diff --git a/nixos/.sops.yaml b/nixos/.sops.yaml index a3aeeb5..2b3160c 100755 --- a/nixos/.sops.yaml +++ b/nixos/.sops.yaml @@ -1,6 +1,6 @@ keys: hosts: - - &laptop age13ldedhh6ymava0d5dn54860a3f799gufknre9lfegegjt9ytes2qq5qgmr + - &laptop age1zad0qu648dhjav4pzjhkc6vswnqtacuv9230xcgle8wmv56r8ykqn0ud7y - &nixos-homelab-00 age15w5qelqemnvytp38ywdwmflc6qmrqph3dwqmx3lrec5cm5d9nchq9pfe8s creation_rules: - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$ diff --git a/nixos/secrets/cloudflare.json b/nixos/secrets/cloudflare.json index 3ffe92c..f597013 100755 --- a/nixos/secrets/cloudflare.json +++ b/nixos/secrets/cloudflare.json @@ -4,12 +4,12 @@ "sops": { "age": [ { - "recipient": "age13ldedhh6ymava0d5dn54860a3f799gufknre9lfegegjt9ytes2qq5qgmr", - "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZaWhJNGNEZThEUmVFVmp4\nK2pKeGtUK0JrZ3BuYUVYUE9tQUhZcDZyNURjClF4T2F6TjJjSmc5NUZrMUhHMDUx\nYVcwSzN1dU0rSkVYOWJHbXBONG1CRFkKLS0tIFZVelN1aDBaYkJGZk9NWUkzU3JX\nL1FzNHc2cVJtZDhmYjVXRnZ0ZFlUYWsKMuYxzIx3xdpj22ql1YYKlLZHD3uZVXm9\n5dJ7u8di2AKaUXqJLHvoE/ujDQ/IfBxoLOGho7HvuG6saGpgd3NETQ==\n-----END AGE ENCRYPTED FILE-----\n" + "recipient": "age1zad0qu648dhjav4pzjhkc6vswnqtacuv9230xcgle8wmv56r8ykqn0ud7y", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBueUFnM2lJOUFrbUVhUmJU\naHh0clBEL0tpTmszM0RKVC82MG9EQzdLNHk4ClhCQTZ1QndMMXZjc0JWc2E0SjBE\ncjJtVHhaU1JQaWpvNjJpOVp5U3hCekUKLS0tIElRc1dMN3hUUUtzVDBJRldnYThY\nMW9IVm14cnRSTEdkZjJHeHBlZnZ5dHcKffa53g4DDtAvB8aynEbV5tLFkOScAb0t\nfZCPHb9419FAOLtG9MoDmIc2vTM93XlgAUcOZZvQz04JpTQyCiHOUQ==\n-----END AGE ENCRYPTED FILE-----\n" }, { "recipient": "age15w5qelqemnvytp38ywdwmflc6qmrqph3dwqmx3lrec5cm5d9nchq9pfe8s", - "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxYjRpRHZoZE9tYzl3Nytn\nMWdlK1JIdThpd3JUV0s4TkdsSFpaZytSTXdZCjhPRzhnTHJRT3NxTTUzbm5jZzNu\nd0dVbkk4MlpPdXd4M0pjcGhRTFU1aFkKLS0tIGhUTlp6N3F0bE1CczJka3J0ankw\nb3k2cWVkeWNrdDhocHdQNXZibkNyY1EK+M58IqbdwuJwXVDOdiqKwXFj0P1opPBV\n3+/p/j96m+O7tAFD2J35W25RTchdH1ZZx+ZnECwUFb5vWKLlmocFqQ==\n-----END AGE ENCRYPTED FILE-----\n" + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1bXl1TStpM0gwZXBGa3hV\nbkFieUVXRVZGbTZNWGVVYi9NNlpDZktmdWdJCi9XSUdET1cxUkFUY3doVXhWMTFk\nMnBxanM5NU1jWVVibURiQ0tUNCtRKzAKLS0tIG5UVlN0ZUM3TVhVVzFQUm16VGYx\nZG5KcmxQT01hOXcxVHZVMzRQZnU4YXMK0y6rGmPT4ugtZQ5kFJKypVhE5sPw/0fZ\nxHXwF2DWziLa5gtJmGYqr1K95gAnIgJNotIhnbyDCCodB8OIYMLXlg==\n-----END AGE ENCRYPTED FILE-----\n" } ], "lastmodified": "2025-06-12T21:09:57Z", diff --git a/nixos/secrets/minio.yaml b/nixos/secrets/minio.yaml index d1e21d3..470296f 100755 --- a/nixos/secrets/minio.yaml +++ b/nixos/secrets/minio.yaml @@ -1,23 +1,23 @@ minioCredentials: ENC[AES256_GCM,data:IF0Npgov8XTVBSReK3ZlGbPn1fZhSc7lI0CV8UicMhAnRBHnnpOwB4mH+Zgm2U06Fp3d2xDhd2wFC7or4DxQJlSlg1LX1st9qUKjTzQvL4vyRd36d4KJnSx6e01+IyWB95IDAw95QDS6mlL3KmMsd3jP+d2Vmj4YcQ1mF8R+Ca91ClYLb/Tl05zksJScV4wX/pvWGChy7RcKNXrjufpuBU5cevD2GI06e7M0OH9apizH06j8tA68vk+iTUJaCVFs702h4SXz2oOioxnB5po92gfSX/D1dwRgr9w=,iv:LXzAkntA4TQRjpHywShd/2i4ILLnbbRtYIJEF06MriM=,tag:6Ad0h356oMyPg8F3NUIArg==,type:str] sops: age: - - recipient: age13ldedhh6ymava0d5dn54860a3f799gufknre9lfegegjt9ytes2qq5qgmr + - recipient: age1zad0qu648dhjav4pzjhkc6vswnqtacuv9230xcgle8wmv56r8ykqn0ud7y enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzczFKeUdmOTc4YWNOSmZI - b2hFS0NJNFd2T0RzdHB1T1g1b3VIZzNXMlRrCmFIWS96bmxoZWZsYVVzVGUwWVZs - MGZMNGZFM1RNNjNOb0RlcTE4cXZxNlEKLS0tIEEyRzRzTExWMWE4V1dWRGROWEhP - d05oUnZTVERpd1hEc2ZLVExEVHU5MWsKVZgJFT4hKh9Q3lQ2YK7qksPnm/z0hFIT - szMVld8phJ5L9fqSPweAiEuJAk9LPf1u5MLniIpvJ0jEkEq4boPQIw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZb3VMT2tIZ0doblU0aER2 + U0p4U3dBdXlDVjdoc0s3VzR2YitmZUJkK2hFCmlYazNQcWZNZDRoQU5DN3plU0tY + clJHOFFnODVCVHoraUV6dWJmd3RnTlEKLS0tIDcwNUxSaEpZVk5ONlNwL0VLRGxB + WE9iTCtRa0F6eVplSytWTHRMVDV2OG8Kcg7HRO+CaDAMredCjIyDs+y+yorMYZJF + UnxVDhyDM9chijUshIIS4E84ulEw3I2phz8yNXGWowVyNQoWCNrMHg== -----END AGE ENCRYPTED FILE----- - recipient: age15w5qelqemnvytp38ywdwmflc6qmrqph3dwqmx3lrec5cm5d9nchq9pfe8s enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzZFJvQ01ERzlZb2c5U05q - SWplbHExY1RVWnlBa2FpM1ZJSEdZSnhVMW40CldYL1pjWUQxdEdlYXFBeENlbFZF - VjhjcWcycitXWDBjeEk4Rll0eERMYTAKLS0tIGJ3ZWhZekJmeTVTaml4NDl5MjFR - cmhUZUxNSitwSjJDRSticXkvRldtWFEKdyBb6PqMfIeE2BSjNAyYdaoAviaDzU6m - jRf2N7UV5RIdodxh+xwhBB0YO/bl64KWwPKKRagkMGBEwHGd4sMXuA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuUTlHWXRFWGhmdHNTTFkv + VlNKVXRFczUvT1dHbXlyQkhLTVVjaXR3R20wClN3RDM5RVpOeHJoT2pLWDBKclpn + RGJYVlV3YXp6QzZkUzRSanZ6V3dvamcKLS0tIHJDTkpudHM5WVkxVEYxZ0ZLK1R3 + dXEyOXpjNjBWc1krYlNmTXNKdjIyZ0EKTCaUZybpk1J2z1O38QCIlOlIbowdtEu3 + JuzTCW2uCduc4AUyiuQqO62fSbNDkYmpixEHMgUe/Iweon12Su5rKA== -----END AGE ENCRYPTED FILE----- lastmodified: "2025-08-21T04:39:18Z" mac: ENC[AES256_GCM,data:LYX9God2ZIS5yX99/KpBxvY15H+FFD4OBx1wVTdTT0FX6IiizcK6h3hWpOIQIA2g8p36vME8A06bvK8HWynztnBlgsnbF6Tcj99W6dqV6n6GWodQRDOMAb9J61DQm5s/kyyoJKyfFg+Q8RfUZ3BplnRL7S8Hoqe5wsqeU1IowIs=,iv:UqmYjwdcVKhXKC1bJyk9vPjnT0IC5bdGnbvbPI/kXJ0=,tag:bJ0OYfC3coQ9jakx9HqgNg==,type:str] diff --git a/nixos/secrets/tests-service.yaml b/nixos/secrets/tests-service.yaml index 023ad74..3d8e5b8 100755 --- a/nixos/secrets/tests-service.yaml +++ b/nixos/secrets/tests-service.yaml @@ -1,23 +1,23 @@ credentials: ENC[AES256_GCM,data:1xbVNh3zFREaEHkEXYQ3yepvqA==,iv:81GR35lMKhQ7QDJpni71J1Joaa5rWt9ixnRXHAQN3Hk=,tag:QAliL91slox4SwyAbC82zA==,type:str] sops: age: - - recipient: age13ldedhh6ymava0d5dn54860a3f799gufknre9lfegegjt9ytes2qq5qgmr + - recipient: age1zad0qu648dhjav4pzjhkc6vswnqtacuv9230xcgle8wmv56r8ykqn0ud7y enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIZjBMeG5teTFKWkdKbVFI - eFFsdWRIR1lmUkNldVZXZjBKcWdpSVQ2R2prCkptQm1kd2dQR3hwKzg4RlhKRnBh - YzZXRDZybTZUQkRsdXZvQnJiU256V0UKLS0tIFFZVlJKbGYraXJtMis2OTRibXRZ - VjR1VUdkMVk3UG8zeTNyK3U2SGt0RFkK6UO9XAJm5403SS1FwR+vy0Pfo31q80DZ - ZlR65Jb8FTUYI51TwYhvX4yhM2vn+bfXJN72RB7Onxz+RbkaSAdBww== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1VVJSaG1oZ1dic1NvNHFw + L1FreDJZWFBqL292cUNPTnJkdnZ2M1ZXRTNRCkhCaXNNQmlTMDNCOHdZYkhDTkFU + Y05Kd0FuSXJ2bVpBYnBMVGJTRkJsN3cKLS0tIHI0elFRWFU2czhaSTNnTGZMTDYz + aUpnMWg0cTlpcnJtQytQMWs3cEhDMk0K+8sW4ET5aiSw6sJmPUhBVQZRQSvkTomC + U1UJnauengAMNdA5Gdy4jKCeqWh+TlA9WPWW9p9+Z5tm4E8BsfgGtw== -----END AGE ENCRYPTED FILE----- - recipient: age15w5qelqemnvytp38ywdwmflc6qmrqph3dwqmx3lrec5cm5d9nchq9pfe8s enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXVzFFek0wUjh3aVFJRmpC - cHpuUFlQMVV5OFZOV1pGT0RmVkQ2Z0U2MDMwClZ3dWVGL2RFLzNHbUFFUVM1YmNN - SzBudUs5NGlZWmNhaVpaVUw4RGtiQ2MKLS0tIGJaNGJGY3BQYTJNVnVzNHd5bGZ1 - NHlWSTVHZWJDdHJGZHlUMm5XK2ZoZ3cK5e5j4/f8aQQvcv2mR1KzS+xFiUeRwN5g - 7FSXne/78WeZKl10ZBMdpQjl0BS39uCPR9Lf9qtRgNO5tRHODpdFIA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJZEFmMm81UmdhcGRKVjdM + Z0RXVG1yMHBYNysrQ0FGSFl2TTRLblIxNWhrCmFRWU1DYlNjNlVvUTBFZlltdC9J + TUJGcjBFZDdZVndYRkhWWnNnMnQyUEkKLS0tIFNoMUsrYU8zNGFCTWZ5YllhSEhp + MDVoRjNwY1AxL2pEc0FjQzg5b0cyYzAK5oVsyA6KdlxTbInU8kc/jGqQvNmJFV7C + iPDEFvEcz/GjejK1kVOOPXVFUEoTRY8Vt8MSoGOOzHgBvfQTWssvVg== -----END AGE ENCRYPTED FILE----- lastmodified: "2025-08-03T18:47:01Z" mac: ENC[AES256_GCM,data:59tFwA4BSd8cJm+K2h+QVQgNWsjiCICb6zaY6vrdnMympkVXb1Tt+JtvV/cl5PKm2ing8ue0KJ9ThQUOp+dLYW4jkuHeTRylgPQs4vfIbxG/7USi6YBwJWLGmW0RRGDYl+mQwumlwRgPD6ttiFyKEXIKlaTxPDHbZhWcArOg0ww=,iv:KvI2Z4uAoBOmliOvdSPzP2nA55BDQtZ9Ymzf4Bi/Trc=,tag:N3N4XkWdzfsOApVVdA1ILQ==,type:str]