bjarte host key

This commit is contained in:
Peder Bergebakken Sundt 2024-04-20 00:38:55 +02:00
parent b57afd19e5
commit f41bc2c9ae
2 changed files with 69 additions and 51 deletions

View File

@ -15,7 +15,7 @@ keys: # https://github.com/getsops/sops/pull/1123
- &host_eple age1fha09v5edg88ys45a0u3tpjqfyl29fsy9xaz8xxfy60zjhmas5psfdxynp - &host_eple age1fha09v5edg88ys45a0u3tpjqfyl29fsy9xaz8xxfy60zjhmas5psfdxynp
- &host_nord age19xrvt0gjl4fcfjyy62mrl9uuzrq9e0wgemtkykr07ewz7nqn9cwshngel5 - &host_nord age19xrvt0gjl4fcfjyy62mrl9uuzrq9e0wgemtkykr07ewz7nqn9cwshngel5
- &host_brumle age1czlqpfdvey2hzgr79skxvtg4stnfawq045l5sl59j0cd9hfuqvlq83v647 # brumlebasse - &host_brumle age1czlqpfdvey2hzgr79skxvtg4stnfawq045l5sl59j0cd9hfuqvlq83v647 # brumlebasse
#- &host_bjarte age1gy6gyp9qqt5vlkzymfxsrdqm6rctl39tx53jx6n0hgd3escy844q55d6ey - &host_bjarte age13dmsned3exqn2wwwxa465vwmdtfuktk49gpshwtu0ujp94syzq5suj0a9w
# https://github.com/getsops/sops#key-groups # https://github.com/getsops/sops#key-groups
creation_rules: creation_rules:
@ -33,6 +33,7 @@ creation_rules:
- *host_eple - *host_eple
- *host_nord - *host_nord
- *host_brumle - *host_brumle
- *host_bjarte
# dns # dns
- path_regex: secrets/dns.yaml$ - path_regex: secrets/dns.yaml$
key_groups: key_groups:
@ -100,6 +101,14 @@ creation_rules:
- *user_pbsds_nord - *user_pbsds_nord
- *user_pbsds_bjarte - *user_pbsds_bjarte
- *host_nord - *host_nord
# bjarte only
- path_regex: secrets/bjarte(/[^/]+)?\.yaml$
key_groups:
- age:
- *user_pbsds_sopp
- *user_pbsds_nord
- *user_pbsds_bjarte
- *host_bjarte
# brumlebasse only # brumlebasse only
- path_regex: secrets/brumle(basse)?(/[^/]+)?\.yaml$ - path_regex: secrets/brumle(basse)?(/[^/]+)?\.yaml$
key_groups: key_groups:

View File

@ -9,92 +9,101 @@ sops:
- recipient: age1hmpdk4h69wxpwqk9tkud39f66hprhehxtzhgw97r6dvr7v0mx5jscsuhkn - recipient: age1hmpdk4h69wxpwqk9tkud39f66hprhehxtzhgw97r6dvr7v0mx5jscsuhkn
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNUmVDeEFvcjVRUHg5VTVl YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQNWRTdHFJQ00rQnN3MHN6
TVpDUGtZSEF1Ky8rclVCN1ppYU9YdGxOQTM0CmFiaFJRT3hMalVyN3hxc0ZrMlky dFRGRHdMR1ZOMXhRYkJlMWFHQkhRMjhERjJVCkNpNS82cmJVWnN5NE85WkVFSGdD
Y3RQNjZzUm56b3V3b2Qwd2FUZ2NDVkUKLS0tICtNdWppNlhuemRlem1zMFdJMkdz MFhxYlF2bVZpMEtGcUg1dHRya3hQWGcKLS0tIE1Ta3dJKzB4eVNxbEt6YjhVU2c5
dU5kNUtjT0tWd21rc0VtakxvUjNzVGcK/0cnzZXK87Et+1K7rH64FO+2tNItxuZb V05WdHhvNGU3OGRhTGJUZTU5cytQbUUKgrX0FSq5ik2oHWI98JxuUdZkZbGD5NTS
ynX2EKDyFa86oKmyUfAV68XWsHCiDQ+kPsB8j5JQZcgIrmRaMu614Q== B849u/Mi3jbmN+4inYQVb/b83lNWaEHLkK1equtMGPjCtnF3Cayf7g==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1wrssr4z4g6vl3fd3qme5cewchmmhm0j2xe6wf2meu4r6ycn37anse98mfs - recipient: age1wrssr4z4g6vl3fd3qme5cewchmmhm0j2xe6wf2meu4r6ycn37anse98mfs
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDay9Ddm15V2JUMzl5NFJW YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwdTVHSUUwVmNyRkRITEpU
bjBTalZDUmdJeGpVbUNodE5talZIaGZCblhBCnZGMDh3aWVnMEZVbUpQVXVJejZF K2FnL3dFbUlPTHpkU0RMTDMyNkV5Y0VRWVJJCndBbjVROVRoTk9IRmVrVHo3SnZL
NExtbE04NnRIWTBwZGxKSkxLSzFFcjgKLS0tIHdYdzlYZ1Vha1Zqem51cmZJNGFQ aFR5M2toalUyTlBzMkdpSGpUUzE3QmcKLS0tIG9GZDJQWHJOY2ZjUG1EVzAwUW1L
aGo4MlRzYVk3eW5WVmhpdUMwdVcxM0EKIiL0iwQZXhEqoOzLi1sslVAbBZprqCXO OVBsQm1qWnFoZHVvZ3JJTjZMZUR0L0EKDRGm9gMO5aDRgKaR/9WJWDFuBhdlXlIp
4q6V5HwS+03uXaTwLUgvto3kj0v+Ml13I936kfZpgt/275td9ylpGw== KOdufqfltyEVSnKN9+4GCUacdWTiA7RVxDNtLo0mqR5EgzPs6gb+Tg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1zhxul786an743u0fascv4wtc5xduu7qfy803lfs539yzhgmlq5ds2lznt5 - recipient: age1zhxul786an743u0fascv4wtc5xduu7qfy803lfs539yzhgmlq5ds2lznt5
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjcFExTmVjUUdxa1FzSUpZ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhYjhvUXc0VVJPZFdocFBy
cmI5amMrOWZnWUJBYUxOUS9Ta21OZGpGNkFVCm5sN2UzcjlsWEJ4U25XbXdpN1g4 b3A2bkswREFSZ3VSeEZoM2FGUDlDZDZnTVZnCjhMZUFkVkRiNUc0d1ZyZmMwQ0Vr
dEY1VlIyTlFLZXR3eVp5V3VaS0hIemMKLS0tIHFlZnRiTE12UUU2bStsL1FmRXlx Vzdpa0FHOVBZVXJyaXowRVBURHBRRGsKLS0tIFIweURFYVdDWXk3U1ZZTStmYm0r
UTBnWFF0MlBqQ012OFlSUnFaWGxHSnMKnP2kYonmPvQJ2PwaM/VI3QCW7QIhCLMW ZG9HdWlMR0xBTnN4WW0rekhuL2lDeGcKGoLNZAfczBQZEG2HnRZ65bTjTf7GhZSJ
XPgkq3GFO1XU69sAfVYk456+lgEMGabiunn6jhWhXRCcZN+EZuynWQ== QyE//B5tI4t9xGayIpaQgVeze+JN3b8C7R57O8t6kHSdqeDQhB+PGw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1zvqjaanff7x3f2a7853sd9ylna99khw4x6qfpf6am4yupsc44phsr2vfy3 - recipient: age1zvqjaanff7x3f2a7853sd9ylna99khw4x6qfpf6am4yupsc44phsr2vfy3
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmKzRaUVY3M1diRXhxUWVM YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJUms3NlRRUzlaQWVidDky
U2xhZ1VOTDd5WXRHcmRYZERxdEhGQXFkbzFVCjQ2NzR5MXRHZ0tIMUFRVWFFUFBW bDVSbi9sTkQyWVNzcEJYNlhVRW9HL2JjMkJZCmZCZUVLa2JUMHc4OHJtRlpnRlp2
aGN4VDRRWWpOWjkxRXVScVl6eHFDbWMKLS0tIHY3RCtjazNrV2V2Sm5Ob0owY2I4 WGErZkIxbFZJNy8waFB4cjUrLzd3SE0KLS0tIGdoU3V6U3lTUHJFNHBmVFJNbFZx
TDBma1JVNHdEYWNsM3h5SEJBRUFFcTQK5g11uEG8VgO+jB2rk+/GhGz2VxLaKlJ0 RmovenJUSmdZT29vQ0Z0anJpeTRGcDQKWKajG2i7cEbvjLCtkfPqJW0JePfGDREr
HeA444Ncv3PPHlnqOP4x1trKFQuKuO5OprUh05J4kHcsqux6qfrWBQ== jqQVXsF3CMKXEobUUrG4lgorzFlFDI3rXXKkM1qvM6Iw0cI8VHokIQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1zh3nmy2a7s2v7g9t7zg56p8sjqwmvqv5s7dn2v22x5nxyl5wfdcsaf5tw7 - recipient: age1zh3nmy2a7s2v7g9t7zg56p8sjqwmvqv5s7dn2v22x5nxyl5wfdcsaf5tw7
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvMmlOVnY3eWYwWjJOTytY YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhUmZ6UWkxWUgyMVlOMHd4
SkthMEhjbFRSdy9CZjl2T21kUW9GMzJXMGdvCjQ0Y1haYkcxMzhrUXV2TnRUeDBG bnc2VnpueWhnYmJHaFNYOGIyWm4rL2FVVTJVCjRuZkVIMlAxT2hiU0w0YVc0WVVp
NW5hNnZ3YlpjUEJ3TnNZTTAxbGxuZlEKLS0tIEROV1JidGxTZnpMUElJcytNSnJU eHRZNCsxNkNQb1drL09IVnJLazRNaUkKLS0tIFJ0RGV2alZxMFlBQSsyME9TYUtm
dGs2djNWV1pHRXFvY2F4REttenhPTHcKAije/3Q5euizi9QpMnDR7LzW1dTTcPWL RzdGaTF3U20ybStieFhOMHQ3OWhDckkKLolguwiaL7VnOMxpDoUpvKJBBUzA00Yi
YWahyBExQwfaGo4Ez3R1sRupTZixTCW14uiPhTdFG2GnLGiKsNZxkw== 2iSAA8NWdNwbcL0PqwWcBiIieyt3sxwP447oT1L7NfzrRZjpF7QL4w==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age14d0ahjjk02jyc25hhx9ws333r0yk5e06yf4ys8xhz2um7jp6qqaqfcdksg - recipient: age14d0ahjjk02jyc25hhx9ws333r0yk5e06yf4ys8xhz2um7jp6qqaqfcdksg
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGZENMcmllUzd3ajRrRWp5 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpY0VkTmtxSDFtRjJaM1l4
bEJVZ1RRVERhZ1VWV0ZDSUlQdXZSVkZXeG1ZCk9NNHlwWEZRV2tKQlFIR0p6YkhF L1JEbWtSSUxlUm04TVgrc1JuUXh2clJoNGtzCktRTndRTThHcU9zNmRWdHN2K2Iy
cmxUU1hWN3I1M252ZzJwY1crOGZqdjAKLS0tIG43bFV6RDJtTzlwMUc3ODBpUXRa RjJCaEdRSUdqVkFNak5EdUNBUFkvNzQKLS0tIDZocjFpNkxLRDRpckd2TXhZMHls
R1dSZ1poYm5qZDE5T0tuOHhOVUZ6SjgKPFIT4S+VEXelRyybIZ+h1d6svCwMtZfQ ZjRIaUtUVUUwSkxGY21mMC92d0MzeGcKQ/thDBe6KMiMgyisv4YO2nkg4+tn6DpO
aHK5mtfhoTtS8PH8hwG1v7RVJ7tTov3ETLmZVeQDp6/gvGkjxwjyaA== GkU9+zHbl66RFR0jFyzvVt3H3oeLQvT8JEIIFVG54A0yrbjdTcaxkw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age14qunhxz08gmw5r8ky0ez9rjf9dj3ue9hrzz580gwwj4cms46vd7ss4rutf - recipient: age14qunhxz08gmw5r8ky0ez9rjf9dj3ue9hrzz580gwwj4cms46vd7ss4rutf
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTdG5FRGZWQ1RBcVJZY2o3 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHaVkzelRXemxOS3owT0hC
VzlkdzkwWS94UXU4MmN6SDhLTE9HNjgwT1dVCmphaEhOMmdXd1QrNThOVlAvN1JP QXZFMFpZRDVyMzd3Zkg3MkI5V2xKNlZvUEFjClZsc1hzV0ZFUk1xU3VjdjkrVnpQ
Mi9JcHdzRDRJeXlvMVJzVjJNaktwL2sKLS0tIFFyUWVzc3lYbmNRU1dlTis2Zk1i Y2RPdkt3VUxaME5LRW93cVhqTHY1ZDgKLS0tIDd1aDE2S1pEZzZObFlQaElBRFk2
R0lnazUrbVFjMG1TcXA5RGpNb1J0OWsKgAtaYKUgplIk4aIA1blP++BKQGrRc/H1 dGRpT3RDNFQycVlWRWV2M2VGVTFJcE0KvjrtM58LSQXtdGov9s9+TMmuN7QqWbUN
tyMcgQW4u+pFFG8dQt22t45roEdNkdKfl8X5zV3p5SSrEPW2zI0D8g== ajdxChT/39xGaWd1i90IwcVvVg6z7JxhVpVmaMHa8hTTVN/p2rSRRQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1fha09v5edg88ys45a0u3tpjqfyl29fsy9xaz8xxfy60zjhmas5psfdxynp - recipient: age1fha09v5edg88ys45a0u3tpjqfyl29fsy9xaz8xxfy60zjhmas5psfdxynp
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhVGRPNVRSZHk5NjFqcFdU YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuNVgwM014MWJjdDdRbm1R
WEIxMGlVMWZCVjBrb0pzc3ZJOUF4L0NUQjNJCld4aXMzSDZyVkc4OFBibGQ0ZjZM dzBVNFRRekVld0lxd01sVzROWmVUZVZZdzFNCjBocWlEMzdVczRQeEtZNEhIWTFh
bXRKWUw5SG94U1JWVVFwN0w2NEd4cnMKLS0tIGY4WnFxVkZtMXdoU3VRNW1kRzhq bGpRU2J6bW9pSG9Kd2R2OThDSHVOalkKLS0tIEZMYzhBYXBDYWtRY0FQNzVsZW5L
Yi90emp4R3A2TkpVdXpzL0JaeHc3QXMKi49CjRhPKseaOBOlzWH48h6Ya5ivAFsi K2pPK2J6RWlNalFOWU9ud056YmZXV2MKaDEnDUo+MVNU0DRBLWByMRGCqw6ks0Kk
+BlzAOlHp72bir8OqERQRuy1MUNddzx5lz3alLWsGpRsibHe2qoysw== wgjG+LQfCdpejt5p0ZLOAcRfsYAx9gT3VopF6ka0SDr+AULNXvAuCA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age19xrvt0gjl4fcfjyy62mrl9uuzrq9e0wgemtkykr07ewz7nqn9cwshngel5 - recipient: age19xrvt0gjl4fcfjyy62mrl9uuzrq9e0wgemtkykr07ewz7nqn9cwshngel5
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDTUlkUWlrL0VHWktNVjVJ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtcS9vcVZnYm1GZ2FzZGlI
c0FpS0RBWEE4NXlmZ3hBMG1uOWtJSEpCYVZFCktmWWtuSmhoNVNjTXFySGIxT0l6 UEUwRlhVN2N2MmpXZHdWeENxVUZLYllKVjJRCkdPMjYzZ1VIdzF2U0Nqc1BTOUp3
Q2ZnWWQvNzRFWGVOMk02SkFFODdHTUkKLS0tIGU4bEV4THBXR3FjZG5oYWtlalV5 NVZaSk94S2p1MG8yWWFIUkNqUTlQSU0KLS0tIGdRVDVyK0lCN0piWHl5bGI4OVVE
NEpmSjhHTWcwSnk2dkdDLzNpV1MwVWcK7qnQReui/nuIDOGti8TB5yq6f2cOkYHq azRhdWlmMlEwUVBwYW1uYWFQNThpWjQKJ5nGQrX1PCaz7YdXserZWLIFfZtXyQwa
GlpV27vuJfDr5+m1mUzk3ecewmmJMriyRgedzF6b4iTjo7hFzW2Hbg== wBA2AOv77Wci72PYq/E8g5XfSYlQ4dBP4vKr98NcmaieKw+33bHmMQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1czlqpfdvey2hzgr79skxvtg4stnfawq045l5sl59j0cd9hfuqvlq83v647 - recipient: age1czlqpfdvey2hzgr79skxvtg4stnfawq045l5sl59j0cd9hfuqvlq83v647
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOU01nZkRqSXhaSlMwdzdD YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBONVBrMUJmdFg1K3p5UjQz
K0orRE5aZmdMSWhSK0w1b1k1M2tHeFZhTDFzCitVbnd0MXBLQmYyS0RGZ0dENlcx VGU2Yy9JRW5aTjE1TVR5b3lsQlhYYTFlTm5BCjlOeVRiMjBHNmJ6VGlzUW96SGlH
dkJGc29tSVRuL1J6dGNjb242aUllTEkKLS0tIFp2QkVmRGJTTUdrM0pLek5zdzJa NEVXZUliY2hpT2RZVDdnNnJxdndKUG8KLS0tIFhFYTkvVGNhMU8yektTMnJxeXEy
MEo0QTVpUllmYllpcEp1MHFPMlhaTVkKmFZSxM0uXr6bRJC4epEd32YT4rsJiPXq SGtiY2svb3N0MCt6V2JCMFNsRXE4bGMKO+JdkNfrOeEMV4mdrp1YXfPNOyKRXDEl
xwNRvjB8tl9Jn04ePW7hYB4kvbk4CevNfxcc27uwxqqqTJkNe1RpVQ== rt1mfrTms4pdUXX9cLO7WA5IFYBnVYz7PmzYC/JJb0c8EI+89Y1Q+A==
-----END AGE ENCRYPTED FILE-----
- recipient: age13dmsned3exqn2wwwxa465vwmdtfuktk49gpshwtu0ujp94syzq5suj0a9w
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDcnVTSnJ4TGlVSkd3b0dQ
T3VyejhKMkVsa3dtWG4yNnBZbjB2RnQvbnl3CnhNcG80clhjdTU3RkJSU0RUMVRT
SFA5dllRVjJHdnJsVTZnOWx2bGNubmcKLS0tIE5wcS9zY1VUNHlDMzg0bVA5S29V
SklPV3NUSkxwSk1rWHg5N2tiN0xHeVkKhUqu6rVayVeGi00YMRXF1npO7j9oXySX
rxVQgH6hYlLbeCIW4T6cP2eCbchWDi3Pear1DVknwEDa+DhHey7Bmg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2023-10-27T17:15:11Z" lastmodified: "2023-10-27T17:15:11Z"
mac: ENC[AES256_GCM,data:P9oX5KVP/64JbHX1qLiSf68gI5VxT5Ziyz3Z9oIoWWeW5SgqBXndhUKtOrM8QKjGQtFnwqjnD7nh8VTkn8SKK5+yraNkjzdpFFLwdQF7Dm0/wNKI6LNULDUQyllHO9K27qGqDWzMtT8dOpA5u9co1/mpNjbHkTR+zT40UOlgdEE=,iv:ddvCyG9BR/ZI3HbccI9yhQUAoh2pmNaCpzxG65mEGm8=,tag:UU4ylynRMPSrv2AHvI2P3A==,type:str] mac: ENC[AES256_GCM,data:P9oX5KVP/64JbHX1qLiSf68gI5VxT5Ziyz3Z9oIoWWeW5SgqBXndhUKtOrM8QKjGQtFnwqjnD7nh8VTkn8SKK5+yraNkjzdpFFLwdQF7Dm0/wNKI6LNULDUQyllHO9K27qGqDWzMtT8dOpA5u9co1/mpNjbHkTR+zT40UOlgdEE=,iv:ddvCyG9BR/ZI3HbccI9yhQUAoh2pmNaCpzxG65mEGm8=,tag:UU4ylynRMPSrv2AHvI2P3A==,type:str]