From f74c1f7aa88e5d69979a729cdb2759a2bb227957 Mon Sep 17 00:00:00 2001
From: h7x4 <h7x4@nani.wtf>
Date: Tue, 25 Jun 2024 19:27:23 +0200
Subject: [PATCH] secrets: split secrets per machine to reduce conflicts

---
 .sops.yaml                            | 16 +++++-
 hosts/common.nix                      | 10 ++--
 secrets/{default.yaml => common.yaml} | 38 +-------------
 secrets/kasei.yaml                    | 41 +++++++++++++++
 secrets/tsuki.yaml                    | 74 +++++++++++++++++++++++++++
 5 files changed, 137 insertions(+), 42 deletions(-)
 rename secrets/{default.yaml => common.yaml} (52%)
 create mode 100644 secrets/kasei.yaml
 create mode 100644 secrets/tsuki.yaml

diff --git a/.sops.yaml b/.sops.yaml
index 0909a53..86908f8 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -4,10 +4,24 @@ keys:
   - &host_kasei age1eu2a6m3adakfzelfa9pqpl74a5dz0wkyr0v7gegm5ajnx7aqmqcqsp2ftc
 
 creation_rules:
-  - path_regex: secrets/[^/]+\.(yaml|json|env)$
+  - path_regex: secrets/common.yaml
     key_groups:
       - pgp:
         - *gpg_h7x4
         age:
         - *host_tsuki
         - *host_kasei
+
+  - path_regex: secrets/kasei.yaml
+    key_groups:
+      - pgp:
+        - *gpg_h7x4
+        age:
+        - *host_kasei
+
+  - path_regex: secrets/tsuki.yaml
+    key_groups:
+      - pgp:
+        - *gpg_h7x4
+        age:
+        - *host_tsuki
\ No newline at end of file
diff --git a/hosts/common.nix b/hosts/common.nix
index 475785b..cd16f8c 100644
--- a/hosts/common.nix
+++ b/hosts/common.nix
@@ -2,13 +2,13 @@
 let
   inherit (config) machineVars;
 in {
-  sops.defaultSopsFile = ../secrets/default.yaml;
+  sops.defaultSopsFile = ./.. + "secrets/${config.networking.hostName}.yaml";
 
   sops.secrets = {
-    "ssh/nix-builders/tsuki/key" = { };
-    "ssh/nix-builders/tsuki/pub" = { };
-    "ssh/nix-builders/isvegg/key" = { };
-    "ssh/nix-builders/bob/key" = { };
+    "ssh/nix-builders/tsuki/key" = { sopsFile = ./../secrets/common.yaml; };
+    "ssh/nix-builders/tsuki/pub" = { sopsFile = ./../secrets/common.yaml; };
+    "ssh/nix-builders/isvegg/key" = { sopsFile = ./../secrets/common.yaml; };
+    "ssh/nix-builders/bob/key" = { sopsFile = ./../secrets/common.yaml; };
     # "ssh/nix-builders/isvegg/pub" = { };
   };
 
diff --git a/secrets/default.yaml b/secrets/common.yaml
similarity index 52%
rename from secrets/default.yaml
rename to secrets/common.yaml
index 36e09e6..17e13df 100644
--- a/secrets/default.yaml
+++ b/secrets/common.yaml
@@ -1,37 +1,3 @@
-github:
-    tokens:
-        prometheus_exporter: ENC[AES256_GCM,data:Uybn/X2kgRKrtoLfgOYU/vR9PS/9JTX4MVuXJBCq2ZH5O2O1W5wfUg==,iv:8Q/kKd3r6G70wU4eLtqpf1obWeErNv5mNrpOQxB6tl8=,tag:PrCMzieirVaCbUT94iVKbg==,type:str]
-gitea:
-    runners:
-        ping: ENC[AES256_GCM,data:DRyw59+KE0n/qEr+Az7r8ulZr3dk1u6hVT1SVqKywW4DgtUr1eLj7DGOXvHxug==,iv:W49dNY/V+6KPuQeN5rdWw6Ed+w/oOy9ey+hRRz7Oxdc=,tag:ILzIKgvLs+8RVpHsSuMHrA==,type:str]
-        pong: ENC[AES256_GCM,data:VwpNj/FRSkc5/s6aZPaiBwIaj9VBfp6wcnDFkWmTWC6xRWevMUYKv3jHPhD/ZA==,iv:0uVgjmrF4jIa+Eg3Gofb+2eFa1MdZHb9eR4BcWBpkeQ=,tag:YsXjKqeksU9JcXl+5REXFQ==,type:str]
-grafana:
-    oauth2_secret: ENC[AES256_GCM,data:zxfPtiB/o5cC27O9uQzPvQV1qWcp3xxnIi7/P84I2lJ/X4ovAwXuiEqnc7BDAE4E,iv:ZY8BDTMEvR2JiFHKM8iM90UQbmTqH/DoVklWno6Xa4U=,tag:E8GTGk9IJauCgjaoToShBg==,type:str]
-    secretkey: ENC[AES256_GCM,data:aVzqZqwFfm3FcYJE8USxsDbZVwtnF5NJXTAqshv9av4ZeR5YrDfDzLYHHztXMZt2Q7p/6A==,iv:A7x7oRUVvfxqSXRfi9+15z9pE6xX+GZrGU7gXrSKyXE=,tag:2uatRT0XePk2dqZj2ZlM3A==,type:str]
-headscale:
-    oauth2_secret: ENC[AES256_GCM,data:Ois+s0O9wgL3zWpgk6E35o5HczIW/4wnSq2KU+F59u4FBFPAtbl/WD0N4AKgWMrm,iv:UX8vhNvHvA5BmNmx5eW8ugce+yZCE1lt2ux8sJajZ8Q=,tag:xOpdLLryt8MptiVsKibNew==,type:str]
-hedgedoc:
-    env: ENC[AES256_GCM,data:4i2I7S5hKp3mjROMwa3WQinbgmxXhKzSaWspzF12TIDm9g3Bgie0jfSxbDuPjJYq1mZ8oQ2Jzdi2N+Q4blOk9fZO3VREoU0qFrfqm8RqBw3a7hpisXzu9okYnzrW2JiVxNGWwZbuiCG1SzdMOMHq/ZqLEJdu7Pxm9cY9xBSZthap1DCFyr7dmjHt3AnEQemsDpxSaWKD2Dfs1gyA23rLAFBd,iv:lfB6uaXULUNme7cGyN+bKuXPsbgpjMrxrRy2L96HltY=,tag:uu37bZ4g/PA2mgzs3ioLCQ==,type:str]
-cloudflare:
-    api-key: ENC[AES256_GCM,data:dqKGLnIlPAgBNTxcRo6Q55hKoe8Qg9UCmDvJioJdhBxmjTXQrf0LFL/iMC73K+Kj0ejuzBRJaqfN6548aZZTSDb8hPTygh7PEILqdxNrap9uDm229eJM/zrShOIRaNLH,iv:pUkuU3Es20ujDtOYfGZodxEUZSlfAe/45ewEkPG1GP4=,tag:sA7nMLldPRRo0jwcdF34ng==,type:str]
-drives:
-    cirno:
-        credentials: ENC[AES256_GCM,data:ypMZhs7dQw/IlcLwHwFcIZw0N+kCzvFGLe3gEqZVe1hj0lzK8MCfxAR8GpA=,iv:by5ljMzOuuY4b6BDUQNLhp8/gcXDNe+rHkqhFzjNA6c=,tag:3C5iYsxEWwAKs9Blgr5o6g==,type:str]
-nextcloud:
-    initialPassword: ENC[AES256_GCM,data:ROG+4u6C9zBu8Ez3Jprw8cgwVd2gFErUIOBmrWL9o7/qSGPT8jnwd0T5W8E=,iv:uRdL/3Xslu/J/aPI44WxlNw3RLAvjDRPt5VttuQL/P0=,tag:IDmGXNF9PsHPaMqK5YUKIg==,type:str]
-postgres:
-    nextcloud: ENC[AES256_GCM,data:E1tD6Z2SDbi5TUDAACjXSJJIn+/ySu0+8xhvRVFxumxjex4ZsEw+mofKIxM=,iv:E4iPVF3M8GOoQghVQtn/kCEpXl0b8MueCbtyvzFM8AA=,tag:IF4kWOuTsylqrXMoXzQaVQ==,type:str]
-    headscale: ENC[AES256_GCM,data:UVPCZjcpm9j2dMwyAvrPfwOj84JJHrwoU5rs672FEeA=,iv:zq3J4mL/PB3EAl8LHxxC77Y4FMrZWT4QF+DOih+FIGk=,tag:UwfjKnjfJ3a6RwAWg/8BzQ==,type:str]
-    grafana: ENC[AES256_GCM,data:bsxzS/xkNdSJvOSQfZY8RRK03ckfKAoYeiZlgrSxXVqTEQ==,iv:wb8bFITgGLToagEczdm7MwUmXl3tyYmrYqSZOblEz0I=,tag:ZboMGI4QdmOK+LVBDCl2Pg==,type:str]
-    matrix_synapse: ENC[AES256_GCM,data:hLlUeo6glgw1PIo4N9aE7KLg7JV88EcG4IYZwVhs97Y=,iv:c4g33QQ/r54KrBM/zUG/gS9rNQy1OUB4KPSAggkgNvo=,tag:WOezFIPE89+oHKGMrsMSgA==,type:str]
-paperless:
-    password: ENC[AES256_GCM,data:8ut0DX8NajIy/WUwd3eBrFiGwsTMTYKWaPDy7kGytt8=,iv:q2hTmQsS4kBLZ4I7nRljstHlqELsGBYqf5yifFh3vNY=,tag:eJj+DXU898frl6+IoBsSPQ==,type:str]
-matrix_synapse:
-    oauth2_secret: ENC[AES256_GCM,data:w5Jn/YwQ0zH0FUtt2s3mt1+bvo4Ka7l3rnV6F7QfqQdoIq+6N47poEY4OYkAGReW,iv:GZOAHhwt5mjkScdpU+EY9bWUnyouJrc9LhjxvxuCSQ8=,tag:o6It7qTehwErXTBakYX5tg==,type:str]
-    registration_secret: ENC[AES256_GCM,data:TLeuMKVkiMyz/vs/ksUj688qtlAS5t87qw7HCUP4rtTlXfG7Hu0zrgiDVU1BAiLzwEFxgLEaEl1CHdtCVSFUD26Uz7YZzWxD5EAfOkn3MZLQVK8bopeqAJFjnq3D/Z0kV9vl+t1iRtKbxcrgXwYZkEMct71SnNVZWYTOSnkTcGgyEwcy/m7wDtcy0L6GL7XU/4LP+qZtZjb4sygFMCIOKAuF7RWaBzPPee/66mLyPuiDxGm8vGycEnmeQ2GtdtDuxtr9IQ0jqB5AlkHtVLFrpJXesupzMGoKaXJiQKMgTgm4O6ygbliHZbhZ0NOOrVoh7zxa7BTYhpxeM6/g+tSTqw==,iv:ZNyjBRjxDorc1kC8LR+O7JilpZuf9tu6baS187VnHA0=,tag:kL4xf8Xl4U9cPktkcx+bZw==,type:str]
-    turn_shared_secret: ENC[AES256_GCM,data:0XHTDom8ZurRz+CbFmjjLpm97w4njoVGSHivuN9uve0=,iv:O8qcmrFLjHLgqhSzb2RavQl+RBUnK+Wid5KvfFaB08E=,tag:oajdWa5O/Gqu4OiSGbzNqQ==,type:str]
-osuchan:
-    envfile: ENC[AES256_GCM,data:gaO+3haU1jMkqRm1PiSSd4oTcoPvgbsRHWfhPnXJbFSv4cXsqeS1xRrbZZftu5g2nfr+vb8ljtmGyk3dVLOHo5SzVQlJzcJNKoVp9XTLlmbC1AuKjxv3p7dWyD71n5reO52uDlbNJQPMzgOw70DM7wTffCaLbDUIyB+bPcESxiYHC2S3kITZErCdJczEKpRPjS0wM9kjENN9HN1WobhquZ1w7gXfXIx174QUV3LdJMrhaibzDZEu4dBaxVkxbKRa78bPNCN6LVD4U1woG0IeIh6CGCGtGghIkhcUIZsUauXPw7g/uQHPcJF3/h64I7477j9D1Qrrz0bN3kU9jyAro5jv1hcRUS6b,iv:zbJol31niHWz+0DXGE4vm2T7aXAZfbdj0rN7xlSctGg=,tag:kDCQUPjeHWMWQ22tE8ar4A==,type:str]
 ssh:
     nix-builders:
         bob:
@@ -67,8 +33,8 @@ sops:
             cElPYm5qK2lkTWZ1UGd6TU1NV2h4OTgK8Ecv58Ybnc6iYMjtSKTT1fYbNf4yyFgX
             rjQ2sU8Rqc04MqixnAkF2zSDaaJ0vqwf22MvbO3bYhpqOHwiTMbRLg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-06-09T14:08:52Z"
-    mac: ENC[AES256_GCM,data:+gz1Zp4cZ4k81mPVUSjBth/B7Dgc4urOAWmfN9p5qxUEXoiqY1TLImmqr1YGrQE7QHO0VzpEY1UJsDLayMFTQexnI9ePjaws9bJrHndR6wMcuDunyQ9iWgwU3CYPtvX8T4/5lTTswwiWaMRMHR9j3KB43VQ8p/DpMVrZBdGD3Mc=,iv:YRABwve5RYb4npW5eHrqjFDVhs+hq3a8fMueG6aKdD0=,tag:7/+fq26aB0i9+AJfNcuV5A==,type:str]
+    lastmodified: "2024-06-25T17:16:57Z"
+    mac: ENC[AES256_GCM,data:vA8eGtD43gSWTXfuRmUcGXOn0UStfnDS8R6n3PNRWZFpMmtja96uGFvCwHM7rB3nWuz7LjHjxIqAEzjFuUy6SN2ta86ZQg+bdJZ+MsK+02o0senUgAHYx5Jxt5f0E+P9y4g5E9zgFkHMpTcGHGV+7sTjjqxjCF0jUVi20bh/T5g=,iv:FyivxwZQ7LDQUazdM03MdDTNWJWyp3nEQZk+TFGnUfQ=,tag:Z8q2aEqJeXcbCW/04N0rSQ==,type:str]
     pgp:
         - created_at: "2023-05-08T00:49:52Z"
           enc: |
diff --git a/secrets/kasei.yaml b/secrets/kasei.yaml
new file mode 100644
index 0000000..fd7c0d1
--- /dev/null
+++ b/secrets/kasei.yaml
@@ -0,0 +1,41 @@
+placeholder: ENC[AES256_GCM,data:6w==,iv:h07vj9uypO+udWVX3lR2bcqEt8l01wihpmq7dxdi/bk=,tag:iZUiRd6ey762p1hDvfec4A==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1eu2a6m3adakfzelfa9pqpl74a5dz0wkyr0v7gegm5ajnx7aqmqcqsp2ftc
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCWEJuZWp6QWt1MEw4bk9E
+            dDZ2a3hDenl6ejh1Z3E2QlNndDRBTEJmZnhFClZrdm0rLzVsekhoaURKQlo3NDVx
+            TGRMdUN5N21OTnBBMklSWjRXdzZzdU0KLS0tIDdNano5ZW9XVUpZWUcyVVZjcXYv
+            M1JiaDcvM01GV0duMnhYR0J0OVJLV0kKWwnoGumsRiygSoi8GMmJUBwa1bOP5qYD
+            aSsaiQ1cmpH8txNuDCAxWO3b4mqwVAiFVLPFbdR3VJzaxkLZC7n2iQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-06-25T17:17:41Z"
+    mac: ENC[AES256_GCM,data:nt3PVDM4CerintL2qJBPIcbl9V8NLj2HModZAcYZft9APjeJY6ApMzNK4ZYkfKlw1bcm8YCptexmCcaV2/XmroJI0zJUFV287vrHPF627CqNECxR6LFtPDijfR3vcy9xGNCLqToyAtvv1BgwCys0UMW9/IHuFhF0xDdzMpRKT+w=,iv:p7EkvILA80W8v1Yq+psD7rlb6HoZSagZeCkXaWz5qeI=,tag:MLimlfXI3jZfVq5hoZhuLw==,type:str]
+    pgp:
+        - created_at: "2024-06-25T17:17:31Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA0av/duuklWYAQ//Y1DuKQG0jqMj9lCSg4bfVDw+ST2XWR9IzQTbvDL+hOtl
+            +uGjhezy5SROsayENKcSC0Tq3fc92DslYjxOjHJXwmoCuPZqeTYhs+3l+rBoI96n
+            GnDYNXL73v+iTjGN31HB8LgABw2Vr11UGV8Jfb3xy1sjXRqcYYW498akxQEui6Ce
+            jRiT4d9k/3Ot3jQ8/Acynfl6lod8KGcKnZiBCHefr26/f5SHFvRRMiz3hVzjIaAz
+            4riCClLTUG3pbwRV6qTXFo6hDp5o5uOwtz0FdfUrwQqIvKTBfIn4shxo16Vv1Wn8
+            zI/aKTwGA9WpZTgpgkYiAQw+f7OG9cGVcO4y3RpXav+oxeAQC3RWJYKQ/++ms6x+
+            vEM0sfWw7iom1j4EsYWHmh69XipVpobz5DEha4qbr0dbWN2d7aKF3KbsBbz7GE4M
+            2fN1LfD5khb7Zz25q1GbZPTSy7d6jmplJM37b3qmRrz9F/fJaAIwZjp/xp30UHyh
+            k8gWgsk4trTe+Z0cJOYEiwrqXavtuOviw+prmCdCVLYq83kEkyP5XsNLN2PWB/km
+            84R2qszSx9PDW3Sq/gSt9XraEUjPjv7PhfqzPI6tfCZjjyw6H79OSnNWFYxCqGsY
+            41INNsN4heE3/vMPqiL/3IVmv8uLLhzVcOnlA97A/rqX9usQJuD3PN1FFUUpcHLS
+            XAGjJKl2v2RIDSOW4NyoxuguKnsgHiC7KSpQwV8vtYYpma1L+2WCqVoAJJUBf7mN
+            oTy4DU/ehcUOG/AGZwWSiQYMGMSNEhO0084Z4OitlfznZCDyi41OHhWcoS92
+            =Onw4
+            -----END PGP MESSAGE-----
+          fp: F7D37890228A907440E1FD4846B9228E814A2AAC
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
diff --git a/secrets/tsuki.yaml b/secrets/tsuki.yaml
new file mode 100644
index 0000000..0ef227a
--- /dev/null
+++ b/secrets/tsuki.yaml
@@ -0,0 +1,74 @@
+github:
+    tokens:
+        prometheus_exporter: ENC[AES256_GCM,data:7UxV462JZ775prtH9GsIpM1YExHaLRqtJ44NDqkDdgf22Y1/fy5DVA==,iv:IZr/7A9DOUrVlI3+OdXdKzbDIyqJucTbNN9DmGCpKAY=,tag:ThMMXaiEYhPNMnCNNz1uNQ==,type:str]
+gitea:
+    runners:
+        ping: ENC[AES256_GCM,data:/4RcrNxgmqnRmugy4yoCdrc7qHEyqnjVW8iDK1R2LrrU1u2AUWFWwx5hxsa9MA==,iv:DMablq/d8shnxd7NUy2KuasC+dom4P44kS1mtjdOmkw=,tag:a/x5hZ+nm7JJWMMfdB1HEQ==,type:str]
+        pong: ENC[AES256_GCM,data:WeeRl2H9gQqx1vY2Lc7WrZtNnS+tYpvAO3oZpdudvJVmkUU52Xrkwy2H3B1qOQ==,iv:Q6C52bdcDKW/PWS/z3Ly/i/gn9+wGYSppBs4susMKDI=,tag:2wQ3vBE2cXF8CHL9fmEEEw==,type:str]
+grafana:
+    oauth2_secret: ENC[AES256_GCM,data:f2C48/XGz4pKHDTPlApW6dcPqoBT0C4ltl4oIlCwoYTe69O8s8q6oyQMl/2CxD5Y,iv:i710YpUOvw28BxY7jKJMDLaNl3SdvdFVdc1K+JknrhM=,tag:lLFYh7gHCz+ad+0gHOnVZQ==,type:str]
+    secretkey: ENC[AES256_GCM,data:sGqvzJeFHcuuRkd1E2hvHq+1EDopFDMMowUhxZS0ChpTe13PGKgjDDe/IavOR7H9DGYl3Q==,iv:iZ07Vxq+Yg5ZtN0/sHOAokCmqmekGpT2zEEjXs9K7qA=,tag:kKrquNfiUk5xue63tFaH9A==,type:str]
+headscale:
+    oauth2_secret: ENC[AES256_GCM,data:OUOh2ICq4eMeo5WleqIui3rG8VJVW+XVyAkqF1hh6kdijr5G+1CkpQQbsbafwhq3,iv:99xDRg5b2gc7uGNput4R6QZung9voQWnanCDkvmdjyA=,tag:xEaQFbliEZeg508LubNWYA==,type:str]
+hedgedoc:
+    env: ENC[AES256_GCM,data:Sq69/2EIPexulpYTIe3VqsnGd5WfMf3/d52uai8QvNMIS+dXxie6OtFEZzh51I94F1vnA1rshTR0rv2zxerVUR2ZSaw+igWII6VJUu/Aw8tOilMhJv8K17xfxTCLjZFedMYmJOw88PfOFUuYH/CVA9Yj4xh/q8PE0Js8Mz1Ft48wNjze5SAlCiDbagRvJKQqBu9prUjEsQ4Db9vkDuTdej9w,iv:9Tkdp4ZXcTrJ4HdOE/OyCnNHOE6JXAkJOTRt2mXa9/o=,tag:h/FTyRC/ouURh8IyCjw6Mw==,type:str]
+cloudflare:
+    api-key: ENC[AES256_GCM,data:Y1sHbPTUSiFzRyAiwk0ycFdM4s9ET5g/RPjVsb3sHXMlc3AJHDBYhTljyytZ1lCoFz7OdcZcUOHWzgvHtce6yXiGUpmo34XBKZqloFlNA5u6XC2UG31qfuUEWpRZb0kL,iv:iwN243uzSCjl5Za1msKbaC4pPAOE8frZ2WEvgZ5xknA=,tag:q32vyQI7SOFoN6s1RjQV5A==,type:str]
+drives:
+    cirno:
+        credentials: ENC[AES256_GCM,data:1tFmdgztl4vPkOi1morbBUDzqOJs4TRBs+Msm3GRp9heFHUT650DUza3c7M=,iv:XdpMdf1BmVHKno0k0juG0aB6Yt1BrYvYnzKmV7SMEQo=,tag:PKIFf3gDilvner0prBodzQ==,type:str]
+nextcloud:
+    initialPassword: ENC[AES256_GCM,data:w0yc/Y+qjJ5gPc20mQ1SO7eB/0q1fY5IvifsMqz/mqbmV9cWsjTpNhKN21g=,iv:1BtNSCF+z1FLhDDjkzSLFRemUiJYgJNi8Xen+QYuoSE=,tag:IUI8ipb56YZrd4GOTHxOWw==,type:str]
+postgres:
+    nextcloud: ENC[AES256_GCM,data:2QRDZg1gjVYD9O6o7MlubIrbvJxH6Djds7dvZLLXixs8yq2AaMJhrtV09XE=,iv:dWFZ7H4L5Du/xITqUZp3GJShCr6xf34w31Z3mdn+bdE=,tag:EHoThLxhmqw+TDdAOqGRNw==,type:str]
+    headscale: ENC[AES256_GCM,data:bkRH7Wtf2a4Mt+eR1DUS5jBI6nivq+2UrXhi5Ro2+zU=,iv:zcpcxk/1gizolRPp517NMblGCLWJvAjsENojVEZ7lvM=,tag:v6hkhTEA+7zqVvkuHikgLg==,type:str]
+    grafana: ENC[AES256_GCM,data:51m3jw0ufFs1rSRswt5fO244IY4AdnBnRLyOiekDSbd96Q==,iv:Dy8SNJX5gfbJH2Z2V6baCQFMTycX2ck7U417g6KE/3Q=,tag:Jb7Zd2j107OibXNGMgH8Ow==,type:str]
+    matrix_synapse: ENC[AES256_GCM,data:hg3ubE2GdxgX6+1wcAsvKzFzeUXGSftWYgiH/dhP12g=,iv:9/DwL7JwKsgSHIEp5ECCAgnBd1yg7KHAIOLrQzsFb04=,tag:Vkh+r/RmC+tH5kTQhw+vwA==,type:str]
+paperless:
+    password: ENC[AES256_GCM,data:Ey1Y/0e/DxB42aSvbw+mrGUmuA6i0fQ6sAKwW7mSqfA=,iv:lHSG0sdkY5Ag5r4PVFmdOpMyzAoDv0Ech5aKs9yUQPc=,tag:KA89xKeATNOoPXTmO8IL3w==,type:str]
+matrix_synapse:
+    oauth2_secret: ENC[AES256_GCM,data:Mxzhek6YeRg6lgGvGzrmJz9EakT4sLE5Gw0oyHzF9TjybtjjRmUK4XeEDg8yx2Nt,iv:f656nD6ziJantu7ihmfYvJzxZ1ytvbVS3hezSU75g5A=,tag:G3cwIxcWxLOVAmqmyHDVTg==,type:str]
+    registration_secret: ENC[AES256_GCM,data:Sc5piAESWk9HUe3ZOQ+7ZB9aCZwjTdFrfYkU+XFuXGUZ3xCkCt7QDPmDQBIs+lYOLV9Y165cObKDgMNHBaMkRQ5wXVBrd0l9js70h9LC3IGuK+BOa5tZa4u0zku4zStRuN7xCeGNeAWFOPCQ4a5rQMqbDz6iwWkMQvlHqwzBYtP7PuTuAocwkjlo+3AOnw92DjY4xODPgHR7w4rNSvoSZIUjlAIk3yyHNLV68UiTPoJ5lUqGleLznCpqjLhpxAycfEbWUXCNx8Z5oJ+czptWzhb/hhjH/SgeMvflk8KFwJAYBXxA+YgM+unlWS500OGsgYIbhPyvSzSrs1JkDQBVXA==,iv:/Q4gTEe6WU7XID2ayCFq6xmF6J5UrQw4OjmpU4dhZSA=,tag:kLTdqoanqUAlVrRcKZRxcw==,type:str]
+    turn_shared_secret: ENC[AES256_GCM,data:ay8VETIPaaRHmmy+DFaqsOD8svfxcrJtaf9QEB8QxqE=,iv:VzHs5zHADvl/7cl9FgwFfgQbdv9/ujPFz9rojgHsyo4=,tag:atRZGV1dj7pa1e5TycLFKg==,type:str]
+osuchan:
+    envfile: ENC[AES256_GCM,data:pMt7n2nEBH4sEW9RZxyyvpnScHsSbSKgMKihwplGcj37TugGb5F30iJatiBhAoeptRSSYgrMjRBLoyWAdxzFiBvKZmkNdka4afy1Cl/LT2hZ+jjkjLBCFv6A8Z0HoWZlvzjuYpybqO9dNdWbQYKDJr0xcVAnaNkv0ThtpZV0CqVfcdJvzx9NyzJzHfIu0p+2BEwzVzr7pt5XwwGcRNru6/x/90d5W6btU4jW33oSBErcuNwdFjmVSgJdHfCxaKgYoIMTYrwepHJ5M7tmA/uJp4JmxCQvgvK78Rp0ooEIyd2aN+r8HAXGnFaskdjELaxBRM76PhTqgaiHfmuiTqesnYSPYJyCIb/r,iv:lRjpv0MziFmWvJgwAFdoP+QtRXEEwgZWLR6krvaV8VE=,tag:prYGTXnhFRecc10ND3Gg3Q==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1c92j4w0gqh32hwssl5m2mfrggssxax9pge8qxwytv9lmrnfttcvqdrgsst
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYNDhBUEZMMFN6OXlVRHVm
+            OGFqckZySjB6ZTlJK0YvWHlhcGlLNUkwdTFFCmw3bG0vdkpmOGpCcUJEUWFZZmN5
+            Z0lOeG4xYUNVR21QQVhVZjdXZTMrazgKLS0tIDRlVGJHVzdVUXV6TW1nUnNBRmRs
+            MThmQ1Iza0F6Q0Y4N1JpT2V5a0FrTGMKIzpNe4dyCLuyKjjXjadZepRYvULr3j3i
+            7SSwFgVvESj0aVwcGMW1swkhdb2evZgcghhrJpiK8kKIPrWEuFiCcw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-06-25T17:16:35Z"
+    mac: ENC[AES256_GCM,data:/7giUW/ZvBzpMZv4cmYawhQpz4cxOMrswRT1E6B5jO4nSUtViVT2FmobWcYL0WFrSETU7ivuClKeyWMfJSRhg7FHrcoJa/O2jYvj1IVmXm/TsZPvX0wdIH38aIjxGSh6MwOOauPMKwmeRTknucAPitGGH9/jXteoAGy+D9Fo+ns=,iv:bUFT++JGgJJ2WAtDQH8CB0rUllTp8L0Q2eKurtxMhXo=,tag:MR8CTopTIYoSGjlX1wvHGg==,type:str]
+    pgp:
+        - created_at: "2024-06-25T17:16:27Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA0av/duuklWYAQ/9HvPLB/e6HuyToEOpFyCdSdtuDAkX+3VwpBkxzknpk8h+
+            bWF25vyVg13BcDtjrDuor7o/XSyk9tzpmsuoh58XWNDwfRNEoAJie4MWTt+ifVuA
+            teudWXazL/u2nKLgjP60sD5MD5g/wfeMEZDP8Mu14P33LbuZuf5rzXGi0OGEMQ7p
+            NsMDhSJevPTN6MZjegFevar44nErYtyBugDLjDQU/0EURPKE5FUmBedlZ6vvKNwV
+            w7gBa+5Ef6VS35QfB8lCVxyN86w736ELehmeGaKk9qvD5A8zFX2qUbml4OiuY+PZ
+            c8EQu1jVFZbAF3PXJPWf9KsO8XGnItYcQDaleW5AlF9ViB2k4w/1pTDJrh+7Chki
+            TL5u7XE9bQBcDKIA4TQNLQ7imQK1gldINvbpbky9eFltMR1w2fBAe1V69oUtdzpG
+            MQrnSEiuzL7np7i9Q6PFmASz47ZMTAdFVWsHtSyjdNbMmgkDSpz7ffPJfXvXvL6U
+            5zqAWFxUpKz5tjfu9lYWElhBiui0gL9+lfqCDWd/GmAG2wRU8/EKdTyk5ZLD3/mP
+            QJ63Jo73QP55fpfXriAd6o1lcPzhrPQfU9h30rxyA1LZvOeK4Vrl/4CW7gI4h25p
+            j+8mby4I7aPLX2FB6mFUdU1IY+Q3l4K1h8VWjXwlwwInncXQ764AsnySxi52UuXS
+            XgG5Ko7TRHW0oZRPMyURxnfgjkpV0JTsJGa8R3vz+35fqCQlC8Dg5FEiZz9ouEjc
+            F8eikJFSfhQ5Go6PkdH/Hv7kE1yK/wTPrQr5dd0vit5CS0x4v0T123DwstG2BMQ=
+            =aJWz
+            -----END PGP MESSAGE-----
+          fp: F7D37890228A907440E1FD4846B9228E814A2AAC
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1