colin/nix-files
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

secrets: add moby host to the access list

Browse Source
This commit is contained in:
colin 2022-06-06 18:05:28 -07:00
parent fbd99f0069
commit 3fea4297a8
2 changed files with 41 additions and 30 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.sops.yaml
View File

@ -5,6 +5,7 @@ keys:
- &user_moby_colin age1lt739n2tq7dmpglvntjr9j2r7426md7rat7x9w930gagtx4jyvnqwts2al - &user_moby_colin age1lt739n2tq7dmpglvntjr9j2r7426md7rat7x9w930gagtx4jyvnqwts2al
- &host_desko age1s0v4fm203ap6mckcz3djw8hx30uqu87xfhfdajpmyf8rfrf5xs5swpz6m6 - &host_desko age1s0v4fm203ap6mckcz3djw8hx30uqu87xfhfdajpmyf8rfrf5xs5swpz6m6
- &host_uninsane age1tzlyex2z6t88tg9h82943e39shxhmqeyr7ywhlwpdjmyqsndv3qq27x0rf - &host_uninsane age1tzlyex2z6t88tg9h82943e39shxhmqeyr7ywhlwpdjmyqsndv3qq27x0rf
- &host_moby age1t957gf0z865gya0khgc9x59wy76hzps3sgejjqtwcngn2xl273msxsmpe6
creation_rules: creation_rules:
- path_regex: secrets/[^/]+\.yaml$ - path_regex: secrets/[^/]+\.yaml$
key_groups: key_groups:
@ -15,3 +16,4 @@ creation_rules:
- *user_moby_colin - *user_moby_colin
- *host_desko - *host_desko
- *host_uninsane - *host_uninsane
- *host_moby

69
secrets/example.yaml
View File

@ -17,56 +17,65 @@ sops:
- recipient: age1tnl4jfgacwkargzeqnhzernw29xx8mkv73xh6ufdyde6q7859slsnzf24x - recipient: age1tnl4jfgacwkargzeqnhzernw29xx8mkv73xh6ufdyde6q7859slsnzf24x
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQNEE3bTJ4TjJMQXN2TTlu YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXbEw4ZzlpNWdZdDRUdk1V
bEN3WVhtTlV3Z2VySHRTVFZ3a2lHRDhQQWljCjVudlV6Rmc1SWVUWkZ0dGlpdUlP Zkg1emFFNlovamxhaktBeFZKWkp4bjRVaVVJCm9yVHl0YXZnSytGZlByaVBzbVJn
aW1yVU9GQjFUdXlVUGlkUzdhaFpDK2sKLS0tIHl0NXMyRGlPQWhOeE5SZVFmUGVN MWkxNXh0T3hGNEFMeDQrQnFkWjJ0QVEKLS0tIGR5QjlvN3pjV0pMS0k1T0hBVWh2
cFpwZEZQamRLVVk1bU5YM0FHSGJyUzAK7pIfdKCAn1Z7n0T2nCt5rQ/2jkIpgtm2 bDc4YncwbEwrQU8zcWFXYmVnLzdDdXMKOCxo+pschTY9YTzNu71kk7baerW1gvlI
qoT11S0gb6aE2xeAUmk9wQRQ2rRogN3vKrLbI9N6EV0egS+rl6qGAQ== LQU7MXg06jUErdB9UsrwW9+b8WDbaQltu7hJefXlUG28i0LQGKkZxg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1ml8kkppftygu2wag57yld98jlrkh4avp54eheq7q0fa2rup843csqjajs6 - recipient: age1ml8kkppftygu2wag57yld98jlrkh4avp54eheq7q0fa2rup843csqjajs6
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHUUJ0VDc1TW5DUkwxSjU3 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSRjVJN3hZOEZLcG5Ca0lT
cVRkQ0J4ZktaYjdGVm50ZUtTR1BDVlYyZFM4ClZEajczamNDbnY0bGlXVUh4TW43 ZHNMNndPTloxUnZaWmdQN1IrU3cvVlcyZUZRCnc4L1hhVzRaK2U5YnZCUnRreERY
NFRvQjRRc1I0eGw1VDVWeEhqbFZZWUkKLS0tIGY0MnBIdEp6ODN1cXgzdyt1dnE2 QUVHN1VJZU5MQzI3RkdKYmZ5NlZqM2cKLS0tIDZvTTNucitDTjBIL1VYTVZkRlZl
aGQ4cVZ1alZ2TlgrZUc3R2E0M1pFVkUKVppvT/zflb8J0Kk94J8+jnI5GKNgWVK9 MUNoNDRJeW42cStBVWRUQ2t0N0RnbFUKlB6ltDgvNZszXg8g71lKliU5F44efZxX
2sQ57v8AfhT//eIDtzzCGkFJRs0nkWrhGm4loS2U1IC5gHglNFb2ZQ== pDn0feVk9T8drynyVS/zSOl5ktfVGQ02muD7Js8F738cbZnLHDEY3w==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1z8fauff34cdecr6sjkre260luzxcca05kpcwvhx988d306tpcejsp63znu - recipient: age1z8fauff34cdecr6sjkre260luzxcca05kpcwvhx988d306tpcejsp63znu
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYK3J0YTRWQUVrTVBwUUxY YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBURVp0a2tMbUhmZnN6VjV6
T0hDc0oxWUZtSUtpWFoyN2hMczUyUCt6dXk0CjF1N2FCeDFOY0tZcktkeGlMeEJI bGZhUHFhaUNKRk8yK25Wbys4djRGckdXVGhzCmVzUWJuc3BrRlJrZHI1WmliSjVw
SzlBU0JlZnhXUUs3QklyVy95UjVUa3MKLS0tIEtmSmhFY2NCM21uYk9UMlQ4VUgv am9UQ3VKL0NIUVNTUTRNQTE0cnNMWlEKLS0tIGd3WFRVOUN3dUxvSkEyZ05mdnVt
UFZJVTVzT1duVmx6Rmh3eDMxa0VLS0kKmIs++M6scOavm9tES6tCPs7Ygw4/hPvf ZjlSSENDSk1kSzE5Yjk3MnY3c2Z4WTAKnbP+qsnRDYqBvsxDb6cYYhluHdCgT5mp
LftQBykLl2qMbBzUGsjdudi8M7kIouJhBEfhQC5wdkKPNTlBajgr0Q== 4pSk0pcCBmui7b9W7HrN7SkLLXFDOEBXqdtieCiyGrDKRfSjW33ScA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1lt739n2tq7dmpglvntjr9j2r7426md7rat7x9w930gagtx4jyvnqwts2al - recipient: age1lt739n2tq7dmpglvntjr9j2r7426md7rat7x9w930gagtx4jyvnqwts2al
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjWm1tT1hWQ05wTkdwRDBQ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3OUZweGJ1YU1PMm1GaWRC
a3BCZktyME1YYk9GWHo5K0ZXSnNCV3hqc1JVCk5COS9nSkhBdTUwU284S1hTYVVB d3dMODNxQnRnckQ5Y091Q1NZc1ZEZ3pRRmhJCnRTUDlwdVh5NTczemJGbjVMTE9n
VnhaaHkzSmpFeCtSby9vaGtXQzJSbzAKLS0tIDlXSnNpblYydEdFMEswd0VrZ1FI bVZEV1prc01Zb3UxTFZQcXlMZzJHcFEKLS0tIEVKNmZaOXRkYWc4SHVObjd3MlUv
NUhLbUFoVGpiWXBqUWVDTzltRHhmYmsKmNKX+mFJzO0Y2ONqC4jGtQJBigVYICpl S2dkZTNaNGwvSTVjMkVlY1BnaWt4dG8KgK1i/n8NOQJNLf+Pf5agTTUFX0zPC28u
FBKGAeoq6bYmuF7pR+hk3qgCN9iqhqva3YLS1RwMrm5cT+TuuqW+eQ== DP2JVQlwjDCnV/t9dM6XCD5Ab9KvXpdG7a5E5M2o/eh5GYuZ1FcGyg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1s0v4fm203ap6mckcz3djw8hx30uqu87xfhfdajpmyf8rfrf5xs5swpz6m6 - recipient: age1s0v4fm203ap6mckcz3djw8hx30uqu87xfhfdajpmyf8rfrf5xs5swpz6m6
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzNnArb2hOWGhDM0JpMHJy YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQSWFIM1ZGUmJ6VGdFbUxy
dW02bi92MURSc1FRWlBwQWY5akROQ1dtK0cwCjduWWNCMHd1VW5kVnJ0VmF6UHFI QmMxQWtaQTZLb2VQalNuZE52YjRSY2JTb0RRCkUvRzFnREJPTnpMUmN0dW15K2Qz
a0dCbThUSjIzVUhvMXYyUUNyakN2UmcKLS0tIHNWRDlsMk14Q0luT2NrMk9wWjFX S1B2ZzdUNGJXT1lJdHNodzZ1VVBmMVkKLS0tIG1BV3luOVJmRHFiOWtkVDdoc2Uw
cGIrNTB2N2duZ3FYdWE1Vm1EVWpJUXMKqjGVryC4ZhcSg3xM4rZLd/LQh9PPw2B6 Qm82Z0NvbFBjR1FQZDUyOG5QRTJXQW8Kjjwh+cXzgbZH7rxxa2lPQBzR3Aj3XYuX
ArhWSfpcoFfGPD32PGpVaVtT552aKbIV9vbnzWm+JGrWNVymJvlbjw== LlplKXuRw5LS6BiQZM/NPBrb2ntv0vb/RVKOsAOwTt3LOtMiQNxQHA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1tzlyex2z6t88tg9h82943e39shxhmqeyr7ywhlwpdjmyqsndv3qq27x0rf - recipient: age1tzlyex2z6t88tg9h82943e39shxhmqeyr7ywhlwpdjmyqsndv3qq27x0rf
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuRUJKQnkvaTlkMGFObm1B YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVd3htc1orSk1HYkdxUThL
UGJVcXdyWUZqMmlpMkN5d1pQc3VLajJCZmpzCm44UjFycDVBNjJmajR6Y2ZyZ2ZE c3RLRmY4L0RpNlY4Rlg4Z1ZUVlB5Y0dEN0E4CjRFV01ZZytWOUJkSjlXWFQvSjBU
REIwVXVWZGdmWnJqblEwUnljSXphZkUKLS0tIFlHK1N6M1NKTmlHMWZ0K1BCZ203 bVNZLzJvUklOOTdXTWJzRGJKUWtBRWMKLS0tIGFoTWRkcVVsWUNDY3pBWk5QM25i
VWZNRHNpb3VBYVl5a1c3UGtrYnpENkEKPNvdQnf8yPl0FI+BWFZH8j9Md9DG4L4e Qlc3L2JicWJLS3pPaGhoTysrcElXSUUKko8MXVBYlcphg379v02gPkqFgYD2krjo
bJ6lFHJBKD2uJvTZItarP1KwRVcCu/wbi1bze2BOpmx2ZIQb3FsF/A== Tt6kqoqcfUGBcI6a1MQ8dbkAVcs4MAIAsJXt5snC7pDw5cvHzOHpZg==
-----END AGE ENCRYPTED FILE-----
- recipient: age1t957gf0z865gya0khgc9x59wy76hzps3sgejjqtwcngn2xl273msxsmpe6
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvQ05pUW9uQmczbHNRWVU4
M0lCNng0R0Q5Q2h4QVYyMDU3ZDBibFh6N3pzCjNVS3ZVQWJCdGxwZFRHcU4zWWNv
SnhnYnppbENPbm0raktubUdzbEJrbTgKLS0tIEdOTWN4KzlSRzgvc1dmVzZFRi80
NXRzeDg0UUErMTIwU053TmZ1TGp3U0EKvHgGyj1sKS2wBEqleHUQJhzPIB5/MkMm
x0t3r6i5hQQOndspkSvI0dctAJG5uxzSVFkHwfcA/tquq4/UkeSjwg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2022-06-06T23:21:20Z" lastmodified: "2022-06-06T23:21:20Z"
mac: ENC[AES256_GCM,data:pU5882gcNu2hmINn/xnDriHX8PvrEqepnf8/B+WGYrkd6yqpsVPCivlhGFmPvPaRt/o0AVMuH7Wbwm3+rmOpR1LFfJUtnFcejWVpVNE6BuxuWTdF90EENUStKg3DWV4uspRlQds856GR7pkDblkmAOgWZ7zD3ILS3sF/fLuFLr0=,iv:TCsuetCjhhJc/0K4UQrCD9+zWEVssI6Yx0AQ/+eDSn0=,tag:ZsKZZB5S9bgLIRJBLO/KgQ==,type:str] mac: ENC[AES256_GCM,data:pU5882gcNu2hmINn/xnDriHX8PvrEqepnf8/B+WGYrkd6yqpsVPCivlhGFmPvPaRt/o0AVMuH7Wbwm3+rmOpR1LFfJUtnFcejWVpVNE6BuxuWTdF90EENUStKg3DWV4uspRlQds856GR7pkDblkmAOgWZ7zD3ILS3sF/fLuFLr0=,iv:TCsuetCjhhJc/0K4UQrCD9+zWEVssI6Yx0AQ/+eDSn0=,tag:ZsKZZB5S9bgLIRJBLO/KgQ==,type:str]