adtya/configuration.nix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

flake: rotate some secrets

Browse source
This commit is contained in:
Adithya 2024-11-23 00:22:55 +05:30
parent 3574b207eb
commit 29fd0a24b4
Signed by: adtya
GPG key ID: B8857BFBA2C47B9C
3 changed files with 43 additions and 42 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
.sops.yaml
View file

@ -6,7 +6,7 @@ keys:
- &host_rico2 age19uy6xerll6st3s3ftfpy7075m9eetm2288l2w07k7ek6z2l3ef6qfw34cf - &host_rico2 age19uy6xerll6st3s3ftfpy7075m9eetm2288l2w07k7ek6z2l3ef6qfw34cf
- &host_wynne age1jyaf9rn5d5pqjh60shs2q5hs98fwugak8z6cs6qs7yuc3wntugmsumxmv0 - &host_wynne age1jyaf9rn5d5pqjh60shs2q5hs98fwugak8z6cs6qs7yuc3wntugmsumxmv0
- &host_layne age1k2wpm88wms6hx3ldvu0n2je7pag9fexs9eq0e8hlkfcs2dx9eg9qlkf95d - &host_layne age1k2wpm88wms6hx3ldvu0n2je7pag9fexs9eq0e8hlkfcs2dx9eg9qlkf95d
- &host_bifrost age1d2anhmqdewykt3mgz6azsyz0yh7wc9ap6ga46myzwg84c9rpspws9ze3l4 - &host_bifrost age19utpmjh07n2s860s9h2mqmwfh836ne0r2nkdl6444nvsyfrudcss9nvzck
creation_rules: creation_rules:
- path_regex: secrets.yaml - path_regex: secrets.yaml
key_groups: key_groups:

1
flake.nix
View file

@ -293,6 +293,7 @@
statix statix
sops sops
age age
ssh-to-age
deploy-rs.packages.${pkgs.system}.default deploy-rs.packages.${pkgs.system}.default
]; ];
}; };

82
secrets.yaml
View file

@ -29,74 +29,74 @@ sops:
- recipient: age1w5rvr4nl8xvjjxpct4e2a2eajvm79v4r9nyxrcn40fm8d7h9l9cqkk0jtt - recipient: age1w5rvr4nl8xvjjxpct4e2a2eajvm79v4r9nyxrcn40fm8d7h9l9cqkk0jtt
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvMHVtdzBwTFZ1Wk0vZnJ6 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBETGhsZ21zUXBKUDdEdmxm
aDVTcTFTaElaWW1BcVlwa0FBUlBtVERjbnhBClJ0c3F1S0NwM2lqSlRyd3JWcnpt THRlYngzTFFZQlllb1pER1k0NjhUYTVRdVFvClNiTzBvb1ViVkhXZC82RkZPTk5j
dWlOV3VaWEFiN0I3U0dmcmtCTkdQOTQKLS0tICtoczZvN1NFaDBqTS9vQzNuVk44 cHY2bTZJd2RJZVE5aFhSdG1wWXorYVkKLS0tIEFFTEh4eUNBTmFzQWVpRG1aVlNF
aHlwWlZYSElMeVZCbXdoWkxjMGZ3MFUKYSqnaxaJzeDXsWPmo8hocgIyKvFLR0+O M0psZGIzVGp6S0xWejA4REtRVVRFSHcK4/aIxW5G+IkNQwg6vyCFP/6X1WkSnS61
A1Axsokssk7qkx3k/5sHOl/HGJ9gQ8yamBiuIJxAJPYuhzIO7hMhhg== fgPWrEQjJS+vuVA+o2Lt9+xl4EhD7unDABHgXLEELEZBEPvD4j9OTw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1mhks8qmhjrtc2u5ufvp3pv2hn7tkadvmscnp7wd0ywmnse0szctqsnpy0a - recipient: age1mhks8qmhjrtc2u5ufvp3pv2hn7tkadvmscnp7wd0ywmnse0szctqsnpy0a
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPYmZCMENwNVFHeFNkUlBs YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYUThUSlY0RlYrOU45TjFI
bG53UmRsMzBvN1cvNE0xNVpHUU94K0thKzJnCjIrN3g5eENXcnNsYUZjUUFxclp2 ZU9vd25pendWY1VuVkZ6SWp4aHMyUzlVY1dFCnkxRjhOVzdNWTdCVm9ZeGZuSlBt
VS9zT05HSFBrR3Bmb2lGbmJRemVGQU0KLS0tIFVLSlVsS1lSQVpTcEZNbllDeE9Q WHI1YjlSWkxJRHBzeVdhWlNieWIrNE0KLS0tIGlCNE9DWEh5OS9ETlBmdEV3NHJH
dGN2cUpHWFErb0FNWjlRZGZmaW1QYXcKeAe2bsynzdtlKzXDplmbY1WYSZjIJtQ6 ZkZnUmdtbC8vNnF2S2s0aDl0anEwVlUK+wVMT1PRYJKgOArgtC/joZuXAdsMo9GL
Vz1iUUFdAol3qs8VbUdrc6vASxZT5MAWGbe+cSl/D3XWizspVyGblw== JiJLBD+qElsUaw7ua3m6XhogAt81LgDanAVyttW5otO+qD1/Gu/SEw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age106k9u5ns9h7smh3gqc40k9fft5emknvq669qdv8a29ak3ah4j38s5ng2gt - recipient: age106k9u5ns9h7smh3gqc40k9fft5emknvq669qdv8a29ak3ah4j38s5ng2gt
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGT3VRcUpRWmxSZDYvMnBQ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQd1lqc0Z2RWNsWXBwQy9D
cCtheTNiempOT0ZOdzZmcE5vcEk2Z0dVMFRzCktmODRFamRGbWgrLzNCTFlRNHdn ZTFvSm1VWGdYSlgrdjFQbFlXeXRET2NyTmhnCmVLV2doMWpyZG8xeCtlc3RsT3h1
cjNuOThPV0xuYUIzbVMyUHhwUitOblEKLS0tIDV6d2lhcHR1UmRrZGYrdGxrREhY UGZWSG1HTGJwRnljME56WHZXWnZQdzQKLS0tIHkzMnpKQnF1SU03UUh0WUYxRUtw
TktweVg3KzlITmJYS1drZG94TDNycVUKliVvdGzIWfQFglMF7OgfvE77PT8cXnWq dXFhY05vMzN3MDgxeXgwdzBZTUFTejAKGehTsUSM1IQ7DMxrsl2tAv1xTqVnV5Vo
+lOBhJZV57EFxNUaQ7B4HEzTSrs7cXxpoTfww4xELgVGsXidRdP9zA== BzTY7+ZPScj3fyd5q0NmoYm/aF+rEzZ9mvgIc1uu9uV7ibgLO3h7cA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1829x4l8vdhcn97af0zq898tupll0smrqywxka4pswkt6mtn8qp7qqnnnl4 - recipient: age1829x4l8vdhcn97af0zq898tupll0smrqywxka4pswkt6mtn8qp7qqnnnl4
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDTXc5VDJyTVlvYzRpTjFm YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZTDRUZjJpcVQzN01meWZH
M2svWVVmVlE0bkJGS0NtWGpKckoxTnJxWGl3CjZlZXNJSFJtb0ZBY3dobll3UDJG TWJwdll1N1FrRy8rbzQ1cXg3cldFc20xeURNCk9aSjVNczJHelU2SHpvR0paMzFa
RERlaTF4RTU3U0oreGgwNVhVMkcreTAKLS0tIGpCN2lLUFozaC9tSWZZK1lhaHBh d0hMd1BQNzNaTms5NXJVSFlQcW9sOFUKLS0tIFlodkU2Y29qVGNZeUd2b1RlQlJt
aU5Qc3NQcEl4NUJTQVZwTFd0a2pxc3MKmDqrWH8QcJoSmco+Wv6sFvAABxb4BEqV alZtWlZ3TktiZE5WNGFrdzA0dS93eDAKKpvVzsSwqJURad7yl5l/YoRJdluF2q8G
0zYwJvu8WJfyZM9fjXwbiSThX3AmheHYmvu8D4N4TDPXh1vPduK9SQ== nlgvIoPAQvdtWiUh4/ux/eMR4ApryUwGk/m5zlyEYzp11lTQfpCz+w==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age19uy6xerll6st3s3ftfpy7075m9eetm2288l2w07k7ek6z2l3ef6qfw34cf - recipient: age19uy6xerll6st3s3ftfpy7075m9eetm2288l2w07k7ek6z2l3ef6qfw34cf
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTaDdHUmlxT0hBazduNi9Q YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4REtVSHRjUFF2ejd5YmEy
ZXlhNkMzcEE3bFFIUXhieVMwRGFRczJOY1VVCnhKV3RDTG9yRjIrNEl4UHpQSDd0 eUc3WE9FbmRHQ2w2dHN5bWJ0Q1FDeE5HNVI4ClJ0SjEvY1NkMUdSckFQQW5oTGli
OFk4NXpuNmVWQjZjZHVINjUxMG1NYzgKLS0tIGt4RGJudENhTE5zMnVlWG9yaHd3 OUJtQlVjMlNaemJ2RFpuUklITTE1ZUkKLS0tIGZwLzFvMk0vU1lyZlkyNE5Tek5Z
R1JtRWR2cXh2RjZWeXFOWXI4ZVRJYjQKcxj4IYW0N67chn3nvkVD4fpaPLG4pIsA d1pUK2VuRlZ2K0VYUG9SN2VtYmtQMmMKdqe1ym86lCWEeGQszr7ZW0+8mgelaWfi
NSHHuUJVkyWzagfr7KwlTNy732Pmo+Z0/tsPgU6tujEJ6UZHCV990w== mwrRGQ9cAOSklkK5V5W+vbtEol6mAiQwy2TJ4rDlx1Gs0p/GTF5l6g==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1jyaf9rn5d5pqjh60shs2q5hs98fwugak8z6cs6qs7yuc3wntugmsumxmv0 - recipient: age1jyaf9rn5d5pqjh60shs2q5hs98fwugak8z6cs6qs7yuc3wntugmsumxmv0
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIckk3VVNWcWFtRG1NSHlu YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJbTIvUmladGZsYU5jaGd1
bWR2MTRCM1hBM0ZFNk9UL1h0OWRJQVFlU0RjCmNKcmdIZWhEeVlySkF1dDZUSUpM ekdhUU1UMVUvMjFrbTBVNXpzNUJjaVdWbVJrClpDZmZQWnM5RE9FT0cyRG5NWHlu
bHlVOW1SMUNZcXVJa2QrOFdyc053djgKLS0tIDYxSVI5MGhLQ3N6NSs5empjSFRK ajNyaVBOS211T2N6U09yRnBGVW9aWWsKLS0tIFMxR09IYzUyYzZCTURoaE1XNVh4
bitpYzl1cUxrb3pSelFDT1h6RDlWL0EKjXmQt08XgxJ6JBjjXmrtEqFqFQH9HG1j YXVzUHQvNUlXaVhYbm91SHNGcElFSmMKalYPKFclH/u+07KlCPwkwf/acTWNeOdn
d1uWcoKE1lYJifBtGUL1/U26RelucSYpBf09czN1DcOqGziyhlRg0g== ufqMJNuNB0u1Ah734pU8jBJvXX3omiL3yxfREGjGaf4Ook8BshK73w==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1k2wpm88wms6hx3ldvu0n2je7pag9fexs9eq0e8hlkfcs2dx9eg9qlkf95d - recipient: age1k2wpm88wms6hx3ldvu0n2je7pag9fexs9eq0e8hlkfcs2dx9eg9qlkf95d
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGUHgvZHcyVkIxc2NIWCtk YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYOS9zOVk5a0Z3RTc5bmVj
OEZkMFE5VFdKQ0NuSjBzdndsTit4YWpHdzE0Cjl5a09KRDA4aUtXTGpDTkJZRnJn WEswTm4yV1hBRlVvak1XS3hnV3RUajB6aGh3CnFjZEFKUE1PcU1YODlaenQrT2Ji
RXhLSXhoTVFwa2NRU3hUTjdQYW4vN28KLS0tIE5XRSsxN3FqbGZmTkFlY0N5NkdJ T2RSV01UdEhEWFg0YlZmTXNqTC8ycW8KLS0tIGtWblU4cDh0SjlhRE1wVmgxTjNU
OXJsTUkzeFpCd1NkWkNnaUZRKzFkeVEKhPv18blHw8cJpF63eo1yulMB5QFLRfZB M1NEVVZGMGlCQ1FzQkpDTTJCd3lyOU0KDs5SZeeJvJ9q6IdvGbRUtw6fo03urXQ3
bsWMe8pVgM/9uuYb8cpDNulYL8caIcbLoAiIg1xMBqlsiSBgIlF7Zw== DTpD1+SSxYunUhQ7nZSaHfoJ+XB2ixhD48mx9LwRs+YJkWBvvrVwag==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1d2anhmqdewykt3mgz6azsyz0yh7wc9ap6ga46myzwg84c9rpspws9ze3l4 - recipient: age19utpmjh07n2s860s9h2mqmwfh836ne0r2nkdl6444nvsyfrudcss9nvzck
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUT3NKclcwaERiM3gzV2o1 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLQ093TmtqTWc1Y016dHdv
SGw5MVY0SjhNZ1Yyc0dFbm9DMFdseGU0UUVFCkVXd1IvU3ZPWm5pVnFOb21kbWVr T1J2empYcUhUUEMyZE1VbFE2Z2ZQeEhGNzI4ClY2UHZNVzEvNms3ellvZkRkNGM1
emFFVGg0MXFienlHd3ZmY2p2Yyt2SjQKLS0tIFpZWGNINnFRdUJZQW9YeGxrUnN4 RVlMMVVSbkpEREFaQ3JNQ256bnBKeWMKLS0tIGR4TytxQW4zUkdhWU1rZjY3Z085
WUc1Tm4wMkxUM2xybjFKK2VqWU9GSFEKVhMLzPF5CT/W0PC5jsNzpIE8wtRrUdfH Ynd0czBOK0NCdnZIQzNJZ3BqNndlSG8Kg9UUjMZ2p7xUhHLEL6SjSiVPw5JemYxh
QHKId9QbaEaz8c85iXppJwONJJ2eTWUElj4ZVLUacgiqyS+rBiyuFw== sdiuZVVxzEasXLXXk6tax6AD5fz5mXEhXB24Op5scF4+VTfSZ+g9Cg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-11-22T05:40:29Z" lastmodified: "2024-11-22T05:40:29Z"
mac: ENC[AES256_GCM,data:dialk5LEy/M+zx839s9YKU1DxPOPkBadMAcXqkvyDE20dr0EoXjeNa9oQMuA++RsCUJfUKAOskyqjCFhLjDD4VHNr1htE4uBpfRS196p16Cgp4Qp12uj51D/7JCgQeAwGAwc1K7R0z1lXfrqDE2I6xrGcTWxlJcN7PN6IT2X6tA=,iv:Y5alGY//VAXd3yiHR//5BbZumLU3IyBJNvWweVKUDeM=,tag:rfn/6RLQlGU+nXZPlIQjfg==,type:str] mac: ENC[AES256_GCM,data:dialk5LEy/M+zx839s9YKU1DxPOPkBadMAcXqkvyDE20dr0EoXjeNa9oQMuA++RsCUJfUKAOskyqjCFhLjDD4VHNr1htE4uBpfRS196p16Cgp4Qp12uj51D/7JCgQeAwGAwc1K7R0z1lXfrqDE2I6xrGcTWxlJcN7PN6IT2X6tA=,iv:Y5alGY//VAXd3yiHR//5BbZumLU3IyBJNvWweVKUDeM=,tag:rfn/6RLQlGU+nXZPlIQjfg==,type:str]