diff options
| -rw-r--r-- | .sops.yaml | 7 | ||||
| -rw-r--r-- | microvms/kanidm/secrets.yaml | 41 |
2 files changed, 48 insertions, 0 deletions
@@ -12,6 +12,7 @@ keys: - &miniflux age15ja22wd9tt60vn32sk59pp6c7vtjsn8y3rypn8qfnvxthug8sp0q6f72uh - &stream age148r2q3cy9sjem37rvgtcc4qjx8usxkdg77pqexa56gmcexn58aaslh3cnj - &cgit age1sqaw64c7vf2n937lhytqg5l39hl9ep47gqx7u7j8k5fz3w4ksv8qp9jjeh + - &kanidm age1uvsnunm3225l0cm3dvr9kew2cy8qhjv526yye3adm7g97kzgdpqqr7a04x creation_rules: - path_regex: hosts/toaster/[^/]+\.yaml$ key_groups: @@ -67,3 +68,9 @@ creation_rules: - *admin_toaster - *admin_frituurpan - *cgit + - path_regex: microvms/kanidm/[^/]+\.yaml$ + key_groups: + - age: + - *admin_toaster + - *admin_frituurpan + - *kanidm diff --git a/microvms/kanidm/secrets.yaml b/microvms/kanidm/secrets.yaml new file mode 100644 index 0000000..4f7c09a --- /dev/null +++ b/microvms/kanidm/secrets.yaml @@ -0,0 +1,41 @@ +mythicbeasts-acme: + api-id: ENC[AES256_GCM,data:zy5qy691XEJ8v3YtQts31w==,iv:RV/ubyDcZKuDTru4P2oJsvT1zmbBpCkgiHFAP5dmN/s=,tag:RR3zKpOqZCe+s9VoPt/yEQ==,type:str] + api-secret: ENC[AES256_GCM,data:snPJy8QIN2o3LZcgdpC9Gs58qhrF9+K73bIhzr2H,iv:aD4P4MIw6Hv9n6rqC1Y6Ffl0uADwvS5THmlNHPbnEks=,tag:GYZDt9hBUkIsCFSghyMpPQ==,type:str] +wg: + 0xa-proxy: ENC[AES256_GCM,data:SvP/GMDbNoFn1nS7rUQRVRCt9MX57FpSIWqFmhc4iKESJeWY/pwUkOLxS0w=,iv:dpylo0xmS3pQhkshTs+Ycx31WG//UF86JtvE5qUkPNs=,tag:OMKQEu/QvdrMGzL/H8pTZA==,type:str] + 0xa-mgmt: ENC[AES256_GCM,data:2iNkD41uteuKVm4Yw+AnttUPmAUpS5oKE+g6nOKy7PdpVQ5VdyFRd/QuIH4=,iv:uZiYDE/EYAPYXzYIEucXbEQ7mllCPXGKEfXwj6HYSWg=,tag:5RqhccLfjPYOR/pcwdooFw==,type:str] +sops: + age: + - enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IHowb2lXdyAxanFp + L0ExNGlkNk1lWWJEekJsZEEzNEl3NkJCLzlEd1NSekN5UE5VaWpnCnE0bGI5QnlG + WHYwR0ZzajA2RWQxVUtBVVJGNXFwcUJHUVdWTzJPRDVyZTAKLS0tIDhmZjhqSVp3 + b0Q4TlFtaEl0ajU3bmk2UzBab3dNU2R0dWJLUzk1NFozLzAKXheGLJG4z4y5O0s1 + GzVgPT8RTKkxuc4cFmQXvZ5d1FIFE+KruoyZAfLtVlhOjJ1QiCiGdeY3pbS2MbJE + YrwNag== + -----END AGE ENCRYPTED FILE----- + recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJl9iYG5oHBq/poBn7Jf1/FGWWbAnbx+NKjs7qtT3uAK + - enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFlJOElMUSBxOCtB + S2ZzVWFRdWJGVlJLY0ZFanh1ejEzOWFuUW1FOEZob1BHTFl5MEVBClVHazJwaXFC + K0V4d1gvN2FTeUJ6aVRqdjJmbE4wSUt5UVJqK282Sytia1UKLS0tIHBZZ01rT083 + SktLb0Y1YXdocTVWNjNvQ0NqMkpKVzZobXk3MXBYdVBHeHcKfK+22llPlYjQlWbE + FXCdG93V5UBS8+M4w4TU/VCHO1kFKteQLIzdkOTfiGjeDrK9aplmPb+Vqn10vN5r + hLixXg== + -----END AGE ENCRYPTED FILE----- + recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAXrwZsBChUhVuF5gFEfj8GwQlnrqEttAytS5jVCfuE4 0xa@frituurpan + - enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNNUgyNk44ZXpZSU1Sa0tq + VFNvZURaVGVTNTBoSUsrVWx0TW4rVDdrNVNJCkEwWXNKaTY0NVVaM3RPeGo4amJO + bkI5bytSN3ZxbUN5RlFjQnRsQmtJUVEKLS0tIE5pRXE0ak1YZDhzY3hqVHlFL1gv + bFJoeXdZb0h4RVlEVkFvOFl5TVRIS2sKZOhviYHbWTv5Kc9TNXGA8Dcg8yecehSq + bBw9ksLeuVCJmXG19x7oWKnZqwPnOgqoz+di5DM4+KOla76pfElusA== + -----END AGE ENCRYPTED FILE----- + recipient: age1uvsnunm3225l0cm3dvr9kew2cy8qhjv526yye3adm7g97kzgdpqqr7a04x + lastmodified: "2026-08-02T12:16:44Z" + mac: ENC[AES256_GCM,data:JKUysZxPy2apUspBowoS6TsvcpgNL0LHrhmokjqpcB/X1Om1I+OuCh97ZSDTyXqS6P6imexHa/CtCMgtdFzub8/qpcIHiLhOzEQ55/fdVtPIgoyyhru78og9eR5fgh7mZD23AgXyzVjPFCUSJ2qJN5esfsdsrNStPoTBPAm+yS8=,iv:9ZUF2Ve1oo5pq5jmZZc0BBOJz4wcXNrd9sa+dH2DKI4=,tag:8RwFLpidlvaif01YbPA93g==,type:str] + unencrypted_suffix: _unencrypted + version: 3.13.3 |