Add sops stuff

.sops.yml

@@ -7,3 +7,7 @@ creation_rules:
       - age:
           - *lotte
           - *nixos-8gb-fsn1-1
+  - path_regex: secrets/nutty-noon/[^/]+$
+    key_groups:
+      - age:
+          - *lotte

secrets/nutty-noon/secrets.yaml

@@ -0,0 +1,44 @@
+network:
+    wireguard:
+        privkey: ENC[AES256_GCM,data:+avWYsJmrVYFnwi6T6NqQiXH1U+q3DsvMUT+pG4P2zJ+typzA3dQ+85HBVc=,iv:mdf2+p+7FOUPUNAmfS+CAMkw6xTHrjxQDTVDAHF4qbA=,tag:Ano//8t7dDjqfFVmdQXsfw==,type:str]
+security:
+    acme:
+        dns: ENC[AES256_GCM,data:BxBOnnQZLgs9Y6VSL5umzCHmvQTgxDyTRftnR7zbzARJXaRQP5tnUyZFB4oBhO5d/s4TUEwXhSbbdjBttEuI1drh8X2iNTnWtKaSx7TPFhJJXD0jN4eOSgEyZ0GQYieLCYilpiMOgpkTnSdsFkKkQylCsRcu6eXAgtvZYVg/c9SxnNgT7syC2C+VqsgkhYdrHdtguoGigpyfQ3wA4hOABjDipYGw46NHCx1jPAi1mw2txg04/GCCCggvwV6b/EQZ2rA8bBKM2Stw4wYZXvU7V+XaNZngt1vxBSR4OqU=,iv:Gw3mM1G89NdddGdiCrxuOfChudsIXEvABpoSysQfXp0=,tag:2I9lq1h37OhFEflkaj5/BQ==,type:str]
+    restic:
+        password: ENC[AES256_GCM,data:tjdAanBeEtMm6EA4xLH0d1XbCk4=,iv:PXwy9Cm+iT0i4UpNrNEZUpAdpuvqYkdSoLMkWeiXLWE=,tag:G3Fosmuva0/BYQ1VEn0pQQ==,type:str]
+    minio:
+        credentials_file: ENC[AES256_GCM,data:ZmdxboXeY7cbQ5b9h5JKO4uewTZC8XCbg9T8KvCA9afjwWjruuoHZ/LcXgEphdwuBB6CpcRqMze+21fT16svqUgLgVcCRLmtx7E=,iv:s2b4KtQM1fkMVxAAGD5sSOkum9Lhcy1khV8GabbhFXQ=,tag:aHL4SUuOwzU5V9Wz6otS0g==,type:str]
+services:
+    gitea.nix: ENC[AES256_GCM,data:51YBcqkQJFbvJEZ7U9Fr6YPqtF6Sn+huLKPQHXoIFlrhlSTZDtGpPci1MQVI7X/UWSpdCTtOa22doguWEqWG9rUaekfmDTL8jb/WbV7jtDYnFINE1NRRFb/RIFmQJ/UPODsesewtg8vNPiU9ZAQgep9ttPMpqnRWkEHcFisTrHO1gZ0D6pF2EFbBEZX3Z5q7rPcr5907KiF0HALFueVqzONGCYGxmzBIFWA8Um1wYKlwWieqjos60Ip2,iv:wMOKydq0NLazAQC3joFTyhbmEIvwDGFc4sEhcQ3a/gc=,tag:c5MndmKCjBm7u63R9VWwgA==,type:str]
+    minio_scrape: ENC[AES256_GCM,data:Kk4HMqMMfAlfrJf81rdgaQVClzYz8di8+qTjRfR/V+QV19aqlhyYtW2Y9XirntwNiD5OIjyunxd6uI+WsKg5DRpenG5o4KjPXjU7e5WoyOIBDnUAIFnnW5WAZkVrBK2jeX2DU4dFz16MRRp6JSDCDiw4xnvSu10FTbSvcAFmLzcNzRUvGR28CIdX/8eyZL3RORMueDJ4zuy9siGgQiWkG3M3UA1g/hFGukyS2GiQkrJ9/68VdkpJtqqV7w29m5hw2Z9c9A==,iv:kTeWuWHRvgLryK4F/2oEvwwu3BFPHV54jXsYEk1anmw=,tag:rUVrVWAC7K8mvn+rRlbsxA==,type:str]
+    old-homepage: ENC[AES256_GCM,data:8onkNrhxaIQP5XJWcypXHKwK5aMhGx9zDEE5Xgi7JqyHY0DIAaqLYZ1EFZZDKUXY7Ry7fY7o/XhB8rpOSfBIg6eQ4zaDAqP8zAL+2DCuviVJNWLpvEgvkechx3M2cGkL6kEmRvy4Uc/+AdY/BZsjFfhxy60ZWKz2x5NYmnzZdMbRoLVXs6BLckE3OdHQ0IXOdBooKK8hHzT+cC+yld+UMYSfm3eugyqFAyIhIIsmrG3cx1XsnEXNGgU7Ujyd6MC0L8UsLj4Fa6vc3SeiHSs=,iv:9A1LNDDllfovoPMxR5soVOao4u37q3locM9c8GLMPcU=,tag:pILeZxXJG2ODUo7g2Y/m9Q==,type:str]
+    chir.rs: ENC[AES256_GCM,data:6nV8N4vmNvw13F/EBvLowuGIq2dxbfc2khankM/ysKAZO6he9t8zxrgWOhPyWBD0ddAO35KG2KTpOFUlUZSwQj6ZsuCIXPsqWk8kXOZXaj0LwDKlw80vHe9vn46Y3bCMo3wCczlbTemucrC5fZqtMKF8EkP9z6mXRLWYmeYMt2Ywtt7veZ2U65lKm0TMPyej90EJk6jv8YZKYC+ccT7oHulhOD320b+6hCsf23s225nmwl5l9Sukly3jINCmESGp13L+Ifa5tsPAOTODM8/0Oa3T0C8RlES3xo5oEFBXrtRfr7NjhIqNq8dxht4GJ/s07rzR9ZtHy1fkEayTadeX3HKkRxf59C0JzG07ZGEADfWZ6SSVZlaK/u1PaIQJv8VKJZeR0PdWs1fj+yGKfAFF00Mat2/P7Icpw1odc1xlBIY7iVtbFXYIQc7EOpdFah2z94lZ1btOm3tPa1kYL1bWxnVb7nibU7XrbasQWQ==,iv:8DMUOGS+5ojxlhxWIWX8VlEy+Cb5pG05sAX4mS5S/2Q=,tag:jAq20fgfbM/NJrCKUZwy1A==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1k5emdjljm5amrquky2tn3khqt38wq62s797nujxuhp8j6x7k5p0sedv0q2
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4akg2SDcvV1d2Q1JaRWxS
+            clV4YlY4aWUrY1U3ejIxSTQrSmNrQzE1bm5RCldJeGxFdEpzVzFzSVZEczdIeHJD
+            MDl6TlJUUTBmcjE3UVBRYSt5eTZWbUEKLS0tIHZ6b1ZyQXNSWWZoZHRPSm5FdWN4
+            ZkZVdk5jL0xxT3haRFg0WVJCNXJHYkUKlHrEyD0atydLMEX3S9F6b897G1YY88zu
+            l6gfV2/si4TXJPUwhfJej56RLq40i2uA2ZQT/I3XMccojMm5DvtS0A==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1273ps5thcy70ckdt0270s2nysqgu48t38pq3wq975v3y7mf4eavsw38wsl
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsSGxIb2VFQ1BqWU9BWng2
+            NHhRc1A4TlZtTlhtYlNFYWczaUsxbW90bXpzCkRGYWVScXZkVFFuRVV2RGdJbW1B
+            ZzFFYUNzMHdpSTIzQnh5c2RaYUw5cTAKLS0tIDRLQ211Z3JuUE9DaUZGWWh5S1VS
+            QkkzbUVrVWtYMWhLa0N5MzJ2KzV4MW8KEAtd2cnwNH01rYUFr+qWyAhHvUsqsxXg
+            not2RQLEIGbo80Z7CMIwqCIpUYOL4m70KlEKrFzflXFbOFX2en82iA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2022-01-18T07:42:37Z"
+    mac: ENC[AES256_GCM,data:WP8Ok6QP5EW2AIORxFawxsM7M+aXahDjSGJxDPHYT5OOyhPCclgprMGH5CPMXGhynO7sop38pmx4HC2KBxKvCwpU4yFdd8d2qKIxzf1/XCMvIIYPJ1xq1gu10mvdDtxbCQVO0kW/Vhg11it14ktGf+ETFXA7DxlqDs2kwRIswM8=,iv:IUQUUoq6LseIcbnPOU6V/zuF5f0bkpnn9G5uV2a9Mb4=,tag:rPzcaeFSCpBqhNbUqjuFxA==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.7.1