diff --git a/flake.lock b/flake.lock index c57e831..84e5159 100644 --- a/flake.lock +++ b/flake.lock @@ -104,6 +104,22 @@ "type": "github" } }, + "nixpkgs_2": { + "locked": { + "lastModified": 1744868846, + "narHash": "sha256-5RJTdUHDmj12Qsv7XOhuospjAjATNiTMElplWnJE9Hs=", + "owner": "NixOS", + "repo": "nixpkgs", + "rev": "ebe4301cbd8f81c4f8d3244b3632338bbeb6d49c", + "type": "github" + }, + "original": { + "owner": "NixOS", + "ref": "nixpkgs-unstable", + "repo": "nixpkgs", + "type": "github" + } + }, "nixvim": { "inputs": { "flake-parts": "flake-parts", @@ -155,7 +171,26 @@ "inputs": { "home-manager": "home-manager", "nixpkgs": "nixpkgs", - "nixvim": "nixvim" + "nixvim": "nixvim", + "sops-nix": "sops-nix" + } + }, + "sops-nix": { + "inputs": { + "nixpkgs": "nixpkgs_2" + }, + "locked": { + "lastModified": 1752544651, + "narHash": "sha256-GllP7cmQu7zLZTs9z0J2gIL42IZHa9CBEXwBY9szT0U=", + "owner": "Mic92", + "repo": "sops-nix", + "rev": "2c8def626f54708a9c38a5861866660395bb3461", + "type": "github" + }, + "original": { + "owner": "Mic92", + "repo": "sops-nix", + "type": "github" } }, "systems": { diff --git a/flake.nix b/flake.nix index 7f62b7b..1152d5c 100644 --- a/flake.nix +++ b/flake.nix @@ -11,9 +11,10 @@ url = "github:nix-community/nixvim/nixos-25.05"; inputs.nixpkgs.follows = "nixpkgs"; }; + sops-nix.url = "github:Mic92/sops-nix"; }; - outputs = { self, home-manager, nixpkgs, nixvim }: + outputs = { self, home-manager, nixpkgs, nixvim, sops-nix, ...}: let allowed-unfree-packages = [ "corefonts" @@ -32,8 +33,39 @@ nixosConfigurations = { corp = nixpkgs.lib.nixosSystem { modules = [ + home-manager.nixosModules.home-manager + { + home-manager.useGlobalPkgs = true; + home-manager.useUserPackages = true; + home-manager.users.eliribble = import ./home.nix; + } ./host/corp/configuration.nix ./modules + sops-nix.nixosModules.sops { + sops = { + age.generateKey = true; + age.keyFile = "/var/libs/sops-nix/key.txt"; + age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ]; + defaultSopsFile = ./secrets/secrets.yaml; + secrets.matrix = { + format = "yaml"; + group = "matrix-synapse"; + key = ""; + owner = "matrix-synapse"; + restartUnits = [ "matrix-synapse.service" ]; + sopsFile = ./host/corp/secrets/matrix.yaml; + }; + secrets.vikunja = { + format = "yaml"; + group = "vikunja"; + key = ""; + owner = "vikunja"; + path = "/etc/vikunja/config.yaml"; + restartUnits = [ "vikunja.service" ]; + sopsFile = ./host/corp/secrets/vikunja.yaml; + }; + }; + } ]; pkgs = import nixpkgs { config = { diff --git a/home.nix b/home.nix new file mode 100644 index 0000000..4e82e73 --- /dev/null +++ b/home.nix @@ -0,0 +1,10 @@ +{ config, pkgs, ... }: + +{ + home.file.".config/nvim/after/ftplugin/html.vim".source = ./home/eliribble/config/nvim/after/ftplugin/html.vim; + home.file.".config/nvim/after/ftplugin/go.vim".source = ./home/eliribble/config/nvim/after/ftplugin/go.vim; + home.file.".config/tmux/tmux.conf".source = ./home/eliribble/config/tmux/tmux.conf; + home.homeDirectory = "/home/eliribble"; + home.stateVersion = "24.11"; + home.username = "eliribble"; +} diff --git a/home/eliribble/config/nvim/after/ftplugin/go.vim b/home/eliribble/config/nvim/after/ftplugin/go.vim new file mode 100644 index 0000000..5ecb247 --- /dev/null +++ b/home/eliribble/config/nvim/after/ftplugin/go.vim @@ -0,0 +1,10 @@ +set indentexpr= +set noautoindent +set nocindent +set noexpandtab +set nosmartindent +set nosmarttab +set nu +set shiftwidth=4 +set tabstop=4 +filetype indent off diff --git a/home/eliribble/config/nvim/after/ftplugin/html.vim b/home/eliribble/config/nvim/after/ftplugin/html.vim new file mode 100644 index 0000000..98d7467 --- /dev/null +++ b/home/eliribble/config/nvim/after/ftplugin/html.vim @@ -0,0 +1,9 @@ +set indentexpr= +set noautoindent +set nocindent +set noexpandtab +set nosmartindent +set nosmarttab +set nu +set tabstop=2 +filetype indent off diff --git a/home/eliribble/config/tmux/tmux.conf b/home/eliribble/config/tmux/tmux.conf new file mode 100644 index 0000000..678d927 --- /dev/null +++ b/home/eliribble/config/tmux/tmux.conf @@ -0,0 +1,22 @@ +set-option -g default-command fish + +bind-key h select-pane -L +bind-key j select-pane -D +bind-key k select-pane -U +bind-key l select-pane -R + +# nested tmux, obey me +bind-key a send-prefix + +# Avoid the annoying bit of delay when using the control character +set -g escape-time 0 +set -g renumber-windows on + +# Show a visual bell, even on other windows +set-window-option -g visual-bell both +set-window-option -g bell-action other + +# Set up the window visuals +set -g window-status-style bg=yellow +set -g window-status-current-style bg=red,fg=white + diff --git a/host/corp/secrets/matrix.yaml b/host/corp/secrets/matrix.yaml new file mode 100644 index 0000000..18d6fd7 --- /dev/null +++ b/host/corp/secrets/matrix.yaml @@ -0,0 +1,61 @@ +database: + name: ENC[AES256_GCM,data:ZrJA7XHzEHw=,iv:/ZbnVEvsybBga49nfjTAkhCOjKjEEHfl3c+rigYiYqM=,tag:V9766mzGuTG9DBAuwhxhzA==,type:str] + args: + host: ENC[AES256_GCM,data:wpLETflHiMiTOjmsIVwuNp3pk7Q+B8VprA7NpT+op/ZRKrmlHjXJx5zaEtPa3CHHVzCxfnlSKzxK3gIh5BN3yAadITGS77LNRg60WcDUiwQ=,iv:sp7B/du20BhmfvO2ify9fTXQuNWeBeP5Wpg3wIwVEkM=,tag:M4POlUq7AysR61Kf1sRFAA==,type:str] + port: ENC[AES256_GCM,data:lnt9thQ=,iv:B32dKpd6yZ6aTuaV/tbrPYEKkNf/wOl491+Xehb7gnA=,tag:GayrOi2xbWl0eZdZdBBGlA==,type:int] + dbname: ENC[AES256_GCM,data:3g6cUdr6f5VbADLt2t4=,iv:wilQcPi4JcXnd6tS2xKdM3QiKlbZUq5Yi/WeBzL13no=,tag:updGYtJmHuysKHUpIBKqsg==,type:str] + password: ENC[AES256_GCM,data:sL7OawHY/GPlOKtvjLJrOMpVF2afjsB1fqkGuyYlazsKbH0R,iv:4V/fKgrJQ13uo8Q5+CkroB4rwNnlbrJjxzkRNNpv2i0=,tag:afybUSg7dH+voYxlya6eyw==,type:str] + sslmode: ENC[AES256_GCM,data:9anRptfbNw==,iv:VxrhGMe+OYtq8BcrzORQ0gw7+FjwNa84Ma++x3k2iUI=,tag:PnFhXZs9jUcdakFK9lj0tg==,type:str] + user: ENC[AES256_GCM,data:X6u1xFUfTMCwawfwEeU=,iv:Xob2n5d3Vh9owgMRgA2q0hA0UxjkNqiKsgM0c9pWxVM=,tag:rbpUmoMw2iDure29PEoUOw==,type:str] +jwt_config: + enabled: ENC[AES256_GCM,data:7uor+g==,iv:B50cMDSPX6VrMPPdJkx4p3Bd8jtWzrCgQw/WgrZ7yic=,tag:nBlihpmCIZt+giZExHaVRA==,type:bool] + secret: ENC[AES256_GCM,data:QpKlnxj05T4W+CXPKRGs4pU2EqZ2tJEv3idBpJIIhhtqUGQq,iv:OffGtLdjnyQw5vY89J8OoNMd0dmwTyCCkoxuRrdP2DY=,tag:FWFg9sm35lBB8IB1bu+yEw==,type:str] + algorithm: ENC[AES256_GCM,data:XrJgRxo=,iv:r4H1zYZ778x5fpJ7uSIXnL4dLqfFnr7DQu2VsYNP1Jk=,tag:o07aH4rJJSTzh17zlhZyhQ==,type:str] +oidc_providers: + - idp_id: ENC[AES256_GCM,data:cgJpujV0/EEJ,iv:3YRf03u5LKZmW63NBKFPJFSq847iWX7WkbqRPxihHL8=,tag:/5OvEhCOqEXFSVZym2LsvQ==,type:str] + idp_name: ENC[AES256_GCM,data:Cs3Tm1w3/VYn,iv:25zJteQ6oLYTQA907AEJAnl7z1dSLQmzkiNZpxKglJQ=,tag:CudKqDc7HyQBQiwxRWINOg==,type:str] + discover: ENC[AES256_GCM,data:SG5SAw==,iv:/SkMTm03sktlFDmR9Ix1SJmF0iAiyRNobh+ESGRGDG4=,tag:C1Fwr6cplmeZdeEHTVYbrQ==,type:bool] + issuer: ENC[AES256_GCM,data:KBIHPMZLoRXE4NvQwVY/aFrkdIG7dlSoFk+XQ6JGCHFO04mDAQu6spEA+ngzKfv4yQrgW6UT,iv:9Cf7l/KFSOKV6dE5LEOkz6Ya/KAtnIyqENhW+wNACWM=,tag:yT6mGNJgIoOpJoYavpYyXg==,type:str] + client_id: ENC[AES256_GCM,data:6m6nK8gcYYzyVc5FD1dw2vJB4zvnZyPcYGfmv3aISY4TrYeibIW8Uw==,iv:cBU8D4UtRx2eriezAT7C5zR48dgkg6l13wJtNUE4pyA=,tag:h2Lks4CiZGsZymdEGNDnUA==,type:str] + client_secret: ENC[AES256_GCM,data:KnN4lu9qiQLFnboMkAg4a0qlgLn8KHzmU1VPS72YYozczaUQ6x55odND9vweS/bOv4RAuYXzCF+d4lYFPk/YhFAdww1bNmUmxUD8B6vWSR4Z+2WnQQxsrlMHAC/K8Vws6XNQQDp2odC4HB6rWGyYjTqTiprbjQCYEd/UA/87Mxc=,iv:/AbZrjoGYx627V4NcPT05aWUC1ANNcLDmU0qbpr1cc0=,tag:nxt0LERWXkF5B1FajHJpXA==,type:str] + scopes: + - ENC[AES256_GCM,data:IWmLqrZX,iv:c+auGcaEmCbmHdjI3lCxoPDKiAm2lxD0HgJ+b0/Wd6I=,tag:37ETew7nCQcMqgsm+IBiiw==,type:str] + - ENC[AES256_GCM,data:w8jeZpOlCQ==,iv:9rz4tGa8grZcMTAKdCKqni+pZWbV1/v3HSMeCsQRgi4=,tag:9J9gR9Ba44fKwQ9zj4G3Fg==,type:str] + - ENC[AES256_GCM,data:6zzD/ZE=,iv:5v921XCAvCAHKFwZjRnKUIJRz7O25DCuHWXzWzpv424=,tag:Ureq1d+ngx2A4MenbaRioA==,type:str] + user_mapping_provider: + config: + localpart_template: ENC[AES256_GCM,data:jA7YWqSD4f/gzfgwZbsQRvoNqf9j63leqG6qMk8=,iv:Aeagyjj0QPE2869mKaNcIhynmI6siJHMtY6G7urldgU=,tag:xxhNuhEQ8rkY763Gnl+bzw==,type:str] + display_name_template: ENC[AES256_GCM,data:SRV7pDBwbbX/AXcZjLIoaODVlBtwPmCyfGQ=,iv:YSmtUR9hWxkiTDe+gsAgAWo20ZimWoMWT/fFLZYoli4=,tag:24mQimu0UspkWDqGkisM3A==,type:str] +sops: + age: + - recipient: age1x704pjnueguchkl54ly8w4w26ltys5900v7xnl7w3zlgasus09jszz45t8 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPWWpweWN1WjlsU2o1NFJ6 + MWU0dUMxSi9sck5WZXp0eTFNelM0cDVvN2pRCklMR2ZwNVp0R1BNYmY2eXI1enJZ + amRsVWYxQVI4cGpWVVc2c0NlOHdBWUUKLS0tICtTWjdYZUJsSzZLWGFqUTFaU1Fh + NExqTVhEcEhhcmNyUnBiY3ZTUngrOFUKsasPAg80MpVVDN2JBlWUTZuJfLR6bL+G + CRj0AbjX6CTfjpqQItp5eKBTubdA2vQ3hYCXv1L2Nw0ZXHL5UWu5vw== + -----END AGE ENCRYPTED FILE----- + - recipient: age1kgwk20cc6t68kqj5nhem6swvx6k4e7zjx2xdwy382360h8tdyqrq0nn3gf + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFc2p1Vm1hUzJ5YTE2eVkz + QlZKdzF4L1R5NldNVzBOZStlQVh6YWk2V2hzCjMxSmtubmVic0xBdW82enZJQndI + VTBORm5MbnJhRlBhSytiR1IvMUFXUWsKLS0tIDJ5NENqbS9Hc3EreXFLMmR1Z0VK + NWNSN25jTnEzbzlINTIyQkdydlBxdG8KradY2z8V5jKtk0dm5lfvoueZ+h41qar4 + BRIPgBYujinp/NT5bbPaTFilzs64vpue8KyekaTlmLeLP0mcHHsyQg== + -----END AGE ENCRYPTED FILE----- + - recipient: age1z8gnjnye5d0czrluvvs468h05sjugcdapngdmjpwlk6l26y2n3asa0phg7 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2QU4wZk5aNVJPRVdMMFJr + MWJUajhIS0VwUEJRU0VqdjlrQm1sSVhNbUc4CnBUZUtacHFXdXlSdDdjZFozVzlS + ZVh4cm5rWm1qTjRxMW1zMEtua3BKTFUKLS0tIFdiRHBaN2wrdkFLMmpLSUxKRWNq + dkNkaENKMDl3cXN5U0tld2taeVovS3MKOrZH2DUfYubcpkFQDVBdo7VYy5FZMmll + 7B1t+tPkqdCYzqooH9HbjFkq263oVb1bvmucrAPweha50ShRpu0VrQ== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2025-06-17T00:07:18Z" + mac: ENC[AES256_GCM,data:8VZ+p8MFGHCD2kojoPf0Gj1Q9stTScF113QxKVtExMlqC2Ba2Tinr8cFIYBW5jgKH9atFfoCOyUj2KMyzOmPJXM8wqKya1Idrk8a4CgazJkBNroRjb1SrZkJwJppNcBsvdB83udOPYQZFiguVlg6/CJz3RGnEvbUSeUhQqVsBMY=,iv:snr78fElcuHJ8ux3cZuw+lqGrS9BpFIwks+uOmc5TSo=,tag:bQI/wxSgdmHRKK3UdgUpzw==,type:str] + unencrypted_suffix: _unencrypted + version: 3.10.2 diff --git a/host/corp/secrets/secrets.yaml b/host/corp/secrets/secrets.yaml new file mode 100644 index 0000000..4021e79 --- /dev/null +++ b/host/corp/secrets/secrets.yaml @@ -0,0 +1,45 @@ +vikunja: + auth: + openid: + providers: + clientid: ENC[AES256_GCM,data:mg2upgLEQdpZEnwG76/INggkZmo6dQI1JQ2h1MtDqJZihXYpyCQlpQ==,iv:TgtzUXEyd9mlDTBujo8kVsrAhncVnCxBw3SzhNZxpG4=,tag:FkxmtHayYFfG/XOBNxgygQ==,type:str] + clientsecret: ENC[AES256_GCM,data:xcbWGC5HUUPECiKGr/ueQvphT3tzou5Wvl/RzqRXN3PLgFT/mZtenBrKlf/mjhSwGHkNJHdZrm6RAK3Uhu+FNFZalrAO2wR+YXoPIRKoBjNwmq2eO5nVIWpXNnkhME9Tzc2OwyafJ6+rFh84Oynx5/+Ely0v041iLM6LHXKSVVE=,iv:/lyeEUh3YH3QN7LFe83InVtywFP6ChlXYCASOfl/C4M=,tag:2gtFCCruyGbijH1njNnOsw==,type:str] + database: + host: ENC[AES256_GCM,data:1WYHQ+x+wJ+F5KXYuZ95HMoQCmVN6M+wQ6pIzMqFJgvcnIphq1/uePA0bAq87+b0lGSor0c4mPqkb28EUt6hOcYcEcoawViXrb7DscJGljddeUl9Dtc=,iv:u+AATslu+oUdSvPRu5xUMUYPlTDugyKpJARy7D3wurc=,tag:GBLHimUoJiInSvJ3guv+hA==,type:str] + password: ENC[AES256_GCM,data:CloDvjAt+N2B7ubewNQP1EdYhA==,iv:7g0W2EkFjAnw7d+VPDe6eiRv7XpriIg/0g53eRGDe3o=,tag:LrNAT2tqFOMJ1C3yrjIaaQ==,type:str] + user: ENC[AES256_GCM,data:/JsWYTb/YRQDyy0P,iv:N+slGsGKqD0is0WWNXxrTMAC/Puo4ZgHC7s2m7PzYNs=,tag:lO9wl1uHind1Y1jssySZBA==,type:str] + mailer: + fromemail: ENC[AES256_GCM,data:6R29Cxg29t68qgc48QZCAeF2eUPtt5795C/YdNY=,iv:EcF2zwvgs1IwlQlCoRsrfbsufRtslhY0Iyy+UdUwArI=,tag:6Dx4sp9t0qmzVGfuzGTAOQ==,type:str] + host: ENC[AES256_GCM,data:NxsCNMJMl1qG4EgbDfTS0maHHsQ8,iv:SOs/rGY8hq8AEW+bDUCulAbV4YGoF4mIdNX6qOL1/ik=,tag:9j7jey8e/jcKYXM3rsSqbA==,type:str] + port: ENC[AES256_GCM,data:nr+LpQ==,iv:6jtsaHr5FYmUL0Mw3HSeyeI4rnlHVSTdKWEDBNBDuwo=,tag:L89e9tUBJqpMQM82J2RG+w==,type:int] + password: ENC[AES256_GCM,data:8zQeI0GtMPTy+L4JjCwLePejy9KEfx2b,iv:hOWwnCKSLJ5Uuu17r35FH++WE7AM9F/cxc3e+ETkdRY=,tag:RDtZvrJp0p/qqRVM5xWDMA==,type:str] + username: ENC[AES256_GCM,data:II7dPDmoZGD05wwrupUR3nDWyMhZ3RGhSWwSwSA=,iv:C/X9W7RkV/rLfWsZf+PlIi5LWxIwnDRSDcpDVQsgyvE=,tag:IQf29fGa1HuBblkd1F/lnQ==,type:str] +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: + - recipient: age1kgwk20cc6t68kqj5nhem6swvx6k4e7zjx2xdwy382360h8tdyqrq0nn3gf + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWUHhKNXYydHVPK3cxNzhj + TlgyOFc5QXlhOEdjcXhRR2x0UHNxbjQyWm5JCkxUcGgyZUpPT0kzejVjcDZFbU1M + aktLbFFsZE5PaCsvb1oxSjRSK2hZNzgKLS0tIGJnUWFMQWhWSWV2WkZVMFBsN09a + bXNjYThSVkxRaHVCUzBFVWUwMWJDV00KS8CbS1qaS44PceePrLRzNW1ykCxOdeH+ + d0QMQIb73/n1MIDyqBX/zIIqEGsvBKqOX3JQ7U2G62opHnosGBFN0A== + -----END AGE ENCRYPTED FILE----- + - recipient: age1z8gnjnye5d0czrluvvs468h05sjugcdapngdmjpwlk6l26y2n3asa0phg7 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4ZU1Wby9RL1pXS0tweTZ5 + aCtGQUw0NjRMYXFzSjF1TDhPWnZLVWdlM21RCnBSSnhZYkRHQkp3VFVGbGpNMHpB + NWhTMXlXa1Ewb1JpTENDWTJ4U0R6MncKLS0tIDdLSjJpTnZ3QUlDVUtldmdmenNH + OEdlQmtPdDAyZlRUbU1oVWR3Y1U2ak0Kt+IIpRpTz+VcG4Iur2UcP91t7r79qNet + 9oDJxwta0DmbjHN/PIaqzrObJzeijGWpiILBN6RvB1HQ+4Gdi1FWUA== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2025-05-09T18:49:41Z" + mac: ENC[AES256_GCM,data:0OFrVM/sqkpVDtB7PxizOnRhcbZUjrSpA24jC9ViD7sueSe633fSfGEJTsUvF/RqUniVWTyWghVstS2HzhxORElQ0ZNjqD7K1GBkNK5XGzfo/aRQ+MWFu0g1Fu7wUe+Yc6ZAF0yExQgpl10Gt9tZysCcwlEFZIYOFWwyY8SiVtU=,iv:xvcsIQij3H16IJOfH0RjwPJKk0KbmnAupDQ1ozHDmOA=,tag:ozr9gaBinE9PF77N9a6UVQ==,type:str] + pgp: [] + unencrypted_suffix: _unencrypted + version: 3.9.4 diff --git a/host/corp/secrets/vikunja.yaml b/host/corp/secrets/vikunja.yaml new file mode 100644 index 0000000..80ee877 --- /dev/null +++ b/host/corp/secrets/vikunja.yaml @@ -0,0 +1,64 @@ +auth: + local: + enabled: ENC[AES256_GCM,data:O2x0Z/k=,iv:ezwquGlv+vvKpLNqtZa23ffyAyYRloMM+sb62DN8p2I=,tag:Dckn9P8hdr/VKDXZ5hT2Yg==,type:bool] + openid: + enabled: ENC[AES256_GCM,data:ZaBYuA==,iv:DNIE6XfjPM9hlnAlyJqR/lcQ2punyXGakJqHiyiLykg=,tag:le+PEbA82cvBEUELgm/s1Q==,type:bool] + providers: + - authurl: ENC[AES256_GCM,data:/xR8DRf+iyEk67dTiBKr0uFAfoY1ooTbCLXNs2tot3U04mtjTSWaGogDj7dBkVHzY5P0eQ==,iv:lQHKSZoXthEZiL/S+tEoIHlL+3dhSHEDHkpStLHn1ek=,tag:gtxABdZQlAKdsWouNqBpPA==,type:str] + clientid: ENC[AES256_GCM,data:Eo2FdrVFlbJ582ITPA5BEPFQ/+YsEtobg/I+t2HsGkBOUx9qQRSNbg==,iv:QZSMD/efXXY+2PUCvDxMsX7VGAh2CkomK12Xf/LtG3g=,tag:21A4YaEO05jjYJBPg2EhIw==,type:str] + clientsecret: ENC[AES256_GCM,data:Y6OWMiqKQ/DFBirtHGk7MIx0uvpYOascC3IF+58OyJvVVW+u9hJwT24t/Ijof1Utr94cuv0uwA064Gc+2yQgv3ehSwmI6GAxM/TjlixYHk6yOJaBNwX3H/xhEa8B1vG1FQsESpOgeCqvEcJecFub1FD3qB5WvtAFTQa+2KMe2nc=,iv:ly2myVlX+xWjO62ne7xLZ+KU1anDCf7OzAObjlJTyfc=,tag:QjALqsNsxsUMj43/BRJLiA==,type:str] + name: ENC[AES256_GCM,data:gk9c7B2VSipu,iv:S3dZbFajYIIM5ZMhc1bKWy1cIkT89cyzr2mjrMPJuQM=,tag:7mp5HELbvxyAQUmiZ8shSA==,type:str] +database: + database: ENC[AES256_GCM,data:3vRmQlgmpA==,iv:SyEP8qgc0Z2IA6KKVmiToFMn+K8uIF/fps9Ij9r8nfU=,tag:lTIrlIxCJdUxpyubFrd31A==,type:str] + host: ENC[AES256_GCM,data:dj3xuQPcDEkZYEd0To+z2Bx96YB4OiYT+qwqYiW/PUAtxvjuRUmZALxF5E3e68kfvC3jg3IHbKDZfgH5EFxlRz+J7MF0mKtnm4t38xB9F++zw5GpiwU=,iv:vh0s3fy++ztQqRDjZaY+fGPUj1ggxXLxgH3ejLep+sw=,tag:wMlqYSRqxOdpWNoSPQriGw==,type:str] + password: ENC[AES256_GCM,data:t8nioHvQLUJ+WlhlvhbFNRM90g==,iv:RUAcWAApnDejafBye1jwCRrg8oAZMSsTVsPI2fnepls=,tag:T5lSAE3bKf1Im2hlTFNgMQ==,type:str] + path: ENC[AES256_GCM,data:PkxxZIYSKz2rHxY+PYBG0/obcSezFtacdRAe,iv:5c4W+QqBKkNWeVtAzx2U79uR1sEwrOV9C0ngjncJnKk=,tag:XRRXaBD9AhWnnVB/jmI1lQ==,type:str] + sslmode: ENC[AES256_GCM,data:+EJTpzCchQ==,iv:4OsPVqwz4Rfl9mH1mRC6ZN47LAVOOy7/JU9eKuzyInc=,tag:jZ+51dVBQESJcMu2ifJXYg==,type:str] + type: ENC[AES256_GCM,data:doE55aJczrM=,iv:U2VJKCdNJbvrqdUUYiWtXkfNsdTeXlO366ZrAEDzSOk=,tag:gIMczFBQVVEpS11COD5eXg==,type:str] + user: ENC[AES256_GCM,data:aKa51nBEgo7JXoLs,iv:Z+DZ8DgsErBS1B1mEG2z9Lm64f8QrklNj2B0KR1VeD0=,tag:OKOLO4jSmG/UcUaFnKusaQ==,type:str] +files: + basepath: ENC[AES256_GCM,data:NhN6TDnbwFgvTqJMVHgle4zYnDli8g==,iv:2mde++xOnkhpTqPjWdnotynRVQ7iSVfciO5A7Qf+qoI=,tag:D+2c0BdB/L+O/w5uIxtNCA==,type:str] +mailer: + authtype: ENC[AES256_GCM,data:YE7Rb+g=,iv:TIxOoSfxMnitSJmlLNz4Z66MIg2BM/oBS0K3CTyXtKs=,tag:BKpymVwUb1HlWnQcpNSYJQ==,type:str] + enabled: ENC[AES256_GCM,data:qAWLUQ==,iv:ZVJflObxEH0TbyVV2UzTvvJxBNaVgCjJnBRZ/q9Tqeo=,tag:I0xw6AOf0cg312anWdjX4Q==,type:bool] + forcessl: ENC[AES256_GCM,data:gB2MVg==,iv:xhKoQKFVwKYGGH7/744gC84v7m6dNVJ6ylyOdcHKQJI=,tag:6FdK811Ni7W0kQA/gxKh1g==,type:bool] + fromemail: ENC[AES256_GCM,data:7TJ0opaIUhbeoU1X2QpEplSBDD36S+bUAlD22I8=,iv:ZH2mIenh/cJB8mRINr5QR2ZljYsHGpAsXkVGtdx6gPY=,tag:kVXHfAJRfQTcJeD1xOi41Q==,type:str] + host: ENC[AES256_GCM,data:25DOafmuMglBnBz97bdJ2724+R+g,iv:eOhIwASFjREp6aqj8jBMcJcvWuPkGOwYRs+ab38HVjM=,tag:wjrewM6VbskjCo2VDanSrg==,type:str] + password: ENC[AES256_GCM,data:UEpj1Qv0BLWx99SYkE/lEBvaaVTez6Nx,iv:cj4MribcwEYgfaihK80MNB6JlGj7FSh6wAb8qUXO6j8=,tag:hXZ6p1eqbtckfdC6wKbfrQ==,type:str] + port: ENC[AES256_GCM,data:UWzi0A==,iv:81BpDsycbdO8C4gGsGPWIGPysXyCRmkLPpfI4OcaY7g=,tag:80t6s1WYt6SFS5ncn5KUSw==,type:int] + queuelength: ENC[AES256_GCM,data:rLVt,iv:Nbku5F7yCP/cdnEdmCOykvzskput/udeeCWh2Dqh3BU=,tag:ylqkhT+oD6CshmAbEOauww==,type:int] + queuetimeout: ENC[AES256_GCM,data:DeQ=,iv:6hAex0lYfJG0/8TJQR61WKenLxMWe3qzkxB77GY4UAE=,tag:QcyShTJjicRgzCzsa4UCCw==,type:int] + skiptlsverify: ENC[AES256_GCM,data:hsB+U7U=,iv:z14drMNfwceOZ/73OTd04kySkasPbcQqvGybJ+UvCd8=,tag:9/BPkymFbOE08xJ5Y908Mg==,type:bool] + username: ENC[AES256_GCM,data:HvU7AaOKPf3HO5yL2K/fweE916oZymlkF24RW1o=,iv:LiSzYHKJxm+f8WYrU4nmnsOfiusauGaFGEblbUj/gsA=,tag:0uuY/L6v7vefMudsJBCzXw==,type:str] +service: + frontendurl: ENC[AES256_GCM,data:fVPLUx2rl6l6cWy4PpZ6e6HQBnhRbS4Tbky2QIcv5qGe,iv:sIvsiLFZiMXviJAz79ROMqe6wlwhenp2KnO4egVWV+Y=,tag:vA9zLgoQOm3AxPHVyalSuQ==,type:str] + interface: ENC[AES256_GCM,data:lPymX/QJ,iv:+4LewbExqOM5x5eupPh5IA5rEGvuTnvvts415TA+wAs=,tag:U/Bj9abo/y84uduG2ksvlQ==,type:str] +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: + - recipient: age1kgwk20cc6t68kqj5nhem6swvx6k4e7zjx2xdwy382360h8tdyqrq0nn3gf + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWQ0FVYjllWTBwZWgwQmd3 + T0QxSlBXVkRWNXFaa0hDVUlBQXNseXh6WWdZCmRxelBZUklaWDJ3aDc1YTRrSGtI + UFZmU25uWXNBMXUzVWZSV3g3L1lXMmsKLS0tIDFEbkZlVkdHZlZrSFh6UGJ4cVBP + WnkxZ3VKSzRYUmM4eXVBdEhYdkp3b1EKTtsIevsNSiFI0n+nOG3Xs9N4BfH5APoV + 2AdnEInKVF19VTYpVdzHWgcgx7F3xDnOrrPlY3i9pLqEoMGt7X6AVA== + -----END AGE ENCRYPTED FILE----- + - recipient: age1z8gnjnye5d0czrluvvs468h05sjugcdapngdmjpwlk6l26y2n3asa0phg7 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4ME4vSlFXWDFYeXdsUjNt + RTI3WmRhNUpTWjBpUzN3c3pYSVg5UlRzZ0djCkdGS3A4NlcrMFRnR0x6VkdreUJE + WGdwOGJId3AyekxhdllSUC9DemlsSHMKLS0tIGVHUFE0UlZUQXhuWWJBb0ZpZEpM + Q29CaEExTmhHQWU0WFlEVkVGWHZ1eFEK5VpTQOC/4syHDbo8mTOyP9TpfkVRsLXk + Qp3hvnslN+qvj/StjrG7rG3oB9qqRtcnE/BN45FfeR8xHrlXD3fUiA== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2025-05-13T19:18:20Z" + mac: ENC[AES256_GCM,data:TaDJl4KhP/0NQL1i0iTArV1zKzmtdrJXvKzNl2CXehPsvOyA8q1QfuXibzPhzahnF4jxcJ5PjrUcy8f9BxQePRbC2xxk8SAhVRpVw6jmklG45D6JQAlV4+uLRBdMGT7B5FvsUTyEdRw704fpbI48p6OzPvQWaxquFAvgm9PtnVU=,iv:Lh8oVwWfQUjRHWc16aYzzLQCWbMZlkb629YCJ0iPaTk=,tag:itBIsulMQZjLFMvlDguWHg==,type:str] + pgp: [] + unencrypted_suffix: _unencrypted + version: 3.9.4