Gleipnir/nixos-systems
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
nixos-systems/secrets/restic.yaml

92 lines
6.4 KiB
YAML
Raw Permalink Normal View History

Add separate restic roles for separate credentials I don't want corp and prod accidentally smashing each other, or being used as a credentials escalation attack.
2026-01-13 14:57:33 +00:00
password-corp: ENC[AES256_GCM,data:hdOuBzYIKw6ZL97rs/W82NqIbux3o8dHjqb1Rqx2NRVQ0h3/,iv:W75AdM1EeKcSNeu52NqKDmg20JX5TAVzy2N0XvnHJfw=,tag:faqTI48m5tgD2MGlBVrnUQ==,type:str]
password-nidus: ENC[AES256_GCM,data:qZLS/orQFXcx1HDpSvFuaXq+c18AIuYOpxqj3OL86W80BHKT,iv:f5633bn+EIEiwENTVAQ6MGj30eKktNbLJT4drBPANOQ=,tag:bPTVe5MuD7NGTSIubJoEsw==,type:str]
backblaze-corp: ENC[AES256_GCM,data:X/DKQ8rs8R3IofS7HhxRpRT+NbE8TZ8hsND9+iAFzfXTyGQeK14zj6ZhUKO2XfaHpsrSYbbXm3cQ5SqJF/ZZ5UQ45yTnlRm5PQ5yLs8BelCyYtAz1lDhxImD/1PWWJLx9QCFmll0fOIhSbhbZvKW5npZD/mjEpWHpgmJiBOyPX49U3dBs7/Khm6sbifzsjEtLTE5PiOu0CMzekc6Ye8=,iv:KM7gkipEbSzJP/7I2lugr4dW4B+vS9CPSGsZR162ERQ=,tag:lEzhPKV2tRVk6Rh28aIVjw==,type:str]
backblaze-nidus: ENC[AES256_GCM,data:wxtqelZpNL/jufnmlE6gpXHKyahTKsLi/vG58F8BFWQOAqCXwf/PqhujJmCCS3t2vz6ezHoZb6Tc/QDALhHwGxEOYiQdhxr0J/mI3aOmqKKr9bON0byS16J8aCsHUJ8Mp3+ex2c2nIgwMydo0STPYrDpSpVIHrI8J4dofVezGVa389CVb5HM6zKJ9tZUKJXXGVdXJFMNXF8aN8wDuB4=,iv:Ay/dYKRJDjxLXGxhqopFd7NarhK7669oj4fd1oOncX4=,tag:x4izw4LBcZDQFGiXh1IKzQ==,type:str]
Add backup for fieldseeker-sync files. This required changing the directory of the user files so that I don't accidentially backup Gleipnir test files.
2025-09-30 17:46:46 +00:00
sops:
age:
Add new staging server key for sops
2026-02-18 05:06:57 +00:00
- recipient: age1wxlwx75hfxer4trvfzad7cwdn2hhu4we50p32vpy3qvdct7t656q3pp04x
Add backup for fieldseeker-sync files. This required changing the directory of the user files so that I don't accidentially backup Gleipnir test files.
2025-09-30 17:46:46 +00:00
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpUS9LNUtnN3lHWVllWXpi
dURqb0FMcVZITUJiWk02ZngrTUJsUDIvS2c0CjByL2o3RHp1OC9XVFFMNGtibmZF
YWJPR1FZUWlYeDg5OGkwaERYUFdabFkKLS0tIElHN2hzZnFLMDhPU2twMzZxMGRT
Q1ZUS1ZLa2JZY2J5b2w0dmZrRmZ2WTgK2XxZKafzz81KtvPVTL3EV/7EyHiEdn+1
ywyncvIWrYm7bGIrhpnTuixRi0T33HE8D4TxKgyMCnEwGwBo7th9vw==
Add backup for fieldseeker-sync files. This required changing the directory of the user files so that I don't accidentially backup Gleipnir test files.
2025-09-30 17:46:46 +00:00
-----END AGE ENCRYPTED FILE-----
- recipient: age1x704pjnueguchkl54ly8w4w26ltys5900v7xnl7w3zlgasus09jszz45t8
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUQUw1eXdUTWhWNWl2WDg1
UXI5a2JBNXNzcDI3dXNXV3ZKVm5DN0srRkIwCnFZNmd2WENDdDROdnk2TGh4VjQ1
YzkvQm1pblk1eU5UUndMUi81c2pkV3MKLS0tIGxKQkFKcHN4QVhkbnRzRkRta0l1
L1V1YXVHSGdtMHhIMURMZkZ3dktUNk0K/fd7tBwJymTa9A7SGI0E1qvvdSDDxVR4
YDtVClVejcqwfe8d8IjDS2Tkt5u3lhgigZPVRSN5WaRXbEpGNSeu0w==
Add backup for fieldseeker-sync files. This required changing the directory of the user files so that I don't accidentially backup Gleipnir test files.
2025-09-30 17:46:46 +00:00
-----END AGE ENCRYPTED FILE-----
- recipient: age15y4k929zaj9fdg3vd40pa40tgvrgv9mn22xfummn5zxfmkcw5d0st6prjx
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJZ280OWFXcDVrY3FCR1lD
dUUxSVJDbjE3cW9tOCs2cTFUZGhpZndzZ3lNCnF6OTBENytjbHk2QUxWMU9YMDky
WFlidmEydHlUVVA0aGZtTjFWMkplUTQKLS0tIFVISEY0aU1MNjR4K2Nhc3hhYVhj
QUxwZXozVHZxRkExTWp6K3p3aGMyVTAKEdz9dJ5zlpVz/YdZICo6T+g7WNHPneXp
vCrzaJWDVIQbuynfnlPShnSBhiVSldpmIJSaGv/JrDiGwEZWf6cQuw==
Add dev_poweredge key For building nix binary cache
2025-12-15 18:47:41 +00:00
-----END AGE ENCRYPTED FILE-----
- recipient: age1q5syuyx3n255vllv6elfj72yk5mhxnk9pqawzyy4gzkzmpw3gpjqz9ujx2
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNc2pMVEhKQ3AvbkQ2d0d6
a3psUXJPWmR1T1gvYVZGaTZ1Ukw4R1Z1b2s0ClhnY1pwcm9qSXU1R1JOeFVQK2ZY
UlFVWW5ROXYzek5LeTBDczRXOTlHNjgKLS0tIDdDdUplTHA1MExlTkphNzF6bzNz
VGlmcFZ5K0FMRUF1RmVvZXgyalYvOGcKJFua2BWfjXtrN2COLXcCj7oSFknc7znv
it7sSv3TMUJitIu3U4VZp3r4qLvUlGrnvsuz+gxP7KjgSaC9lK5LpQ==
Add backup for fieldseeker-sync files. This required changing the directory of the user files so that I don't accidentially backup Gleipnir test files.
2025-09-30 17:46:46 +00:00
-----END AGE ENCRYPTED FILE-----
Update host key for corp server
2026-01-13 04:48:16 +00:00
- recipient: age1rqa4qvkk7s26pgj09d269t84vprdrh0jhyl75xq5zyhp9cdssq2qc8hut8
Add backup for fieldseeker-sync files. This required changing the directory of the user files so that I don't accidentially backup Gleipnir test files.
2025-09-30 17:46:46 +00:00
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFOU40MncxV3A2cUduL2FQ
VkliMTlxZEk1b3VNcVlDemovb2hZNXlPd1RVCms1Yk9VRmFTZlFSbk5Oc0hDM2V4
cER5YVphTGpLVW9Xd1NXNGxkZUVqOXMKLS0tIFZJaUpZOXpWRyttUWxFVGVSMDcw
cHVhcGVVU0R2SldCUU5RU1VhU0lhdXMKkg0yizx8nXYlZhWw4BEnUCQBOW+bFH4L
ajf7sa/U4by44pqnyCej2vepjyicsQL7pWUcGGuRo13NU9dh4EsWnA==
Add noxic-amd-legacy-hexcore to sops secrets
2025-10-07 17:07:19 +00:00
-----END AGE ENCRYPTED FILE-----
WIP getting legacy-sexcore back up At this point I was able to successfully nixos-anywhere the system and SSH back in afterwards. That's progress worth keeping.
2026-01-04 17:21:22 +00:00
- recipient: age1yfs6d0vac45rnx3q54u52tjk5vnfsqnghaj95kmkl7fd5du3ee8qgse385
Add noxic-amd-legacy-hexcore to sops secrets
2025-10-07 17:07:19 +00:00
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzeWh0aFpJNDI0SEFnMmFJ
YWdRUXh2N1Erck05YVlXdGZORjFiZUFES1RrCi9JTWVaS3F0MWsxbmpqQ2x5eVI0
NHYzemZMZkRlWGY5b0xEZkNtNk4xTzgKLS0tIE9xejVaZkVPZXdFT080cXNOdm5n
b3ZHOWxOdm95WGRFNXFsL0dydUdCQ2sKpJN5jgX3M+scSJFRw+ep2OMO/ZvN+ZEx
kaBnC0vnBlKK76mx4kLYgBQbIIuOwRwo/nwC4BUyLrQCCpvXaaPLyg==
Add backup for fieldseeker-sync files. This required changing the directory of the user files so that I don't accidentially backup Gleipnir test files.
2025-09-30 17:46:46 +00:00
-----END AGE ENCRYPTED FILE-----
- recipient: age1t3ryfktuhr3cysf49m9q2n8fkjf9ajjjnhztxw9hz8paxgk4lpcq065jge
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkdnJpR2wwQVRHS3hHY0RG
RVE3aVMwZDdlYm5RS09vdlJFc0ViMGlJSG5rCm1tSUVoWVJzNDVjMkVJbTBEakQ1
eUhkNWE4N21EQU5jcGt5bFhNYzdNNm8KLS0tIFdsZlY5Q09XUkZIQ3drU05zcmw4
ZW5DR0NwanZ5Y29xYUVvbW95cmt1ZFUKRLQURA/GndI7O3AlGOhTGGDjUf2mY2ZE
Aq3ElzDUHtumrxhl7rT8FI1UPoX/eNul+p6oczCsbBE5iRzaw6+qCA==
Add backup for fieldseeker-sync files. This required changing the directory of the user files so that I don't accidentially backup Gleipnir test files.
2025-09-30 17:46:46 +00:00
-----END AGE ENCRYPTED FILE-----
Re-wipe nocix-amd-legacy-sexcore again, update secrets (again)
2026-01-05 03:31:47 +00:00
- recipient: age167q6r28ws6wrpjwxnt4ap2fgs6d9cyvrdhzl2wflr2tnsw5xapxq36n2ec
Add backup for fieldseeker-sync files. This required changing the directory of the user files so that I don't accidentially backup Gleipnir test files.
2025-09-30 17:46:46 +00:00
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjY3FuRTRHQnR2VHFqNnJ5
bzdSeFluODZTUjZmR0dZcHJEYkJWQ2hqdjBvCnk3SlVOL0o3b2FTSG5rWkNheFRw
K3JxK2NrR3JtaXBhRklmZGRKUWVGU1kKLS0tIGhtbFc3VVFtV0Z2SWc3YTlSamRv
bllmWDMwMlZnbTVXWUlhY09PV0YwSGMKv8afHMOi2onHpITxU9jHwdjiu7GTWPKT
7F4YliPY4cWNhWVR413+f2+7FzEOXQrwxj9WmiEGHcN8+j+MC2cN3Q==
Add new staging server key for sops
2026-02-18 05:06:57 +00:00
-----END AGE ENCRYPTED FILE-----
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
- recipient: age1924evks66k9g6c4zcnn2ghjcxpe0fzw2y9j253xredkwqnw9p5qqjcvjqt
Add new staging server key for sops
2026-02-18 05:06:57 +00:00
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTeUl1Y3dYT2dFd25mK3NN
TnlQeFliNUcrRWFSdTJiNHNjbEZTcG5iR0VNCnI2MmZDaldRdG1uZGRZbFEwaG5s
TGVSZ0I2QXNpWWtNN0ZFYmR6bm5EdjQKLS0tIC9wZTNPaXBNRUhXRTFsRzk2YXc1
eTNSNGJ4ckZ2YWZWWFBxMG90aEE2bzgKn4bNAlXSwOx/OjwJslKu2JbCHUxCmXI+
qRnDFasGGjQ4OI/Ax4IopvV9BTDq1qbjCpA88rOEHHi0PgYgBX+M+A==
Add backup for fieldseeker-sync files. This required changing the directory of the user files so that I don't accidentially backup Gleipnir test files.
2025-09-30 17:46:46 +00:00
-----END AGE ENCRYPTED FILE-----
Add separate restic roles for separate credentials I don't want corp and prod accidentally smashing each other, or being used as a credentials escalation attack.
2026-01-13 14:57:33 +00:00
lastmodified: "2026-01-13T14:03:41Z"
mac: ENC[AES256_GCM,data:pGDHVS0FKn8LCVjiEFyWlxr5F1AsHkPGxnTssRf8bs6aDROqOVwKDPJMgtL0yu9+uwUz8wHFAHjFuM2K3icgFD6nzkQxjuewhxZd4776GatqvneyPeQx6sP1sPHAqOjzDOE0My1xpf4QiXwkx8Xls2ciLnq8j9ZL+/x5INUCYdA=,iv:XOFrgljl3a4RJoJ9BNKq0I/pVSca+gQcs+TwsQjwZco=,tag:ReAMvKAamofyQCYS1uJ4Qg==,type:str]
Add backup for fieldseeker-sync files. This required changing the directory of the user files so that I don't accidentially backup Gleipnir test files.
2025-09-30 17:46:46 +00:00
unencrypted_suffix: _unencrypted
Add separate restic roles for separate credentials I don't want corp and prod accidentally smashing each other, or being used as a credentials escalation attack.
2026-01-13 14:57:33 +00:00
version: 3.11.0
Reference in a new issue Copy permalink