nixos

commit 8f1fae6dc80e9acf566d04ff55366efef087fd4c
parent 57f1234de5d5df83a145d9129ea6b7e36c1a5041
Author: MTRNord <mtrnord1@gmail.com>
Date:   Tue,  3 Oct 2023 19:14:24 +0200

Update keys

Diffstat:
M
.sops.yaml
 | 
2
+-
M
nixos/common/secrets/secrets.yaml
 | 
32
++++++++++++++++----------------
M
nixos/common/sops.nix
 | 
2
+-

3 files changed, 18 insertions(+), 18 deletions(-)
diff --git a/.sops.yaml b/.sops.yaml
@@ -1,7 +1,7 @@
 keys:
   - &admin_mtrnord age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
   - &server_worker_1 age17stexdkcvgrtlwspm6fk4eutpuspd9hyv9wqdkjstpa548hzkg0sem5max
-  - &server_worker_2 age1c6420232n3rs9kwlqjrucv88pdu0khmdzxlff8tpnvmccuh9sups07l3hr
+  - &server_worker_2 age1lfcg46f34nm94fdj2vpkwggcntjlayd7e09excw6gez6fh43m9tq8v2qah
 creation_rules:
   - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
     key_groups:
diff --git a/nixos/common/secrets/secrets.yaml b/nixos/common/secrets/secrets.yaml
@@ -50,29 +50,29 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDeVNQL3UrclZQMDFocVdW
-            YUxRQmNVU056Q1FSeUhTcmxibVhMUEFWWWpnCjRaOGlXZ211UHVCQVplT3FVNnB3
-            WGtBQ1VCb1dNYXg0VmwzMG9QMFc5MzgKLS0tIGt5VU9tZjdiaW9lYllFQ2hlWlVI
-            UjJ2eURONVlLK0NNdWdRbkhydG94aHMKWlfbossuNrR6Fd1+tJ4OgoHWbZIeo8+3
-            RPKpCm+jGCZtygv5D2igl25HF+G9FM2cOtG3IOHKiKKnAZMiov5VbA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0WmdLZjNBemFJTU9SbkQx
+            R0tRUVBUNy9sODhqeEp3R1U5TFErYVZtVFR3CmwrYVR3OUlRbys4dE9DS091OWd0
+            N09NNFFXZmYrakJZYnQwSEJlbnBkajQKLS0tIFY2ZC9IVXA2NGNrd0xhMG9Fcmwy
+            ak5BbU9FMWlxUFNCbzl6MHRPWTJMM2MKOibiOXb/5grKxrWc5VcsQT31hTNZ2BVs
+            v3t9sz4qaDSrZS27ncn3xQEeBo1xfIUwWwoXbUH4IUhhY7Xb8+JpBw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age17stexdkcvgrtlwspm6fk4eutpuspd9hyv9wqdkjstpa548hzkg0sem5max
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6UmRqWG5xVHJXUVR4QVBF
-            SERYMmp4Nkwwb3g4Zmc3RmQ1cDNmcnNETEhBCmN4VEw2N0MwZE1IOTEwSXMvVDgw
-            TmpxSndvUmQ1RjZvM1pucXhHcE84ak0KLS0tIENFTmZjakFwQ0RBbXJSNXhaU1Uz
-            RXM5eDNnZ3Rnc2E5dk5iamdjeVJNTUEKbpwx04BOlENzM3q9OmuLjFkN1c2V1ej/
-            /0O+oAUxHFiO93xPGFptux0uhrx+FLoV/OeoV+21DOzJQm8B+Tt3FQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwdWxTdmI4ZWwveU5jcXBZ
+            VTZrVUdwTHdxNWdUK3ZSLzNkMU8zazMzTUU4Cm8vcFkzUVZRcnQxeGxYaVRFemtI
+            TDlYRXAzYlBROVk1aDJVMmwzaFh3RlUKLS0tIHJLTGxqc002Uk11ZFkrUVMvbFdQ
+            UUtCMHRITFk0dTFBT282M3Fmcmh5dmcK7NOSDZUVZYk1aA+z4RAEiM1XrbDd5kEO
+            VQHo42QhRshJY4nsXY2U14FWttb2YyM2tkxUJe2UsPqnMdbvmgzNyw==
             -----END AGE ENCRYPTED FILE-----
-        - recipient: age1c6420232n3rs9kwlqjrucv88pdu0khmdzxlff8tpnvmccuh9sups07l3hr
+        - recipient: age1lfcg46f34nm94fdj2vpkwggcntjlayd7e09excw6gez6fh43m9tq8v2qah
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKVENlblNBVWRMZHJhakVJ
-            VGk3UG0wRGhZWThFbDBpeGFuNUc1SEJtSUhBCi9Kd0ZFMHBpenFtbG9Va2RRV1hm
-            aGFmYWdIMEEvQlM3citXUWQxSGtoU1kKLS0tIGZ2Y29QSjlDQytJdnpGalUrWlly
-            OHpDTVpnbmJyMGI3YmFhVWFTS1N1MHMKAfwhfnkIKGs8HVj0YWvP7h5t3dsiy6Rs
-            qzbIjCQtcuKxNV2FepM/6IFXbykdpc2zJgUd5cAtjBlkGcZmVegYGg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzVzVFRG5RblhNaEh1WmpH
+            Smt4MVptcWlaOFlmTTR2UWE3OTJzY3I3ZkNVCklyVThoRGxqUWV2QUJNLzZrQ042
+            MG5rdUxQcndvbVdFamd6aExwSWx0YWcKLS0tIHZYOVpKUlVid2pDbXFhOTZLaFlM
+            cjJBa3BJdW5aV2RTNC9OQmdZemQ5djgKk/t49puojKah5YF/B8iG39sMvIhawUQd
+            aGIt9LpE+yvKDkXQ8MEF9RgHxuudDomRADtQEdw3Wgp23xG8XncTKA==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2023-09-30T16:50:00Z"
     mac: ENC[AES256_GCM,data:2Bpnqbl07IxmiWEzMrq6JUsZcPTf2Z0HQ06K57VaNnUflL6glIxtnmBvDcnbdubyy6hF6ihs9z/tGwRwrLFYftPOWfmdwI7M9VYRkbQQ17zblvY61tcnXjlWP4OTjClEcZZO4SlS4oxTHKkpyY09pDi2Gk/n1yVeVFcrG70HN1k=,iv:JCblLFI9oNkwEgdHuFBvoKCc7e2ZzeBVC3OpQMQft/M=,tag:cDtrSe5ITrJ/U5erU7+uMA==,type:str]
diff --git a/nixos/common/sops.nix b/nixos/common/sops.nix
@@ -9,7 +9,7 @@
       # This will generate a new key if the key specified above does not exist
       generateKey = true;
     };
-    gnupg.sshKeyPaths = [ "/persist/etc/ssh/ssh_host_rsa_key" ];
+    #gnupg.sshKeyPaths = [ "/persist/etc/ssh/ssh_host_rsa_key" ];
 
     defaultSopsFile = ./secrets/secrets.yaml;