diff --git a/.sops.yaml b/.sops.yaml index 0a2df6b..4e98bf2 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -1,6 +1,6 @@ keys: - &user_roy age13ldedhh6ymava0d5dn54860a3f799gufknre9lfegegjt9ytes2qq5qgmr - - &system age1c94x3h0jj3x7zvd9rxxed7nqlckzwyttgagznzzfp3dwynpuj92snqaljm + - &system age1h672rl8yp4utgqx0ndxv2wtg5fw69vznyxa2p699rq4ku6x2afrslt7x2u creation_rules: - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$ key_groups: diff --git a/configuration.nix b/configuration.nix index 14e9943..3c234ac 100755 --- a/configuration.nix +++ b/configuration.nix @@ -34,7 +34,7 @@ # SOPS config sops = { - age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ]; + age.sshKeyPaths = [ "/persist/etc/ssh/ssh_host_ed25519_key" ]; age.keyFile = "/var/lib/sops-nix/key.txt"; age.generateKey = true; defaultSopsFormat = "json"; diff --git a/secrets/networking.yaml b/secrets/networking.yaml index 16f9170..c2b8a29 100644 --- a/secrets/networking.yaml +++ b/secrets/networking.yaml @@ -4,20 +4,20 @@ sops: - recipient: age13ldedhh6ymava0d5dn54860a3f799gufknre9lfegegjt9ytes2qq5qgmr enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnVlZWelQ1b1IwUW9UL0dE - emRiSUJtQVJvTk93S292dU9nV29xTGExTjNZCmJTTnVPSitORytSOTRmQzJSMmZE - RDZzVWZyMzVtbVpnQXNUZTRWeUZ4WTAKLS0tIERRNWM0SkFkMVpxc1pqeERBWEll - KzhENDJUTUltSjFzQXJaUENQeEJBRkUKJwI1N61+w1nuzrDQjPfeaJ0LV3+JAciP - gpZbmldXKuqeGV/g4imVOeK962Xv8ujGCNWmg7NPLkrJfm1yWILx2A== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEQUdXSCsrdyt5d3BTUnI1 + Mml0UlNvYTMySHhWcXdrZkRBZXUxSGxpZFE4ClNMWFNST0tNSlZ6Z3FJM0NkS2RQ + NXpTQ3NzQThCbmVOcVBmZTRjaERzcEEKLS0tIEFDbkxSOUMyWHJFd0Rxa3k5Sm5K + K2dyRTh6TTlHNUhSM2x5U0pWVjZSUVEKUetKBgQi9p5rYMIylJVWzwBEYVgMM3vj + PRtwj34hzVKjt/GBrJj1cpl2VxrQ9K8ZOGx6sC7daW2NOO8OpkbIyQ== -----END AGE ENCRYPTED FILE----- - - recipient: age1c94x3h0jj3x7zvd9rxxed7nqlckzwyttgagznzzfp3dwynpuj92snqaljm + - recipient: age1h672rl8yp4utgqx0ndxv2wtg5fw69vznyxa2p699rq4ku6x2afrslt7x2u enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3WmJFcHlpb21oSHdNUVls - aU92RnBXTzNycVVFNWM0TS9VRTFndkl0NTJvCmUzR1A2UW04WnFOUmpNY2dVVEV5 - NHkzVE9Hd3ZSYmRhcG9qU1I1bVhacncKLS0tIGJSNWQ1N1JIaDBWVGNRZmVCZGox - aFdpazM4bmxrMy8wcmN3WVJnakJiK1EKWatf0uDN4iHVyj7cC11i/WUynWk68gcr - 0ZQ1c2IB9YIw/6A1XvqDdv4edRpLkacE95sISdq1zeX7InpcEuf1LA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXMGdDdjBTSjlhd0loNjFj + SUZnWjJvRkZQUzZObjNFWDZmU0RWN3RjcWdzCnAzSTA0cWxnZVcvVTZXL2xrVDNX + bjVzV0FWV0U4WHE0RmllS293blVCdk0KLS0tIEgvc2ZtTE5nQTYzSVVUeEkxR3NI + RjkzM1VZenF5UnZYMHhISDBRT21QUjAKUZAqk4ZRVelUQYCenw7nzVFL1/59LowL + 60SyiYAnm+pxAyAJW6merHY+rJ7tZZhyZEi9ZV7KvOepQA9MFXjBmQ== -----END AGE ENCRYPTED FILE----- lastmodified: "2025-06-10T17:04:49Z" mac: ENC[AES256_GCM,data:O4oXCUTrSDOLfGYL9sLb4mLBhoczFYMeao+0ooYN6McxzyYmwhiB3IPJez0UWL7Z7hRZXhdOivIntCP8Q8r0KpRNhOk8n+gkYH2xRJUaBysFA3tk4hFmd0L3rpWwhlZUhFMZan2fB/kPRXofgAdHJ1oY+hr1+C9vezwp1cIl320=,iv:4F1zhcwXKJHPTDtaMfOwapvmv6UJm1lPNHiuPh2ekyw=,tag:VABw1BEXz0YEts/YVzuUZg==,type:str] diff --git a/secrets/roy.json b/secrets/roy.json index e27d267..ca0f093 100644 --- a/secrets/roy.json +++ b/secrets/roy.json @@ -4,11 +4,11 @@ "age": [ { "recipient": "age13ldedhh6ymava0d5dn54860a3f799gufknre9lfegegjt9ytes2qq5qgmr", - "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPN2EzcWYwV2Y4Z09xaU1U\nVUdKT1NYdjIzbGJoNFd1ZFhXaXJSbHNFc2xVCnRMdnJLamtjVVlYMy9LUnRVdVRH\nZkRtV2ZhSFI5UG96RGdEY0Z0R0x5Z0UKLS0tIFpLZ1FHeDNPejQrM3JaMSttQVJQ\nTityMnJIakpIWDJVTWJjbnppYVZUVXMKLxultaWbv6Aaw8mYupypGXs1foAsY7gb\nuqdrs5+sGaeMVOKAef1mge0Ja03Lo27vm2hschXshV13WbYay3P17Q==\n-----END AGE ENCRYPTED FILE-----\n" + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2a2xJSjYrck5TcjR2d2lB\nYVR1dVZFN0EvUVo0SC9hMTZ3K2wrVHFOYW5JCkduQ2VWNXJVMmtqNGU5MThWWUt6\nZDM4Q0ZvaThXaFBMazlLb25qNzFINjQKLS0tIEpFbURNVXpsSGM3ZmZ1ZndDSzBV\nb0wxWmxYNVBwcHRIRVkzU3Y3d2Jyc0EK7AcQ6lG7Uz4tSs+M7luPXJ0VsCEnWg3w\nmOVmMEq2MU/Tc9otredFBQjxc3ax+0RBGRqvsY4N0Ijn2UGd6q5tiA==\n-----END AGE ENCRYPTED FILE-----\n" }, { - "recipient": "age1c94x3h0jj3x7zvd9rxxed7nqlckzwyttgagznzzfp3dwynpuj92snqaljm", - "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4T3l2RHp5Uk5IVWkvMzhI\nSnpoeGsxWG95UzVuWldocFIvMDBaUnpuM0ZBCndwZjliSjhJS0wyOHRwMFdURWpX\nNFdWV09DZ2lYcm53MTc2dVMrOTVxTWsKLS0tIFRvRWIvczJFM1FEQjY2b0NMcm1R\nOWlYcmtuOG1Gek1HZTlpMXlPNW10SEkKhMMlBcRGjp+Wzt2iT6B4p9YSrbEaGH+9\nkrTLJUptK3UYj4yNyoTsiqX14M6IFV2ymhq6mM7njxuFvSuBu3NuMA==\n-----END AGE ENCRYPTED FILE-----\n" + "recipient": "age1h672rl8yp4utgqx0ndxv2wtg5fw69vznyxa2p699rq4ku6x2afrslt7x2u", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0L1V5bndJYjZWOFhBc2tB\nY1oyU3pGUWttNG4zVi9WY01OdjdNZnB6MGlBClBxcGFjejBlTUY3VXpTRC82aENJ\nM2RaWVd5ZkliOHBNb3IyUDQwZzVRZVUKLS0tIFZrOE1VMkhKR2ZFWHBUdW9iblZS\nNFdlcXM3Qmw4L0djK3NKaEhkM1FaZ1kKQ1+8rkbH6vvoSIwMWwt7xoPKO8wM2VrW\nQxmFJ5bJBwALzXtMGI3Erhh4hgPMEc2cqvDWawIm4nNLq5ketK1/Wg==\n-----END AGE ENCRYPTED FILE-----\n" } ], "lastmodified": "2025-06-10T15:34:46Z",