Gleipnir/nixos-systems
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
nixos-systems/secrets/secrets.yaml

93 lines
6.2 KiB
YAML
Raw Normal View History

Add credentials from Backblaze B2 I'm going to use these with borg or restic, not sure yet, just want to save them for now.
2025-07-24 21:05:12 +00:00
borgbackup:
keyID: ENC[AES256_GCM,data:WQzb9Fzn7wzKTtZLnvvl5IQ0GTln90V/5w==,iv:petvSSRA+Ycim1VaN+I3SCM11PSBnd+5YKbfNXHqMsU=,tag:GOwli6+Dk4zayjRGoODsvQ==,type:str]
keyName: ENC[AES256_GCM,data:Jx0l9xyim/AepETj,iv:RYM2vNz7zg/9Y9F7EoWxtoHhKMMFJE0f+koaFWkQYh0=,tag:F7drLX1n8W1WslfWTpQs/g==,type:str]
applicationKey: ENC[AES256_GCM,data:B1d87ZJ8q48B2SwfYe6ILM08FkiqDyn/+mJhUSEyBw==,iv:3f5DUMqltbQc+LG3PpoTBhctiFG0QE6a12KD/ewafYo=,tag:p31d0Qyzr4TDY9W6bORpFw==,type:str]
Add initial authentik backup script This includes a new paradigm for using a pgpass file, which is great, as well as sorting out how to properly do a bash script shebang in a service file.
2025-07-23 21:39:18 +00:00
authentik-backup-pgpass: ENC[AES256_GCM,data:tYHAgbrXM6xy41I5jfiPM4Pkt3lqN2RdBLf1CaltTNT8Cw8p1Rh+xoihhLdm3DHbwzy/NWcTD5hXXV1iAyqcvTd1Cr2gNMsh5tD096z2kpS8p2ZfZnOCzgNZkIu8C6pq826qqf3ZrMyqX7A/qwkoa1GtALXi5sUgL7qZAGqPeCKwdVYV7Q==,iv:94bHTSrmOqoi3SkZnhS7TNwQR29cSm4FdADO6DTGZo8=,tag:WS2vGTUxqJMOov0lvc/STw==,type:str]
sops:
age:
Add new staging server key for sops
2026-02-18 05:06:57 +00:00
- recipient: age1wxlwx75hfxer4trvfzad7cwdn2hhu4we50p32vpy3qvdct7t656q3pp04x
Add corp dev key This makes it so I can modify secrets files directly on the server I'm bringing up.
2025-09-09 12:32:58 +00:00
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0dUhmSVJzK2dobkU0VHVv
dXExWFVCTEszV1AvNmpIaEN6UDRBQ1V5QmhZCkF5RDNqZlE1VWRUSVR2NWZ3UnZD
ZEprSXpmbDUvL0tQTjEzUDV0RVpPSFkKLS0tIGQ4SGsvOEw0MFBzU2pQaFlqYzBD
cmx5RXE5c0pNbEg5UVFNZHNDU0tTL1UKpCTlhdE/2fsJApUG5Pd4/O+CtjcX7IyV
pvq4VbdZle2pxeP+mr4M1qDU/KtQjkZGvXmWO+YLKLv+rO93wDoUNw==
Add corp dev key This makes it so I can modify secrets files directly on the server I'm bringing up.
2025-09-09 12:32:58 +00:00
-----END AGE ENCRYPTED FILE-----
Add initial authentik backup script This includes a new paradigm for using a pgpass file, which is great, as well as sorting out how to properly do a bash script shebang in a service file.
2025-07-23 21:39:18 +00:00
- recipient: age1x704pjnueguchkl54ly8w4w26ltys5900v7xnl7w3zlgasus09jszz45t8
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNdTREeWl4aDdRMnA3MElp
UjR3L0MzMFloSms2Q21sTGc1aGxUMDB1U21JCmMrRmZMUy92YWFSL0lyWmR0SkVk
MTlrTS9DcXBYZitOSTBxN0NkRmkzQzQKLS0tIHlTMFhZZTRsS0NsRkx6OC8wQkZS
UEtwcE1mR3BVTjRZRWdncWlKVUFpcFkKYsQQbnijKHx10ztoKKfNPjgf0q6ccMId
xdVsesHpi3MP2OHrrHv25Hjpdk1DqQorH8JBh9XW6BTxMVm3WUvhaQ==
Add initial authentik backup script This includes a new paradigm for using a pgpass file, which is great, as well as sorting out how to properly do a bash script shebang in a service file.
2025-07-23 21:39:18 +00:00
-----END AGE ENCRYPTED FILE-----
- recipient: age15y4k929zaj9fdg3vd40pa40tgvrgv9mn22xfummn5zxfmkcw5d0st6prjx
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4cmNuZ2NaMCt3SVB0TXk4
Q2tESjJmWlBwMXE2bWZuMjBla0VTU2daQkhZClRCek16WEdWQk16Z0p3QW9iZzIr
YjVaT2c1MFRNRGkvbTBXV1B1enkwNk0KLS0tIHdpZm9DYzN2VVhZelRIUTh4c3Bw
RFJWNUFrKytFZWVOUkZjZ1p6YTIxcTQKaEugzP5eHTsrXL+7LadLWXEo1L6Qb6q5
S4+ACps6GpdizW2m/I/W8LuSs9NXnCZsgv+mzBWHpeuQDLDVrYjFqA==
Add dev_poweredge key For building nix binary cache
2025-12-15 18:47:41 +00:00
-----END AGE ENCRYPTED FILE-----
- recipient: age1q5syuyx3n255vllv6elfj72yk5mhxnk9pqawzyy4gzkzmpw3gpjqz9ujx2
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWSWprV3F0T2QrOHU5aXYz
NUY0cUZrMUJaa3ArMlR5bDdTNzVBcDZldVg4CmFZVi93WnEzSmxhYmtEK2xOVDA2
OE9Wcmh5Y3dpbUI0eFZkQ2VPcEhaaDgKLS0tIGNPa3dCR1Nrby8rTm52RU5oU1dM
N0ZhUkE1REFtY0JxYzl4UmhjWWtCOTgKjgs+uU7AFHqz3FC/htIUNdIUwsFnUUXE
HSg2MbIL2qPDWnGGXWBsSWoEWP3nnQHyLUSgzXkz8wobwd7VPuUb0Q==
Add initial authentik backup script This includes a new paradigm for using a pgpass file, which is great, as well as sorting out how to properly do a bash script shebang in a service file.
2025-07-23 21:39:18 +00:00
-----END AGE ENCRYPTED FILE-----
Update host key for corp server
2026-01-13 04:48:16 +00:00
- recipient: age1rqa4qvkk7s26pgj09d269t84vprdrh0jhyl75xq5zyhp9cdssq2qc8hut8
Add initial authentik backup script This includes a new paradigm for using a pgpass file, which is great, as well as sorting out how to properly do a bash script shebang in a service file.
2025-07-23 21:39:18 +00:00
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5SXlpallOYTljNnpST3Fr
bjVabFAxNjBzQVRldWp5cFF3aXp1QnRoQjFRCkZDdHc3b0xTVk1rc2gvMDVhM21w
bCs5NzJ2L2tPanNJN1dnWU54MzJKblUKLS0tIHB4aG9yMHhWckxwQUtCYWhRY1Yr
K2U2YnR4Tk5CTzk5MGFGVCtNY0RSZ2MKZSkcdmLmV12vK84sEi3aSpTpEh0BgYIt
s4/dEpV16BVslxnl22MM6ntM7Eik/CAaEr7x3NPM8TZDi3+lRQg5vQ==
Add noxic-amd-legacy-hexcore to sops secrets
2025-10-07 17:07:19 +00:00
-----END AGE ENCRYPTED FILE-----
WIP getting legacy-sexcore back up At this point I was able to successfully nixos-anywhere the system and SSH back in afterwards. That's progress worth keeping.
2026-01-04 17:21:22 +00:00
- recipient: age1yfs6d0vac45rnx3q54u52tjk5vnfsqnghaj95kmkl7fd5du3ee8qgse385
Add noxic-amd-legacy-hexcore to sops secrets
2025-10-07 17:07:19 +00:00
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1MExiTHNMNmpZdkE3c3Vv
ekp0UHJwMUl2TVcrVVU1dER4ejlhcWQrc21VCnZIdXRoUzBrOEVQQldyYjdOZ0JQ
YlNKUEtNUVJDV0JKekFMZnFvd2Vqd00KLS0tIHRkeUY4dEZ4SDRKelhYQ2poMXRS
SnQ2dWh5enJ3Nis5SGFCNDcrR1NhaUUKoiq76i3IAJNAzkkjwWu3jOVtnXEOwn2U
9XXveLm+a4OpCUM+PKmInS7HIGeRBtv9OpJ5GwiBopskWyxnhrYPqQ==
Add initial authentik backup script This includes a new paradigm for using a pgpass file, which is great, as well as sorting out how to properly do a bash script shebang in a service file.
2025-07-23 21:39:18 +00:00
-----END AGE ENCRYPTED FILE-----
- recipient: age1t3ryfktuhr3cysf49m9q2n8fkjf9ajjjnhztxw9hz8paxgk4lpcq065jge
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBVFZQeU9SSHNqSDc3c0Nu
Rk55dHFGNmdaNkNBOGpDdDBEaWxvL3ZxQ244CjdHdzI2Q3JrQjg5S2MrcHpvQWhY
NXlPTDd6V1QwK0lWY2tDd2xUOEhweTgKLS0tICtQR2RYQzhTc0dXTHMxK2R2eHd3
TGRtRU5TRVV0TmF6QTdRZHVWZGNuOHcKDIb/zKlNVF8gpKUBLGUAu7PY47RORc8+
yxe4EOkqOHcaLhvuJwJlym1NbkAIW0Jljgu/RrHP6BCPHdD0/m2VKQ==
Add new sync host encryption keys to various secrets
2025-08-18 19:58:31 +00:00
-----END AGE ENCRYPTED FILE-----
Re-wipe nocix-amd-legacy-sexcore again, update secrets (again)
2026-01-05 03:31:47 +00:00
- recipient: age167q6r28ws6wrpjwxnt4ap2fgs6d9cyvrdhzl2wflr2tnsw5xapxq36n2ec
Add new sync host encryption keys to various secrets
2025-08-18 19:58:31 +00:00
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKcjJFZjJLMTdySDNkVXcy
RmZwVXpBM3N5OUI4NzZxV0VEY1Y0R0ltNFR3CmZCaG8xVHJ5MTFPNGFGdHhjdmxw
YzQxWHl2OG1uV20xMVo2UFNjVEhFMk0KLS0tIEJ2WGZsMG55K1U2MHJPWDVxWll5
aU5UT0F6czVLcTZLWWZrb0JINDI3S1UKXBtDLL69hxluntqvCxoMi05lgt+ZBqtD
ihOg9Z4M6cgOK49xzxbboeyx8TtfBw4K/wE9x6342959X53qz39n7A==
Add new staging server key for sops
2026-02-18 05:06:57 +00:00
-----END AGE ENCRYPTED FILE-----
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
- recipient: age1924evks66k9g6c4zcnn2ghjcxpe0fzw2y9j253xredkwqnw9p5qqjcvjqt
Add new staging server key for sops
2026-02-18 05:06:57 +00:00
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmMXNRaWVQVS9wMUxlaWlQ
L1FHUEg5aGJva093NjNSbHpCZ1owWXFTTTFvCjBNdlQ0bkdPMnBlSnY2N3NVNTNQ
TDRPbjh2b0p2aFQzc0twa2VHeCt4YUUKLS0tIHhPaU5hOUFtZlZmaUR3bkI3K0hv
U0NSTGVWbk1IV3ZkdEJmUlV6TzlrVjgKzxQc0e2moDlcI8sCPFaq3eI8YN/yeVZX
N3+KE8X6cq8mBDKdJVp6cltxmzN/UDDgUbUg3Edz7I4jq8J/fWfKvg==
Add initial authentik backup script This includes a new paradigm for using a pgpass file, which is great, as well as sorting out how to properly do a bash script shebang in a service file.
2025-07-23 21:39:18 +00:00
-----END AGE ENCRYPTED FILE-----
Reference a built binary in fieldseeker-sync, add initial service This won't work yet as we don't read from the environment variables and are missing a complete config file
2025-08-18 20:29:31 +00:00
lastmodified: "2025-08-18T20:23:25Z"
mac: ENC[AES256_GCM,data:79biMFI/sn/n73B32VUSNw193XHGOID6pwN+84iqnSSG+3GnEE/uVnjYhe6Hw63xXy9fdWeKbsX7CuPnOqw5gs3RH6Jxz0489bGqtssGD4SU6EbdricYhBZHvKWxbgTBrhUFNasQsTXnbE3Espb6SmrVUOCt7uUcOJiQBrqipTA=,iv:qQfwW9ut0XfnG/L7jdnPXLBu8spNMBhAjXXm5/kzHgc=,tag:D8jb7ExtYfDQkC7Wy0GGwg==,type:str]
Add initial authentik backup script This includes a new paradigm for using a pgpass file, which is great, as well as sorting out how to properly do a bash script shebang in a service file.
2025-07-23 21:39:18 +00:00
unencrypted_suffix: _unencrypted
version: 3.10.2
Reference in a new issue Copy permalink