colin
/
nix-files
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

re-encrypt keys for uninsane host

This commit is contained in:
colin 2022-06-06 17:53:39 -07:00
parent a900d9e692
commit fbd99f0069
2 changed files with 35 additions and 26 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.sops.yaml
View File

@ -4,7 +4,7 @@ keys:
- &user_uninsane_colin age1z8fauff34cdecr6sjkre260luzxcca05kpcwvhx988d306tpcejsp63znu - &user_uninsane_colin age1z8fauff34cdecr6sjkre260luzxcca05kpcwvhx988d306tpcejsp63znu
- &user_moby_colin age1lt739n2tq7dmpglvntjr9j2r7426md7rat7x9w930gagtx4jyvnqwts2al - &user_moby_colin age1lt739n2tq7dmpglvntjr9j2r7426md7rat7x9w930gagtx4jyvnqwts2al
- &host_desko age1s0v4fm203ap6mckcz3djw8hx30uqu87xfhfdajpmyf8rfrf5xs5swpz6m6 - &host_desko age1s0v4fm203ap6mckcz3djw8hx30uqu87xfhfdajpmyf8rfrf5xs5swpz6m6
&host_uninsane age1tzlyex2z6t88tg9h82943e39shxhmqeyr7ywhlwpdjmyqsndv3qq27x0rf - &host_uninsane age1tzlyex2z6t88tg9h82943e39shxhmqeyr7ywhlwpdjmyqsndv3qq27x0rf
creation_rules: creation_rules:
- path_regex: secrets/[^/]+\.yaml$ - path_regex: secrets/[^/]+\.yaml$
key_groups: key_groups:

59
secrets/example.yaml
View File

@ -17,47 +17,56 @@ sops:
- recipient: age1tnl4jfgacwkargzeqnhzernw29xx8mkv73xh6ufdyde6q7859slsnzf24x - recipient: age1tnl4jfgacwkargzeqnhzernw29xx8mkv73xh6ufdyde6q7859slsnzf24x
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1d2htUlhNWjZ1REN6a0E5 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQNEE3bTJ4TjJMQXN2TTlu
Y3VBczQvdm1WS244bXFZemJQcmR5YStseTFRCklKaHBQK1Y5YlJjMGE1QVhLT2Z4 bEN3WVhtTlV3Z2VySHRTVFZ3a2lHRDhQQWljCjVudlV6Rmc1SWVUWkZ0dGlpdUlP
UzZJcTFMOU5KRXFKS3F5L0tVWUtOQncKLS0tIDJxTmJPWWp6WjJMS25XbzlTTHBp aW1yVU9GQjFUdXlVUGlkUzdhaFpDK2sKLS0tIHl0NXMyRGlPQWhOeE5SZVFmUGVN
bmhmbWRCSzVtanlucFl2eXpyRjNBcDAKNexc6EvkEVYw79uazSHtGoknfmKGN3c+ cFpwZEZQamRLVVk1bU5YM0FHSGJyUzAK7pIfdKCAn1Z7n0T2nCt5rQ/2jkIpgtm2
hBk1gHU2XEOZk+G6mPAVeToiuWTAmFOha1axGYB3L9sU0lgW0/HfnA== qoT11S0gb6aE2xeAUmk9wQRQ2rRogN3vKrLbI9N6EV0egS+rl6qGAQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1ml8kkppftygu2wag57yld98jlrkh4avp54eheq7q0fa2rup843csqjajs6 - recipient: age1ml8kkppftygu2wag57yld98jlrkh4avp54eheq7q0fa2rup843csqjajs6
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkcXR0QUlTR1E3MFhVMWhq YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHUUJ0VDc1TW5DUkwxSjU3
bXNvRE1wY1ZQbjg3L0ZZbDA4TFNTNGFaRUJJClVEWTB6YjM3Qnk0RmxieE9DM0FI cVRkQ0J4ZktaYjdGVm50ZUtTR1BDVlYyZFM4ClZEajczamNDbnY0bGlXVUh4TW43
cFRKT1R6M2JiczRvQ01uV3NnaVU2aDQKLS0tIFkvQm5BT1IwV0FzamNKWnE2NCt2 NFRvQjRRc1I0eGw1VDVWeEhqbFZZWUkKLS0tIGY0MnBIdEp6ODN1cXgzdyt1dnE2
UTQxMCs3Vm9qSmhvbVdEdEFUNnlQTG8KNxzH/dY2qECQMHyIrx3mP71DxNzzCcnQ aGQ4cVZ1alZ2TlgrZUc3R2E0M1pFVkUKVppvT/zflb8J0Kk94J8+jnI5GKNgWVK9
T7QzVjhWMmTSgy6HuPIQV1pjJ+3A3Ir5upEn50QlGn9usJcQREzG6w== 2sQ57v8AfhT//eIDtzzCGkFJRs0nkWrhGm4loS2U1IC5gHglNFb2ZQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1z8fauff34cdecr6sjkre260luzxcca05kpcwvhx988d306tpcejsp63znu - recipient: age1z8fauff34cdecr6sjkre260luzxcca05kpcwvhx988d306tpcejsp63znu
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMYjFlTHNKdUNOTmVNamRZ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYK3J0YTRWQUVrTVBwUUxY
eXVteFhoSWZtU2xQME4zUTl2Y1QxYzYrY0JFCjQ3SmdoMFovWUxKOEdscjl3ZHpv T0hDc0oxWUZtSUtpWFoyN2hMczUyUCt6dXk0CjF1N2FCeDFOY0tZcktkeGlMeEJI
UVJUakhPNjBHUkxRYzNuTW56TTlMelkKLS0tIHZTeVJiV3pOczF0ZjVCcjl5WmEw SzlBU0JlZnhXUUs3QklyVy95UjVUa3MKLS0tIEtmSmhFY2NCM21uYk9UMlQ4VUgv
L2ZTUExpbWRydkkzdFFDdlFYdDhoRjAKyehoIJQ+ZV5Wv3MoUbsP+3Ksp84iQOKd UFZJVTVzT1duVmx6Rmh3eDMxa0VLS0kKmIs++M6scOavm9tES6tCPs7Ygw4/hPvf
9vDf7PRa2hmflbadIgHqFAaQu3b1+fezaE4dPBfXDaUMdJ1tWmSPfw== LftQBykLl2qMbBzUGsjdudi8M7kIouJhBEfhQC5wdkKPNTlBajgr0Q==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1lt739n2tq7dmpglvntjr9j2r7426md7rat7x9w930gagtx4jyvnqwts2al - recipient: age1lt739n2tq7dmpglvntjr9j2r7426md7rat7x9w930gagtx4jyvnqwts2al
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUVlhJSitRNTRYRk5QclFS YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjWm1tT1hWQ05wTkdwRDBQ
NDcydzVsS3hLVlk3OThCZ1JZOUZmQW41WjBNCkxCRER5UXJRR2VvNitYaytNQTF4 a3BCZktyME1YYk9GWHo5K0ZXSnNCV3hqc1JVCk5COS9nSkhBdTUwU284S1hTYVVB
ZVE3Z2llUjlES0VReDJUckxod3NsVUEKLS0tIEZtVXFEMDFMUzRNdWJ2Y3Rxc2dX VnhaaHkzSmpFeCtSby9vaGtXQzJSbzAKLS0tIDlXSnNpblYydEdFMEswd0VrZ1FI
MGNONWhzTzhhQWVGa3l1YTR1a294NXMKrnS4TCByrs7mBwt8zYdOsAO6IaKdgVlU NUhLbUFoVGpiWXBqUWVDTzltRHhmYmsKmNKX+mFJzO0Y2ONqC4jGtQJBigVYICpl
QwACSquql2Oi/Wsc7LMzx2kwkMG/BhOzpXL9yqNnx3XAB2HOD8YLhQ== FBKGAeoq6bYmuF7pR+hk3qgCN9iqhqva3YLS1RwMrm5cT+TuuqW+eQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1s0v4fm203ap6mckcz3djw8hx30uqu87xfhfdajpmyf8rfrf5xs5swpz6m6 - recipient: age1s0v4fm203ap6mckcz3djw8hx30uqu87xfhfdajpmyf8rfrf5xs5swpz6m6
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnOWIrTUczcHllZHNoU1Zp YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzNnArb2hOWGhDM0JpMHJy
RHljZlNGcktHeVVVaXIvOUk2S3JQZWNZN1ZFCk9FZjZic0hNaDZWazdaamQ0N0Fx dW02bi92MURSc1FRWlBwQWY5akROQ1dtK0cwCjduWWNCMHd1VW5kVnJ0VmF6UHFI
YmVLbUJGWER6YjdaaUQrYjAvVjF4NXMKLS0tIDNwSW5iYnluVzV4Rk5sY2xmc0Fj a0dCbThUSjIzVUhvMXYyUUNyakN2UmcKLS0tIHNWRDlsMk14Q0luT2NrMk9wWjFX
NVNjYldlM2RwZURrNndoT1lINmpqSkEKVzfH6AKsVPhgvBNXe2ArzkNg7s01fcAF cGIrNTB2N2duZ3FYdWE1Vm1EVWpJUXMKqjGVryC4ZhcSg3xM4rZLd/LQh9PPw2B6
ReR1daJKNOkKCR1+SVaUlWRZGswTXMqImb4FhlbEgxiL2y6hyTrN1w== ArhWSfpcoFfGPD32PGpVaVtT552aKbIV9vbnzWm+JGrWNVymJvlbjw==
-----END AGE ENCRYPTED FILE-----
- recipient: age1tzlyex2z6t88tg9h82943e39shxhmqeyr7ywhlwpdjmyqsndv3qq27x0rf
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuRUJKQnkvaTlkMGFObm1B
UGJVcXdyWUZqMmlpMkN5d1pQc3VLajJCZmpzCm44UjFycDVBNjJmajR6Y2ZyZ2ZE
REIwVXVWZGdmWnJqblEwUnljSXphZkUKLS0tIFlHK1N6M1NKTmlHMWZ0K1BCZ203
VWZNRHNpb3VBYVl5a1c3UGtrYnpENkEKPNvdQnf8yPl0FI+BWFZH8j9Md9DG4L4e
bJ6lFHJBKD2uJvTZItarP1KwRVcCu/wbi1bze2BOpmx2ZIQb3FsF/A==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2022-06-06T23:21:20Z" lastmodified: "2022-06-06T23:21:20Z"
mac: ENC[AES256_GCM,data:pU5882gcNu2hmINn/xnDriHX8PvrEqepnf8/B+WGYrkd6yqpsVPCivlhGFmPvPaRt/o0AVMuH7Wbwm3+rmOpR1LFfJUtnFcejWVpVNE6BuxuWTdF90EENUStKg3DWV4uspRlQds856GR7pkDblkmAOgWZ7zD3ILS3sF/fLuFLr0=,iv:TCsuetCjhhJc/0K4UQrCD9+zWEVssI6Yx0AQ/+eDSn0=,tag:ZsKZZB5S9bgLIRJBLO/KgQ==,type:str] mac: ENC[AES256_GCM,data:pU5882gcNu2hmINn/xnDriHX8PvrEqepnf8/B+WGYrkd6yqpsVPCivlhGFmPvPaRt/o0AVMuH7Wbwm3+rmOpR1LFfJUtnFcejWVpVNE6BuxuWTdF90EENUStKg3DWV4uspRlQds856GR7pkDblkmAOgWZ7zD3ILS3sF/fLuFLr0=,iv:TCsuetCjhhJc/0K4UQrCD9+zWEVssI6Yx0AQ/+eDSn0=,tag:ZsKZZB5S9bgLIRJBLO/KgQ==,type:str]