diff --git a/.sops.yaml b/.sops.yaml index 2a7c094..7f469d4 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -6,7 +6,7 @@ keys: - &canopus age1cc9phftkzcwaey2rw63m74tyxdjxxzanxphsdrhy6vwlwhgehfzq9rh6e4 - &arcturus age1zsl5d4vj6gl3h96y5p53sq5y4vr4vtlwp727h7rp9a4xfkxm53lqrh6r50 - &alpha age145uq9emlxqzm3wqauy9zqj78wqx9e6h09xag6wust7jjgn4upfzsaemcvx - - &sirius age1lyvzg4ud96trsuv6gsvjw0p3rtd6qjpyl9uleq8hcrzwekuhpfesnlqauf + - &sirius age15d06qpn64p3w57l8yhdesdr5g69dtncwq8yrkx2uw0szql3p7fsq4awlka creation_rules: - path_regex: hosts/common/secrets.yaml$ @@ -22,7 +22,7 @@ creation_rules: - age: - *tux - *canopus - - path_regex: hosts/controller/secrets.yaml$ + - path_regex: hosts/arcturus/secrets.yaml$ key_groups: - age: - *tux diff --git a/hosts/common/secrets.yaml b/hosts/common/secrets.yaml index 3b39a17..1ece367 100644 --- a/hosts/common/secrets.yaml +++ b/hosts/common/secrets.yaml @@ -1,4 +1,4 @@ -tux-password: ENC[AES256_GCM,data:YWhOZdgSMR0ukCFD8yj4vVQ0MJXv1IuecqlRCbBc0/LfJS5n9baffujrOwIEETtFuu7/g+vWmP5DeH08ebwol6MlXRIckpwugw==,iv:UN50Ri2/WGZBTs8Io6U3oJcqmiHPhZc4gGFeecVDW5k=,tag:5ROCGD89ONmbSxFJSYV/sg==,type:str] +tux-password: ENC[AES256_GCM,data:brZ/RE9HkHr4FliFcbnyhB8v7rO1ISPl5cDm/AQMOFVJaOi2OSh3KzUK6OULM10kFF7ZZl64NsBS2w1p5gnJTWC1LiU++SnGVA==,iv:cq9stoUI5MJbbXZefaWk24hQ6c07T1ZONojPFrUKp2M=,tag:ZHzA8gc9dxIKsDKBKDL7CQ==,type:str] sops: kms: [] gcp_kms: [] @@ -8,50 +8,50 @@ sops: - recipient: age14vktfes95f33vuefwnmuvryas7az04u76dsgyhfvsx73czkvmp2q7njkl4 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzLzB3L1NNV0REZzJVL21L - VkJlaGM4WlY2RzRDUXJIdEdpQytTTXd3eFVrCjUzTWRMK3lCbzl5R2ZDcm9Cc2h0 - dWQ4VW01Sk5ORUVyZWNxMmpuRElBaU0KLS0tIEV2TUNCNmRKRjE5bXArSlN5a1N0 - SkhuSFV2RDc4VXJhVm9aV29JdjFtWE0KbM+7ZLnPcJjglbdI2JjKl3quqJutQ+rc - xQyiNy03cwXZLQIAZ+5BBm+2JvOwHGn3nT7c2zlLxf2QJM21FuQb9A== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBocGtObjJmU1pLZS9sc1Ev + SXhWZWxNc1BFc0NOcjVxb0pDbGpZR0Fob2pJCjJ3cU9FUlNwUW9EanFCMTdRTUxD + aTFIQXcrY2FtbGlla2JyTmVVVXRRZEEKLS0tIE5iV1FGY2oxQXBydWQ5RVFoZlc0 + OVRNQ3M1L0ROMnZaSHpEYVc3dEh3U0EK+H4aEr3doCmFgjVfYfqNJ84huO06jdxa + zauqVCpU54RQfHs9egfup+pEPJXJkbXrtSE6M7vuVCduGD4GT84lFg== -----END AGE ENCRYPTED FILE----- - recipient: age1cc9phftkzcwaey2rw63m74tyxdjxxzanxphsdrhy6vwlwhgehfzq9rh6e4 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyblhEOGpzcVpvemsyRWll - SVhGNGZqSmF5dUdZaklmUk9UZHpzM3pRRlZnCmJ1a1Fldy9oOFRCMGF5LzY1YUQy - cTU2WjNpeGl6QzN0UENCS2xYdmhpVDAKLS0tIFVvR29NUE9Ha3JFVFN0K3ArM2F2 - OVB2T21RcG51Qnkxa0szUjFlZFozNUkKezIEMfE9uAH3ndx4IRgp9QyWm/SSn5Y8 - aomvI9bEQJLE0oieeDjdGZvms7Z6Yw9jg8eDufjee/XfPSRLQCl6iw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwUkplUGQ0dE1lMDBlL01o + QkRySUwxeFVKeUFBYmtrd3cwVDQwUUtqNkhNCk1EaW0xNksvU0hQWFZlTkluWUVH + clFOSEtYZGRvdjRKL2FwZjFhTmVib28KLS0tIFBZU0owUzNSdTFUK0dxTmJjd3pL + Tk52N293T1dXQW9HZ293ZXhXTTBVRXMKRvrh2fFq809zPpPBV+28ufUe7p6Gjz/+ + FUNSenNnhXsEQ1AKgcVCG+x4iR8+vBB0+PEULuC010EfarO6l9yrOw== -----END AGE ENCRYPTED FILE----- - recipient: age1zsl5d4vj6gl3h96y5p53sq5y4vr4vtlwp727h7rp9a4xfkxm53lqrh6r50 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOSDJhRUo1VUEzMUJZSzNv - bmNOcXh0UFUyRUt1Y3dsWTBKTHJleFc3VHhNCmQ5cFF0S0J1L1BUT2VSdEhDYVZv - dW90Y1BaWW96enVDaHQwYWNkNE5YSWsKLS0tIGdxYnVXT29aNlMvYmlkWDI5SktN - a0E1RVVhQ0p1d2g0cFExZGZZWForbGMKNY/p3jHTMsodszx3ouRnSCvOSWCg+uRt - mzy2cknlE9Do30RClbRKbFPKvF3gqAp+FjK7VYs1/dn4LAOhcFsraw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZbTdiL2lFamtJN294Ylpa + eEozY3BMZkVrQ1ZCY2lIZjcyMkZTMVNTWVhRCklrMlFKdUpxUk5TN0pMWnNHUU5F + d0N2ZjJOTXFPWGpTVkloTWpxUVhIdmMKLS0tIEt2TUJCenRnMFBrcDEyOVhnQ0xt + M1hjekFPWGVoeXNwUmFKZE5rK2lPVGMKZU32gzBg3JD3Ij3WOnETQhm+tbbg8H1q + xvLFybgJ2lvQkDVqAxQ4CX/BbqtqPJOv0fSjEFlAo7kdvBj6EEeq2w== -----END AGE ENCRYPTED FILE----- - recipient: age145uq9emlxqzm3wqauy9zqj78wqx9e6h09xag6wust7jjgn4upfzsaemcvx enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvRk8wc1VEa3drWTJHQXRs - cFgzM1dOdHJvcTZ6VWI5WHJBWjZyalUvTEZRClQ0TkVMNGpTYUdFVkZwRC9tcnJN - SWFsS1FHd0tGN0NETXlwb0VaTUlEOW8KLS0tIEtnZVR3SmJIUXg4OHV4Z0RkTVZp - MjVxc0F4b0FsRHg0LzRsbWg0SFFQeGsKwlipfbrTdWkfsvvk03fQz5xHHdwNj5Ce - PzUOgaQzK6ufkjQ/TAghv397YzqOhzcQ7B6LGQ/AVozDdYem3wl9Pg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqb25wNTUzNDA1MFA3ODBj + NExNRlljMFl1RHlJRzRpQWdRRE93TDJ2Q3lNCmlyOFVDU2UzN09QZldiZThKSzZ6 + bjhIdk5ERkltV2ZrRHFyM0trZTV5a00KLS0tIDlDQzNyVk5UdTY2VlhXcGVrNjNs + Rzd0KzRlZzQ4M3FXcSttUTVjVGFFOVkKhv9wRqL/ngSM5kdbe+8uG1gXUYqAarVF + jE93QzwQv22IkwcMf3V6JBk1JdzbJtB6smFerPsfhYU0qZs3mfDwNw== -----END AGE ENCRYPTED FILE----- - - recipient: age1lyvzg4ud96trsuv6gsvjw0p3rtd6qjpyl9uleq8hcrzwekuhpfesnlqauf + - recipient: age15d06qpn64p3w57l8yhdesdr5g69dtncwq8yrkx2uw0szql3p7fsq4awlka enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2Q0xPL2dBZFFwUitxQlpM - S1dHVkQvb0szWFE4bFdaUXgvaThkYnVUZVNrCkw1WUR5S0w2eUlxQm4wdGVMQ3VK - NDJxbGt3ejEvanM3V3FOaHd2dDNaRW8KLS0tIHYxY2I2dXVhcGpJZDFBSDhuNWV0 - dzFIL2cwb29TTlZuWTNSZnBaU3VlSjQK9jXjslY75C7UtArlAZ2rIK4+bLd+eYKd - lJiSD0YByMUPDFgCGksmMMyUIuvsxNt+eIxzUCN4kjGl+3GNA1ZBRQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvZVcvYnh0NG1hSUlHczg4 + VnhpWm9lUGYvVVIrQTBhc0M5VFgzQlBXKzFnCmROZ1N6U0p4Y3NIR2NXQStkSnV2 + a1pXLys0K2RnVjM1OFRJb0pnMk40b3cKLS0tIE8wWjRGL3FtdFdGY3dNekJOQXNE + NkprVHF4LzdBaHZ1ZUlIZWZwdUo4WGcKcM/9scqyut3WP5hj+d1bz6clhcBz3K7Q + Wh36m5jOqB0dTvmKEYCvGgacmj06eLJg7YVXpvHk+iO6jkaidJUO+Q== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-09-13T09:14:50Z" - mac: ENC[AES256_GCM,data:Zg0vvFo+HwCpRZuitHSbRMIIrHt62Tr4tlW6xirzPaDGrADKZsLTg+NbTLWEamwrYHReYlO3xDZ6t10g0dXKPPC1nGWN8K+qm+0dHqyEcfDzi0sXOxfXvETKZVQiGFdH/SUKzgjtUehwHwmSpLhGZzwifOwNZ6+c620Loi8kJZs=,iv:kjYa8JbZw0+FOQ6OxTpjkiFBCpJOxZz1p8sAemMuvKw=,tag:96yQTsSfizX3GEJWt9lMog==,type:str] + lastmodified: "2024-09-28T15:47:31Z" + mac: ENC[AES256_GCM,data:wxkDBIIj66rPBzsKEsHqXPhzGInAmZ0cL99nPrGgGzsaBHm7UV9W2f9jVcJUqigBldV1U/Zp4tp89+lbo4A3LZ6HNEYLzPA9FRk7Gn5vrTvq7sICV6iQNoEaToycODbaNksmURnDlQP9YR/dzuC+q5uHj001cgxuC1lMzhoC4+Y=,iv:GZV5ZyjwnnC1bn3Hc1idYNfPsyqCUstKa6wgeDj+4Wc=,tag:wm9yRqH2pJG11Da7JymUPw==,type:str] pgp: [] unencrypted_suffix: _unencrypted version: 3.9.0