diff --git a/.sops.yaml b/.sops.yaml index 8a13f13..f256ba7 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -20,6 +20,7 @@ keys: &all - &m_mumble age14cnx8ttzqndcsdz4xvmx07cvms6val5aanrf9qsg4j888hudufxqz9nm5p - &m_jitsi age1cc80558u3f8pdwrmhev8264c0h9dkkm59sy40j7zms97qzxg0ffqza9en0 - &m_nextcloud age198c9udn09u87zje4ctz4j8d2k5ey5kvgl34nfn573e9csx9mcs3q7a6q2u + - &m_dis-sociat-ing age1nsuxsnf64mcfgnggy5ehuqk3egp0rea3ldzst0f66full7ap7ews5eg46s creation_rules: - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$ @@ -151,3 +152,10 @@ creation_rules: - *op_noe_2 - *op_noe_3 - *m_nextcloud + - path_regex: secrets/dis-sociat-ing/[^/]+\.(yaml|json|env|ini)$ + key_groups: + - age: + - *op_noe + - *op_noe_2 + - *op_noe_3 + - *m_dis-sociat-ing diff --git a/flake.nix b/flake.nix index 819dde9..f07fc26 100644 --- a/flake.nix +++ b/flake.nix @@ -170,6 +170,7 @@ thonkpad = mkNixos [ ./nixos/hosts/thonkpad ]; # t480 sapphic-engineer = mkNixos [ ./nixos/hosts/sapphic-engineer ]; # Akkoma, sapphic.engineer porcelain-doll-repair = mkNixos [ ./nixos/hosts/porcelain-doll-repair ]; # Iceshrimp+Withdrawl, porcelain.doll.repair + dis-sociat-ing = mkNixos [ ./nixos/hosts/dis-sociat-ing ]; # Iceshrimp+Withdrawl, dis.sociat.ing git = mkNixos [ ./nixos/hosts/git ]; # Forgejo Host nas0 = mkNixos [ ./nixos/hosts/nas0 ]; # SMB/NFS NAS ts3 = mkNixos [ ./nixos/hosts/ts3 ]; # Teamspeak-san diff --git a/nixos/hosts/dis-sociat-ing/.flags b/nixos/hosts/dis-sociat-ing/.flags new file mode 100644 index 0000000..d499edf --- /dev/null +++ b/nixos/hosts/dis-sociat-ing/.flags @@ -0,0 +1 @@ +--option sandbox false diff --git a/nixos/hosts/dis-sociat-ing/.target b/nixos/hosts/dis-sociat-ing/.target new file mode 100644 index 0000000..e34e001 --- /dev/null +++ b/nixos/hosts/dis-sociat-ing/.target @@ -0,0 +1 @@ +10.100.1.52 diff --git a/nixos/hosts/dis-sociat-ing/default.nix b/nixos/hosts/dis-sociat-ing/default.nix new file mode 100644 index 0000000..210773f --- /dev/null +++ b/nixos/hosts/dis-sociat-ing/default.nix @@ -0,0 +1,47 @@ +{ inputs, pkgs, config, lib, ... }: { + imports = [ + ../../templates/proxmox-lxc.nix + ../../server.nix + ../../features/dns-cache.nix + inputs.iceshrimp.nixosModules.iceshrimp {} + ]; + + networking.hostName = "dis-sociat-ing"; + system.stateVersion = "24.05"; + nixpkgs.hostPlatform = "x86_64-linux"; + + sops.secrets.db_password = { + sopsFile = ../../../secrets/dis-sociat-ing/default.yaml; + owner = config.services.iceshrimp.user; + group = config.services.iceshrimp.group; + mode = "0444"; + }; + + sops.templates."secrets.yaml" = { + content = (builtins.toJSON { + db = { + pass = config.sops.placeholder.db_password; + }; + }); + owner = config.services.iceshrimp.user; + group = config.services.iceshrimp.group; + }; + + + # services.iceshrimp = { + # enable = true; + # package = inputs.iceshrimp.packages.${pkgs.system}.iceshrimp; + # settings = { + # url = "https://dis.sociat.ing"; + # enableMetrics = true; + # }; + # dbPasswordFile = config.sops.secrets.db_password.path; + # createDb = true; + # configureNginx.enable = false; + # secretConfig = config.sops.templates."secrets.yaml".path; + # }; + + services.postgresql.package = pkgs.postgresql_15; + services.redis.servers.iceshrimp.logfile = "stdout"; + boot.kernel.sysctl."net.ipv6.conf.eth0.disable_ipv6" = true; +} diff --git a/secrets/default.yaml b/secrets/default.yaml index fd18809..25df863 100644 --- a/secrets/default.yaml +++ b/secrets/default.yaml @@ -10,200 +10,200 @@ sops: - recipient: age1lq5q5g5qjsdcc3key0n6qytkc9z3qx3d3e96ap9zre2aqgvc9ujq82l9hd enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoRk1aTXQyczJwUC83V0hH - a3pheFlBQmZxbnVIaG5zYzVna04wRkZQWlhzCmtpL2l0SUpBQ3hHbEkyd1ZHWmhy - S2FLaE5zOThwcXJkUFAwL1JNTERQdGcKLS0tIHgwNVF4R2I4UVEvRkozTXg5cVBR - SjhtRHdpcXVTWVFSR3JKdFZ2YURKNlkKMzHgCvHEXVskuhaIGgTAbuW9jaa4QCc5 - 2h2jIRUudomJvAvvV84t3v6v1o8RcUffhxY+XM2SUSCE/lViIavN6g== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5T0RzWlRwbmtPZjBFTUYx + Qm5iRXNQWERhbmIyeWJRQTlzVlJLUWEzT2x3CmJDWGFIRCtSL3JNaUhNSHVHNVhH + Q2NPMGxQMWFFRC9lWVZ0USt3eGxJNlkKLS0tIHF4YkkvOC9aeC9SMlBLRFNxV0J4 + akYySFdRMXk4anBFVStlUHh2SDJ4VEkKmw745s9CVYitWSSV6ytjKHFkDdr2N+nl + Tbq7Qc/i/+UM2v5iE1zorr8ACYfdWFUy7oMi34XKCpFBW+p7UXywmg== -----END AGE ENCRYPTED FILE----- - recipient: age1p0f62dwatt558sf5s4equdqwtg5m7lsnaytrf3xjnvmx3e0lqu4svtugyp enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3cTNoNWVXT2xqZFVEUkZm - RG1xSm9sRFB1RjVpT0IzZ1prRVZPd3VLV2tjCkRpbVBSNzdzeDVjZzNEbGpCY3dU - Sk1mL0R5Uzh2MURKNkdaYjd5SHJDUHMKLS0tIFZOM1dDMXRNZ2pkbUc2THVKTUVB - bWlHR01GRE5Jb1l2OW1YZ0Ruc3VFQTAKn9mZhfdnB/2QscgfilG43B1F2R3fqeG+ - uIb/tZrYvXdC4jjyZou33THj/FDJYzYaVrNl5q30QRjjM0civWXg4Q== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTQjN6LzQwbXVPQXhBaUMw + UDZxclJnV0FFL0hzY3V3N2F6TFNOZ0lWZkJzCmQwdVlpSGZBQTk2NWgrejJWSnR1 + SFJENldLTFhVY1phUGRTNXdJWmtGaGsKLS0tIGVDMmJwNWVnNHZxaUtWY0FTZTds + NldBclpXVEhCWDlVcGo5YUNkZVBDVG8KGhU++P60aeFN9Qh8d+xv2jvxUYdu7u5z + EU9lteUv55TcnWerpNFHTjuJ7j26RRqqIo6EnX8AV440PeLEi1clQQ== -----END AGE ENCRYPTED FILE----- - recipient: age13c5wv623jxjja5mjz7fajg9qqwvypzgsfqrs4tmk7rpgyzu7aufs4ul9f9 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHOU1Wb0RIZzcxa3NoQU5I - NTBVRy9aSExkcFJMQ3A5WlFlYy9oaDF5ZERRClpxcGhhc3FXMFBQa1pHVUZaSG9V - VThjSmdHMkJ3N2ZSWEdzc1FhMlN1Um8KLS0tIGhqVzd4dEdQTktVTHNFVklFeVFv - cnpvaDZhUlBzK3U4R1BzNytITE1waVUKCk/VKBbeY8eb+NhxfoZVcNRArtFkq6i5 - eMPqJVIi9JoCjKHB07F8BYctkvECdNbwpEnAucJaOJu8UXgcfKhOZw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWQzA5Skt6YXJranc0ZXIw + eGIrSktrT3Juc1EranZuZVhvWmZScGQ5Y2xrCmFrb2hNOXJNYkFkNk81TXJmY1Fs + MEJZT240eGFsOTFnUTBwMzY4M3ZmQ00KLS0tIFJJazdCTEtoNG5tZkRENEFPekhu + OEt4cUg0b2daWU1VdTV1UUxFWE4wVG8KbG9iXAnsLL6oXh2gz9mnaIZfDkdg8bpQ + 27fGrIaZoGT7Rof9LlfKe3Pmq55ABNNqyuTyjPI/kCOKXKSDjrvYkg== -----END AGE ENCRYPTED FILE----- - recipient: age14vsmekuppm4xhp4rthhv9jjgzfv45v39a0q8dsgg6yusw0pjkvaqnr9kq8 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBacU9YdGhDUDJDaEduNTZh - NVk3UXlLTWNEQlBkT1diUWtpa0k4WnpGRlFRCk9sQnovUjFuTHJLbDRrUjg4MFdU - TzBTaGhMK3BhOXNmc2ZzNkY2TDBhTkUKLS0tIG1KZXhmQThqZ3lhTnh5YVdaaFgz - QnVxRVBqSWJHV01sZGR3OXQ1YS9UbkkKGitnSHTzb5YrOFGZtqNzOPlxaviL74O6 - tOflTv6j0xihG6hzUZm2ukkGtV0O7k/vNKWNHkZCyLCZ9m2CyoAoGw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2N09xQUtrWW50OWZxZU9L + RitXdDZJeXNxdTBjZGdYNDZNVGZBeEZyU1dnCnZvYzlvNm5taDRxbkJnUXB2N2dX + S1JpeEtBT2twZmU2M1liaGlGR2RhV2MKLS0tIFowb0pYM2o4MmdnenBaQ1VmWjAy + RE9xam13REc3VE1RQTI5R05leFJxN2sK+v3946MZ5R8eT7c71sx1fD3zHStWJp4t + PFELnl0SVqBuWvoizejdfb4hSDsFTfjl42XjlXWkwruHxQ/uoIewuw== -----END AGE ENCRYPTED FILE----- - recipient: age1kjsga2kf95lu7p5stqr5d9p87jquyypnx97cycj6jvhsm9zkn93quexx4r enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYd2N1K1M0ekwyV2Fpempi - UFBKWHFPbk9sZ2FuRUlkS0d5dUI5UUd4YW5NCmpqTDlPSHdhNDl6RUU2VjBKUzdw - dmQrWHl3UjRRZmFhV3pUdlAxMy9VcmMKLS0tIDJoMmREN0p2a01ScmZlWitka2NT - b2dVSnEwc1JxM2QyODZTVzFHSnc4ekEKVY8bXPAFPYaEd/5iMUN8SXI1AaOk8RsM - U43MOV/QiBj8gruMUhcXVsWitVvcKa5vbDD3rhZBkD7zD8U9WusM9g== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBeHZTREFaOXFMT1lHdjZk + Q3JLMlNXMU1vRW9jSFdqSW15cmNwWFBHR2lFCmQ0ZTdqYWsybkFPcHdCU3pMVktk + UlViMTZQT3RiMHQyOTRTSHVzR0dqK28KLS0tIDZDYWVpM0hkR2VWZ2tWTzVIMUZv + MTFTQW1lMmhUb29tUW1ORjdERFEybnMKSFtadgiSf1zFlhQdhVKZML4TFq9bvMlp + h6TAngh7xzNPE9T7beG1zLShBaop73EPNIi4uljH/RBIEkIFhnXC+g== -----END AGE ENCRYPTED FILE----- - recipient: age1jc6ghxfgxe3gx53xa55azxan447cfxaqfqeh5y5yzqapj7mw7ajql8kv02 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvbWdpVytoRVBpNUpIclZs - Z0ExMnBaTnRnZDJRYi9HVk5PVnFpZjFrem5VCkYzVW54NzF0L1lxdDlyUlo2bHg0 - Nzl6QWF6RXZCYjhaSGllZjFZM01hbjgKLS0tIFc0NlVEbjhFR0JkdzRaTTN4RUZk - WmF6UHRzenBEb3RvL2ZhV2Q4WjYzdUEKquSo9o6XLoFGy9MhjoP4kQ7da3INJR5f - Ls45OiaXKq/Bw9VfUCIHR3eCZZRf/6zl1mXIYFM2QYBbGgHYSD84RQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLcW85c3pPVGdrNTBkUXJr + ckNGb29EYVJ1YVFYeW9XUHk5ZWVkMVBWMTNRCmpoeW9vMmlLblN6dG1ROWtRWTdU + cWtiWjJvMmlZVUVTK0liM2d0WjRwWTAKLS0tIFF1aEpzNTZCcnl3UzJtZTFxV2tC + ZFhHKzhCU3M3amNCaE5vMEpTc3ZqcVkKoUlajedYfWj22ocqnXYEOQD0Ma3Wj6W0 + 2A9geVcMbG0eFsDwXGn63u93ckcKZOYsmCxPykJ8LaV6b54itNBMEw== -----END AGE ENCRYPTED FILE----- - recipient: age1faccfe85637hme39xyzgmvjn6ku9c4aapfmpfc35hswj5emhnedssrg2cq enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1UXJrZXJQMTJoMFYza05F - SnhpdUdKaWptZlBXbVdSSUpQLzRaMFJFUWs0CkxUTElZbGVsamZXa00rTnZwYy8r - TDlYMG5oZml5RTBFRGhqTStleEV1SU0KLS0tIGN0V1lqVVRWVXJqb0w4bXVWblRp - YXEzN0dpem1tQ2IvMS9nbk1PZk9KNDgK7YHex/ZSG4YyK8Hg9Ns/5AQbvCfkzPBU - EbQsKwbeg2g0eYiMcLGxakWWTQQvsNsDcTqlSFBeFt3/oTxyZDwslA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiYmVrQjI2OExjWUVTMXh1 + YkpudHFzcXhKUWI3VU16WGhRZ3NhRVh4UDFzCnhJVXZKZGk3MGhqMnd1Z1crcUFr + YUxnUmVURUhpZFhMOTVCY1k0TldHQk0KLS0tIFBJOGVqZlBOcnh3OVBYM0tEL0wz + a2h4NUJ3bk42RnJ1ZGJUdk1IUE9sZlUKcqtTue4b4/fT7bIi1ZXag2hqrxIaWcf2 + pg8bnJoOLqyODpvAQ4KvyMLrWJluRLbvs2C6YB0XgTOm93hp+uiESQ== -----END AGE ENCRYPTED FILE----- - recipient: age1wc3czlazkfxphsq6exxxkdpma4lrv7n3v3fvel9l5u96dlljn4fslh666p enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjYkY1bEFrRE1VNURHZnVN - c0NLeW9JWVFJZkN5RkVibjY0ZzU4YlJXSTNFCkxZaWdMZ25sUk9qdDFOc3RBZWdj - T0Z0dG81eVRmMjE4emlrZEVieExLSHMKLS0tIExvRkk3TnNZWDJRV1NiNTNKQ1ow - Rkl5Nmh4WWx5TklYZStKd2lSVk5rZGsKbd03DUtgkgxkr041uFDZ3qOwHHzZ2nCA - T+bj95RuB9HJ4fJdMijq8L9I0o5LsdDF4p3JOAkpPET8dto7e4zuAA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtcXloSGpUZUEwWWNIUzRW + TVM3cDJWUG5QL1pqQW9zSGZ6ZGx4SjlyemtVCmh1aDJtUmVsL2VobDlTVmY3V1NI + LysxVmMwZkliaEp6eC9YdVZEM2NLcGsKLS0tIEljL00vZzhCTjhPZi83SkRJbnNB + bkplZnRCWnNIaHcrbHlBK1JUdFdBQjgKYPoHOc2CRbzyJ/HlPBOeFMbTRnuflYDO + 9sV+3yucL8Baw1e26PUydztgs2l5NeIz7wsG2NHrANB/SYJx69uj3g== -----END AGE ENCRYPTED FILE----- - recipient: age18net4rsvyx84d9jjh64rgqsru3njwc438qt3993kn865dx9weaqq0rzkrh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpRHZBcG0xSFNKcU13R2w3 - b3hRMmx1bkNqV1ZjdkY3WjRKWFZibnJMR2t3CklsNE5WbFhUY2l2WHU5bm9ZbTZO - Wjh3T3pvMmRQclRmbzIyVkJHK3NFcUUKLS0tIGRyYnFGVkk5VUlLMVR4R1ZQSHJT - UGJuNzMwNkZ2QTZZcENwQjU1bzZxNUUKvu0cKMhLif2lvCM4NH7y8LGAgNPm9PWG - +/IGx5Rc3n3MgK3DjjefuMMmrkTKR1638jfGJUq4jCID3t5KDh2Mtg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBONlFDckVMOW5PdWlabnh4 + L1N3NUZOMGpOMkhhNlpXaS9HT2lsejNYdjBzCjdUenIvZS9TZ2ZURVc3eFdwcjRi + VzF4VzRxRnh2aXVTbVhXMHhSWGpmZzAKLS0tIFRFWDRPaWR2bDBOSFV2SUZzL0pY + WlY4R2g4R3NHcnBOVVpoVisrUkk4b3MK3+czTt18kUizb8hUy1/p19IZgdQWJBq6 + XrzXNqA9/iAHffu8fHK4rWUUITomiY46BHgnVMHaYYKyYhjP4/uvjw== -----END AGE ENCRYPTED FILE----- - recipient: age1mc6eyvnqt4ztmqdzt08zaher2ts37ypgzuh049v3cgv9j0rje96q5rm56k enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFbVJDcTR2UkUyOWhDNXFB - QlFVVGVEcE1OblRyVFdhUmFaeXJ5azdEclYwCkxSQ0wzTlRlbXBQTXh5ZE5vWW15 - d1Y0bElwL3RvSTQ5enlOQ2FsZ1NWam8KLS0tIEptQ2VqcmZIQm5oUGh3dUZqNmE2 - blBJVU4xZVVCRjJhVCtqdDhHbXMxcTAKFi1XlosHhGlTNUssVUva6sFhog6mPDmh - erbHu71kG6y810ukRCfr4trtcOTAHr2wKZlMY+T1+OubI4HGsp4Z2Q== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjbWhHMlZHU01KRGVCNWlG + bkg4cWZrMnZlRlovSm5jWlpHTDA3ME9VRGdVCnRvamd0YzhVTVhPN2dEMDU0U1l2 + Y3NGeDFnNEo0NHRvTE5QTEpTdkhnOW8KLS0tIHJGWmRIUldpOEIrMXpLWTR0aFhJ + T0pTWmdQUmYxZ2Z3TmZjdGU0MDZ4SjgKab2UgYienigrXUqJKVhauwFMAT9wlKN8 + z3MIc3J8SZn+UPyRvo15mYHbW1TYntLRKt0LYpZ9kJt+JIpEQGPv/Q== -----END AGE ENCRYPTED FILE----- - recipient: age1h7yp3psl5zyze8sl6lld6ksv6fcmul9z8mjwc4k78mwnys58c3ls9mgfdx enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGZVpROHIxdnhUSUJpNW9l - Sk16NjZiNHltbURLTE1VRzNyNXEyT3ZqTWdnCnpXQWRnYUUvOUpXQlNWa1RlZVRP - cXNjTnZHc3JnejhKSkppSjhtVFJtcjgKLS0tIDB3VEFMbFkwWXNzUU1ZbHRvL2hi - RFhtUDFXNUFVMHE0QVNYQWNMTTlSenMKNylDaOAtJCLxGFTyYiEyi4lppVpyC4fT - 3OJSBEg9NynveqM2CYy6WtcEqstHMAFNY0jWt7JhYmIlrSZGtqv5lg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4Zlh4RUpPeDdqb1RyZXVQ + NWVLd2RIc0JnM2tjM21HeUZmWmFYcHZqK2hJCjhmSElERU5NclpxbzMrYjViU1RB + TVNNbWg0YjJyODlZYjdIdDM1WDhnNVUKLS0tIEJTOXJxQlhYek1MYVJQQ0tRWSt5 + aVZETlp5eGlGaVg2MUR0UVpxbHJMa2sKvULBHfABahJsrXfVh9iBXnS6wWCmpfc+ + 6JTpzykxGO/+ZYgDfIZBO+YhSmykH7GFRidKwa/26Vm6ymsUjZLT5Q== -----END AGE ENCRYPTED FILE----- - recipient: age1qy9tvzlgek7fq4nl52e05ad6pyvglrtaxwjet9gr0fzq85z7cv9s6uxzkt enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0WmN5cCs1aS9aQWJrNW1M - UW5tQ3BOZzRJczc2UGdLVURLQk4yOHVoY2dvCkZub1BOMFZ5MGxwK0RGWEtZS2N4 - YjlBbmtUcDNrc09OKytHZjBDT0ZkV0EKLS0tIDVCUXMyczI1VG4rUGZGRGg1U01n - Mm9admR0eVBmVjVoZW9FQUlka3hhZmcKBfN2SeD7JXFxdxaOri4zRsBbzA4a+1p8 - agUztVCF+FGxvEChtBuH2Wsm3DyvGcldAMbMX72LZzLBjz/9FjXQ5Q== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXa2tMRWVDRUV3TElSclRr + OFh4WDhmcWczV2pWcFRiUldHT29VaGJxanpzCm5MdUFDeTlvWkIySmVhVmhTZDRz + NHVqK0Nvd2xBdTdNam5TeVhsdGFWZVUKLS0tIGxqUENsWlpVVnNnN0ZBYzRxK3kz + eExQR08vdmZLNENjeFZHbS8vdC9uc28KaoxjBdtUjF1KZEYfl0x/sVy3coN+bTQg + H4RqGcQOhzEI4GmR+pcyAkzwcNM7Etk5F/W84wLxyqav/kRJr7XjCg== -----END AGE ENCRYPTED FILE----- - recipient: age1kh4c0dmn809xzcf7ntpjm26h2xh4ljaq09r9n5s0tsjjpr55ff3qqmkuca enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRT0ttY3VOQm92MTlaNUJZ - MkxiaFdTdUROZFEwcStiRFBPZGJ5cHZQV1djCi9JWlYzK0NydU4rcTRXSmw0UlhT - VVBMc1ZrYWpqZ0d5OXg5cjJBWmRrRUkKLS0tIEJ5dEszYWhEakNQTDBrZVlUV1ps - WDhEMklrczBWM0I4YjEwdGRJVG5RVFkKpbRpjm3urlbt0tjD6YBq+Ts5cI3LC+lb - TnhIkHLgzXBlvY2aivN0QLJAshcgb1KxBfgfp4c9FdtyAUTMtRUXRQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJNGkzMUpKWDNubWVrcnpT + ajU4NWJ0UVU5RTZ5VWJzOXdkdVBTTjAyUmhrCkVNa3JvVHZDQ3dBNkdPcXdrWGtr + cWxHOUxzUXVFNWF1VVZoZkVWZFNPbGcKLS0tIFBqZnZSNFBsR2xJUXM4UXk3bjQ2 + OUpsbHJ3SkZZZmVNSDlDd0xGNXd5NVEKQVq3tYCRRkNwBTPnVx+RjoM5TOWLaWwd + /I5/A46xqwUpQyRXJOtfHwEWCMxvscm5Jxf9kKeGw/jrTSZze8k8eA== -----END AGE ENCRYPTED FILE----- - recipient: age1h9ty40uxgznh7s2d7l3cx74lkylpgvs8lknkvkjvqyy5kn5kfc8qz0zc4c enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpcG1WNk9zclQrUno3SXRW - amVDejVaRk0wYStYMGNvQkx0Tkc1aE5zUkc0CkVaTnoweiszd1ZrczExWit0elN3 - b0Zod2RFaldqZTFsWCtLM096aC85eFkKLS0tIDZYYU9uVklpNTVnMExmUEVHTTNp - K2k2bVZON3ZUcHBhd3o1Q1ZIRjh2SWMKmMmFfWbVbsgSuYu5AZU4s/M51zvbWxgi - 6ZP1HOG7BairVVpPBlyCSV8drXFkwSR9xDkRg18xtnLBWmqu4Gb2LA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEeU5tOWQreTFwREszRi83 + YTRLY0VyYUhIUXZGaXladzA5RWtmQ29jdW1VCmNwR1cxWFBtVUJ0VzkzTHFuOU51 + YmV5R29tRmdkL2lEVkNua1dFMXFIR28KLS0tIFYyazRtZnBKTUl0VUpDTnZaSXcw + a21NVkRCOHFDakpEOS91Ym5OcXJHMFEKnDou7N4R90FnpEeNEkfsYGRIOx6u4gPI + Fvmd0F5Q6DWLQZ7BmWcNqItl379c1NKwnTS5wtKHNfD9Ikk2EJ3Fjg== -----END AGE ENCRYPTED FILE----- - recipient: age18xjdme8vc657l8n7fzpn7twshprmtpc8p6usn257ajw0vftd8p8qxwwywn enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkVlVaMDg1eC8xOXdESzVR - LzRGT2wrVG9zS295b1V2eEdoTjIzOWlEalhjCnVWY3Y1YndYMllLY0VpZ3NxOW5R - RUR3eEE0V2FlWkYxNmwxek54Ykd0OE0KLS0tICtHa3pBQVdGUmpNVWZicENvc2gz - ajBUb3ZFUzQydE1vaVNCUlBRZHRGWVkK1eQVaf78NFQJhJuGPWp95/+EasiY06T9 - mzIT5G3SEsWVUNwutSalylzPPwfjumH+vROYZbeyAVNWm2FGNrZ5+g== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaUDI4UDFoQ201Uk43OHoz + bFkwRjVZNkFsVkpEZUdleXMwbmxFeVNOWVE4CmIwQUFwdTMyaEJ5dHF0ZUpYQ2Vn + TlhoODltVFRCRXY0K0ZFUFZsVzdSQkEKLS0tIEVBN2hFMFJDbnI4dEJkNmJKeEty + UEE1TVNwVU01cm9MaU45dWtydHB0THMKat1mOE4C7pGuRI7XQibPTECbWq8yqG8R + dBcBjnZ9Sh90feB8f5V4FENoP2dKYMPMZGs7vbQioo9T0o960SvFPg== -----END AGE ENCRYPTED FILE----- - recipient: age12f24j7fcq46cjuqjftv5pyffpunyhqj98ypqf729z89xzunzryts5d8kl0 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOUEMzYTJqVllEaUJpR2xa - WWdTeHE3Zjh3OVVqdEpHdGF1aW56Y1JHUzBNClk5WXBJZDhlYXYwTVVla3Vwd0pG - OGthTjlqOHB2dUlkVWZNVmZoalpkMkEKLS0tIEFLaW53Z2lVQVJLODNzak9KMkxo - Mlc5THJmelB5cW9MemxWcFZXV0wwcGsKJ8BZD24ASsb66L+ukEgHrg9pOZqfCrgX - DrELv3d3yrbdjjn8k754lgqWjzHGkOG2+tnvHcNmxU31GVOwELtk3Q== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkWTVyRWJobW1ONS9WNmJL + eWp0ZzBHNVdRU2psZTljTGxnYnlzVXF1TjBZCkRFMDlRT0RmYkNEVWJVMGhGbjJh + YzdrSUJlbGEyRWVndytnVGV0SnNGbEUKLS0tIGJPb3R4Zmw2ZHpybFM3eWxaNHVn + VXpmUmZlbElWZGVVMFNzK2NSU1MrM1EKMea0MU1esbwRFrIq6omrzI8h46gxScpL + nVf9wCF3Gs94Zfwmx2DQyxnwifKxzaBF8+H5qC8nPS50kB7jmYJNnw== -----END AGE ENCRYPTED FILE----- - recipient: age1jc4a52cukf6d94tt2meq8tnt084rhtdd93hwzjhzecc70rmvvapqtdng8v enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMN2RiOWd4N3ZHdndoVTRH - WlRPM3UvR2Q5UllEYkJMa3pmNWRrWmV6NTBVClRzdzJ1dDR1SENRdGI4UW41OGx1 - ZEl1YXI5VXhLMDJ3ZTdaSTZJVUJKTm8KLS0tIGNLQi9xOHI5YVJFU1JaYkJjNkVs - MDNGNlYwSDZwZ2VqWG5yVkFsZUhvVjAK0E1TjyWSdXjZj1aFcKmQGZs0ycn9Bn7F - a7LsApvKWiTar50XgboakXFs+NVBx61ORbXPN1puAQYk3zMsUS3flQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzNTNYSnJmYVVBMlR4YytC + cmlYRUpTZHJZOVBhUlpDZ1Fqc3BaTzNUWkg4CnRoNmI0TkV1SWF0UzhCc3l5ZFZw + WmRKVXAwOUVwcjRXSGhQL1R4TFo1RE0KLS0tIE9xYzhEdGxvT095MEliZzVqTk5M + cExiTkxKVmlTVm1FN0kxS0MvYmJtRHMKSurtuRkIO7hEULqXWK57JOQfuZDgccv3 + I56galwJc0ql+eLVGWPmRXBEa2NRsEveLKUjDU77xodDkZyaiYFp4w== -----END AGE ENCRYPTED FILE----- - recipient: age1s4hzwj982zk04kr7c5u0vlemkzalv72wtkttkgzt64xv8a4r25zqxra6u0 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRakFkVEFERFk1VXowbDdU - QXkrd3dXZWFMUkR4cmx2VUpDSjdvb01QM3c4CmJDSk9COTF6VmhNY0ZNTTBYZHp6 - VTZyUlRuQ2x1SkovY0Q3Y1ZuNkFOYm8KLS0tIGZjdkpFQ0N3RDAzT1lxMmRVVFFh - ZW10TXNoVWdlWldUSmdXYTQ3MnFyUGsKJZuAYxuhUet7F0XP1DjGGEismoF2HRo2 - eWvxibpS4I88cBm9zMneqOyjSG3zNpF2kzvZkGn6WNewGK6OcHVoiA== - -----END AGE ENCRYPTED FILE----- - - recipient: age15sqq6667xle2fk0vh0yy6qu0extnwxy9tl0pal5wrrcwsqeztf4qa47wtf - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFd2ZDZDlGVTI0TFJkZkxS - d0JLNXplR0tjZGQ5dG9NS0hRTUcxc2loa0hNCk5BTTZzcWZKVk9CaEhBNUNZZUxi - WHZUOUdieHRRMEVRSzNIU2p3eklncXMKLS0tIE9WZ0tTdVNTaWFIY3pwSkRTWjZL - K25Tbm50a0RhcEhzUEtkbGhCazdzeGcKkSIIsH8sqtaQRKteRo1L5DRbTthV9IeX - knCMJaeetJMn3TZ1ckXIC2REBe401fctVEnp4UAabzUodLYk9tQ3SA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWVER0dE9RYWJXa0N2aGVw + TzUxMjkwb0ZRaitKdnhFRllqMFRVb0tVMlNNCmo0ZFAvM0tlQzdaQWhVWWNISUVL + THk4Q0F6TkxBcUJLdm13UHVmL29rb28KLS0tIFA3dHB6aHVqckEzVHVrM3ByaUU3 + dzJpeFh3VGpjWnpoajFMcnBPcHE3aUEK07TzzaHN+ovWuPO2PU9gJ6H/63g+iXb2 + oCb4gFoTrkZohZj2fKATNFrrWSmtYTBYD/aUKisiq9u/OjVpsJGTKQ== -----END AGE ENCRYPTED FILE----- - recipient: age14cnx8ttzqndcsdz4xvmx07cvms6val5aanrf9qsg4j888hudufxqz9nm5p enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTOHdjVWluMlQ4bHJ2WHVF - OXhTSGExaGsxUEFhRi94R29ha1NDWTJ1NG1zCnVvNzgvMzVvR3YzL05ZcDRCbHFj - QnR3MXluZEROK1FwYmhIZFVLL0YvRlUKLS0tIDdoSHR0OE5scWtrYW1LQnkzOGNJ - eExxVGdXczFOWFk3QWJXd1NmNUdsb3cKetKl1woCM4pSP9AWGlqgcHJcg4twfmX3 - U72TSs+rAU8FYrivaYgo/Qa9NThmXVa2bpRHxTdTypN7p5yIh0uJgg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFWDFjQzNTR2V4MXI3K2hh + QWxkRzZ5dUswNldQN0I2NkpYQzM0YkdLd0hjCjZiZ2tnakNwYmJsa0dQWWErSTN5 + Zk5xcEVnRFdpbi9tdG1KTFgwOEVuMmMKLS0tIHBvZmo1cmRHZ2lieGtVTll5ZDZt + RXZaMWRETVBsZnZKY1dNdnNlTnF2ZEkKui0laj4q6pm7lKklxDAcVGIWJBptv4xF + JuCqfOXuYf6z6KMDohmeBbJNnLoRtWz4UKUBTRuahrIG3fUTyVs7Eg== -----END AGE ENCRYPTED FILE----- - recipient: age1cc80558u3f8pdwrmhev8264c0h9dkkm59sy40j7zms97qzxg0ffqza9en0 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBU3dDVktVUU10VmZmQ1VY - VFNFbXJEUmhNamNVeXkyZ0VFVzE4Z1llSkF3CkhWdVNacU5EUEdweWx0dzZuYzJp - a0hjYTA1ZFUyZHpOWFlhTnIrRmd2d00KLS0tIDdFcU02bjd5Z1FxMCsvcUo1NGNl - Rjc1SXFIRm01eGxpK1YvTHlRWW1ncUEKl9m1Rf13yAErvZ+KjvMX6bgoX9592j/+ - XLCnIlp7gufAYtlam+spsKwTff6Df4JNYoX4XPfMSkVeet53nZCLFg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3cGpIOTlsdHMxR1lRWU5u + dGRNNnIyQkgrbEJNNnZpeHY3SFk4b3NpWGpvCnh0QnJJY1BVeFdFZ2ZkZzlGTXVV + RmFYKy95MFZyVk5MalhNNGhjS1dRMEUKLS0tIGdKVGZYSUY4VXAzN0VHUU1INHJP + dXcyc3VhTmdtU2hSYWdoejRnSjBtZEUK+CGIibI1pb+E/avsd54tzxz7XgYT96SR + NDMDTPVlV/WQ9A+kT3BZ6x26zq7RLwjaRoQUK63CtSsTqeZsxDfsow== -----END AGE ENCRYPTED FILE----- - recipient: age198c9udn09u87zje4ctz4j8d2k5ey5kvgl34nfn573e9csx9mcs3q7a6q2u enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJNU8wNEwwRFNVL25QYjY5 - b1Q3b0dyblNIZktnN2k4MzBvVUZtdWNJQ0RJClhka05vdStuQ002NGlYWHJ1ZTlp - WExQRzVpZ3JBUmNwcGRBZTF3bytYQk0KLS0tIFVVbmc5bFRwNmJOc3pkbFo4K3hL - LzJFYzVXeVlOdVViZDVERnV6MTZ1aVEK2GDI3qwU8o0VRhkQwhlUx7SM0lb0I5uO - ZZ8AUCJ1FpxkdZtwsti55wCZSYSZIBNZcaKVjUJvWf44gZqTSA0fEg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4TlRKU29obGZYcWd6Y0Vm + OXBhNFBqRWxCVnB1R0VSczg1Mm9vRjd2ajBJCnk5bXNMZ0RTVUxQVER1YTZsYWp5 + aEU3ZitLYVByL2xyUFBUZlUzWU1odlUKLS0tIDRlZkhCaHlLODV5ZUZ1RmtQNjNu + REtwTEFReXJEa3R0bmJrRWxqRTV0U0UKMp7vXi3q2DdqMterWiJzeGXgBkKL+hPQ + u3otfcmxTcVGZXa/ykNqhUtrzrxn5aRcANKpX8Pb7VnKDELowaR9Dg== + -----END AGE ENCRYPTED FILE----- + - recipient: age1nsuxsnf64mcfgnggy5ehuqk3egp0rea3ldzst0f66full7ap7ews5eg46s + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOM3lXWmVjME1rc3ZXSi9G + NnY0QWdVTitXK1VxSDA4N2grMnZWdkM0dkdRCmFvdk4xcldwaGFwcVpCS2pML0dN + WjVnOG9PSUZmczhkSCtIVzdwenVTVjQKLS0tIGhoTTlxREFTWG82VTMvak0zdDhi + eW9RdVlKTEJuSDF4Tkh2UVpjSEYyMmsKPpXIB72BdEM9ZRF/mGlaatvtfP1ud2VR + rA+Kpog69J7l5mcoAWs+Y1H7h8817FyI5FZhZQ4v1T8cgXgYyX58AQ== -----END AGE ENCRYPTED FILE----- lastmodified: "2024-03-31T06:49:34Z" mac: ENC[AES256_GCM,data:1bMWUaJdcUfHknidzCUTcAdweOZhGlBKq20mF/kjWJ1uR7AvGax9Vr/1cMVDDCfAkS5hOGo47oHqGDooTk2eATGVM0ilO/yO3jxCsV+qUsmunbpb5LKOaYLR4tw4Fb863tsCmy87LefTRHPudtQfNhZ4EwGgh0jKfUvcG/5L3tE=,iv:wR2QVuNGcj0ltqzizx6AB5NIbfawWeHs4p0k0jJFpUI=,tag:Ho3mGPWthbJgdSAtNNw+sA==,type:str] diff --git a/secrets/dis-sociat-ing/default.yaml b/secrets/dis-sociat-ing/default.yaml new file mode 100644 index 0000000..97e268f --- /dev/null +++ b/secrets/dis-sociat-ing/default.yaml @@ -0,0 +1,48 @@ +db_password: ENC[AES256_GCM,data:SWlWYaD6m1q6Sp04zarZ/oZT+Jw0rcKOLfWMApJy0rM=,iv:WvfLqDNx2xmF5jcqL/wo4FORYTbO4hkPYbxikAkLYVE=,tag:U+aM+mhRuLVtLBhbl2WsfA==,type:str] +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: + - recipient: age1lq5q5g5qjsdcc3key0n6qytkc9z3qx3d3e96ap9zre2aqgvc9ujq82l9hd + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBraHpFRGxieFZPZWpKczhz + M3VrQlROMnlML2pZVTNuT1Eyd0ppdUVHcmw4CmxBYW1vVng0UVA4aVJuZVBmRXJJ + dkYyMDM5alBadFcvRHYvS3NIeDV1Z2sKLS0tIE9HcE5OTnp5SzVJV0pyQVRrN015 + NFlmVmF1MzJncEkrcUZMU2cxQVZ2cW8KP6hlp1ElwKfbUyIozkA/mYT3dC7h+rJM + Sd/Qzx/hTuIWUoZKBBx7W7myTMp4NQ3H0lTxZzGl1rt7HBJ/kpl2QQ== + -----END AGE ENCRYPTED FILE----- + - recipient: age1p0f62dwatt558sf5s4equdqwtg5m7lsnaytrf3xjnvmx3e0lqu4svtugyp + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuLzkzVVBUcWpnU0RLRnR0 + VytoYlJ0WXpvY1JlTzN1Z3VtUk4xYjI5WER3CkxWVG1ad1hrNnkwMStvZFl4enFW + UmV3WWdDQ0VkaTZwTUxYeWFKOUZ6Qm8KLS0tIE12TkU4ZWpKQ3NUL3FsUXFkRTZ1 + emJvWXVESUN5UEpIdEVQRlFqWEUzUHMK4TmQDaJbAEHI0FO70u1XaU4SR0dCjcDQ + Zd7iC7DrDBtGVkioDQyGJjXNOBaNYtiiMKOBpo8DmesWvGYeKvsV0Q== + -----END AGE ENCRYPTED FILE----- + - recipient: age13c5wv623jxjja5mjz7fajg9qqwvypzgsfqrs4tmk7rpgyzu7aufs4ul9f9 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtSUR6eVUxSVZlNkpiY21S + V2Rod01vSFU5WjZBbFZkdHMxZnlxbnFNNUdnCmNmSG9tMUpQYko2cEJTMzkwcTdz + TVM5eHlsNGFsSU5hZUxYNVlEQi8wdjAKLS0tIDVqTjhkMmk4dnVmdHUxblFiR1Zu + TFVqNmJrSldjekxnYUo4Vy9vR3BpMDgKC+eL4+xFA0Fl23ZVFKMbe0BgzAP4zB12 + QuzxPywoub0mseK5s7Kr6z4za/3kRHkSI6n/BxkkBX2dwSdz/8ALHw== + -----END AGE ENCRYPTED FILE----- + - recipient: age1qy9tvzlgek7fq4nl52e05ad6pyvglrtaxwjet9gr0fzq85z7cv9s6uxzkt + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBROElNNWpkZUxhV1ZWQ0VY + UExvM3A2NFRXS1NoSzBrZDkrV2dJWk83YXpNCjUwRFpURWhmTnBOVGRHaXl3QnhC + TmpqUzBNaU1zc1htd2NhQUNjUjRBMFEKLS0tIFZ1Z3VOYzRNQy9LOWIwQ3YrcWJ5 + V3h4WDhRdlF2R2Z5VUszUk4vQzBwS1EKnQAkwFKg33k6sB6WXDACLfQJaVeGr3Fs + 73DsdKHHfj2Hqr8U83fj4QpApaj2QkfdXZcduLTYQjEMGPnXPm55PQ== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2024-06-16T15:42:47Z" + mac: ENC[AES256_GCM,data:7k6hFvwFwpT9b5Ze1V6GgE2j4BCyAOh6jpvY1TVCssXFPWTeHPdL3OHvMqw7uhlU8KDBcz9mhNVZ9DkGArX0rf6yHT4pOGRR3rFD9xEfC0Wo5ACRREo7NLdN+sA+xrtpjAPcqbxnNV729KgmLr4QGynk6tgGcYJ/bFrJ14OwVug=,iv:OjHXaMymG8lCtG+LLCqZpU90oJuHRxQ+/lDYwtQFU0Q=,tag:aMr19KB7BzXcfTjWZqGdDA==,type:str] + pgp: [] + unencrypted_suffix: _unencrypted + version: 3.8.1