Add ca host to sops

.sops.yaml

@@ -8,6 +8,7 @@ keys:
   - &server_nixos-test1 age1gcyfkxh4fq5zdp0dh484aj82ksz66wrly7qhnpv0r0p576sn9ekse8e9ju
   - &server_inc1 age1g5luz2rtel3surgzuh62rkvtey7lythrvfenyq954vmeyfpxjqkqdj3wt8
   - &server_http-proxy age1gq8434ku0xekqmvnseeunv83e779cg03c06gwrusnymdsr3rpufqx6vr3m
+  - &server_ca age1288993th0ge00reg4zqueyvmkrsvk829cs068eekjqfdprsrkeqql7mljk
 creation_rules:
   - path_regex: secrets/[^/]+\.(yaml|json|env|ini)
     key_groups:
@@ -21,6 +22,7 @@ creation_rules:
         - *server_nixos-test1
         - *server_inc1
         - *server_http-proxy
+        - *server_ca
   - path_regex: secrets/ns3/[^/]+\.(yaml|json|env|ini)
     key_groups:
       - age:

secrets/secrets.yaml

@@ -10,83 +10,92 @@ sops:
         - recipient: age1lznyk4ee7e7x8n92cq2n87kz9920473ks5u9jlhd3dczfzq4wamqept56u
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLTG8vUFZpeXpoSHFTZjlN
-            d1Jub1F6WnhZQ2FoOVEvMWxyMzhvKzRoaUc4Cittd05yYm00VUFTOUZSNFpPaE9i
-            NmVKVmhreG5hVFJtSm5ZR3RjbmFsNk0KLS0tIDNTSmxjQncybTRtamlqL0g0eExk
-            aG5hbjZzOXRIZVE5QUtXZXgwTmtXZ2sKxc9ueZ4k6LweCtSITa/piXMNEgtJ4Rgh
-            XqanVNqrmuPaNyrSbf8vDuwJbaXNTSU5nySjEkkfpUtBVVD5E4ivTQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxQTVka2k2dGpvekhJeWU5
+            M2VFOWh0S3RsbzBqQ2lhL1VQQVVvKzA5QldzCllVZk56SndDQjMyRzljUVdiQ1Bw
+            eWx3bnZ5NWg0RTZ3aGtFbHp5RGQvNHcKLS0tIGxFVFA4R3NQcnNnZzR4a0pQdnFs
+            dERsUjgzaFQrY0VTZFRDbVhISEwwelEKE4LcpxhwEaPOkO7uHqI6DpYNGTNjoRtw
+            6IeDTOLlx07CMHQ/9hWbUwKyr51FMJGJ7Q5rgBKaCFgCfKBF1ssGVg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1hz2lz4k050ru3shrk5j3zk3f8azxmrp54pktw5a7nzjml4saudesx6jsl0
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRNG9qT0RCbVFwY3Fyd0VB
-            TzBvTG1ENEM2SFRUOXVUczdJQis3ai9JaXdZCkV5cVp4elBEVm1rYS93dkJtaW5X
-            RWxRbzMzRmtwK1ZXa0ZHdkdrSyt3ZVUKLS0tIEFwcGt1ZWh1RHBUTXJZT0NTN0t6
-            eEtaUDRxYmR6YUJJR01HNW0reUthdzgKgtKA14llO5cuyLg/Fpoe2BQv4QquDaNW
-            RuFefJ5VAacdg43FLZ8z8xaQWpWFxGWHsvhgzJlG6Dd8t9qxyzDg1Q==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPcitIbE95dVo2SHBVNEp5
+            UlVpL21peTRRZWxTcThxaWZQdmdlRmloUHdnCndFQmFTWHdqa1NmZm1vVVRVSWk0
+            QVJIanlPSUc5WTZqYVN2ditZVFpLL1kKLS0tIERvTmQwYUdSMWlpWkdtSWhtbVJD
+            LzV1VEdObXRHYnVBaGYrUDhPU0FXU2sK5wPshVZNc+KdOfEv449VSOn81u7MNLZT
+            xKtBEwe2H6FOxyauLrpfrTo5dAWnRhSsIHiIR2e6WjXajTjVPOpWcg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1w2q4gm2lrcgdzscq8du3ssyvk6qtzm4fcszc92z9ftclq23yyydqdga5um
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXYUV5eDBaSFNrM20xVzVD
-            UWtDUXN6cVpRUmw2ZFI0UE02K091K3RlR1hvCmQ5S1BFN1c2SnhHWEFGNlBxV0VQ
-            YXZITEY3bDZVQTZGYlNRN2RsVzdjczAKLS0tIDYxdS9lTS82dW5VOGJwY1h5TzBG
-            c1JMbkpKbFhyRkd3blVyKzNnNzhxckUKSZQxrLFzRzrEWBviCfj1HO0o415RPw04
-            wiUtxO1FJBk5QDEIKuBlXAElwpzaREcjMQAvPp8V24whUe6ryvd+IA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxR3FmRnhzZUd0eEoxbmRo
+            YzVaakl0eXA1dy9uRlhyc2RyeUlvT2VkYTFVCm9CcEI1a3FQL2piWHo1NWRvK0Yz
+            NGM4SFRtQnZRNHVrZm1Cemw2SWxJNTQKLS0tIHFKYWMwdVltbzhKVTUvOEdXTE9T
+            aStOZndTL3hITmVZaU5qMlhsLzl4dDgKWm2cGdCeIKjggE/udnuor4xhGVNcb6vk
+            yKNXwD/tWMI+fykp3S+G8Aqt8vWXRbQbx4ITg8iVVZudi2SIf50rGQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1snmhmpavqy7xddmw4nuny0u4xusqmnqxqarjmghkm5zaluff84eq5xatrd
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxVGV1bC9rMXk0UitRRll0
-            OC9HeUFqYmZGa3dPOGVHRnNHeVZqRGczVnhzCjB2M1UxdHNEZzRodlg4dkwzcmsw
-            L0plRjh1UE4zZEVjRGR3eGFyY3BaVDgKLS0tIFJmeWhDK2JCbUZZKy9IMjloT1Fa
-            Rmg4QXpSeWxFd1FSWUJPYVlXR2JQVzgKfBO4bCsC7z7y6z/l9w+Inyg7mtXoyH0O
-            Jc863UQrUkEJ48GmTnN2C7sswTPBhh85dbx3Xo8LPmQgOSGwhavcBA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMM0dabXVDVUFJZld5RmxT
+            MFJLMm53VW05YVJ5RFk3YkxFUE5aS2UxVndJCmVLMkw4UnBwK205cTJVN3laTmN0
+            YnRqSlpzL3JaUEFWWnR6SmxKa2lHNHMKLS0tIEtsMGR5Y01PRk5RNGVyMWZUc3dW
+            ZXVPRFI1eFJLYkJyN0YrU28yenJhNG8KBmM0oIoMMmT9tBmfvaoxumCwwM/X9khd
+            XkSdNax6HfovIylzoChJ6srIZ5BmTtA2ioKMna/kif57PD5nDU7Kmg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age12a3nyvjs8jrwmpkf3tgawel3nwcklwsr35ktmytnvhpawqwzrsfqpgcy0q
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzaFh5VHJyalRpczRZMUh1
-            QVdNU2ZtemtBaUxUNzNHU051UjVXemExTlM4ClU1QnJHZ3RhRDJodDF6eHRLTWla
-            c0pmQ1lNazltbzNRVFR3UXM5TFdpMFUKLS0tIFhVQWRzb08vajhhaS9YbHhDTnZJ
-            MVZwc05CSmFvTDF2RmxPY3hMNWlrWmsK3Wg7ksOhLqoL0OwHcqWHwSWaossr8gZV
-            jjkk4v7KP2/dIw9AqHiibQUIenHZvenejYdPKR7T0nMU+FT0G+36PA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2SzVlS2pBZWZGUzIvZ0U3
+            VDkrcmRESHh6MG8yNUZBRlEvam9SeUJseXpFCkVMSTFiTmsyMWEwNVg4TmdaeEdo
+            K09GdTdkR1g3bUJ6dFpZaGZKTjY3aW8KLS0tIGcxalhyVGlCM2hGdGhCL2dXTDk2
+            N1gxdGZJSDVGUXFwTStoTFpXQkdUT3MKQ8c3oZfGxloS/eJByG2i25Cg3Gg9I65P
+            eqA+Jx5SWaM+DyYIxe7HseoPA0jwK5hUEJfcK+HK4N6ErbnG7n8byg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1d2w5zece9647qwyq4vas9qyqegg96xwmg6c86440a6eg4uj6dd2qrq0w3l
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjSHFwZlNnUTVzWmdTSDJz
-            TzY1Q1p5RXBQbk1kTm9OZWtnUzhKUitHaVJNCnBXY2R6eUd4UzcvLzJuWWFOZWFT
-            cTUzMVltWFZKaHJ2b040VVhhY25XQmMKLS0tIFNIM2RqbnNGWCtBbWlwdWpCUFZh
-            Y3lySUZEa29HVFRlVTJ3RlMzeUtkNjQK3b4xf7bpHVEptl9288mKiI7lT3UHSTsp
-            oCmKjXFNKk8g3IWsGOWjZvZKGafAtmzMWUeTyXGGjs7fKoVvsQeUdA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrZGt4ci9WcEE5dnN5R3NB
+            UC9pZG5iaE5yR0R3dXN5SlFpaHhwclFBVWc0CmFjUnB3QU9neVV6S3haRml4MTJC
+            QVpBYWZnQW0rZUcyWStIUk40SXZpZFUKLS0tIDczeEpMRDdDV25OaXV4aDhoTHFH
+            NVNyVEFqc2kyMjFtcEUrdjNMdjkrS2cKGOkOhsy/RPlzQJz3vVt934rtg9sFiM1S
+            3w9YN1VjzNW7RYG7Ro+Jtoli7/2j1So1uHiATS8JBcpTjO1BWEiSMg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1gcyfkxh4fq5zdp0dh484aj82ksz66wrly7qhnpv0r0p576sn9ekse8e9ju
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEdDdqQ3d3WUJRKytVK0p3
-            QXVOUUZpMUtDMlptMVJIVy9WejJBRU43Y3gwCmZhYStWNWcwZDUzQXlJUUVLUVRH
-            R1Izck15VlpNUENJQjZGUTlQUG51MzAKLS0tIEFYS2pBak55MCtObUI2NlB4dUsx
-            TE00d2o5V3JBUTlRUFZXdTk2OEFNSmMK0iXL//00N0nHaSBpSMzdT8rOclX8M0l6
-            8NC0/ZM8CUCT0nkp6rOWov1mpzrIAhUBFI1eorL/VmJoOBFxLTLa2Q==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoQjNEWVR5UlVZZ1NMcTEv
+            ZnUvM3ZaeUNsTGxwVjQwL0kvSTRyUnhhMXgwClpTV2ZwLzRVVlhOTTN5V1VTS2pG
+            bHpCZlZ2SU1wTTJiZWQ3eHd2SFE5QmMKLS0tIG0wZFBvNXZlTTVwZHNRRXhEV1Ft
+            VXhjM1VESWhzcHVDY09kUUdvWE9QbU0KH2sUKQNQg4w9/Te85YfRMM5Cx83I4tEV
+            Am4FMHpf3b9cVyhI+gNds5ROrhvox7VYW1rtLE43ApAnj9Jtj7qcMA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1g5luz2rtel3surgzuh62rkvtey7lythrvfenyq954vmeyfpxjqkqdj3wt8
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5ZHdQallzQitNK1k5WUhD
-            d3laTTFXOVdMUzhXWWxCL0QyNG9oVXlZYnlZCkNObWtKOGlnNWVPSDJGUlVaOE1W
-            SXFmY0xraHN6NVFGWDJCSEwzLy94bTgKLS0tIFkrWkxhSVkyQWVRNzBuMi9vN0Yw
-            OWN2R3N1NTNMbDN6azlGM2NrYkxHamMKfE9rxusaV3S/KJFBL43Bx39IZAJruAGV
-            8g7BMk1F3UD1Iw8AUHGmcRSnhQaCMgUMfD78PcMXvJNYDOU+3n3HJA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTc1RhaHdDa0lreklQNXBv
+            cFk4OUxqcENMOW5nMWxtQ2pNeEpYK2ZWczJrCmJzL0NOL2FXa2RyS21oTzZyVTNK
+            eExiUktRc3U4YU9hNnFQdko5ZmdMY1kKLS0tIHQwcDFxbjNoSXdWSjdQd281YTJC
+            LzN0UFVYTXdrU0pPZDFXODgyMkl4WjAKE0B30QO2gVITg3C8AG2/nW3jZHnEsL02
+            pnlhQSpN4L1awQL6xcKk96d3n57pa+Hz2ah3fNkDGLw9vm8pNwVmiA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1gq8434ku0xekqmvnseeunv83e779cg03c06gwrusnymdsr3rpufqx6vr3m
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvNjFMWUpzVkN1dHluOVRL
-            OG0yaUNJTFRGU2NNQzdSSjJlck4zeHZuSFYwCitWSGxLT2kzLy9pU1o0dHBYbGhE
-            cTdiVVdsNGxOdHJGd0RTS2d3YWFRQWsKLS0tIHIxSXh2M3FUcXRWUWdLeUN4TFRS
-            U3RIeVZlQlBCN3grNFFTVkZDZ0hLdHMKx6pzx7knV5eTNr/5sF0i6/z+k+l70cjo
-            2xUEgAXjLvi58lq3fHoomXoz9n1MaN5wpSWiUW/MohJr6/8NHuE5xQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiNUx4UDEwdGRUaVdQc2xp
+            cjM4c1ZEcElOdk1uS0ZwRDFCZDBZQ2oyV1djCm1rU3JLcVJHR0VPV0h0OEFML3Mz
+            YkFJZUpvcXA0c0owUGlBcFJYNW1abDAKLS0tIHlUQ283anpwWTI1SklGUDAwVGFZ
+            QVdTd0lhZklUVC92QnJmU09sd2xybVEKXJ6fb3zFZntL1/WxtHYvamywN08kUplo
+            kIiSRv+mJgRu5h35gih47q9vymcs8FEIdgDotztGS7qr+vV7ULP7KA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1288993th0ge00reg4zqueyvmkrsvk829cs068eekjqfdprsrkeqql7mljk
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxdFBScjZNTnNPZWhHblFm
+            YkdlSW4yOFFsUkZZaE5hdE0zcXJmNkV1L0ZjCkJTVk1VQzByUnBGbTZFQkdCdktV
+            VS92WkZkMy82ZCt0bVV1Mjhjekp0MlUKLS0tIFFyZjFvVVhUTnBVUVcveUNzVUpJ
+            K3J6UDYvajZzeEhFb3M5eFh5OExqOEkK1AjfgMEImokKS7ei9ASMyTNzdhvUznI5
+            soMhl7O9P++xyRSzPW+vEMyJ7Nr6YvzjbS3pyQa0eoAibVvUXmFM8w==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2024-06-02T22:09:06Z"
     mac: ENC[AES256_GCM,data:cxJq4EMEMVEw0IUXNwtyQj4MaYIJ/Xo4OaY+3VLgIhYw6oBO9CmJxgLuXcSnGnr23oNE5OQF6ALv+vxF46D1pI0V1zhqKL6zMIs0DzPBwo7Arg166w5kGAT274jK7YWymeJ7fafWXYubLlGUthyVJS1BkvlqIhoe2BlTZ3bPyBs=,iv:Z2Uh9Oo4q/ce6DDLShs7JAX3XFNAVOGBmBPvRbGxaaU=,tag:6qZhZ4+tgtXl60b0Lx7Taw==,type:str]