Gleipnir/nixos-systems
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
nixos-systems/secrets/secrets.yaml

93 lines
6.2 KiB
YAML
Raw Normal View History

Add credentials from Backblaze B2 I'm going to use these with borg or restic, not sure yet, just want to save them for now.
2025-07-24 21:05:12 +00:00
borgbackup:
keyID: ENC[AES256_GCM,data:WQzb9Fzn7wzKTtZLnvvl5IQ0GTln90V/5w==,iv:petvSSRA+Ycim1VaN+I3SCM11PSBnd+5YKbfNXHqMsU=,tag:GOwli6+Dk4zayjRGoODsvQ==,type:str]
keyName: ENC[AES256_GCM,data:Jx0l9xyim/AepETj,iv:RYM2vNz7zg/9Y9F7EoWxtoHhKMMFJE0f+koaFWkQYh0=,tag:F7drLX1n8W1WslfWTpQs/g==,type:str]
applicationKey: ENC[AES256_GCM,data:B1d87ZJ8q48B2SwfYe6ILM08FkiqDyn/+mJhUSEyBw==,iv:3f5DUMqltbQc+LG3PpoTBhctiFG0QE6a12KD/ewafYo=,tag:p31d0Qyzr4TDY9W6bORpFw==,type:str]
Add initial authentik backup script This includes a new paradigm for using a pgpass file, which is great, as well as sorting out how to properly do a bash script shebang in a service file.
2025-07-23 21:39:18 +00:00
authentik-backup-pgpass: ENC[AES256_GCM,data:tYHAgbrXM6xy41I5jfiPM4Pkt3lqN2RdBLf1CaltTNT8Cw8p1Rh+xoihhLdm3DHbwzy/NWcTD5hXXV1iAyqcvTd1Cr2gNMsh5tD096z2kpS8p2ZfZnOCzgNZkIu8C6pq826qqf3ZrMyqX7A/qwkoa1GtALXi5sUgL7qZAGqPeCKwdVYV7Q==,iv:94bHTSrmOqoi3SkZnhS7TNwQR29cSm4FdADO6DTGZo8=,tag:WS2vGTUxqJMOov0lvc/STw==,type:str]
sops:
age:
Add new staging server key for sops
2026-02-18 05:06:57 +00:00
- recipient: age1wxlwx75hfxer4trvfzad7cwdn2hhu4we50p32vpy3qvdct7t656q3pp04x
Add corp dev key This makes it so I can modify secrets files directly on the server I'm bringing up.
2025-09-09 12:32:58 +00:00
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Add new staging server key for sops
2026-02-18 05:06:57 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJVkVja2dkMEFRZ3VPRjRo
elpidm1TcXRVcjJpOU9RaThRdC9CM0dmWmlRCnd3Ukd4YmNyVWs5UUlRL0V0RkFE
bXlqRFZnUktEWklVYTdvQ1AwZEc2RVEKLS0tIG9hckt2RnhrdlIvU1dFdFdiM0sw
UnhrbUpkT0NjVmR3REdFSHE3MS9tL00Kc6QY8+mq3bUbfJ0B7GtZOp91NI1j5ur/
/ae32/22fxjX1edcC/3SwZdtN3fz7Y4AbKCHoROb3eFvgwq7pBzkFA==
Add corp dev key This makes it so I can modify secrets files directly on the server I'm bringing up.
2025-09-09 12:32:58 +00:00
-----END AGE ENCRYPTED FILE-----
Add initial authentik backup script This includes a new paradigm for using a pgpass file, which is great, as well as sorting out how to properly do a bash script shebang in a service file.
2025-07-23 21:39:18 +00:00
- recipient: age1x704pjnueguchkl54ly8w4w26ltys5900v7xnl7w3zlgasus09jszz45t8
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Add new staging server key for sops
2026-02-18 05:06:57 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByemNPWnVBb01WTmtLVDlz
engyWnRqQVpDeUZnakhUZElpTE52NzRlQ1FvCnBTMVNsbHVhTmxIb1NidndTejdE
K3hMc2RsSnIwNVd4eDhicUszTjZnaVUKLS0tIHU3R0Z2QlRhWDh1UE5ta2pSb0dN
TURFV3h2bi9hNGUxR2lQczNQazZJMlkKLnXBMARiccKCAKd5zzHDm0i7y6iR1GXC
Hz/gWELygjn+ZetLMh/HbXyNHsaJ47v0hhPDxTMNKrFWHSWAJqVL1A==
Add initial authentik backup script This includes a new paradigm for using a pgpass file, which is great, as well as sorting out how to properly do a bash script shebang in a service file.
2025-07-23 21:39:18 +00:00
-----END AGE ENCRYPTED FILE-----
- recipient: age15y4k929zaj9fdg3vd40pa40tgvrgv9mn22xfummn5zxfmkcw5d0st6prjx
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Add new staging server key for sops
2026-02-18 05:06:57 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0d0JHaUNpNGsrNHR4ZFI1
TkJOUEcvMmV4SlZrYjdUQnpXZCt5TmsreWhnClA2RStQUWl1T0pTRmZGd3lyZjZV
SzlCWjNYbS9Qb0ROblRWejFneHZNck0KLS0tIElMUEYzS1dEYUpKSk1pdkpmMTho
bGN2NFVUMVdOU0JKdEtVSjZVUXpOZVEKcrDquK67aZ3q4UV910cgIE417yN7tOxq
M3t8JPXYDk31dZW9s6T/29bpXcWQOqAMCskXAgYUWIrVrJXO7kR6Xw==
Add dev_poweredge key For building nix binary cache
2025-12-15 18:47:41 +00:00
-----END AGE ENCRYPTED FILE-----
- recipient: age1q5syuyx3n255vllv6elfj72yk5mhxnk9pqawzyy4gzkzmpw3gpjqz9ujx2
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Add new staging server key for sops
2026-02-18 05:06:57 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNaWpYUURXOFdUWnZtM2Vj
UFo0dzZWUlArUkRTanlVZ1hQNlBBSnVuY2xFCnRKcTdiSG5TRlEyUWdJdGx3d0tP
d1orRzhNVkR3SDdOUVRZQnl2OVErbTgKLS0tIHQ4cCtWd01OY0p4V3BoSVVvKytE
VEJseFRPdHZ4cW9GODNCNjF5Vk1Mb2cKViTQIL9G58BFwPAYrs+d8HCCT/wN0cNX
SDKxtCixnqf/6gblgruDmMR4orRBtsA+KK6FizVRZrLAIGHzmVIrwA==
Add initial authentik backup script This includes a new paradigm for using a pgpass file, which is great, as well as sorting out how to properly do a bash script shebang in a service file.
2025-07-23 21:39:18 +00:00
-----END AGE ENCRYPTED FILE-----
Update host key for corp server
2026-01-13 04:48:16 +00:00
- recipient: age1rqa4qvkk7s26pgj09d269t84vprdrh0jhyl75xq5zyhp9cdssq2qc8hut8
Add initial authentik backup script This includes a new paradigm for using a pgpass file, which is great, as well as sorting out how to properly do a bash script shebang in a service file.
2025-07-23 21:39:18 +00:00
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Add new staging server key for sops
2026-02-18 05:06:57 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPd21uRVZ1TVJZNlFUV3Bw
MFVHZzRFVFRML0tqYXdGZU44UlY0ejBRMEhJCjllOEY5bUF4OWFmSGJIVmdqWkQv
dUdHQVV4SWQ1NitmdWlPOWZFcXhkR2cKLS0tIHBBcnVnalNva1c1bGJBb3JadTJn
Sks5b3NWOXROZzJlQjdyMVZzNHo0c3cK/9WxDtGxJx3FJjDpeG6eYFPuh5KKoYEv
iAmj1f1zfC0dNXjgFrxPzgGTW6/SrN8PgfMVU5xXOBLLwhgQcNb04A==
Add noxic-amd-legacy-hexcore to sops secrets
2025-10-07 17:07:19 +00:00
-----END AGE ENCRYPTED FILE-----
WIP getting legacy-sexcore back up At this point I was able to successfully nixos-anywhere the system and SSH back in afterwards. That's progress worth keeping.
2026-01-04 17:21:22 +00:00
- recipient: age1yfs6d0vac45rnx3q54u52tjk5vnfsqnghaj95kmkl7fd5du3ee8qgse385
Add noxic-amd-legacy-hexcore to sops secrets
2025-10-07 17:07:19 +00:00
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Add new staging server key for sops
2026-02-18 05:06:57 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEK1VSbWk5NTNtY1ZqOFBv
bTM5b21TbE81R3B5VzZNdTNLeS81bHdjd2dnCmZpQTJpWDZXTWxzTWloaHRFRTZr
NkZGWGNEK0piQlM3OEh2a2F4a0VvNVkKLS0tIHYreTlSdUliS3F2YlVPWStWc013
ZzhRUm01dVp4cDBGNTZ1L2FUL1lQcUUKLnVccVVjVotyImv+jcFlhx/mt3Dk9e/X
V886Oj0qSG3yOLco8Kt80trJ+qj+8WZ01yD1iQsKNYC+f0Y04scxsA==
Add initial authentik backup script This includes a new paradigm for using a pgpass file, which is great, as well as sorting out how to properly do a bash script shebang in a service file.
2025-07-23 21:39:18 +00:00
-----END AGE ENCRYPTED FILE-----
- recipient: age1t3ryfktuhr3cysf49m9q2n8fkjf9ajjjnhztxw9hz8paxgk4lpcq065jge
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Add new staging server key for sops
2026-02-18 05:06:57 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwOXBrMkNoQ1N1N0pzRUtB
VDFobHNKS3NnUUNFNHpZMjYrRVNmNFp4alU4Ck1udUJISGFoSjc4VlJsSzJMZndT
RmwzbUo3YUpUREszVy9YZWc3MytKck0KLS0tIEJHZWVSV25VNE5DTlMxVnZpdHBU
b3Q4OWFTSVYwK1BOaWdGT0lUUzJ1SkEKnLnYYFNl+/sDsKrunDk74S5BjKIr5xwb
93z/fXsvMVNlW723lScC+ZMk2nIlhWRud7q9CJJSBGSs7+yXmStD2w==
Add new sync host encryption keys to various secrets
2025-08-18 19:58:31 +00:00
-----END AGE ENCRYPTED FILE-----
Re-wipe nocix-amd-legacy-sexcore again, update secrets (again)
2026-01-05 03:31:47 +00:00
- recipient: age167q6r28ws6wrpjwxnt4ap2fgs6d9cyvrdhzl2wflr2tnsw5xapxq36n2ec
Add new sync host encryption keys to various secrets
2025-08-18 19:58:31 +00:00
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Add new staging server key for sops
2026-02-18 05:06:57 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjM1VILzRwYnNHaG1BUFNi
MkRSMlhCd2NtQytUdlNWcTdCUUkyV3hrbFZZCmNTMVpNdjNFN1B3NEVhYWVYWVJk
UStOS1NtSnNWMEQrQWlIdTBEQUEvWGsKLS0tIEVrWXN2MDh2ek8wTXIyQzZHdGxN
Z2lZV0RSMTh0eHJTZ1BOMnJHc0VBTDAKLBZSjgm3+qEM12pv6r439dkDha1ru40x
U+eH4vCoRSQ+CWxiFFkR+U7F1zB5gVU3o6jamrj6mShHNXxi0sexnA==
-----END AGE ENCRYPTED FILE-----
- recipient: age1gcgg40w7ja4gujzsujpgt7kd2ww6fpepkz04s5lkryx6ulnggdhs03yrkw
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSVE9MUUVsQkZJS2F3Y0Zy
ZjZEWlBwTWE1M0hacitTdVl6V1JjOVExaDJNCk42WmpZb3FIdEZ3R2NzY0NYNmZr
N3Z4RjgrbWg4dmN5b0RxUFhPVGJHWVUKLS0tIHd5RURwS1RYQzR1VVV5NDhXaDIy
Wmo4dXF2dFloblNBQWxLNnk4QjI1UGMKL5EIn7r7SyrHZ470usvswpW7Moy0R/ON
HnrZJa+ST8c7ZflbS1UQKlUepWtBdH+WIpE193/zQN3aFJ7B1n+sUw==
Add initial authentik backup script This includes a new paradigm for using a pgpass file, which is great, as well as sorting out how to properly do a bash script shebang in a service file.
2025-07-23 21:39:18 +00:00
-----END AGE ENCRYPTED FILE-----
Reference a built binary in fieldseeker-sync, add initial service This won't work yet as we don't read from the environment variables and are missing a complete config file
2025-08-18 20:29:31 +00:00
lastmodified: "2025-08-18T20:23:25Z"
mac: ENC[AES256_GCM,data:79biMFI/sn/n73B32VUSNw193XHGOID6pwN+84iqnSSG+3GnEE/uVnjYhe6Hw63xXy9fdWeKbsX7CuPnOqw5gs3RH6Jxz0489bGqtssGD4SU6EbdricYhBZHvKWxbgTBrhUFNasQsTXnbE3Espb6SmrVUOCt7uUcOJiQBrqipTA=,iv:qQfwW9ut0XfnG/L7jdnPXLBu8spNMBhAjXXm5/kzHgc=,tag:D8jb7ExtYfDQkC7Wy0GGwg==,type:str]
Add initial authentik backup script This includes a new paradigm for using a pgpass file, which is great, as well as sorting out how to properly do a bash script shebang in a service file.
2025-07-23 21:39:18 +00:00
unencrypted_suffix: _unencrypted
version: 3.10.2
Reference in a new issue Copy permalink