nix: add derchis age key

voc · Oct 30, 2024 · 946e788 · 946e788
1 parent c88f82c
commit 946e788
Show file tree

Hide file tree

Showing 3 changed files with 73 additions and 52 deletions.
diff --git a/nixos/.sops.yaml b/nixos/.sops.yaml
@@ -1,4 +1,5 @@
 keys:
+  - &admin_derchris age1w5lu3zmrs5wqh74447d8zt28dluhgtz6a4cyr6njzpjqyfgjz5usg7d6ms
   - &admin_hexchen age1wvtkhug4q7fcs7wz03kpn77ruqkkwp2xqq30npv4287wtf3w8ukq370vre
   - &admin_jayjay age1yyxdtt7lpcm9hr0y76g559yq4uqz8e8hjc2fzqtwnhctsj99fp6sf3ksl6
   - &admin_n0emis 6E10217E3187069E057DF5ABE0262A773B824745
@@ -15,6 +16,7 @@ creation_rules:
       - *admin_keepass
       - *admin_hexchen
       - *admin_jayjay
+      - *admin_derchris
       - *host_tel
   - path_regex: hosts/mail/.*
     key_groups:
@@ -24,4 +26,5 @@ creation_rules:
       - *admin_keepass
       - *admin_hexchen
       - *admin_jayjay
+      - *admin_derchris
       - *host_mail
diff --git a/nixos/hosts/mail/secrets.yaml b/nixos/hosts/mail/secrets.yaml
@@ -8,51 +8,60 @@ sops:
         - recipient: age13yl99pyktjyssdm487pa5ucm4rxcrdrt4lq8qk2vkvdwyfhcvahqs4e6cw
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVWHF5L3VrakJDWTlXM0ph
-            OGFNT3NsbSt6WS8zZ1dZZzRhc3E3WTVHZmprCm9GMHlRWnZ1dkRmWExlSUNTZFRV
-            djRnYlB6Q0ZibEFXRHZEWVlMdFU5SWsKLS0tIEk0M2ZIY29iUVdDZ25FOVVkWW1p
-            YzY3Mng4SVZhcXR6cy8rMDY0eFhxS1UKSulgbQihgZHpeuoaolXYd29WVnuzP2sP
-            q9PUcoh51IOaVeVeSj6BEr5qCeyUtrwnVnw6YpwF/TRnuVjlM9KqHA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWOXAzVVBvVnNCT200TVE0
+            aEk4ZHQ5bCtMTVZEYkJpQjJXTzJEYXpyYWs4CktTM2dBYVRZSVNUOFdQVzJkK3pP
+            WXBtamp5ZFlIc0kyb1RIa2JjYVlKblkKLS0tIGRKeWUwbUlSY1VVTTlrZC9yTjd4
+            c1UzUGZVVDdyQlBqbVVRdlQ4bUpvQ2MKJO4TWEe8STPveyF6w2fMIzjHzWGsfo2d
+            eWNZ0y9dnDggDmuwAEjx08dIQmr3DaAR4c0Pa4Ums01X3onJq/EeJQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1wvtkhug4q7fcs7wz03kpn77ruqkkwp2xqq30npv4287wtf3w8ukq370vre
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzd2xaRnhxcHFDWUM5L2ZK
-            UlkreTJOcFRMRWdKN2VuZjZ1Uy9Gc3hIV1NnCnp6S2FXN0k3NXJxamNYL2JLN05K
-            OW5ndm1nYlU3cEREVk1KaHZiOHNDMzgKLS0tIHVXZm0vL3dTOGE3NnBKUktiT1JJ
-            MU5PQUZ6N0IzanM3WDJPMWg4cnd5dEEKIV1bc6KGsl/WNuukFXXJpbAdJt9LzjZr
-            O8GxcAyE0kWN8NDzUNrw5M8msjz4EJq8LMpcEaxJC25NjwXlb5W73Q==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPY3pETXZiK001WFFRSVI5
+            KzRhRU9EZlpGbE13cXRPMGdUSHBGUW9EbW53CkIvNWxhYTlsK3p3ZlRaUDI1OVVq
+            dThZait5RW9SQXFFMHpRZ2NkVTd6ZTQKLS0tIFJrN1Q3L0FWMkxQalRXczdDR0Z5
+            ZXdaSTBHbnZlZFdScENwZ1dqUEhKUkUKJpepVRvDjkk1DWcu5HKXop/eGfN2gNix
+            V+rhx96AM49J6/o9mym9qpGE3W7H7kDR95wXLXwSpUowxMBJhXGdtA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1yyxdtt7lpcm9hr0y76g559yq4uqz8e8hjc2fzqtwnhctsj99fp6sf3ksl6
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJUS93Vi9ja2JucE5aV25w
-            VlQxUHI2Z0VOdjVBNmRhTFR5aGFDUWhDL1VvCmtuMVdZTThsUzFXMHg0SDA3eFht
-            WUxISm1CWjZUSG84THp0U3piYkZqWEUKLS0tIEJsZG5OYlMydVVPTzZvM2t0Y3Bz
-            dHRnbzRvazFmSjVjWWFJcUcxbURpL0kKoyZhG9nr9ckv3xj1OdgHu18mugjdSHbZ
-            +6kg60gH/MfNNStCpnivYrgdeqzr09gLBvM3ULFe0ld4S8n8AuvkVg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNSkloQmdSSEFIR0xaWlNy
+            cHlTalFnRHU3SEh0S1ppWk1tUXgxNXJOcmlFCmRMVDVOdElVRFZrWmdRVGZObWxX
+            QUhEWDBvYjRnY2FLOWwrT0ZsUDZzTmcKLS0tIFRiMlUyT2VkOXBpREFLd25UM2ZO
+            Qko0OEt2N2NHY0c5R0lwSW5KQWVZd2sKGkKz2PCyLDiOcwCLf8iBvaAZal5p1XHX
+            vf+LeSExUKQ3rSXTwdhdzgliBEK3jndlJQH8uu1Zv2NiVo2WKou5pQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1w5lu3zmrs5wqh74447d8zt28dluhgtz6a4cyr6njzpjqyfgjz5usg7d6ms
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPNHpHWXVuODZTdVJpRTda
+            YkJlNU1sMk9PR1pTNGkzQUkrT0tCQStjL0Z3CkMwK1BTbDRCbU5QMmRyM0Z5TjBI
+            ZzhVOEdmVnpWYk5PN3JsSVI1Q2hIbkkKLS0tIE5iMnphbTlsaTE4UUoxbWh3b3Z0
+            TjJDYUUxOTVvdVU5Z3hmR3BIQVpyc3MKXDRARkgAmntZdSanDFkx1BIe9+vfehE2
+            E5YzqKdJQ/ICpdu7o48hYFSH3DfZsUzquCV7WLJRV9stgLz07rDVTA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1zcj3dt7uc3gc3kyt6l7m86qjzm9vlgq7kcsm9wh9gank6rqff4gqwrtzpa
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLdHlTYlBwVTNkTk4xeFE0
-            VVFXUEFCNE5ZRXRNc2xuekNGbThNeDFIRlRBCm5vZWFPbmJ1T3dEcXF6dEYvZW9S
-            NEZhNndxMTh1WnBaWmJPbnFJWGdVYmMKLS0tIFRndG5DL1NZVUp6Z2s5TnpMRWRB
-            ZUxqbTJHSkV2N0NHZUk1NnNDbVA5RlUKo5sHEridmZU1OeN0d17K8wl0AgtyH43X
-            LSrunvw46+FnBeQWwFnI9OuFkvkR3u8eXcUZrL/0+pc00U5i6wlsuQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBINjVid0lQQ2lZN0VDTG1Q
+            dGpCVmNXcXNzNDZhU3VyQVJIYk8wS0tZMmtnCkFVa2hhT0drcEwyZVRpZ0l3TXda
+            c29qQ2haRkZFcU1kMW1xd05xbk1nLzQKLS0tIEUzRkVBVUI4a1crWStpT200OGtZ
+            STdpNStqL2w0L2FhR0I3eUFkc1IvalEKcMO+7/W8cs0dP3hUP306nwinbkgAPoNx
+            PVpv8lhIOq/ic7xolgCmlHuq4pw65mfGl3h6eKQ47Fcj0hZ/c2egnA==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2024-01-30T20:48:28Z"
     mac: ENC[AES256_GCM,data:w2ohx6aWE30qAN4yXl7DttJiW1U7MVp0/Yd8SaHgW9qTypsFg2n1S1LPqikVbpwuz4JldloD+b+sC7WKCzGbLAMgMvZBeyMQAR7sFxq4Ocwl6IgHY38PD2QIQpWEp2cdaGjPKt9LOgWA2Ox29f1/XrZoom0Q6BaTHyr47BNpryE=,iv:2/BMIce8PXsuOcuE+Wgd6ymeR+Km18MecIy2yhrb1YQ=,tag:lwn+/VmVf9P0gZCPA1m7SQ==,type:str]
     pgp:
-        - created_at: "2024-10-26T22:49:32Z"
+        - created_at: "2024-10-30T22:46:39Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hF4D6iFd6webPCUSAQdAVicpIcrG0fwUsjkak1EgdGJb5EUwTUc54S13fbb0qGow
-            wL89H587V1gYgZh7CR2qLgii/Mh+uGfC9KhLBgMDbXPTYdoXgwP/aCiOg9jeVC43
-            0l4BacnQU1a9M92DtVqUpPs6M/FTSYutKmGyfjJA+RpVf7bRV97FUQkFXjNmbNUc
-            1qPIwxcYd1ZC7Xb5l4WFzf9KftICdryqoaBi0vuymCUi+GbPuFaP3zzmIPtjNLw7
-            =sD++
+            wV4D6iFd6webPCUSAQdA7rC/eBS6Rh/5kPZPPn417o9iN8Kq8dYKz/0WlbMnUHow
+            QZ6qxMm6LkERDzpjP4RqJM4deBdbc4xsTj6eOONBjn7okiql0mEO9VcQ7ksFN7+L
+            0lEBfFglvJ/I1sHQlBNgx/Jk6HJYkz2733F9BiA24cTISzHUgQIW+NSemPwYL/uy
+            lMBORewjzNrLtIpmpNXFd4pDNiUhsJjezcC5fBNUSxH0GE4=
+            =4hS8
             -----END PGP MESSAGE-----
           fp: 6E10217E3187069E057DF5ABE0262A773B824745
     unencrypted_suffix: _unencrypted

diff --git a/nixos/hosts/tel/secrets.yaml b/nixos/hosts/tel/secrets.yaml
@@ -12,51 +12,60 @@ sops:
         - recipient: age13yl99pyktjyssdm487pa5ucm4rxcrdrt4lq8qk2vkvdwyfhcvahqs4e6cw
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzME9JSHlyN3l6ZHE5SE1o
-            REU5YzBYcmJHc3hmblBrd09Vb0lhVVlkT3hVCll4MWdubm5ldFp2WEpaaC93SXNX
-            aHoxWkdGNlpyNzR2UVgvTE5BWFV1UW8KLS0tIEwwYkJ0Tm1kNlJ3UDl4WTJUNVVt
-            cVFpay9KdkxzZnMwRVlsM3ZmVWVGUm8KoUHGEO2ElHEYflSpFgHd20o2app0sWtl
-            FhcUfc6xZqZriaPpqdxeo9wtCGir6oyoO/R4W3H8IduZXYIDd5C8gQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPSEwwNVo3VUpQVGpBRU1L
+            RUwyMEZRdEQ3aklwbVhWYTNKSVg2cVVLVTFjCmRSNTNOQ2xwOTY2OWVuR21hejRX
+            ZllSVXJrSERGT25kWVJBd2l1S0hhdXMKLS0tIERqK3lXcVBFZTBLY2V4bUFDYVlS
+            cDEvK24rZzloczg2cEhKQ1dndjJhaFUKlnmNR2SGZ7ENvE6SFyAqMnl2D892NFEl
+            a14CQSZYnSRlByY64jQc+6DcD7E8nrBkNncfpY7ruR3dDZXL5H4sTQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1wvtkhug4q7fcs7wz03kpn77ruqkkwp2xqq30npv4287wtf3w8ukq370vre
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBYVZadWRWWkZPOS9tS293
-            SjNuMlNKSjlQaE5YS0RGT3FKaVRObWZJclZFCjBSQUdVUndraDQ2K1ZJeWdNMlVQ
-            N2l0dG1uK3lJeGt2a3ZiRkUxOTR2M1EKLS0tIGZINkltbzZ4R3J0Nnp6KzFGeWN1
-            WXNQZzVORGtFTy8zb1dKQmdVNUFrU2cKV98cX+iP+lgHVS6tAo6YcMoq8Q8kgyk7
-            KMMapbNNLcT5KwX0mKPy8gIs2icrNViP29/uf5x1J0NoBG8bxGKRpg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKQ05wTFdRMHppaW91b3o4
+            WnFEczYxODJoaXRGQnlEWUFQSkJYa1l6TUQ4CkdKVURhSlhmdTBmR3NtbytrZnRu
+            WGRzT3dlY0YyMmFZM0ttZmFxUElHNGMKLS0tIGczK2h0eHhjYW9iU1pZSzVMZWhK
+            L0FwMk1EWG9RZEZqaWQ3cWFlSldFODgKWRP/Yyq/ORa3Epf2ikF6WPYMqHVf5rBT
+            WlVH/LgHtH6myn4/IlLjywkA+wN3ZQlEYQ1vGBLHVvPQeN1HeAAGCQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1yyxdtt7lpcm9hr0y76g559yq4uqz8e8hjc2fzqtwnhctsj99fp6sf3ksl6
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHNk9ud256bFVRaUk1dzBh
-            MGdPWjQyVkdsejEzbnJOalJwUm4rY0xqSFI4CjFINkRUS1RhQkJ3VSswMEZzZFhG
-            d3p0R3g0dEhoejcwK2lTU0NSKzV1YzQKLS0tIDhvRmR3dGJJVUM4WkFyMUh3K0pO
-            akxUcnliVTNJemYwVmoxSjc4ekFRSlUKd49VObeLiZnZR2L/T8YaRhicZQbdmBlw
-            8R1+BQSi6i1VTQYuUtOnr6SNNlOIUr6Cv+VU7V4InfzukZYwlo9XoQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLOWt6YTBZNmlyOWxIaHFk
+            Ukg3Tm5IT1JISnpNZEc0WWJQZnMxaDZMMkNjCmVMYm0ybFU5K3doQXJDbW1WWTdY
+            UnAraWhWOXJQVzZtN2kwM04zVENadjQKLS0tIEJqM24zS1NyczR6aUhTMk9aN09G
+            ZlUvd1ZXK2RnS3d2Y1J1SSsrYkdlbm8K7/nHseq8qjupD1uuZSoQIkxA9sAXfl1K
+            nrSOvpnKtIzjAE3aX+g7MmSL1DaKWykM1LspFRQ++6cy41lGQDBcqw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1w5lu3zmrs5wqh74447d8zt28dluhgtz6a4cyr6njzpjqyfgjz5usg7d6ms
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGQmJ3ekhzajBGVGNEZHAy
+            ZGwxVjd4VXZoYVFWVkFNUjlXaWYvY1dYVUdjCjNnV1FYZjN3TUI5aWNHZ3NBcGY4
+            Q3dSaFVnb0JML08zOHE4cEFzVlUzMlkKLS0tIGZOOFNRcEx5RUxicEpwSzFjN3g2
+            RUdCY0NKakFSUGcvMWlld1p2VFQ4Y0UK/8FWcHI99E82pZqxL3qiv3PYCignmrFF
+            ENSUsf5F9DM0dxrZpwF60461FK8OH5Z0/Z1/Xpx8iMUVNBmrgBngsQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1glkmsh6pex9g5v95vwx78a8xksmnkvsu7ccnhxzu09yvnfnjudls3lfkru
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHQnJ5eU03d2lPQmt1R210
-            aEFQL2dwajVycHhkZUQrK2FYWDZ5MWtub0VnCmV4czBBcEZUVkw5N1RhNzhMR2pT
-            aUR5MmF1eTdJdHAyZDdnL0drZjk4U0kKLS0tIEVtejBnbTdiTWd6SjNIR0dwQ1Ay
-            U08zVC8zYUFoRmpSeVZ2LzJ4Ym01eGsK1HAplUO9NTg6L+7fRiVozLOdV7vBbZ9a
-            iAg7UjF68yE7GTCa/8gsISngcyyrwaWZuZamC0ASPtIXfugK0utfvg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFRnBocGlFV0ZJOCt5KzNP
+            SVc1c2hiNGhGbHVjZmtQQUhLNi8zWDNrZzBVCnU0TUJiMXNuUlhxamJBeStxZGc1
+            c1ZjaDJEM0lPaXdoaDhGQlZNc3dqbWsKLS0tIEZTeUhkWWp0Unl6Q2l0UDl4WDEx
+            NVdGRVpDTitSVFNjUFF1RGM4Ymh4bWMKkuXxFfI5RLz7rvaiOMAokvx0SoWmyB0v
+            1M9g23zsv+74wdATV3umaI6qly1/giIU2H/7Yi5yUi8zm8ATsxXy2Q==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2022-09-30T14:46:18Z"
     mac: ENC[AES256_GCM,data:UqJqDqlBLy0j3e4+FBcnxJnpPAlAf6OKsiRhvY3cjfU88IcMEEq2CgFBePrsEQKUMifyyYl0G0Z6qqZxule3mEkTKZePvGNlEK+yREow6SoCydxOZ9+bZ7Vgxi3jmw/dq2MpmOmoJKXFRzrKyvqbEt3CiZ1cNi80kStNyO63F6I=,iv:FGRFVayQNBMmOOpMimC4oVar2BX9iJEV/stQW7pg0bY=,tag:wD6xKN3vTWPb8n/XccFbFA==,type:str]
     pgp:
-        - created_at: "2024-10-26T22:49:28Z"
+        - created_at: "2024-10-30T22:46:39Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hF4D6iFd6webPCUSAQdAQPZM5RbFZZmD+1Lvb5Wh2eqzAuehIbbIKIuhB6RPyXAw
-            QCCBBRJb3ckL+9QyHi3DHq4f47dboxIotXk3ARMWyH/NnoUPwZoQDmtpSYbdoerN
-            0l4BA9q1/PsGO0Rsitg1FfJjYpf3gCWXrkuo2/hTdZePwdS5/ht6DxYO6zu0jk2N
-            R8FIO41wp5JIw/+BvlLgu3LgEPWCMxPMQMyDrzDyEApNaEqMJnikb6TcZM2iq27g
-            =Pj6A
+            wV4D6iFd6webPCUSAQdAChhslohLgfoMd8e4tdtRP78btxsVcAvzNFyPqpFC/iMw
+            v2t/G2gB3/EB21XDugoJEEmmlnTBt6WVoaXK/8QYzfNn0Me/1CvKBjpKF5cB8t6O
+            0lEB4GnRRjXCRkLponjIVi+BVK/jkQ1veW+lmbysobiSSKiaqdQOWLNH9z8jCIgH
+            GiUOgJ03rwrstuumMMvV7AOG2BFoBNuWp7cUxEUwGfcX3kc=
+            =cAYI
             -----END PGP MESSAGE-----
           fp: 6E10217E3187069E057DF5ABE0262A773B824745
     unencrypted_suffix: _unencrypted