chore(sops): generated and rekeyed secrets for host_luna

99linesofcode · 99linesofcode · commit 62b475854eb7 · 2025-10-26T01:53:11.000+02:00
diff --git a/.sops.yaml b/.sops.yaml
@@ -6,13 +6,15 @@ keys:
   - &luna_shorty age10a049meemjvgdgukx6zu5lwu82mqul83l7fyd66tzy9sm8637s7q07ujez
   - &mars_shorty age1pztum0c6dy94ah2rcwfd983hwhg8mwum3uljpwguu8cypxrs0uxsqz6hc5
   - &host_mars age1gx9hqvsc2ewy5yu4xp6v9wl0la7s9qhnezaya54yhsx3w7w3vg9s8pzknr
+  - &host_luna age1pueehhjrvwh8v50u7hhpy0u7zx50nj0u7c9hgtzrr7ja0hed9qdsk0m66j
 creation_rules:
   - path_regex: hosts/shared/secrets/.*
     key_groups:
       - age:
           - *master
           - *luna_shorty
           - *mars_shorty
+          - *host_luna
   - path_regex: hosts/luna/secrets/.*
     key_groups:
       - age:
@@ -36,3 +38,8 @@ creation_rules:
           - *master
           - *luna_shorty
           - *mars_shorty
+  - path_regex: hosts/luna/.*/secrets/.*
+    key_groups:
+      - age:
+          - *master
+          - *host_luna
diff --git a/hosts/mars/users/shorty/secrets/id_ed25519 b/hosts/mars/users/shorty/secrets/id_ed25519
@@ -0,0 +1,19 @@
+{
+	"data": "ENC[AES256_GCM,data:EEIiRpGzZb28fI9cjYuxAD69tIJHgj3ADT2TiLMovVIn0XJm5e9fS2SInmN0MW6ZtT/wlaPpiHRUTs9R5P4/vE0vGvTtm23Hm/yTMiP4aOU2n2mrvQBca5h+A3aQojHiR9tTBMMy2Zsh+AH5MvZeGAP0W5xx74B+uict5LO4ZfNByur7l19o3ezsPq/0gDxjscJT1xGieg9b8sR3GAtw8J34xjKultp8MqrQU5Ng8eLk2vhghAnrrlUW3o1GwRP224EMjMieVzf/tPDkb/yDpAGFtsMJ4yoP90NWZ8IV2KWzaqn45SCk1XpfwKUOx3ILRNkUbQnaTiuqo1m5MNNHB/xE+QzC3ufYfv6TAgfX3EdojxCUs53ZERnsta3dvFp6sfdVXbrR/GVFuy9AnkEmK2Nm05qBnJiLQf7dP4cl3sJlrA3GjKoqwEsz5tMGjR12EJHf1FwWtkIjrL81jnFDr3bZBqFiNYd+a2z9Nc/NwtyJSRpT6UcnPGWczpYHyc4K4x+uG2K67YblHx07TqjV,iv:3koIfiw1sqvSdNZenW8d1tWXa/eOe4bYbjMcspEMnFs=,tag:Kt2sjD2Vrb3p21DByHOYqg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1hy523tlslqas8qgs0lxgxanp9gx06fjekn608w4qf66mxkjzmucqh0g6vg",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmYTkxbmltem5pdEMxcTEw\nSVIzL0dYNWZCR251d1lrZnhGYlJWZHh2Wkg4CmRvWGFYYmFHeFkrcFcyZHJBS3Vu\ndXpNZUc5dm4vR1JmSzdUeHJBRUY2TkEKLS0tIFpIT21xMkNKbXFmQzJ0K1hNMUgy\nQmNSVklTQlV3V3p1STlhNjJVVEYvcUkK/5WVOJrs62BORQo/YRHGHvhY+pM2ZWZc\nIUptWDS/vx1UQWlGO3trDQCin4rdg01uZLQV4JHaRvHncJO9fyK2sw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age10a049meemjvgdgukx6zu5lwu82mqul83l7fyd66tzy9sm8637s7q07ujez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0bkZialpIaGkxR3B4YWpK\nVjVwMThPbzNIZlBKbW4wVjNvYkwzUlh2YWprCnJlWk1WcTduNXcwYzd5K1A5YmFn\nbjdJeWtuWXRGa1Y5VVlkL1ZiY09BVWcKLS0tIFlDKzc2QXEvb2xaSStmUWxBUkx6\nZEdnUzNqeWFQcm5jVk9KMXJBVTBIWTAKMBQWHGGpEqfByu6Jc9n5SUVPykM64MaE\n8OFxwEln476hXHyDJYciNuR0efYS1qAeFGKSyZ/Q78CbtN5qH1e+Kg==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-10-24T11:14:20Z",
+		"mac": "ENC[AES256_GCM,data:gWhdcymmHdDe3ObVcNgiBDdjgnPhkU7nCJUihVe5UB/bFl/hshLIvysuB7sIFzYDLLoJS3OYJBUtfG8L6ApUWKOMII5P1O7S+0TVzocm6OTORHiMKgAg4PfB5gJBgMZPoM5TDwHkZQFan5jMdZT2I2M3jIZhxNwdJbCqfXN0LZc=,iv:+pKinP22WwwqKwAJG4zvMBaZLC8RVivW/BVnQ1uPC6k=,tag:H9tepOOUIyR1s/asbefKpQ==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
diff --git a/hosts/mars/users/shorty/secrets/id_ed25519.pub b/hosts/mars/users/shorty/secrets/id_ed25519.pub
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC0KFX+0kp0mrYIo8F+Jq/7T09R3bigfZC5GEWkIl+J5 shorty@luna
diff --git a/hosts/mars/users/shorty/secrets/passwd b/hosts/mars/users/shorty/secrets/passwd
@@ -0,0 +1,19 @@
+{
+	"data": "ENC[AES256_GCM,data:xhXb0H/xniOvNFtxPVwFsAdaJIRhSlX0PRvamZFCIQDXWgTS2tCvBMHEjtvm2kTgRoEn1wI7PRF6QdDtpemuSXQuPQ/oiaUAAQU=,iv:0oNZ9yVxqp4k10iOkC0xnNqJEPJftTE52svGJ6xz5Oo=,tag:LnG1A+0osRC3LaWDl3lOBA==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1hy523tlslqas8qgs0lxgxanp9gx06fjekn608w4qf66mxkjzmucqh0g6vg",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxT0pmOUk2ZWVaaDdzQjNs\nVm9KM2hMWVA2MldOaDlFL2xlbFJJZGcyODBjCjluT1MzZXU4c1N3bzZBUEQ5aFJ0\nN1dxN0VTanlxOGFsZUhYTWx5MkhJa0kKLS0tIEdjYm0wS2xlTG10L1hOaG51b29F\nQkMwVkk1SUhmdTFwS0kwbCtkc21lRkUKO+UIEjABY4GPx2wrCY+LKZqBWR/j3jWg\nk8HH4zXyXyJMlxPR9DhGpiCoLfTmzCbocf4zaSNDIYSBnctoAsYFIQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age10a049meemjvgdgukx6zu5lwu82mqul83l7fyd66tzy9sm8637s7q07ujez",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCcEc4K2o2ZWEzaGJiNGtX\nY3p6dFVoUno3L1hFVm82aG9PNlAwN0ZKbzNBCnFJVkdSOXhVakdSV1o4WmVvN2hZ\neTZSYm9YaGJUTkgyK2lMUDgvL2FSTDQKLS0tIG5SUHgwa3ZXTmFzUVgyd3NXVWJo\nWFlEZmxodi9obE9PdFVBSlZOWXlaYXcKnHp6FquwOZtfh7gzfBhx3MeSjZgsmV6k\nMlnZ/clHUWKt5B+GBm83o6HHegfd9qah5hQHaWR5BEc8qYN52aDl5Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-03-11T21:49:48Z",
+		"mac": "ENC[AES256_GCM,data:oEeEsZwgYq1EeuQKbWTdo5KSUdsVZZMdjFv2v5ThrlGpaJyIeuV5thBhahGEF6xnO/Ah6DZsA72i719vkX2kvG/TpsRDsoyZ9Vjs4OJ9ZgCDIIgFkKmav7mbeRSA0eCr97DUyu7uUHhy7eYvCXnBLLIea/TgJsHvfjA8AQIsauo=,iv:NQPEAYyccEdeWv+iSyZ7T08YZQjysdyaDArtfAiUcKk=,tag:FALOMEkEBGN7yu4ARiKrYA==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.9.4"
+	}
+}

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC0KFX+0kp0mrYIo8F+Jq/7T09R3bigfZC5GEWkIl+J5 shorty@luna`