Add sops config for app-01

2025-08-31 00:35:49 -07:00
parent 69d6846904
commit 6882cedb1d
2 changed files with 44 additions and 0 deletions
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -3,6 +3,7 @@
 keys:
  - &xenon age1jmsrfddctahhznfv7jv77tgw5crmhjhe0e0kzc967hvax4sulv3s6hp2su
  - &mac age1g0vx0dgpzy3et6kuejf4xn4n0acr3666p8j4ygaulefh5mq3vyxs7mgjat
+  - &app-01 age1d0crvyst36euqdjsfu22xx87njd9gnmgdam0m289472h8ycmmc9s04v9ru
  - &db-pg17 age1mqetcwrdkwsettnf5mydzmhpyjydj8xy4ezth0ckpjc5r0na6cwqlatm5f
  - &db-mdb11 age16hzcrlm978x5g2frhgr8sm9hjf8f9l9ez5g8adkw2uj4m3h89d5qmzggk2
  - &fs-01 age1e9s4v2k3tfyc0lvz84wkg8uacv6283va58al2yy8dt6jgswf99vs9z4ujt
@@ -10,6 +11,13 @@ keys:
  - &log-01 age1j6t53w5dzxhpm9mp6nuu698p7j5txg5r6zgnfqlfcjpdg454fcsquqswya

 creation_rules:
+  - path_regex: app-01.yml$
+    key_groups:
+      - age:
+          - *xenon
+          - *mac
+          - *app-01
+
  - path_regex: db-mdb11.yml$
    key_groups:
      - age:
--- a/secrets/app-01.yml
+++ b/secrets/app-01.yml
@@ -0,0 +1,36 @@
+borgmatic_pass:
+    local: ENC[AES256_GCM,data:RhlZerLfY+SlkzPw9U24rXyYAJs=,iv:mv0AJtP+gtZLHbMEBxFL0vjZXq99Hjg5cMQiLZdfiXM=,tag:BB7iERanR2oIgBuWqd0t3g==,type:str]
+    remote: ENC[AES256_GCM,data:F+9J9m2dVlTcmCDTldC37Y2I+9M=,iv:cT9Jog9NRM2Fzs/L8Chb2OAfIvoKKckuJf/Cmqr87/Q=,tag:5zDt/wHYcz0pRF2X1rEGJw==,type:str]
+sops:
+    age:
+        - recipient: age1jmsrfddctahhznfv7jv77tgw5crmhjhe0e0kzc967hvax4sulv3s6hp2su
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTTU84Q3U2dk9pTkpZR21j
+            SlJDRmZkbHdOMUZodlFFSm4wU3lqb1Q2Z1UwCnZoRnZPYVJQa2dUczJJeEJHcWcy
+            RnVrb1VtVlI3YTUxcE1mL1MyS2RqWGMKLS0tIEc3WUhYL0F3aEs2QVkzclp6cjBZ
+            elV4KzVNK0swaWpJcDFHMDFFY0NxQ1UKOme9niUG/ezhmW4rcqSKuM7EQl+XPvCp
+            xxmTJsqkEpm/jkdAXwuUXmYWXjGfevTuNtR9Ek0TQROHQoKux7970w==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1g0vx0dgpzy3et6kuejf4xn4n0acr3666p8j4ygaulefh5mq3vyxs7mgjat
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0TkRVdXUrYzhibmptbFVw
+            UlVHNmQwOC9sUzJ2KzY4K2NjTEhaaHZzdTNnCnFIaDI1OUczbGs5MXNVeUJ1YXY2
+            cjcyZ3JwbHNvS2MybDgzNU80SmZqMkkKLS0tIE5IYnY2V3phc0FyaFJwSFJ5Ti9z
+            M0thM1FGK0p0RDFCd0hxVHhwU2EzVm8KCSksYDu1KZeQ0HVtgZW3DFbuuziHlrI4
+            W8V0Iqo0Tv1t1QxIYg9IFmP6eTSYng2Q9zA1TwY1N6qFocKtZu7YKQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1d0crvyst36euqdjsfu22xx87njd9gnmgdam0m289472h8ycmmc9s04v9ru
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKeCswVncyRWJPV3B2dDNa
+            eTVVR3dEZFZjOVZkQkhYRkJ4bFRnVnEyN1VJClNQQVgxcFdxUGcxWEVacm9saTdr
+            R21wQXYxQVBlT2JFOXFjV3pkNDNpalEKLS0tIHJTaC9Kdk16Sy9tT3E2aWdObDF3
+            b1p5ckxORkVaY0cwNythTTlIanYvcncKElJdaUh9PBq4Mvmd2JxJbQCBZooB9xbk
+            6x2u/8q+0gJyP/oMhGitlsCBKe9N606dTBV+hMZwN1xlZ3A1XNYocw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-08-31T07:35:42Z"
+    mac: ENC[AES256_GCM,data:9tFA8IiNorRVJqVQrWYiiKBnV7fH1cmkkwYUkaEz5/o8mR9psrg3U/5/hGZO8wAB85RRP2wjF/h7/wRjDVsojO7+G4yZFWn/kcoNd1Wrk0SrbhpSrUtoSERe0s3gH7Ci6FY9pDTUhapo6hRpa6duAQonG6ZS9T+r7Bu9FA5EQd4=,iv:j9nXh4goG6jdgOzQQQ3mjZkbHX6NDeuL5HgkhWRg5Lo=,tag:2glnU6UDBFYxMVKldf0Gyg==,type:str]
+    unencrypted_suffix: _unencrypted
+    version: 3.10.2