refactor(sops): individual service files

2026-02-09 12:29:19 -08:00 · 2024-01-16 11:21:35 -08:00 · 2024-01-16 11:21:35 -08:00 · de91366e09
commit de91366e09
parent be8e04ce37
21 changed files with 588 additions and 28 deletions
--- a/nixos/secrets/zigbee2mqtt.yaml
+++ b/nixos/secrets/zigbee2mqtt.yaml
@ -0,0 +1,67 @@
+z2m-pass: ENC[AES256_GCM,data:mN2xyzQ4OxNz4Y6dV3O6mw==,iv:LFRAbmWnialu47PPOOS0ilcmCUODP5lwYv8rDGrP83Y=,tag:fcnxuuB6itaE+WBjbSoFIQ==,type:str]
+z2m-secret: ENC[AES256_GCM,data:YQ3sFB0v5YI/Wm6dNCNpwSZ4aI8eSs6LQkSqw6PLv6690O/p0MQwlMFFp6r94JiRJhMVijxfNM1metWaWFGJ5R/qviuyffmXfgsP5jPwUdtwboDgJ9zapXddsr4tRNulxDLQqnuhZiu5aDbmZvQ=,iv:vCiYPpuylnY5TndlT/7eN1r9gXXmA5qXcvH5O0bCqdE=,tag:igFnHKQeFflxjnkLPdeKrg==,type:str]
+sops:
+    shamir_threshold: 1
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1a2quf2ekkj94ygu7wgvhrvh44fwn32c0l2cwvgvjh23wst90s54szdsvgr
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyYVd0bHpPcWx1cXNSQVFP
+            dUt3MHBvSDlET0xER251MHZNSFF0US95ZWw0CnFCM3c4LzVqWTA4OGN2QVVzVThU
+            S2ZZb1VpT2ExUWV1Nk0rUTJnbm8yOVEKLS0tIElKdDVRWFJvR3VXOHY1UkJFMXUz
+            VmttaWI3T20wMnRNVEQ2WFl6aktWMkEKjpKMwUJR0+Zg0+jMJuWudI1F/8pG3tr8
+            sDtfwcbtGxekfeiKhYywjXFykl3ACJqi9wEHvYElhIhIf+4du9YHuw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age16klpkaut5759dut8mdm3jn0rnp8w6kxyvs9n6ntqrdsayjtd7upqlvw489
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFR3cwUjQrcHp2Ulh1aUx0
+            aWJqcUdhbjd1Sms1RWFiQklqRUJhNGE3LzJFCkx6TkkxNjJEL1dRY3luWFQ4cFdV
+            L25EekFHd3BMU1V6a0tnSm1BbUxEdWMKLS0tIG02OFoxclVnczlJUk9pUzRURVMr
+            SncwMyt1REtCRjE2bzRTNEQzdm1lREkKuwjkWpzchiu+kxD0yhhPKLSUt3Ik58ab
+            UQ6TP42q68nt/iu4ZFA41ie3jTM93bQZESbKdnCm5uQBmrIPAiwH7Q==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-01-16T19:11:49Z"
+    mac: ENC[AES256_GCM,data:l1IxjLwcgzPL4zgYqs9lJvE6+/VkqKJZ6SHc7uz01fJFIP3TIyI0CsjCTev8hpMXCImFyZIa6XwdDd4bxXMO8UVGvdIjZF//Do4JhpTPYvem7qHf1Q754tgr7vPVOH9HcP/szL6QTGC7++9S5exOp8U1M1Vlzh+DFe/wLz12wAQ=,iv:TyaV/2/RoD5FwWufWi8N+xeWW4qmmgrzcETSdXfMGUs=,tag:KvL3wsDPbd5yY74x/oJL+Q==,type:str]
+    pgp:
+        - created_at: "2024-01-16T19:11:46Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA82M54yws73UAQ/+JnAXyGmqdZP8RvA1QebRDq0i8dRjOEfDSEGppZxVxbBJ
+            10HCWPWe36NneGs4mv77JZQDjYt+bPI8oXIp87EhhMVfZFfBDoI58jc39F86pmAR
+            sTupKwbuwGuEycnLteSAGRJIprJH9XkPJjHchLbGRTJQaDecahdhoH7PVMXiFICS
+            VzOtq22KDiCrgj055dtQFPQVG8cUD9epI5U1VZUk2UwkOuJ8lIlwrghO4rHmFAHg
+            oCtmvI/m9DdVKG+qo2iRd74CXwFa1eESgcdQ4RZl0+rZQJPLz4n6oWPjb/9JDaWq
+            DPytFYf9cDUZYHhv39L5Q0WOmwladMYTApVN+6IBQ0Gm9RqCkquODlngev4p7Pra
+            IhQiQCNb39LBQ6Tt7TuLMPp9KfJ0NUdEDkUDnCqHU4/qzIF6QaRfeyE9UxsNXjHu
+            QYLhVMX7iYxRNgr4CqAaiKbU03rRTzprJfZLDWI/udcFJa4QTtcoT5jn/SULghwS
+            shI43k0cT04LPB7TPC8VrhpWVoZGhqPuuoyrQ+SVvK9bC38CC5Ax8s6l6jPJrfu2
+            9S9+jldbstRkTQ2k/Nbo4QJEwSIRZeXIqmhDfFOe/DB0kcjAeI47ehjjHoQh7mlO
+            F+pdQcHkyFtSYAc08F5xoLEc0o22t9Pb3WiiHxKmzWFd36heeotAdIix6i4jF+fS
+            XgHSp4f31WxNu4SnYIBwV2CklLSdiOQn/uMC8jB11ZJ94OY9CJs6XXT55sAV+nKH
+            N8fsjrTP0BWlFhxQzATHgk+6TL9znPOygdlbgCCwPDFqzB7GNdhZ0ZBrOFZkZSg=
+            =WAK1
+            -----END PGP MESSAGE-----
+          fp: CD8CE78CB0B3BDD4
+        - created_at: "2024-01-16T19:11:46Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMA2W9MER3HLb7AQf/VSnitRF1sNE4x8R9YdOaVtbJo1EXnlazo6uVN3zf8imC
+            sB4wo/fjdE3DvQTG97KQVzuh/lAIWCSlvRSNGMlw0MFwo6awAZqHYTEW1AU/0k0r
+            tw0TjpYnqWEzXid1HW+M1SIAGpwmVOxlQGRfoLHtMzgdoRp6BRUPFJHKd+hAA1oR
+            ix1IC/YJleGQ2HePuvJ+XbeKUA42adKO3EhOAM+8dGCzGtraiFJhcGsrffcFhtB0
+            MQEGj7RT0IaiECp8t8zChZvPg0vkPFuwhFgIWFLmHjt24DY3JdBj6BeFaMfiYPPG
+            hKOqGK+ek6gmkmOivBiZGRPUls9ejXz1gN1yHMhwuNJeAcJ3iHdLuh/FC4blnjml
+            Ta9IFbuf6UDPF10XAN6L8SeBubFdolCc9rUwQu8oogw9mxu9rP+jt4f4Y3yVtl0m
+            eXpH0NYJMKBEkiGDsM8jpyCHJ8WPD3FX4KUxxjsLqA==
+            =Y61H
+            -----END PGP MESSAGE-----
+          fp: 65BD3044771CB6FB
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1