Eli Ribble
2c101e6aaa
This was a huge hassle. I really wanted to see it working under a non-root user since it writes files, but that ended up being impossible because of several bugs in podman's rootless integration with NixOS. I've kept pieces of the logic around and commented out in case I can fix it in the future as it would be more secure. I also tried to connect to Postgres over the unix domain socket, but the problem here is that the container is built to run as root and I'd need to do some elaborate mapping of the root user inside the container, the non-root user outside the container, and the Postgres auth scheme. This would be great stuff to sort out, but I'm out of time now to work on it.
17 lines
3.6 KiB
Bash
17 lines
3.6 KiB
Bash
CR_LICENSE_KEY=ENC[AES256_GCM,data:TLb8iQFNLA88iLe8td0Oggd+bbNzqgxMCpP9ulMw4+B0t9l5vdKks1Vyx2hxV2Hg4BuYkoW6IW1njoWtT9gCrCAd8pGTJ7+x,iv:ywD8DlNGOA+caY0BnmgPm1r+cnjSRwZ5ZabKXrGtmxo=,tag:8ua/itSi75qjpU6Pl+6jig==,type:str]
|
|
sops_age__list_0__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaS3Y2VHlSQXRYOW43djcw\nUU02QWdjNE5KSzl0dk5ybnFORERXeE5NRkVVClllMkRFa2Izek1XYXpwb3V2ekJZ\neHVaY2dlVDRxbXRieC9MMlZRb0N2eFkKLS0tIFdZQXlYZVhFdFB4K3phRFpHVFBj\nVk5BQzJuQlJZcEVTZ3NTNloxWTRjRTgK9q3orFFKI6jQ25cX4y8spBM6xYOdo5lf\nqnetsT7N0vv4qFOlkvw7SJpljX3OMxlby1CpqYe6494GF2bUsg1tIA==\n-----END AGE ENCRYPTED FILE-----\n
|
|
sops_age__list_0__map_recipient=age1fnkhk9rv7r8gh84vxnhvndk4fgh20qcj4hvnfhdpumcydl6m6vrse50lrz
|
|
sops_age__list_1__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4Wm5kdGtjREE4V1dyK1ht\nTUtvR2pPbFdBeE82b1FRblVNT252ZTdERlY0CjNjcllTVHBlU21aSytFeEpxY0Jw\nanprclVndE1SQmRBUjNVcjgxajV5Y1UKLS0tIEFpakFESGw2QTJMOXkrc0cwanhx\nZmZqdHY1aklLTEpCUGh6TjdiM1d2R3cK7Cqms5RjPUWNe8Ks0Qe9l6XcBDeszE20\nrGuyXg10iHfMJpoLmAhKHZqTJQ0oyqWsKNVVoXV+RVHzMl3dRu2WRA==\n-----END AGE ENCRYPTED FILE-----\n
|
|
sops_age__list_1__map_recipient=age1x704pjnueguchkl54ly8w4w26ltys5900v7xnl7w3zlgasus09jszz45t8
|
|
sops_age__list_2__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4a1dIN2lXSmZxMnZqTXF4\nbmJ1OUxUTE5wbms4N3Z1ejNGR0lHY3RydkNNClNJaE95NDZzZHdYT2tuREpYdDR4\nbGhhc0J0QVJlQzBWTTZUc2cvc1cybVEKLS0tIEVwL25YZGlnNDlRb2dnSmcvdDV2\nbjQzRXh4TGdxWmY0OGIvV0p3T0xjRzgKl/q3bzJzwFNyJ7yauesM5a6X7fHEMgYq\naT92U9ZyWlyNfd8TNnRt4QWy5de/Wc7sYHzjvs3pYx6g59BiVByWCQ==\n-----END AGE ENCRYPTED FILE-----\n
|
|
sops_age__list_2__map_recipient=age15y4k929zaj9fdg3vd40pa40tgvrgv9mn22xfummn5zxfmkcw5d0st6prjx
|
|
sops_age__list_3__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHN3RwVk1IRzQzNFk1Z081\nY25uTGprKzNSdExUNUJYUkVzSnd1SC85TzFZCjhndjZ5N0dKbDI5eUJsSDdnd2hu\nU3ZSRmZBblhmdkplQW5UajdxN2E2N1EKLS0tIFpjTENsZjBzUkVOY1R6NGZIUXRJ\naVVhZ0JWZGRwa0RkUXhKM2FWS2prc3cKdDcyvzDVANVYeQQXWAl3wNqzDCXN+oHs\nlLHTkqKrms8kVCaDdsqYXNseMBzxolPRBKzB2Gcg0uRoFb0iw8NpdQ==\n-----END AGE ENCRYPTED FILE-----\n
|
|
sops_age__list_3__map_recipient=age1ck44jqpuz3zlthquvuh7wsemrjrgfzhn462sk7rlfetwxpgy0uqs79xn2h
|
|
sops_age__list_4__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0RUZtNHFhMkxIVGVmdzF0\ncm1TMjFBYUFocWthMHRTT1pMWC83ZDR3ckRzCjFPVFJmWkg0bnNwLzhSM2k1Y2dB\nb0NnRUFGRG1qRThoeXdVSmZtWGJwMUUKLS0tIFhoZVJPeHRPWitXVFhPMVVveDB6\nN0xzTUFyK2VSL3N1TW8ranQ1Sk1EN28K5MzlByMBH86TZIE7MwrdKo2ec2EknMwh\nRZfsOta+mz9aowTU3ZzikAb+Ena1Wk6Bpfv3/x3Z6u8rrKcmat/tBQ==\n-----END AGE ENCRYPTED FILE-----\n
|
|
sops_age__list_4__map_recipient=age1t3ryfktuhr3cysf49m9q2n8fkjf9ajjjnhztxw9hz8paxgk4lpcq065jge
|
|
sops_age__list_5__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLSEw1cElqRDRJRE42bXM1\nZjh3MDJQVFEwdFJmcmF2YWdvamJ4VDJKQmd3CjE2Q1FBUU10ekx0WjVNS1R6c3lF\nS0VZSkp5b0FWTDNTNTVObFVjVXZiS28KLS0tIDM1SDY1YWlLNkM5aEZoVng5NnhQ\nT3dYbTIzdlA0RDkrNDJEbE1hM04yK1UKMIdTHYf1ONLM4cG2V6+3cqZdsJCnAtPR\n6K741LxT5eHQ8o1vbtCi0/zWj/4lb/wmiCCRBgj4B88eQSdqxRhtPA==\n-----END AGE ENCRYPTED FILE-----\n
|
|
sops_age__list_5__map_recipient=age1j90h7hcp4fctr2xwj4zf9cxuelm43wkujvryc9hk6rzzc37rwdmss035w7
|
|
sops_lastmodified=2025-09-09T19:12:50Z
|
|
sops_mac=ENC[AES256_GCM,data:YiXYB4ZgQiqWhF+XUuu6kMW1kvf4FzBOdJiwuxaww9gFS3FMztReJYNYqHuVYQyGPQZgexVRgwGqf8kZ/aSsn8mSf4Wpx9zdI69bS9+mlJUN0ndQKQhP/wiO5TP4bmJxB0W8sq62V3nCWG82tdG6jTCNrpS2y3L4U4H+tg7uD+4=,iv:le11XPbNeaNY89a6hDmx7kyQWD1BhicHaUKT43qLOEs=,tag:QFDSWFDhE7ZESI4UnDUXRQ==,type:str]
|
|
sops_unencrypted_suffix=_unencrypted
|
|
sops_version=3.10.2
|