sops add ops

.sops.yaml

@@ -1,12 +1,14 @@
 keys:
   - &admin_yubikey1 age1yubikey1qvy5y8kxqc63y7fk0tfv43u499a8z8q332ff087lythry9cc6hdxxkznc6t
   - &host_x1g13 age12g85cuvg4kjfr79lqf5fx2k0d82tchrgv88xgkt7ukk2cfcsw98s2rjyat
+  - &host_ops age18rtm2dq2r62zvnhwdq0gkm24hu85r7zyleyk3jqv22zpdtw064eq7ay7dl
 creation_rules:
   - path_regex: ^secrets/common/[^/]+\.ya?ml$
     key_groups:
       - age:
           - *admin_yubikey1
           - *host_x1g13
+          - *host_ops
   - path_regex: ^secrets/hosts/x1g13/[^/]+\.ya?ml$
     key_groups:
       - age:

secrets/common/system.yaml

@@ -5,23 +5,32 @@ sops:
   age:
     - enc: |
         -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IGxWc2NMZyBBbXVDeWJL
-        dXJGd3ZBYnhDSXhRTVBhczRub2hwYmdHUWlMdlpNY2Q3ZTg0cgowM1YrTng0Wnoz
-        eDMwcjJtaHhwcUxQbng2SE9Qdm5lWVlOZFNaZzQzSUFrCi0tLSAvYzZoc0h3NFpq
-        eE1Db29Mbjg3REI5aENUdFpxaGpUSENRbWhxQ0d6N0lRCqwOfrLaEicYZog3b3CR
-        n+lP7bBOwY5cfmra1XKlgemEHgqJP7fpidGUVu/Hikv6QP2RM21aG41GOGlH8I7H
-        jaA=
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IGxWc2NMZyBBNERDOVU2
+        WkRMb05iS3Bmb3NxSnIrNEhDdTdrR25XZFB5aksweWtKRGxyNwpPWlpReXJCUVI4
+        NzJMM1JKYTV0MTNxTkpxak9MRmdnaGpabHpTVHl2bUNBCi0tLSBwbnVKSnB6bnI2
+        VVlrQ3p3d3ZtT3o4b3lxaVJpd0NCUkQ4VkE0bVMzYmpZCqArP2/pKAH3EuD4dPAU
+        Q8YWwWwtPWcANud8Ry1jSzg2HCOfrdv3AXaSlXdTbuIr3Q0yREM9YtCvxxYbXpt8
+        Gpg=
         -----END AGE ENCRYPTED FILE-----
       recipient: age1yubikey1qvy5y8kxqc63y7fk0tfv43u499a8z8q332ff087lythry9cc6hdxxkznc6t
     - enc: |
         -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMRXlRaGZwMEhQM29tZ1c4
-        Zk93azc5RlBPaUVrZUV5aFNzVk96UmpSeGdnClEzNGZkeFliU29ETGU1WXdjT1FW
-        VEk1a1U2d3NQbHh6WnlvY0ErT3NrRnMKLS0tIHBHdWY0clZNK2VUZXNKc0p6YTMy
-        U3NoY0VhWnpvUmtZQmlZeWNONVZyVkkKW4OWPPTqLhs0nwfKf8vAYM3Kni5qLru5
-        xwjFJZyiNOlz7JVJGx3GoYKmW8pEFQ9iG+0lMZdI9/+aPoUlynSb5A==
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxSmhCZU5kOGpNY1ZUNVFP
+        aFFBVWU0Vk14d1FHWmFvK0hjY21KcWdWZ2dJCmZvRDQ5aFRYRVFld3hZckIvcjJ3
+        NUN2SERTOHQ3SEFFdXJXRFdpVGttVkEKLS0tIGp3aUI4TG9KU2NsbVlteG9lUGRv
+        SndsRCtpTUlFYWpJQ1NuSm40V0V1NWcKjMsZkKuDxsF3TH5G/rgilApv3BD/fqs5
+        VucqOyeJXXv7ErkxFKm6EynSOzUiA82mDzyW+cF+0GFxheKfOlXKGw==
         -----END AGE ENCRYPTED FILE-----
       recipient: age12g85cuvg4kjfr79lqf5fx2k0d82tchrgv88xgkt7ukk2cfcsw98s2rjyat
+    - enc: |
+        -----BEGIN AGE ENCRYPTED FILE-----
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUc29ucGhmODQvak9zL2NR
+        N3RUUzJYaC9idVl5bFB2c0ZDWlFIQ2Z0M21RCnRiaDl0aU5wSVdkalBXeW44RW9M
+        MlFFZ0RzUTVJL1YrN2JwRmtLRHBsem8KLS0tIGhVLzNIbmhrcGR2MWludFo1WGlF
+        ZCtCSXZyTE93Ull5VlkySnNTVGt0QncKqy+8NsS6tLWR31gJgOMDT49+vu4ZQRhS
+        13XPPrRqxaaTRG+CTAQyu25FtGt8sH3rOs0VNfMj7TAtHZPGjn0L4A==
+        -----END AGE ENCRYPTED FILE-----
+      recipient: age18rtm2dq2r62zvnhwdq0gkm24hu85r7zyleyk3jqv22zpdtw064eq7ay7dl
   lastmodified: "2026-06-15T10:20:19Z"
   mac: ENC[AES256_GCM,data:Tw58FneoksiOuol1aUOFXoAnFiTzddmFfYAA0B0RfPPyj6UKQbBvRYJhOMuOMRE1fVlDhqxxDiqZI5y14vJg8gLusAZt1JKi7ODR7MqcImvxboaee8DIj4uIcN254g0c0cmZWsGrt7yTYoSLDUc3QdAxj9/Az/CMls6XjM+RL8E=,iv:XGgWgbexCUxzuJzRVG3V2GZGwmwjAtowgz+NRPxk1+o=,tag:FwYJXfwS2f70okl0bhS+Sw==,type:str]
   unencrypted_suffix: _unencrypted