From 9c163657bdc987d6de788af37f97de26a4352a42 Mon Sep 17 00:00:00 2001 From: Roy Dumblauskas Date: Mon, 9 Mar 2026 01:30:24 -0500 Subject: [PATCH] add desktop system age key (different from user age key) --- .sops.yaml | 10 +++++---- secrets/networking.yaml | 47 ++++++++++++++++++++++++----------------- 2 files changed, 34 insertions(+), 23 deletions(-) diff --git a/.sops.yaml b/.sops.yaml index 201abfc..12fca13 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -1,11 +1,13 @@ keys: - - &user_roy age1zad0qu648dhjav4pzjhkc6vswnqtacuv9230xcgle8wmv56r8ykqn0ud7y + - &laptop_roy age1zad0qu648dhjav4pzjhkc6vswnqtacuv9230xcgle8wmv56r8ykqn0ud7y + - &laptop_system age1awcm4kpq9zpl2fwxuktmxkwuse5reup2rfzrdsnh643ahy7ncgcq6e6ey2 - &desktop_roy age1rwugh86469664fwhgrj9xuhjxs9vpflx3r0ftuvd0glphf2gecfs8thxsj - - &system age1awcm4kpq9zpl2fwxuktmxkwuse5reup2rfzrdsnh643ahy7ncgcq6e6ey2 + - &desktop_system age1q79gcucm8htjnlgvyl0k8lfftdnyg77sxxk9jynn84zkx44ygqqsdq3p8u creation_rules: - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$ key_groups: - age: - - *user_roy + - *laptop_roy + - *laptop_system - *desktop_roy - - *system + - *desktop_system diff --git a/secrets/networking.yaml b/secrets/networking.yaml index 3f8aa97..a95eba1 100644 --- a/secrets/networking.yaml +++ b/secrets/networking.yaml @@ -4,29 +4,38 @@ sops: - recipient: age1zad0qu648dhjav4pzjhkc6vswnqtacuv9230xcgle8wmv56r8ykqn0ud7y enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXQmJ3UHdkZWdzR3hpclly - M3RrRE0zRS95VVJHNlpjbkJuRUI1OEFuWDBNCk1UU3lKV1dXUTdjRlE1OFVlQjQv - Q0xNRGpWNEJJeGR1RWVNTHF1UGVoYm8KLS0tIEZMSnBpWXlmS2JFa0hTQkRwMmhJ - VFNqdVFSNVVNaUJXV3FDTzJ4cE5KbHcKBzwjbjwun0qyRxisWgZb+ifX5v/e1Ql6 - gw9TWU9nMoMk1AZ/rK4FUP4/0PZ9ufVTNyiSNzhUme10fB4fHezMVg== - -----END AGE ENCRYPTED FILE----- - - recipient: age1rwugh86469664fwhgrj9xuhjxs9vpflx3r0ftuvd0glphf2gecfs8thxsj - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJQWpsRFJMTHZVaU5HZngz - NUdzYm5WMGxpQ3Y3THFPc3RnQjQ1WDFJdWdNCkdRRWF2OEVsVHJOVVkwQ1JzRVpk - ZklWZVJIbUNJa3crL1FvWm1IOXhuNjAKLS0tIGkrbDNjTDBURzZGamlVNWtzZG10 - eTZ3WVZOZU0xRmFUSHBKUnlQdWFKakUK0R4hmeA3yjFxvCzLWdqSWLbuDCbD1THw - IfZGWGHAsZP4Lh+EI/8TFyGRuULQrwlcNqINff5K9x+lkW7huXiVwA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKZjFMVDJuQ3JhbmVLUXVO + MWREakYyTjB6MmJuTzFtVDZKeGVQeWdOUFdvCjBZUHVVZXBqYkp0SVlQUXNtTWFL + UWZNQmFyQU5aUFF6Wk5NTzZ5UlFhN1UKLS0tIEMxQ2V0cko4dWpYU2xIQmpFbWxn + VWVzQ1JCeUJZbGRFd2tFUlp2cE5sUjQKLlfI5r58wCY8rDgDEq96NUAS8t1xG6Gi + AbfjrvkSpRewwDysCXHrg2PX5PwtiVZJks6BRMHgNW18utMFeNEJdw== -----END AGE ENCRYPTED FILE----- - recipient: age1awcm4kpq9zpl2fwxuktmxkwuse5reup2rfzrdsnh643ahy7ncgcq6e6ey2 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpQ2lvNElnRlBEMkJ3MTM0 - SnJEUGdRK2VEMWp0UkVzT1dEQkNBVmlkVGhNClFoU2pYU0pBNGU0SmFBWlJ1QlFU - R0Q2WmFsVklEWEE4Y1MwTHd0Sk5ya0EKLS0tIDAwU2NYYTVzcnl1TkFNWC9HRVpr - SFBpQW9TYURHTzF6d0t2UHN4YlhXQTAKvIh+gKrBnTBuuXF83UMEZl7o+FLJJZ9y - MSEihekj0D46uQuFW+zxl7Vi7qwKrq2nABnqEPObLUgPGXSoRr7Vjw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBc0pZSXZLT3VIUjdlU2Y1 + UjF6L3NZWTFpZWlGTzFrK3N6bFhWR2tVNVIwClhDa0pDK3JLM3RvTVVsU0pJbkQr + VWc4NmJRMFFuK1pVMCszbjFxSGYrZ0EKLS0tIGVqUEg2UVBTWGM5YVdMRWhxdHFM + a2N2L0NuQWNLYmNBZERrUTFzM3JGOGMKsAEvtT2ECMF6qhKnzjz5omne9ZaA0iH4 + Z9fzIkKOx/Fwd34eisBITTAolkITdqR7ZIweHAPENg8ycaoshMEZZg== + -----END AGE ENCRYPTED FILE----- + - recipient: age1rwugh86469664fwhgrj9xuhjxs9vpflx3r0ftuvd0glphf2gecfs8thxsj + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCTTlnTGVnRFR3TDBNMjFv + NzlpREFIVDc1REpqcGE1eVRVaUVRMndlZlRNClIydTFTTlZrVjYzYkc3UHZFMUov + MTZzazZXU08yVlNxbG8wTncvZW5kYVEKLS0tIGRrWEV0RVFSYVErMG9NQVgxNXBD + OFJJRVJxTGl5SUpqM0VkY1BXNEZmUkEKev4hzKMUcas6CdlUl9HWlk8H8z3cMXn3 + lJNGTGj/gOGra8yVNEl53W2nu4zNJ9HG1OHywQEBZrovsn0nxS4YDQ== + -----END AGE ENCRYPTED FILE----- + - recipient: age1q79gcucm8htjnlgvyl0k8lfftdnyg77sxxk9jynn84zkx44ygqqsdq3p8u + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFSGExNERuZm9jMHdBL09o + NkVGaEdvMEVpZlk2NXFYRmxiQUZwWGpkVWw4CkFna3ptTXRaOXM3aUNVS3I4YmhH + dHZLMzZKZjgvU0tDV1RVbGhkYVhjODAKLS0tIEpQM3Y1d3J1b1o1Q1Y3WXA2NDQv + S3FXUzErOGMraGNFZFd2ZWdQTFFodHMK07v4ageHpsJgI39q7hFCTjoWoCA6mjtf + xmKkOxOvpWF5fUvXTy/x1+/iclU2g3cMUpDWwU24ScpVq+Af4LQC3A== -----END AGE ENCRYPTED FILE----- lastmodified: "2025-11-28T18:02:34Z" mac: ENC[AES256_GCM,data:7NBAL8GFWLhTYcY3bYpTRh9bDNO+dBdGw0742SZY15ZYuu2nc95N/hfZ3XXlJ87uRadDAgOVAjR4m8bAPNSeogSp01gkbGpDRG89azwoaLdfO3dwbzNQic4O3Yf1bcD5CMrp2Z0abfyCuKnpnJSRhQbon80jOu8+LSfKdW2wOco=,iv:1OOJ7vHUmrY5ahJitSSk0zoVVu9f42L4OMHSTIZss8k=,tag:mogeKxpIW5WLAB8qIGjFbA==,type:str]