SebastianStork/nixos-config
1
0
Fork 0
mirror of https://github.com/SebastianStork/nixos-config.git synced 2026-03-22 15:29:07 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

hosts: Rotate sops data encryption keys

Browse source
This commit is contained in:
SebastianStork 2026-03-18 21:08:08 +01:00
parent 9499991b25
commit 721be06706
Signed by: SebastianStork
SSH key fingerprint: SHA256:tRrGdjYOwgHxpSc/wTOZQZEjxcb15P0tyXRsbAfd+2Q
7 changed files with 76 additions and 76 deletions
Download patch file Download diff file Expand all files Collapse all files

28
hosts/vps-www/secrets.json
View file

@ -1,41 +1,41 @@
{
"seb-password": "ENC[AES256_GCM,data:znyHz9AhZipp2VNkXifU27IvEbPoKqLf4ibSkqfvkGGoX/jHnoJRYruWmwLnAaqTk6moHtew6HZq3xjvNgUf+qVgaleWQntrLg==,iv:GpBQNm1jspU8PCN+SzfAUKSps3YySg6JJVYOLOFetOI=,tag:CKgqMm/mVae1i9He/ioMAg==,type:str]",
"seb-password": "ENC[AES256_GCM,data:jCrnERFdBntSBv8xMMshmTe17qkshQpiNVfNne8nVE/+Fh6uN4TKZZNFRc0T7FSDB+WgZfKMllwTqjTOT6CXGZBjPFydnmlz4w==,iv:GpBQNm1jspU8PCN+SzfAUKSps3YySg6JJVYOLOFetOI=,tag:AmmAdmNbklt3NZDXo2sDpg==,type:str]",
"restic": {
"password": "ENC[AES256_GCM,data:9W1iDHuEW5lJfOAaDs3BVvT1DOG3TiWm2LD8Y3j3,iv:8008lisJ9M3KJ9vZAW7W3WkM9KMw0WqA+FCkqDk4GAs=,tag:kII3dI4NB9WUp+hebO4Dcg==,type:str]"
"password": "ENC[AES256_GCM,data:IrYSbl3Cf0zWwAk3kZyw9ll/t8vNXL1Pm4yw9ApC,iv:8008lisJ9M3KJ9vZAW7W3WkM9KMw0WqA+FCkqDk4GAs=,tag:ieSql+lUPuiNhlJSqKF8pg==,type:str]"
},
"backblaze": {
"key-id": "ENC[AES256_GCM,data:vilvyZ72u0bl4/ll1U2ohDupH7Q6g6KfhQ==,iv:FOG6YYp7IeZ/m5p5TRTpzlg2w0ElKXte84ZKU5+3Wlo=,tag:CUizCsgvEInnPSBHw+f5sw==,type:str]",
"application-key": "ENC[AES256_GCM,data:5jEt2dx77hlkLBUNuNGKrwTA79Gz9GFDW+h3bJNVfw==,iv:hTCeTWLuUwePgVSksg8EKOJ42b1SmfhTifFk0PDYoMA=,tag:fh9wzzh7jZkX497obE4wog==,type:str]"
"key-id": "ENC[AES256_GCM,data:6cGCYqGyKUe87SWY5EoJdRIaneHr05iGmg==,iv:FOG6YYp7IeZ/m5p5TRTpzlg2w0ElKXte84ZKU5+3Wlo=,tag:DXz4g0tBUSBSvr/9PeTOsQ==,type:str]",
"application-key": "ENC[AES256_GCM,data:03YtGU/5HB3AEQ+RRpbumnQan+QcV4GeHfhYUPbVWA==,iv:hTCeTWLuUwePgVSksg8EKOJ42b1SmfhTifFk0PDYoMA=,tag:WmDM3QboeEm13VkZ3Ot6Ng==,type:str]"
},
"healthchecks": {
"ping-key": "ENC[AES256_GCM,data:MqH/4hAk9cjWW5DCw19MvCo/jXNtLQ==,iv:3pfIJ4LhgOw2hHm75OiWdrqcBTD8h5yCwik50tXDp4E=,tag:OTXLGvjn1q4ffLEskmnGpg==,type:str]"
"ping-key": "ENC[AES256_GCM,data:PmEhl3Gg1vPGfQQVKuYmQMslEmQnnQ==,iv:3pfIJ4LhgOw2hHm75OiWdrqcBTD8h5yCwik50tXDp4E=,tag:vAoyA2HHbm+h2LNIlwblnA==,type:str]"
},
"outline": {
"gitlab-auth-secret": "ENC[AES256_GCM,data:fNxlI0sJdoY9hFxiJz4OdGLv1NyZbMchW/df5VuLBHqeQG19Seul0R1J0Fl+NBFfAAiyHA6oGzXerYLt6KsNDwFmK2ODuw==,iv:TfFyC+JUvb2GaeE8rh9Knj4fPkmoyWvymG9YAN/dpNA=,tag:PXn6uYXtFfV0N5+2fYyCZQ==,type:str]"
"gitlab-auth-secret": "ENC[AES256_GCM,data:ZBCMBgbD1MgSRxCQqfxZ9EiQu31lcPLEk4ZoYIOd/oSZnyIBDYSNh+gopQDW/FFa4xhRmlhBRp2GNnKcv8K+k+cwDmkU5A==,iv:TfFyC+JUvb2GaeE8rh9Knj4fPkmoyWvymG9YAN/dpNA=,tag:+NUretxY644R7cq3Bh477Q==,type:str]"
},
"nebula": {
"host-key": "ENC[AES256_GCM,data:oi5uWtflxt+LB9ft6DuH+h3owTF8bj9lNKVAVyyZH4Ww5F4tN+GhQDNXHSt4SK4M/9K/M7/VfRjcL0uDJq0SJmI1oy0g/pTF+JcBAV/Z6PAhPWBXxMBkIdL+xYLR5lXmBKnTTkHoIqvBZH7wDHq2kOKrBFU96yFfrMLK1TVv5Q==,iv:eau9vYEVwUjGTgESR2d2QNiBlTZIq5Do97/xZqmrz2c=,tag:aTdQ2vRxI/BByG02VvpPMw==,type:str]"
"host-key": "ENC[AES256_GCM,data:FShtryLZwPlPEBOb0ULSijHAOakrFD1yNaCzyNus9KwK+PUfpXZglPfZuHhlIFXF3wrIslmadgg/mGede3of3AYvY/xSMKF3d5GOkGy/0oyh1Ji+hq24LvNOO8jDJ55IxM3c0091UZz0ae8ga9ZjdUDrQmfAkrQ9TEP0YHQT7Q==,iv:eau9vYEVwUjGTgESR2d2QNiBlTZIq5Do97/xZqmrz2c=,tag:ht3nPjiLqy/egtdyDGntDg==,type:str]"
},
"porkbun": {
"api-key": "ENC[AES256_GCM,data:KT1vUUnm0d2T9H1YI5SE6xgTVVdmbLFJeL/+otlw0mheH+9svnC19YP9szB/kBLAPLes+2qunpqM02B9tJxGgD30SNc=,iv:wVIkhrCQ7t7lkR0q0OO/XWZbgZYuja53XgUjfy1fTNA=,tag:MJ5tjbIofqcKXDuzD0b1aQ==,type:str]",
"secret-api-key": "ENC[AES256_GCM,data:lmU41AkCVb15sFuMqTZ7qZ978D5BLEYYidsb0yPPjiPPUmnfqBNM5lMVo4k4gt/PcMLcRVv5I6DDqE44zOK7YPf6Fck=,iv:sS7PfE2/CjUekIXGlvEA/N6R5JE7BvgfeXJO5dzv6/8=,tag:rp8FY3hEOyoafmwTdROJ7Q==,type:str]"
"api-key": "ENC[AES256_GCM,data:yXK97ZUNYV4h7boWJ9lFHF6gZqPLQFbB4fmuoo9Qmeg6oXWW+vmq+ua8d/Yc6FymyBGfa8DYsZeyG29IIGoVC4hPr/4=,iv:wVIkhrCQ7t7lkR0q0OO/XWZbgZYuja53XgUjfy1fTNA=,tag:Y8D9OGDjiO65KrFtQSYxTQ==,type:str]",
"secret-api-key": "ENC[AES256_GCM,data:See47pmESccEQ4FNVoUf+pofAL0hSRtZJyVKSBUi+HTYx5V86l36vylefSy79iW/gsOP6rlT7vV94dxj0Ap3mSlp6Z4=,iv:sS7PfE2/CjUekIXGlvEA/N6R5JE7BvgfeXJO5dzv6/8=,tag:1SbVWcCw1Xmc1jeyzfXecQ==,type:str]"
},
"git": {
"push-token": "ENC[AES256_GCM,data:bmhIbvUQknj0cQ4HEfbrRgjAC29OJ6d3KWAmu11ArPuXyarxNvm8RI7roD8rgZ94Ta5LS6WNqPhmTEz5KyWDaV0N5aXQ2fqWWqoTOUJe8BNGG557TvVjVENqynBN,iv:HSQJdHckzn48/byk4WbPKppfRv8WNrNzlMbdbGZdJzw=,tag:O3SLtx1EMqsF/sBhZHfZLw==,type:str]"
"push-token": "ENC[AES256_GCM,data:2Yfi+2HkJ8L6J/KWIirP5aaVxTN3L8/q/DrHkPGMfRpiEo3uMQgCTw2GTHXzrgsWvDOKrxfXTfUg+k+CYoCceAfKP7rDG45qXmA2rU/rUxPm1XEPzxZskO6oZ94U,iv:HSQJdHckzn48/byk4WbPKppfRv8WNrNzlMbdbGZdJzw=,tag:BEUUCDi0U+pZNoExRcTkCA==,type:str]"
},
"sops": {
"age": [
{
"recipient": "age1mpq8m4p7dnxh5ze3fh7etd2k6sp85zdnmp9te3e9chcw4pw07pcq960zh5",
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCZncwTE1GMjQvWHlGRFh0\nSVU2emoxOEZ5VlJTMmtmS0ZNMDZja3NFWWcwCmpRbjZMV2NqQ3pTemVuMzZvTUZo\nT3YzQWdhUWN2UVFRazQrM1M4eUhwNmcKLS0tIFdlRWVnV2wwN2hlUXArLytBcFVr\nWm5JRUVwamdaeEROUjByUkdOcjEwdDgKtLCsbkX9lqirlzdGl7S4T7RZt5PwSzB+\nCylXI9UTTKWybPUhC+Vq1QHnFvw3N+NymDNNjwkNaY8d3YjOX/I9kA==\n-----END AGE ENCRYPTED FILE-----\n"
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArYVBzMWVSa0ZVa0ZxNGRW\nSEduZysxQWh2bDByRE95b1hvRkZkOVMxcTJJClJyVHBJNzVEeWhVMXBGaXBid1Zu\nNmNkRVRIVlhFU0duSFh2cWh2M3ZxN0UKLS0tIDBZUFlHU0RrRFRBZjBCcFpVaVA1\nK0xPUVpheTBBYkNTU0RsMjRpbHJCVmsKUWsh5Fb14p6jBXIEfapYLN7VvBFoXWpX\nMfjYkBZsXErk4/kIH3frS993EAzPMZ9fJ6/TgEdUZn0X9tP+k/bqEw==\n-----END AGE ENCRYPTED FILE-----\n"
},
{
"recipient": "age1j47wr83tg4t8sdjcyarwvvrt8qzjrgw2fa2e4nufffdev89t8prsu7lxnh",
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvVnphWlNaTUU0QytIdnEv\nQnNzelN4MUMreXZrME5KZStFMDg2V1VFd21rCkk2Uy9ITEF3SjlRVEdMMXlPdHhG\nam1PNnp3emtnMnczeFFSSStJaHF6TkkKLS0tIEJKbFRzbmNqMjk5NXVHZnhlWWZ3\nYng5L1F5YUJGOTg3TTJCK281SG9Id3MKsmH2yj19ig2g+KzBGLD9dWkdvr6TLdSd\nuuDC+frhj7wWrEomOOjIoYtWHXkUtTSAnCEZhrhfyupYhEvlFfWRlw==\n-----END AGE ENCRYPTED FILE-----\n"
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiZUlSaC9jM1RDZXZtcWpy\nWmJSQnNteWJHaXAwV0ozNGRoMGIzZ09aSlJZCmUxbFRlTmNENWpVNHNvTHpsV3ds\nRG4zZzQ3YWhncmpFbXNuQW5hWTZycFkKLS0tIDRtYkxZcHFRSENYS2MzV1pwcGww\nZUFzdzNnWW9kZld2YnFGOGYwWEZ3UTAKDBTLnCfGhl6uqQC+FtECbzji5kgZSzkp\nAYJ9kaysv2W/+U1Sxx3T8NM6vClfXhSQaSz8LA/PVgKfpDU6ctBfLg==\n-----END AGE ENCRYPTED FILE-----\n"
}
],
"lastmodified": "2026-03-18T19:56:18Z",
"mac": "ENC[AES256_GCM,data:hwOl4PIz4z11wtWvV2z3CjAjq3O7dyf0ifIPHaSWNvjCgKoRckuhmetTaiuJHTshEGxj/XY63dupN33WLtW65teE1PuZMhwfEOzc7Lyunzsr3h9c7kkjsuy2gOgvMVxcUHsnKzRb2L5H2kv9MqVc8zZPPLpMYsT7BTpfJLqN130=,iv:WiCZgpZZBhDFlWHgPZfr2ol0NT36tgozuAEmMBxMTYA=,tag:UnjglBCyhZ7pzHt6VddMsg==,type:str]",
"lastmodified": "2026-03-18T20:05:17Z",
"mac": "ENC[AES256_GCM,data:Fyu5MAHqEX+L+uFoODJ5YXGyTmi/PPurRrzlLgE5uxgcQVxAMRcg54LhGBj3l+z0NQ+pZXy5iroLOvxm9cI+dpzLmRnZHY9a2GejHCimjG0ngFGkxInBW8G707vsT47h77Euz3kL2hdV9GvJrJuG/e0KHvcT5tm8mvMCboIcUcw=,iv:i8L6CfA8D/6UiMfkCELEr7MjqdITrRAGVVObd9RLx/4=,tag:mbpTbW+lEErv9YhN7lz+iA==,type:str]",
"unencrypted_suffix": "_unencrypted",
"version": "3.12.1"
}