diff --git a/.sops.yaml b/.sops.yaml index 63b372f..6a41863 100755 --- a/.sops.yaml +++ b/.sops.yaml @@ -13,31 +13,6 @@ keys: - &sandbox age1pf4auk6u2tmefuqpuc6mntr26cp4wcsmlhnn98arzxsp3753ruqsj0jqk3 creation_rules: - - path_regex: modules/shared/sops/private/iriy.[a-z]+ - key_groups: - - age: - - *iriy - pgp: - - *sora - - path_regex: modules/shared/sops/private/avalon.[a-z]+ - key_groups: - - age: - - *avalon - pgp: - - *sora - - path_regex: modules/shared/sops/private/valinor.[a-z]+ - key_groups: - - age: - - *valinor - pgp: - - *sora - - path_regex: modules/shared/sops/private/asgard.[a-z]+ - key_groups: - - age: - - *asgard - pgp: - - *sora - - path_regex: modules/shared/sops/common.[a-z]+ key_groups: - age: @@ -54,6 +29,8 @@ creation_rules: - age: - *ci - *sandbox + pgp: + - *sora - path_regex: modules/server/sops/server.[a-z]+ key_groups: diff --git a/modules/shared/sops/mock.yaml b/modules/shared/sops/mock.yaml index 9f6293d..8fe95e9 100644 --- a/modules/shared/sops/mock.yaml +++ b/modules/shared/sops/mock.yaml @@ -8,27 +8,49 @@ sandbox_wg_priv: ENC[AES256_GCM,data:4trdnPhgjlUChATnNx9o3Q==,iv:3efDzVFVCqv6yCN sandbox_wg_pub: ENC[AES256_GCM,data:7L4SJdDMi5DZHpLfR6cs,iv:UULKRJvU0lktwmKGcIP/sRAZb0j2e0iL40o3DkSv/+U=,tag:irsolwnnfOjhYfiyanjxjw==,type:str] PGP_KEY: ENC[AES256_GCM,data:lwwHWksY+ea8D3z9,iv:/tOEukP7LiNhhdSw870vPeUGhN2lse2v1pZ5fJQglc0=,tag:225sf9GjXc8/NZgcXJIxZA==,type:str] wifi: ENC[AES256_GCM,data:Z+pbGAekk26GD3zg4TXVacP4Nrh93HPEMNcT0I1YaA==,iv:oiWZvnKvWmF/6cRZpCLsuf1uPJig6toNla5uT3t2kyM=,tag:iS3sq8JZsNUby9pSxYPw5g==,type:str] +telegraf: ENC[AES256_GCM,data:8+2gwK7YKqr8Cp3rJEm6hqvsQP/ACYQcB8RibgXKJsGMd71v6b4bnHQ+YvKtngARTrV85XIl/hcRcI4q86bYyUwKosvk30pFvDj7aQlqabxWf7tVIkBmqMAVyMs=,iv:/VBZ5UwJETp8DHeO4K/l8Ia9NSVME+eMoIkaW+IKH9w=,tag:cTmoobolGr77fMFCVLYNsw==,type:str] sops: age: - - recipient: age13qv9dn9806paqgpjwmmkwtdzvv4qpv0ulksq0epnn8ufaxeug5zskyas3z - enc: | + - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEbHNVZjRzQi9ram1xNHk3 - d3pTTStiMjBLZHgwL0cvUGRwRFFzWi9HS2dvCkQ0ZU5UK1owS0N5MHhxOXV1cGVy - RnFQbGlhVy9tSVZKYXBqbzZjZU9nd3cKLS0tIDdXdm1qVTYvdS9sQ0Z0aExpTzB1 - WkNsWVpqaHRSWkl6YXVrN0NoemhiS1EKoDRocdztTLQ5LMwHdlszTFHy+rm+y4RE - f97a6Z2J87ZfObRbaap5adVD7qk/tTYHGshT/8G1JxjctsxRgdfsmA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKYU4xenBReitYajczWU9B + c3VtZTVOUmlWOGxLdlBtMG82N2tYOEM3T0JVClIwQ0cvTEZKOE9GQjVUekpSM2tM + dWc2RkxpYXRaUlI3NFRSU0ZKV2pFZlkKLS0tIHRlWW5mS2dDSmRDRVFuYStYay9T + THVSemhBK0NJcVRWTHAvRHFDQ1JTYzQKD8o4dexvik2uEZqK7PX2u+FC3I1Vj37L + 22WpuxQ8mRrtNGszFeo4IuYC11bR4PzHUFfSYD5WwzPp8VhEhKzcgg== -----END AGE ENCRYPTED FILE----- - - recipient: age1pf4auk6u2tmefuqpuc6mntr26cp4wcsmlhnn98arzxsp3753ruqsj0jqk3 - enc: | + recipient: age13qv9dn9806paqgpjwmmkwtdzvv4qpv0ulksq0epnn8ufaxeug5zskyas3z + - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNSHBpZGg0TlVtMFhjY2Ry - NzUrd1pPZFZNdFdLSUxrUUROaVNCTzdGR0hrCkVGUmpGemtFSDErRDArS0Y0WGZu - YkYzL2NGMTlnNW1NdStHOGpRN3A1VXcKLS0tIGs0MDIxTmpzSGtRWHZESFhNWXlS - Y3N0a2VPUHdoRlpUZ3BPVXROdDRHekEK2YN9ZgCaBPt/8kAkZNgsHp61SYqiFFXX - 2lF0R1GNmYWm6T0YVCp/2ZN3z4GC+monctg1zoo5QsHfhIOpqIVoTA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0RXV1OHhzZ2JaN0tMSmQv + MWZ0bnhnSk44dUs5SGJzODNXWjRPY3ZsY2p3CjJKNlFkSm1ZdDFnT3pHcnJVTVJj + MGpQZTlCSUYvaWRTNWk5a2lNcU1PZ2sKLS0tIEtiMmk4cVgxRXpLTnc4V2RLOGlu + TnpEa3F6NG1WbkR4VFFNTkY1THhFWjAKoJn3lmT5zr8kNR+7E+POaLXueSHXmNar + bb3JkY44COUt6wp8TWzQ7gaPWOX5/Y5X4yGDLD6rLp+/+1t0bqTcYQ== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-09-06T13:37:03Z" - mac: ENC[AES256_GCM,data:uI9yG3/jGNGn6yoN9W+9K/AUeSowe4Mb9vhh38pwkuKab9zXTFidCWyh1e0TEOsIHrhfK2GPc2fHwc309/la+CoiNxAIYtC4xmoCYxSGrDgbsZEONrusy9AEKpRCO8CqLYyLYaAG9sLqFyIz3GyEnS/j98V3LeemhFtS17J1VHI=,iv:x/7caaKnggoyEaCx5sf+zzSE+3d7atv+o9B1O3QX0Uc=,tag:Tzfs+ACx+4A6kxAZtVQ3KQ==,type:str] + recipient: age1pf4auk6u2tmefuqpuc6mntr26cp4wcsmlhnn98arzxsp3753ruqsj0jqk3 + lastmodified: "2026-06-05T22:46:31Z" + mac: ENC[AES256_GCM,data:+Kbdn+qEc5EZ7RACP7D8Jz4FJjUiAhRS9gLUkcwsIcJLygFcSag9WZjdgN/cXBiyBSHboLAPZXt5nTNFY1SyBWD0Zfb0buoZE9ABQMhJ3XlKJ5FmKkXbXvkiiDhrpCklXeE1K8RHGBfdovFhQwIFmmlN9OBxrcuslUu0SeoStWI=,iv:oI/v8GWAHEkJDhKmuHBlTnlhGSgST3rvHqig9Qy2bcw=,tag:7gu625ICO4FiHk4a3dddPQ==,type:str] + pgp: + - created_at: "2026-06-05T22:45:24Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + hQIMA6R3Y9nD7qMBAQ//cVkcTtTMHcXCIa74AG2+Go7gi4dTDu9yTGIxz3HgCofN + rnnnpWPIDmQ78qUMe3Pmmj8LzbmjgM2xArc4ybsmwFCwUEMPIBGmFr8H/2NBa+Hi + ScZhkBhUhIpxNZpvpCN3pMzO0zURsvA1CMqDumMzcAjex8QpTYezts8Z7Dw2WCSG + zBbBeqReS+P8srM1VBoiBySG4LmmFPvUXQThDoqpYr8hD/2OMGBq14rfzPOilj8z + SIDjjx52o209pCd+PrFoniN9ODQgaeHZQoHAoXSFk3GjhOQMMLVdJl3tZ1j1pHOH + L9g2tk7eqBydJl67lA5O4rWnQFFZhiAxFE4TqBY3p4rEzIw1IvzyaC/6wN25PU/0 + BkC1s80CYLpO07msMWWdYiKZspK6wusjPGtVRR63jQ+YVOXtQecYbDEe3srrSDZp + GUIrc7hPKTUN4Qb3yvefVpZEEuD4Aro4Ip/KtJADoEzpPK9CvFcPlHPMvGbn+8+N + VItOGcuV9lvOdoa4xbrOTjbWHU2zObR6koOPhYhlnMI2dMNmaXesZ26byZqPemG8 + zrJpUnhIAq4Nky/HaCcPAlieLMnshB61NAu4ABh6yIVrBaQQ972yTVTfdrDBQkV7 + NhjqH9PjmpvGNoaXk0RGLXCtq+RPaNXhdpwDLaDrK8VjW9Q+G2h5gnZFoS6Zn6DS + XgFGnz5g/7G49zfe6xUtTIAVYNOO8y/4WQMNFD8oFIMPeT9PC9YL+e3q6cZPIthk + 1rrZrm3Wq5DeC33jJM7Qc/vBQPQOXCwoMPG/qgeYndoYu9Rvi2KHYCcZofAN/S0= + =N5rE + -----END PGP MESSAGE----- + fp: 4E241635F8EDD2919D2FB44CA362EA0491E2EEA0 unencrypted_suffix: _unencrypted - version: 3.10.2 + version: 3.13.1