feat: migrate alpha and add impermanence

2025-08-23 06:51:02 +05:30 · 2025-07-10 03:12:55 +05:30
parent a913f9cce0
commit bf8183f87a
7 changed files with 237 additions and 158 deletions
--- a/hosts/common/secrets.yaml
+++ b/hosts/common/secrets.yaml
@@ -1,84 +1,79 @@
-tux-password: ENC[AES256_GCM,data:X5y3+HuWsnZ9wnjCBAbOzIWO9o7AB716/WoaqsJ4U9F7Ok4gCqZwUVMRm4unb54Ggp3ctRUAi2iDqTCKoaMIfgkdWzj74ix39w==,iv:9gl//PAvzXO2e+v6jRdVh5uLv3p1xt7cxuV7N27heLI=,tag:ZqKESAf5AoUVG6wbsQ1ymw==,type:str]
+tux-password: ENC[AES256_GCM,data:eT/AJVYLLtI5SUD2MH8K1oIFk8NoW5qFSAEDxb5QNaEkUtVqM4eroGs6lGt1pKWxYv98Rl01c2AM28ZXsQN7XalztTRlHc9XnQ==,iv:GV8QmQ4SuzjzMD/rEx4A5bQKlYMCldQrg7P65CGG5vA=,tag:SE2HYTABCccSipoqluBQiA==,type:str]
 sops:
-  kms: []
-  gcp_kms: []
-  azure_kv: []
-  hc_vault: []
-  age:
-    - recipient: age14vktfes95f33vuefwnmuvryas7az04u76dsgyhfvsx73czkvmp2q7njkl4
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5OVloM2VlbFNvdTZ2N3Q0
-        b2pLNXU4Q05meGRNV2NVc3k5djUyOFhjaWdvClZvUXR6K0JnTG5yQ0xzZ2ltcGxD
-        cmUvMW5KbTU0YzE3bmhrQWE0VzBPaE0KLS0tIFZydzZ5M2NtSko1TUxmRWdtcVBR
-        cVZha2lHcGQ2RndmTkJ6czMwQzFyUDgK+MdsnznFru+9XiBoKBXpMeyFjd8GiPNn
-        mIcD6RMxxg8OBOEuAqszTJ6aFgjNhTMmkZpD/htPcLHVqU6ETPz+ew==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1d3t78xlqd0erlqj2m9947l9eqwpge3zrperljw3xrshh0gjx4ghs8tuqcu
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0UnhyUlpNUnVnMTNJRUUy
-        VjZ2bWpZMzJHVlQ0RDRkVmRRdjh1WnNGZlJzCk14VWQvSnBjcjdBd1pFazlnS2VN
-        VSszM2hHQzl0eVNJa2JZNWZRNHdvREUKLS0tIDdvdGx3VlRIMzNBc05SUkhnajdN
-        L2ZuekNJYm9uc3ZuM1ljMDUxSjlEM1EKpXMtDX5xaQViGsxRT2mZeNDENk6PwD9x
-        pPrx/B4RvE6nbU9ywrYlK1UQ5VVrbA9pXxsyy2HMawN4fOkugbWSiQ==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1udt3cssu7ahdrhsvckt8450rswrr6mknn36xpq74dkfp9lpajvnq84kdzj
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsQlZOdWorTStxR0FxakZJ
-        Q1RNYnRSWXc5NnFSY2VZNElXd0pXR0hSV2xzCmgzZ1NxT2FiSWhYYWl0UVpNOUZY
-        QW1SamhQZzc1L2JKQmRjVXBGSXVHNkkKLS0tIDcyRUtRcXU0ekRwcDZKMTRncm5m
-        VTdNQVAxdkNQMFFncnd4eDJlc2Y1S2cK40aaDENAS8eXWtO7t+L0sYXvs7eJj6hd
-        xRmphVIxTILQ01WnD5StKEIOhg8y66h9KOIuqRLi7qb9781QYKfuzA==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1jg642q775gmnmxeu29gcf3lph8vem4xr8t84cxe809dpd0myrussh49h60
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyZ25EWnZ0c2htV0JRNEFh
-        RFBzU3F6Y2NTMnpRNXlqUHZvQlREWUJ5R2swCkNKblJMSU56MXlVVWY0Nk5mOXU2
-        MjBlV0pLUHVEM0RvT1BROEthblFEWDQKLS0tIHdCWUNTbE1FMmcwaWxncTBYbFVp
-        ZGk0V3JpQUU1TGxyVFVmSUF6UDRseHMKUOVQlTblgz8FAsInQkBnyM3iUV5+gmDP
-        TVEfewEsw5+61ArA1OIqpXqW/QeCw9+1O6dOAi9/Z3Fgw4AdPUsWpQ==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1zsl5d4vj6gl3h96y5p53sq5y4vr4vtlwp727h7rp9a4xfkxm53lqrh6r50
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmbTM1NTdZeGNDbVpJNEhH
-        TGVvVi95cnhMT2QxdkE0Z3d0WCtDdXNiRlUwCnNGNjRYWjQzV3hUVXg3WWp1SUh5
-        aE85YkV1NkVNcUNmbXFJN29lUVhReGsKLS0tIDNDR0JacTVLZFR1M0tnU25oVEVY
-        UTN4aHQyQ1hONURCc1FTQkMxdmZ1eUUKUt37gBetdgOyyloyeo2RLSAI481Rdv0y
-        OUgbQB6DvU8fVrptZnnIrkd2TjaHYq1bF1DsfMzLgtC4UVdeu9CSuw==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age145uq9emlxqzm3wqauy9zqj78wqx9e6h09xag6wust7jjgn4upfzsaemcvx
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDTU9vbjhtT1c0NlU4L0pq
-        ZHVlamZHS25hTVUycUNPaXEwVzBlb25wSGpJCjE0TXJQQ3ZoS2VRWUFJYjNteS9B
-        ZElVL3ZuU2VPMVdBdlREMUovejJRNDAKLS0tIGZMZXlEMnJOcG5vT0Q2SnVTdGtE
-        MTJiNDlXeCtPakJsWWF4RHJjdUpiQmMKYfnHI74b9S8zj6ybHdGB9iQtkQxVSgtv
-        xBkMZ6SgTZIuCS5HIf6a7muYIfkVCQMQHKF10p6BULVKc0Rr/ZAA1Q==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1ydkclhk9kwqdq74utesqdfupt43lz64d5k65gz2z9uyljcqq9fcq3hv28l
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRTVo3NXRJOXpmLzU0SUZ0
-        bmVJZng1RmtSaTdWcFJLaDhFS0Z0d2h1T0dzCkhBbVNRUW1DUlFhQ3VJTC9ZRS9u
-        SmE0WmJQZ1hxS256YkgxZXphem9rNUkKLS0tIEMxY1ErM2M3dmEvemVkSVJLUnBP
-        dE5wWDRtbHVSRlFjUEs2WnpnUmRzRlUKznDFUOLnRW1dlL3hAQVZmvNxFsLxUbHM
-        6YOTK08Ahi93qsKpuC05XoKwbMhVyC59zdnNQzoU9EMtaCTm5UFUsQ==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age1y4luzn2jls7rvgphej23srvdlx563lxq29tvf66vhwwzaf7c3f3qzvresh
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqc2d6cWR6VDZLWFA2ZlhV
-        dG1kNm9Fdi93ZllzNWxXdk5PcE5lR0F4QkRJCkEzbWxvU3dHZG01SzhEQm02eXh4
-        TkdCL2RtUDE0bzdIWk5jVVpvMGp2T28KLS0tIEQyVEZLZ3JQWlI2aVhDem4wZ0Er
-        RTh0enVYTkdrVjBVc2xGQjgrK25nMmcKkWeBeMglk452ZwHR3h67kL7vs/hQc7s+
-        2f0DyAQfYO4QWdDGkFB3WZI/b9YIDatIZGlKUx07CEmI84ErYYmNLA==
-        -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2025-02-01T13:39:27Z"
-  mac: ENC[AES256_GCM,data:5FyPM1CcibPMlt5d1J7AydMRKMGE1HTFQFHIokn00vByZSj0WIUFebJ/hryFzGZK05zsBDEULWSy2ntSG5MWJFdDom4Wl58WnDzZo33RyYztPXvpD/o8J5BuYQWFngCLiz67rm/7QdZ/A6N0uyl7YmvqLzGjore12eEB3R9jzOQ=,iv:yiFJ8l+oSyAVRFOwKLMqw23ODcxoGIq7+QytyTw1ZKY=,tag:fFJo+soFRqFIrvThKPEeYg==,type:str]
-  pgp: []
-  unencrypted_suffix: _unencrypted
-  version: 3.9.3
+    age:
+        - recipient: age14vktfes95f33vuefwnmuvryas7az04u76dsgyhfvsx73czkvmp2q7njkl4
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWNDczRHNXUGpOV2kydUhC
+            MXBRaUVqMEorekZPa1Irai81cE9HVjYwNFd3CjNqMnJQdExSL2hnVjQxbDZYdUI4
+            TlFWUFk0Ymw5MGJqVkZIMnRXNDVKUFkKLS0tIEdSc3BqV1pUWlp3VHhqRjFmQzBw
+            QmlDYlBPbGNQbE9nTkFPZUd6eGREMlkKG366KVXqTj5wYsDS+cUspQB44zL4EpFx
+            LQGkgHOqk/or3wvDUZLG7eYXNJfTeMbsOBa8RDcrKt2adH5bFJ9TTQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1d3t78xlqd0erlqj2m9947l9eqwpge3zrperljw3xrshh0gjx4ghs8tuqcu
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiSklFMFJZMmhNak5PQVRm
+            QUZlMG5aVzd6YlhDV0RWT1RoSktLWFNqcjJRCmJ1UHVmM0FxUThXdU5iWXl6dGdB
+            eThQd0I2MVp1S0JMbVhSaDNyTU53YlkKLS0tIFJvdTlyYVVxR2pwNGh5WGh0cTB6
+            R1poeHZ6aGFVR2hRQzhiaXF0NlRhNkUKFX7RvZ9AP10Fdx6URXZwSNot/54hcox8
+            xlKqzmMKeFY/Zg8vnkykJDvtjaWnJzVMwWAtBvWuuscSxGh3EjqBpg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1udt3cssu7ahdrhsvckt8450rswrr6mknn36xpq74dkfp9lpajvnq84kdzj
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQaE81Ny9zZlRFMkt6Ny9F
+            QkpHR0hXS21XS3N1elZ6T3lvTHB0MGVYYm00Ck0zd20xQ3MvQzNhV0VRSFVia3h2
+            MUZzRVFMV2hUZmE4Q3c0MDNvRGZicXMKLS0tIGRJTUhGMnA4OEl3SDQyaGE3SmMz
+            cFAxMmJ5R21tRjg4V2QzOVh0eXhxN3cKawTKTjQW/e0KXOdxomzKAaAId2KMRJTj
+            II7OdigajgODGq9oesu0hSczqu5sAqfxSEHXrsxu4KbPStwucMx+ug==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1jg642q775gmnmxeu29gcf3lph8vem4xr8t84cxe809dpd0myrussh49h60
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaSENyQkwzTTJNZEVUa0Ew
+            TUtmQThWbmIzM1VwTUErQWVYNGVuWTVjQ1NRCnlGZnZRa0xIZnRCaU9zL05aYjlK
+            cjcwOTZ1aGtqRklRMGp0cWUxaG1aSG8KLS0tIE9WYlZZVnVZa1Bnb0oxbmYxZHdC
+            Umx6elZsUE5lbHFjVGJ2UWthQTRCNkUKk37wQZ5M46XSfHdnx3hLr+aW8dzcl/RQ
+            rvQzjFmRPprwixXLP87S7KYibJRcrO3Ol5WTNwJKp2tMrlHjJ5d/MQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1zsl5d4vj6gl3h96y5p53sq5y4vr4vtlwp727h7rp9a4xfkxm53lqrh6r50
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxZmFuT1pnRUgyRUdvVFlL
+            OHlmL3d6OHluMU5wa2VWeHV6ZGpUNzFuOFd3CjVKU3g1RTFmRjl0MmpnajMvbE9Y
+            S2I3RFhTbTJCZHI2ZVlnRVdKVVpWYjgKLS0tIDhZZTNzZENLWVByeFM4TTRNWm8x
+            M3IxNjFlZmFRb3M3V2hyQlcrTGxNRHcK5XbkLoag15HM4e5p5LBsGE/vpoEXwdpA
+            fphJH40rRkYEqfVtoA5y1hu5KhiqAugEQSBkAQeOOqtH9A5ZO21A/g==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1zujp5gxy7suv8ysnygv43cmzuvv36nxfg0ch7r3xg2emc6fz3vmqqujheq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4ZXdOUEVvNmhxMnlTRjJ2
+            MmpZVGk0aXRuV2J5citkUmhLUnhURTNWb2pvClF2VEhHZ0t1OXlZOVpmeUpMa3Bs
+            TXJnd0hOQklsS1IxRFFITi80QnFQRlEKLS0tIFVkME9KNi9kaVlnaGhoNjVGaGd3
+            M1ArYVFnYitJNWtHQkNoRjVaNEdLUkkKN/B/tKWpxmc4SnBY2vTnz5NELbATjO1L
+            5lqJksRLWaDdtwMRoHiKv5nCNZioPvN8RYqpACZeqSgR9362mMmF7w==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1ydkclhk9kwqdq74utesqdfupt43lz64d5k65gz2z9uyljcqq9fcq3hv28l
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSNmxDTzNCZGhEU0pqaWps
+            Q2FGV2lmRTc5NUd2dis2cjdUWUVRVU4rc0ZJClYxVld5azRseitPcmdxMDVLRkJt
+            SWNwTkZhaCs4djdNaGpZWnBONkVtYTAKLS0tIGlkRDVvZFBhMW90eWZaRERZL1pQ
+            Q1J5VEl3ZytGTi9LOEVrRmRnVkw5aEkKwFg/Sl5grt4llmha7q9CnMv/2pnRjdl/
+            yKRyqq5sec/c3vCTHiSIqrDM33ThsFyQM4N/D4S9ZDiaLizewFo64A==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1y4luzn2jls7rvgphej23srvdlx563lxq29tvf66vhwwzaf7c3f3qzvresh
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHMUI4aHlZT2FQM1BlTHM5
+            cEpjTXVTK05VcXpGRW5wTFdKajVSY2EyVGprCmxvTFhaS3pNTzdsbi9iZzhJQjZM
+            RFNwRlNoUGhrUHhxT1ltNXFLb0JPb1UKLS0tIGhLYU04WU84cUh5UVlYYzl2bWZj
+            c0xSa1pRT1BzQ0pwYW9sbmJTaGxYa28K9EHWkU+iTQhaYUXaXuoiEAGcPROrOLBp
+            sEs5IrOx26z8UBtm0aq3vts1vOmHrmqCzCFZfrR8CSuzm9/a4J9dxw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-07-09T19:32:01Z"
+    mac: ENC[AES256_GCM,data:U9xXQ8jTlH9DNqEqcKlrGEHwm4LZPqA7lhiiUi6G+tLo2Lk/o3mt5q9hT019AFido6iM1rrtlrS0cEddlrwSSU2xVqa+5w1xLrnTQ9mg1PvhdpzWssgfGxDAfCDOrIJZKQrywCPHrpfvrxTDWTZV9IcV1Txgud2yUtxM/JxHY5Y=,iv:im4APJwM+uV8SqwwB9HnhPNbu0AwXjGToinMUlSoXkE=,tag:dOQ5nqDI0vY0ttcl5TQ0Fg==,type:str]
+    unencrypted_suffix: _unencrypted
+    version: 3.10.2