use keys.yaml

This commit is contained in:
Charlotte 🦝 Delenk 2024-11-11 08:45:56 +01:00
parent 5b97cb7a7a
commit f43f7ae8ff
4 changed files with 35 additions and 26 deletions

View file

@ -35,7 +35,7 @@ creation_rules:
- *pc-installer - *pc-installer
- *rainbow-resort - *rainbow-resort
- *thinkrac - *thinkrac
- path_regex: users/darkkirb/home-manager/keys.txt$ - path_regex: users/darkkirb/home-manager/keys.yaml$
key_groups: key_groups:
- age: - age:
- *base - *base

View file

@ -1,24 +0,0 @@
{
"data": "ENC[AES256_GCM,data:grBVw8VpvV+Z+11ZzqYTXoU6Uw2sNmVnsu0PU6PI2dbvs39Pae+OoORsl2b5NfaXQxHYf7rBdtDywVsPX5roCkPoXPeGsjNxeuft7U44xZVXUsfsglYALWTle5irjU5g+DH699666Lgd7wpvEjzWY6x+dvVuRpMv+j11VgBrZsjtf4ryEJpkYN99jENycOsHLUubeeNnwWVhQT/XAaA+A7GJavC/r534lL/2BuopIZUpMyo8LSma4TOdxjfqVa0M2WUvUGdbHpwfelkkMLFlV5EuZyv5Dbzjs6gzubjCE5R6vUnkISfVdiezr2A7KfBqf3R03rn33nyWrsu/T2vAvCjEsLxarSqDdl+iH/X7XsTft0nIwMfFFtAmBUKM86A05jhpcw0IC8zVlnWtjKhsEK2w9fCIN2XfJYQuJyE8wcxtt8psFRyCFHwxetFXAdjLyscMv9ObYL6WF2nIiVA2ggPmtbpJlsVyaDi7vDxxMlMem3D8HHN2zISEKz8xxp+WAJg3U+RaTMAjUSTzLUMHqdLq+vXo8YcNe+1bQ/vTJMxIRXK7kjF3CbxXzqgWGpvIq/d8w0y1SnIpbCMxYnPKigluAuPWumvdr6nMeECvGH5rDuHeXI4MC+zKKBhz8TqjpbGx5e4X0pMY,iv:tjngwRqzOYlIv95EZyA8GrxfKXpQbqH8J/bbHQiKxDc=,tag:F3P2NBYy8HA/j0UpyOUi7w==,type:str]",
"sops": {
"kms": null,
"gcp_kms": null,
"azure_kv": null,
"hc_vault": null,
"age": [
{
"recipient": "age1tltjgexkp5fz3rum4j0k66ty5q4u8ptvkgkepumd20zal24g2qfs5xgw76",
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzUDVMZHdPM3lvSkd2OTNP\nTUczejFIUk5NVU1LSFdJSks2UUIvZ3NwVUdzCmpQMEgzNmlvVnp0MW5NZ2w1Y1Qz\nRStIYU9oMGFRbEZmWk9VeENVRldwNEEKLS0tIHBLajlPL2d2eklZaUZvRDhBWDVW\nYUxuZVRtR1pxMU1MSFV0QW1sU3BaaXMKCVHt6/wp/vMbxxC+gI241fZx0sBloYRK\nN97rm72FMt9mjy1ERwPDy2dyXxGjxO4ooxB4G7sRGju/lbgC0VC9bA==\n-----END AGE ENCRYPTED FILE-----\n"
},
{
"recipient": "age15g6tzvcmcp3ae4hwnn4pwewat6eq9unlhtjrlaka6rf94ej9dd5qqpgt7u",
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWbW1RdWdBMXYyTy9zVC9Z\nSTErQUtuOStxWjRlQVRNUVdpNlpFa1Q3T0VFCkkvMURIQWozOFBaNkdNbWswdjFs\nQXZpYVBYcWdwWTFDL0ZKNjRmVDZuZzAKLS0tIFZ1MVJHZURiNFRWRzVYemhLd0sw\nWFVEbmpXVisrdWNSU3ptUHBMb0JhVHMKI6aV4l/B/ozktYllAzeT1nj7EjuccWJD\nTXUutNaZOMHkXycz8uphr3nlgzwyrCMeNRoEPt6k0oZSTSYT1cThVw==\n-----END AGE ENCRYPTED FILE-----\n"
}
],
"lastmodified": "2024-11-11T07:27:21Z",
"mac": "ENC[AES256_GCM,data:7L8fWWMeYPJCMz6fRb6IuGwWd7oZOjqB9KGHJ26SnhVKYB9/mNp86CC5UMi5ZparnJPSG/iPqnFZ10anumFAx9j/qi81qVg64uwFQWN1NpF00gnDaoziTFgQ1W++NHJH1+H0dDHOXGgo15Tp6Q0HEyget+fH/fz2BqCPqfNcFxc=,iv:cGHybVC+bL/GyKdj24PWmZ866jqdAX5R/lCPUoI71NE=,tag:PRG4eEFApwpWMGNqxaqgFw==,type:str]",
"pgp": null,
"unencrypted_suffix": "_unencrypted",
"version": "3.9.1"
}
}

View file

@ -0,0 +1,33 @@
.config:
sops:
age:
keys.txt: ENC[AES256_GCM,data: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,iv:p2Z7ym1g+JFbWSeCysURKcH/9ow6KzPf6WPa19Wf4FU=,tag:lhTalpb2GOV6tRYOatchjw==,type:str]
sops:
kms: []
gcp_kms: []
azure_kv: []
hc_vault: []
age:
- recipient: age1tltjgexkp5fz3rum4j0k66ty5q4u8ptvkgkepumd20zal24g2qfs5xgw76
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4clo0REE3VnVxMUFYWFVa
YzRMcVBGZGNDUFpuT3RRejRTOWFQa2h5dERrCnFhWmpCdk9vNVphV2h4eTJJUTha
MUp2T3A3MWZLclZpNHFOb0huVWFVWWMKLS0tIDlkb1pPVEh0UndYdDBncG56VHNE
YXJ0b0J2b0k4b0lrWWVtWUwzcHlsbVEKdVLrTY5Xaviy+JF2sSqsPvVnkHJ8KK+D
33QUoCH1awLcZSPZPyvAjEIZ/MKMNa4RYYL2xUhlmwzXW1I+Z8voYQ==
-----END AGE ENCRYPTED FILE-----
- recipient: age15g6tzvcmcp3ae4hwnn4pwewat6eq9unlhtjrlaka6rf94ej9dd5qqpgt7u
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3Ri9zcTZ5M2hDMkpEeXVG
M0R1NmhrbjJTVWVUSkFGa3lIa3FTS2Z5bUU4ClBWT1lEZUlhLzVzTEN0blVqTzRt
emwwK0dkMk10Y2xSenBZSHJqalhGT1kKLS0tIGUxRGRkUTRNNVVoYi9yTUxaQVhC
MTZ4VWZ0MEFaQjZzOSt1VzBDWC9aU0UKHwylHC9EZI2QMb+B+qCxaikRL5MRHBfd
UGr6njNSWIVcg6tpNneXp+bC6k6HLLPTg2b4Lupt+WRnaTFLY8yADQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-11-11T07:45:30Z"
mac: ENC[AES256_GCM,data:XG46XbOQ7hGb8t93WDmr4zCr92KOJTCJnOV9fxGOl0nvD1vnqoVX8oFXwCwq0oBF8bGdecWzmeetVTbYjgn0y4e2nhZt8aULL+5MAV9zmVbfBDzdPtyV4yOdDfMX/0Vaf/nlXJgw0pNK+wqLCRXe1UG23wq1IttYlhWPHaEW2AA=,iv:tGJ8u9BSxyBVx620NC5M1znHur2K2V6I5/qsrtnxxs4=,tag:hPKudVRE/n5Lb5Zg4kFtVg==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.9.1

View file

@ -1,7 +1,7 @@
{ config, ... }: { config, ... }:
{ {
sops.secrets.".config/sops/age/keys.txt" = { sops.secrets.".config/sops/age/keys.txt" = {
sopsFile = ./keys.txt; sopsFile = ./keys.yaml;
path = "${config.home.homeDirectory}/.config/sops/age/keys.txt"; path = "${config.home.homeDirectory}/.config/sops/age/keys.txt";
}; };
} }