torjus/nixos-servers
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects 1 Releases Wiki Activity

Add ns1 key

Browse Source
This commit is contained in:
Torjus Håkestad 2024-03-13 23:24:19 +01:00
parent c042dcf8e0
commit 50c1177f82
2 changed files with 26 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.sops.yaml
View File

@ -1,5 +1,6 @@
keys: keys:
- &admin_torjus age1lznyk4ee7e7x8n92cq2n87kz9920473ks5u9jlhd3dczfzq4wamqept56u - &admin_torjus age1lznyk4ee7e7x8n92cq2n87kz9920473ks5u9jlhd3dczfzq4wamqept56u
- &server_ns1 age1hz2lz4k050ru3shrk5j3zk3f8azxmrp54pktw5a7nzjml4saudesx6jsl0
- &server_ns3 age1snmhmpavqy7xddmw4nuny0u4xusqmnqxqarjmghkm5zaluff84eq5xatrd - &server_ns3 age1snmhmpavqy7xddmw4nuny0u4xusqmnqxqarjmghkm5zaluff84eq5xatrd
- &server_ns4 age12a3nyvjs8jrwmpkf3tgawel3nwcklwsr35ktmytnvhpawqwzrsfqpgcy0q - &server_ns4 age12a3nyvjs8jrwmpkf3tgawel3nwcklwsr35ktmytnvhpawqwzrsfqpgcy0q
creation_rules: creation_rules:
@ -7,6 +8,7 @@ creation_rules:
key_groups: key_groups:
- age: - age:
- *admin_torjus - *admin_torjus
- *server_ns1
- *server_ns3 - *server_ns3
- *server_ns4 - *server_ns4
- path_regex: secrets/ns3/[^/]+\.(yaml|json|env|ini) - path_regex: secrets/ns3/[^/]+\.(yaml|json|env|ini)

39
secrets/secrets.yaml
View File

@ -9,29 +9,38 @@ sops:
- recipient: age1lznyk4ee7e7x8n92cq2n87kz9920473ks5u9jlhd3dczfzq4wamqept56u - recipient: age1lznyk4ee7e7x8n92cq2n87kz9920473ks5u9jlhd3dczfzq4wamqept56u
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYNTg4bjgwNUhWUDUwUCti YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHRm9md0ljQnliWURlc0Vs
WEEyQit1bkJXU0pFSFZnVnJoZjBqZlZURWxJCnRDTHppMDZhcitDZnEyeG4vNVND UjgzeHc4eUMxWElnajlDNDU2cE5iY1dmc1dnClZQdklpcDVLTVNWMnhycEt2RWNV
d2pxTXY0TXozRm0wY2JKc1ZxVnVMMXMKLS0tIDJ6ZjhjdDhsRXZ2aGVXT2piaDVa Ni94VmpsTGR0TlpMRXpKRFRJZVFRUjgKLS0tIFl0c21Cc21PN1lBRWhRU09kQ25x
VnN2b3R1YlpGQ3BRRXhYbGRtalN3YmsKNQoLS9Ay2RhC6PduwOfZN0oc16C/zxzI SWZEL0FKZndZK2VtbklEQi9DU3E3MVkKhK1Rn07gwLmML/0br5Lj9tVExtLoj0AW
d/Xhd+UGtCqexd+IpPT1PAHRYrN2pDVCx7cF+HPBs2HfSV5S91uJWA== n+ZSSVME69jvN5mV85Pg0ma2IRq0aXmk8mgumqp3bLSVIHH70jux3Q==
-----END AGE ENCRYPTED FILE-----
- recipient: age1hz2lz4k050ru3shrk5j3zk3f8azxmrp54pktw5a7nzjml4saudesx6jsl0
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArN21uUW9Mam12QlZRMnBM
VWhJOUhURFV3dm9iRlNybm94SGd0blFQQmg4CktieCtid1c4S2RKTnBoMmtzNHBI
aUora1lERWJaYWtyUW1hOWFvNjNmUmsKLS0tIFFEWTJ2Ri92LzFTNVZxbnRqVWZB
VTVhYzI0ZCtSSnhmK28xeGw0WTJIejAKGccsszcGGF2TukY5vVwFknkUNNoApLJx
uKr6SfEThXyBXw19fiWRn4v+8HMMtEMFL4K/J7RfUjHGl7RCAGtWLA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1snmhmpavqy7xddmw4nuny0u4xusqmnqxqarjmghkm5zaluff84eq5xatrd - recipient: age1snmhmpavqy7xddmw4nuny0u4xusqmnqxqarjmghkm5zaluff84eq5xatrd
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1WHFkd2ZHT1VGbm5xb0FS YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAweFp5MVlnTlFKRGZOQlFt
R25EeEFocjJrMDhpbHBTQ0JTMlZqUzNOS2lFCnkzWGovSWkrTDFGZlpod2syRExW bklFamdSaGFqMlBRUXFVaHZ3eW11Tzc1TlhVCkFSSmNUTk5RaVV0SkVYeDQ0OVFi
SXZHaVUvT2tPa1lTckRFdGtNRGlUNEUKLS0tIEVHNnBpN0Y2bE9ROW95L2RpK2p4 MHpFWFluUll1cWkzYVIyRlQrc0MzbjAKLS0tIGNEM1ZrYVhwNXVrV0t4ZFNCeitx
ejlkZDZQaUVJRTM2OElrdFJXaHpybHcKY3ldigrrcM5HQ3higsJ0CGTKhgILm20P QmUxQ1ZGbnFZcEwwN0lvazhWais2YXcKNPk7wAbiHSuHhPE0Mb1la75MSQEjm8Y9
N7MbFw+y97PoWkkq8kd+0rbMxbY1qOIK4w4QFlLLqzTsCZCmCipV/w== 3JvDaFBTS4IFJoJPRU+7GaHYm254xQXZhj6EabpQ454ZaxIZ4agYCw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age12a3nyvjs8jrwmpkf3tgawel3nwcklwsr35ktmytnvhpawqwzrsfqpgcy0q - recipient: age12a3nyvjs8jrwmpkf3tgawel3nwcklwsr35ktmytnvhpawqwzrsfqpgcy0q
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0ZkZmUHhwYWVSbHhaT2hS YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLbnRSOTRvaFRhOXY3U3pR
NyszRmxCT2xPdSsyOTliLzZob0M1V1JxQWlNCm5lRTNBaGlTaWw5V1dTZmZoRC8w K1pDOEdWSWtzSXBDVVl2dEdRQ01hS2tiVEdJCkI4K3REWC9ZQnkrYk1kK1lvWk5K
aG9xOWpXeGFwUEF4ZUszbGlYN1VzWTgKLS0tIDYrWFFXd1VsdEVCRnZRQ3FSQytW QVAwNjF0Y2d1Vkg0WTBoT2xvRXo1M00KLS0tIEdHemw1UitTSG1OczdNaU9xd1ZF
TnFJZ3V3ZmptbWNzRUNiOWwvTmhLcmMKJuq8OMuzSxEzanZ5jixsmWtdBXzaIMFf VWJVcUh6VlFRdlIyMUw2dUVoc0drNTAKNm/IMK3ZwbpTCREYVpfak69WBxuFpNw8
2lcU2QdZahxkvIzqgkU+RIv7EcE1zrrmBPNDmCfEVAciUq/POHytSA== 5MsTtFMQzP6xTgBBXJ32yhMTg3uZYD9txmjWk9OBRA2CF1vU2H4OrQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-03-11T19:25:54Z" lastmodified: "2024-03-11T19:25:54Z"
mac: ENC[AES256_GCM,data:GbbdzjkjicbNPoiKXpeAXzkrmQlgLUg90B0ynYfbB9JX0m4W7hfogVJ4Fcx5t+iUeG2LPkCxq7vYnD1+uFJkND1xF0rc9dGi43SBtz74giQTJck8/mK/iWyDdgDlWxtO78ghHMS5OxyapOvk+K2+Ga9zJ1f3S64lc2xqhyVSFfk=,iv:jRDgu1lSuFRv8VeVbiyx+DfywaLlZJ0Xla++M277SBg=,tag:aV757MJJUNg77//tON7h1A==,type:str] mac: ENC[AES256_GCM,data:GbbdzjkjicbNPoiKXpeAXzkrmQlgLUg90B0ynYfbB9JX0m4W7hfogVJ4Fcx5t+iUeG2LPkCxq7vYnD1+uFJkND1xF0rc9dGi43SBtz74giQTJck8/mK/iWyDdgDlWxtO78ghHMS5OxyapOvk+K2+Ga9zJ1f3S64lc2xqhyVSFfk=,iv:jRDgu1lSuFRv8VeVbiyx+DfywaLlZJ0Xla++M277SBg=,tag:aV757MJJUNg77//tON7h1A==,type:str]