From d863cf6688a1cd197f4eef46fafc66eee6faec03 Mon Sep 17 00:00:00 2001 From: Rouven Seifert Date: Thu, 16 Nov 2023 15:52:46 +0100 Subject: [PATCH] agenix: migrate --- .sops.yaml | 6 ------ keys/ssh/rouven-git | 1 + secrets.nix | 9 +++++++++ secrets/rouven/mail/agdsn.age | Bin 0 -> 386 bytes secrets/rouven/mail/google.age | 8 ++++++++ secrets/rouven/mail/ifsr.age | 8 ++++++++ secrets/rouven/mail/rfive.age | 8 ++++++++ secrets/rouven/mail/tu-dresden.age | Bin 0 -> 328 bytes secrets/rouven/spotify.age | 8 ++++++++ secrets/rouven/ssh/git.age | Bin 0 -> 650 bytes 10 files changed, 42 insertions(+), 6 deletions(-) create mode 100644 keys/ssh/rouven-git create mode 100644 secrets/rouven/mail/agdsn.age create mode 100644 secrets/rouven/mail/google.age create mode 100644 secrets/rouven/mail/ifsr.age create mode 100644 secrets/rouven/mail/rfive.age create mode 100644 secrets/rouven/mail/tu-dresden.age create mode 100644 secrets/rouven/spotify.age create mode 100644 secrets/rouven/ssh/git.age diff --git a/.sops.yaml b/.sops.yaml index f1081e3..2ab7924 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -9,9 +9,3 @@ creation_rules: - *yubi age: - *rouven - - path_regex: secrets/falkenstein-1\.yaml$ - key_groups: - - pgp: - - *yubi - age: - - *falkenstein-1 diff --git a/keys/ssh/rouven-git b/keys/ssh/rouven-git new file mode 100644 index 0000000..35c44c1 --- /dev/null +++ b/keys/ssh/rouven-git @@ -0,0 +1 @@ +ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICqjaaB4RSwGGZXHb8UqTLz0GkOWlKctHoxmhpkwsFMI rouven@thinkpad diff --git a/secrets.nix b/secrets.nix index ac3354d..eba7729 100644 --- a/secrets.nix +++ b/secrets.nix @@ -28,4 +28,13 @@ in "secrets/falkenstein/wireguard/dorm/preshared.age".publicKeys = [ rouven falkenstein ]; "secrets/falkenstein/borg/passphrase.age".publicKeys = [ rouven falkenstein ]; "secrets/falkenstein/borg/key.age".publicKeys = [ rouven falkenstein ]; + + # rouven (home manager) + "secrets/rouven/mail/rfive.age".publicKeys = [ rouven ]; + "secrets/rouven/mail/ifsr.age".publicKeys = [ rouven ]; + "secrets/rouven/mail/tu-dresden.age".publicKeys = [ rouven ]; + "secrets/rouven/mail/agdsn.age".publicKeys = [ rouven ]; + "secrets/rouven/mail/google.age".publicKeys = [ rouven ]; + "secrets/rouven/ssh/git.age".publicKeys = [ rouven ]; + "secrets/rouven/spotify.age".publicKeys = [ rouven ]; } diff --git a/secrets/rouven/mail/agdsn.age b/secrets/rouven/mail/agdsn.age new file mode 100644 index 0000000000000000000000000000000000000000..f49bfcc6e428b338993ab028444c579d05cb2fd4 GIT binary patch literal 386 zcmWm7&u^1Z003amoIRKrlO`UFHWbQlGBqibQbsAIw1p6p1@yuxP<;LhaiG`M!ZrO2&ZU`L^6B zy{OZ78n930gUI)%GGdM1%9XgTw?ZmNS#g~r!yI+lP{Hav?I#4+mqgo{%ot6zihOFP zJFn@g>l&x2UX2|g0PxVzXhyNK{~M>i3SL&2Otx`|VuC@3InbkJU6o)+7hH9+;4!v` z3I-b^(h394t868Q ssh-ed25519 uWbAHQ NCh3pLPZc0yFNmZD2BNjwTaMWm6pKX0JZcQmARfDzwo +tLw4JjYImQ7Sx5zC5A+MtdifsyZ4gfKtnEE37oPtO00 +-> 9)3p3u-grease +=v = @x Mbn`+p +9oxiykzLx/ZhSKwEnFynCUgPDq1AXJAGsT5Qa2g7+1FQoWwJMB7oMECKt5vF2a/h +1GFeeRfFUWw4FCu8iE77OsLWIyQcOX20xcdhdqxA+A +--- wjfDMipqiLXDA6u8T1UH1w8Tm+Xj2PFp8szWSsHnDYA +IhI>E2b1y 04% (\/dۯY: \ No newline at end of file diff --git a/secrets/rouven/mail/ifsr.age b/secrets/rouven/mail/ifsr.age new file mode 100644 index 0000000..1fb131d --- /dev/null +++ b/secrets/rouven/mail/ifsr.age @@ -0,0 +1,8 @@ +age-encryption.org/v1 +-> ssh-ed25519 uWbAHQ 0Uy/VY+06acvXjAKFy5jcN8q692+8sZH9E3ZUHSaUUo +6T56w2tmJAvaeGb5oHPyU1t8mexFnV+foVoJl98G6rQ +-> fE4oms$-grease - !fp3#J th +OA +--- IIBHPUhMYp1bS9Yig7YAyi+abT66ZRd2PyZdPk+k1dg +,h-Lf^Oǘjuٝx`Q;\cTK\ + r~?trX \ No newline at end of file diff --git a/secrets/rouven/mail/rfive.age b/secrets/rouven/mail/rfive.age new file mode 100644 index 0000000..b95c142 --- /dev/null +++ b/secrets/rouven/mail/rfive.age @@ -0,0 +1,8 @@ +age-encryption.org/v1 +-> ssh-ed25519 uWbAHQ oELRB+KJpT8EfcqyNEdtfaJgiN9aX/1mgKHxqKCPyF8 +ZxVFzwByLOSbSIsX3QtHmEDb5a5Xo/bkHNIgJQqB2cU +-> m-grease (HaFdz_< +nhPnLs6P+M/Yw9TxmTZ6gKXmQusgFz46+/Ad8QA9YlcjkM9hhEsJkTBoLp6uv++8 +Gjfle0y4R/p7xIOyLKGat5wPXCzk4XxTz8o7c9IXshRR+unkRthsEG6qebNR +--- CFBseeDK5oKdeH1yLe1tVWPkmcWtSPrwtbxrAqJsydc +iNZ(zW7~"rM[.-dQRlClDI-:5t?(X" \ No newline at end of file diff --git a/secrets/rouven/mail/tu-dresden.age b/secrets/rouven/mail/tu-dresden.age new file mode 100644 index 0000000000000000000000000000000000000000..b887c87390743f1dc7327273a89e472e0ee51006 GIT binary patch literal 328 zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCSH4Nr3P2vjJ}@Qn=9 zcB;s6Ey&XkNDr!vO3o~I_whE<_f9eQb`LGevGj||3^q#-&gOCrF)TOqtTHIiG|usN zimGxl4GlN3C=K__NKEnZP0n@Fb_{aL@zzfC4F%bjr<-1snpm8wpq!d*7ZvHtRb{O0 zm{o3ASt)4;$Lj$;hyR3U*%pAY+T|JUga2-WNH`{6cALd zT~+Ajnpluj$YoMkn5~};G+b9#A;QzOu*fLLCn>_!EfT28*T>h)#mCghA}iUT+^NFR z*Uj9*ue{Jn+s~2fx_Ij3ZAn^+i ssh-ed25519 uWbAHQ klzqpl+5gMc23pxP7b6WeMnz0GupktMWsozSgu5qjVI +zLIUb95/je/M2yGilR2PA5JyO4pG98qSeSa9cBN8oi0 +-> vi>dm(?-grease nUG 4q; +eFlRMpjidL3vhoL3XhkOfqrdNAV7vBqgsPS5k9NWME2cqK4CcdHNLcyOdQipB2oh +sMK94/EdKhLC+insD3oR+q6369vB/3oaBayNSUM +--- De9rDCy3TGRbiGWLSanEwhheglOK8uOHa8Ioga1UjvY +9+pGMi$;u,DEȸ \ No newline at end of file diff --git a/secrets/rouven/ssh/git.age b/secrets/rouven/ssh/git.age new file mode 100644 index 0000000000000000000000000000000000000000..7aa60a4945dde463bd768d83c31a17f140287f50 GIT binary patch literal 650 zcmV;50(JdiXJsvAZewzJaCB*JZZ2Gecbd)-S0>e=JZg$~(O{QYcb8NeN$JV?I^Ax z4iYV-nww_?=T*8asC5C5Yd0-gQU^oUc4Eg?*VwrpTq0i9_{__Cw9cVBs>5+r#vw@y zO-*lQx0P#fZSn}@#u6gq5UsCa%qt`x2BP$S=8bI^7HCje^X9M(E*Pq_(NRT#uP;yh z-jJ$Ms)S#L;94{K8l0jpd$ncKP91kDCeJW;&k)b+d#Hj;+T-|znZXM^=f@j8{;J(K z$2xfS(0E&{R}M#}eO*C=s!ObN;P)+cylNSf97gK_L>dDf(7YZd^VI+w!!~V#>X$;n zf>Xeuf_;EEE@xhn8b&~l_d>)JH(5KzSWAL|G+Q`BeFk|P3=m2ez{2JW$a0O%5&~Kl*Lyn?jQ{`u literal 0 HcmV?d00001