updated sops keys

2026-07-19 15:06:59 +10:00
parent 6dcbae5659
commit 9c0b74d731
2 changed files with 31 additions and 20 deletions
@@ -3,6 +3,7 @@ keys:
  - &docker age19gfn2yedg76dmztm4hncr7vf3r3c9j0qpt4rap7y7gersjk4m3ks2lhd0e
  - &server age1ll6hj5ggruetgjwjfnplpn5xtq35uhlcdflksx3xmnjm6s3uad9sz70jkf
  - &nix-cache age120le4a5l8dh3lyfgvmj3d9ksmej6ajs5mer5y7r0vfg3x9fn69dqf8xgzu
+  - &lxc-minimal age1qz9d4ka4xgexujyd247s7lp737sulp5fhxl5d65fj2ykvc4j4edqrsdks8

 creation_rules:
  # Shared across every currently-deployed host: root/nixos password hash,
@@ -16,6 +17,7 @@ creation_rules:
          - *docker
          - *server
          - *nix-cache
+          - *lxc-minimal

  - path_regex: secrets/nix-cache\.yaml$
    key_groups:
@@ -5,40 +5,49 @@ sops:
    age:
        - enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6NkpZRzJuMFNuV09WamR0
-            SERDN0VSUlNQbkhSem1EeFlxdlhmdUx0S21JCnY1VkRBQTBqcW9JRHpJWEtJSitN
-            dHkyR0I4ckNkWkpGWHAzZGRaZkhJalEKLS0tIHRrU3RhU3UxN3B4NHdLeStuSXQ4
-            anFkRlpMTHowZzJNdnY0MExQcXd4OUEKgbT7uOSFkfEs6t3X6jmGOiC28lDJWF33
-            50f2fZ771ylhHa6WJMetGZ5cwl9r1RCaDiWyJEaqNGe7NqARlhr3EQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHS3Fkd2JMVDk5NHJSTVhG
+            QUxtQy9qVTdITVU4Z0N5Ty9WMnZYZjU0UXdrCnVLTWhCWmNyOHhYMi9mSFpPK3ls
+            YldJTWcxK2dNL3RpSnlRZFlwTHV6bVUKLS0tIGhjK25JNlRMSkJhV1o1a1JNN29J
+            NjViQldhSUZXTmJjYjhqdTdhY1I2YjQKYTTPfc5qx6Sxc1yuvol6JmkkJEM3pELk
+            gPgW5dfS34CKhCt2GWwEdIpOcMNEqL1+0iXboR/cjSGeUK7PP8iwOw==
            -----END AGE ENCRYPTED FILE-----
          recipient: age10nd382a9klsn2mrs60emdtsxe43pht3a0m9p29phfrhy0wfyt3vsq9r667
        - enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDamw2ekY0dFZyOGNJelVa
-            ZGlNK2VNOWtWNTRzU3o2aVJvRi9CME5yS1JFCndlamdFMzVRTnoyVE1ZWXZkTjRR
-            eWdSZzZERHE5VElrOGZvcE4vK0g2d0EKLS0tIG15QlVyalZTK2NpVDdWWU4yUU4r
-            SkFncC9rZkNKUS9MSmF6WGQwOENwZTQKs5kLNLdQJoZtcsw3zlUWUUtJs0MJnuvw
-            o5vziOswRnuXENw//xN01nMDC6Ckzvb+q9GFIyxHLE4j3fT5XdZakg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2M2ErTkRNSTJ0OHlLSXJ4
+            S3haYVN4VXd5TE5RRkpMcEU3TkFYNDFUV2s0ClJ1ekMxcUJ0eFhtcytpQU1xcFAr
+            MjBwWVdlMnpnYm5peDUwU0NJMEh1S1UKLS0tIHZZOHZQYWlHZy9xVVdrNTBaWDFX
+            Mkd6a3JYMCtDT3ZSZU1MNWVlQkszbm8KIKVVNVCkptOMZ99sqpEqB52hCEAb79xA
+            pQtGpNtXgP3v/dkGlAAgXShcf/w+owzr62NuPCzZZ5yJzKUC+E8F1A==
            -----END AGE ENCRYPTED FILE-----
          recipient: age19gfn2yedg76dmztm4hncr7vf3r3c9j0qpt4rap7y7gersjk4m3ks2lhd0e
        - enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyaWpWTGd4TEVoaHg4b3hm
-            S1o3VXdkYkZCS0QxcW5hUWxyVjFneE5aSmp3ClNsdEZoMHpPUzI4K3B0ZnBYMlEw
-            MkJyd2NPcGJDZzgvc1EyWFBhNVlGUVEKLS0tIEptYXI2bnJHZVZGR3hSSm1sMlN5
-            ay8wdUh6TEowL0ZiUWtqbXl3NzhYOVEKW9l4mr+MLhuXA8sgQndaU8NiFeCMcxhG
-            qjKFn+mu2GFbwfZWAy6y/KUd9Ug4H6y3pNHlJMHupTu8v2wZ+3S4EA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRTFZ1T0ZlVTZBN3dVbVNL
+            bUxZMEMxZU9sUVdZZzMycklWa2UxY2ZnekE0CnI4dWxta09NdHNvRTlGRjYrSlcx
+            bG12ZFlZc04vWnpBcjhxV3ZwNjlRQncKLS0tIFZiY0VYVkVuYk9LemxtL244bks5
+            VXFVajFYbXNHYlYvMTlQc1NNaFFaRDAKOk70/HMHUpN4VOpRVzOVwWeZVWBibvTb
+            AOqERqk/ml/uEmRQ31T0mx8+GAYkWxcMgVZP6236rFx4GgmMB1+soQ==
            -----END AGE ENCRYPTED FILE-----
          recipient: age1ll6hj5ggruetgjwjfnplpn5xtq35uhlcdflksx3xmnjm6s3uad9sz70jkf
        - enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxVG13RVVweGpRM04vMWxG
-            V2hMMnp2Qk5Ub1BZQWNKNXVya3J4NGpreDJrCktqajVPRXdEL1BMU1dMbDhmU01L
-            UlQvRVQvcEFUZVZ5Umc3Y0hMUWNLVFEKLS0tIFgzRnF1RHdQdktDVjROSURYYTdx
-            NjAydjVuV1VCOGZoVFdTZmw1YmJ0eEEKN9KRGegafu1sjHlhyn4KCMPPAKxsSZLc
-            QJkei1ZQ0AVgC2QfCVEXonMOrs45nCIplG+uyER9khZyyjKObWk1pA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFb2liZEs4b2NKdVAxVkJ2
+            Ty8rQkVWRWdKKytUSCtSVllLc1BYbldtc2hnCjNpYWVmUnFLV0FNM2tqVlJiN0Jt
+            NTY2YXhBSWNIcnM2VTNmUnBVZlcrSzQKLS0tIDdNemplMzZjZms2WDUveVFTNDRu
+            OTRwejhjak9RMmJTdkFtRlBOQ2xsdUkKV55k3mp7xxyt2iYNsnoyR/4RAvv2Gvl6
+            wSdduUF0EcmOTaxJ1VWva85dbBWslXo0L8ropCcEiXgVy+xwh7VLzw==
            -----END AGE ENCRYPTED FILE-----
          recipient: age120le4a5l8dh3lyfgvmj3d9ksmej6ajs5mer5y7r0vfg3x9fn69dqf8xgzu
+        - enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqYlRoOFRKK3BrR2EraXdq
+            b1lpVnIwUkRxUlhwcldkL2JRWDM2TzVNZHpzCmoybE5PYmNUUlVETFVaKzBoNVZo
+            RkY2dTNEdzU0QTBpWThhRGF1MURNdVUKLS0tIGdoYmlWaHA2Ykxla0JGRXlhaU1V
+            Vm14emg2b2dJeTViWS9pYzFObGYwQ1EKGI6jTgR8zSPzsB2CJ2s+EAEFSNhYe8Iv
+            dHtJTJQYRKx7Uq5j5EesV/uf3DKi9fa12nwzX1uINCTkJF/DHKrM2w==
+            -----END AGE ENCRYPTED FILE-----
+          recipient: age1qz9d4ka4xgexujyd247s7lp737sulp5fhxl5d65fj2ykvc4j4edqrsdks8
    lastmodified: "2026-07-19T02:30:40Z"
    mac: ENC[AES256_GCM,data:UiL3VMDF6rq4Nr87KspcDx434q3tfNXeb5pwH2O+4ssNQ6xzcYDdzXBnhAY3zLBsqPMKrvHBd4Ot/gEMcq3FMIVe7Q6p9yWKpep66KZ/yWEhAlwIVhD79Oj8VS+1CHKjf25zpRdhZorp04oeFQQd9VfjJB4EE/Q1aVbwTGlpIic=,iv:i/0conaFgFia+wzNTdUL6tlSTw35HTK3Ap1Sr5RGHf8=,tag:ULbz5FllShA/JjlSRdxA0g==,type:str]
    unencrypted_suffix: _unencrypted