From 8a027e1f03b3bc3320e973f545dadcee6882b44c Mon Sep 17 00:00:00 2001 From: moons-14 Date: Thu, 25 Jun 2026 18:13:40 +0900 Subject: [PATCH] sops add ops --- .sops.yaml | 2 ++ secrets/common/system.yaml | 31 ++++++++++++++++++++----------- 2 files changed, 22 insertions(+), 11 deletions(-) diff --git a/.sops.yaml b/.sops.yaml index 1ce4b59..829eeaa 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -1,12 +1,14 @@ keys: - &admin_yubikey1 age1yubikey1qvy5y8kxqc63y7fk0tfv43u499a8z8q332ff087lythry9cc6hdxxkznc6t - &host_x1g13 age12g85cuvg4kjfr79lqf5fx2k0d82tchrgv88xgkt7ukk2cfcsw98s2rjyat + - &host_ops age18rtm2dq2r62zvnhwdq0gkm24hu85r7zyleyk3jqv22zpdtw064eq7ay7dl creation_rules: - path_regex: ^secrets/common/[^/]+\.ya?ml$ key_groups: - age: - *admin_yubikey1 - *host_x1g13 + - *host_ops - path_regex: ^secrets/hosts/x1g13/[^/]+\.ya?ml$ key_groups: - age: diff --git a/secrets/common/system.yaml b/secrets/common/system.yaml index d57b2c5..e1ac360 100644 --- a/secrets/common/system.yaml +++ b/secrets/common/system.yaml @@ -5,23 +5,32 @@ sops: age: - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IGxWc2NMZyBBbXVDeWJL - dXJGd3ZBYnhDSXhRTVBhczRub2hwYmdHUWlMdlpNY2Q3ZTg0cgowM1YrTng0Wnoz - eDMwcjJtaHhwcUxQbng2SE9Qdm5lWVlOZFNaZzQzSUFrCi0tLSAvYzZoc0h3NFpq - eE1Db29Mbjg3REI5aENUdFpxaGpUSENRbWhxQ0d6N0lRCqwOfrLaEicYZog3b3CR - n+lP7bBOwY5cfmra1XKlgemEHgqJP7fpidGUVu/Hikv6QP2RM21aG41GOGlH8I7H - jaA= + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IGxWc2NMZyBBNERDOVU2 + WkRMb05iS3Bmb3NxSnIrNEhDdTdrR25XZFB5aksweWtKRGxyNwpPWlpReXJCUVI4 + NzJMM1JKYTV0MTNxTkpxak9MRmdnaGpabHpTVHl2bUNBCi0tLSBwbnVKSnB6bnI2 + VVlrQ3p3d3ZtT3o4b3lxaVJpd0NCUkQ4VkE0bVMzYmpZCqArP2/pKAH3EuD4dPAU + Q8YWwWwtPWcANud8Ry1jSzg2HCOfrdv3AXaSlXdTbuIr3Q0yREM9YtCvxxYbXpt8 + Gpg= -----END AGE ENCRYPTED FILE----- recipient: age1yubikey1qvy5y8kxqc63y7fk0tfv43u499a8z8q332ff087lythry9cc6hdxxkznc6t - enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMRXlRaGZwMEhQM29tZ1c4 - Zk93azc5RlBPaUVrZUV5aFNzVk96UmpSeGdnClEzNGZkeFliU29ETGU1WXdjT1FW - VEk1a1U2d3NQbHh6WnlvY0ErT3NrRnMKLS0tIHBHdWY0clZNK2VUZXNKc0p6YTMy - U3NoY0VhWnpvUmtZQmlZeWNONVZyVkkKW4OWPPTqLhs0nwfKf8vAYM3Kni5qLru5 - xwjFJZyiNOlz7JVJGx3GoYKmW8pEFQ9iG+0lMZdI9/+aPoUlynSb5A== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxSmhCZU5kOGpNY1ZUNVFP + aFFBVWU0Vk14d1FHWmFvK0hjY21KcWdWZ2dJCmZvRDQ5aFRYRVFld3hZckIvcjJ3 + NUN2SERTOHQ3SEFFdXJXRFdpVGttVkEKLS0tIGp3aUI4TG9KU2NsbVlteG9lUGRv + SndsRCtpTUlFYWpJQ1NuSm40V0V1NWcKjMsZkKuDxsF3TH5G/rgilApv3BD/fqs5 + VucqOyeJXXv7ErkxFKm6EynSOzUiA82mDzyW+cF+0GFxheKfOlXKGw== -----END AGE ENCRYPTED FILE----- recipient: age12g85cuvg4kjfr79lqf5fx2k0d82tchrgv88xgkt7ukk2cfcsw98s2rjyat + - enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUc29ucGhmODQvak9zL2NR + N3RUUzJYaC9idVl5bFB2c0ZDWlFIQ2Z0M21RCnRiaDl0aU5wSVdkalBXeW44RW9M + MlFFZ0RzUTVJL1YrN2JwRmtLRHBsem8KLS0tIGhVLzNIbmhrcGR2MWludFo1WGlF + ZCtCSXZyTE93Ull5VlkySnNTVGt0QncKqy+8NsS6tLWR31gJgOMDT49+vu4ZQRhS + 13XPPrRqxaaTRG+CTAQyu25FtGt8sH3rOs0VNfMj7TAtHZPGjn0L4A== + -----END AGE ENCRYPTED FILE----- + recipient: age18rtm2dq2r62zvnhwdq0gkm24hu85r7zyleyk3jqv22zpdtw064eq7ay7dl lastmodified: "2026-06-15T10:20:19Z" mac: ENC[AES256_GCM,data:Tw58FneoksiOuol1aUOFXoAnFiTzddmFfYAA0B0RfPPyj6UKQbBvRYJhOMuOMRE1fVlDhqxxDiqZI5y14vJg8gLusAZt1JKi7ODR7MqcImvxboaee8DIj4uIcN254g0c0cmZWsGrt7yTYoSLDUc3QdAxj9/Az/CMls6XjM+RL8E=,iv:XGgWgbexCUxzuJzRVG3V2GZGwmwjAtowgz+NRPxk1+o=,tag:FwYJXfwS2f70okl0bhS+Sw==,type:str] unencrypted_suffix: _unencrypted