muhh/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Activity

give muhh@cube access to sops secrets

Browse source
This commit is contained in:
Markus Heurung 2024-04-11 17:23:47 +02:00
parent 1166ecb941
commit 2483443d57
2 changed files with 22 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
.sops.yaml
View file

@ -1,9 +1,9 @@
keys: keys:
- &primary age1awjelu4fqh5jyc49p3sujn0wc7zdz9xmj2aajaz7mp5fkwwtj4uqyp8fl8 - &primary age1awjelu4fqh5jyc49p3sujn0wc7zdz9xmj2aajaz7mp5fkwwtj4uqyp8fl8
- &muhh@cube age12ex4qs4090ea5nzus6uf07z63pqh8yqae6gytdx93vuedlr6cqdq4nk46q - &muhhcube age12ex4qs4090ea5nzus6uf07z63pqh8yqae6gytdx93vuedlr6cqdq4nk46q
creation_rules: creation_rules:
- path_regex: secrets/secrets.yaml$ - path_regex: secrets/secrets.yaml$
key_groups: key_groups:
- age: - age:
- *primary - *primary
- *muhh@cube - *muhhcube

27
secrets/secrets.yaml
View file

@ -4,6 +4,10 @@ mail:
address: ENC[AES256_GCM,data:MdODBjT/vGmoZidXYppWX0EN,iv:Ai2YVodb/vOEyCK2spnH1vwPJrdvqIHM40ZGhALHq8A=,tag:ge1dIDEgiSYVJGNwuq+qKw==,type:str] address: ENC[AES256_GCM,data:MdODBjT/vGmoZidXYppWX0EN,iv:Ai2YVodb/vOEyCK2spnH1vwPJrdvqIHM40ZGhALHq8A=,tag:ge1dIDEgiSYVJGNwuq+qKw==,type:str]
username: ENC[AES256_GCM,data:492WNo3Dw9hFMUnVEGW/Cd6L,iv:WWbO8gX9kqiFsNGYPnp44m52fMkeHojiSXGhcl2a3wM=,tag:fILTYxn3QY1xvwLuU8EdSQ==,type:str] username: ENC[AES256_GCM,data:492WNo3Dw9hFMUnVEGW/Cd6L,iv:WWbO8gX9kqiFsNGYPnp44m52fMkeHojiSXGhcl2a3wM=,tag:fILTYxn3QY1xvwLuU8EdSQ==,type:str]
password: ENC[AES256_GCM,data:Oa3tYztCeY0Nvun+34bAji+9b/g=,iv:Sbx/d2H35wlPvsfomwAF+aT3kBCV70+GDi0Lj5lqTII=,tag:xHC6yGlsTroja8CMOTx/rQ==,type:str] password: ENC[AES256_GCM,data:Oa3tYztCeY0Nvun+34bAji+9b/g=,iv:Sbx/d2H35wlPvsfomwAF+aT3kBCV70+GDi0Lj5lqTII=,tag:xHC6yGlsTroja8CMOTx/rQ==,type:str]
icloud:
address: ENC[AES256_GCM,data:7/4rd1ZneKI02kw=,iv:bBUrG3j+S3FGFGHPfbaSi7WnuVS9hliZU4Bxw1MrWDU=,tag:7C8T3artkNO68EctuBhb2A==,type:str]
username: ENC[AES256_GCM,data:dP/Ft1dlbqxHJC0=,iv:it+Z+ALPGOc7ZyYqrtgiZxuL+pPptmDaT4Obh2XArPA=,tag:0Z7Ll/4iBHN51KKSyN8kpw==,type:str]
password: ENC[AES256_GCM,data:KL+QQemQ9z2Le2o=,iv:3J+Qx4uknKVlNrB4EqP8orxa8IrLEgT8MDa68JrPUeI=,tag:gNVr9ohICAgOHSMwIlcsmA==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -13,14 +17,23 @@ sops:
- recipient: age1awjelu4fqh5jyc49p3sujn0wc7zdz9xmj2aajaz7mp5fkwwtj4uqyp8fl8 - recipient: age1awjelu4fqh5jyc49p3sujn0wc7zdz9xmj2aajaz7mp5fkwwtj4uqyp8fl8
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrVG1iNURjT0IzcEJzZllI YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxZUtJWkJJcHFVbkVSTkIy
dk5XZWpvN2kzRnJFYVFXbW0wZXJwU0YyV0VzCkxEbVcyOHUzREFyTlh5emZNN0lE MlBNOTE3YlN3NEFDb2c1Z2phaWlZVzdJL0c4Cm4vRjdPTkdrci9HOG9BcEp6clVw
bHp1T1JXUCtIZ1pUa3d5ZHNUanBTM1UKLS0tIEF2Q2hTcWZmdU1DNFl4SGVzUXJR UkhONmtUYjNNaDNmbEZwNDFMNTFlcjQKLS0tIDhWU3VKdDZjZ2MrRWZXRngrQTRs
aHFLbEp5TjRlSzdvVkpEdU5RZ2RKUlUK1/GYeQir6dDprPMJrKI+4tBJokKc8Azz eXdUT0M3Uy9TTkliVU5sRkJwbjZpTUkK+Qq2+h1TSGGy0IOc8w/ECh1AoaofS64H
+pnBPXwXhAHIHXjKv88trcRkmFraOYkAu4lVpdyt/4FtbtvFvouBgw== pVsWEJE1rgOQoD2iD15mG3zw215F5eQxoV/K10w/h59rxY31iVy1YA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-03-29T16:25:56Z" - recipient: age12ex4qs4090ea5nzus6uf07z63pqh8yqae6gytdx93vuedlr6cqdq4nk46q
mac: ENC[AES256_GCM,data:C1M3zxOYKLA8acsZVubXBure9zda2SyPWRqv2howmHgrBujkrZaqSL47kt9a1E5simqYdCmzqlLIhjW5wRq/kcunFFTewgZ6QFqVUphLHk1WHxm3MHF7oYDUr9E7Z0BH/SYHim7Ruc2Cc0Hy0YdH/hjgcf2vdqjWFWMTX3aeo0w=,iv:mhEgskDzDz5sNSaBIfEmI1tbXkkRnG5ruzK3TL0lXys=,tag:y+IPy1uYzbCAALEZCjYz8w==,type:str] enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4dWpuVjdiMWg3K2hKbFRJ
QURTV3oyNU43NmZ6RUZhenEybElldlhSSGcwCmkzNnNWc2M0c3FiQWk4Sk9aaFhT
VDgwdFNwV0FRa3E2UEdiV2E0VHVld00KLS0tIGkxa05MdnIzaVE1dFZ6NXBtblRY
SEFxb2UwbDFiSG5QdzVWRk02b3lIZDQKYF4Vv3FwvKv3uwACRXb/jwD6Q5rh39Yu
w7J86gsX7Yh9Wm65y+CW1JE8EN72mhBbYwve3lK8twDjxmLhYOMjIg==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-04-11T15:20:09Z"
mac: ENC[AES256_GCM,data:k6sIben6qmbR4vdHKjbPXfbycAoJC4nDwkb5c8EF1tBCyPM294XUK9DJ8MrEtijB7snp6q5hbFOxeYm4saTdUCmIA0OJi09Gto+mKbPn4oUWu1IGOqphe+71JBsdC5VK0X7C/6AskMpGHTjVFzEMSCNG1QlWwqjbj+nooMxT5X4=,iv:Mw3mrFx/CAmuCplqVcXiUDBEeb0bqK0Y4kTCZxMise8=,tag:seTx8hAi/8oGRCwpv9Qdug==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.8.1 version: 3.8.1