colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

secrets: split router_passwd out from universal.yaml

Browse Source
This commit is contained in:
Colin 2023-05-14 08:19:54 +00:00
parent d9a23dfc1b
commit f5dcca5166
3 changed files with 52 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
hosts/common/secrets.nix
View File

@ -59,7 +59,8 @@
owner = config.users.users.colin.name;
};
sops.secrets."router_passwd" = {
sopsFile = ../../secrets/universal.yaml;
sopsFile = ../../secrets/universal/router_passwd.bin;
format = "binary";
};
sops.secrets."transmission_passwd" = {
sopsFile = ../../secrets/universal/transmission_passwd.bin;

6
secrets/universal.yaml
View File

@ -9,8 +9,6 @@ wg_ovpnd_us_privkey: ENC[AES256_GCM,data:5YkQ4r7HNWiRr/5pa1XfexxtJAz6kDjX+hNiZch
wg_ovpnd_us-atl_privkey: ENC[AES256_GCM,data:NMguzx35VvOAo37U9pGD5bYa/ghWeSK5tVh2XRNsfKjMPhMa44lm3pTscdU=,iv:f9hBhMksL0VGT8k2RsztU9AjR2AIIL+Z2Ls24UOPeNA=,tag:C46xDGb2d32mmHWl7WQb2g==,type:str]
wg_ovpnd_us-mi_privkey: ENC[AES256_GCM,data:uEC3UOOqn1l7KwGmOxKvXccPR9Gu8/BNTlpXxXlNWf19/pIX1CLPORUWme0=,iv:cnPGghGBAsIsR86F1hPZawLWlY/pLCNF/1cg6gjrIKE=,tag:LqMbpGklQH0GX7dNNV3/8Q==,type:str]
wg_ovpnd_ukr_privkey: ENC[AES256_GCM,data:5zfhsZnBk0Kb9Nb/3igsV/fN0ZDjwTAGTKyMLMly/l7MlJe6MEmd5Lv+JT8=,iv:Mov9eUP8WfvzfZ6NljgLolJ49GSqR7eSV+k0dgE1+1I=,tag:O9UtGX2qt+qEvabcsA0vIA==,type:str]
#ENC[AES256_GCM,data:qlF8rpSMUv6Z/YrOTp7WYs0lcpmSIi/r+gCuiw==,iv:cneNp/0av/ttQvnW4JVX9mj3261QFAzkLIzEMwiKwE8=,tag:FFsPUQBsSeImtymawY4eSg==,type:comment]
router_passwd: ENC[AES256_GCM,data:Tya3Pd75Yu4=,iv:lqi7SavFnymL+uOQXDEzGxgikB6/ckNOBifjhyjXn1Q=,tag:HG3kf6e2g53uNUGI9FXyqQ==,type:str]
sops:
kms: []
gcp_kms: []
@ -89,8 +87,8 @@ sops:
YmhsY0FaSW5oWVNJMlhUSDRCeWQ4KzAKaQp321XYtAZ98f4QMl5PxivAYm6VMF43
wCThiQgvYAP59jvVDTZngvfWAD5PyWVVvMNbjHGvAzK5WnsTPmxlsg==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-05-14T08:17:03Z"
mac: ENC[AES256_GCM,data:M4Ux5vVXLJxilMzWovlJ+u99f+t4tfhOfB8Z018zBZoQIrWATRGFMXtAirk3Q8v9UAJ5v/l9pwMmODR5xaP+bkgjm2YjPEhZV7HrmxRB2x56X887IZxfaTolYOyeT5ExrLOXuU09pK0YgYVNs61xgj4IuAy/T4eXWe2eC3d/7vk=,iv:kjjm9MICNMaaXlWS6KAe6EuKdvKGfnUlaft+InieuKs=,tag:yfe9hR6ivf1gkwzs7tJNlw==,type:str]
lastmodified: "2023-05-14T08:19:13Z"
mac: ENC[AES256_GCM,data:WRZtXZLwuHCNcyKvkgA7/4wZQDoWt71J9aeNajpvu9eEEm6ZD9u5mIzkTD2LELjqTqchSdMLZ8kIRwm4XX6GOod5q3TyodHUrRtM0KnS6teoOJMiH9ARdngp1AjJwRP3LyV3izrheZdoPLQP7CnLD7yMoQt7ktBiOBS5mWChltk=,iv:W7H0kWtX9bfFewxKzbXSUHx9PXaZW8QPYyupnXTD2Hw=,tag:ylmCpW6Q9r6pQ52pdylEEA==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.7.3

48
secrets/universal/router_passwd.bin Normal file
View File

@ -0,0 +1,48 @@
{
"data": "ENC[AES256_GCM,data:PsytcGtC01nT,iv:8SDAfkhDBZfiY9tQbYYqSnym83Z7r1UySs4+w7kuOl4=,tag:EAjKjMcsXrQlRGZuBQ3H4Q==,type:str]",
"sops": {
"kms": null,
"gcp_kms": null,
"azure_kv": null,
"hc_vault": null,
"age": [
{
"recipient": "age1tnl4jfgacwkargzeqnhzernw29xx8mkv73xh6ufdyde6q7859slsnzf24x",
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKUThYRXJjM0JUbXh3QUVq\nRFpBdFAvamJmZ3VjUUc2bDZIdzFqZUNmODFjCnROYUQvTE9LVitLMEZwZ1FBMVIr\nQmdRUHBZTW1hR3Q3NllXYjNTN3pEZHMKLS0tIENEL1Ewa24waXZOSnk0OUREbnNx\nSFFtbmg5SmxWQys4MzgyMysrVDAzSlkK22qvkQQYSNsqvC7ISo57QUVhM7MNBKuJ\n+fa+uZDwTQrQ8CYWXQitN3nZAm+2BKGZDImaujs+HXqlMvMBKVavmw==\n-----END AGE ENCRYPTED FILE-----\n"
},
{
"recipient": "age1j2pqnl8j0krdzk6npe93s4nnqrzwx978qrc0u570gzlamqpnje9sc8le2g",
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3NmNqWnJZWGtWZWpVRVRC\nR2dPcFhyODl3Q0pGTTZHRlNhL1Q2bnZaRkFJCkNhQzEyaWRTeC95OVBib05uQjMx\nenc2c0NwQXBRcmt3cXAyK3hVc0FJL3MKLS0tIHpnWUNwYUtMQXB4MWpjcWtZS3Rx\nbS8wRGdOY3RjY2ZZN2VHeXRQVERDbXMKZ2pjXapOyvaBwsf66TU4Zo1HTWynaDP1\nWPv1lnAdT4LDidIH59PnyYkQ3B3D5CqJlZZRLg1rvZ2Qog5qjikbCg==\n-----END AGE ENCRYPTED FILE-----\n"
},
{
"recipient": "age1z8fauff34cdecr6sjkre260luzxcca05kpcwvhx988d306tpcejsp63znu",
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiSkhTaU8rQ1UvSjVFaXBD\nejdabVR3dzVPYkxrNnFTVUZLQjV6WVhqTTJNCmd0ZnN1TGdpb2VISHArRy9sam1J\nWUZCWmkrY1A1RkZ3aFFUWmRRNnhKQ1kKLS0tIG8zbTN3Z0NDQjVtc1BYZXBWQnIv\nUGR3R1E5VElFTVlKdXlwNm0yQjJSaFEKqJdVWzrf+/XPJ530HC4uj9w7fM2wyK7D\nQrm6nATk4dSYrmd95t3qFXXtfhniPLiNDIUWX1pPzRCZc8Uo5YLZZw==\n-----END AGE ENCRYPTED FILE-----\n"
},
{
"recipient": "age1zsrsvd7j6l62fjxpfd2qnhqlk8wk4p8r0dtxpe4sdgnh2474095qdu7xj9",
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIOS95ZlZ4SENOUFZZdWU3\nSm1UTzE0R1RUbEZLVDFyTlJIczQ3b1BwUzFjCnVET01VTXQ1RUQ2d0FIbElOcE1R\nQmtmbE85aDJyTXJYUE1NZkF5WWNvNFUKLS0tIEVBekIvN1QzTnJtcGFjQ052VWxU\nbmJLQ2NreUtjU1JiYThQVlYwMDJpK1EKn0Az/iElcN5H/1WoV898u4Xvxam5OLKh\nmiJwVCCNfA3Ht8lSNBCM+xrnAmM0Xghp8UJ4PPkwxH3Q+a2VMVAMJg==\n-----END AGE ENCRYPTED FILE-----\n"
},
{
"recipient": "age1vnw7lnfpdpjn62l3u5nyv5xt2c965k96p98kc43mcnyzpetrts9q54mc9v",
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLQUxuSGxQMndraEtDeGRk\nZkg1UG1vR1dxY1lHZ0VUSldkcTZJWTAxemlJClA5TXBqdUZ3WEZWVUV4ajhhRU1Z\nZGNLVVVjY1JjTWpWTDBSR1RFb3Y0LzAKLS0tIGZkOEtobXhOampmRXFRc3RYbEg1\nZFNTdnVpMU5KM3c1QTV3TXpackhnS2cKNJpKmhGekZsmvTTdBPzyzXRakm4OJdxf\nUFJIALykZNX76liHbO8yB6ZlbgUCNDyPzRvLXSfzgMYDfk2VeidEmA==\n-----END AGE ENCRYPTED FILE-----\n"
},
{
"recipient": "age1w7mectcjku6x3sd8plm8wkn2qfrhv9n6zhzlf329e2r2uycgke8qkf9dyn",
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaazBhbGdtb3pTMHQyaFEy\nNjBVbjVJWjgwU1dzZk8rUUlaQlFKT1hZWkc4CllTQlVhTWRKVHBjZ1B2SmtJVlFB\nR3l6amkzZ2pCcFFwR2VlRmwrYVhIeWMKLS0tIGdhWTNnakZyTUorb0xRYjBPWU94\nbndsdk90VnhrZ2V2RFFFcm9LU2NXYVUKIUtp4KzqKw8yh7cUA5QJxQhzmjJdjD4c\n72o1kh6lUmoeT6dM3Oq+2TZ4Yn98QQHiw4mZGdcPL56jQj4888OM1g==\n-----END AGE ENCRYPTED FILE-----\n"
},
{
"recipient": "age1tzlyex2z6t88tg9h82943e39shxhmqeyr7ywhlwpdjmyqsndv3qq27x0rf",
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqd0VqZWN4U2NwY0JLY3E2\nVkRFRmd1UCs5dUtIRkFEbnc3MkFJVkpqaXl3CjdRSEFFK0h4RVYwTGEzaE9SRVZP\nem5CRVgrYkxuY2x4Ykt3ZWFiQS9za0UKLS0tIEtwM2FVeEtQRDZOUC80SXcyM0Zn\nYWI5SE1KelVDbGsvTXNqSlRGVjhrbVEKkEwf/VboXehq2l3ZU5RjAbrSdcrs+yzt\n/NRLynAh3QvXScIeaMe1hFAlesA73NV7vrfdzjZcA6Q6J58A4H1Eww==\n-----END AGE ENCRYPTED FILE-----\n"
},
{
"recipient": "age18vq5ktwgeaysucvw9t67drqmg5zd5c5k3le34yqxckkfj7wqdqgsd4ejmt",
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4ZEpkR1hiRW1taFBHMVF3\nb2ljTEdSMXpCNUU1cmRUYUQ0RVVQY2J3MG1rCmR4ZTUwWk80a2NtMjNkRXdTQnYy\nY29uaHZvNXV5OXRIOE1yc1Q2RlY1YkkKLS0tIFNqT1djeE5CdnFwK2x2ejhkR0do\nWGVaeUVUcGxhaUdNNy9EOVhWMFB0Zm8Kcx6tCNpX4Tzkk8Li9AJZUlOO5yAYiC5B\niycZNb1SbwDFFoixb/p1FAGsD15YoYr/P9Y6Ta7kkaENQ6cQLsI4Wg==\n-----END AGE ENCRYPTED FILE-----\n"
}
],
"lastmodified": "2023-05-14T08:18:32Z",
"mac": "ENC[AES256_GCM,data:hCVdWlp5Kx49UznZCZKBQL6t7CknSLzWduQ5/2XmeuNnv3T9YblYLneNfu6j1FYZU7HFktspljHSYeesQ9yn3j2ArH8W0TCjCzJqvmvA/NLnMgwo0T6j5HXQkjjRn5YdYE8fM+KnixUk7YgbYiWzdx6FrOe+Ih14AfG59/ZJMek=,iv:4YzAzbdYGP91yuL6bCw9tlLb0vEdoduQMf1rwPQGexQ=,tag:6NjMESwUwvny7crHMVxsBw==,type:str]",
"pgp": null,
"unencrypted_suffix": "_unencrypted",
"version": "3.7.3"
}
}