From 29c9b23e9d44f86c40074e020b48f5b4cdfbff0f Mon Sep 17 00:00:00 2001 From: Superredstone Date: Wed, 4 Mar 2026 22:46:52 +0100 Subject: [PATCH] feat(secrets): add initial secrets setup --- .sops.yaml | 7 +++++++ secrets/default.sops.yaml | 16 ++++++++++++++++ 2 files changed, 23 insertions(+) create mode 100644 .sops.yaml create mode 100644 secrets/default.sops.yaml diff --git a/.sops.yaml b/.sops.yaml new file mode 100644 index 0000000..dc0a3fe --- /dev/null +++ b/.sops.yaml @@ -0,0 +1,7 @@ +keys: + - &katana age18ujjw92tm6vpcpgqqky7dzg3yvzm9nytgzeptkfhtz5jhdskcdpsgmv0vs +creation_rules: + - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$ + key_groups: + - age: + - *katana diff --git a/secrets/default.sops.yaml b/secrets/default.sops.yaml new file mode 100644 index 0000000..b86bd02 --- /dev/null +++ b/secrets/default.sops.yaml @@ -0,0 +1,16 @@ +wifi_password: ENC[AES256_GCM,data:yacDfHImrkDoes2mcA==,iv:GWw2GGjQ8LxP5/EGn518kCGfIpnPRYMy82sDQrRDE/s=,tag:vvjNsgfMLO9NCFR70wcgvw==,type:str] +sops: + age: + - recipient: age18ujjw92tm6vpcpgqqky7dzg3yvzm9nytgzeptkfhtz5jhdskcdpsgmv0vs + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvMGo3bFQzMlU1ZzhHTkdy + RXdEU1dYbkdDTUc1TS9oV1ZrVnJ6bGpITFNzCmZYdHlzdFAyUVhLV25uSGwvaWdr + WEt0K0wxQnhqSzFDQldhV0R3UnVwbm8KLS0tIE5WdDNzMUc1QlYyalJUUW5SVTZV + MSs2Y2tTd2ZReEpXQkhGd2ZBTGlCUWsKJ2KK/LQC+y8xB8LCeoDRR76XrIFHpo8Q + 501fyNVTDAe/92xRsK3LD8dSd8CAwYVK03+ATrwHGzX1tRop3I0arA== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2026-03-04T21:20:44Z" + mac: ENC[AES256_GCM,data:EiGakoJtoQO7vQ90V+CpdvtpNbeBZqbfTuVLLGf6W8iyXS60ENMUhr4hg594G6HgVToQbWmJb6kguFjHoFYhcuxYRmY9LJ5a4IRsDafvMGNOIzNW8FcuKsFg/DS2pkVk8VGfWiJmEyVdBhVYlHroLdG5Iu9/lOBGwfBSn+tCBM8=,iv:L68ZyikmeiXi9f0o/ogudXEvssuUYpPfqZ/rcrjP7YM=,tag:oBF6nUWQ2GmOVwZ7xn+vag==,type:str] + unencrypted_suffix: _unencrypted + version: 3.12.1