Gleipnir/nixos-systems
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
nixos-systems/secrets/restic.yaml

83 lines
5.8 KiB
YAML
Raw Normal View History

Add separate restic roles for separate credentials I don't want corp and prod accidentally smashing each other, or being used as a credentials escalation attack.
2026-01-13 14:57:33 +00:00
password-corp: ENC[AES256_GCM,data:hdOuBzYIKw6ZL97rs/W82NqIbux3o8dHjqb1Rqx2NRVQ0h3/,iv:W75AdM1EeKcSNeu52NqKDmg20JX5TAVzy2N0XvnHJfw=,tag:faqTI48m5tgD2MGlBVrnUQ==,type:str]
password-nidus: ENC[AES256_GCM,data:qZLS/orQFXcx1HDpSvFuaXq+c18AIuYOpxqj3OL86W80BHKT,iv:f5633bn+EIEiwENTVAQ6MGj30eKktNbLJT4drBPANOQ=,tag:bPTVe5MuD7NGTSIubJoEsw==,type:str]
backblaze-corp: ENC[AES256_GCM,data:X/DKQ8rs8R3IofS7HhxRpRT+NbE8TZ8hsND9+iAFzfXTyGQeK14zj6ZhUKO2XfaHpsrSYbbXm3cQ5SqJF/ZZ5UQ45yTnlRm5PQ5yLs8BelCyYtAz1lDhxImD/1PWWJLx9QCFmll0fOIhSbhbZvKW5npZD/mjEpWHpgmJiBOyPX49U3dBs7/Khm6sbifzsjEtLTE5PiOu0CMzekc6Ye8=,iv:KM7gkipEbSzJP/7I2lugr4dW4B+vS9CPSGsZR162ERQ=,tag:lEzhPKV2tRVk6Rh28aIVjw==,type:str]
backblaze-nidus: ENC[AES256_GCM,data:wxtqelZpNL/jufnmlE6gpXHKyahTKsLi/vG58F8BFWQOAqCXwf/PqhujJmCCS3t2vz6ezHoZb6Tc/QDALhHwGxEOYiQdhxr0J/mI3aOmqKKr9bON0byS16J8aCsHUJ8Mp3+ex2c2nIgwMydo0STPYrDpSpVIHrI8J4dofVezGVa389CVb5HM6zKJ9tZUKJXXGVdXJFMNXF8aN8wDuB4=,iv:Ay/dYKRJDjxLXGxhqopFd7NarhK7669oj4fd1oOncX4=,tag:x4izw4LBcZDQFGiXh1IKzQ==,type:str]
Add backup for fieldseeker-sync files. This required changing the directory of the user files so that I don't accidentially backup Gleipnir test files.
2025-09-30 17:46:46 +00:00
sops:
age:
- recipient: age1fnkhk9rv7r8gh84vxnhvndk4fgh20qcj4hvnfhdpumcydl6m6vrse50lrz
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Update host key for corp server
2026-01-13 04:48:16 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTVzJWZVhzTEExQ1JLM3RK
Q3phcHNoellrdHVjR01Kem5HMlI3VmtCZG1FClpRTlRla1h2M29BVW5IaTBXQ3V1
VEl1SWJydlpaYjl5bmdRWnFNYUtLSncKLS0tIGNhcDRINmFKdFl4a0lQdnVaam5l
Q0sxOWNMVmRvVHdzV1Vmd1RIb20yOVEK5uFX0Gq7oP4uuCQpVoRtYIvehwDJp3M8
VoABmb878zim7kriPWSswGM5c2gQyacpHDkuftqu7N9eM4d3Spq/UA==
Add backup for fieldseeker-sync files. This required changing the directory of the user files so that I don't accidentially backup Gleipnir test files.
2025-09-30 17:46:46 +00:00
-----END AGE ENCRYPTED FILE-----
- recipient: age1x704pjnueguchkl54ly8w4w26ltys5900v7xnl7w3zlgasus09jszz45t8
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Update host key for corp server
2026-01-13 04:48:16 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOMS9BUnEzNUhOUkF2Vkdo
Vi9LMU84TUU0TFd6NXpvbnFMc3U4cUVQS1VjClNwT2NqRFlrNm8ydjRjaHFNcW1O
TlpCNXc1cG5kS0N5NVF1Sjcya1R2SzQKLS0tIC9PVTZ0bXNPV2gzUHg2OGtuK0pm
VGx3K0lxaHBVZ1lUZWVYWVpCYUdIMzgK3+ESPov1IZqiOT9QpiXM7JtOX8aw2q17
OY5PkzL1WlemxaALgSJVAuhjPIFH0kOq0C8BhEDyySuXXRCLkAR/sA==
Add backup for fieldseeker-sync files. This required changing the directory of the user files so that I don't accidentially backup Gleipnir test files.
2025-09-30 17:46:46 +00:00
-----END AGE ENCRYPTED FILE-----
- recipient: age15y4k929zaj9fdg3vd40pa40tgvrgv9mn22xfummn5zxfmkcw5d0st6prjx
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Update host key for corp server
2026-01-13 04:48:16 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiQmJvSUZFei9CTUdKWnp1
L0I1QmI0UFA3QlZ2YU5XMkNCcy9QRUpWQkh3ClAvMHZMSXBHRHAzK0dQSGVTQXlr
TmVVSGNqYncwaFVrN0N0TVZsS0pOVDQKLS0tIDVVeCtDVDZtQmdGVnlacURjNmli
SlNhSmY0MEJKZnVpam05d243WnJlK2sKQDRqc1Ul41LafxAdshRe0Pm50I6vj7Jx
qMgGUV4yhSGob4u6ctctUY7ViKuDEtAZYdcDksmKe1FKX1VhJJITWg==
Add dev_poweredge key For building nix binary cache
2025-12-15 18:47:41 +00:00
-----END AGE ENCRYPTED FILE-----
- recipient: age1q5syuyx3n255vllv6elfj72yk5mhxnk9pqawzyy4gzkzmpw3gpjqz9ujx2
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Update host key for corp server
2026-01-13 04:48:16 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiQ2RVOXFFU0FtSGhzYVFx
Y011YS9hVFVUWDFMaVF2RTlOY25ucUljcldrClExazhjT3JHR2tOdVE3bzM2Y1Rn
bUdydVgwL0FoMXpyWDBIbzVnaHFMUDAKLS0tIEZiU1ZQZ2E1KzJMNmw5eVJaaC90
UEQ4cEQ3TngramhabUUzbDNZY1RwcWMKzpT7r6BjseZP7yt2GfaQwzcmvWIhO+6l
UDgRXVkIQDXD0UkoDAh/mOseA9IQ3GMR34hohBb/zRG0qKXaclVA5Q==
Add backup for fieldseeker-sync files. This required changing the directory of the user files so that I don't accidentially backup Gleipnir test files.
2025-09-30 17:46:46 +00:00
-----END AGE ENCRYPTED FILE-----
Update host key for corp server
2026-01-13 04:48:16 +00:00
- recipient: age1rqa4qvkk7s26pgj09d269t84vprdrh0jhyl75xq5zyhp9cdssq2qc8hut8
Add backup for fieldseeker-sync files. This required changing the directory of the user files so that I don't accidentially backup Gleipnir test files.
2025-09-30 17:46:46 +00:00
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Update host key for corp server
2026-01-13 04:48:16 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0bEF6WGxJWVo0WmlITXRX
NlJMOWQwQ1BHSEVyOFBaajVENk8rMVpXRHpJCnBLbXlOMmhtRnZCdnFQZzR3V0ln
MlRsVkwvbWRhN3NtY2VVZXo4RGRYamMKLS0tIGsrN1ExYzVZckk0M1FLcjR4MVh3
MmhYakFyNG00STB6UWxsRmlYcC9EY2cKIj3WBRErwdEN3Ik3VwlKkyT+IzZ62pue
aXGx4nHsrzhlvDk8/SVIkskxqc+3vqycOrMlekz0fgFyG7/S2ywsYw==
Add noxic-amd-legacy-hexcore to sops secrets
2025-10-07 17:07:19 +00:00
-----END AGE ENCRYPTED FILE-----
WIP getting legacy-sexcore back up At this point I was able to successfully nixos-anywhere the system and SSH back in afterwards. That's progress worth keeping.
2026-01-04 17:21:22 +00:00
- recipient: age1yfs6d0vac45rnx3q54u52tjk5vnfsqnghaj95kmkl7fd5du3ee8qgse385
Add noxic-amd-legacy-hexcore to sops secrets
2025-10-07 17:07:19 +00:00
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Update host key for corp server
2026-01-13 04:48:16 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwQS9Mank5Ym4rR2tQQ0xw
cWREeWhmM0RCZEZRZmhxaHIrTWxLSlFJU0hFCmhBQjFFL1E1YVMyUG84SHpIemdP
UzJ3WWZDa2FtNFFlbmx1ak1xa2NaMEkKLS0tIDE2cDFhSGprRFQrQlZmUktZRXRP
bHJMVWZCZkNrOWFuMUhSMUxwQnpGcE0KSuupc51xSyuYLamvP6AqRpMLzpBhSFl0
xrYmpU6YKkxyxs8piAlB8YjziE1IfQakvY7DswpPm6hcXzfQ8JBo1g==
Add backup for fieldseeker-sync files. This required changing the directory of the user files so that I don't accidentially backup Gleipnir test files.
2025-09-30 17:46:46 +00:00
-----END AGE ENCRYPTED FILE-----
- recipient: age1t3ryfktuhr3cysf49m9q2n8fkjf9ajjjnhztxw9hz8paxgk4lpcq065jge
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Update host key for corp server
2026-01-13 04:48:16 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsV1I4RWNqVXowWWZUS0g5
NEdVb0RvbzhveEhOSmdrRVRnd0tEd3hCWmhNCm5ZV1hpYkN1eDRWaG9pSEJGTzhC
RXBtZFhka0t1NWxuMGpLbEg1aWpFR00KLS0tIDduQTFlOTZJMWJNTy93MXl5Qm9I
czQ1ZFJSaURtU2N1bTBEcUwweFFXUkkK7UpzGS27575SXSem6MbdfesX/87F+G12
mjUhfk7jhspMwZuxRXNEMdU2ARmNRkIDFF80CyX/cmzxiZyYAFsRrg==
Add backup for fieldseeker-sync files. This required changing the directory of the user files so that I don't accidentially backup Gleipnir test files.
2025-09-30 17:46:46 +00:00
-----END AGE ENCRYPTED FILE-----
Re-wipe nocix-amd-legacy-sexcore again, update secrets (again)
2026-01-05 03:31:47 +00:00
- recipient: age167q6r28ws6wrpjwxnt4ap2fgs6d9cyvrdhzl2wflr2tnsw5xapxq36n2ec
Add backup for fieldseeker-sync files. This required changing the directory of the user files so that I don't accidentially backup Gleipnir test files.
2025-09-30 17:46:46 +00:00
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Update host key for corp server
2026-01-13 04:48:16 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKUVdMKzlBcmZrTXlTMEkr
VFJBa2ZVR0cxZlU0MjZNZzZLZ2krMFJ3ZFNrCmNrSkQzS3puakQ4SjBIaGZ3RmE5
cWZJbHhKdVcvV3BTbEdlRW1TV3RnY3MKLS0tIC9GbTJac3JmZmFOTGdmMkNsOFVk
RGJPVEhIa3FkeERHWlJtYStxRkM5TmMKdOYg8Vbq+0ozSyt4CFTb4xnDPE2Uk5jx
uVZOgItLCZ4774lqqqQKDUkrZlthuVXwYpaNSHNbA8LbAw9IDWqYkw==
Add backup for fieldseeker-sync files. This required changing the directory of the user files so that I don't accidentially backup Gleipnir test files.
2025-09-30 17:46:46 +00:00
-----END AGE ENCRYPTED FILE-----
Add separate restic roles for separate credentials I don't want corp and prod accidentally smashing each other, or being used as a credentials escalation attack.
2026-01-13 14:57:33 +00:00
lastmodified: "2026-01-13T14:03:41Z"
mac: ENC[AES256_GCM,data:pGDHVS0FKn8LCVjiEFyWlxr5F1AsHkPGxnTssRf8bs6aDROqOVwKDPJMgtL0yu9+uwUz8wHFAHjFuM2K3icgFD6nzkQxjuewhxZd4776GatqvneyPeQx6sP1sPHAqOjzDOE0My1xpf4QiXwkx8Xls2ciLnq8j9ZL+/x5INUCYdA=,iv:XOFrgljl3a4RJoJ9BNKq0I/pVSca+gQcs+TwsQjwZco=,tag:ReAMvKAamofyQCYS1uJ4Qg==,type:str]
Add backup for fieldseeker-sync files. This required changing the directory of the user files so that I don't accidentially backup Gleipnir test files.
2025-09-30 17:46:46 +00:00
unencrypted_suffix: _unencrypted
Add separate restic roles for separate credentials I don't want corp and prod accidentally smashing each other, or being used as a credentials escalation attack.
2026-01-13 14:57:33 +00:00
version: 3.11.0
Reference in a new issue Copy permalink