From f41bc2c9aef28edabc60585983d0c63c2e13b0b7 Mon Sep 17 00:00:00 2001 From: Peder Bergebakken Sundt Date: Sat, 20 Apr 2024 00:38:55 +0200 Subject: [PATCH] bjarte host key --- .sops.yaml | 11 ++++- secrets/default.yaml | 109 +++++++++++++++++++++++-------------------- 2 files changed, 69 insertions(+), 51 deletions(-) diff --git a/.sops.yaml b/.sops.yaml index 35dc26b..392790d 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -15,7 +15,7 @@ keys: # https://github.com/getsops/sops/pull/1123 - &host_eple age1fha09v5edg88ys45a0u3tpjqfyl29fsy9xaz8xxfy60zjhmas5psfdxynp - &host_nord age19xrvt0gjl4fcfjyy62mrl9uuzrq9e0wgemtkykr07ewz7nqn9cwshngel5 - &host_brumle age1czlqpfdvey2hzgr79skxvtg4stnfawq045l5sl59j0cd9hfuqvlq83v647 # brumlebasse - #- &host_bjarte age1gy6gyp9qqt5vlkzymfxsrdqm6rctl39tx53jx6n0hgd3escy844q55d6ey + - &host_bjarte age13dmsned3exqn2wwwxa465vwmdtfuktk49gpshwtu0ujp94syzq5suj0a9w # https://github.com/getsops/sops#key-groups creation_rules: @@ -33,6 +33,7 @@ creation_rules: - *host_eple - *host_nord - *host_brumle + - *host_bjarte # dns - path_regex: secrets/dns.yaml$ key_groups: @@ -100,6 +101,14 @@ creation_rules: - *user_pbsds_nord - *user_pbsds_bjarte - *host_nord + # bjarte only + - path_regex: secrets/bjarte(/[^/]+)?\.yaml$ + key_groups: + - age: + - *user_pbsds_sopp + - *user_pbsds_nord + - *user_pbsds_bjarte + - *host_bjarte # brumlebasse only - path_regex: secrets/brumle(basse)?(/[^/]+)?\.yaml$ key_groups: diff --git a/secrets/default.yaml b/secrets/default.yaml index c287f27..af796cd 100644 --- a/secrets/default.yaml +++ b/secrets/default.yaml @@ -9,92 +9,101 @@ sops: - recipient: age1hmpdk4h69wxpwqk9tkud39f66hprhehxtzhgw97r6dvr7v0mx5jscsuhkn enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNUmVDeEFvcjVRUHg5VTVl - TVpDUGtZSEF1Ky8rclVCN1ppYU9YdGxOQTM0CmFiaFJRT3hMalVyN3hxc0ZrMlky - Y3RQNjZzUm56b3V3b2Qwd2FUZ2NDVkUKLS0tICtNdWppNlhuemRlem1zMFdJMkdz - dU5kNUtjT0tWd21rc0VtakxvUjNzVGcK/0cnzZXK87Et+1K7rH64FO+2tNItxuZb - ynX2EKDyFa86oKmyUfAV68XWsHCiDQ+kPsB8j5JQZcgIrmRaMu614Q== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQNWRTdHFJQ00rQnN3MHN6 + dFRGRHdMR1ZOMXhRYkJlMWFHQkhRMjhERjJVCkNpNS82cmJVWnN5NE85WkVFSGdD + MFhxYlF2bVZpMEtGcUg1dHRya3hQWGcKLS0tIE1Ta3dJKzB4eVNxbEt6YjhVU2c5 + V05WdHhvNGU3OGRhTGJUZTU5cytQbUUKgrX0FSq5ik2oHWI98JxuUdZkZbGD5NTS + B849u/Mi3jbmN+4inYQVb/b83lNWaEHLkK1equtMGPjCtnF3Cayf7g== -----END AGE ENCRYPTED FILE----- - recipient: age1wrssr4z4g6vl3fd3qme5cewchmmhm0j2xe6wf2meu4r6ycn37anse98mfs enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDay9Ddm15V2JUMzl5NFJW - bjBTalZDUmdJeGpVbUNodE5talZIaGZCblhBCnZGMDh3aWVnMEZVbUpQVXVJejZF - NExtbE04NnRIWTBwZGxKSkxLSzFFcjgKLS0tIHdYdzlYZ1Vha1Zqem51cmZJNGFQ - aGo4MlRzYVk3eW5WVmhpdUMwdVcxM0EKIiL0iwQZXhEqoOzLi1sslVAbBZprqCXO - 4q6V5HwS+03uXaTwLUgvto3kj0v+Ml13I936kfZpgt/275td9ylpGw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwdTVHSUUwVmNyRkRITEpU + K2FnL3dFbUlPTHpkU0RMTDMyNkV5Y0VRWVJJCndBbjVROVRoTk9IRmVrVHo3SnZL + aFR5M2toalUyTlBzMkdpSGpUUzE3QmcKLS0tIG9GZDJQWHJOY2ZjUG1EVzAwUW1L + OVBsQm1qWnFoZHVvZ3JJTjZMZUR0L0EKDRGm9gMO5aDRgKaR/9WJWDFuBhdlXlIp + KOdufqfltyEVSnKN9+4GCUacdWTiA7RVxDNtLo0mqR5EgzPs6gb+Tg== -----END AGE ENCRYPTED FILE----- - recipient: age1zhxul786an743u0fascv4wtc5xduu7qfy803lfs539yzhgmlq5ds2lznt5 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjcFExTmVjUUdxa1FzSUpZ - cmI5amMrOWZnWUJBYUxOUS9Ta21OZGpGNkFVCm5sN2UzcjlsWEJ4U25XbXdpN1g4 - dEY1VlIyTlFLZXR3eVp5V3VaS0hIemMKLS0tIHFlZnRiTE12UUU2bStsL1FmRXlx - UTBnWFF0MlBqQ012OFlSUnFaWGxHSnMKnP2kYonmPvQJ2PwaM/VI3QCW7QIhCLMW - XPgkq3GFO1XU69sAfVYk456+lgEMGabiunn6jhWhXRCcZN+EZuynWQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhYjhvUXc0VVJPZFdocFBy + b3A2bkswREFSZ3VSeEZoM2FGUDlDZDZnTVZnCjhMZUFkVkRiNUc0d1ZyZmMwQ0Vr + Vzdpa0FHOVBZVXJyaXowRVBURHBRRGsKLS0tIFIweURFYVdDWXk3U1ZZTStmYm0r + ZG9HdWlMR0xBTnN4WW0rekhuL2lDeGcKGoLNZAfczBQZEG2HnRZ65bTjTf7GhZSJ + QyE//B5tI4t9xGayIpaQgVeze+JN3b8C7R57O8t6kHSdqeDQhB+PGw== -----END AGE ENCRYPTED FILE----- - recipient: age1zvqjaanff7x3f2a7853sd9ylna99khw4x6qfpf6am4yupsc44phsr2vfy3 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmKzRaUVY3M1diRXhxUWVM - U2xhZ1VOTDd5WXRHcmRYZERxdEhGQXFkbzFVCjQ2NzR5MXRHZ0tIMUFRVWFFUFBW - aGN4VDRRWWpOWjkxRXVScVl6eHFDbWMKLS0tIHY3RCtjazNrV2V2Sm5Ob0owY2I4 - TDBma1JVNHdEYWNsM3h5SEJBRUFFcTQK5g11uEG8VgO+jB2rk+/GhGz2VxLaKlJ0 - HeA444Ncv3PPHlnqOP4x1trKFQuKuO5OprUh05J4kHcsqux6qfrWBQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJUms3NlRRUzlaQWVidDky + bDVSbi9sTkQyWVNzcEJYNlhVRW9HL2JjMkJZCmZCZUVLa2JUMHc4OHJtRlpnRlp2 + WGErZkIxbFZJNy8waFB4cjUrLzd3SE0KLS0tIGdoU3V6U3lTUHJFNHBmVFJNbFZx + RmovenJUSmdZT29vQ0Z0anJpeTRGcDQKWKajG2i7cEbvjLCtkfPqJW0JePfGDREr + jqQVXsF3CMKXEobUUrG4lgorzFlFDI3rXXKkM1qvM6Iw0cI8VHokIQ== -----END AGE ENCRYPTED FILE----- - recipient: age1zh3nmy2a7s2v7g9t7zg56p8sjqwmvqv5s7dn2v22x5nxyl5wfdcsaf5tw7 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvMmlOVnY3eWYwWjJOTytY - SkthMEhjbFRSdy9CZjl2T21kUW9GMzJXMGdvCjQ0Y1haYkcxMzhrUXV2TnRUeDBG - NW5hNnZ3YlpjUEJ3TnNZTTAxbGxuZlEKLS0tIEROV1JidGxTZnpMUElJcytNSnJU - dGs2djNWV1pHRXFvY2F4REttenhPTHcKAije/3Q5euizi9QpMnDR7LzW1dTTcPWL - YWahyBExQwfaGo4Ez3R1sRupTZixTCW14uiPhTdFG2GnLGiKsNZxkw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhUmZ6UWkxWUgyMVlOMHd4 + bnc2VnpueWhnYmJHaFNYOGIyWm4rL2FVVTJVCjRuZkVIMlAxT2hiU0w0YVc0WVVp + eHRZNCsxNkNQb1drL09IVnJLazRNaUkKLS0tIFJ0RGV2alZxMFlBQSsyME9TYUtm + RzdGaTF3U20ybStieFhOMHQ3OWhDckkKLolguwiaL7VnOMxpDoUpvKJBBUzA00Yi + 2iSAA8NWdNwbcL0PqwWcBiIieyt3sxwP447oT1L7NfzrRZjpF7QL4w== -----END AGE ENCRYPTED FILE----- - recipient: age14d0ahjjk02jyc25hhx9ws333r0yk5e06yf4ys8xhz2um7jp6qqaqfcdksg enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGZENMcmllUzd3ajRrRWp5 - bEJVZ1RRVERhZ1VWV0ZDSUlQdXZSVkZXeG1ZCk9NNHlwWEZRV2tKQlFIR0p6YkhF - cmxUU1hWN3I1M252ZzJwY1crOGZqdjAKLS0tIG43bFV6RDJtTzlwMUc3ODBpUXRa - R1dSZ1poYm5qZDE5T0tuOHhOVUZ6SjgKPFIT4S+VEXelRyybIZ+h1d6svCwMtZfQ - aHK5mtfhoTtS8PH8hwG1v7RVJ7tTov3ETLmZVeQDp6/gvGkjxwjyaA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpY0VkTmtxSDFtRjJaM1l4 + L1JEbWtSSUxlUm04TVgrc1JuUXh2clJoNGtzCktRTndRTThHcU9zNmRWdHN2K2Iy + RjJCaEdRSUdqVkFNak5EdUNBUFkvNzQKLS0tIDZocjFpNkxLRDRpckd2TXhZMHls + ZjRIaUtUVUUwSkxGY21mMC92d0MzeGcKQ/thDBe6KMiMgyisv4YO2nkg4+tn6DpO + GkU9+zHbl66RFR0jFyzvVt3H3oeLQvT8JEIIFVG54A0yrbjdTcaxkw== -----END AGE ENCRYPTED FILE----- - recipient: age14qunhxz08gmw5r8ky0ez9rjf9dj3ue9hrzz580gwwj4cms46vd7ss4rutf enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTdG5FRGZWQ1RBcVJZY2o3 - VzlkdzkwWS94UXU4MmN6SDhLTE9HNjgwT1dVCmphaEhOMmdXd1QrNThOVlAvN1JP - Mi9JcHdzRDRJeXlvMVJzVjJNaktwL2sKLS0tIFFyUWVzc3lYbmNRU1dlTis2Zk1i - R0lnazUrbVFjMG1TcXA5RGpNb1J0OWsKgAtaYKUgplIk4aIA1blP++BKQGrRc/H1 - tyMcgQW4u+pFFG8dQt22t45roEdNkdKfl8X5zV3p5SSrEPW2zI0D8g== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHaVkzelRXemxOS3owT0hC + QXZFMFpZRDVyMzd3Zkg3MkI5V2xKNlZvUEFjClZsc1hzV0ZFUk1xU3VjdjkrVnpQ + Y2RPdkt3VUxaME5LRW93cVhqTHY1ZDgKLS0tIDd1aDE2S1pEZzZObFlQaElBRFk2 + dGRpT3RDNFQycVlWRWV2M2VGVTFJcE0KvjrtM58LSQXtdGov9s9+TMmuN7QqWbUN + ajdxChT/39xGaWd1i90IwcVvVg6z7JxhVpVmaMHa8hTTVN/p2rSRRQ== -----END AGE ENCRYPTED FILE----- - recipient: age1fha09v5edg88ys45a0u3tpjqfyl29fsy9xaz8xxfy60zjhmas5psfdxynp enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhVGRPNVRSZHk5NjFqcFdU - WEIxMGlVMWZCVjBrb0pzc3ZJOUF4L0NUQjNJCld4aXMzSDZyVkc4OFBibGQ0ZjZM - bXRKWUw5SG94U1JWVVFwN0w2NEd4cnMKLS0tIGY4WnFxVkZtMXdoU3VRNW1kRzhq - Yi90emp4R3A2TkpVdXpzL0JaeHc3QXMKi49CjRhPKseaOBOlzWH48h6Ya5ivAFsi - +BlzAOlHp72bir8OqERQRuy1MUNddzx5lz3alLWsGpRsibHe2qoysw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuNVgwM014MWJjdDdRbm1R + dzBVNFRRekVld0lxd01sVzROWmVUZVZZdzFNCjBocWlEMzdVczRQeEtZNEhIWTFh + bGpRU2J6bW9pSG9Kd2R2OThDSHVOalkKLS0tIEZMYzhBYXBDYWtRY0FQNzVsZW5L + K2pPK2J6RWlNalFOWU9ud056YmZXV2MKaDEnDUo+MVNU0DRBLWByMRGCqw6ks0Kk + wgjG+LQfCdpejt5p0ZLOAcRfsYAx9gT3VopF6ka0SDr+AULNXvAuCA== -----END AGE ENCRYPTED FILE----- - recipient: age19xrvt0gjl4fcfjyy62mrl9uuzrq9e0wgemtkykr07ewz7nqn9cwshngel5 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDTUlkUWlrL0VHWktNVjVJ - c0FpS0RBWEE4NXlmZ3hBMG1uOWtJSEpCYVZFCktmWWtuSmhoNVNjTXFySGIxT0l6 - Q2ZnWWQvNzRFWGVOMk02SkFFODdHTUkKLS0tIGU4bEV4THBXR3FjZG5oYWtlalV5 - NEpmSjhHTWcwSnk2dkdDLzNpV1MwVWcK7qnQReui/nuIDOGti8TB5yq6f2cOkYHq - GlpV27vuJfDr5+m1mUzk3ecewmmJMriyRgedzF6b4iTjo7hFzW2Hbg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtcS9vcVZnYm1GZ2FzZGlI + UEUwRlhVN2N2MmpXZHdWeENxVUZLYllKVjJRCkdPMjYzZ1VIdzF2U0Nqc1BTOUp3 + NVZaSk94S2p1MG8yWWFIUkNqUTlQSU0KLS0tIGdRVDVyK0lCN0piWHl5bGI4OVVE + azRhdWlmMlEwUVBwYW1uYWFQNThpWjQKJ5nGQrX1PCaz7YdXserZWLIFfZtXyQwa + wBA2AOv77Wci72PYq/E8g5XfSYlQ4dBP4vKr98NcmaieKw+33bHmMQ== -----END AGE ENCRYPTED FILE----- - recipient: age1czlqpfdvey2hzgr79skxvtg4stnfawq045l5sl59j0cd9hfuqvlq83v647 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOU01nZkRqSXhaSlMwdzdD - K0orRE5aZmdMSWhSK0w1b1k1M2tHeFZhTDFzCitVbnd0MXBLQmYyS0RGZ0dENlcx - dkJGc29tSVRuL1J6dGNjb242aUllTEkKLS0tIFp2QkVmRGJTTUdrM0pLek5zdzJa - MEo0QTVpUllmYllpcEp1MHFPMlhaTVkKmFZSxM0uXr6bRJC4epEd32YT4rsJiPXq - xwNRvjB8tl9Jn04ePW7hYB4kvbk4CevNfxcc27uwxqqqTJkNe1RpVQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBONVBrMUJmdFg1K3p5UjQz + VGU2Yy9JRW5aTjE1TVR5b3lsQlhYYTFlTm5BCjlOeVRiMjBHNmJ6VGlzUW96SGlH + NEVXZUliY2hpT2RZVDdnNnJxdndKUG8KLS0tIFhFYTkvVGNhMU8yektTMnJxeXEy + SGtiY2svb3N0MCt6V2JCMFNsRXE4bGMKO+JdkNfrOeEMV4mdrp1YXfPNOyKRXDEl + rt1mfrTms4pdUXX9cLO7WA5IFYBnVYz7PmzYC/JJb0c8EI+89Y1Q+A== + -----END AGE ENCRYPTED FILE----- + - recipient: age13dmsned3exqn2wwwxa465vwmdtfuktk49gpshwtu0ujp94syzq5suj0a9w + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDcnVTSnJ4TGlVSkd3b0dQ + T3VyejhKMkVsa3dtWG4yNnBZbjB2RnQvbnl3CnhNcG80clhjdTU3RkJSU0RUMVRT + SFA5dllRVjJHdnJsVTZnOWx2bGNubmcKLS0tIE5wcS9zY1VUNHlDMzg0bVA5S29V + SklPV3NUSkxwSk1rWHg5N2tiN0xHeVkKhUqu6rVayVeGi00YMRXF1npO7j9oXySX + rxVQgH6hYlLbeCIW4T6cP2eCbchWDi3Pear1DVknwEDa+DhHey7Bmg== -----END AGE ENCRYPTED FILE----- lastmodified: "2023-10-27T17:15:11Z" mac: ENC[AES256_GCM,data:P9oX5KVP/64JbHX1qLiSf68gI5VxT5Ziyz3Z9oIoWWeW5SgqBXndhUKtOrM8QKjGQtFnwqjnD7nh8VTkn8SKK5+yraNkjzdpFFLwdQF7Dm0/wNKI6LNULDUQyllHO9K27qGqDWzMtT8dOpA5u9co1/mpNjbHkTR+zT40UOlgdEE=,iv:ddvCyG9BR/ZI3HbccI9yhQUAoh2pmNaCpzxG65mEGm8=,tag:UU4ylynRMPSrv2AHvI2P3A==,type:str]