From dedd69dc42b6cf388adf0b04876f7720dd6ccbdc Mon Sep 17 00:00:00 2001 From: beatzaplenty Date: Tue, 28 Jul 2026 10:43:43 +1000 Subject: [PATCH] secrets: add IPA keytab for nixos.sweet.home --- .sops.yaml | 7 +++++++ secrets/nixos.sweet.home.keytab | 14 ++++++++++++++ 2 files changed, 21 insertions(+) create mode 100644 secrets/nixos.sweet.home.keytab diff --git a/.sops.yaml b/.sops.yaml index 2b572a6..d9062b0 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -155,3 +155,10 @@ creation_rules: - *lxc-tailscale-router - *proxmox-tailscale-router - *linode-tailscale-router + + # Host keytab for nixos.sweet.home FreeIPA enrollment (binary sops file). + # Generated by scripts/ipa/create-nixos-ipa-host-account.sh. + - path_regex: secrets/nixos.sweet.home\.keytab$ + key_groups: + - age: + - *admin diff --git a/secrets/nixos.sweet.home.keytab b/secrets/nixos.sweet.home.keytab new file mode 100644 index 0000000..a545b51 --- /dev/null +++ b/secrets/nixos.sweet.home.keytab @@ -0,0 +1,14 @@ +{ + "data": "ENC[AES256_GCM,data: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,iv:UnpS8KFuNVtdYa/eCMWtQlm9awwNDgMU3Cy5x7Vfycc=,tag:NlGOfcg59NdwXJJesTZ1/w==,type:str]", + "sops": { + "age": [ + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3ZEdXUEF4WWhPTGFFcWkr\nV3ZsVjl2SWQ0V3VjeHdjVmJ5ZnRGcExPN0ZzCjBZbTNVYWlqd0NnRHZmSUpObC9s\nUUhJQkp1em9YeGxGaHN3ZjE5eWFPSEEKLS0tIDdOSWU3b1pRSzBxMDhIWjJ4SDRO\nRVA5S3FVSFZGRm5XejdlQytCL2k3NmcKFeQ/nRcuEiFwgJEDj8z0KMeyEcFGbG35\nBcuM5cUh5qLArOQlONThmOt/Jepfo2dMPblQ6kd0zSqWfLNqZDg3Hw==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age1njap586hc0q43kr03g6c8eqhdsmk8zcafkl3f83xwlc2gqhlmfgs4tmwad" + } + ], + "lastmodified": "2026-07-28T00:42:31Z", + "mac": "ENC[AES256_GCM,data:IiLoY24bVjvbsA3bd9a6/OEw0PDkHm1Uc3OiHG2FlOxAoPhb6zvE5t2tpZyqeT2goIYv+mr4C/y8BYSsVcZr1FtgqwYx7Y5eiAq9uVzFQ838TDN5ndgkKYrbyPwHSKCHCrOPZ/jDiQTSSO/dv1R8cQHfBf8kX5GEt6ovtGvI2AY=,iv:PctMMNSv0iPZYATsACcQ0aqgFME7xGGCD915k/RiuEI=,tag:Pxaet5zPXIYicExNRFyzGA==,type:str]", + "version": "3.13.2" + } +}