diff --git a/.sops.yaml b/.sops.yaml index 48e2670d..50ae6faf 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -12,6 +12,7 @@ keys: - &tei_osh age1a2quf2ekkj94ygu7wgvhrvh44fwn32c0l2cwvgvjh23wst90s54szdsvgr - &mediabox_osh age16klpkaut5759dut8mdm3jn0rnp8w6kxyvs9n6ntqrdsayjtd7upqlvw489 - &litterbox_osh age1xg6zm9t25wjakljm54m38pjdr9q53jysdcl82r5xwkrn0cgyuvvsuh63eh +- &litterbox2_osh age1qjaxj6dtqqr66pvzp8skwhs740w9n4cfcwu0zt9aggk4w0ey8q5qqjk4yc - &keycloak_osh age1ktmx2szedfnpe5xumnzs8vkk0ffqgga6ved3drtksg9pye6ndsnsnqq488 - &kasen_osh age1fjcafp0j45sz03zq5srnxyq2mujndmn25vceg3wj2cgzymqm73ssmhdgku - &logistics_osh age1tkkau8vk5h9dh3kemash4eghn7lk84j0hhpmvvf7j6phgcsm9vmsphv0py @@ -108,6 +109,12 @@ creation_rules: - pgp: *pgp_common age: - *litterbox_osh +- path_regex: 'systems/litterbox-2/secrets\.yaml$' + shamir_threshold: 1 + key_groups: + - pgp: *pgp_common + age: + - *litterbox2_osh - path_regex: 'systems/minecraft/secrets\.yaml$' shamir_threshold: 1 key_groups: diff --git a/systems/litterbox-2/secrets.yaml b/systems/litterbox-2/secrets.yaml index c2247ec5..40f34395 100644 --- a/systems/litterbox-2/secrets.yaml +++ b/systems/litterbox-2/secrets.yaml @@ -1,56 +1,52 @@ tailscale-key: ENC[AES256_GCM,data:fJ+Eikbocenx5EbQR8CN4wclrxbf+Y/0tI4GSPrrt38QPt3Lw8DhY4s=,iv:LDK8zO7tWzU7+YYfC83GnOawNwXkikYJKN97sV+S6zc=,tag:7AFJPd8pRD0R2rvy5aAdeg==,type:str] sops: shamir_threshold: 1 - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] age: - - recipient: age1xg6zm9t25wjakljm54m38pjdr9q53jysdcl82r5xwkrn0cgyuvvsuh63eh + - recipient: age1qjaxj6dtqqr66pvzp8skwhs740w9n4cfcwu0zt9aggk4w0ey8q5qqjk4yc enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwSjUwb3F6NnA5cENqcFRJ - dzdTRFptZ2hsMFR0MXMzT2I3aVpXN3N2emhJCi9SQWJQc0JZOW1FeUx5NU5DdGlF - Yjh6VnJjaE96QzU0dGlweVNnUk9oaU0KLS0tIFFYR05qbThxb2tZamhlTmxZRXdm - NEVHRk0zTFU4aW1wbmVEUGZXVWNsbXMKgnZY9saX6DmVdX4hgutyg78T9mqKqG8C - 4Qahrc9V3e6rC09GuCeGuAN/F51Sq6T6wbO+ESfONrhWNi4gIKKWtQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTQ0dUWktvLzdUdDZDSUda + RndYb0ZlV2ZwOEIyYkpSRmR4VW53OEE3T2gwCmF4WXhCL3daSUxmUUdtTXNXWlAv + RXp0MGwxZUxFYWl3WWxGOEVlYkpDUFUKLS0tIDM0VlZpSGx6bzlTajVmaEFkcy9q + RTFKYUd3dGtXSTNnYU1OKzU0UUVNb2sKX95/H7QLPYFCO1S5B8z1VWSXDGyLgSM8 + DPTILowR1WyFqVACf7TaZJMG3cBeA0cO8xcQ093NVJk5R4s4rv92Bg== -----END AGE ENCRYPTED FILE----- lastmodified: "2024-02-23T00:08:06Z" mac: ENC[AES256_GCM,data:KRSoHWTux2BTJ7KH16xyJkyZnynPYIO+C6rM3WhbdphIx5WtfpSO6pX8juTDmYCob3n3jJdFEfy28M2UjSRJhC/CLcdvUx5vV7J8WVldXox8YN5uyQG5cyW2TkO1qwTov1mj4f2FWQsTgKSyXgn/yyzbA9tcfQ4qBHrUj8XiPHc=,iv:bw7UVnVOT6PN6I8iySrCxh1UIqbRQl5RMgnG5WqIPWA=,tag:NV2NTnsYwIjWJdQoTmhECg==,type:str] pgp: - - created_at: "2024-09-02T04:47:29Z" + - created_at: "2025-09-20T21:33:04Z" enc: |- -----BEGIN PGP MESSAGE----- - hQIMA82M54yws73UAQ//Wwh/MOunzqURoJXQaeNh2DubgZhV9rNdrvC9eW5otANa - sqv4JgJHOYwJXGrP/959Y040M3v4L43nFSKGmiONscfWsP+hyv2izYY01ynyb5Dm - f99Dx6irEFe1a1cK9wRdAsNW8xmHtrkP1ufFaqRcTMDyu4eMtPtuNJEcbhJ95jDU - 54cXM3JGo3Qvv+eTsbAQqM5svBsQ0tDRx9uICrtsYRfLa2lX3nn7RTXj8TewmFgF - qJJ1qsItjVKTUs24ogcgtYbWqRacSzCIyDx2LT0ta6hC28nmPjoDJdXhlDoFqP3n - a9zsPV04leGt69T2JhT4U3SZNC10UoiLc0Zz1wEVvgGX0zYse4gxB7xiLfC+/FMm - FEkWxK/7OxJv9iORpPtYagmOfgg+RXnRTnnJs1IbknMCr8+YWyksy8HQ7yF05d1E - YEnar6mb+fJp4iUtyE9hm3YBBK9biCdgFjrQR5sf0OkYZJ7/77sBkOyMAU5H6+5z - XS+IsojnwmqN4dnnSkrZ3FwLSa2JHDAbzA0+m6QyJI0w7SO/7AzOtM8YWCjl9nUL - O4QMEyRRsKOt4xO3APvfXnGaRn/V00L8gg7RfVF6UWl/U1Qhk/3VtgP6coHvbMcQ - Xjke95g8x5X3kmdRQJBMCbLGbjA2iqRR/LGTZKuBsSD7KUdSCPOY/45DM7E4h4fS - XgFsMaX+GYPeygQjnn6ttfQHSfiY6eIIXP11DwzKHdUj3NrfQ9mvuvLfkKsKvtst - rKulWzjoXtum9/I/E4DK4FGfhrPW9BrAcGZOgMNBZCie9fc5clm9g0IqOcdG1dc= - =/Pdm + hQIMA82M54yws73UAQ/+KMYG54qx4rHfWaaAW6qm0pk8/IVvyLiOXF3pwdAX8WtU + wkXk4B5vNrdvXUwMB2WRUEnHRx+E4GTAduUxlRGfoJh287V6Qmsl+IF/szkKfH93 + 1qskJnYcq0a6BfRfWsSlH22AuFhTX/Ta/6IWtYrn+c034u4WcV+ejze13gVQuJOI + 5wKzyDFQtTJSkaRZZRceiBID3xkn7ZC1GOn2R9zi1TDfHhnyvW1IPXIfQ5+5FP0S + cfbi+vyaLpIFHfBhiH/zAEPFOBo7fIehW2dbQzr/H0qVt4DBaNrLKC9/ccLq3xVo + KxRXRpYDI/vdsLfqIqj5kDAUrFEX4T9MCKVdhFSU5J3zc45VJBB6ow0hZN2Z5hds + HJ6F4ygHfOixcAxraFYtMKMp5CywtJZItlKap+nK1T1ykHNf179J1+UE+fqdWtGW + qRMmU9wtXdtrXP0KlTHFMEnkTY+FTlgOr/zaZCJxEiFRytPm7Zo/rqd/r1xNmJmH + fNV5uTNZWL6UPf/oP0H+Y5Y/pN/w+XDP63yzkzpi4Gl0szUk8D2z9SY5yU8RqgZ6 + mb8pi1z01l6zlnM4jLyZ+QS4NxuhFBX2u4wTVPVaIKO9JMolneLYMusqRChsPk7I + I3s8VS+q+ujR+e9QCMtXyP+HCZoznwPmLmCKRldbongvqPHFE/r90r0t6vV12nvS + XgFHnBG00sc/cH5lAivPsIRsnWqAHYxjd6oJELdPdrgFGfXZhGz/Pt28LO/+7OjZ + d6kVgvxR4fIcetS2/EketCz2dJvmtMuWueUA4LVZ9nXdgTALHpXTldEoijWoe9w= + =o5so -----END PGP MESSAGE----- fp: CD8CE78CB0B3BDD4 - - created_at: "2024-09-02T04:47:29Z" + - created_at: "2025-09-20T21:33:04Z" enc: |- -----BEGIN PGP MESSAGE----- - hQEMA2W9MER3HLb7AQgAhjfU3ktIoiVnbSUIwL3NbCSi2iODFtW3h59iwAMegX8O - ahGgEZTI8AELqfNG0n6T1pn5JypwtQKIjkdl4LeoG3xcfn+G34000uWfOZgCjwwe - K5pUERNtox3LI1baPXi3o66iKHM4D3ukcwl1OWZj0nWiTmSX4fls1OM0t74vvztI - Ow8d/Yl7YWoXV+wI1lNi/ARJZQEJcn+wBfXnULkZAfydjtFaODS63jHnYGEzbWIm - jjJ3zlFd0DPuVb1Qc4z7SAIwcDWPEWlWN693MiH2PxSdhlOcBlq2EKE/iRbwZ1QM - eDsAjTHuNSEGC9H0H+nHOiUwM1JZlBcMj5bcyVbJctJeAVyMiEPdvZRXL6poHUYU - lT1yllbP+Y8CsGfSixi7Zw8i3oidQKGiJUT3sxWHPlQCR1GQmPKWooThUG4yvvzo - veLPUlbaWKBMffOSKJun2JFMCCscxGedB1YsVkmemQ== - =i9QW + hQEMA2W9MER3HLb7AQf/Y+pu1PvMOuuoUknHnAiaH98VYX0fLe0Ob2aG1uvTd92d + VRFF8BjWrD+bLwpKh/SxEQk217TUZ8GfgONCodUtn7284wrsNW9zO6o/Q36bAuyP + xjT1yu/O2ZlPYzdhK9dJwvluyedztRBqkWIHjeqwJsrj7PYT7lRRGRvOy1KciXlW + TlGzIHT63XDxzVoBgpWkvgdkcaCTnAOIWvC8FCCGerPC7rVprjQFm0g40MbpKPgE + nh5iSeyTmB51W3SiiFlamLDSWpi0K04DeWLNlpj/mMwooe0sucQxhY2j2x88VB5r + 0AndAX+En31STNhyW/HfxygtAzziv2IvyhAbVeUw9dJeAdzc1cOd2ojb1dWbqYE7 + Rf+fZzgP8xgxJp1ZhdITDrhVUs11WGWMaYS3Ul0RuYHpJRxfKC0DM5yhQc6pYUyn + lNPcAVxtc2U5vt8iNBG6uTxsnvVzl1Znypdw6x1yFg== + =CVcy -----END PGP MESSAGE----- fp: 65BD3044771CB6FB unencrypted_suffix: _unencrypted