From 3da02338612632f86de20089b2455dc913631138 Mon Sep 17 00:00:00 2001 From: Dominik Polakovics Date: Tue, 28 Nov 2023 15:55:38 +0100 Subject: [PATCH 1/2] change secrets key --- .sops.yaml | 2 +- hosts/fw.cloonar.com/secrets.yaml | 22 +++++++++++----------- 2 files changed, 12 insertions(+), 12 deletions(-) diff --git a/.sops.yaml b/.sops.yaml index 18e5f32..90efc34 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -11,7 +11,7 @@ keys: - &ldap-server-test age1azmxsw5llmp2nnsv3yc2l8paelmq9rfepxd8jvmswgsmax0qyyxqdnsc7t - &testmodules age1zkzpnfeakyvg3fqtyay32sushjx2hqe28y6hs6ss7plemzqjqa5s6s5yu3 - &ldap-server-arm age1jyeppc8yl2twnv8fwcewutd5gjewnxl59lmhev6ygds9qel8zf8syt7zz4 - - &fw age1jyeppc8yl2twnv8fwcewutd5gjewnxl59lmhev6ygds9qel8zf8syt7zz4 + - &fw age18dfjtphsrtkzmlarwlcmkq9h3v87agyx4c7my6s9mah9wjugk5us80g6mf - &netboot age14uarclad0ty5supc8ep09793xrnwkv8a4h9j0fq8d8lc92n2dadqkf64vw creation_rules: - path_regex: ^[^/]+\.yaml$ diff --git a/hosts/fw.cloonar.com/secrets.yaml b/hosts/fw.cloonar.com/secrets.yaml index af33ddc..033e05c 100644 --- a/hosts/fw.cloonar.com/secrets.yaml +++ b/hosts/fw.cloonar.com/secrets.yaml @@ -17,20 +17,20 @@ sops: - recipient: age16veg3fmvpfm7a89a9fc8dvvsxmsthlm70nfxqspr6t8vnf9wkcwsvdq38d enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBaExBbWFIRlRFMFBCQUdt - MElGZkpqWDcyNkY0dnd6QkVRenJNUWFGWDJzCnNYZWdtMkhLemlVbzh6TXREMG5p - SE5Bc1RaZ3ZlQnVVc0pmOFNTYkZ1alkKLS0tIGxGSiswRkxOdlR1ZkdUY1JHV1Ux - TGphL2Q3eFVRZUllRUtrd0s2eHUwc0UKz/PVi6nnhO3+Y5wnvsfu80vpdgvIZKEc - XGI21VBqDS6qetrlPoU2L0Ta729rs6PAeoAhiY+z7cXxgzaDvWONCA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxR0NMaEpHSmdOaVZSTk1F + THZaOTYrRWhzdGdEcThTWDB3RlJLRWZyN0c4Cm05VkI3dmJtV293am1uc2FkajBL + MW1yVUQvWUN1RmY4UFZsZ242N2t1OVEKLS0tIHJUV0lMUis4c0NublBuRHdEYkRP + Uk50RGFDSXJJemhZL3lTVUg4VHVjejQKP5wFgrgUtFtWr6eUHVZlikFuT18EiqOs + gTfeMXFWfCyn0IQO3UNYSBh6rAEiNBi/WZtlRkrGI1mZFgLmKT7eww== -----END AGE ENCRYPTED FILE----- - - recipient: age1jyeppc8yl2twnv8fwcewutd5gjewnxl59lmhev6ygds9qel8zf8syt7zz4 + - recipient: age18dfjtphsrtkzmlarwlcmkq9h3v87agyx4c7my6s9mah9wjugk5us80g6mf enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjU2RWbDZoemRUTjlpTklI - R1JyMTQ5OE50bHBHR25LSVdXdHBoSys2MXdjCnRNN2RhRis1dmdwcEJ5anp3eEEv - U2VQcXBkQXRNaE1Na2ozV1VuRzVJdkEKLS0tIGxRa2pDS2VGUGNjblM1Smt6dy85 - dTNvbDlqMmYyQXJsTlFWWHpVZlZzWEUK18tC5iPbbcr9pNvPy67XzQttnizp8huI - faFSGZLKdc7F32F39yw9hAu8QpYBQ+Sb6ucYxZ4pIAKNX+9ICGcnTA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtdDdCUTZsbWRwYmhjaVhs + R1JiUUFVSU85c3lZWVpEeVh0S21SdHF3MGhBCmZ0RVdhWW4rM3VNRXE2em1reHVu + R0tsUEp6SS81Um40WXV2TmE3VHlRaDAKLS0tIFdwMlVoYUJ1ZWNjQ2NNTy9aWkFi + N3I5RFB6eDBKL2Rib3hEKzYveDRMMEkKMlteV2TDUyaYx8beFWLU4Ib3/9UOylPo + /j9hOEBhd9LhaHSAsWPvoqrVsd9zaNBNPe6C1ZZCCWwBHPgdiF8WTQ== -----END AGE ENCRYPTED FILE----- lastmodified: "2023-11-26T23:25:28Z" mac: ENC[AES256_GCM,data:T7d81ypM42KVs4nUrftnvljRN4xnA2R9Y/HpPLum/gpX5k/ng6w557sl3Q6aFq8FnDgHBGrcab5N3SIYNte6eXARDhG/nqTj/XlpzQPOwDip9ZvHuOTyKDWs5CK5Q0C2m4YqrwyEt66IyS7ZBTeKjR+nP67PxoULjZNsEY7CPSc=,iv:zO24RWNGVNmu/G+MATNwpplcLtNEou9CmN8DdlrHA80=,tag:KQcsI82F5EJRf7Cfp390Sw==,type:str] From d07e0d8ec555aefba8dab510ca99d4379412b993 Mon Sep 17 00:00:00 2001 From: Dominik Polakovics Date: Tue, 28 Nov 2023 15:56:53 +0100 Subject: [PATCH 2/2] update ssh key --- fleet.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fleet.nix b/fleet.nix index dc22559..1a368b9 100644 --- a/fleet.nix +++ b/fleet.nix @@ -42,7 +42,7 @@ } { username = "fw.cloonar.com"; - key = "ssh-rsa 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 root@steamdeck"; + key= "ssh-rsa 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"; } ]; in {