sops add host

This commit is contained in:
2026-07-31 12:23:05 +09:00
parent 7ef25c5e63
commit e9ab8c2caa
2 changed files with 32 additions and 21 deletions
+2
View File
@@ -3,6 +3,7 @@ keys:
- &host_x1g13 age12g85cuvg4kjfr79lqf5fx2k0d82tchrgv88xgkt7ukk2cfcsw98s2rjyat - &host_x1g13 age12g85cuvg4kjfr79lqf5fx2k0d82tchrgv88xgkt7ukk2cfcsw98s2rjyat
- &host_ops age18rtm2dq2r62zvnhwdq0gkm24hu85r7zyleyk3jqv22zpdtw064eq7ay7dl - &host_ops age18rtm2dq2r62zvnhwdq0gkm24hu85r7zyleyk3jqv22zpdtw064eq7ay7dl
- &host_internal-app-01 age1mcp5gma7y0k59equhzqfsnn0ed335ljjtn0k08ua77htlxf0x54qsravch - &host_internal-app-01 age1mcp5gma7y0k59equhzqfsnn0ed335ljjtn0k08ua77htlxf0x54qsravch
- &host_galleria age1wh7r9wnvyrgt5efjvg2324khsf4w6e9atpmz2udr4uw7frhnvvwquzcu72
creation_rules: creation_rules:
- path_regex: ^secrets/common/[^/]+\.ya?ml$ - path_regex: ^secrets/common/[^/]+\.ya?ml$
key_groups: key_groups:
@@ -11,6 +12,7 @@ creation_rules:
- *host_x1g13 - *host_x1g13
- *host_ops - *host_ops
- *host_internal-app-01 - *host_internal-app-01
- *host_galleria
- path_regex: ^secrets/hosts/x1g13/[^/]+\.ya?ml$ - path_regex: ^secrets/hosts/x1g13/[^/]+\.ya?ml$
key_groups: key_groups:
- age: - age:
+30 -21
View File
@@ -5,41 +5,50 @@ sops:
age: age:
- enc: | - enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IGxWc2NMZyBBbEttK0xB YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IGxWc2NMZyBBL3ZESGhm
ZVVDWk03alZnR3lGZEY4VlJMdTRTMXNDdHR6QW5YekgwZ3B0SQordFdPRUh4YU80 SFVyNjhpMm9mVjhDalhuTGxobGQ4WTFyRkZtK0UxSDJGZWxvWAprV1ZCUU1tZFVx
MmxMNFdKbTNMVXZPMVVNY3ZKdjczWnhWTzYxbUV6NC9rCi0tLSBDSGlUWC9SVW1T anh5MlJHWllGVUh2SzNBNkFvUHZXaDYzZlhaN2U2dTlvCi0tLSAvRkJlRGpsalRL
MitabjYrWG1FVG5xUGhqSVZDekgrQmcxSUZGSklFdU5vCu3bLs7yVM7vxFX2q3pt WDZ2WGFTUVNFTlpDZlJFamtWTHlzZ0h3L3ZhZkRnaE5vCqPUviMWokTVCsAG+VSH
W/4VEsxzYZN2aITrRfbVWCgwVyYBh3WbcImU8oLOhZ2nfgqfcQ5x2LVu1IzuCSdd qSvZof+qnIOsQKoXTMoFXMT3T9rdNoOigVgzOi8iELX7CDqOIiji06CYSdt45mFK
cjo= 2W4=
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
recipient: age1yubikey1qvy5y8kxqc63y7fk0tfv43u499a8z8q332ff087lythry9cc6hdxxkznc6t recipient: age1yubikey1qvy5y8kxqc63y7fk0tfv43u499a8z8q332ff087lythry9cc6hdxxkznc6t
- enc: | - enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVaWxxVWFSTUxDNy9KaGlE YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVa0MrTng2K2VBUnpFaU5F
ZVBWVHF2eEFXZnJLaXdiSW5kMUJpYiswVGhjCmFkcUhTMXhuRFpLTG9Udkd1UXI2 UlFvVVZXMmZSaG1ldXYzaVhoSkdUMzRKTlQwCjluSnkwWjNvMDFSWi9QMEJNMlBU
MkN5VXJSNUNiQUp2MzFIbzhhbVZ3aGsKLS0tIGE3ZXlsMjdRb2RBM1lVMHRSY0I4 UWdoOGdrSG1YSHNwOElXMjRrL0Nua1UKLS0tIERaY0RGcmZQS0FvTEt2ZFpxR1Ba
SUVnNjFZVFQzZ3Y4UjlaK3ZNOXdGRXcKyrd86CUWYi13i+M7ESKQH3W41M2/pc60 MXBSbmpzeWFhMjZTdTAyU2d2YTVuNTAKu4lY2kILseKxUjb//ag6FAaZ0jjNbi6y
04Px/7G7urIlgjfEV/wXaVIyeSU8Eb65uI/AOseJwH3v4IbW6Nd6bw== 46EW7EiH4NEHZOtFac9Cvo/97ycBasRntqlXVjWYH0vLxnhXTkFO/w==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
recipient: age12g85cuvg4kjfr79lqf5fx2k0d82tchrgv88xgkt7ukk2cfcsw98s2rjyat recipient: age12g85cuvg4kjfr79lqf5fx2k0d82tchrgv88xgkt7ukk2cfcsw98s2rjyat
- enc: | - enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2UDU4VFJ1d3VDa2lDNURW YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBycllFNWFYdTV3Z1JtRG1F
RDFMQWFzNWRwcUFqT25KR29MU0x2NW9GMkFZCjJwUExKOFRPRW9kZWxVSisreVRo NmpUNlJjNFd5MU94S1JDRUlLcEZ2QVhtQ0hBCmc2eFV0QStjM0xBTEdxa0Zld1k4
Y2Era2dHZk1QR04xMkNGcnROR2R3eHcKLS0tIGh4alhBamJzVnMyczBMK0l4TEUr YWp1Yi8raER6RGNoNTI3SW0rNWErVXcKLS0tIGsyTVN6ZzdDeHlSU052ZDFLTjJR
WjF2R2N2RHdkMGh3VkdwKy9kb0VZOXMKCC3bEZROBi45aydfI5UL4oPP+ce91/UK RmNyR1FVeXZrY2Y0K0hVbjNubjVYMTgKtOMYynoUHO1nn4IEhLNBJx7N5iVFslTG
tOuHzwituiYZdJ79a/wXRJMFPg9eCiziSR3uLeP8279oLM417Drwxg== bZ8moUawUOTYsx91XjlBZhILBXhU6tE1ZTe89OCcH6Id9+VRrkpu7A==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
recipient: age18rtm2dq2r62zvnhwdq0gkm24hu85r7zyleyk3jqv22zpdtw064eq7ay7dl recipient: age18rtm2dq2r62zvnhwdq0gkm24hu85r7zyleyk3jqv22zpdtw064eq7ay7dl
- enc: | - enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYZlNDTnhFSi9iOXZEcHdQ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnT3d0LzB2T0YrWno2bmd5
U1kreStxZ2dJd0g4dE1rdDQrSk5QTUhMbm5JCmRNc0k4K2VrTTFnaFNFSkd1em1J ZStIeUFPa3plVkhCSzd4Q1BVRmdoWmw3SHhFClNHeWhHcW5GY2ZGazN0WTJwMGlH
SGczRnFzK2RlSzFPQnVUWHZUdzYyL2MKLS0tICtBbk9Zc0tYaXJ6a3FXcUQ5R0xv dDJNYzdXMG10S3FSWmNtZWdZdUJneGMKLS0tIC90c0M1OHJGOUNWQlQ2cHl4aHpp
MVZxUGZTaHJyeGNjS1B2SVhJLzAyNFkKNGE5sNLodP5TcXqvW//JLRW/5g8I0Hzc VHBSU3Qzb2Vsb01ZVVd0WE5vMi9qMGcKDJpU/Y5sFe5F+2z545m2oeDMzxqDoF5f
cAgBXe+70HqFzEHQF1X7jHSZarTwclaNsjQPVyEaQfxYf+mLh+bTaA== 8PNnNpmla3el/wVeEZGlUnoeVYh8bf69QI0B9d7siujQPjW9zX/ccg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
recipient: age1mcp5gma7y0k59equhzqfsnn0ed335ljjtn0k08ua77htlxf0x54qsravch recipient: age1mcp5gma7y0k59equhzqfsnn0ed335ljjtn0k08ua77htlxf0x54qsravch
- enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpZXcvalpEOWR1aGx3VktS
T25OUTg4VTFvcURnZjJwTHR5OVNMcGwwOWlJCk1BNXg1YjNPTnl1WEZ3SFgvUlpw
TUpRenJENWJuOCtoR3pvOUx5TnhxYm8KLS0tIE94R1ZheUQyUEdQang2a0NWS0gy
SEtnUVJzWjFXYldQUk9UQjI2UnB0R3cKcn/6/1inalw8DWsrDOIvxXeUGKPR8unz
/PPRKBlfeTprRAwi4CH5bikM9ppi8krvPi3aZw37hjHQd8JNg73+bA==
-----END AGE ENCRYPTED FILE-----
recipient: age1wh7r9wnvyrgt5efjvg2324khsf4w6e9atpmz2udr4uw7frhnvvwquzcu72
lastmodified: "2026-06-15T10:20:19Z" lastmodified: "2026-06-15T10:20:19Z"
mac: ENC[AES256_GCM,data:Tw58FneoksiOuol1aUOFXoAnFiTzddmFfYAA0B0RfPPyj6UKQbBvRYJhOMuOMRE1fVlDhqxxDiqZI5y14vJg8gLusAZt1JKi7ODR7MqcImvxboaee8DIj4uIcN254g0c0cmZWsGrt7yTYoSLDUc3QdAxj9/Az/CMls6XjM+RL8E=,iv:XGgWgbexCUxzuJzRVG3V2GZGwmwjAtowgz+NRPxk1+o=,tag:FwYJXfwS2f70okl0bhS+Sw==,type:str] mac: ENC[AES256_GCM,data:Tw58FneoksiOuol1aUOFXoAnFiTzddmFfYAA0B0RfPPyj6UKQbBvRYJhOMuOMRE1fVlDhqxxDiqZI5y14vJg8gLusAZt1JKi7ODR7MqcImvxboaee8DIj4uIcN254g0c0cmZWsGrt7yTYoSLDUc3QdAxj9/Az/CMls6XjM+RL8E=,iv:XGgWgbexCUxzuJzRVG3V2GZGwmwjAtowgz+NRPxk1+o=,tag:FwYJXfwS2f70okl0bhS+Sw==,type:str]
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted