nixos

commit 3d262c3b9cf51b54af9cca52c1266ee4b9a4dafd
parent bbf00fc5ec9e0cf834fa1e6c4d60ec71394f6424
Author: MTRNord <mtrnord1@gmail.com>
Date:   Tue,  3 Oct 2023 17:07:10 +0200

Fix sops keys for new worker

Diffstat:
M
.sops.yaml
 | 
2
++
M
nixos/common/secrets/secrets.yaml
 | 
29
+++++++++++++++++++----------

2 files changed, 21 insertions(+), 10 deletions(-)
diff --git a/.sops.yaml b/.sops.yaml
@@ -1,9 +1,11 @@
 keys:
   - &admin_mtrnord age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
   - &server_worker_1 age17stexdkcvgrtlwspm6fk4eutpuspd9hyv9wqdkjstpa548hzkg0sem5max
+  - &server_worker_2 age1c6420232n3rs9kwlqjrucv88pdu0khmdzxlff8tpnvmccuh9sups07l3hr
 creation_rules:
   - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
     key_groups:
       - age:
           - *admin_mtrnord
           - *server_worker_1
+          - *server_worker_2
diff --git a/nixos/common/secrets/secrets.yaml b/nixos/common/secrets/secrets.yaml
@@ -50,20 +50,29 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZTVozMnNPOGdVbXFHYUhF
-            QS8rODFKbmhqS1V3WmVsNHRKaERlUWJxREdvClNSZG00Mm9qQ2t0NHRsZ2pPQ0xm
-            OTRzUDdTUlFVbWZYTUN5T3ZCMkdpekUKLS0tIHZUV2xxbEx0dysvVThtOVdHVjlq
-            dEZ4b3cvYUptU2dXeVRNTkF1dUN5bm8KJFfGPYmdhBRjbfOLZHg5mJW1B4rR9qMu
-            itlgBTe1GVavpic5m1MpzHHU3zLfLjZxidD4fuUpebp2nIhhUgUwBg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDeVNQL3UrclZQMDFocVdW
+            YUxRQmNVU056Q1FSeUhTcmxibVhMUEFWWWpnCjRaOGlXZ211UHVCQVplT3FVNnB3
+            WGtBQ1VCb1dNYXg0VmwzMG9QMFc5MzgKLS0tIGt5VU9tZjdiaW9lYllFQ2hlWlVI
+            UjJ2eURONVlLK0NNdWdRbkhydG94aHMKWlfbossuNrR6Fd1+tJ4OgoHWbZIeo8+3
+            RPKpCm+jGCZtygv5D2igl25HF+G9FM2cOtG3IOHKiKKnAZMiov5VbA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age17stexdkcvgrtlwspm6fk4eutpuspd9hyv9wqdkjstpa548hzkg0sem5max
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzNCs3UitXdno1MzV4T1JL
-            bWU2VWJOblFESSsveDUva0w0NkI5YTRMUldnCmp3ODFGd1pQZGxtdW9LTWU2TjBa
-            cnNELzZmRFhWVEIwRnlTS2lBQzN6T1EKLS0tIGM4ZU1zYmR1dGtQWlhRSUZhZ3Y3
-            Z2c2Kys1ZlNlc0UvOGpLT2dMSjkwK2MKxumdr/hrZ+nCiRuiP7le+AGBIwdWZGiK
-            27ISSZcezzcKSM3HeieZKeXQxn8yFsHxoQvH4AmUCQjeWMMhfPWPwQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6UmRqWG5xVHJXUVR4QVBF
+            SERYMmp4Nkwwb3g4Zmc3RmQ1cDNmcnNETEhBCmN4VEw2N0MwZE1IOTEwSXMvVDgw
+            TmpxSndvUmQ1RjZvM1pucXhHcE84ak0KLS0tIENFTmZjakFwQ0RBbXJSNXhaU1Uz
+            RXM5eDNnZ3Rnc2E5dk5iamdjeVJNTUEKbpwx04BOlENzM3q9OmuLjFkN1c2V1ej/
+            /0O+oAUxHFiO93xPGFptux0uhrx+FLoV/OeoV+21DOzJQm8B+Tt3FQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1c6420232n3rs9kwlqjrucv88pdu0khmdzxlff8tpnvmccuh9sups07l3hr
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKVENlblNBVWRMZHJhakVJ
+            VGk3UG0wRGhZWThFbDBpeGFuNUc1SEJtSUhBCi9Kd0ZFMHBpenFtbG9Va2RRV1hm
+            aGFmYWdIMEEvQlM3citXUWQxSGtoU1kKLS0tIGZ2Y29QSjlDQytJdnpGalUrWlly
+            OHpDTVpnbmJyMGI3YmFhVWFTS1N1MHMKAfwhfnkIKGs8HVj0YWvP7h5t3dsiy6Rs
+            qzbIjCQtcuKxNV2FepM/6IFXbykdpc2zJgUd5cAtjBlkGcZmVegYGg==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2023-09-30T16:50:00Z"
     mac: ENC[AES256_GCM,data:2Bpnqbl07IxmiWEzMrq6JUsZcPTf2Z0HQ06K57VaNnUflL6glIxtnmBvDcnbdubyy6hF6ihs9z/tGwRwrLFYftPOWfmdwI7M9VYRkbQQ17zblvY61tcnXjlWP4OTjClEcZZO4SlS4oxTHKkpyY09pDi2Gk/n1yVeVFcrG70HN1k=,iv:JCblLFI9oNkwEgdHuFBvoKCc7e2ZzeBVC3OpQMQft/M=,tag:cDtrSe5ITrJ/U5erU7+uMA==,type:str]