nixos/sops: re-add ember

voc · Oct 26, 2024 · 9658ac6 · 9658ac6
1 parent 7d70013
commit 9658ac6
Show file tree

Hide file tree

Showing 3 changed files with 66 additions and 44 deletions.
diff --git a/nixos/.sops.yaml b/nixos/.sops.yaml
@@ -10,7 +10,7 @@ creation_rules:
   - path_regex: hosts/tel/.*
     key_groups:
     - pgp:
-#     - *admin_n0emis
+      - *admin_n0emis
       age:
       - *admin_keepass
       - *admin_hexchen
@@ -19,7 +19,7 @@ creation_rules:
   - path_regex: hosts/mail/.*
     key_groups:
     - pgp:
-#     - *admin_n0emis
+      - *admin_n0emis
       age:
       - *admin_keepass
       - *admin_hexchen

diff --git a/nixos/hosts/mail/secrets.yaml b/nixos/hosts/mail/secrets.yaml
@@ -8,41 +8,52 @@ sops:
         - recipient: age13yl99pyktjyssdm487pa5ucm4rxcrdrt4lq8qk2vkvdwyfhcvahqs4e6cw
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCcHVjTmRkWVg2akJOazli
-            VjNEcVQ0cWNjYjlHZ1I4Mmx6NHNEaURHSVJZCkUyd2NobkNSSml3ZHZ4UWlYMWFB
-            TTVRMTg3TTlPWjNsRllKQ1NkR1NvcVEKLS0tIHpnbDh3RWVlVWxQekpNQ1lsY256
-            RUJYL1IxbGVNT2p6b2dwc1pTbmhWQUEKf+gBxG3qUilQ3EIy/VN9HZap98glvkoy
-            Rm432192/a0hRxyPQjonCRFlvaqA5g6Pc6/FiCE/JVmGqhZuWwBivQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVWHF5L3VrakJDWTlXM0ph
+            OGFNT3NsbSt6WS8zZ1dZZzRhc3E3WTVHZmprCm9GMHlRWnZ1dkRmWExlSUNTZFRV
+            djRnYlB6Q0ZibEFXRHZEWVlMdFU5SWsKLS0tIEk0M2ZIY29iUVdDZ25FOVVkWW1p
+            YzY3Mng4SVZhcXR6cy8rMDY0eFhxS1UKSulgbQihgZHpeuoaolXYd29WVnuzP2sP
+            q9PUcoh51IOaVeVeSj6BEr5qCeyUtrwnVnw6YpwF/TRnuVjlM9KqHA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1wvtkhug4q7fcs7wz03kpn77ruqkkwp2xqq30npv4287wtf3w8ukq370vre
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRNS9HU3lWS1BwekxLZklh
-            SDZYblN5QTQrbGtUWTRsdythT0lrYkIwUHpRCkgyZUpxckdoY093d3JFQzdXU0c4
-            MzBCVXN4TGNEaFFycXMxbXJocThUVDAKLS0tIHhwZWxqaUJyNXlscjVqeXgyb1Zt
-            ZW9tS1A0enR3bEdZQzJYeWR6MTRQUVUKI1b1helBqsCCeDiluy21mNBRx6fXcGdp
-            oLoAShxIsoj5OSbzCguBTW+H2GSdMyOGMDzuRkKWQhieFvPyQKAyaQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzd2xaRnhxcHFDWUM5L2ZK
+            UlkreTJOcFRMRWdKN2VuZjZ1Uy9Gc3hIV1NnCnp6S2FXN0k3NXJxamNYL2JLN05K
+            OW5ndm1nYlU3cEREVk1KaHZiOHNDMzgKLS0tIHVXZm0vL3dTOGE3NnBKUktiT1JJ
+            MU5PQUZ6N0IzanM3WDJPMWg4cnd5dEEKIV1bc6KGsl/WNuukFXXJpbAdJt9LzjZr
+            O8GxcAyE0kWN8NDzUNrw5M8msjz4EJq8LMpcEaxJC25NjwXlb5W73Q==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1yyxdtt7lpcm9hr0y76g559yq4uqz8e8hjc2fzqtwnhctsj99fp6sf3ksl6
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvdUFsamYwa2w3NlFjR2tH
-            NTZzRkZTSHFiZXdzUm0wTGdvZW4vMThHQXpVClNvdWVIekp1akEzbVZNSDcrOWx4
-            WHJMKy8vbUgvem9PK0lmQ09zODFwK3cKLS0tIHZlMGdJWEtDNnVBR2REcDRHeHg0
-            TWc3U0Jub2d2VjhJUnBCY2NlYUNqUnMKx9C+EeLk2C0DzW4T/fUCDwU7NZca+QmR
-            B+Suc9D7Wyl1/LM7mrBSqbayLK4dK/poaGKpQhkAHRvMYuU6V8mmUg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJUS93Vi9ja2JucE5aV25w
+            VlQxUHI2Z0VOdjVBNmRhTFR5aGFDUWhDL1VvCmtuMVdZTThsUzFXMHg0SDA3eFht
+            WUxISm1CWjZUSG84THp0U3piYkZqWEUKLS0tIEJsZG5OYlMydVVPTzZvM2t0Y3Bz
+            dHRnbzRvazFmSjVjWWFJcUcxbURpL0kKoyZhG9nr9ckv3xj1OdgHu18mugjdSHbZ
+            +6kg60gH/MfNNStCpnivYrgdeqzr09gLBvM3ULFe0ld4S8n8AuvkVg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1zcj3dt7uc3gc3kyt6l7m86qjzm9vlgq7kcsm9wh9gank6rqff4gqwrtzpa
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2WVVyOFdCQ0xBYVJDTTFl
-            c29nQlZRTVYxS2pYc2VFQStIMDUrZFRVM0dZCnFNVWx5MjhHbkVKZFVHM0lGc05J
-            R0U3Qy9rS0laWlJEcElhZlo0ODQySk0KLS0tIFg5ekFKa0ZsdzBFMThsL0tidzIv
-            ZjVMYmZwc3VaVEFWK2lUWkFwMVZvdWcKlXTAKuQZGBrgJGF+tCDqCxY0aFv4oBwz
-            WiNp7A4zlAXOq7P8S4FLt2b472LnFiBsdFShQpnSWIecIMwn9HhnOQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLdHlTYlBwVTNkTk4xeFE0
+            VVFXUEFCNE5ZRXRNc2xuekNGbThNeDFIRlRBCm5vZWFPbmJ1T3dEcXF6dEYvZW9S
+            NEZhNndxMTh1WnBaWmJPbnFJWGdVYmMKLS0tIFRndG5DL1NZVUp6Z2s5TnpMRWRB
+            ZUxqbTJHSkV2N0NHZUk1NnNDbVA5RlUKo5sHEridmZU1OeN0d17K8wl0AgtyH43X
+            LSrunvw46+FnBeQWwFnI9OuFkvkR3u8eXcUZrL/0+pc00U5i6wlsuQ==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2024-01-30T20:48:28Z"
     mac: ENC[AES256_GCM,data:w2ohx6aWE30qAN4yXl7DttJiW1U7MVp0/Yd8SaHgW9qTypsFg2n1S1LPqikVbpwuz4JldloD+b+sC7WKCzGbLAMgMvZBeyMQAR7sFxq4Ocwl6IgHY38PD2QIQpWEp2cdaGjPKt9LOgWA2Ox29f1/XrZoom0Q6BaTHyr47BNpryE=,iv:2/BMIce8PXsuOcuE+Wgd6ymeR+Km18MecIy2yhrb1YQ=,tag:lwn+/VmVf9P0gZCPA1m7SQ==,type:str]
-    pgp: []
+    pgp:
+        - created_at: "2024-10-26T22:49:32Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hF4D6iFd6webPCUSAQdAVicpIcrG0fwUsjkak1EgdGJb5EUwTUc54S13fbb0qGow
+            wL89H587V1gYgZh7CR2qLgii/Mh+uGfC9KhLBgMDbXPTYdoXgwP/aCiOg9jeVC43
+            0l4BacnQU1a9M92DtVqUpPs6M/FTSYutKmGyfjJA+RpVf7bRV97FUQkFXjNmbNUc
+            1qPIwxcYd1ZC7Xb5l4WFzf9KftICdryqoaBi0vuymCUi+GbPuFaP3zzmIPtjNLw7
+            =sD++
+            -----END PGP MESSAGE-----
+          fp: 6E10217E3187069E057DF5ABE0262A773B824745
     unencrypted_suffix: _unencrypted
     version: 3.7.3
diff --git a/nixos/hosts/tel/secrets.yaml b/nixos/hosts/tel/secrets.yaml
@@ -12,41 +12,52 @@ sops:
         - recipient: age13yl99pyktjyssdm487pa5ucm4rxcrdrt4lq8qk2vkvdwyfhcvahqs4e6cw
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByUDZNQUxFK3p6WmU2N2h0
-            RmlZWU41TktMTDlhRzc1SE9KUU95MndlK2tJCmVWYzhNTk4yTlFpSkowZis2OVF4
-            ZmhWR1d6Szk3TURaMmV4dlMrVG8yYVUKLS0tIFJUenA4eVY2RHkxZUZDUWlvUU13
-            TjJKck9NdFhVdjJBVFg3dVlFZ2tEWmMKwAe1Lxur42+FOIXE2yC76TZ99zmrTEmq
-            kDGjppXqfOn1O3q9zggF27WoXhdnQHdbE133qc6/AP9Rjg4EzbbhDA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzME9JSHlyN3l6ZHE5SE1o
+            REU5YzBYcmJHc3hmblBrd09Vb0lhVVlkT3hVCll4MWdubm5ldFp2WEpaaC93SXNX
+            aHoxWkdGNlpyNzR2UVgvTE5BWFV1UW8KLS0tIEwwYkJ0Tm1kNlJ3UDl4WTJUNVVt
+            cVFpay9KdkxzZnMwRVlsM3ZmVWVGUm8KoUHGEO2ElHEYflSpFgHd20o2app0sWtl
+            FhcUfc6xZqZriaPpqdxeo9wtCGir6oyoO/R4W3H8IduZXYIDd5C8gQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1wvtkhug4q7fcs7wz03kpn77ruqkkwp2xqq30npv4287wtf3w8ukq370vre
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5U2J2SXdIaEpBMFdRWi93
-            dmdWNFZjMnIxRlVKMGN4ZWhlOUtvdmdRWVIwCklFR3E5TTZMNUtWTDBPWDJoUGlk
-            Yy8zejJpRFFpQy85YjFZcEZCZXB4VVEKLS0tIEFpOU1WMSs5aFE2Zy9PNE1vc3ZY
-            WC92V1F2azcyNmhBMDNuSzhpTGhUWm8KBCNhiWNv3onGJwnx++ktqR9q59fMLr5S
-            LPahR2F+M2/dzZNRxf63JbFeQD+kYsgSi7W8yh1EYauvInurUbWWzA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBYVZadWRWWkZPOS9tS293
+            SjNuMlNKSjlQaE5YS0RGT3FKaVRObWZJclZFCjBSQUdVUndraDQ2K1ZJeWdNMlVQ
+            N2l0dG1uK3lJeGt2a3ZiRkUxOTR2M1EKLS0tIGZINkltbzZ4R3J0Nnp6KzFGeWN1
+            WXNQZzVORGtFTy8zb1dKQmdVNUFrU2cKV98cX+iP+lgHVS6tAo6YcMoq8Q8kgyk7
+            KMMapbNNLcT5KwX0mKPy8gIs2icrNViP29/uf5x1J0NoBG8bxGKRpg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1yyxdtt7lpcm9hr0y76g559yq4uqz8e8hjc2fzqtwnhctsj99fp6sf3ksl6
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwQzVJMjFYRTlIMGJYOHk2
-            THdFTThRNW1EeE14TTl5a1lNZkg3NlBqZEJzClVjUUFpTVdxRkt0Z1pmS0JKTlZ3
-            eWNwbVFwWUNzOVJkdUVmYWtobzZnWVkKLS0tIGUwS25pa25CTzdGNkE2dXdrcmll
-            ZGl5SGQ0WC94RDN0QU1EbGdpakNQZGMKoVA3QKE5cb+xDm1+uIoZ5c0MiOyseUnA
-            V62NVdYLLwBAi2LQuuwZtIPdIA0UC5gwxvaJYXljPaMGFiHqXV/7lg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHNk9ud256bFVRaUk1dzBh
+            MGdPWjQyVkdsejEzbnJOalJwUm4rY0xqSFI4CjFINkRUS1RhQkJ3VSswMEZzZFhG
+            d3p0R3g0dEhoejcwK2lTU0NSKzV1YzQKLS0tIDhvRmR3dGJJVUM4WkFyMUh3K0pO
+            akxUcnliVTNJemYwVmoxSjc4ekFRSlUKd49VObeLiZnZR2L/T8YaRhicZQbdmBlw
+            8R1+BQSi6i1VTQYuUtOnr6SNNlOIUr6Cv+VU7V4InfzukZYwlo9XoQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1glkmsh6pex9g5v95vwx78a8xksmnkvsu7ccnhxzu09yvnfnjudls3lfkru
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIRSswR3hkMFAyb2p3a2J4
-            aHkzNUVtUHAwUnFKMTZDSkhOcmlDSGlybDAwCmFjK0JFWTlhY0dXS1ZKVzVRVzF1
-            dk05N1lEZVVrK3piOGdETHAydjRZdncKLS0tIEQvdENZRkl2LzdWRGE4R2l5L092
-            Z3hTb1Rqbmk4WmdCZXh4eTdvc2FXcWsKd/ARlPNkrXrTfriit6oCzN+CCeBOEBo0
-            olvi6/4uO8J6g9Es7Z/hwPJ0RfKlB4IrpdNuEr7G8tQ24594p0k81A==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHQnJ5eU03d2lPQmt1R210
+            aEFQL2dwajVycHhkZUQrK2FYWDZ5MWtub0VnCmV4czBBcEZUVkw5N1RhNzhMR2pT
+            aUR5MmF1eTdJdHAyZDdnL0drZjk4U0kKLS0tIEVtejBnbTdiTWd6SjNIR0dwQ1Ay
+            U08zVC8zYUFoRmpSeVZ2LzJ4Ym01eGsK1HAplUO9NTg6L+7fRiVozLOdV7vBbZ9a
+            iAg7UjF68yE7GTCa/8gsISngcyyrwaWZuZamC0ASPtIXfugK0utfvg==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2022-09-30T14:46:18Z"
     mac: ENC[AES256_GCM,data:UqJqDqlBLy0j3e4+FBcnxJnpPAlAf6OKsiRhvY3cjfU88IcMEEq2CgFBePrsEQKUMifyyYl0G0Z6qqZxule3mEkTKZePvGNlEK+yREow6SoCydxOZ9+bZ7Vgxi3jmw/dq2MpmOmoJKXFRzrKyvqbEt3CiZ1cNi80kStNyO63F6I=,iv:FGRFVayQNBMmOOpMimC4oVar2BX9iJEV/stQW7pg0bY=,tag:wD6xKN3vTWPb8n/XccFbFA==,type:str]
-    pgp: []
+    pgp:
+        - created_at: "2024-10-26T22:49:28Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hF4D6iFd6webPCUSAQdAQPZM5RbFZZmD+1Lvb5Wh2eqzAuehIbbIKIuhB6RPyXAw
+            QCCBBRJb3ckL+9QyHi3DHq4f47dboxIotXk3ARMWyH/NnoUPwZoQDmtpSYbdoerN
+            0l4BA9q1/PsGO0Rsitg1FfJjYpf3gCWXrkuo2/hTdZePwdS5/ht6DxYO6zu0jk2N
+            R8FIO41wp5JIw/+BvlLgu3LgEPWCMxPMQMyDrzDyEApNaEqMJnikb6TcZM2iq27g
+            =Pj6A
+            -----END PGP MESSAGE-----
+          fp: 6E10217E3187069E057DF5ABE0262A773B824745
     unencrypted_suffix: _unencrypted
     version: 3.7.3