Jörg Thalheim
97debd3628
All checks were successful
buildbot/nix-build .#checks.x86_64-linux.devShell-clan-merge Build done.
buildbot/nix-build .#checks.x86_64-linux.clan-merge Build done.
buildbot/nix-build .#checks.x86_64-linux.devShell-matrix-bot Build done.
buildbot/nix-build .#checks.x86_64-linux.devShell-default Build done.
buildbot/nix-build .#checks.x86_64-linux.package-action-ensure-tea-login Build done.
buildbot/nix-build .#checks.x86_64-linux.package-action-flake-update-pr-clan Build done.
buildbot/nix-build .#checks.x86_64-linux.package-action-create-pr Build done.
buildbot/nix-build .#checks.x86_64-linux.nixos-web01 Build done.
buildbot/nix-build .#checks.x86_64-linux.package-action-flake-update Build done.
buildbot/nix-build .#checks.x86_64-linux.package-clan-merge Build done.
buildbot/nix-build .#checks.x86_64-linux.treefmt Build done.
buildbot/nix-build .#checks.x86_64-linux.package-gitea Build done.
buildbot/nix-build .#checks.x86_64-linux.package-job-flake-update-clan-core Build done.
buildbot/nix-build .#checks.x86_64-linux.package-job-flake-update-clan-homepage Build done.
buildbot/nix-build .#checks.x86_64-linux.package-job-flake-update-clan-infra Build done.
buildbot/nix-build .#checks.x86_64-linux.package-matrix-bot Build done.
buildbot/nix-eval Build done.
34 lines
1.2 KiB
YAML
34 lines
1.2 KiB
YAML
keys:
|
|
# To generate new admin key, run (requires [age](https://github.com/FiloSottile/age)):
|
|
# ```
|
|
# mkdir -p ~/.config/sops/age/
|
|
# age-keygen -o ~/.config/sops/age/keys.txt
|
|
# ```
|
|
# Provide the generated key to a pre-existing admin and wait for him to re-encrypt all secrets in this repo with it. After pulling the re-encrypted secrets you can read them with `sops some-file`.
|
|
- &joerg age17n64ahe3wesh8l8lj0zylf4nljdmqn28hvqns2g7hgm9mdkhlsvsjuvkxz
|
|
- &lassulus age1eq0e6uhjj2tja8v338tkdz8ema2aw5anpuyaq2uru7rt4lq7msyqqut6m2
|
|
- &dave age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl
|
|
# Downloaded like this: nix-shell -p ssh-to-age --run 'ssh-keyscan clan.lol | ssh-to-age'
|
|
- &web01 age17xuvz0fqtynzdmf8rfh4g3e46tx8w3mc6zgytrmuj5v9dhnldgxs7ue7ct
|
|
creation_rules:
|
|
- path_regex: targets/.*/(terraform.tfstate|secrets.auto.tfvars.sops.json)$
|
|
key_groups:
|
|
- age:
|
|
- *joerg
|
|
- *lassulus
|
|
- *dave
|
|
- path_regex: targets/web01/secrets.yaml$
|
|
key_groups:
|
|
- age:
|
|
- *joerg
|
|
- *lassulus
|
|
- *dave
|
|
- *web01
|
|
- path_regex: targets/web01-new/secrets.yaml$
|
|
key_groups:
|
|
- age:
|
|
- *joerg
|
|
- *lassulus
|
|
- *dave
|
|
- *web01
|