sops

2026-05-01 23:13:34 +02:00
parent 76b77b532c
commit c1670a406c
2 changed files with 66 additions and 74 deletions
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -9,55 +9,56 @@ keys:
    - &avalon age1sxzuhh2fcd4pmaz4mdqq95t683d32ft22w9t2r7pk258u0s8wymsqdj7lg
    - &valinor age1sxzuhh2fcd4pmaz4mdqq95t683d32ft22w9t2r7pk258u0s8wymsqdj7lg
    - &asgard age1sxzuhh2fcd4pmaz4mdqq95t683d32ft22w9t2r7pk258u0s8wymsqdj7lg
+    - &gateway age13qv9dn9806paqgpjwmmkwtdzvv4qpv0ulksq0epnn8ufaxeug5zskyas3z

 creation_rules:
  - path_regex: modules/shared/sops/private/iriy.[a-z]+
    key_groups:
-    - age:
-      - *iriy
-      pgp:
-      - *sora
+      - age:
+          - *iriy
+        pgp:
+          - *sora
  - path_regex: modules/shared/sops/private/avalon.[a-z]+
    key_groups:
-    - age:
-      - *avalon
-      pgp:
-      - *sora
+      - age:
+          - *avalon
+        pgp:
+          - *sora
  - path_regex: modules/shared/sops/private/valinor.[a-z]+
    key_groups:
-    - age:
-      - *valinor
-      pgp:
-      - *sora
+      - age:
+          - *valinor
+        pgp:
+          - *sora
  - path_regex: modules/shared/sops/private/asgard.[a-z]+
    key_groups:
-    - age:
-      - *asgard
-      pgp:
-      - *sora
+      - age:
+          - *asgard
+        pgp:
+          - *sora

  - path_regex: modules/shared/sops/common.[a-z]+
    key_groups:
-    - age:
-      - *valinor
-      - *iriy
-      - *avalon
-      - *asgard
-      pgp:
-      - *sora
-  
+      - age:
+          - *valinor
+          - *iriy
+          - *avalon
+          - *asgard
+          - *gateway
+        pgp:
+          - *sora
+
  - path_regex: modules/shared/sops/mock.[a-z]+
    key_groups:
-    - age:
-      - *ci
-
+      - age:
+          - *ci

  - path_regex: modules/server/sops/server.[a-z]+
    key_groups:
-    - age:
-      - *valinor
-      - *iriy
-      - *avalon
-      - *asgard
-      pgp:
-      - *sora
+      - age:
+          - *valinor
+          - *iriy
+          - *avalon
+          - *asgard
+        pgp:
+          - *sora
--- a/modules/shared/sops/common.yaml
+++ b/modules/shared/sops/common.yaml
@@ -35,60 +35,51 @@ sops:
        - recipient: age1sxzuhh2fcd4pmaz4mdqq95t683d32ft22w9t2r7pk258u0s8wymsqdj7lg
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBraWFDRFUxQ2l5OWV1OXNK
-            UExEbWZkM0kzVk1rZG4yY3pBLzdMVWVJS0UwCnhlWFJ5T2lZUXJyNkg1ejQxaU1t
-            L3F2RUhldTY3N2xXL0hwczNKRzNjcncKLS0tIEkycHoxcDBGNyt2V3RDY29wNGVp
-            TGg5Rk05VkRsaXM1Q0NxMmtMajRORDAKqjFldiAYJKjmnkeDkwanjYvhL6645DZ5
-            dVXExjqO/DG733ge8HFyKzpfpkzRymV1giUwxBdII1dd0mJ2ncINeA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1MmFDeGFlK2FES3IremE4
+            ZW1WemhWWWwzd0xXSVp0U1ZwMmo4L0RwcnlVCmdwNVdRaGhhclNTRkRoR2F2QVpz
+            M3ZTV3Roc3FZYjE5NklBaEZrS1FGeGsKLS0tIFBad2F4elVCdzVNd04yd0Q5b2hQ
+            YTRoOTgrOEVHYi91R05HWGNuZFlCSDgKnQGCEw25uHtEhLIbFNPq3hacD0RFIUC8
+            2QYXmnEMafvsfVC0cxlP56gPyvutXDjnE6m3WjjjEo+JkfBqnEFEaQ==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1ms8f0ysv6vakxepvt69fejczs6tddexepesdv4rkgtheehj3nu4sc6290s
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3UkRjblIvYStZUzQyRHA1
-            ZGVXeHhrN0kyVkxZdms5U3gwVFlPMW12MVJjCjRkVURpZXBzb0tYenB4dGxKamh6
-            VXVBMmo1Ujkvd2VTRExyWE5MbVJaclUKLS0tIDVhRkYzZmEzUG00Q2IwOWZUMVVt
-            ODVIbytpcjN1cVMyaG1qVVdkRmtaMzQKNsvD9DpK/raDBob+IcuNk72tQDts36kJ
-            QhtoLy8MvUymi49PdEWrgyf68w5XwRO/U4iINhR0qzm0glg/XcyHjA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjeXlyeUQ2ZnI2NEwzKytY
+            RWI3TDNQZm9XeG1ZYTRxb1VuOVRxdHFZZ1JnCmk1VllsVCtWQTJqWk9Vc1g0TDBB
+            QWJRQktZMzBsRFdyWlZSM1p1WUxrOEEKLS0tIFd1RytQVUViMXZMeHdEWXZtY0Rj
+            TkZMUVpwNmptU2ljY1ZwWVF0OE81ZGcK+ErWbRwb7a1qdInDVDkn/pU5HM6j3xdS
+            K//StBt2yzpOFAjbSFm1hunkoKe7IoCu0Tvt8zDsG2LFpiOY/zIadA==
            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1sxzuhh2fcd4pmaz4mdqq95t683d32ft22w9t2r7pk258u0s8wymsqdj7lg
+        - recipient: age13qv9dn9806paqgpjwmmkwtdzvv4qpv0ulksq0epnn8ufaxeug5zskyas3z
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJc3hKWkk3ckNOY2UyTVhG
-            MmtLaEd0K04yaGxiOUoxMXkzOEFnYis4VkhnCktDRFM2bS8vb05OWDdwa0RwRlNO
-            cmlZemtxVGZ6S0tNTDV1cmE1N0pVWnMKLS0tIE9EZllycHJpcEY2R1pwOFhOZEU3
-            L01IcytDd3BPb0VOTW9DQ2lUdUVJS0kKiD+C+3mK1b/eIwCEFanFgYGLNk3JNPQ7
-            i1UqzbHVxSd0q/YVwdKAcj0jA6EezGm275tgq7IVsy2sHkvRMaEDtQ==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1sxzuhh2fcd4pmaz4mdqq95t683d32ft22w9t2r7pk258u0s8wymsqdj7lg
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAweVU3TkxFZzRnd2I2clN2
-            ZTlTWmhwQkhVc1hnOXFvZVVDSWpHMVh1TGtrCkc3M1pUTnZCMHpvYXB5ZVhreGxa
-            ZVY2cG5Ja2ltL3k2Q1VEalc5TTNFMXcKLS0tIGd5UWl0RGVXT211Zm51dlB6WFZ1
-            STRtTVpVTCtVZ1FUNENqWFFVNTNuaVUKN6HRiZjTdENeif8dJ29urBxPXDaosjjY
-            InN4Ko6YUaGfvB1DTrKIzrxOpsHS+XjisoGfT71tJwwEOoREklEO/A==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCcXRsMDlJUS8zbXdobHFG
+            VnBwWHJ1UWZndGlhOXB1ZGNiUzFjdzFYdnp3CldacXpONjc1TWVSSVh0dHZyMFRV
+            UU1hUE5SbTJOYTdmeFhmZVFhblp4NzQKLS0tIDFCYUNSbFFVN0VMZGplSk0rdXMy
+            S1BrdkNjMXRuMjhBd3BRdWFuOS95SGcKGBXOoeGRhgZK12kxrZtshboguC5YwLf/
+            vpHBPD8/4eQHs6DjLGMC6+8le8wfVq6v0QYKwE5TPnPBJcRtzokkuA==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2026-05-01T19:34:05Z"
    mac: ENC[AES256_GCM,data:D3KYMqNGEQDEud8p9IUjiwNkhfw1KECXImi0k8LkfJYsmru2LBgRmlfMk+0ZWl8zrF4+VWhuvaBiBJbJQIuj63eaaXF36GIqdr5958QjX9DlZyFtzKGvmcGlf+NfCxXr25TbYJOq3lTk4Wt9uWravGHZRwzyWhTxIHPN1M83rO4=,iv:gXDqzyyyv8eMYEMV2Dr4FPsj6bDWoeQNROi33k7/5PY=,tag:ZG5DlN7kNskUTqFeAf+KBQ==,type:str]
    pgp:
-        - created_at: "2023-04-20T10:20:17Z"
+        - created_at: "2026-05-01T21:13:06Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            wcFMA6R3Y9nD7qMBAQ/8CVWQaYKfOzvPIllZyyWpUjHRLLXaR8MNJ8U5WI/tdwdN
-            9UScDYJFuYRW7Q9s4Mt961kBGpaHqe9MUZBxUDlYX59+EN3FbO/eMQ5OqI05ESmL
-            TvZB4+S9C5o73nuypSDNvYz+Lgq6DO25ZPhXdtPhx2DE4G31/wft/LpxhjalIjI8
-            MU0Dv22R4qC+glJbe4GIF2IJ8XoxnnzjiGeSqiyv0QIBM0SzOtA5sKwNohWBnW7g
-            7vxOTm5+kyzG0dDjt3tFApgPDaA1wjofzhRuuveF52VBsuIA2opFdpqkyICvK6rn
-            NB5kUaPlY6A0m+n0oHSfY5wm/AnHNE4Oob/ifumAaB0EAJVUTRauI5M8SeJF0ya1
-            U0IQ9N2lb7Y6q4pqHywIa6fnylsqCfxInAYKMuslRq8f9t/qakb4/MYcnPrwpzjw
-            73/naiNoJmG6NVTkM52qTtOqZAmsaQd5cigTuPW2Z2CJq1yLZEVGSSd1DUGUjBDK
-            nQGucpVVVpD+ifrIPz+Iqwy+5NoZZm/Oa9pKJGFzqXinnDNZaqtgpmTw9QxcSeaP
-            VvGZG9CDd89MtAm1VQyuqi1bQ2faq3G0xNrLl7xUsfmjx4ofW+JXR87OzvGfLPhu
-            Sjl3kS9j5/MEBRBg3n9gNkgSu5Sy3ilhckY3yjTgAT9Gw2giDhCiUXi1/7KrGprS
-            UQHPCSsjyWsyuYVa3lAP/WPdVclc4WOdfYcetUCXBVP7LQr0bq+IG+2J0nnY3mDt
-            Va5k4sP1qu6Ecrs2JioQ1V2H+VmcrRykBWnMXl1tDSWKMA==
-            =pS8X
+            hQIMA6R3Y9nD7qMBAQ/+M2yh700zCEjQJMuO73syYPxnrwPL/w2lvcIhWzqbQrfP
+            t9oKNKFnzLaiZ94zxmNfB2OuSdpRuPnSAuRwdbommRrwwgvHkGcPvyUlv9PI7Olm
+            ZivVR+Bl+AxkFjnyfOhqkUBd3TAMVEtuT4JLuq0lzGFJWYNxLO8z+Mb2Aw4d/W8p
+            Z0y6qxepuVlqSynkDoleYfWNUG8FK+4sqrphFzvk4i/t0Y7tw4YYuD/tGVYN21LL
+            C/KWHxSkO5eUFk+y9knIVdTY+dF/6q7BZtwsA9zkp7fNEE9N9SCKL9272e2KXRIr
+            mJ0b+EgecOgdxNQdiLvZT51osNIwXZxPRNGKfK47PA0qhw7BfyA0TdkDXVvkzmYA
+            JvkoiYx9b8JfVhhCq+1vddGDjChVWyq9UOEJ3opAXr/tO2dy0OdB95TwIKC0cBWL
+            jxp/PQmvJgaanE8wDEZlaS15YEIEptxpltFvuLRdgrKgJQmWlmZl8V7RmAuMwvad
+            gJqStxPYPBcoc5oO4Xu6zCy4SonDZ7rhuiCBkH9PUD4khTCco6uswp2dMi4LVb7/
+            CIf7vG0ZrccM6n70pv6iOUA5CDMcmqwgUc0VygxIP6VU6WptZcSOpsJ3dV3gtFxg
+            vdr2Vn0WzYgom/6vvBmH+OTgO9ghQIqy1TakxaH0mdHipQ4yM+m+hK45p5wqwQXS
+            XAFJxeDUr/HOJFb6TBLecwNzrDna/sHRpIKwp6yce2ydVbt24AvtqFIXKcY9KFSc
+            4i4708reqUxZstWbLw74UGkR6+jKN05XU7867Slxh9RM1Pg+ZeOPC4nfMXqx
+            =wiFi
            -----END PGP MESSAGE-----
          fp: 4E241635F8EDD2919D2FB44CA362EA0491E2EEA0
    unencrypted_suffix: _unencrypted