From fbd99f00697c1434c4982031797d662580bb5d4b Mon Sep 17 00:00:00 2001 From: colin Date: Mon, 6 Jun 2022 17:53:39 -0700 Subject: [PATCH] re-encrypt keys for uninsane host --- .sops.yaml | 2 +- secrets/example.yaml | 59 +++++++++++++++++++++++++------------------- 2 files changed, 35 insertions(+), 26 deletions(-) diff --git a/.sops.yaml b/.sops.yaml index f7b1f173..b9e62f84 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -4,7 +4,7 @@ keys: - &user_uninsane_colin age1z8fauff34cdecr6sjkre260luzxcca05kpcwvhx988d306tpcejsp63znu - &user_moby_colin age1lt739n2tq7dmpglvntjr9j2r7426md7rat7x9w930gagtx4jyvnqwts2al - &host_desko age1s0v4fm203ap6mckcz3djw8hx30uqu87xfhfdajpmyf8rfrf5xs5swpz6m6 - &host_uninsane age1tzlyex2z6t88tg9h82943e39shxhmqeyr7ywhlwpdjmyqsndv3qq27x0rf + - &host_uninsane age1tzlyex2z6t88tg9h82943e39shxhmqeyr7ywhlwpdjmyqsndv3qq27x0rf creation_rules: - path_regex: secrets/[^/]+\.yaml$ key_groups: diff --git a/secrets/example.yaml b/secrets/example.yaml index e38051fc..192f6311 100644 --- a/secrets/example.yaml +++ b/secrets/example.yaml @@ -17,47 +17,56 @@ sops: - recipient: age1tnl4jfgacwkargzeqnhzernw29xx8mkv73xh6ufdyde6q7859slsnzf24x enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1d2htUlhNWjZ1REN6a0E5 - Y3VBczQvdm1WS244bXFZemJQcmR5YStseTFRCklKaHBQK1Y5YlJjMGE1QVhLT2Z4 - UzZJcTFMOU5KRXFKS3F5L0tVWUtOQncKLS0tIDJxTmJPWWp6WjJMS25XbzlTTHBp - bmhmbWRCSzVtanlucFl2eXpyRjNBcDAKNexc6EvkEVYw79uazSHtGoknfmKGN3c+ - hBk1gHU2XEOZk+G6mPAVeToiuWTAmFOha1axGYB3L9sU0lgW0/HfnA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQNEE3bTJ4TjJMQXN2TTlu + bEN3WVhtTlV3Z2VySHRTVFZ3a2lHRDhQQWljCjVudlV6Rmc1SWVUWkZ0dGlpdUlP + aW1yVU9GQjFUdXlVUGlkUzdhaFpDK2sKLS0tIHl0NXMyRGlPQWhOeE5SZVFmUGVN + cFpwZEZQamRLVVk1bU5YM0FHSGJyUzAK7pIfdKCAn1Z7n0T2nCt5rQ/2jkIpgtm2 + qoT11S0gb6aE2xeAUmk9wQRQ2rRogN3vKrLbI9N6EV0egS+rl6qGAQ== -----END AGE ENCRYPTED FILE----- - recipient: age1ml8kkppftygu2wag57yld98jlrkh4avp54eheq7q0fa2rup843csqjajs6 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkcXR0QUlTR1E3MFhVMWhq - bXNvRE1wY1ZQbjg3L0ZZbDA4TFNTNGFaRUJJClVEWTB6YjM3Qnk0RmxieE9DM0FI - cFRKT1R6M2JiczRvQ01uV3NnaVU2aDQKLS0tIFkvQm5BT1IwV0FzamNKWnE2NCt2 - UTQxMCs3Vm9qSmhvbVdEdEFUNnlQTG8KNxzH/dY2qECQMHyIrx3mP71DxNzzCcnQ - T7QzVjhWMmTSgy6HuPIQV1pjJ+3A3Ir5upEn50QlGn9usJcQREzG6w== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHUUJ0VDc1TW5DUkwxSjU3 + cVRkQ0J4ZktaYjdGVm50ZUtTR1BDVlYyZFM4ClZEajczamNDbnY0bGlXVUh4TW43 + NFRvQjRRc1I0eGw1VDVWeEhqbFZZWUkKLS0tIGY0MnBIdEp6ODN1cXgzdyt1dnE2 + aGQ4cVZ1alZ2TlgrZUc3R2E0M1pFVkUKVppvT/zflb8J0Kk94J8+jnI5GKNgWVK9 + 2sQ57v8AfhT//eIDtzzCGkFJRs0nkWrhGm4loS2U1IC5gHglNFb2ZQ== -----END AGE ENCRYPTED FILE----- - recipient: age1z8fauff34cdecr6sjkre260luzxcca05kpcwvhx988d306tpcejsp63znu enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMYjFlTHNKdUNOTmVNamRZ - eXVteFhoSWZtU2xQME4zUTl2Y1QxYzYrY0JFCjQ3SmdoMFovWUxKOEdscjl3ZHpv - UVJUakhPNjBHUkxRYzNuTW56TTlMelkKLS0tIHZTeVJiV3pOczF0ZjVCcjl5WmEw - L2ZTUExpbWRydkkzdFFDdlFYdDhoRjAKyehoIJQ+ZV5Wv3MoUbsP+3Ksp84iQOKd - 9vDf7PRa2hmflbadIgHqFAaQu3b1+fezaE4dPBfXDaUMdJ1tWmSPfw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYK3J0YTRWQUVrTVBwUUxY + T0hDc0oxWUZtSUtpWFoyN2hMczUyUCt6dXk0CjF1N2FCeDFOY0tZcktkeGlMeEJI + SzlBU0JlZnhXUUs3QklyVy95UjVUa3MKLS0tIEtmSmhFY2NCM21uYk9UMlQ4VUgv + UFZJVTVzT1duVmx6Rmh3eDMxa0VLS0kKmIs++M6scOavm9tES6tCPs7Ygw4/hPvf + LftQBykLl2qMbBzUGsjdudi8M7kIouJhBEfhQC5wdkKPNTlBajgr0Q== -----END AGE ENCRYPTED FILE----- - recipient: age1lt739n2tq7dmpglvntjr9j2r7426md7rat7x9w930gagtx4jyvnqwts2al enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUVlhJSitRNTRYRk5QclFS - NDcydzVsS3hLVlk3OThCZ1JZOUZmQW41WjBNCkxCRER5UXJRR2VvNitYaytNQTF4 - ZVE3Z2llUjlES0VReDJUckxod3NsVUEKLS0tIEZtVXFEMDFMUzRNdWJ2Y3Rxc2dX - MGNONWhzTzhhQWVGa3l1YTR1a294NXMKrnS4TCByrs7mBwt8zYdOsAO6IaKdgVlU - QwACSquql2Oi/Wsc7LMzx2kwkMG/BhOzpXL9yqNnx3XAB2HOD8YLhQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjWm1tT1hWQ05wTkdwRDBQ + a3BCZktyME1YYk9GWHo5K0ZXSnNCV3hqc1JVCk5COS9nSkhBdTUwU284S1hTYVVB + VnhaaHkzSmpFeCtSby9vaGtXQzJSbzAKLS0tIDlXSnNpblYydEdFMEswd0VrZ1FI + NUhLbUFoVGpiWXBqUWVDTzltRHhmYmsKmNKX+mFJzO0Y2ONqC4jGtQJBigVYICpl + FBKGAeoq6bYmuF7pR+hk3qgCN9iqhqva3YLS1RwMrm5cT+TuuqW+eQ== -----END AGE ENCRYPTED FILE----- - recipient: age1s0v4fm203ap6mckcz3djw8hx30uqu87xfhfdajpmyf8rfrf5xs5swpz6m6 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnOWIrTUczcHllZHNoU1Zp - RHljZlNGcktHeVVVaXIvOUk2S3JQZWNZN1ZFCk9FZjZic0hNaDZWazdaamQ0N0Fx - YmVLbUJGWER6YjdaaUQrYjAvVjF4NXMKLS0tIDNwSW5iYnluVzV4Rk5sY2xmc0Fj - NVNjYldlM2RwZURrNndoT1lINmpqSkEKVzfH6AKsVPhgvBNXe2ArzkNg7s01fcAF - ReR1daJKNOkKCR1+SVaUlWRZGswTXMqImb4FhlbEgxiL2y6hyTrN1w== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzNnArb2hOWGhDM0JpMHJy + dW02bi92MURSc1FRWlBwQWY5akROQ1dtK0cwCjduWWNCMHd1VW5kVnJ0VmF6UHFI + a0dCbThUSjIzVUhvMXYyUUNyakN2UmcKLS0tIHNWRDlsMk14Q0luT2NrMk9wWjFX + cGIrNTB2N2duZ3FYdWE1Vm1EVWpJUXMKqjGVryC4ZhcSg3xM4rZLd/LQh9PPw2B6 + ArhWSfpcoFfGPD32PGpVaVtT552aKbIV9vbnzWm+JGrWNVymJvlbjw== + -----END AGE ENCRYPTED FILE----- + - recipient: age1tzlyex2z6t88tg9h82943e39shxhmqeyr7ywhlwpdjmyqsndv3qq27x0rf + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuRUJKQnkvaTlkMGFObm1B + UGJVcXdyWUZqMmlpMkN5d1pQc3VLajJCZmpzCm44UjFycDVBNjJmajR6Y2ZyZ2ZE + REIwVXVWZGdmWnJqblEwUnljSXphZkUKLS0tIFlHK1N6M1NKTmlHMWZ0K1BCZ203 + VWZNRHNpb3VBYVl5a1c3UGtrYnpENkEKPNvdQnf8yPl0FI+BWFZH8j9Md9DG4L4e + bJ6lFHJBKD2uJvTZItarP1KwRVcCu/wbi1bze2BOpmx2ZIQb3FsF/A== -----END AGE ENCRYPTED FILE----- lastmodified: "2022-06-06T23:21:20Z" mac: ENC[AES256_GCM,data:pU5882gcNu2hmINn/xnDriHX8PvrEqepnf8/B+WGYrkd6yqpsVPCivlhGFmPvPaRt/o0AVMuH7Wbwm3+rmOpR1LFfJUtnFcejWVpVNE6BuxuWTdF90EENUStKg3DWV4uspRlQds856GR7pkDblkmAOgWZ7zD3ILS3sF/fLuFLr0=,iv:TCsuetCjhhJc/0K4UQrCD9+zWEVssI6Yx0AQ/+eDSn0=,tag:ZsKZZB5S9bgLIRJBLO/KgQ==,type:str]