Daholli/nixos-config
1
0
Fork 0
Code Issues 2 Pull requests Releases Packages Activity Actions

sops: add wsl key

Browse source
This commit is contained in:
Christoph Hollizeck 2025-12-24 14:10:49 +01:00
parent bb4c540f61
commit 36ad5fce19
2 changed files with 31 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

2
.sops.yaml
View file

@ -3,6 +3,7 @@ keys:
- &yggdrasil age1gtu702a6crx4e450ny25acvsjffvt7kljhhadwhydlreew7z8gvs28d9st - &yggdrasil age1gtu702a6crx4e450ny25acvsjffvt7kljhhadwhydlreew7z8gvs28d9st
- &loptland age13xshg5e6ucvnu3vqgn344mxpk5kcqutv2lf4gdffvwadq0ku5ewqy4cck6 - &loptland age13xshg5e6ucvnu3vqgn344mxpk5kcqutv2lf4gdffvwadq0ku5ewqy4cck6
- &nixberry age1mje6kvzzxl6slgpj4rtvmzz3dej3kdq9v85uu69xjcqy6947de6sue05z9 - &nixberry age1mje6kvzzxl6slgpj4rtvmzz3dej3kdq9v85uu69xjcqy6947de6sue05z9
- &wsl1 age1hlkhat4mg02k54mqc7g6t5396sxrfy5lz5fh8f6rx28l4qzpeycsd644k5
creation_rules: creation_rules:
- path_regex: secrets/secrets.yaml$ - path_regex: secrets/secrets.yaml$
key_groups: key_groups:
@ -11,6 +12,7 @@ creation_rules:
- *yggdrasil - *yggdrasil
- *loptland - *loptland
- *nixberry - *nixberry
- *wsl1
- path_regex: secrets/secrets-loptland.yaml$ - path_regex: secrets/secrets-loptland.yaml$
key_groups: key_groups:

49
secrets/secrets.yaml
View file

@ -10,38 +10,47 @@ sops:
- recipient: age1pc92kl38mfr0j68dxww7tpzvqp3lpw6lwfylj6hn2k3rf4rddgtsjxdx47 - recipient: age1pc92kl38mfr0j68dxww7tpzvqp3lpw6lwfylj6hn2k3rf4rddgtsjxdx47
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvMHBnKzlNcVlPRm9zd0xY YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTaVhVbEUyZnIrS2JiTWNX
eXVTNmN5VXFRK3VqNy9EOUo0RkFhcW1PaFZBCkJnSFc4SmdNYmhMcmZ0Z3N4WDF4 OFl0cWtzdFo5WTNGV0loYUVLZHdWVmRrbkJBCjQ0OHJpMDRacFpUTDJxM04wZWJZ
S3ZDV3ZXenowU2hxT2ZTZXltdE43K2sKLS0tIG5NaFJ2ZlY2VmtNeXZrUlpGS1RN dGJoTHNsQW96R2VwL1h2bjRDTnNLV0EKLS0tIFp6RC9vN0xscVI5SnI5ZVduM3dp
N0tFUUFoZXk2dUkxYUZHNTR5YjlmcjQKQY0sxMfMTzoYVvu0YZoe8AEJixkHzwvs MFNpZzlxSTBLMCtOODVIc2hXcUlld3cKNmq7tlLvX2ZvGGfOMpZlRbng2F8bnDta
v+Q4JIbjNE1KX7cbCQTw+7OiYfd5XHtae5mlbJC4RK/+hJRzBihLVQ== ugVL0E+mi8EgMUmjTNEkBmYIHcPRY0837DZ0nVxZo/pZzLBmIvfbMg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1gtu702a6crx4e450ny25acvsjffvt7kljhhadwhydlreew7z8gvs28d9st - recipient: age1gtu702a6crx4e450ny25acvsjffvt7kljhhadwhydlreew7z8gvs28d9st
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0eDVzbXhKK2lCOGVxWjBw YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlOENobndXQ0ZyUThFQTNr
ZUhuOHYwdXFSYTJHQzB5WnIzWkNJSXFzOW1ZCmV4THhXTGR5NzhFanpselpRUUpT WDA3MVFSWHNxcVBPRHM4cGJVY2ROeFp3M21JCkRoMGpqTHNtTE0wbnZpdG04Wkto
aGdtNHlhNXh2aHpRbU1mUlc4REMzTWcKLS0tIDVscHF4eTNlRHdQWmFvTEJFU0pw clhHMEtLKzM2S08ycVJ1Nm1kTkZRT00KLS0tIGpzeVprTForUDY1cjJ2eXhCc2R2
aEtQam9Cd2dlR09ERCtJTFhXMmdBZVUKShOcEmqheV/Ol9YfXFsTXH5/KK1d5K1y VHljbmlEVGFnb3VOeVVnTm04OVFBTjgKBLo9GQFRpdPPsZrQZGhEpKxiQzKY9r1d
f5kLYLPUDXM90UxmEXXVs8TUnjknLVH0eTrPKGrdKSiF37xJ1466Ww== v7TCMg5SLNqRTKTBE8vfWSbtm88X94n78t+JkDEEWAMQm4YvTeywQA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age13xshg5e6ucvnu3vqgn344mxpk5kcqutv2lf4gdffvwadq0ku5ewqy4cck6 - recipient: age13xshg5e6ucvnu3vqgn344mxpk5kcqutv2lf4gdffvwadq0ku5ewqy4cck6
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnejF2elZqZSt1STk1emZU YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3Y20yNFpqbG8wSFRVakVH
NUFQdWJWYUIyUFNFc0U0NUhOMXo0Qm5tMVNvCjhxUjdHanRGWmJab3R3ZnE0aW1S TjBEZkkzNDM4RldOczhpa0F3R2plcm1McFNZClErSHo5cHZhYWhtZXV4aU5oQmN1
THRxbkFhUHFoTm1ob3RxTjNwNkhtd2MKLS0tIGlkSFJXUHpLS05mampZT2VRc0tq Rzk2UlpldjJ2MThXZTJCWXNLd0FhTFEKLS0tIC9CdEx0dmFvTUdZYWNrcWtEbTM0
VnhDemNvVzdjTjUrWGVoOXVEdi9ucE0K2wRZFNkDidY7piWyOR0VgAON12RleXYk em1UL0MxZHdxYU1wNVBiZzc0ay9WU1EKPpNIee1CwfpfqZfsAvsHDwVVjO2vdPlV
Fzxtee0SCfMm0Wj2rkQj0B7SMoLXPRHNJahBLrl4MfDXwmw1Rd2gSQ== 2LecJiD9PMXyTPzzTHczKGDn9FZHAyvopTi21rvuQecf/sCXWNCnrA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1mje6kvzzxl6slgpj4rtvmzz3dej3kdq9v85uu69xjcqy6947de6sue05z9 - recipient: age1mje6kvzzxl6slgpj4rtvmzz3dej3kdq9v85uu69xjcqy6947de6sue05z9
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3L0Y2ZHJqVmVFcTdJUkY3 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBTFRYaVJuWUREK1Q5ZytJ
MElOWFZSb1BqME5COHArTGJWVGx0UjQya1JvCnJvSm5DMFN2TG00MEFlazNzVmky RW1JMEkwbk9PU25ETnZJMkZhdjA4V0Z1ZG1jCmVEYzRMSWg2b1JWTXlwZlowWitr
MDlqbVRoZTJKaEhtS3NPVE1LNTZBdU0KLS0tIFVpbHRkZUlvSnE5dXBOZFc5TG5J V002c0swYnJGbmUvSkFneXpMUmtJTXMKLS0tIHVHc2FiTDNBVW9yc20vSXdZZitJ
SzFFeFVFcVBzWWRIajQrSHhjTzR6U1kKml6XZjf2DeNqfLazpCU3qXN0ak+kIbM6 dmpFeGNPSWJKV3p0WEZEWmJiUWh2V00KbDPNSP5k1Q2isPBftR+xUZ2PVve1ocqH
7wuEOmWZCTD++CI/Fdb/TjgAJeJ7u3Dtd1I4+xi0f/9BEL4+mwFxWA== f66bUmxEssdbYphzFmw+wcB8liuz58ZLsOBhi4t8ADPpYcriANDnzQ==
-----END AGE ENCRYPTED FILE-----
- recipient: age1hlkhat4mg02k54mqc7g6t5396sxrfy5lz5fh8f6rx28l4qzpeycsd644k5
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUU1Q2LzRFZUU2akpxS2ZP
YnJmY0VXU3dUQlFpeXdRUzNJbWJpeVd4ZzJZCkxXelJBdys5QlVoVStRWWJOeXZs
UXMraEZ2alpHN285d0RuMkh4dDJ6bkkKLS0tIC80amNaK2ZNTk92QmRKUkZabVBp
SkVjdXVSR0h3bWtwazBpaTRUM0ZMS1kKG/zf54NMDxEkmzPtkOUN4wir5LKEE8Oh
sV5/1sVu2+xaRDx4l0bIKrFWdLouY3ZsPZihreAIEB5qtzlfBx6CoA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2025-12-05T08:30:43Z" lastmodified: "2025-12-05T08:30:43Z"
mac: ENC[AES256_GCM,data:LTyEkbTw+SVqAqpB2Zl8slxMM18OOIY3R76iPySkhhtUfwnki7fMExjuniq7tsMJfT4Ssp2jvSsNERsxbhxs/96OnH/CQtDva7N64yW3AM7nn5Ha6vb82YeNWcq2+aEqt1l2AF1Kva6lFzBz4tWT6lfHpfEQonpAOdLxT55dspo=,iv:dTnvZOKZUPYYGKqWS6TbrQMOJnzSCrBcZ0Tul56Da2c=,tag:32HcHZhjLHvov+Rb+cNkcw==,type:str] mac: ENC[AES256_GCM,data:LTyEkbTw+SVqAqpB2Zl8slxMM18OOIY3R76iPySkhhtUfwnki7fMExjuniq7tsMJfT4Ssp2jvSsNERsxbhxs/96OnH/CQtDva7N64yW3AM7nn5Ha6vb82YeNWcq2+aEqt1l2AF1Kva6lFzBz4tWT6lfHpfEQonpAOdLxT55dspo=,iv:dTnvZOKZUPYYGKqWS6TbrQMOJnzSCrBcZ0Tul56Da2c=,tag:32HcHZhjLHvov+Rb+cNkcw==,type:str]