From 9c0b74d73131489cec5fda1425254502916665de Mon Sep 17 00:00:00 2001 From: beatzaplenty Date: Sun, 19 Jul 2026 15:06:59 +1000 Subject: [PATCH] updated sops keys --- .sops.yaml | 2 ++ secrets/common.yaml | 49 +++++++++++++++++++++++++++------------------ 2 files changed, 31 insertions(+), 20 deletions(-) diff --git a/.sops.yaml b/.sops.yaml index 2de5cf6..98b3b19 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -3,6 +3,7 @@ keys: - &docker age19gfn2yedg76dmztm4hncr7vf3r3c9j0qpt4rap7y7gersjk4m3ks2lhd0e - &server age1ll6hj5ggruetgjwjfnplpn5xtq35uhlcdflksx3xmnjm6s3uad9sz70jkf - &nix-cache age120le4a5l8dh3lyfgvmj3d9ksmej6ajs5mer5y7r0vfg3x9fn69dqf8xgzu + - &lxc-minimal age1qz9d4ka4xgexujyd247s7lp737sulp5fhxl5d65fj2ykvc4j4edqrsdks8 creation_rules: # Shared across every currently-deployed host: root/nixos password hash, @@ -16,6 +17,7 @@ creation_rules: - *docker - *server - *nix-cache + - *lxc-minimal - path_regex: secrets/nix-cache\.yaml$ key_groups: diff --git a/secrets/common.yaml b/secrets/common.yaml index 3b8d7e1..c32a6f4 100644 --- a/secrets/common.yaml +++ b/secrets/common.yaml @@ -5,40 +5,49 @@ sops: age: - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6NkpZRzJuMFNuV09WamR0 - SERDN0VSUlNQbkhSem1EeFlxdlhmdUx0S21JCnY1VkRBQTBqcW9JRHpJWEtJSitN - dHkyR0I4ckNkWkpGWHAzZGRaZkhJalEKLS0tIHRrU3RhU3UxN3B4NHdLeStuSXQ4 - anFkRlpMTHowZzJNdnY0MExQcXd4OUEKgbT7uOSFkfEs6t3X6jmGOiC28lDJWF33 - 50f2fZ771ylhHa6WJMetGZ5cwl9r1RCaDiWyJEaqNGe7NqARlhr3EQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHS3Fkd2JMVDk5NHJSTVhG + QUxtQy9qVTdITVU4Z0N5Ty9WMnZYZjU0UXdrCnVLTWhCWmNyOHhYMi9mSFpPK3ls + YldJTWcxK2dNL3RpSnlRZFlwTHV6bVUKLS0tIGhjK25JNlRMSkJhV1o1a1JNN29J + NjViQldhSUZXTmJjYjhqdTdhY1I2YjQKYTTPfc5qx6Sxc1yuvol6JmkkJEM3pELk + gPgW5dfS34CKhCt2GWwEdIpOcMNEqL1+0iXboR/cjSGeUK7PP8iwOw== -----END AGE ENCRYPTED FILE----- recipient: age10nd382a9klsn2mrs60emdtsxe43pht3a0m9p29phfrhy0wfyt3vsq9r667 - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDamw2ekY0dFZyOGNJelVa - ZGlNK2VNOWtWNTRzU3o2aVJvRi9CME5yS1JFCndlamdFMzVRTnoyVE1ZWXZkTjRR - eWdSZzZERHE5VElrOGZvcE4vK0g2d0EKLS0tIG15QlVyalZTK2NpVDdWWU4yUU4r - SkFncC9rZkNKUS9MSmF6WGQwOENwZTQKs5kLNLdQJoZtcsw3zlUWUUtJs0MJnuvw - o5vziOswRnuXENw//xN01nMDC6Ckzvb+q9GFIyxHLE4j3fT5XdZakg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2M2ErTkRNSTJ0OHlLSXJ4 + S3haYVN4VXd5TE5RRkpMcEU3TkFYNDFUV2s0ClJ1ekMxcUJ0eFhtcytpQU1xcFAr + MjBwWVdlMnpnYm5peDUwU0NJMEh1S1UKLS0tIHZZOHZQYWlHZy9xVVdrNTBaWDFX + Mkd6a3JYMCtDT3ZSZU1MNWVlQkszbm8KIKVVNVCkptOMZ99sqpEqB52hCEAb79xA + pQtGpNtXgP3v/dkGlAAgXShcf/w+owzr62NuPCzZZ5yJzKUC+E8F1A== -----END AGE ENCRYPTED FILE----- recipient: age19gfn2yedg76dmztm4hncr7vf3r3c9j0qpt4rap7y7gersjk4m3ks2lhd0e - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyaWpWTGd4TEVoaHg4b3hm - S1o3VXdkYkZCS0QxcW5hUWxyVjFneE5aSmp3ClNsdEZoMHpPUzI4K3B0ZnBYMlEw - MkJyd2NPcGJDZzgvc1EyWFBhNVlGUVEKLS0tIEptYXI2bnJHZVZGR3hSSm1sMlN5 - ay8wdUh6TEowL0ZiUWtqbXl3NzhYOVEKW9l4mr+MLhuXA8sgQndaU8NiFeCMcxhG - qjKFn+mu2GFbwfZWAy6y/KUd9Ug4H6y3pNHlJMHupTu8v2wZ+3S4EA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRTFZ1T0ZlVTZBN3dVbVNL + bUxZMEMxZU9sUVdZZzMycklWa2UxY2ZnekE0CnI4dWxta09NdHNvRTlGRjYrSlcx + bG12ZFlZc04vWnpBcjhxV3ZwNjlRQncKLS0tIFZiY0VYVkVuYk9LemxtL244bks5 + VXFVajFYbXNHYlYvMTlQc1NNaFFaRDAKOk70/HMHUpN4VOpRVzOVwWeZVWBibvTb + AOqERqk/ml/uEmRQ31T0mx8+GAYkWxcMgVZP6236rFx4GgmMB1+soQ== -----END AGE ENCRYPTED FILE----- recipient: age1ll6hj5ggruetgjwjfnplpn5xtq35uhlcdflksx3xmnjm6s3uad9sz70jkf - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxVG13RVVweGpRM04vMWxG - V2hMMnp2Qk5Ub1BZQWNKNXVya3J4NGpreDJrCktqajVPRXdEL1BMU1dMbDhmU01L - UlQvRVQvcEFUZVZ5Umc3Y0hMUWNLVFEKLS0tIFgzRnF1RHdQdktDVjROSURYYTdx - NjAydjVuV1VCOGZoVFdTZmw1YmJ0eEEKN9KRGegafu1sjHlhyn4KCMPPAKxsSZLc - QJkei1ZQ0AVgC2QfCVEXonMOrs45nCIplG+uyER9khZyyjKObWk1pA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFb2liZEs4b2NKdVAxVkJ2 + Ty8rQkVWRWdKKytUSCtSVllLc1BYbldtc2hnCjNpYWVmUnFLV0FNM2tqVlJiN0Jt + NTY2YXhBSWNIcnM2VTNmUnBVZlcrSzQKLS0tIDdNemplMzZjZms2WDUveVFTNDRu + OTRwejhjak9RMmJTdkFtRlBOQ2xsdUkKV55k3mp7xxyt2iYNsnoyR/4RAvv2Gvl6 + wSdduUF0EcmOTaxJ1VWva85dbBWslXo0L8ropCcEiXgVy+xwh7VLzw== -----END AGE ENCRYPTED FILE----- recipient: age120le4a5l8dh3lyfgvmj3d9ksmej6ajs5mer5y7r0vfg3x9fn69dqf8xgzu + - enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqYlRoOFRKK3BrR2EraXdq + b1lpVnIwUkRxUlhwcldkL2JRWDM2TzVNZHpzCmoybE5PYmNUUlVETFVaKzBoNVZo + RkY2dTNEdzU0QTBpWThhRGF1MURNdVUKLS0tIGdoYmlWaHA2Ykxla0JGRXlhaU1V + Vm14emg2b2dJeTViWS9pYzFObGYwQ1EKGI6jTgR8zSPzsB2CJ2s+EAEFSNhYe8Iv + dHtJTJQYRKx7Uq5j5EesV/uf3DKi9fa12nwzX1uINCTkJF/DHKrM2w== + -----END AGE ENCRYPTED FILE----- + recipient: age1qz9d4ka4xgexujyd247s7lp737sulp5fhxl5d65fj2ykvc4j4edqrsdks8 lastmodified: "2026-07-19T02:30:40Z" mac: ENC[AES256_GCM,data:UiL3VMDF6rq4Nr87KspcDx434q3tfNXeb5pwH2O+4ssNQ6xzcYDdzXBnhAY3zLBsqPMKrvHBd4Ot/gEMcq3FMIVe7Q6p9yWKpep66KZ/yWEhAlwIVhD79Oj8VS+1CHKjf25zpRdhZorp04oeFQQd9VfjJB4EE/Q1aVbwTGlpIic=,iv:i/0conaFgFia+wzNTdUL6tlSTw35HTK3Ap1Sr5RGHf8=,tag:ULbz5FllShA/JjlSRdxA0g==,type:str] unencrypted_suffix: _unencrypted