flake: rotate some secrets
This commit is contained in:
parent
3574b207eb
commit
29fd0a24b4
3 changed files with 43 additions and 42 deletions
|
@ -6,7 +6,7 @@ keys:
|
||||||
- &host_rico2 age19uy6xerll6st3s3ftfpy7075m9eetm2288l2w07k7ek6z2l3ef6qfw34cf
|
- &host_rico2 age19uy6xerll6st3s3ftfpy7075m9eetm2288l2w07k7ek6z2l3ef6qfw34cf
|
||||||
- &host_wynne age1jyaf9rn5d5pqjh60shs2q5hs98fwugak8z6cs6qs7yuc3wntugmsumxmv0
|
- &host_wynne age1jyaf9rn5d5pqjh60shs2q5hs98fwugak8z6cs6qs7yuc3wntugmsumxmv0
|
||||||
- &host_layne age1k2wpm88wms6hx3ldvu0n2je7pag9fexs9eq0e8hlkfcs2dx9eg9qlkf95d
|
- &host_layne age1k2wpm88wms6hx3ldvu0n2je7pag9fexs9eq0e8hlkfcs2dx9eg9qlkf95d
|
||||||
- &host_bifrost age1d2anhmqdewykt3mgz6azsyz0yh7wc9ap6ga46myzwg84c9rpspws9ze3l4
|
- &host_bifrost age19utpmjh07n2s860s9h2mqmwfh836ne0r2nkdl6444nvsyfrudcss9nvzck
|
||||||
creation_rules:
|
creation_rules:
|
||||||
- path_regex: secrets.yaml
|
- path_regex: secrets.yaml
|
||||||
key_groups:
|
key_groups:
|
||||||
|
|
|
@ -293,6 +293,7 @@
|
||||||
statix
|
statix
|
||||||
sops
|
sops
|
||||||
age
|
age
|
||||||
|
ssh-to-age
|
||||||
deploy-rs.packages.${pkgs.system}.default
|
deploy-rs.packages.${pkgs.system}.default
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
|
|
82
secrets.yaml
82
secrets.yaml
|
@ -29,74 +29,74 @@ sops:
|
||||||
- recipient: age1w5rvr4nl8xvjjxpct4e2a2eajvm79v4r9nyxrcn40fm8d7h9l9cqkk0jtt
|
- recipient: age1w5rvr4nl8xvjjxpct4e2a2eajvm79v4r9nyxrcn40fm8d7h9l9cqkk0jtt
|
||||||
enc: |
|
enc: |
|
||||||
-----BEGIN AGE ENCRYPTED FILE-----
|
-----BEGIN AGE ENCRYPTED FILE-----
|
||||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvMHVtdzBwTFZ1Wk0vZnJ6
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBETGhsZ21zUXBKUDdEdmxm
|
||||||
aDVTcTFTaElaWW1BcVlwa0FBUlBtVERjbnhBClJ0c3F1S0NwM2lqSlRyd3JWcnpt
|
THRlYngzTFFZQlllb1pER1k0NjhUYTVRdVFvClNiTzBvb1ViVkhXZC82RkZPTk5j
|
||||||
dWlOV3VaWEFiN0I3U0dmcmtCTkdQOTQKLS0tICtoczZvN1NFaDBqTS9vQzNuVk44
|
cHY2bTZJd2RJZVE5aFhSdG1wWXorYVkKLS0tIEFFTEh4eUNBTmFzQWVpRG1aVlNF
|
||||||
aHlwWlZYSElMeVZCbXdoWkxjMGZ3MFUKYSqnaxaJzeDXsWPmo8hocgIyKvFLR0+O
|
M0psZGIzVGp6S0xWejA4REtRVVRFSHcK4/aIxW5G+IkNQwg6vyCFP/6X1WkSnS61
|
||||||
A1Axsokssk7qkx3k/5sHOl/HGJ9gQ8yamBiuIJxAJPYuhzIO7hMhhg==
|
fgPWrEQjJS+vuVA+o2Lt9+xl4EhD7unDABHgXLEELEZBEPvD4j9OTw==
|
||||||
-----END AGE ENCRYPTED FILE-----
|
-----END AGE ENCRYPTED FILE-----
|
||||||
- recipient: age1mhks8qmhjrtc2u5ufvp3pv2hn7tkadvmscnp7wd0ywmnse0szctqsnpy0a
|
- recipient: age1mhks8qmhjrtc2u5ufvp3pv2hn7tkadvmscnp7wd0ywmnse0szctqsnpy0a
|
||||||
enc: |
|
enc: |
|
||||||
-----BEGIN AGE ENCRYPTED FILE-----
|
-----BEGIN AGE ENCRYPTED FILE-----
|
||||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPYmZCMENwNVFHeFNkUlBs
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYUThUSlY0RlYrOU45TjFI
|
||||||
bG53UmRsMzBvN1cvNE0xNVpHUU94K0thKzJnCjIrN3g5eENXcnNsYUZjUUFxclp2
|
ZU9vd25pendWY1VuVkZ6SWp4aHMyUzlVY1dFCnkxRjhOVzdNWTdCVm9ZeGZuSlBt
|
||||||
VS9zT05HSFBrR3Bmb2lGbmJRemVGQU0KLS0tIFVLSlVsS1lSQVpTcEZNbllDeE9Q
|
WHI1YjlSWkxJRHBzeVdhWlNieWIrNE0KLS0tIGlCNE9DWEh5OS9ETlBmdEV3NHJH
|
||||||
dGN2cUpHWFErb0FNWjlRZGZmaW1QYXcKeAe2bsynzdtlKzXDplmbY1WYSZjIJtQ6
|
ZkZnUmdtbC8vNnF2S2s0aDl0anEwVlUK+wVMT1PRYJKgOArgtC/joZuXAdsMo9GL
|
||||||
Vz1iUUFdAol3qs8VbUdrc6vASxZT5MAWGbe+cSl/D3XWizspVyGblw==
|
JiJLBD+qElsUaw7ua3m6XhogAt81LgDanAVyttW5otO+qD1/Gu/SEw==
|
||||||
-----END AGE ENCRYPTED FILE-----
|
-----END AGE ENCRYPTED FILE-----
|
||||||
- recipient: age106k9u5ns9h7smh3gqc40k9fft5emknvq669qdv8a29ak3ah4j38s5ng2gt
|
- recipient: age106k9u5ns9h7smh3gqc40k9fft5emknvq669qdv8a29ak3ah4j38s5ng2gt
|
||||||
enc: |
|
enc: |
|
||||||
-----BEGIN AGE ENCRYPTED FILE-----
|
-----BEGIN AGE ENCRYPTED FILE-----
|
||||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGT3VRcUpRWmxSZDYvMnBQ
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQd1lqc0Z2RWNsWXBwQy9D
|
||||||
cCtheTNiempOT0ZOdzZmcE5vcEk2Z0dVMFRzCktmODRFamRGbWgrLzNCTFlRNHdn
|
ZTFvSm1VWGdYSlgrdjFQbFlXeXRET2NyTmhnCmVLV2doMWpyZG8xeCtlc3RsT3h1
|
||||||
cjNuOThPV0xuYUIzbVMyUHhwUitOblEKLS0tIDV6d2lhcHR1UmRrZGYrdGxrREhY
|
UGZWSG1HTGJwRnljME56WHZXWnZQdzQKLS0tIHkzMnpKQnF1SU03UUh0WUYxRUtw
|
||||||
TktweVg3KzlITmJYS1drZG94TDNycVUKliVvdGzIWfQFglMF7OgfvE77PT8cXnWq
|
dXFhY05vMzN3MDgxeXgwdzBZTUFTejAKGehTsUSM1IQ7DMxrsl2tAv1xTqVnV5Vo
|
||||||
+lOBhJZV57EFxNUaQ7B4HEzTSrs7cXxpoTfww4xELgVGsXidRdP9zA==
|
BzTY7+ZPScj3fyd5q0NmoYm/aF+rEzZ9mvgIc1uu9uV7ibgLO3h7cA==
|
||||||
-----END AGE ENCRYPTED FILE-----
|
-----END AGE ENCRYPTED FILE-----
|
||||||
- recipient: age1829x4l8vdhcn97af0zq898tupll0smrqywxka4pswkt6mtn8qp7qqnnnl4
|
- recipient: age1829x4l8vdhcn97af0zq898tupll0smrqywxka4pswkt6mtn8qp7qqnnnl4
|
||||||
enc: |
|
enc: |
|
||||||
-----BEGIN AGE ENCRYPTED FILE-----
|
-----BEGIN AGE ENCRYPTED FILE-----
|
||||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDTXc5VDJyTVlvYzRpTjFm
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZTDRUZjJpcVQzN01meWZH
|
||||||
M2svWVVmVlE0bkJGS0NtWGpKckoxTnJxWGl3CjZlZXNJSFJtb0ZBY3dobll3UDJG
|
TWJwdll1N1FrRy8rbzQ1cXg3cldFc20xeURNCk9aSjVNczJHelU2SHpvR0paMzFa
|
||||||
RERlaTF4RTU3U0oreGgwNVhVMkcreTAKLS0tIGpCN2lLUFozaC9tSWZZK1lhaHBh
|
d0hMd1BQNzNaTms5NXJVSFlQcW9sOFUKLS0tIFlodkU2Y29qVGNZeUd2b1RlQlJt
|
||||||
aU5Qc3NQcEl4NUJTQVZwTFd0a2pxc3MKmDqrWH8QcJoSmco+Wv6sFvAABxb4BEqV
|
alZtWlZ3TktiZE5WNGFrdzA0dS93eDAKKpvVzsSwqJURad7yl5l/YoRJdluF2q8G
|
||||||
0zYwJvu8WJfyZM9fjXwbiSThX3AmheHYmvu8D4N4TDPXh1vPduK9SQ==
|
nlgvIoPAQvdtWiUh4/ux/eMR4ApryUwGk/m5zlyEYzp11lTQfpCz+w==
|
||||||
-----END AGE ENCRYPTED FILE-----
|
-----END AGE ENCRYPTED FILE-----
|
||||||
- recipient: age19uy6xerll6st3s3ftfpy7075m9eetm2288l2w07k7ek6z2l3ef6qfw34cf
|
- recipient: age19uy6xerll6st3s3ftfpy7075m9eetm2288l2w07k7ek6z2l3ef6qfw34cf
|
||||||
enc: |
|
enc: |
|
||||||
-----BEGIN AGE ENCRYPTED FILE-----
|
-----BEGIN AGE ENCRYPTED FILE-----
|
||||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTaDdHUmlxT0hBazduNi9Q
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4REtVSHRjUFF2ejd5YmEy
|
||||||
ZXlhNkMzcEE3bFFIUXhieVMwRGFRczJOY1VVCnhKV3RDTG9yRjIrNEl4UHpQSDd0
|
eUc3WE9FbmRHQ2w2dHN5bWJ0Q1FDeE5HNVI4ClJ0SjEvY1NkMUdSckFQQW5oTGli
|
||||||
OFk4NXpuNmVWQjZjZHVINjUxMG1NYzgKLS0tIGt4RGJudENhTE5zMnVlWG9yaHd3
|
OUJtQlVjMlNaemJ2RFpuUklITTE1ZUkKLS0tIGZwLzFvMk0vU1lyZlkyNE5Tek5Z
|
||||||
R1JtRWR2cXh2RjZWeXFOWXI4ZVRJYjQKcxj4IYW0N67chn3nvkVD4fpaPLG4pIsA
|
d1pUK2VuRlZ2K0VYUG9SN2VtYmtQMmMKdqe1ym86lCWEeGQszr7ZW0+8mgelaWfi
|
||||||
NSHHuUJVkyWzagfr7KwlTNy732Pmo+Z0/tsPgU6tujEJ6UZHCV990w==
|
mwrRGQ9cAOSklkK5V5W+vbtEol6mAiQwy2TJ4rDlx1Gs0p/GTF5l6g==
|
||||||
-----END AGE ENCRYPTED FILE-----
|
-----END AGE ENCRYPTED FILE-----
|
||||||
- recipient: age1jyaf9rn5d5pqjh60shs2q5hs98fwugak8z6cs6qs7yuc3wntugmsumxmv0
|
- recipient: age1jyaf9rn5d5pqjh60shs2q5hs98fwugak8z6cs6qs7yuc3wntugmsumxmv0
|
||||||
enc: |
|
enc: |
|
||||||
-----BEGIN AGE ENCRYPTED FILE-----
|
-----BEGIN AGE ENCRYPTED FILE-----
|
||||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIckk3VVNWcWFtRG1NSHlu
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJbTIvUmladGZsYU5jaGd1
|
||||||
bWR2MTRCM1hBM0ZFNk9UL1h0OWRJQVFlU0RjCmNKcmdIZWhEeVlySkF1dDZUSUpM
|
ekdhUU1UMVUvMjFrbTBVNXpzNUJjaVdWbVJrClpDZmZQWnM5RE9FT0cyRG5NWHlu
|
||||||
bHlVOW1SMUNZcXVJa2QrOFdyc053djgKLS0tIDYxSVI5MGhLQ3N6NSs5empjSFRK
|
ajNyaVBOS211T2N6U09yRnBGVW9aWWsKLS0tIFMxR09IYzUyYzZCTURoaE1XNVh4
|
||||||
bitpYzl1cUxrb3pSelFDT1h6RDlWL0EKjXmQt08XgxJ6JBjjXmrtEqFqFQH9HG1j
|
YXVzUHQvNUlXaVhYbm91SHNGcElFSmMKalYPKFclH/u+07KlCPwkwf/acTWNeOdn
|
||||||
d1uWcoKE1lYJifBtGUL1/U26RelucSYpBf09czN1DcOqGziyhlRg0g==
|
ufqMJNuNB0u1Ah734pU8jBJvXX3omiL3yxfREGjGaf4Ook8BshK73w==
|
||||||
-----END AGE ENCRYPTED FILE-----
|
-----END AGE ENCRYPTED FILE-----
|
||||||
- recipient: age1k2wpm88wms6hx3ldvu0n2je7pag9fexs9eq0e8hlkfcs2dx9eg9qlkf95d
|
- recipient: age1k2wpm88wms6hx3ldvu0n2je7pag9fexs9eq0e8hlkfcs2dx9eg9qlkf95d
|
||||||
enc: |
|
enc: |
|
||||||
-----BEGIN AGE ENCRYPTED FILE-----
|
-----BEGIN AGE ENCRYPTED FILE-----
|
||||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGUHgvZHcyVkIxc2NIWCtk
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYOS9zOVk5a0Z3RTc5bmVj
|
||||||
OEZkMFE5VFdKQ0NuSjBzdndsTit4YWpHdzE0Cjl5a09KRDA4aUtXTGpDTkJZRnJn
|
WEswTm4yV1hBRlVvak1XS3hnV3RUajB6aGh3CnFjZEFKUE1PcU1YODlaenQrT2Ji
|
||||||
RXhLSXhoTVFwa2NRU3hUTjdQYW4vN28KLS0tIE5XRSsxN3FqbGZmTkFlY0N5NkdJ
|
T2RSV01UdEhEWFg0YlZmTXNqTC8ycW8KLS0tIGtWblU4cDh0SjlhRE1wVmgxTjNU
|
||||||
OXJsTUkzeFpCd1NkWkNnaUZRKzFkeVEKhPv18blHw8cJpF63eo1yulMB5QFLRfZB
|
M1NEVVZGMGlCQ1FzQkpDTTJCd3lyOU0KDs5SZeeJvJ9q6IdvGbRUtw6fo03urXQ3
|
||||||
bsWMe8pVgM/9uuYb8cpDNulYL8caIcbLoAiIg1xMBqlsiSBgIlF7Zw==
|
DTpD1+SSxYunUhQ7nZSaHfoJ+XB2ixhD48mx9LwRs+YJkWBvvrVwag==
|
||||||
-----END AGE ENCRYPTED FILE-----
|
-----END AGE ENCRYPTED FILE-----
|
||||||
- recipient: age1d2anhmqdewykt3mgz6azsyz0yh7wc9ap6ga46myzwg84c9rpspws9ze3l4
|
- recipient: age19utpmjh07n2s860s9h2mqmwfh836ne0r2nkdl6444nvsyfrudcss9nvzck
|
||||||
enc: |
|
enc: |
|
||||||
-----BEGIN AGE ENCRYPTED FILE-----
|
-----BEGIN AGE ENCRYPTED FILE-----
|
||||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUT3NKclcwaERiM3gzV2o1
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLQ093TmtqTWc1Y016dHdv
|
||||||
SGw5MVY0SjhNZ1Yyc0dFbm9DMFdseGU0UUVFCkVXd1IvU3ZPWm5pVnFOb21kbWVr
|
T1J2empYcUhUUEMyZE1VbFE2Z2ZQeEhGNzI4ClY2UHZNVzEvNms3ellvZkRkNGM1
|
||||||
emFFVGg0MXFienlHd3ZmY2p2Yyt2SjQKLS0tIFpZWGNINnFRdUJZQW9YeGxrUnN4
|
RVlMMVVSbkpEREFaQ3JNQ256bnBKeWMKLS0tIGR4TytxQW4zUkdhWU1rZjY3Z085
|
||||||
WUc1Tm4wMkxUM2xybjFKK2VqWU9GSFEKVhMLzPF5CT/W0PC5jsNzpIE8wtRrUdfH
|
Ynd0czBOK0NCdnZIQzNJZ3BqNndlSG8Kg9UUjMZ2p7xUhHLEL6SjSiVPw5JemYxh
|
||||||
QHKId9QbaEaz8c85iXppJwONJJ2eTWUElj4ZVLUacgiqyS+rBiyuFw==
|
sdiuZVVxzEasXLXXk6tax6AD5fz5mXEhXB24Op5scF4+VTfSZ+g9Cg==
|
||||||
-----END AGE ENCRYPTED FILE-----
|
-----END AGE ENCRYPTED FILE-----
|
||||||
lastmodified: "2024-11-22T05:40:29Z"
|
lastmodified: "2024-11-22T05:40:29Z"
|
||||||
mac: ENC[AES256_GCM,data:dialk5LEy/M+zx839s9YKU1DxPOPkBadMAcXqkvyDE20dr0EoXjeNa9oQMuA++RsCUJfUKAOskyqjCFhLjDD4VHNr1htE4uBpfRS196p16Cgp4Qp12uj51D/7JCgQeAwGAwc1K7R0z1lXfrqDE2I6xrGcTWxlJcN7PN6IT2X6tA=,iv:Y5alGY//VAXd3yiHR//5BbZumLU3IyBJNvWweVKUDeM=,tag:rfn/6RLQlGU+nXZPlIQjfg==,type:str]
|
mac: ENC[AES256_GCM,data:dialk5LEy/M+zx839s9YKU1DxPOPkBadMAcXqkvyDE20dr0EoXjeNa9oQMuA++RsCUJfUKAOskyqjCFhLjDD4VHNr1htE4uBpfRS196p16Cgp4Qp12uj51D/7JCgQeAwGAwc1K7R0z1lXfrqDE2I6xrGcTWxlJcN7PN6IT2X6tA=,iv:Y5alGY//VAXd3yiHR//5BbZumLU3IyBJNvWweVKUDeM=,tag:rfn/6RLQlGU+nXZPlIQjfg==,type:str]
|
||||||
|
|
Loading…
Reference in a new issue