secrets(ha-docker): add clan SSH host keys and re-encrypt common secrets

Archived

Adds sops-encrypted SSH host key pairs for proxmox-ha-docker-1 and
proxmox-ha-docker-2 (clan vars), and re-encrypts secrets/common.yaml
to include both hosts as recipients so they can decrypt on first boot.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DASH15okNvWeY1rVJmyJoJ

This commit is contained in:

beatzaplenty

2026-07-30 19:34:57 +10:00

co-authored by

Claude Sonnet 4.6

parent ac9099a1f2

commit cee33aa2d8

5 changed files with 158 additions and 137 deletions

vars/per-machine/proxmox-ha-docker-2/openssh/ssh_host_ed25519_key.pub/value

View File

				`@@ -0,0 +1 @@`
				`ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPwfEcHZRbdI5GK9cn59SDrLruNOJJEjVfJXZve25nnE proxmox-ha-docker-2`