Add the host key for the initrd and correct the sops key path

2022-12-14 16:12:49 +01:00 · 2022-12-14 16:12:49 +01:00 · aafeb4008a
commit aafeb4008a
parent 849e7d819e
4 changed files with 68 additions and 60 deletions
--- a/.sops.yaml
+++ b/.sops.yaml
@ -4,7 +4,7 @@ keys:
  - &nutty-noon age1wfftrnyngg7nxcwvt7m590fwx3w7p4kkrjn9uprjq0u3k3ym4s3qqzkmzm
  - &thinkrac age15c2dquc22epmmndpmd8pa3077fdl8nyr5qehr7y0c9uvavrledsq326ak9
  - &nas age1c7y687sxh428wk34s8ws6kemu62mggafpt40rmanevgkuj5xa59q6f7tlc
-  - &instance-20221213-1915 age1s7xxqxk6t6rw3zvfylgpwp5362v5guqsf8vjcvjjdj7wcnnxncvqc62frn
+  - &instance-20221213-1915 age1elra3uklw8rmwkevqms2l4tsd06d5utqda9d2w4qvqpz898uzuesugxkhc
 creation_rules:
  - path_regex: secrets/shared\.yaml$
    key_groups:
--- a/config/instance-20221213-1915.nix
+++ b/config/instance-20221213-1915.nix
@ -43,6 +43,7 @@
  fileSystems."/persist" = {
    device = "tank/safe/persist";
    fsType = "zfs";
+    neededForBoot = true;
  };

  fileSystems."/home" = {
@ -91,4 +92,9 @@
    owner = "root";
    path = "/root/.ssh/id_ed25519";
  };
+  sops.secrets."services/ssh/host-key" = {
+    owner = "root";
+    path = "/etc/secrets/initrd/ssh_host_ed25519_key";
+  };
+  sops.age.sshKeyPaths = lib.mkForce [ "/persist/ssh/ssh_host_ed25519_key" ];
 }
--- a/secrets/instance-20221213-1915.yaml
+++ b/secrets/instance-20221213-1915.yaml
@ -1,51 +1,53 @@
 network:
    wireguard:
-        privkey: ENC[AES256_GCM,data:ZyqrBI7hbS0KhnnocUpalbi9BRN5osqAEJdoCok6WRIZvX7aUzAL7ZjbV8Q=,iv:PBBZc3t+OmsEdzTNdRfLpmWvQYP7BRh0paskD1SZsIs=,tag:ciesS+P/lf2KqwHrdTfP/g==,type:str]
+        privkey: ENC[AES256_GCM,data:n/AtI1AeXgJC5f23W3ztABMI7IhMPj9hxMvgzljFEpxYBYYkPSxcOJSbmoc=,iv:iGZE7eHxAu6f3rawCLd022pZtg3kNIYYlVoE5RFGST0=,tag:RzGn4mvxG827EcMP0UoDBg==,type:str]
 security:
    acme:
-        dns: ENC[AES256_GCM,data:EKvYWjzradH5z3ptYPCkqg1oYFMBSUIfoDQsFIUpiGxZLzxgNj3zf4WdJCwhgV5df4hv5tRvsFEaCVDQ5Tk1uJQpVMIkFLuj8pnQOhALOy6edn4sHjSwOS1L5J8mKWTd2dCIzV+0UJ6erufBhwgvrlznTkNRM3YLltXjh+2pBFIa5NVue77QWzs0YfZMKMWezrR+64gY6pWPAJ7m8gtD+oFNSC+xgHu3LgXioMXoEDhqVOEofr518rS1gezME4xhTN9fNAYL4XahUaFD1H3d+GToj80s,iv:AL/YmppFPDr0qgdS9wzxeBcH/6mDkhvKezPhMD0qm3w=,tag:u4rFbHUNlvo/RjKuEn6UQg==,type:str]
-        cloudflare: ENC[AES256_GCM,data:m35EgRacUOHFcqiwMyBPIPMZOq00eCKKGXko6n5fj7dVKorxI1lYFOG+pu68C7JfsnUr32t5TDMCsXhv7xD5BuCl2r6EZkpdzbZgnRqt7ijJ7fNUyMYjQ5SkwKzFb3R7sZcxpABt1z/b/ABZKs/VwaR3TQpGB/9CUv0p6kXN19lsfKOJo0LfyMdH2gf9RScq/IuVfpTm2jlHDwNC16qIZM9+Jqkw02JR7uOtD7jIvQDGN1FLqk7cXzU=,iv:qUbEGVrgq2vzVu66iA9mDBSgp1mrqyYdzyvXbGZwPrk=,tag:v443bohPg9eQZq6mUKUDSQ==,type:str]
+        dns: ENC[AES256_GCM,data:MCJn3e+7UeakfpGS/PHr0DASeQNpI5HrF7ycCB3m2npxUW94Mq8GsUJTo6iQhRhWugCUWGDlI4GU32yQ3fLfjCWECMtzQ79xBWATTur5wmm6CMTarF/34rNUZ5GaYFne3c8KNU6zx1U8JQa0jyfMUk3HAB9j7f1Xc8NBrtVpYTgRjmV2UFYWcsDfqOyZYNZVNlGCfC+8WUCfqYD1aLNi7QrpOIJqq8WB3TUbG9e5HMZejXF61zZkpggXwPKTykjlTh2fWpAgV1oLL0Dg9aXk/089YIbz,iv:SlPgO4kkQ62L1nOkTdlpZXuwZeYCdy8GbH1q1MaSvSA=,tag:0ySe/uGCLFa6FStAgbIYZw==,type:str]
+        cloudflare: ENC[AES256_GCM,data:RyP41CpX1JXgcj4rYOIcW3ILaeiUac5YEFKicU4xWHNaCT0rq3aV5PxQGi6UBDQ3UzfxrgH0OI73aDFSnqXNYYGsBQWI9Jpe8KPITUhG6z59kF2ZTJKXTc6Z2FyW+2vVPHlT1mJkOwLrPKg/ersPQIyUCWkhNYsdEYd5dExA5hTwXltB7sAjjsRZFQovJtKeO41My8kV58zOen9GkBWjYOcFqvB1dYhHG1oTWfDwjpiTmCVHnbMwH1g=,iv:UBoUNGLJzZpgy4syklO+WYXkRTcosP5mN+hGa8XgsB4=,tag:yhA4RbUe3kWHHSZcBy+N5g==,type:str]
    restic:
-        password: ENC[AES256_GCM,data:hYQ++ha83xy1y8KRzo/NtKZ/5Yk=,iv:AHav3AQDyRkAPbtHGZ3+4D4dwb7zqVI2q72PPIWlUiw=,tag:H633tTIkMl6PxnjBlshCcA==,type:str]
+        password: ENC[AES256_GCM,data:80XNExfwBIG3aVNQBc8T2fdN9oA=,iv:JM/HU7vhx28VA9EppxpFc3xRVcAt+kp3JwTuHmFpL78=,tag:pC73+XCsFGTdA+MbTihD7Q==,type:str]
 services:
    nix:
-        cache-key: ENC[AES256_GCM,data:W0mEttOcP4ldN5WTJzPWs6xK9bb4bcFQfRbstCoTJ0AzhjaMgnew1KhA4G+AA5GASpMU3MaikmMenm9+x5Ua/pOItVATMAtnkC84AZzDtB2A8haSoeaTk5kiD1u5DjR1wA==,iv:mR8ST9auU9kG8lMKr2E9JjfIokqK210g+t7i46kybKM=,tag:h9Xcph3s/h1tdy1N1m5Xag==,type:str]
+        cache-key: ENC[AES256_GCM,data:e9dQNADhH+8l1hTj+CdVu0gow/LmqrQf0HWiTTlFdY81t/8zWkdHdi0Rat5AKUS6x/oBCfTskIKcoRo0Jc0MYJhmOHtDLXlT+I91bSuxVzb9d+TwmhZ/Zce1yP1OXic+/A==,iv:DZ4yCi4YjsAulDyXl3CDCTXB21p2jZIYuDhHORpTE94=,tag:zXcgyBYgFv229seRDLGzsg==,type:str]
+    ssh:
+        host-key: ENC[AES256_GCM,data:oiy1thPKRVgH0XltFQCKwGMdLZde8zp1Ag1dL/el/2jXp1be1Evtr+kkZv56nhlaJ6KpYi5VsfrfpFVnKUkcYGUMmqVf2lFDu2fPcWB+PW7nol9K+sVRhHgTPP1wz385o5bof4OnbMF9sUbV0PT/pd4yAvluKq9s2vBBb2GEZ+HDBwkurmgVrFqUb66AvCdncXTpK47qpWZQMDTMGKqv5d1hJOoCCIulX3iJ4ko2xDD7qRlFtcdLNFLw3q4R6eP+L0OqoQs8dnjpIQOLVItzHTHTTcQRVoFvD7OMYSyU5RIIxTIOoS9tWzQu/QpHpO4cgjQ/GX09uj+a6/Cy8Itavd88YeSoYEPGwBYEciYLakFpNQ8aFl0yEsEMdZbfHgOUAOlbv28Mv93+RFMs5HrdIup/lZr5PsCBSsrMVkwJNVQKTxbN34LCTGOeCkuzohAwmwEVB/Ysuh23WyFKcdkGWAwlnVvgaNT5/TsNTCCI8Hf6fJecD4imWrJAtlXG7o+mnE+f0LlixxsnMgSnlkX4,iv:mnW23zPiSDoluMjQJEUFHDkVO6IT/4+RgAlaKuie3Qw=,tag:F+KOH/MkjrF1wYCR9OzFkQ==,type:str]
 email:
-    lotte@chir.rs: ENC[AES256_GCM,data:vCgsNVurVhcEBquF50bontjucQ==,iv:ITfgM4f7sMEhSUXYSVIwhTZ08ZTut9rp43ef6apPQhk=,tag:qJuwTl+Qw8be7frqGsb0Dw==,type:str]
-    mdelenk@hs-mittweida.de: ENC[AES256_GCM,data:ykQYOSu3+KG8mfJBF7fEJwk2i8i972ERJs/oLLdY2mnQcPCV+9+0YtWwz7HDiLLrUlUV7yDdyjgqVKzdONOnsA==,iv:1Eetui7FvsrXIUSo1vccjA1k+/Bp9OAwI3ZoVYuQVDY=,tag:R27LHK9hpzVolt5+DKLHgg==,type:str]
+    lotte@chir.rs: ENC[AES256_GCM,data:YrJ/+VG6/ZSu8g+PQxYUqwd1RQ==,iv:IeFhCrMQ1+4KvenylyizbwmCvsCPGvTiZAw5VyZb3Zs=,tag:xoK+aBykGV2bLqHles1LMQ==,type:str]
+    mdelenk@hs-mittweida.de: ENC[AES256_GCM,data:l57AwqL90zV2BIn04ZhhEB3TE0WAFNJ7Bci1ljHgYvki0mZ5TrLP4PYZ681uKdzN7xlFsDjhCQN0C+iuz3Aj0g==,iv:qXNQq+03KFTazggckGRqHbnuOHo2enmQKCSzAw6mqsY=,tag:HE+tenPWwB8FIilV2r1wRQ==,type:str]
 root:
    .ssh:
-        id_ed25519: ENC[AES256_GCM,data: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,iv:r622tLxm8qCzFOtx/9NIdIa3bie0PbbAA0lrjAUk6PE=,tag:/zOd2czwh+B61rKVtdVxcw==,type:str]
+        id_ed25519: ENC[AES256_GCM,data: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,iv:jyEKdE3+X5QDjpxXEA6tYjA2xIxqaVe+xHsNwnws+Is=,tag:OaRLPqlx0XWAknH6Jm9LyA==,type:str]
 password:
-    root: ENC[AES256_GCM,data:06rdfv4dBZC+2OUcyNsOpp+7nQLqFVhy3NWekckbG2wem0lbtPn8eAYMRREhQjhX/JC+0aRMqUaK9VK2YDuqp4SHONAw+ahEEDqoOacKngA34cxq++zfnWPXOCSAMN9nIgLe+77AHYq7qw==,iv:W19HnljIvvkwap0xOF1X7lit7Evm2cQgqLK/pAjo5dI=,tag:A6wzK2pUbvFLWgHJ1X9mSQ==,type:str]
-    darkkirb: ENC[AES256_GCM,data:cmNsv680uqjPZJ40jU6z3JSUc6a76TbMVpF+EhBzz4wWr5rngDBTDoxjLnOYzuSOlonyJO9IXNygjCq0a7bNu4SYho8nCLeFV0Dvq6xDMCh2ZQ+CjHgP/R7dsaRqmjcujthmB0u0beJGqg==,iv:6Sz3b3S/76B3DGYdLfYQuOACx7SSJNy/pkRAbDmkBOM=,tag:bc6+sqj0+Ky5lhhgkMIXJQ==,type:str]
+    root: ENC[AES256_GCM,data:wGFQ73r7XiOQ5HTtVwZfJu10Y0ZkBQ4YWm2MUCXyJy0kS2lh942aCOOobn+ZgDwZe2/esaaZi3UZ1sjmAMsRe4E5Fv6eJRXeqa7Ym+3Wj8LsssWIWBX06CkCS/LADUIUekcmDfGq5KLvIA==,iv:lvcSkngLc7phKVsFO0QooID62iI7Cm+qoYvW2nRo9Js=,tag:jTOBdy+EBrxMm5jyy8m3PA==,type:str]
+    darkkirb: ENC[AES256_GCM,data:ji+aKSQgrVNSASAr23hRppGLnANXKD5CI+pRk6Lb4DHsVd+U0enDu68SAR6vh5xt5t2NlICdnN6K5IlS8DQvNWC+3X5IJb5F0dfBZYcTnu2FdmX1D2XyoniJw2z4Pd2YZLB6+fiVmgcL2g==,iv:GExkGbbImSDOXc8nGD3vGbBr7AIa0ArhaOaV8rOnWGk=,tag:pZB/IBZzNL9Cuv/xNRY3sA==,type:str]
 sops:
    kms: []
    gcp_kms: []
    azure_kv: []
    hc_vault: []
    age:
-        - recipient: age1s7xxqxk6t6rw3zvfylgpwp5362v5guqsf8vjcvjjdj7wcnnxncvqc62frn
+        - recipient: age1elra3uklw8rmwkevqms2l4tsd06d5utqda9d2w4qvqpz898uzuesugxkhc
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjNDNpc1hrQ2xkZllYZE9Z
-            ZXdnS096WUpYaDlJc0ltTFJQaTZBQTEvZDBNCmVXNkxvTjVIMHZJeldtV1gxWmtB
-            cU83SnFzUmR1bU1ZN3hqTDh3eDUxS2cKLS0tIFJ5c1BxTmp4cnh2aDQvbFA5bzFF
-            QThFZnBQRjh1ZVNoNmU3WkdVbVJVKzAKmEeggdchZmc9kajfpRZfRAR2Tzov4jQK
-            NprycjlrOuozMCTv75+gbNHTRp4pxQq1JE5NejvyDWkzhL+s8Ikfng==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMQ0FwcWJNMVBvdmtXaGR0
+            MHY4WGhSV3VPOHU5NGJJMHdQS2dUck1Gem1BClF5dVFJbHdiV2d6SjBrWEpaekVt
+            OGh2NDl1eUR6RzJWQXRzVnRiZkhnMU0KLS0tIDFLd0FZaHBCbXlIOFBES0pTdzJG
+            bVJUcDZLWTk3MiszOWp4enRRQmNsajQKF8QJs/Wb0SqnvsQEkRKlS1Ms9xLIdyvZ
+            QCFAPclaOfaTLTiRJWXjDneBkMBduYKkRPiXCR+Bn7i4z8ixLXFmWw==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2022-12-14T09:48:21Z"
-    mac: ENC[AES256_GCM,data:4y4PsZInWRXUS4gVEDMMTo672sKbSCUP8bmoZZD1HwT5Qy4kPFZRWzmxVQgVJGlmXqOD4J1fgp5hSQosfBV+Wj8hS59fkvhFj2/XyiQC93wqmOqYSFahj+pLxR5khjWaVwMDZm7eUs9reh9GXiDYBmSVGGiwZAPxLvTKKvNrYTs=,iv:1YSyGiwJU+aAuLdqKjs8q0lQCsVnBh7nDzdRy3EJ0Qc=,tag:ipbetJAPM78V8fWd73/qsA==,type:str]
+    lastmodified: "2022-12-14T15:34:13Z"
+    mac: ENC[AES256_GCM,data:9DHLfOjTVKWbsWiUDr7pu5pyh6dzoExcgjRsAd2HMtdu+R/Y04Zy5dbCJpFu4mvyRD9GJ5aI4hufYRLvFsTuO9k8aWNUbqb1IYnX+D6zzLlecCHxEJ6zhm0PhjkcuN0XxFhBQb/aCUaisP891PqHM8ZbXblIaCdl4FFX/me3Cls=,iv:MnMInA14AxnCPjLYvksSdZVfpvcIjpbLSQRMbzSYr2M=,tag:eQsCwg6S60FpZ4bxaBMiJg==,type:str]
    pgp:
-        - created_at: "2022-12-13T20:09:13Z"
+        - created_at: "2022-12-14T15:34:13Z"
          enc: |
            -----BEGIN PGP MESSAGE-----

-            hF4DAAAAAAAAAAASAQdAjfjUrHnb/9mXfmsCSDK6QpbqfhU1XAALlrToFSZ1mV0w
-            ZyNpCaIxlrGdNddMn/jfrlJl/J1WIFkk9MQ81VXz0NIey3WRcj7O/AY8JYFKhoTH
-            0l4BVFtqFvR1bE7ycGrag7eC6CSflm8n7jJtJqoSe/LJUtH9mP7euGhoqCcVWlph
-            byK0DM+4t/6iZhLXmfX4gHZes3qv2wBZ+9e4VsO3TXaOQey298Y/TGRBm7u+wJ0+
-            =aNtG
+            hF4DAAAAAAAAAAASAQdArAhuYjHr6oG8Ixx4Jq/05otBrbOzJp06mI0lZ4aYTCMw
+            OXL+T/KDfWLgu4m9aQNsQ1rkNDhosNbc6PhM2Pse8V46SSEnaIOkKphHvBaxkDD9
+            0l4BdWxXhMPWuF+ZAT3HLEVyhyw7OIR5CisxDXlDW1LGeUqIRdx6o9PCUX5fZtNZ
+            /hUSNIfRp0WH6KWlPn9PVPu42Tbf7rO1cvd/G6uV1D372IRMQr9E/jYT1TTKwCpZ
+            =VNtY
            -----END PGP MESSAGE-----
          fp: 46C6A7E14BC7812E86C2700737FE303AAC2D06CD
    unencrypted_suffix: _unencrypted
--- a/secrets/shared.yaml
+++ b/secrets/shared.yaml
@ -1,5 +1,5 @@
 aws:
-    credentials: ENC[AES256_GCM,data:FJH+8to7i/5gNLWJNMr3iQDSOoufshcRADTZB8FSvCWbvp0j+OiDZmI2xjYLr2w29S1AW8A270l1QdqKxQuOsJM5NHpsT1GxeVfK4UyAfDU27F3LQ5gaeUN4U+vQVqUxgtmSwutDTYL736Xo4hO92w==,iv:GPFzsVrku3p5dnj/oxBKV/0A2gwEJd7H9Wmg6eggZos=,tag:FJdSbdBjjp8hi7/vgbtXEg==,type:str]
+    credentials: ENC[AES256_GCM,data:Y+SbRqf7VotqN9CDMa8SmwBx+nlODeQScr7nlH90qyoa+5GtdDlgvqtbHJ4yE7QoiOBsG/CZ4sBnpXadyUhM8Erq8M2q0CAvlrb3oqgtNAgrkiLueqPAC6kTVBhsDolgWdrkMA8FVifwwqBtns9M7Q==,iv:4XheIFj90luZWxErPppOdphbw7ZXlGbeieSUl97eHAA=,tag:CrCDqHOXTRezf47vsdVAdw==,type:str]
 sops:
    kms: []
    gcp_kms: []
@ -9,60 +9,60 @@ sops:
        - recipient: age1273ps5thcy70ckdt0270s2nysqgu48t38pq3wq975v3y7mf4eavsw38wsl
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEZGs0TndublFyQi9yM0R4
-            NmdoYTZtZUtEU05pa25rL0hWMjVTZGc1WHpNCmwvNHJpTzg3ZDlkR2hEbzJDSmw0
-            SjI5bWJ4Q1lGZDJvS2trdkFSdVZ6dlkKLS0tIFhhaFhHOFZ4MUhIYVpsQ2NqTGxn
-            WFBaSGdXRTIzZUVmQTZVc1V1cWJETUkKyoqWYVV07acsjWOX+7B1LO2QZwCUhFTT
-            tncKrSCRKOryRi/sCBI8wTuJ5h4ZOnFGuYcWe7rX61zv6MJmB7PeZg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoMFZwZWNzUWNoeFc4bnQw
+            RjFoaDNtYy92aVl6dXhuRGN6SUZ6b3EraDFjCjB5eWxmQ1B0ZUVHUS8yV0p1SnR1
+            RW04eU1qNEc4bS8wbjlCT256RFdEcFEKLS0tIGdYVFZKLzN6SC9naFhNZElGR2Jw
+            TnRDTjVXTmZoUGtxenRacUtaV3FoamMK3J4/2SzgqxKIA3rcWVwo2y9iCdOzwYsG
+            KHW5as4Z8HxX459dxLggCgh0c/esncMx0moF1yjZklzbowYNnth9Iw==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1wfftrnyngg7nxcwvt7m590fwx3w7p4kkrjn9uprjq0u3k3ym4s3qqzkmzm
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtcU5GeGRXcllRMFdYclFu
-            OUtNaFVWS2xFRFY1Tkt5V2pBYzQ5UkhMSVdVCkF4VXloNVFEMGp3MmFVTXRZby9T
-            eldEQXNQK0UwUk9pRXNKeDNNdjJiZWMKLS0tIGxITmhSalZabSt3M3Y1MWV2WFg3
-            Um41TWc1Zk15WVZleWw3YjBtdjJrK3MKChfeKSRpvkMVc9XWas94cXOeftKEMD8v
-            Tbs80DBDsCRcA5FXyA8OglYMsszgKbBwO402ziy8XsZ2ndsKbzmyCA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHaHRTNGxScEFMekNXNVJH
+            QjE5Tk1oREZHYnNFYVB1M2FGS2Zvb2lNeGhzCnQ3YS9GYWZwL09WNm9vak0xWFZa
+            R2JOUjJsWTJaMTd2bGRQcWYxTWk0TFkKLS0tIFN2RUlHREtiY1oxeS9pU2E3dlJX
+            SmRtTFBEdGxOVkYvNHdQRmhHek1KQzgKlRrNWOdjgK+4coRPPNS5S/nHd5qXkkkg
+            fz7QbI1YKwpkLNI+xwbQ9WGiQOBHeD3GSFPQpz3M+cXJNiyp8VKo0w==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age15c2dquc22epmmndpmd8pa3077fdl8nyr5qehr7y0c9uvavrledsq326ak9
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtY09EWEI5YkI4OUNHTlVj
-            Mnp0V2hCM2wrK0JCQVY3RmlxeGRFODl3ZFNjCnp0RGgreElHMWRNZXo1dk93RG1w
-            Q0t3eXo1NW02M3VSS2NGOURpQlpxRm8KLS0tIHJlMExYUnE4L3M0T0NRVEZ5SFd5
-            RkFzemNNeUwvcjZsUzRvWmI3SVVzMDQKwG0YSsitrfuCKcPo9jEwIkTx+Amu9oWv
-            9gWMndg0mH2V+3gLfnOeWgLO7q00wil10/QPYtBv1eKHWbeflXhTcw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPYUhGaEU5QVVkOTVhdDJD
+            OGhnM1FLMFlKanAvWDFFaFFHYUVDSDV0Zmw0CmZHNkNrMTByWHh2SWN3bXVmM0NO
+            Qkd2dm5OTWJWVG5ETGR4Q09TcjNPNlkKLS0tIE9pTWx0ZEV6bW5qbTN6QWx4S1Zi
+            RWdTbVNZYnhzbkJEUy9Ic25DZjRCaEkKg/8tt55buonWAhu5mYwv+wAOJ23LFiml
+            vuwafuqBSkMeIOfISUAH/AfxekZKWiQWY1q4KEaQHOIgLLj7dNTE3Q==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1c7y687sxh428wk34s8ws6kemu62mggafpt40rmanevgkuj5xa59q6f7tlc
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxK1p3QzdJUzFKVGJHRzBV
-            VFkvUFVob3p0WE1RZGxWaDBVUTl6Q3VlS0JNCm53alJXUlhkWnR0OGVOZTdVbTA3
-            RWl3dDQvTEpGa0FMZFRac0VxZkFNYUkKLS0tIFdZUGNVejlkNzNkUnd6Y1RwZ3VG
-            ck54anBlVFZwSHhLNytYUDdqaFU3QUEK2EEhYevcyM2Z9Yzg1yll8VvtrOJ6rRts
-            2UUjeIefQcSdOPQ+sAWC5U4nWlPodjbb8vrX9rAakVPeJsVDR216kQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMWXJmejhjQ050em4zVmVR
+            OGR6N0pNWVJTaUovc0xhU25RQVZnbDRZeTNnCkVFd0xBWjkzZ0VMc0l6NUR2ZFlJ
+            a3E1YXYrOEs0N2NQWVVYMlRKUFdUazgKLS0tIDkwbHR0L3N1Ym1FREoxUUJKdlAw
+            d1lDMUhmejZwdTNCNzNJRWUzc1F4bmcKYC1dsEwnVLTApaJVmdOFgJSAro0G3C/9
+            hG2badWVS0yPO1VjbPq2JFl6kj4CvoXtUvWs85ph44v6NqVc26fO6A==
            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1s7xxqxk6t6rw3zvfylgpwp5362v5guqsf8vjcvjjdj7wcnnxncvqc62frn
+        - recipient: age1elra3uklw8rmwkevqms2l4tsd06d5utqda9d2w4qvqpz898uzuesugxkhc
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4V0ZVTmxScWhOWVkwTnps
-            d1VZRUdXRGNYemNuTFJWWkZlUGM4cnUrNUhjCnE2cVJ2THdJQnF1dk9FY1M0SnBM
-            UGNJWmVTSlRIbDhOVG45Y1RVM0UrVXcKLS0tIGFJTkdwS25MS2k2Q0hwbVlvU0Rv
-            SEFmTkdnWkw2YTVXOVNIcXp2MXhZczgK1i8ibaQLEVdXcmdmeSQBNwt/glN6pd9Z
-            8xLX40YKUnGUBlLHkQJPEOsZvhTDq+4PLd41S93Y2kv8p1y+IKnQ+Q==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxdUpZY3ZtbDBZbGFRRHVj
+            eHduWlNFNlE5bURMOFIvQVIzeEtRR2hYMmwwCmVWNUNkZDZmcVl2RkVFMEVCdW92
+            Yi81R3B5QmljenRFeW1ZWkhCLzI4SUkKLS0tIFpCUUJ1ck5MbkNjSVJJSGEyZEQ1
+            ZFNubXhZdG1KVDB1d0FWOVVDS1ovOHcKO5m7BFeZzt+nBfaZJoH8Pkw6aeDExQrQ
+            Gfp6KQ0oJOuquhZtMW0GpLuKnuQjjGEBaIbcZcR4OosKKlLYfOKabA==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2022-12-14T09:44:37Z"
-    mac: ENC[AES256_GCM,data:T1dbLpD1LU9JsMafgzA/nBzM/hcqhZtir9RMrARaEwqDnA2kGra0TWIG0SIt2adi6mym5OJXqowswE2kkBqqybV1nG/spZBaHYM4FkRV4mec0mkFGxCSG3CqiBF43dZfM1d90sUf+QC+j5hnvL75y0AkjH8qDjmMp5zLkpzKj5Y=,iv:r3yFan7qIunwSIMJQuJ6byk6IAGyUhIu42UTnVkjcpg=,tag:e/PiaaMzZEG3OyV8bPAaYA==,type:str]
+    lastmodified: "2022-12-14T15:34:33Z"
+    mac: ENC[AES256_GCM,data:8Fnws66NKfdVl+0+63HZvgt+PTxTZ6L6y9sh2hFtWR8RNeDTmtfZXOrJhJjU8XRUogQovnv+qSn8hmMRQ4f0tw1+jEIjEMqGV9ex2YWhsryvuhKbXH11un7UYObCxiwhTbxq6aOQLJ+74V3a2YLWTnKBd3X383EV1QrH/quXOIg=,iv:8yIW+mCveO59Kb4dXxIUzMT2/PGfknDDBoxGBRQNaE8=,tag:4BJpIdEeMeNCvOEXmvsSPQ==,type:str]
    pgp:
-        - created_at: "2022-12-14T09:44:12Z"
+        - created_at: "2022-12-14T15:34:33Z"
          enc: |
            -----BEGIN PGP MESSAGE-----

-            hF4DAAAAAAAAAAASAQdABfkbgMrxNMpI/9PEceVXQqEyHF+JLOqPdbldJKvITBgw
-            AV8pN2F2pEFwIHoARpi42LZQpqMlbNIgRR7x+dPmv4UIY0BwqcDoiX6D8WHQIW3I
-            0l4Bvej8D2IMF/8sA7JytITOBa5PZwuz/doyM10jisMeE/gRSA42GrtLtE7+YxL6
-            Tj1UAwMmU70xKFBntkvQwheRxkKY4JqXHKmVtGwPJAPVYKRIIBy5L+fdF9MQYPty
-            =q380
+            hF4DAAAAAAAAAAASAQdAMW79V8QcYwQhIqE73OYr7gGWK6m1AAcCAYO8VQXYwyYw
+            56PCMCKv3Xbtq7g021PPahB55Ql2zQWagrBMzAkPkVpdQNHOSeJcr0Rktu7eG5jR
+            0l4BuHFnOvcl82VLNPTROvGA5BuZ8XKXUxtX++E4FvQHin52lUydeaqOu+uIQ8W6
+            1ov++Ala9d8RW9S0XaIWFHKvhpCyWmDRO1110+P46tmKAG1Gw9pwvxJNyyoJWAri
+            =pF2W
            -----END PGP MESSAGE-----
          fp: 46C6A7E14BC7812E86C2700737FE303AAC2D06CD
    unencrypted_suffix: _unencrypted