kylekrein/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Updated secrets

Browse source
This commit is contained in:
Aleksandr Lebedev 2025-07-30 19:35:07 +02:00
parent 77da958b06
commit 3eb072a672
2 changed files with 21 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

2
nixos/modules/sops/.sops.yaml
View file

@ -1,9 +1,11 @@
keys: keys:
- &primary age1l8euy4w4nccrpdmfdfct468parcrulkqcts2jcljajs2as0k7passdv2x4 - &primary age1l8euy4w4nccrpdmfdfct468parcrulkqcts2jcljajs2as0k7passdv2x4
- &kylekrein-framework12 age10s6c9har9pg2a0md30fhpp2mfy89xxrrnu5dwrjtqzh3lktcdaysq7st65 - &kylekrein-framework12 age10s6c9har9pg2a0md30fhpp2mfy89xxrrnu5dwrjtqzh3lktcdaysq7st65
- &kylekrein-mac age12apyh4f5m002npnfq5kansrzme6umtzsvc6m96fjz752gg8c7a8s8e48xd
creation_rules: creation_rules:
- path_regex: secrets/secrets.yaml$ - path_regex: secrets/secrets.yaml$
key_groups: key_groups:
- age: - age:
- *primary - *primary
- *kylekrein-framework12 - *kylekrein-framework12
- *kylekrein-mac

29
nixos/modules/sops/secrets/secrets.yaml
View file

@ -19,20 +19,29 @@ sops:
- recipient: age1l8euy4w4nccrpdmfdfct468parcrulkqcts2jcljajs2as0k7passdv2x4 - recipient: age1l8euy4w4nccrpdmfdfct468parcrulkqcts2jcljajs2as0k7passdv2x4
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtM0tFMzYvZWFVd1VsQVpy YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhdDRXQWxqSkZ0NVVSZURl
SHc2SFVBK0R4eWFCamx3Y2hzVFNHZ0Y1S2xjCjBSNDFzZ0M4Vk9NWmFYbmRmSmsx SHNHQUZ4Q2N2Y3Bhb1ZpZUhOZGJuRUVvVGpRCjBHZlVCcDh0Vyt6OFpkc0hiM1BE
ZktxYUFHV0FRaEZDMkFSZkU5bFFpWk0KLS0tIGlLRzhMangzNVhUYnJWVE5Qd1ds OUZNYXlWTFJ6cE1XUndxSzFPQkk3b28KLS0tIGtmSzRVM204cWlzUmRreFpzT2tD
OFd4WFZWSHNUNFFWb1lnTkJmS3YzWEEKbErGqqGHpExXTzujeuQA807Ll68UU66x clpoN240UmhmRi94eU1TSmx0eGxDTE0Kce4CAoiMnBOhLvbkTnnCEXGP0hNFX92d
+JGGtXcpURyCgj2jaaVw5QX/ibS5VPXNUpRXgIXRyJiEp+YKsJkAFA== W1HIetNGRN4Tj25IJlD0OYlPI3ykJtfw73/RGC6n7Ru8FWz8Ynq6zQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age10s6c9har9pg2a0md30fhpp2mfy89xxrrnu5dwrjtqzh3lktcdaysq7st65 - recipient: age10s6c9har9pg2a0md30fhpp2mfy89xxrrnu5dwrjtqzh3lktcdaysq7st65
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzd0V6ZnVOKytyYWg4bkVt YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxOTBOR2JKcXBMNmljbmpL
cGlhK1p2UnU1T1dadFRwME1vOEQ0aENVSGhrClFUVmM1a1pQL0ZxWloyUVBGRFRJ dmtPOXNpT1RRcmYvNnpIRFova0dKUkhyOW5NClptNlc2YjZ6S0FsWWphRU83RUsy
SE1RM01lN3VlZHRNTHU4SjZ1UWw4T1EKLS0tIDJsSlp4dTN6WVEwSkJtMS93NGNN QTkzdnlxaUJza2EreWN4SkxUUkdQQkEKLS0tIE5SOXJXSkREM3lpZmhUUVNncER3
STVLZ0lYMnl6enV0TWdDU21TMDZ6blUKCF2gTYI/ipXa48a8S4TmOZzElNW1+XqS azlDK1Q0VjhEeDcrZ0Q3TnV6UG1FdWMK2aZ+dzUSzQ0LC0Aj+A5TifFk8xKHUUgG
hZSKpGhBxMuxLnBJj9iyQjcQmXG0M90AXVhJNyej96thDFxNByIMpA== zwQpbGxG/3X6gUu7AAxg+1ktPwX9SWF7/iXupn1ofnn9ookQep/Emw==
-----END AGE ENCRYPTED FILE-----
- recipient: age12apyh4f5m002npnfq5kansrzme6umtzsvc6m96fjz752gg8c7a8s8e48xd
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBucFVSV0NHQ3FQU1hhRDRV
eUVOY0FpN2hGam9JV3B2K3JnL2NhRDhqM21zCmxpYTNuckw1a2VmTEdrTkx4S21o
VHRVQjlGQ05GVExHckVDcUdJYmp0OGMKLS0tIDhtTjl1UDBLVkJ1TFJPb3Z3blZr
eStaaTdiSkt1cGRVcjd0ZzNxeXBmQWMK0DeSq+y93m+FjtkzdEd4vaGGEUIkKslg
unWOL4VaFKRz1CcRg4y0pPak8X8w45S4Oe9xakJTRl0JCinA4yBdTw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2025-07-30T16:15:59Z" lastmodified: "2025-07-30T16:15:59Z"
mac: ENC[AES256_GCM,data:mmJH3BEqsrboGaQM7yWuHF1MWREC4bLc+RAZgsqlNvhgoWLoaVDLuBjEfuXCDPdnvDPesbUrI8HHA5gz523C0PoJdkoFcRoVOwhLqj6tJjT4JnlaTgpBMN5UqBqt9Gm68mqekE0bm7ihdc3lnn/OkRrxJI3Th5KzUC4zMmdjVsI=,iv:K0f75ft3PQdQ1AUFzrannvLv03fl6FS6se/muMcyQkY=,tag:y3FJQDthKoWvoMHdmcvRQA==,type:str] mac: ENC[AES256_GCM,data:mmJH3BEqsrboGaQM7yWuHF1MWREC4bLc+RAZgsqlNvhgoWLoaVDLuBjEfuXCDPdnvDPesbUrI8HHA5gz523C0PoJdkoFcRoVOwhLqj6tJjT4JnlaTgpBMN5UqBqt9Gm68mqekE0bm7ihdc3lnn/OkRrxJI3Th5KzUC4zMmdjVsI=,iv:K0f75ft3PQdQ1AUFzrannvLv03fl6FS6se/muMcyQkY=,tag:y3FJQDthKoWvoMHdmcvRQA==,type:str]