Gleipnir/nixos-systems
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
nixos-systems/secrets/secrets.yaml

75 lines
5.1 KiB
YAML
Raw Normal View History

Add credentials from Backblaze B2 I'm going to use these with borg or restic, not sure yet, just want to save them for now.
2025-07-24 21:05:12 +00:00
borgbackup:
keyID: ENC[AES256_GCM,data:WQzb9Fzn7wzKTtZLnvvl5IQ0GTln90V/5w==,iv:petvSSRA+Ycim1VaN+I3SCM11PSBnd+5YKbfNXHqMsU=,tag:GOwli6+Dk4zayjRGoODsvQ==,type:str]
keyName: ENC[AES256_GCM,data:Jx0l9xyim/AepETj,iv:RYM2vNz7zg/9Y9F7EoWxtoHhKMMFJE0f+koaFWkQYh0=,tag:F7drLX1n8W1WslfWTpQs/g==,type:str]
applicationKey: ENC[AES256_GCM,data:B1d87ZJ8q48B2SwfYe6ILM08FkiqDyn/+mJhUSEyBw==,iv:3f5DUMqltbQc+LG3PpoTBhctiFG0QE6a12KD/ewafYo=,tag:p31d0Qyzr4TDY9W6bORpFw==,type:str]
Add initial authentik backup script This includes a new paradigm for using a pgpass file, which is great, as well as sorting out how to properly do a bash script shebang in a service file.
2025-07-23 21:39:18 +00:00
authentik-backup-pgpass: ENC[AES256_GCM,data:tYHAgbrXM6xy41I5jfiPM4Pkt3lqN2RdBLf1CaltTNT8Cw8p1Rh+xoihhLdm3DHbwzy/NWcTD5hXXV1iAyqcvTd1Cr2gNMsh5tD096z2kpS8p2ZfZnOCzgNZkIu8C6pq826qqf3ZrMyqX7A/qwkoa1GtALXi5sUgL7qZAGqPeCKwdVYV7Q==,iv:94bHTSrmOqoi3SkZnhS7TNwQR29cSm4FdADO6DTGZo8=,tag:WS2vGTUxqJMOov0lvc/STw==,type:str]
sops:
age:
Add corp dev key This makes it so I can modify secrets files directly on the server I'm bringing up.
2025-09-09 12:32:58 +00:00
- recipient: age1fnkhk9rv7r8gh84vxnhvndk4fgh20qcj4hvnfhdpumcydl6m6vrse50lrz
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Add noxic-amd-legacy-hexcore to sops secrets
2025-10-07 17:07:19 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrckdISkVvUjRLZ3pTZ1Yz
L0NkeVZpamhNYUZxOUhGTm4ybi92VjVhbWhFClI1VkdocFVjb0dRSDRRYjBzS0Ru
MGdpaFFZMHp2U3VZMVJpclp4bWRNSHMKLS0tIE93blFaaERxVHQySmRoa3I3OVZZ
QmpKRVczaWcvTHhaRTdxZTZaZmNuSGMK9oIhP+ksX147aC7IxJT1wAsqtii4sqfy
XlFYEzG9utvwLTKpKkBpJSkdtKcpazJhgnUJouZhIUMYVfnGegaRig==
Add corp dev key This makes it so I can modify secrets files directly on the server I'm bringing up.
2025-09-09 12:32:58 +00:00
-----END AGE ENCRYPTED FILE-----
Add initial authentik backup script This includes a new paradigm for using a pgpass file, which is great, as well as sorting out how to properly do a bash script shebang in a service file.
2025-07-23 21:39:18 +00:00
- recipient: age1x704pjnueguchkl54ly8w4w26ltys5900v7xnl7w3zlgasus09jszz45t8
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Add noxic-amd-legacy-hexcore to sops secrets
2025-10-07 17:07:19 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSTkI1NlRsUnpIeSthYUVD
ckUzZENPM3kyV0ZtYzU2aU8wWkdvWFFuM0QwCkdTUWttdW5KZHZqM2IxWE1IM3Av
M0ZnVGJwOEUrUnlQSkFqRmkraFZIZVUKLS0tIGdZaWJ4elV2NW5xV0Y3Zm5MWWlP
MXFyMExlUDNObktWN1JvTkxWKzY0UW8KEacE6nud6DJTbIZEKGDV0rL1U146RqEO
uHyTf7kGo0nkhswGWC4kEEUp7kO+3nwlZveIjZ/lnG1Rp90m7xChiw==
Add initial authentik backup script This includes a new paradigm for using a pgpass file, which is great, as well as sorting out how to properly do a bash script shebang in a service file.
2025-07-23 21:39:18 +00:00
-----END AGE ENCRYPTED FILE-----
- recipient: age15y4k929zaj9fdg3vd40pa40tgvrgv9mn22xfummn5zxfmkcw5d0st6prjx
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Add noxic-amd-legacy-hexcore to sops secrets
2025-10-07 17:07:19 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjSldlUzJpRUFnMFRjNzJU
VS9PS2xsVFpHb1Fubk9JRWJWYTh4WjRtczNVCjdIWjZVM1FqcnJtRzlRZjdMczRE
TVBVU1ZscVd5QklSWWpSbnRPTmk5OFUKLS0tIFFPd1hQR21BQU9IV1BTa0FZYVZF
RFhuZEkrYlR5aWJIL0F6RUM4MnpTSzQKex25WGrxKGWkrMQHKjQdsyX+LjcbXVKp
9UPMG+iskL9bdwy1fCDKrF/V3QrMX1jilfyFyJQVRq7L+IBn5mrKMw==
Add initial authentik backup script This includes a new paradigm for using a pgpass file, which is great, as well as sorting out how to properly do a bash script shebang in a service file.
2025-07-23 21:39:18 +00:00
-----END AGE ENCRYPTED FILE-----
Update key for new corp server
2025-09-08 23:33:23 +00:00
- recipient: age1ck44jqpuz3zlthquvuh7wsemrjrgfzhn462sk7rlfetwxpgy0uqs79xn2h
Add initial authentik backup script This includes a new paradigm for using a pgpass file, which is great, as well as sorting out how to properly do a bash script shebang in a service file.
2025-07-23 21:39:18 +00:00
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Add noxic-amd-legacy-hexcore to sops secrets
2025-10-07 17:07:19 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1TThuTW5ybm5aYWx0ZHJL
UlRTMTBxQy96SVhJYkQ0UXpvQ21PRU4xbWxFCjhxMU5xMnJ0Y0Y5YmpjTmV4SUVp
bEUvczBUZzZZalYwL0k1UzdjaVNyeVEKLS0tIFFXT2Jwd3JPVXJWUFBNSTVXbHpl
dHM4ZTFkbzlQUmVkcnoxNTdvOEtXZFEKKfn4MbcPOoIlYBD5z3HzWiu2aPy1Sj6O
lF4E8RUFjqRyByg8c2VSfKPOKytpYr6PJkJt8rMJJ+JOLspAi4CYnw==
-----END AGE ENCRYPTED FILE-----
- recipient: age1z87rm3qrrspv44nsg73ntn9zys5g498lry4t4cy6x9hffapug5cqfprntm
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKTmd2eDNsNnRmZ1pRYmhv
ZUdDVGRzMXErMVZWQnV2MElsYmg4Z0Y1S1Y4ClBxN21wSkVyNmg5dG9qU0JzcjZp
MC9TVnJhQUtHVmQwMVJ5cFpZVnNqdkEKLS0tIDVVaEcxTUc0S2JtZDZFRWw1Z202
cCtuamlQZHVLWmNPZWJkWFBzWnJiTk0Kzzz8U2FFrU3bb++Ia05F9QUDa4MFadP0
Ckstod4odiBSuB/IQb+2aV9a6ngG8Sa9usM91wVZUBxJ7CMDz7tyVQ==
Add initial authentik backup script This includes a new paradigm for using a pgpass file, which is great, as well as sorting out how to properly do a bash script shebang in a service file.
2025-07-23 21:39:18 +00:00
-----END AGE ENCRYPTED FILE-----
- recipient: age1t3ryfktuhr3cysf49m9q2n8fkjf9ajjjnhztxw9hz8paxgk4lpcq065jge
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Add noxic-amd-legacy-hexcore to sops secrets
2025-10-07 17:07:19 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjenZTZWM0dVhWL2RKaitO
Z2taTzl6S3JDZVJQYUNadFV2d0lpVTJDdzI0CkdJcml2aCtNdjdzbjhkTVlxM2Rs
dWl1NTdlT3prSlVmcW9vL1pwM3h6N3MKLS0tIEZ1VWhVN0FETkJPT0NnOGNDdWFo
WFRnME53ZlBCWS9tSHplZ1RsdVBrZk0KZiFbJgjZYeFtIT7rVlN+E/4T8bJSBKOk
eeHKs/ZnLund53mCYscYH97JX/D1YhAw3k8UjqfSzUGPSrnXqzYLLA==
Add new sync host encryption keys to various secrets
2025-08-18 19:58:31 +00:00
-----END AGE ENCRYPTED FILE-----
- recipient: age1j90h7hcp4fctr2xwj4zf9cxuelm43wkujvryc9hk6rzzc37rwdmss035w7
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Add noxic-amd-legacy-hexcore to sops secrets
2025-10-07 17:07:19 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNaXRUMXJWWFk3S3ZEYTBt
T280cmZISTUxdHVubWF1UzczMkM1ZGwxenpVCm9EclE3SzhYb3BMMFg3dXV3SnpS
Y0xMMXAzeVlmYlZJWUZsVy9wZ2Q5eUEKLS0tIE1rV293a0x3OWJYaG1Tc2FEcmpG
bTVYRWhpd1pSTExEdzZ2dUp3TnAwVHcK9VmyT4FGF2As8EfJawMt4oybgtG8iVWp
qBhh96YcAKxPXEazAJJCaU3Qf76Md3e/VL2Um1zqGckixQNhbY1Mag==
Add initial authentik backup script This includes a new paradigm for using a pgpass file, which is great, as well as sorting out how to properly do a bash script shebang in a service file.
2025-07-23 21:39:18 +00:00
-----END AGE ENCRYPTED FILE-----
Reference a built binary in fieldseeker-sync, add initial service This won't work yet as we don't read from the environment variables and are missing a complete config file
2025-08-18 20:29:31 +00:00
lastmodified: "2025-08-18T20:23:25Z"
mac: ENC[AES256_GCM,data:79biMFI/sn/n73B32VUSNw193XHGOID6pwN+84iqnSSG+3GnEE/uVnjYhe6Hw63xXy9fdWeKbsX7CuPnOqw5gs3RH6Jxz0489bGqtssGD4SU6EbdricYhBZHvKWxbgTBrhUFNasQsTXnbE3Espb6SmrVUOCt7uUcOJiQBrqipTA=,iv:qQfwW9ut0XfnG/L7jdnPXLBu8spNMBhAjXXm5/kzHgc=,tag:D8jb7ExtYfDQkC7Wy0GGwg==,type:str]
Add initial authentik backup script This includes a new paradigm for using a pgpass file, which is great, as well as sorting out how to properly do a bash script shebang in a service file.
2025-07-23 21:39:18 +00:00
unencrypted_suffix: _unencrypted
version: 3.10.2
Reference in a new issue Copy permalink