From 4689d49d9f0e6bc186f23dd4fe7b516ae8e9fe2d Mon Sep 17 00:00:00 2001 From: colin Date: Mon, 6 Jun 2022 18:07:28 -0700 Subject: [PATCH] secrets: add lappy host key to access list --- .sops.yaml | 2 ++ secrets/example.yaml | 79 ++++++++++++++++++++++++-------------------- 2 files changed, 46 insertions(+), 35 deletions(-) diff --git a/.sops.yaml b/.sops.yaml index 78b4275f..6a892c0b 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -4,6 +4,7 @@ keys: - &user_uninsane_colin age1z8fauff34cdecr6sjkre260luzxcca05kpcwvhx988d306tpcejsp63znu - &user_moby_colin age1lt739n2tq7dmpglvntjr9j2r7426md7rat7x9w930gagtx4jyvnqwts2al - &host_desko age1s0v4fm203ap6mckcz3djw8hx30uqu87xfhfdajpmyf8rfrf5xs5swpz6m6 + - &host_lappy age1w7mectcjku6x3sd8plm8wkn2qfrhv9n6zhzlf329e2r2uycgke8qkf9dyn - &host_uninsane age1tzlyex2z6t88tg9h82943e39shxhmqeyr7ywhlwpdjmyqsndv3qq27x0rf - &host_moby age1t957gf0z865gya0khgc9x59wy76hzps3sgejjqtwcngn2xl273msxsmpe6 creation_rules: @@ -15,5 +16,6 @@ creation_rules: - *user_uninsane_colin - *user_moby_colin - *host_desko + - *host_lappy - *host_uninsane - *host_moby diff --git a/secrets/example.yaml b/secrets/example.yaml index 85e3b6cc..b82dd36e 100644 --- a/secrets/example.yaml +++ b/secrets/example.yaml @@ -17,65 +17,74 @@ sops: - recipient: age1tnl4jfgacwkargzeqnhzernw29xx8mkv73xh6ufdyde6q7859slsnzf24x enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXbEw4ZzlpNWdZdDRUdk1V - Zkg1emFFNlovamxhaktBeFZKWkp4bjRVaVVJCm9yVHl0YXZnSytGZlByaVBzbVJn - MWkxNXh0T3hGNEFMeDQrQnFkWjJ0QVEKLS0tIGR5QjlvN3pjV0pMS0k1T0hBVWh2 - bDc4YncwbEwrQU8zcWFXYmVnLzdDdXMKOCxo+pschTY9YTzNu71kk7baerW1gvlI - LQU7MXg06jUErdB9UsrwW9+b8WDbaQltu7hJefXlUG28i0LQGKkZxg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLdHljSks4SzdWa2pkRTU3 + aGtJMmhUSHFWQXQ5MS9MUExZNFg3dklhZ0NZCkhrSE8rdEhTeVBMUmNxOVpnZXN2 + clVzWTNlcExqQkpPNWVlNDBxdTBZZFUKLS0tIEdIdHpaV0ZPeDRwb1ZMWWhqd2po + VjJhOG9yVFAzTFFPZzZ1NGtXRm1SQzgK1iNvyOr2K7dZTNMFojyJtXRLybZRdFfB + 5hGEfrgDB5p+jJgwuUvwjuuqeAx84CE0/tTBDV5gcgnVWLE543VIMg== -----END AGE ENCRYPTED FILE----- - recipient: age1ml8kkppftygu2wag57yld98jlrkh4avp54eheq7q0fa2rup843csqjajs6 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSRjVJN3hZOEZLcG5Ca0lT - ZHNMNndPTloxUnZaWmdQN1IrU3cvVlcyZUZRCnc4L1hhVzRaK2U5YnZCUnRreERY - QUVHN1VJZU5MQzI3RkdKYmZ5NlZqM2cKLS0tIDZvTTNucitDTjBIL1VYTVZkRlZl - MUNoNDRJeW42cStBVWRUQ2t0N0RnbFUKlB6ltDgvNZszXg8g71lKliU5F44efZxX - pDn0feVk9T8drynyVS/zSOl5ktfVGQ02muD7Js8F738cbZnLHDEY3w== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaSE1sODJZRVdRajZSRGpI + NXRYeDl3ZkVUaGRhUVRKU3Ewc0VsOUNWRERjCldGaWhqUnlnM1lObGpQUmtVZzh1 + eG9rNE8vZWI0c0w2Y2VhZitWdWsxSTAKLS0tIC9kSUo2UWFER09pU0JHai80MHQ3 + Z05iRGpXRmxDcm81T0dacWpIZWpkMncKHWDJ8SxnGAfkG/b8WmLH79RAmmSjnz/A + EGhkBDMCqdG3UuURwxmFVI1ZKvDBiCdn2BEMpKaKcdYym/7iEv4kiQ== -----END AGE ENCRYPTED FILE----- - recipient: age1z8fauff34cdecr6sjkre260luzxcca05kpcwvhx988d306tpcejsp63znu enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBURVp0a2tMbUhmZnN6VjV6 - bGZhUHFhaUNKRk8yK25Wbys4djRGckdXVGhzCmVzUWJuc3BrRlJrZHI1WmliSjVw - am9UQ3VKL0NIUVNTUTRNQTE0cnNMWlEKLS0tIGd3WFRVOUN3dUxvSkEyZ05mdnVt - ZjlSSENDSk1kSzE5Yjk3MnY3c2Z4WTAKnbP+qsnRDYqBvsxDb6cYYhluHdCgT5mp - 4pSk0pcCBmui7b9W7HrN7SkLLXFDOEBXqdtieCiyGrDKRfSjW33ScA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjclF3R2EwUEJvSkptV0ls + NEt2bkhqNVVoaElaeFB4SU5XQ25jdEtEZlV3CkZEWTNFM1RmWTFabGpTSk1FdUpE + cHAzSGRheEVOY0cybHFydXVKSmZCam8KLS0tIFcrRCtYWW1nam9UR0Y4NXIzc0h4 + aFR4a1hDRk91bVhkMFhGNWZ4VUNrNUkKsjkLZ4zRudbK8r5u74bJKv5frX+4KFTX + q3n91UNcXqZgDKquwvGsq3P0cs+GXA8xVe4QVWlgtIilQ6hbDu6Sqg== -----END AGE ENCRYPTED FILE----- - recipient: age1lt739n2tq7dmpglvntjr9j2r7426md7rat7x9w930gagtx4jyvnqwts2al enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3OUZweGJ1YU1PMm1GaWRC - d3dMODNxQnRnckQ5Y091Q1NZc1ZEZ3pRRmhJCnRTUDlwdVh5NTczemJGbjVMTE9n - bVZEV1prc01Zb3UxTFZQcXlMZzJHcFEKLS0tIEVKNmZaOXRkYWc4SHVObjd3MlUv - S2dkZTNaNGwvSTVjMkVlY1BnaWt4dG8KgK1i/n8NOQJNLf+Pf5agTTUFX0zPC28u - DP2JVQlwjDCnV/t9dM6XCD5Ab9KvXpdG7a5E5M2o/eh5GYuZ1FcGyg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKQlNpMmh4aVFiTnpLQjZ4 + VHNvdVAwZDFDYThHd3duaHFEVWRKWXFjWlc4CmNJRUxDQ0pDQ2NSdHJTSUhwcDdk + TFNGaSs5VU1Cbm5QMDRFQTFwL0ZVUmcKLS0tIGR5dUx1emt6dVRVWmh2dmtaNVNP + ZUxYMW40Z1NnM1lCY2ltazJiQmwrRXcKyOoJQVETOvAVA8OtXV0XTYMFC//XCVB3 + SAne5IAWfP1VgoxhPJVz5guZZawOVhDkoDKo0EXJEXxNeKVtYtfrOw== -----END AGE ENCRYPTED FILE----- - recipient: age1s0v4fm203ap6mckcz3djw8hx30uqu87xfhfdajpmyf8rfrf5xs5swpz6m6 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQSWFIM1ZGUmJ6VGdFbUxy - QmMxQWtaQTZLb2VQalNuZE52YjRSY2JTb0RRCkUvRzFnREJPTnpMUmN0dW15K2Qz - S1B2ZzdUNGJXT1lJdHNodzZ1VVBmMVkKLS0tIG1BV3luOVJmRHFiOWtkVDdoc2Uw - Qm82Z0NvbFBjR1FQZDUyOG5QRTJXQW8Kjjwh+cXzgbZH7rxxa2lPQBzR3Aj3XYuX - LlplKXuRw5LS6BiQZM/NPBrb2ntv0vb/RVKOsAOwTt3LOtMiQNxQHA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrdEd1VEFic3FVaDVzUnd0 + VjBxYmZrOFhvMFNndGJ2cGVvSVFMZXN5bWdJCmNxRmtjSWFseXZaekFNV2kyTlJk + dk80RGQraU9seno1Nmd1clFsMGZNaEkKLS0tIElRSUdORDhaYTVQSHpnZzE3Mml5 + SEdHVTRXUTl3alU0TC9yZTAwQTQ0ZHMKv9TSOJAYVgcb0bSVD4DDWZOdWJWIqIll + 7hXWmjrlUsPMCyS0h9SyvRW32L4hU+lsmfA/mTexGApLuwPYbJ9H9Q== + -----END AGE ENCRYPTED FILE----- + - recipient: age1w7mectcjku6x3sd8plm8wkn2qfrhv9n6zhzlf329e2r2uycgke8qkf9dyn + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBodDVkK3NnUTdBNDMyRjNJ + bExPTExzRTQzNFY0TG9rQkVCQjBjMi9UdUFNCjdFWkhxb0xnUWtNQUdpSHZORVZ5 + NVNQalRXNGIxWWQ1RTI3UEZtY2JMQUEKLS0tIEo5NkVEVmRPRzVHbkZmVHNNdUt2 + cDF0VnkrWjVkYnZrTWZiU1J6QXRGZkEKzB0ghzsGC4LKs46gL/fLgRP7tlfKWMdQ + qsfUQjfLRaQOyg3ItuGaVH46Wk57xhZZ+jQuaZz5Tka2YX/KluBY2A== -----END AGE ENCRYPTED FILE----- - recipient: age1tzlyex2z6t88tg9h82943e39shxhmqeyr7ywhlwpdjmyqsndv3qq27x0rf enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVd3htc1orSk1HYkdxUThL - c3RLRmY4L0RpNlY4Rlg4Z1ZUVlB5Y0dEN0E4CjRFV01ZZytWOUJkSjlXWFQvSjBU - bVNZLzJvUklOOTdXTWJzRGJKUWtBRWMKLS0tIGFoTWRkcVVsWUNDY3pBWk5QM25i - Qlc3L2JicWJLS3pPaGhoTysrcElXSUUKko8MXVBYlcphg379v02gPkqFgYD2krjo - Tt6kqoqcfUGBcI6a1MQ8dbkAVcs4MAIAsJXt5snC7pDw5cvHzOHpZg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGOGVJTHY0ZnA5RTNJRlZ0 + S3J4eUNVUjlJck5KRGZTakQ4RFoyWDBEOUhFCndTeUwxeWMzZFFZMFRsQkJVemZL + Z1NpOXRUVmNOMU8ycXFsTnNWTmwrUmsKLS0tIGVReXRQejdlUlFWbXg1VmRYUlRI + WmRRVkhrTFI0bDMvcTdJQXVPdmJOWEEK/Lgy6iqMuZkeHyI+oUU9UzwGMIGX4yUy + WuDHa9I8futbVlrWhwfC/lU0zgb6tCl6RJfuEpjhYrzleuY4qpKFuA== -----END AGE ENCRYPTED FILE----- - recipient: age1t957gf0z865gya0khgc9x59wy76hzps3sgejjqtwcngn2xl273msxsmpe6 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvQ05pUW9uQmczbHNRWVU4 - M0lCNng0R0Q5Q2h4QVYyMDU3ZDBibFh6N3pzCjNVS3ZVQWJCdGxwZFRHcU4zWWNv - SnhnYnppbENPbm0raktubUdzbEJrbTgKLS0tIEdOTWN4KzlSRzgvc1dmVzZFRi80 - NXRzeDg0UUErMTIwU053TmZ1TGp3U0EKvHgGyj1sKS2wBEqleHUQJhzPIB5/MkMm - x0t3r6i5hQQOndspkSvI0dctAJG5uxzSVFkHwfcA/tquq4/UkeSjwg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6b1Z2K3JnbENqcDNZSllT + WUR3SzFwaVNIa2RlR0I0ckFvVWVvNnpXR25NClNENHVwVEtZTFNzU2RIUmdqazda + bk1qYjZZSlA0KzFMVXlQcmJuMkxnWlUKLS0tIG94Zk0wYVFyeEg2eHh1aFdVbDJp + U2oyUUNiVm14bkJEcXlIUFpiaDFTRUEKTrtvjVgsUbRJDV640i84flkBD9RgtEZ2 + mFPEMDOobtEvqEYlUTUsYeHjVQe0gEHXkLd3zFPErVx4FB0dLZpGrg== -----END AGE ENCRYPTED FILE----- lastmodified: "2022-06-06T23:21:20Z" mac: ENC[AES256_GCM,data:pU5882gcNu2hmINn/xnDriHX8PvrEqepnf8/B+WGYrkd6yqpsVPCivlhGFmPvPaRt/o0AVMuH7Wbwm3+rmOpR1LFfJUtnFcejWVpVNE6BuxuWTdF90EENUStKg3DWV4uspRlQds856GR7pkDblkmAOgWZ7zD3ILS3sF/fLuFLr0=,iv:TCsuetCjhhJc/0K4UQrCD9+zWEVssI6Yx0AQ/+eDSn0=,tag:ZsKZZB5S9bgLIRJBLO/KgQ==,type:str]