml @@ -5,245 +5,209 @@ sops: age: - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBibGF2a2FRcTRFTk9rQ0NN - TTFoRlBWbGdSMzVVRHYvVFFvVm05ZDZBb1VrCkFoM2dTMEJDMHRKd240OEExWnUv - RHV2S0taWnl0dS80YVIvTjBpVEk5a0kKLS0tIGF2TkNQdlVJTTNOSnI4cEZCRll3 - NE9aSWxVVTlyV2hPQ284cU94Y2hVNEkKhUFgr345o91orzqCzkKdh6dAXlPfwqTJ - su5kATsokLzcyvT/gcOKsDBzO219CJ0cSVmpgVJtImSCJDwUS3A6Ug== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiT2oxVkhrTVo3Wkx1SXFG + NzJFTkFrbHJKMTZGeVFDT2VVL2xFQmNsd1NjCi84eHA2TmV0WVBzckhnZFYxallI + WFptVFFKOXBlSXNvTWxEUlNNYUtPQUkKLS0tIDRjWWJVWjNtR0JSUk9Rc1hhK2lN + ME4wRE1hMlQ5d0tLYVZmTHYwZURLaE0KMKA/MUzB/a3OjibvYTlk5QQmzJ15L6y4 + FvIliCLoBnGuvv/sS5/5piLHo4qRF9kqqqUuy0Cumg4SI4O2Toshtg== -----END AGE ENCRYPTED FILE----- recipient: age1njap586hc0q43kr03g6c8eqhdsmk8zcafkl3f83xwlc2gqhlmfgs4tmwad - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGc3cwNzk1d2xDajFqQTNH - QlhoS0ZqWnJ6b1NoU3EvMlFsTG1oYkVrYTI0CjNEekFrV285aVc2Vk5pc0VHNDBO - MndVZHgrbE10TXVOL0I2Y1hKWEJCcm8KLS0tIHRoa2JtNHVLU1YySmlXMnpsY3lh - R0NTR2szNVhvVy81bHRjLzJSTWNWMEkK26wIFqhVk1fYV79odbslVaFxoDLykRNN - ZiOkWewH/JOuIXR260UWAGq4bKXfnUs78mAchh9R2I0F4p/CjGMdQA== - -----END AGE ENCRYPTED FILE----- - recipient: age19gfn2yedg76dmztm4hncr7vf3r3c9j0qpt4rap7y7gersjk4m3ks2lhd0e - - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVRTE5TUNYWUpxbWdIenB0 - WVdlMXFWK01vMndHTDhRdFppRC9MY09xeFZVCkhEL21Pd1pzcjlKQld5a0JvMjlu - QnhXNDlETmV0QXJ6ZWhzdGROZ25MQjAKLS0tIDQyclo1ZWtkM3VNbjJ1dHhTZXk4 - OWRVdXZEZ2pEWXJGQmNaMm1aT2l0aWsK43Oc54CGekbbBkcnctXnUMyqo8ygmBL0 - BMC6FtUVYMkP++Y7KFR6sudMemf9f+FbsCVRqBd9x+c2YzzgyH8ogw== - -----END AGE ENCRYPTED FILE----- - recipient: age1ll6hj5ggruetgjwjfnplpn5xtq35uhlcdflksx3xmnjm6s3uad9sz70jkf - - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEaEtNL243bFF0am9HSkZp - anh1Ukl0bTJVUGJXUzM2NFo3Ry8yeTBVUUIwCktPVkpKNXBOYjRTMWNlay9Ia3Nj - bURMbFk4WUw3NVhUb25mZmtSU1ZRbHcKLS0tIHdkVEovUVpxMk5aVGRPMWdpaUdj - NzdISWtmYTFBb1FkT3hTeWFnaFJWOGcKdcLL3/fAgDME0Xsx7lS4q1boG8t7no3T - BZ6kdHnWe7fdzoTrCsaxWZPRom1hs10FZ4H+VI+CiEKki0N2XDMB4Q== - -----END AGE ENCRYPTED FILE----- - recipient: age120le4a5l8dh3lyfgvmj3d9ksmej6ajs5mer5y7r0vfg3x9fn69dqf8xgzu - - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQTkRYelcvY1VEcThELzVo - a2E5QVNnME5VMU56SDduVlZKQUdhaTlKY25rCllGRk5GZlJMb1c4M0o0dkREZFFt - MW9BcDU2MkxWeHVESUtqcHpWMDRzLzQKLS0tIFZSU2J0RXoyQUxlYVNUa2t5ZVhp - bEVlNURjeGRvdXkrS0N1eDllV3lJTGsKc/4cEEhEJwmLSxUDFzAMxD+7TWcOKNjD - +Kcz2+sX8sTXLBLCGABR1XQdy1aejVku4atujnDOE6BzYjjfkRfc9A== - -----END AGE ENCRYPTED FILE----- - recipient: age120whqj96g26lsgy4udvgsn8dc9lumh8jeu3a564fx79rjr5lxffqmrljuu - - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGa3RDdTdFK2VxTGYvYm1R - RlRkRFZqTWVXSWRMd2ZjckV4bXZSWnVXYmc4CnFTNnRQSFJORWdlTGRUajNjZTNL - SkhjdVhFSGJHZ2ZvRnhvaHFhVXQzek0KLS0tIDRXUTZTU0Rlb2crTWd6VDV5VVcx - Q2x1TnAxem45RXordHlqYy9CRzBzTlEKvKncXgXO1rJcHRXJE//7YbnwqCx+472D - XXby5thGhzTSTgcNcakyK20fzNlOYr3D/iRA4Ytcd0zHcGlj4qVaQQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqR3VsSlJMWFR1WHBwcHEz + blhLLzBoWEcwL0hVbkhJY2duSGxzaU5LVERzCk1STEZ5WExsT3o1SnRQSzN0OWh5 + SjBaRkp5TnBkTGhZM2cyZGNZYmRydE0KLS0tIEx0ZU5PdnhQQng0OU91SW4rcW1O + WkRReU9DTWxLMU1XR1VSNXlZV0NGbFkK23aYRtL2n8L9OOSBJDKHKY63I1k2MxDb + ZoUiB48q379xc89KpI6uV2DNV2CpSUr/S1YI5OWRzMJmf+aYzJmikg== -----END AGE ENCRYPTED FILE----- recipient: age10at8862478urh0eeuwh8hzln6ck78jgwtztgxatwqlzwagg77y5snm4xzg - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnMVZiZUNob2pqdTA0NlJ1 - UTdGdlNEVW5YOHZaYlZFZy9YaGVoV3FoR2hzCjdwc2F3bkVaUmg3dTZ6b1F2Ymwy - QkNvb1NEYnhLUkgxUnFYb0R4U0puZ2cKLS0tIFdrbktMWTRSQS9DT3doY2RaODJL - Wi9YazhEZzZFVXZpS1k3SE5wRWlLdzgKnlng++3X0NvOvl3qES0J166pXGM46dy8 - 38/RE0rjc+92+JnOXsgBUfvmS0td+oR5T4lxGpdngksv6gyPaU71Pg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVYzkxVy9La0RzZGNHVXFN + MWUrc0RmT0NCaC9TZkFtOHBsV0ZtcGx2bVdvCmNnakVmL0xReXlMVkp5eXQyK1pr + aDFGemFrUVBZUGFwcjRVT3JTanBWZHcKLS0tIDRGZTRJY3lmZnpqTW5HRThWd2FN + MHhudjM4eFE4MDlIWTZoREp2NlgyZ0kKCo6/D0nchgDt8m/+idPRnjGaJoNrlqFj + 5DwysBa3WPDTqeJ8053sMFGQWoYVEaL916B6zo+ZC34pPeKA9UuPsw== -----END AGE ENCRYPTED FILE----- recipient: age190htw7prp4vln076dxjx3gxxaq06h0zl0te7cqgpx79vl3lhkaes8suy05 - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLRmpiOTdKYmVJOEJoRFRl - bm1UcjhXeWQxdWhWMm0vQXgxWEg1VTREekJJCjFJYnFkZFFlRUM1MHo4djBjWC9h - YlBlUVl4R3BOelNqY1lPNVBINHFtRTAKLS0tIFk5QU9qWW1jRW90SmdXVU1naUJk - R1V2eGhrci9CYzdkQnRYTnAybVY4L2cKw3LFTr8m8OMmlVysBZbiMKKxaA7Nt8F4 - CJEgkcPyQGOFnNen7UAX1ksJrm+3gV7ZL91VxzVvCdd6zScHlG0PFg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmUnYzd2lmVFdPRFh1b0VD + SlN2YjgrakRHRWFVSEFlWElEdGdOYTJxRWlJCnFRRm5lT0MydmVqTHduTlVLQTFk + eS9yV0kzVU1JTEJQV3dXOXVpcy9NSjQKLS0tIE56Q05mSWhVUWMyQkVqUFNlbm04 + RUhIN0MrcWlQMERxa3M3RktkTW5HbVEKWzTl19inKF3wf2SrVDecFsth5PPjKyGi + 839OP4IAMoM0GPOkmHk35sxjr/34hTpk5mO7yu4nYH8rOhMiSTZ9ng== -----END AGE ENCRYPTED FILE----- recipient: age1adur9g330gua4l6ndk8cqjg35qc8yxwgme6wrl2hpylcc7vxm38q05ejuy - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5Y1ROSGlLcFczdjJNazFE - TUZJVmg2RldsT0pQdlZrRmNNL2ZibXNoZVNFCmZ0TXN6ZTJ6SVluZDlIVjJGSm8v - N1d4T2VHZEdiSVZ4ckpCY1pRQlFDcjgKLS0tIDAySFJGVC9kM1hVbEZqUUdqSHhv - YUFUeGlCcU9GMHAyZVBnWlRDSm4zUU0Kw6c8zMdxGwpNlukkw9ECT2aXJW98qNh3 - wjUXDzmXNk9f8LNvj67na/JvsqXR4yxXFsEQkphAm6DvLkZ+5BfJiA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPL2NrbFFQRWlnVnFLRXEy + aHk1K0VCZjVKblk3V0RKeUxLUEVianB4dmg0CmxUNVVoZ2tyUE1YQW8rSDdGOFQ4 + TmthK0pRU01aOEtmbUNlWG03R2JyUHMKLS0tIDlMbGhKSnlsL3BUTGF0YlNjZkZx + K29odXpLQndrdDAvaTJRSlEzWUpSSlUKq7XBK9MV24UhTgahxVKADQCPyS23UotX + dPkobMY1PzIBx+yeepCicCMaFz4foX7vA6+HEtbpzqP0lqPy7N8Jmw== -----END AGE ENCRYPTED FILE----- recipient: age17e89ty6p0fw24daanen57wg8uald9s025t3wwxsw269svwpmgvrshfvfvt - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzQ0trMEVBcm9RQzFXUUlF - ejBOYkt4ekFWcmxub2FETElidzI1SXZCZ0JJCldEczV6TGhzazdiOWFiWjVObU9N - NWdDOWpHWFRydHo0UjdzdHVYZ2pIeUkKLS0tIGN0RHBTbEUzMDVnK1Z3UGVhZStW - ZXJiQmhKYUtSdzRDd0JGK1h3VExoc0kKM+tX68bgbAgdi1Gk3MeW2YXwmmszGEeR - WCrKI5hkBU6ZaAMF6LU9idvdUqFCdJ4l8up5WSQuO+10a0pvYGj/Kg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1TTFSVVo4R21sWmZYaHc0 + ZmFOYnVVNzlrVVRPUXlRVGUxMFpKMzdnZkZNCllZZjVxZ1dPZm1uMzUzc0hEMHdK + U3NDTVlHMDVPOVVrRlVYUTZ4c0RUR1EKLS0tIFF4YTJzWE9PdWYyY3IyNjdsdnor + YnhtSnFvK2dPdGNTdGhMdmcrb05jamMKhO+Gdv55WhJTRr4ICOzG4lVZlxF0xZKq + ksmT/QIZHyZElBtCnLNTC3n4TWoJzywv0kjBLksKP9gZwmnx2TniQA== -----END AGE ENCRYPTED FILE----- recipient: age1hrx8qj02fj2ea6d4g9vqhyj9hl7fppkjqfdx2l37py3h6pdkr95s8n8rvs - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEYVRwdE5vVjBKczFBY3pj - Q0R0ZDZkUU43N3Rpb3NCTWg1czFrMWtrWEhBCjlONWhjWWZISy9oUS9pRFFlNXlZ - Ri8rbEMzKzV3R1NvN2orT2o4ejNPYlUKLS0tIFVDSXZaaGxMSWRpTmphYmRuMXpH - US9qYS9MZThjbkppcXNQUFdzZ1hDUWMKa9UH9GgZt8UD+TWcR3jnkNsVsfOlWAFw - cgh/gddnKu8lTa+9g6P3gi85/JhNqt3Fl4mmzk1aU0RjOIadzPWs4w== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzM0prUHBQTDZtcmw2d1FE + VWlyemZKSFQ0WHJCR2s1Z1pNTDEvalQ5TzEwCnpuWGVrUzRTVCswY2laVFNJVVND + WDh1MnhldWx6bEI3YmZOWGs4Q0piM1EKLS0tIENOOFg1VkJQblNKTjU3NVR0SzhN + cFNReUk0WkllbmFiMmFaa2pzRHg3ancKZQ4dCV9UxhiILsPEupR0RX8sPVMSCtcf + 8KnCjjer75cHlYijqnz9EvQb5ywm04qoUv35szl3Miq6RTudRohYcw== -----END AGE ENCRYPTED FILE----- recipient: age1e7l8dusgmgfzd2cxrrzwepzjxt69hzqj4epee0cs27u6yg4kxcuqm34ncx - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1SXpOLytMRGtzSUR6aE9S - NWpIZ3RhRElIN3dTKzNrZWoxeDVTK1Y5eUdJCjF1cVJTWnFKT2RGYkNOQjRCUm9P - V1pPSlhQaDFhWXBJV3FMSlp3N3FXVzgKLS0tIC9PQkRrZ1g4YWMyaW9zbGJ4V0lw - VDJneWs3NTJoem5oWEZFVkd5YlplQ0UKFXMBfbrVMyydpCHRaqmkYOS/+CufsDGN - 69Whneu9oXKGnbrFN+ikh+2O48VLWr9DSiWb0QcIagkNlxXcV3Vd+Q== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5Q1dQMHlXQnF5NC92WFFC + bjgyQXNrMmE0L1Y2TVBIV0hGQ0lKbnh2V0EwCmxpeVNWYnFxRHcvUkpmRUJ6WUV1 + cWFGK1ZmUGNOSGYzaTg5YUNLSXA2cm8KLS0tIFk3R1FWOTRYSEtleE1yUGtKeGtX + T2x5YjByeUhPTndEMVlLOTVKTUxOaEEK5MzNnIZvfREU0R12PtbD0QmpLD4EtQla + I/+c95O2YUl9sPS/OnaMETsV2PqHhI/dl/ZSzZcCYw3yfRBjFGVdBg== -----END AGE ENCRYPTED FILE----- recipient: age1jcx3yajjhghn8qh8za3yeu8nxykzlg3p4nrv03vnfvzl0mzayg2qmg940e - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEL0d5NytCUzNyV0k5c3VH - Tk9FK3FrcmdGVDJmN0lMTTVoaThJbUUybVhjCmVjNXVrdGp5SXJ2czVPa095cU5j - YUo0RXNXQ0dBQmlVOFlGZ3dsQTJ3MUUKLS0tIE4welZDbDZ5OVQwNk9reGozSG9P - Rkdiazg1ZjBmZVlORWtGVEREM0F3em8KFqIg8N82g3E8irYf8Zw0OtLWVH7PzLmh - bQkotIzeemREJjA6Q9mIxojG1mD4DcexIBSkBAhIH6vM8Nksa5H/xg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPWnRuSnVrMmRpVWg3SjRJ + OHJ0cUZ5UU9KVnhvQ042UXYrdXJYZ3RSdVh3CmtIWHlPbjB4VXgrazc5dTNNcFRG + ZkY0ZUpsanN1bHp5TG4xTngyNGxVaWcKLS0tIFV1UHUyaXdpWDF0NHpGVUd5N0hi + MWhDVGpXeWRoeVExckI5OWpWOERvSnMKkVzGUKoOxLkT3PnQupfI6PhP/WIrUU6Z + 7YICeH+mmTjJLaDn3ZFn0KAQKlFTeR2rejorNN7B1j/mxQmV912whw== -----END AGE ENCRYPTED FILE----- recipient: age1sweerhrga9yf8x6sv0apz4ed4g48rnlcq34rpv20t0rcelwgpgeqwvndzz - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkdjNHQlpCd1RJWFg5WkVY - NDU2TFA3YnlKekRKNkUzcmYrem95SG1uWXlrCkFpSThsdjNDSzh0eFpESVNEalJY - QjVlVkhQeTB1SXVpT0JvNWV3VXJFVFUKLS0tIG5SbWp1bDhDdFlvWXEvMUhxcy9R - KzBuczlWZDQ0cTFFb1dyVEpidjR5OXMKUXPeEpeoxb5egqBBI8auM4MJzZ3RbMrG - 0L9Y24zY+1i+QIM7WIlanYsNyhrRMHy1mXBjRHs/ka7ibyO9HUSaBw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5TEZlTU9jUnRNaXZZS1lG + L2o3UXZrajR6R2RjdXVkZ1FHQ0FtbUMvS1c4CmMyMURXZm5KMzh3RldMMFltejRC + VHBFNENCOVJOMGE2T211SWdUbTBER2MKLS0tIE1FeE5kb2VrejRoekt2UEs3MWxl + Q0RFbGw2L3FDUUVYNzdFV05lWnRGeHMK2EKY/HQ5RCTBpsifVrjlvy6i7F431uRV + zUgs4U3G/KB/MG9kxQsFmlRy53YA7il0n/0NnG/s4hvb09+6gD8ZuQ== -----END AGE ENCRYPTED FILE----- recipient: age1f7usptjx9rv4rxauasve200gxtdt9jkqhhdqstlf20wvlm7u75rsjfw50m - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuMHVoK2VEYUZnNkc2VnFN - ZVRxTzh5Rk0zQjRzT3ZvcG1FWnBGL1k3Zm5BCm16amZ5Yk1PT3dBRmJEMzhBdlRK - bG5hMFdDS1owZ3lsMkJhSmZSc0F4S28KLS0tIFVhaGFCd3dUaThFYUZYT3hGaEJD - OE92TnowVjN1OTl0UVE5SjdtNFVaMmMKGcM0fE5+iL6Oz9pHCCMlpOwwQruAG2Ur - SXu4gqz4vQNZlmY5o3hQi9zmZV4OOlKhwmInc+5vE2ypeL1/zNBX8A== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvTVBROUlXVWNKelpIOTBW + WUp1OXlyemtwRjd2V2lwQUd6WmZ1ajJucGpRCmlTVzhRUjZBQ3Z5SU9IMmZGZExw + YXBOd25SOVIrd3JDK0RZMXJ2NGdvVDgKLS0tIDJsaU5aN0ZnQjJRRmZsbVRpN2c1 + VUlKVUs3OEdUU2FZYlJYNzE5OWoreFEKdDFkQsdwOeQWlaODaH3ZiuOjfZioGi7x + elq4NKp9iS+1VgZ+3pLH5Ev9vPquBFyB1vd97Z04HBA8+S6tyR8PZQ== -----END AGE ENCRYPTED FILE----- recipient: age17jqc66x9yeshfgd9v78mj483r4zzarqdtuxtrkxe4x5mw679gphshd94th - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBobTM5QWgyem5uUlBybWVv - RE1jUGtlYXdZOHhmMFlIekpvVWNxV0J1L0RJCjhsTEVBY1V4WnhGUWNmSVJNNFor - OVI0bjJwd09NMkJkU214bnRFQVcvdzgKLS0tIFpIaWhZVWh2TGFNaG1aMWYzcDFF - NFdMeGdBTkxoWTgyeUdxL1RqTkNSdEUKb2tuVoaqRY+B+KgsbfCnWwi299aVSH/N - 4GLnmC97DoIIcMF3NJbHXPyUTCCrJ142j3rXGrpATkO3IaeMTfeN1g== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwNGV3TnUvODN3VDdWTDZS + TXY0WHVUVkdPWTh0Y1V4WnJpSWRMNnhTMzFnClRJNUFLZG5vWDQ2TkxIMU1NbHF5 + eXFWWEh6VWwxU0NjMm1vcWtYckhNTzQKLS0tIEJQT3N4dmdoZnBjN3BoNTNWRnI5 + OUpMdzZBWTBLNzNZWmZ4dEFqdkMvbWsKZHjMAHVsl+HWUyl8G9eGWYDuaA5rH5fg + 7tia6vmmKWaVbDtvr9ARDcLr862kvMkMWg/R2/RP0w7sm6HPvzU+4w== -----END AGE ENCRYPTED FILE----- recipient: age1px0h5l9zp2dww0m8fncrc82kfdmzplsfv2ltat7sna28xpg09pqqcl3s2k - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpS2ZqR09PSEpaN1FYSXpm - akl0QzAwbnUrNXBFL2RaaythUU1Td3FicWtNCkFtMG9Ka05PSUpCR0hiNnpBVyth - TXNLa3Z2L041SEl0bjRzR2dRWGZNVDAKLS0tIDcrV255cVFRTXJ0bVcrcVRFWVdZ - WGdVNHNIL09tVS8zTSs4VHp4dXdoUFEKkXqeKKwQ8fp4AvIy5Mzf/hD9IO3NgAw3 - 70TH4YjCEiBpd3Q7/+iyB4yBYCayJ8U+KjC1Q8aTLQEqQKyiEcheoA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUWk5TMVpRQ2lxWGRSU2to + WUFVb1JqSTBDMXpwTktoRkFORmI1cHZXQW5ZCnFYTnlBSjNCM2NRU0JtR0lmbkQx + aU5qRGhTbUc3aFhObElxOVdXb0xWMzAKLS0tIGtrOU1DTjZBMmUvZVBlRy9qUGJu + NzJPM0hpRzVRcE5TSWM4R05zU3pnUHcKjxDRS4tmcVod0Zor4yC9+ogX3/DWkdtn + DpJn8g6pNlE+Dyg+NYyPKhzQjZue4bpPgnknU2rvvWdfOP7dlGMa6Q== -----END AGE ENCRYPTED FILE----- recipient: age1ufg390ydrmma849t9xfkxxl5xvdkk6mngnlzhmy7mvuaje8sgcmsmnq6l7 - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6b2hSbm02NjhPb2s3WDQ3 - VkFuMVg5eVdoTmtnbjl0L05EN0hqVThXY0RZCk1STXZveTZSSURkNnpDTVU0L3c3 - UkJNclhLcEdaMXFDaEdLZEVjL2w5c1UKLS0tIGNnME5mVWk3aU1LelJGb1UrV0xS - UHl0Z0hWYlp3b3MvN0FETndicCtpd1kKOMn31Y0XKogmJpm3CrIoqEIrwKqjZxE1 - 2N8LX8N7FJNQW3LaoyTok2hbe7KjhASlXVapDM8aozNouKnGv5h6Kw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIb2hFNFh2c3ZwcXVwbC9P + U1h2Z0V1Zk0wL3BmbUUyVVE4SnpTYkhCeWdRClRUdzJWL3ZqUTNxNGVxSXNSVjl1 + NEpGWTMvM1VjNmtVQXhSL1N4R1UybVEKLS0tIDBaTmx1amtGdy8wTk5Ec0xjQ2JR + YTlqdWswSjVVY1FHdE9USng0bjc1bjgKFE4tvSPr+D9qTbRYsErzE78usjp3L5fl + NTgjL4hBQ2KNs25bQKh8LMnjR3J5upcEsvI6dvu6oHxpcjFFUBXp0g== -----END AGE ENCRYPTED FILE----- recipient: age16j42pdc5dr6wnj7xayhkqdj2rny9u68fcqejs50hqq42scssh4gsnrrnlt - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvTGpYNDdYbU5qWkRJRVRu - cmt2MEs5bTJUV0k2QjA3VW91eDQ2ODVUWVRrClZORzJSVmh0eFNyQmtDNjMxMGZs - L1grblE1V2hPcXBFMHRIOERJL2pBZ0kKLS0tIFNLbkZRK2Z2Y3N2Y2hTSUgzcW5m - WXpCZEdoelo0SXNKcnNuMmg4cDAzeDgKtGn1ZDRCbrTdmzCn9st/61rKOvEZqCtG - 0brTsCk21iWLzKrMsg/B+kNiPB9/bAhessFJ/TDqZPn9/DWZ0x97Dg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjTHhRZDFqWU1zNkpsek4w + QmRaSms4ZzhhRkVXQlg4allKNlU2VWVHa0hjCmNoWnVmeXJmSEQ1RzBQbXErUXV2 + OFJERjZMK3JoaHRqNm9Sd2svYmFiUWcKLS0tIFpvY1F0M2wyRXUxYW9DdmJWOU41 + dlk4bVFDN2ErM0doREdMY0xBQUh3NHcKZ9bBa10mawRXh7GLDD6Xt6m+E1X9i8NJ + mDP3no+kP0kejJ+H7WhxixhPeU7xOyQGGmmhj3OH0C/q9QORYlYASQ== -----END AGE ENCRYPTED FILE----- recipient: age1nruncs4l0ufk7yuc4des8p99c0alfndl0lhsws8tycl5pplfp56s30af5f - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyQ3Z6SkNyVW1kNWdHemZi - R3owRUViRVBFMFhXZjYrcWhzUnFjZzVkb1c0ClhZNWp5NTVpcitkSmlkMWoyL0kw - ZkExZ21Nb1E3TUtvT3BNdXEycTYwL2sKLS0tIE5MaEFyMEJnV1FiWUZxYWFsNkQw - czNCdjRZZEZIOWxXeFR5Q1kxQkNYK3cKLq/eGWojEiqYwcwvnKGxHLHFhvCGLqlP - rVu2LqLqmEkrblRas5JJ4cQg9wd9XQuxdTOT5GSFUtZrX+P7XTbhNA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1bWVSOW9HOHJuOTgwZlNJ + dzdJRHFzdC9HV1dBaEsreDJPVUpiU1pBQnpJCllwQVRUREFOSWljU3pIVm5NLzl5 + NEkyaUNrNlJYbHdEeWNsMzk0dVdocHcKLS0tIFJ2dmdBNmhjUnlvK1NQQUs1ZHVB + WGprcjRmZ2dTQmhIVTBXYXBXbEgvSjgKam4xywYDQsBGwsUKtwFUXwBFNYGQpaHU + D5ZGJk3hFwCTdtdmsI7PmB2AVD7HChc3RatPUtQEZg7/Ko9zeLzb5Q== -----END AGE ENCRYPTED FILE----- recipient: age1k7d2du5mejsmv5rzavm4xwgpthqvcfsehduquv28nzs53zppa3kqngfxq2 - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuUS9MK0hsbytBWTk3bVdJ - L0xiT2xhUG5UU1dtOXBlMVg4VFVZTDJkZVJrCk9leDBtUkN2bnBUeE9BNnY1NnlF - TVVHdUowY2pBZXBIcnNUTG1aYllwUDgKLS0tIFdpRnVZRGxmK2JYeVJMUEtMQWxT - cnBIanpxYmQ1U0U1UXdhUS8zdXRkTVUKrEoNKzY3DXyu547GmbSsXVmIDvIoNCi9 - hqVSCXG1r4t/tKfVuNyUsBDzfboiRgH+5gNk+h4hxmbI2w472nvPXg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5WnBaUktML0d1Vm92dFNS + dDlHNERhT1lJMUFxWFp5ZVVvNnNILzVUblNrCnEzV0w4VmRtTnhQMEVoTDFGUy9W + YUFQNStRem4yRGNkU2VJQjFES1o1aUkKLS0tIEpnODFzSDFlbzBwVXMwT0toT1lS + eExqVHlQUzdzcWJOZ2k3MFdrSVpOemMKP+aBvhLrfBd0FCeZF89hvhjXMj2UYijW + w4Yta4Y/8X1zHaI+FyG7+IvvAcQAXrM3MM5ZqD+VaVdiMUfxTFJhYA== -----END AGE ENCRYPTED FILE----- recipient: age16kqfmvz4e23hmdlqresnyw69ej604s320mmd49h4hm3fhqchtgyqrws0k2 - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZR1F4Q1JBa2pscXVKTUli - eFdDZWdsYlY4cmQ1ZFBreXJDOW9LaW45ZWx3CnA1MWJYSC9ucW5OT3VWQ0w1ajR6 - eUN5eE4xUVFxdGNEakpQYVNuaWR5eEUKLS0tIG53RDIwZDVDWFd3ZjIwd2laK3JQ - a0hRZERlalBWTXZoUm5lYmlYR2dGdFkKIbB5cuiUOGGmZx5QxuZbYeUjNORT4pKa - ASvNnGv9aM5uJebWLhhO0Kak3dM+OxP6+tt1/MNNP1LxUqFPJuJdeA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwbVNzTlZ5MFF6UzNmUDBu + T0hMMnV0QklGZmtpb0xaNGNkTExhQkVlWDNZCmJYWmMwN3hpT1Y1MnlDaHllZDNY + SDM0OGkzcEd1UW10VVl4eTZXcnQ5TUkKLS0tIFIvSDhFYkhvRmdNNWExMllkbGpr + L2hYV3FITFZyUDhackhKOERwalNmbk0K6gyoVY9p7RKLMHDA8rPrA3aCLaQJgWE3 + 9cXH6IQSxvSOqHlcj0sNr4fVL0zY25IdHtQ07Jt2QYWoIQM6lmychw== -----END AGE ENCRYPTED FILE----- recipient: age1arhf2q45zw6wf2uevju4savp575x3m2tfvved5zzq3ay92ynua9s3cm92c - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxb254bVQ0OXQ3RDNZMWU3 - aUhLQWZYa1VobDdCbHZyb1JFbGRBNHBQUkVRCmR4ei9oTEhQSkhUK29PemdRbVNn - elQvN0UvUldnRmRNZ04xbDlCL202WlEKLS0tIFdiVS9maFYrODMrSU9aMFlXRU9U - a1BXUWozUEF3YlU4RHBhTytEVktTNGMK8KiRVfHfgWojDSS5k5g+NuIIFZSucBOc - PoZNWFmDyMmL0IDvTYWS8lgzgppgjSXkecIGtTGmiiXpTxot05jLAA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1UlZpNlMzZFRSbkdrQXFk + RFB2MnVFMEgrVjRnV1AycWRlUHlVUmw0VEVZCmswd3M1dkZQemIzVDNheFVac000 + QXNWcjA1a2lnSjdHZHFtQ0JyVzE1RzAKLS0tIHpWNVFqN0kvMWVJVjFVK0pvakVM + SWQvNU05b0JUMXU2bVpGdTRIWnBjcUUKtnJpK0MhUi+OVnqXvD9a/oNvMPH556gr + Xn81BdmdvILoHmPZB41Z/c/U5G1fcf+GRegL+yALOILdHaPS8w5Sfg== -----END AGE ENCRYPTED FILE----- recipient: age19mn8zrxl8zpps9yvrh4euquvygpp4fp8queg7xc6qhtnl4ng8c9qx02qwn - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMU1ZFRVpld1ptM2lnYm9u - QmhSTE95ZUM1cVJUV09sdVhTMGVtRnRpb0JJCnFucml1RGtxdVJCOE0xUXNXeVdt - VnVBYXFhVUpGamhCbWtySnhGeEtKNU0KLS0tIEp4OGRGYXR3WHhNZHgzU3hNS3E2 - RVpSMForUGZRS1dUR0hacnBQQ0dLRW8KK77iAvB2e75eGPC587lCBic6HaKypnnn - HAbjBkl7ZwyKWpyR0pOTNauHWh2D8WDGjc2ciGaI7j0cbNeTdzCyAg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNTEljUmIxZlhJU2YzTC9S + Q0ZQSEprZUd3WUM5bDE2OHQ0Z1V2bmc3R2dnCnU1eFhwWHNDN3hERkh0T01oZUl1 + RG8yYnVFUTFYVGQ0RFpxZWdQdjU0WVUKLS0tIHFoWWZRY25BWGJybSs0ODJzN1Y0 + dDJWMlRWVGdIQnovdit0Nlo2LzIzbk0KoNio+gOJ4SJHxBKA7t1v9DD5UTNoJGu6 + x1/qXwh3SLFk8sirYewwY0FA8Z6XE7qq0DBTL4OjU/5IKYNOVW6Xsg== -----END AGE ENCRYPTED FILE----- recipient: age1jlltcv5jcnm40z5k0q6hv053k2rqpqvemtuecdwn527uw8uqz4es3x7m68 - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTTUd4VWF0bXZQbGFKSFg1 - K1ZsYUNlMHpSNG1WTlRxMUJmZ2I1aVNHYVY0Cm9FWGZDYnhhdXNCZUxJZmlZdGh2 - ZG5FWkJJUitVMDc5L0Qza0JqQzBsN3MKLS0tIEYxanNSakVud3c4NHRyZlNnNTVp - ZVo5TUVXcFYyeUk1eXZ6VldWa2l3b1UKCuXfXW12E0ybEmADPBsuno9lUH+yZC30 - buTHSyG2WUpV2J8Om0uxUrnbGXKLUhdjUut2OijAi/GQP63CWMNlMA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOU2ROSjNDN0lOamZHYjAw + d2tKL3RFRmtHKzNuQ1VXNUNZY3E5K1R3blU4Cm9QMng2OXFtWHYwRUxieFFHK0ox + cWRzdmFOOENyRnB1Y2NoRUo2UGkvZTQKLS0tIFU4b2hoeExBV0xLemxIWlpURkNa + N0VHMmtBT3JPZXF2QVFyUE51NjhWa2MKGCZK5saQ0RdbTUx+itnFTMKNj4VE59H6 + FDGOVdWRne+1PA97Um1oNlYuoaUuyCtwCfOwz2iEi4RGTVPpK4ntyA== -----END AGE ENCRYPTED FILE----- recipient: age1ug787sgt6st6k82fgkrug2lzltw4qsukrrqqs3w27ewwqj8rg4hsxcmylz - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhbjAzd1lOM3FaVGxIUE5Y - ZENGZlZLNVZsaTg4U3MxQU9PMTNhTjRVY1NjClVVWUNUaWY1c05udUJVOG8vOGJv - dXFlZUxxQzlCaGgwYWp5TmtBbFpiNzgKLS0tIHJSMDNMRG5ONzd0d3hoQ0FLOU93 - TW5HWnBRTXJwN2VjTllqTVRBcHBiTUkKcI7du8jo9LWLtwnsDFyec+fn4w6zWyaw - r7m05cm4sKv6xDPMZrGNlwRziA327qn8/7/xB+Tl62+eECaeIqLUUQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzVWRoYUVtY2hWMHZtYlpO + b3JSSFIraEZXRGd3YnZGc25VenhlYlg3R0JzCkY5Mkh5WlVuQnVSZ0trakgvTGhN + TWVVK0R5WG9HWlJ0NWNPTGtDTFlNd1EKLS0tIGhKdG9hT29qWlcvL0UwL1BOcFIz + OGpjWTZDRzROclo3a2toUFhBRnhscDAKYnwkQ4H9b1BdFNgG2pIl9Xo7skpn5+HF + BJB7wfYi6IoDbj1gfyFf1NmOB2gX07xfRcmIGfkq+I2/cHMhsXTMIQ== -----END AGE ENCRYPTED FILE----- recipient: age1529taqdwr6t0w7cvzmty0d5y5593wffl0krt48j6uc4u39k56g2qf6ywtp - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArSG5nejgrdDBBMnhzYVpo - eENwVzA2dnlPZS9DaXhBa25EdzArS0VIbURjCmhiYUNMOXRHLy9xaEJZZExRanpl - dGhiZzlyN2d5NStOdmZMWnBhbURQNU0KLS0tIDhDNFNleWNsK2VITHRvRVZKb2xs - NjFkYzJKdUFFS2dUeG4reW9NWlkvZXMKkUob0p2OZXPgjLJ3MUto1tiJTUL6iyFw - uZZKNG4C2phTb9Ry4+wvKb5PakAS8cmoBFRcVz0p6EBsl/yxbwcEMQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5eXFZUy85UlY5WW1qdktj + ekp5WTBFMjBLT2hMSVlzK1JGYno1bXd5TlNFCll5S2lqSXB3QTFYVm5hdmFUVDUz + TFVGNjh6VWJzTkR4TVhuK1JSaFhrVUEKLS0tIEp1SkFYR2lJS0VDSUw5bXRRTXht + QS9DaGs3SnRHZHUxREtmZm9TRThRNWMKCsbgErz3ulxAasQ6IfmWwWDTS33RSFJv + WiizvgQmjpWx8JFDyxS+eNeU0KQMf8TdI7D05f2ajkao+A7YmIAGNA== -----END AGE ENCRYPTED FILE----- recipient: age1zhfyuzlq40reuqlr34gf77852nhs3t6mqfzrqmas8z6sxk7tcfhsungrm0 lastmodified: "2026-07-23T21:15:41Z" diff --git a/secrets/nix-cache.yaml b/secrets/nix-cache.yaml index 189ad01..a761c73 100644 --- a/secrets/nix-cache.yaml +++ b/secrets/nix-cache.yaml @@ -4,47 +4,38 @@ sops: age: - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMWjdNblFJdUpyMGFrSWJm - a21ESTZTK05YNk5CWFlKNlhIdXhIUFhQNVR3CnZZK1N2N3VKVWs5ZGxZaUhCb1VP - dlJaNXM2alNiUG42NlFqeVV3WDdtbnMKLS0tIFpvTlBZU2RpNUtoNVoxeUdKU2Zt - QjFydW1xeDd6N2xBU2lhRmtuREhkNDQK49/mcHVCj9tBtGe1ZnK14YWHCtgzBBvV - giDA8BzThifXjWtL8zF60kibKFVRGrsRZT38tRuv5QKzu6Z5Cbc+2g== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwMklZTFJuR3NYbkFvV0l0 + eUhMWU4vMHpnN1NKVThuVVdiOFpkZW9rTjBVCjJabWkvOFpOSm1hdEdlZTYxc3BP + WkRURDFEQzMvRFlka1VnaU9zRjhiSEkKLS0tIHZXRG9GaE5iVjg3M3I0SzhtN0JP + UlJVUzRzN3NEZWxXZHJ6RW1oYWwxS2MKonnhq7YDg4v93PZtoaLANDy8mdRCenjo + FjRUzozMLpgWBll4DwRWikejsrRofRBwlcsiIdrBr90f8Lr9pHdQ/Q== -----END AGE ENCRYPTED FILE----- recipient: age1njap586hc0q43kr03g6c8eqhdsmk8zcafkl3f83xwlc2gqhlmfgs4tmwad - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkZmtLL3pzbmNBNkkzRDhF - MFZrS3FlZ3I0ZlNJbVN4aUpxYkQ5VkRSYlRjCnUxM0tqRFJDMis0TDd6cUthN0ZE - eTBrSDd4a1BzNHZqZVJIc3V4NzBoeGsKLS0tIE9ENFBWUUtadC9vQ1UyRmFLWG9B - UUZLeThnUzBNRSttemtuaTN1NWlkUVkKbDeId9JVSvjszcA0TT4L9C4IB5xLCuJK - ESqfwJe7QoTBpYA3RMmtIcYK3oYX9KKGrdUU0J+TV0Flr6wqHBHbOQ== - -----END AGE ENCRYPTED FILE----- - recipient: age120le4a5l8dh3lyfgvmj3d9ksmej6ajs5mer5y7r0vfg3x9fn69dqf8xgzu - - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4OVJvSTVkcDdMQW9HdXcz - bmVOVjQvYU81MExSZ3NtUzZTNHNRb1VjNmljCkZ6bDN1OGx4NkhGVENOTjQxWFVy - QWNNbENkMVpOTS90dzFWalVtczZ1YU0KLS0tIFZSQVNkUGE0TERyQ1BPTjVQUEdN - Y2tFOXlkRHhGTmNWVDZWRnQ5dTNTM1EKNEZZqO6mmj3GnJJ0/8UrisHODEKPjyah - aAi5rMnEDAniqyouTP1Mq3GOn67KoESqZX4qY3nHvJC7QBIDii3sBg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsWDJQYzM5Z1JRT3FlVkJy + TkVaSXdzanYwbnpOM1d2RFh0c2NaSUFmdW1ZCit4SVFxSS9HNXhVM2gveERGVS81 + NVFQaUV2RGR5Q3kyUTQ5eEpDVXJVMWcKLS0tIHdHSy9WM0o3Q0o1THhXZW11K2Vp + NTNtSGM2UDFuWDBEdS9tbTY1ZWt6UlUK8z5qoi0kGn0ES3m9khummuU51rkR0Sb9 + TWT92+BWvPdNrAsDFjv0fgpUKyTMzN72EzHZKAJCIM3crUG9I0tX2g== -----END AGE ENCRYPTED FILE----- recipient: age1jcx3yajjhghn8qh8za3yeu8nxykzlg3p4nrv03vnfvzl0mzayg2qmg940e - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5aW8rZG5MenF5RmFWdUgx - dk1oV3BpYmNGUnJHTkhOVjVVM0k1T2hlQkdjCm9xYXNkVWkrTWloWEtRcmRuUUkr - NUEyZ0ZFeFZ0M2dHUTNYdzFVQ2pDS2MKLS0tIGNnaXcxUUo0cGE4T28vdGJPT1d5 - SnliakxSZjBNQlpjSlNJelVWVUJORDgKWVuK6VYN5BySdRLHLlU0Sk6PPAsz5lVS - Vw96AbKrmczhkiYUWGacde0KjBJb/7tyfXeckV1iqj1/6vT03dDNlA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpY3o4SEpwZEdFQmVnOTVV + d2NqL0VudHM4VjdDK1N4dWdlS0lGR1V6a0c0CmJUTHlsbEMwaEU0Kzdaa21lRFRm + RTRnTUlGUG9GQVB4U2pzTHdRY09udkEKLS0tIGlFQW9Wd0N5WFg2WUpCQzhWUm5v + aG1VVWV5ajBmc2o4ckgyQWpWaFVxVmcKisAw40bGQBRH+u6uNygfYpfb7iEgfEHj + E+g9n2WeVH8kUzD2O1o6VAu4m/SVuI4+IQ77j9GEWmlI/wgp8wKXgQ== -----END AGE ENCRYPTED FILE----- recipient: age1ufg390ydrmma849t9xfkxxl5xvdkk6mngnlzhmy7mvuaje8sgcmsmnq6l7 - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCckVtTWtCSWpxSGFEbWI5 - MkVkeTRYN1MzMEk2L1RQemRvM1RSaEVpakVNCjBsbm5qcDFlRXRCQXNkQTd2Snlk - WW51Sm1xYjJldmJ0R09WR0hHbWk3NWMKLS0tIGlWYk4zNElVQk9qcGJUUUptMVZV - aStXT2lVNXlwRG54SmhxV21tb2M3NzAK2nlgUrlarGERUClDvytMXwPO5e+zaIlW - T68ePI4e1vh2qj5xpjXoK5Pzv6oUcjhB0P7Ij2lA8bRdFLWfHPAqvA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1elpNZXVJbmJWSU85aUV6 + NG9YTWVBeWxiRHUveStTQnl4NC8rT2VNdHpNCldxZVJYNVhUR2V3Vk41VnJxenVT + WS9rRWlKcGpVdVJPakkwUTY2a2xQTlkKLS0tIFhFVTRucFNuS0pMK0FNRk1ndnFO + SlVvakczaktUa2VLY3RLYUdVRzFyamcKIhctg0mbYL7OE08dRwj5wMu2x+O8/BMu + IqA477+noQ/Rjrszb2hEvxID7keogcDUWMWQzQvdMc22+3mvAr9qIg== -----END AGE ENCRYPTED FILE----- recipient: age1jlltcv5jcnm40z5k0q6hv053k2rqpqvemtuecdwn527uw8uqz4es3x7m68 lastmodified: "2026-07-19T23:30:21Z" diff --git a/secrets/server.yaml b/secrets/server.yaml index b1eb85b..501730e 100644 --- a/secrets/server.yaml +++ b/secrets/server.yaml @@ -3,47 +3,38 @@ sops: age: - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxT3dteUY4T0VxaUljbFQ3 - UjBSSjZCdWpmTGpDS1BabjV4R0lyOE9haEZrCjlmSXllWTB0L0E5N1MrTk1IODR2 - bXZuamN3Yjk0THdka1dBZE5uS05DRkEKLS0tIDBkTmtpU1JoNmN0cHd0WGVseERt - eEcrOXdFaUNBQ3g2aytYM3RwM1dBd00KiSRrzv6eRMdIzZaUlC6JmsZV6rYJgrre - vbI1KHtNZKetx81+MmElIKog6kMtTPtI7MVpMwCCPO8zAU5Uh7jSoQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZeDQyNFh3dm1YZ2FTMjdK + cDBWcDE2a1c1S0s1enhWRnVuMlVJc0gyTXk0CmxWNkRJMDhkeGpRTGltaitnVkZS + a3Q5TW4zYm5Ja2FETEhJcGF0N2ZKbmcKLS0tIDN0a1FqRGNOY3Y1UWxvUU8zWU1m + bE9DVzZESG1HTEhVWUdJOTF0bDhRVGcKP6OoyDAGLB9jQ69jpFyho5eaeK9XtZgN + RlSJpBm2Jo19h/crpH9AWXUAIG0BWueyr8mwBu12cQdFIU3IyZT6gg== -----END AGE ENCRYPTED FILE----- recipient: age1njap586hc0q43kr03g6c8eqhdsmk8zcafkl3f83xwlc2gqhlmfgs4tmwad - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmWUMyVGpua25ZZ1FRZ21p - a1lxdS85d2JzOXBLVC92MjlNbTZOOVgvSlhNCm12WmtIb3dQanNkanBCU2t4VTd2 - TGFidEpSR254Qm5jTVF0WnprcjJWVncKLS0tIGwzRWZkY25rZXE4Q2VETU93Mno3 - aGN6MmcvVkRGZkJQN3V1ak90T3BMVFEKLcEdqKQ3SStSdH5vjQ6RH+oA10OLGXad - TZE0h435sg/tq/Rff+KWngczFRuq7Yg0KYph8bNAKy6uf+RceZ8Ngg== - -----END AGE ENCRYPTED FILE----- - recipient: age1ll6hj5ggruetgjwjfnplpn5xtq35uhlcdflksx3xmnjm6s3uad9sz70jkf - - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSMG12OTVwdFhnTkFrNmZl - UDFLcmJtL2FNejJnWlZYd093MlZmWG04dmdJCkhGLzNGcVQyVVp6SGdISTF0ejhv - OVRoQXNlSWZCWDdDMTM0YTFJYlRQd2cKLS0tIHJxVDVscUxEdTV1MGhNVlpWVS8v - aWhSNDh1NEZHYzRHeXZNOFRuRzBjazAK2RMK5ylm4uM55fXgrRrY+GeN86ym9wC9 - JNDcNyxE6H/sZGBZJbFLWKDj+VM9X86j5TFFpnjSrKi2CPOzmzgmKw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwRVFQcHpkQkNlSDhhM1Zp + bUZyOFduQXg1cDd6ZlNObFgzL2hmUmJhM1JFCnprMldPQXJNVW10dVRqQTdWcGlv + RnBYWWFsaVNrMkJpS0pkOGlQQzlJVVUKLS0tIFNsMEEwZTREZ1lwWFJGdE5YSVVU + ZEZ1bVpFMEQ5N0g0L2RacUpLMWQrVDQKxPzq6f960purgAmUJw6IZnZSnhkzNE8r + CSrFDowKTZI2KRdCtQ5fGhEoWO0ZPgVNxYV0KH7JBttylcpRLm6r5w== -----END AGE ENCRYPTED FILE----- recipient: age1sweerhrga9yf8x6sv0apz4ed4g48rnlcq34rpv20t0rcelwgpgeqwvndzz - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLRHdnSkFZc0NYYnQvd0Mz - a3dmTHdLN3Z6UGh3SkpBMGhtSHRJTC9SblJnCmFuOTJGSE5nOWIwQWRNV010RkMw - VnBJVXdtVm1tL2d2bXFWWnBtamVRVk0KLS0tIDNHUndvTnd2Z2VSb3dxVUFUcTcz - ODVDRzBBclhPZjJDYVkwWktMUENSek0KnTFdNMa8L5uPLvl2aJLvaZEUTbGwL+va - wLnWhf/bm8edMeyfWcpS2uHMSDpozWfqObrrP23LCrDBf/B7EG+TWw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0czVoT3ZyYTZhOEQ3RWtR + bVl1MW5vNERxUEpmNXV0MGVBRE9ySnBjT3pzCkM2aUVpZjg0SkNVTnRRMlhyMTN6 + NlFrZDVKV09Yc0tuKzFzR0ZtQ2t6WkkKLS0tIG1mbUNFdHBycS9UOGc2cjNpeHVm + NUd1NThRQlZXeG1WbmR5Y3pTYXRKc3MKwSnE+0bGmxOAQUje6jHxuzIIyD6ZAwVz + b5AAYwbGRagKj6fimsHBUmi4ohyG1huIGGOU8HiUYpu4PGJgOscztg== -----END AGE ENCRYPTED FILE----- recipient: age1nruncs4l0ufk7yuc4des8p99c0alfndl0lhsws8tycl5pplfp56s30af5f - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyeTJMS1A0eXJnQVcvaVEy - VEttdGdMcVIzNlIvclZESkJoTHBZeW1GUVFBCmhmRlBLN3lLdW9TS1JKOW83Yis4 - dVBGNjdPZXdGYllzN0VyRGFVRFFCMU0KLS0tIEZqN1ljQ0s3TDJYWEEwWk1YVmFs - R1l1LzdHUDVvUHQwY1NtZUUxajZkZUkKZv1ejN+LKZqFqDRak5ktFaR3kMPCQeFl - q8/DHLFx+1IFChxMGkgstGGmkZdxG4khpYJJXAVNyQsyIW9bjJiqZQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlVGRDMWNDZUR6c1VpUjRK + WDY3L2lNcWFFcm1UV3RPMjlqYnBGVEJLcFFzCjFxck4wdlp0Wmtzc1RKNS82MXpK + ZHBzOGhkc3ZuZUE2UmpUSTgycWdLSGMKLS0tIFUyYjczeUFWU2FyMlBTdzAxMTBE + VzhaVzlSL05nZzNmR0ZjNEFPTXYycHcKfiJ0KjdxtLWsXxsWKzAL+H3hYYjHrYO9 + BjKknq1ZQJM0sB/Tid+GLqDwKi966MQK+AwHF5MqbsHW7eE5bO1nwg== -----END AGE ENCRYPTED FILE----- recipient: age1529taqdwr6t0w7cvzmty0d5y5593wffl0krt48j6uc4u39k56g2qf6ywtp lastmodified: "2026-07-19T02:30:40Z"