From e7786fee0c3f454665a01440d0c94574b2e49f7a Mon Sep 17 00:00:00 2001 From: Daniel Olsen Date: Sat, 21 Jan 2023 22:58:31 +0100 Subject: [PATCH] add felix to jokum secrets --- README.MD | 8 +++++ secrets/jokum/jokum.yaml | 67 +++++++++++++++++++++++----------------- 2 files changed, 46 insertions(+), 29 deletions(-) diff --git a/README.MD b/README.MD index 02e51f8..96a81bf 100644 --- a/README.MD +++ b/README.MD @@ -37,3 +37,11 @@ for å få tilgang til å lese/skrive hemmeligheter må du spørre noen/noe som om å legge til age eller pgp nøkkelen din i [`.sops.yaml`](https://git.pvv.ntnu.no/Drift/pvv-nixos-config/src/main/.sops.yaml) Denne kan du generere fra ssh-nøkkelene dine eller lage en egen nøkkel. + +### Legge til flere keys + +Gjør det som gir mening i .sops.yml + +Etter det kjør `sops updatekeys secrets/host/file.yml` + +MERK at det ikke er `sops -r` som BARE roterer nøkklene for de som allerede er i secretfila diff --git a/secrets/jokum/jokum.yaml b/secrets/jokum/jokum.yaml index 9190aed..66d2aef 100644 --- a/secrets/jokum/jokum.yaml +++ b/secrets/jokum/jokum.yaml @@ -13,45 +13,54 @@ sops: azure_kv: [] hc_vault: [] age: - - recipient: age17tagmpwqjk3mdy45rfesrfey6h863x8wfq38wh33tkrlrywxducs0k6tpq - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmdExVV0x3TWJCTzlCVDI5 - aS9iYXRXcFltdG5FL1B0U0NITDlQTFRsYzBrCkpSZ2trakdaUmhyR0R2Rk8zRXJz - RHFHUVRRa24zaTJKaVBiQVpoSVZvbkUKLS0tIDRaMllWdUEyRVJwY2M5ZTJmeGJ1 - ZDI0U01ENkxVenhseXB3bjhoRHZQZFUKEH5jX6yjr4RrkTzusVge6J4HDqNOGUWx - GUPtOWaOioAdZN0Snu5nBu8f9I8vbt5Ry059CpFF6agsToIp/gbyXw== - -----END AGE ENCRYPTED FILE----- - recipient: age1n4vc3dhv8puqz6ntwrkkpdfj0q002hexqee48wzahll8cmce2ezssrq608 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCY2FDRmVSWDZGdm95UGlj - andKY24yT2EwUkhQcURyajJiTkk1UkZVMXo0CkZWUS9ZZDFVQTB0cnpCWS8xMlJi - RWYrN05EVC9RSDN4cHdtRjhwZXBTczQKLS0tIEZwQlBGeTRSK2o3OUJVdnViNSsy - a2tNb3hVcW1td0lLN3hCbnhoS3dnR28KWp0dnEj7eH26PrSb3rHHIgnPnwmjkTeY - gyWPXnntuv4Ae1apZ8/7sb0bWA9ZK63VvlRzT3k8ttMpz4dE++t+mw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNaXhDNnFFcHQ5VFJNVGVT + UEdjZkw5NG13Q3RTa0lsdlRxZUh3L2ZVeEEwCnQwQm15bVFwdTNZRXFxUzdHUUdi + b1R4TmFFNHhXem5UVTZ0aFZDdmZVTjQKLS0tICtlRHpYbFlJK2srUzVRSEdaNVVp + OHhFbnIzYVd6blFPTER3YURabVl3bDQKK+2eL9pdstEcApzK8dHAHp4tbHfYXHWj + M37VnBU3LiF+E3e4T8hEXh2/z4TWz6whnqOOWoNYemrpLNplqroySQ== + -----END AGE ENCRYPTED FILE----- + - recipient: age17tagmpwqjk3mdy45rfesrfey6h863x8wfq38wh33tkrlrywxducs0k6tpq + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGdk44MXA4MitqN2J4VE5l + dGV6ZVVheUVncnlHbFJNUGJDbzNTYVNwS2hzCmFEYXd2VGpQQ1paQlVvM1QydUJ0 + a1hiVVVTRzV1aFRCcTA1cXJQaVQ2VGcKLS0tIEdQSXpxOEFsR3lqUFVCdG9rR3E2 + ekRldmhUYUwvTDN1NGhRSTdTKzFXVjQKnaks4KK8heP4ht7d5iCl2A4RhUy0qeBo + XOoQmdatheJdXynxfcUADd859dcRiflL1Im4+okNwjFnN6flGacbXw== + -----END AGE ENCRYPTED FILE----- + - recipient: age1mrnldl334l2nszuta6ywvewng0fswv2dz9l5g4qcwe3nj4yxf92qjskdx6 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmUlBRR2NJWk9udG8rYkFR + QlFTSmZvcVdRQTN4d3NQTWxOVjcwcDBQWFZBCldpRkw2SnFkcVZjVlVDVnE0WjZP + UHhDU1lDVmxCUDRKOXdkanRoZjlsMTgKLS0tIEpzREI2d3QySnZsYU5GTmZ2Tk1Q + SytjNlF0M1J2WDZzV05EQ0dDMU9EcW8KoCFywdfzF7197F3YdF37P43x0D+08+tt + V86bls9usaxb3hfx+QS+gS+8TR1gN3fzQ5+zhkuawP0esgvUvSdOaQ== -----END AGE ENCRYPTED FILE----- lastmodified: "2023-01-21T21:36:51Z" mac: ENC[AES256_GCM,data:bigb40nyFgIa/HeTmOgAT76z2dJRgxc0tG0CpbvayL4e/o9ctKMpyjA2ogniJfZmwieLv7jMUaq7oR6TZRAmwmO2SV4V+I9z2WQSNvsa1v5IRP+MJcpgZ9yft1SKkAxDgyjizxULs+0dB3/IUI409CetKUAu4CesSWOJxP8+4ZQ=,iv:ond6CECTL+1t6ko2YL6cdlkds63gOJ1qqP38KPEPgOQ=,tag:ihfOwU5+mT6DHxGfreSpdA==,type:str] pgp: - - created_at: "2022-12-17T23:05:08Z" + - created_at: "2023-01-21T21:53:31Z" enc: | -----BEGIN PGP MESSAGE----- - hQIMA0av/duuklWYAQ/+OIPbP5T4QnJoF5jgiOM0TXzKpOf5GODF3Sr4ZEpFnDB5 - 29ehYbGgkRnP9j01UJtksKA7LCeZjpvjnBXxBnxG5MhuG24BtWTlU3fjAjSrHZ7g - Hn5EaEQGrCdQwfskCqROH2mPmLmf5wsaMLCJETJRBIol06ga0cuiHKJLUhCOcLgB - AI/SXVBpftq/ZBwmLATT2lfAD8ZMEwEE0a72aQZJQh7LiCjJhfiDRwnovpE9F7yu - FT++ocU9BD5dHLlsqepFXmCQAHItu+bEeVhy4lDVwtBB4f3LptePCmiuB+OBLvZX - z9XuSwljJVUKHP8P7F28nLHCAI6YOVer2MFOqnuA6a8PLp8IAadyjhcbuArWiJ1+ - 7tLpKOk1ZZL3FKCz9SF2bVtzClAUyv8qAk8PTzmsxQkkrU0k7muHPO6EE7mj/VLz - 51IWfHcwLrSm1fifO0tShIvxtzXtywI7/bcVUihpAHCqnIuqnIEzpy1vXYM7impG - OlBzfWIEQqFCqAomy98fGtuyHohOahusjRbsmy4rshqfQ0V97kr3ZAp3nZHwssqI - YJnWI0WaO8S/O1EgaAAX+ycv2P5vLc7cg5V6mgo6CTLlDjMYppi8oRHLSQACgewY - Y7ztvBi1/Ey3bHHX3rsV+zrOLaq5P20qaLcuLQPZfH8bp6nnuqAT4OejKyKFbVTS - XAHpyvFTTr2ifyxzOuWk+kOKL7cJdwUkFIHSK1ZLHElt7bkW81eyxinJDyemW3Sf - j0F5M4G8MH9RvnfumCSwjA3AGvrqQBSaOD4jL/y/PVx2ZKh91RpcdyAi7qC6 - =AZGW + hQIMA0av/duuklWYAQ//S7jrRuEZXCamlkT78FMU2bwI7PzM9e2VecVusOCg72si + 4ZSHdg2bdW7rAVpTJ6zDcYyMpv8YkEfDiv6z6wRZ6LTFjmGWcRzHclhQ5ewtoY+T + Jacj62FhDg2cycBSkQxKa+crLGe+j6Fph1DfiD9F5+8ulA+aZFWaf2psGptV64hg + brQUHw9t6lsWIXickDd6Q1ssJGdF0xygX6uzo4vz2FcuEVY767ykiAY1aJPAnPti + OMU4//8pCD9lSLVqWl3AeIx8f6pbTjZLtCerueDAgjvwfa4J8DBFPuRVppIqRqvk + sj/jrfU8yvNZn2BKM1p+zyXsSfVJCjdn1CsGFYTNGq4+06KP3yTQxjWfBraRPK9t + Sxxo9co/rrke98t6tGY7H+/MU9MNsRlbgX5iPfhiGUaKKnr7TBsJ1xi25ooI0yhh + +1bYSMGuJbejzvbROZhZYLLKJW9C0eFMGvBI2CyojHF7TJC5qUwfNlmVTz3Q/pvr + UJIb7tgUK/iKH4gzZ2HwqoOh5Ci3iwH/vt/zuTxc1p+d5HmpFWD+1WgXQEgTPxDv + frO4RkFSX8a3YFeZow35t7ZxajILSz8WoXC1X3wJdC2OH58vRoFHJ0NpJtvvqrww + aHd0P0NCjD5FwOp1e+vs3sx6CUC8a8Q3Iy70LxFXsMb+Jl3fN764RjnMjAf4A9/S + XAGgltvM5na39jcJxlqfZuQ6+UKNzehhGwxoZziJQ9eKx5MQ9fpWWvO+CF0S+q13 + q9z/4ARhTuxVW/KyCyOxz5cUEbESp4aWFiF8CP/HGQZM5sGXsqeNIV6oXEQx + =3vTe -----END PGP MESSAGE----- fp: F7D37890228A907440E1FD4846B9228E814A2AAC unencrypted_suffix: _unencrypted