noe/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

sops: add aerial

Browse source
This commit is contained in:
noe 2023-12-17 13:00:15 -05:00
parent 7992a14476
commit b75763b3a2
2 changed files with 46 additions and 30 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
.sops.yaml
View file

@ -5,6 +5,7 @@ keys: &all
- &m_blueberry age1ts3t7q08cthuwj39juajve2jjk0rw28ljzesnrmnkwd0n7zs49kq7dgxnm - &m_blueberry age1ts3t7q08cthuwj39juajve2jjk0rw28ljzesnrmnkwd0n7zs49kq7dgxnm
- &m_work-mac age14vsmekuppm4xhp4rthhv9jjgzfv45v39a0q8dsgg6yusw0pjkvaqnr9kq8 - &m_work-mac age14vsmekuppm4xhp4rthhv9jjgzfv45v39a0q8dsgg6yusw0pjkvaqnr9kq8
- &m_cider age1kjsga2kf95lu7p5stqr5d9p87jquyypnx97cycj6jvhsm9zkn93quexx4r - &m_cider age1kjsga2kf95lu7p5stqr5d9p87jquyypnx97cycj6jvhsm9zkn93quexx4r
- &m_aerial age1jc6ghxfgxe3gx53xa55azxan447cfxaqfqeh5y5yzqapj7mw7ajql8kv02
creation_rules: creation_rules:
- path_regex: secrets/[^/]+\.(yaml|json|env|ini)$ - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
@ -34,3 +35,9 @@ creation_rules:
- *op_noe - *op_noe
- *op_noe_2 - *op_noe_2
- *m_cider - *m_cider
- path_regex: secrets/aerial/[^/]+\.(yaml|json|env|ini)$
key_groups:
- age:
- *op_noe
- *op_noe_2
- *m_aerial

69
secrets/default.yaml
View file

@ -11,56 +11,65 @@ sops:
- recipient: age1lq5q5g5qjsdcc3key0n6qytkc9z3qx3d3e96ap9zre2aqgvc9ujq82l9hd - recipient: age1lq5q5g5qjsdcc3key0n6qytkc9z3qx3d3e96ap9zre2aqgvc9ujq82l9hd
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxeDFET1lCZTJZbG9TOERL YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0OVlrV3lBV2hVdlh4d1Jh
dWd3TG9YdkdUblN6Y1lLdW5YeEJ5TEpZL0FjCkpWSy9CNTdSSmIvblJFNmlsM1VR OEJ1emNkcHduRXdQWjQ2aTFXN1FvekVtVnc4CjJzK1hLWUNPOEQyNWkxa0kremJh
L1lNeXdrbWtpVGhIaEJDVVY0MUR2bXMKLS0tIEd5ZnVrRGpqQSs1VDFZSERDbUNv VER5Slk2elc4d01tN0NNMkR6NmNGK00KLS0tIERzWkpqcWlmTUlPOTBWbVcva0M1
aWtKUXAvK0t0VFc2b3M1UlQyU3RQMmcK8thzaS1hLNfVqOZr/puDmY8Pr1PZaWAD aG9IY2Q4dExuTWFOakY2ZWV0a1d3cFkK8H6XQkjBNiFl1Fvdfdo/5YmdzVaWZanx
FKqkMx05rMGMPPtBGM63hmZyltlbafaDlX7iiNebZSHCwn81bv0nVA== gEewBpIaXVxe3tmX3JnAXEIZcc8yNnmIbBOmxGd8dMuMfeOGCQSkqQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1p0f62dwatt558sf5s4equdqwtg5m7lsnaytrf3xjnvmx3e0lqu4svtugyp - recipient: age1p0f62dwatt558sf5s4equdqwtg5m7lsnaytrf3xjnvmx3e0lqu4svtugyp
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvNFZLNkg2Vm5lbFRLb1lV YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0WVowY3UvL2NvZDZwRFV6
MUdUZWduVU9HNEN0dWt5ZUY1M2g4UkJCREdZClFFSytidFA2Y1ppNWI2cGhtOWxE U1g2WWVMak1zVXlrbUJyYXRwN0lQZUY2RG1FCkw0QVpKU0JPNE5qaGVIeHZXN0J1
Qjg1NHh6SDNwVStEV0FLTE5iNTZXQUUKLS0tIHBTRVN0Y3NNelBEM0l5RThjVkFn emFrMnJ3eEkzaHVqZnFmQklOb29UM0kKLS0tIEFFRU8rOERucUwxbFg1ckpRZjNV
RHdadFJZVmxROXA1K2ZNYUxMUlJxKzQKnOmzREhFGeyEA//E6HCfSYD9C81JjugB bGR6MDVNdVptVTNONVpsTVE5UUtEaU0K5xgcPhZeB9cWRtUFf/WIxGBCcNMPZG48
crYdpK0DCWMKepgIpJmYUnQQTzdyPqUJiqtZ81TCbyOU6xlkU8uA3Q== NOX7rhYVZj/cqeODqGMjv/8W+PSi7cLy1iz82+VjKwhT157b1txjTQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1f5cqspxexkl8f42v5ne47mx6xmm4v00lafdlslq9g79a508e4p9qrku72s - recipient: age1f5cqspxexkl8f42v5ne47mx6xmm4v00lafdlslq9g79a508e4p9qrku72s
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkN1NJV2RENExlcGxvcVRI YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5OEpRM2t5c0E5L0VYVURH
K0haNDlJb3lmT3VJOWZ5eTBjaWFYRm85elI4CnNkeUFVMThSck9mdzFlcG5IeGZJ OXg5L3ZhTWlBMGZzS0tQcU56ZXZ0a1Ntc2prClZZUnV2NklYOEFmemZjQXZzN1B0
K2RyRHFhMlI2OHlLcVp6QlNQQ01rVjQKLS0tIFZMNG1Gc0tIMVdGWk1MNVUxbEVu Y2xtME9vZm9yWnR6b0MzcUFsRzFjUEUKLS0tIGI2MGo2UE82Ymp0dXpzdkNtMXdm
Vk1zZHNxaHRHOEE3TDdoeGxlMlVwQnMKdQT/ctoXHgPLsDQfW4jSAsIhk9nLfdaN OWl2MUVYZ3JValN0TncvNjN3Z09HQjAKOkoaerZuKKweIARkRBiNCNMGBeQVNxA9
XuocOsjteIXdwNK120ANjrqbyyWoJ2WFnYvVXsy4uu9731WsANs44g== AAcU1OCkNQEHbF/O9Kh4GCvzVrXGTCJ9VU7ubDA5phTbKeAw75e0Lg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1ts3t7q08cthuwj39juajve2jjk0rw28ljzesnrmnkwd0n7zs49kq7dgxnm - recipient: age1ts3t7q08cthuwj39juajve2jjk0rw28ljzesnrmnkwd0n7zs49kq7dgxnm
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvRm1XMmgvUGlId3FaYmNC YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaTlVDTFo2cXFsRXEzSjJY
WkR4NlJWcDU5QVJCcGMxUVU2QWdrS3Y1SERZCmcyZWJkWGUrTmZQZ2syemt4SGZ4 Z1B1L1FKZWNWS1g1eU81N1lwdUc1NXpnenhJClA2TWJvdUN5WlQxUE4ySVZMNlRh
YVVJRjdSWUZaTEx3ZEFRZW9TSEN5LzQKLS0tIFU0NjlvNWVkTWY1bDhreG91RWN5 djRsakt4WW5JV1IxaFZkL2g2S1NETTQKLS0tIG5RelNFSXNDOE1UTXR2UkR5bFI1
WCtYQnFzMVo1ZmlRMW9DU1ZWM1EzR28KbP5JXNNTiFO/7XrnwAIzXgGHlApMS2u6 NGZLS0Y5YWdUZHc5ZjBUWHlGWnF6T2cKyXYGkkQyxdhNzlnLOEFE9lbWj+mD3ECr
P+dUOFl3r7htybg7XK+Bf3vEwzozHzX7fthQH4oi90eopsYU3UNBsA== wk9tDNobeX67UWWLkHQmLqT2SfO4etH5B8NbbKI8ufzTBR1ov7AOdg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age14vsmekuppm4xhp4rthhv9jjgzfv45v39a0q8dsgg6yusw0pjkvaqnr9kq8 - recipient: age14vsmekuppm4xhp4rthhv9jjgzfv45v39a0q8dsgg6yusw0pjkvaqnr9kq8
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlZmFJb2RDMUU2dU45d2hu YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuYTRHRVRRZlZ6OEVFOE9Z
OGFWbTJCbnh6RW9VdVlLS0xDWnphUWtvSFVnClBTUm9VK0k2ZHhOTXhwZ29hck9u ZUsycGJiT01zWjFIUWtvVFdJYnRMRGpiK0I0CisrbFRLNDJOODNicmRRaEFic3Zl
QU81RXVsc0tLc1VHTWNrYU9oem1jZ2cKLS0tIERxeHNFTDNPb0xMYnk3MEdkNzdu ZDRPSTBCZ013QmhQeW5pSTgwdVR5NEEKLS0tIC92ZDZFOFJYUnE2ZWJiSm1DSDJK
YW9WZkp5bHh4NzRhSU1xU0txWFF4M0UK3m3fIdnqaooRYHRA7GMwpCGDOR2YJv3F dUR3SEx6VVhxNVNMVmh3UDJFZVRNU28KXKxlTY0UYFLUoRNrRlNKIDmD9ufZKYaS
4CogoEtSJe+SLJdEnMDOxxiaMDcw+aRJ8wSEchgAt/6gFzpAbGZhRA== wcX4CvtpFS9akiIaYwigwefZ+ucZiOl+jlPA+pJmrTelKarLXo1KeA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1kjsga2kf95lu7p5stqr5d9p87jquyypnx97cycj6jvhsm9zkn93quexx4r - recipient: age1kjsga2kf95lu7p5stqr5d9p87jquyypnx97cycj6jvhsm9zkn93quexx4r
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGSkdvZEdXU0dxVmRTbXly YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUS29MR0V3SXZVK3cvUVVy
V0d2a1c3MFRTcVdZWk1WT2JTaEtrTzRRQ1ZVCmUyQkdZTWlXWGRraVJueGZWTkpp OWROUjhTVEt2S0FoazZjNDhrcUFDdXdSYnpRCll6NTdqK2s0YU9OWGRraUpGakdQ
OHZiMjVzZDZwRThmNVlWQVNNbWVpRTQKLS0tIHFqODVYbC9Oc3ZKNmxGbkIraFdM U09PY0tjRER3eEY5LytNYXBXSXhYWEEKLS0tIFlzNmhFVXZwNHIxSHg0K1lvUDd5
T0RXVHRzaWNjLzFXQTFMeS9YcXY3dUkKOBQCTIUOB7MHjJS3xMeUHaZ3NrgH37Gg VFJ0VlVHTnoyYWtod25aQzYwa1BIS00KeKbEX1hVhpkgWR0Plxv5ePUdV1s2jTzj
FaSKiVTaJgnjxhZgUIVg9Wq5HU77hx4dm/FS/aWMT8E8OZNL3YT1bQ== /QNudGnkydvf8oGkFc6jVKcr+sYf5LC6wnJ31kneOakMXQj8TI7vwQ==
-----END AGE ENCRYPTED FILE-----
- recipient: age1jc6ghxfgxe3gx53xa55azxan447cfxaqfqeh5y5yzqapj7mw7ajql8kv02
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBidG8vUEpmSklDZjFEZ2ZU
Q2dSS3g0eThTa3JFK0N0Y1RCSjhzcElDbVF3ClRqejFMODliUFI1ZXpBb3ladkty
c2xLV0RLYkpTOXRDYnJHMmFmL0hJQWsKLS0tIEZrbUNSR3VUL0RCNWMyNWNGZXdv
akMzSkpZaTM5eGpPOGgrLzJ0ZXFMS0UKajf2WOL+SxIzxiJo6oUOsbZKhwwdRHK/
NaLlXj9Yh7FyLk73Ga48aIXCfiUYUZMBZ/BhMcf+mauxvib1m7Xz7g==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2023-12-15T05:47:08Z" lastmodified: "2023-12-15T05:47:08Z"
mac: ENC[AES256_GCM,data:hNsO2DNV9tIsr/22SajbpXSWt2PHmXVKL0UyMDhdE5hvLNbQNgze/FyW6bjQ1z7PnuCoiXrEHf2pvgsNZc3Fl+cRxvtpjSo1l2U45lp8wXhj6a5YeV9xSCy78yajmEk3XXhTyMuAXUn4eZ+UWUXk+Co1Fdmd15DOLZhH0vLiyRQ=,iv:y9mEhHZuJIP5VyX/R9wqUlNEI3q1tmzaIX7nVuR8WAE=,tag:II47gT99xY8emAKPKcpLNg==,type:str] mac: ENC[AES256_GCM,data:hNsO2DNV9tIsr/22SajbpXSWt2PHmXVKL0UyMDhdE5hvLNbQNgze/FyW6bjQ1z7PnuCoiXrEHf2pvgsNZc3Fl+cRxvtpjSo1l2U45lp8wXhj6a5YeV9xSCy78yajmEk3XXhTyMuAXUn4eZ+UWUXk+Co1Fdmd15DOLZhH0vLiyRQ=,iv:y9mEhHZuJIP5VyX/R9wqUlNEI3q1tmzaIX7nVuR8WAE=,tag:II47gT99xY8emAKPKcpLNg==,type:str]