agenix: migrate

.sops.yaml

@@ -9,9 +9,3 @@ creation_rules:
       - *yubi
       age:
       - *rouven
-  - path_regex: secrets/falkenstein-1\.yaml$
-    key_groups:
-    - pgp:
-      - *yubi
-      age:
-      - *falkenstein-1

keys/ssh/rouven-git

@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICqjaaB4RSwGGZXHb8UqTLz0GkOWlKctHoxmhpkwsFMI rouven@thinkpad

secrets.nix

@@ -28,4 +28,13 @@ in
   "secrets/falkenstein/wireguard/dorm/preshared.age".publicKeys = [ rouven falkenstein ];
   "secrets/falkenstein/borg/passphrase.age".publicKeys = [ rouven falkenstein ];
   "secrets/falkenstein/borg/key.age".publicKeys = [ rouven falkenstein ];
+
+  # rouven (home manager)
+  "secrets/rouven/mail/rfive.age".publicKeys = [ rouven ];
+  "secrets/rouven/mail/ifsr.age".publicKeys = [ rouven ];
+  "secrets/rouven/mail/tu-dresden.age".publicKeys = [ rouven ];
+  "secrets/rouven/mail/agdsn.age".publicKeys = [ rouven ];
+  "secrets/rouven/mail/google.age".publicKeys = [ rouven ];
+  "secrets/rouven/ssh/git.age".publicKeys = [ rouven ];
+  "secrets/rouven/spotify.age".publicKeys = [ rouven ];
 }

secrets/rouven/mail/google.age

@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 uWbAHQ NCh3pLPZc0yFNmZD2BNjwTaMWm6pKX0JZcQmARfDzwo
+tLw4JjYImQ7Sx5zC5A+MtdifsyZ4gfKtnEE37oPtO00
+-> 9)3p3u-grease +=v = @x Mbn`+p
+9oxiykzLx/ZhSKwEnFynCUgPDq1AXJAGsT5Qa2g7+1FQoWwJMB7oMECKt5vF2a/h
+1GFeeRfFUWw4FCu8iE77OsLWIyQcOX20xcdhdqxA+A
+--- wjfDMipqiLXDA6u8T1UH1w8Tm+Xj2PFp8szWSsHnDYA
+I‹ÁÍhI„>…Eă2™˙¶b1ĄŹy˙0Ĺ4Äů%ž(Ą\/dŰŻµîöY
:

secrets/rouven/mail/ifsr.age

@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 uWbAHQ 0Uy/VY+06acvXjAKFy5jcN8q692+8sZH9E3ZUHSaUUo
+6T56w2tmJAvaeGb5oHPyU1t8mexFnV+foVoJl98G6rQ
+-> fE4oms$-grease - !fp3#J th
+OA
+--- IIBHPUhMYp1bS9Yig7YAyi+abT66ZRd2PyZdPk+k1dg
+Í,h-Á<>Lf
^OçòǘÐÃjuÙ<75>¾©õx`Qñ;ù\×ÑcTK\
+ø År~?¼trXØ

secrets/rouven/mail/rfive.age

@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 uWbAHQ oELRB+KJpT8EfcqyNEdtfaJgiN9aX/1mgKHxqKCPyF8
+ZxVFzwByLOSbSIsX3QtHmEDb5a5Xo/bkHNIgJQqB2cU
+-> m-grease (HaFdz_<
+nhPnLs6P+M/Yw9TxmTZ6gKXmQusgFz46+/Ad8QA9YlcjkM9hhEsJkTBoLp6uv++8
+Gjfle0y4R/p7xIOyLKGat5wPXCzk4XxTz8o7c9IXshRR+unkRthsEG6qebNR
+--- CFBseeDK5oKdeH1yLe1tVWPkmcWtSPrwtbxrAqJsydc
+èòiNZ¦Â(z»W©7®~ž"¯«žrœM¿[¶.ºÜ-dQ«R–¹ùlCælD¶I-§ò:çÕ5t?¬ôð(åÅX¾Ž<C2BE>"

secrets/rouven/spotify.age

@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 uWbAHQ klzqpl+5gMc23pxP7b6WeMnz0GupktMWsozSgu5qjVI
+zLIUb95/je/M2yGilR2PA5JyO4pG98qSeSa9cBN8oi0
+-> vi>dm(?-grease nUG 4q;
+eFlRMpjidL3vhoL3XhkOfqrdNAV7vBqgsPS5k9NWME2cqK4CcdHNLcyOdQipB2oh
+sMK94/EdKhLC+insD3oR+q6369vB/3oaBayNSUM
+--- De9rDCy3TGRbiGWLSanEwhheglOK8uOHa8Ioga1UjvY
+•9+ð¯Ãæ€pG®“ÑMèi$
±ˆ“;ÊuÆ,DãëE°ÌÚȸ²®¤±Ë