aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--.sops.yaml16
-rw-r--r--flake.lock155
-rw-r--r--flake.nix24
-rw-r--r--nixos/server/configuration.nix12
-rw-r--r--secrets/ltrr-home/secrets.yaml25
-rw-r--r--secrets/ltrr-tw/secrets.yaml25
6 files changed, 187 insertions, 70 deletions
diff --git a/.sops.yaml b/.sops.yaml
new file mode 100644
index 0000000..920fae8
--- /dev/null
+++ b/.sops.yaml
@@ -0,0 +1,16 @@
+keys:
+ - &primary age1xkajd8seprw2an4uczmq0xjjk0xxctvsst68hgkm0lr4dteucy3snarfhv
+ - &server_tw age1v55frla7fzursrvuxhznx9kztvlkxasaw98cu5rl5ysktrw8rfwqtfw3ju
+ - &server_home age1v76swwd0j8c7tzq3av9tftr0mjnmtu36n7h0enwxxzzu38a7uctqvasjw3
+creation_rules:
+ - path_regex: secrets/ltrr-home/secrets.yaml$
+ key_groups:
+ - age:
+ - *primary
+ - *server_home
+
+ - path_regex: secrets/ltrr-tw/secrets.yaml$
+ key_groups:
+ - age:
+ - *primary
+ - *server_tw
diff --git a/flake.lock b/flake.lock
index 6c7be18..a923103 100644
--- a/flake.lock
+++ b/flake.lock
@@ -103,11 +103,11 @@
"betterfox": {
"flake": false,
"locked": {
- "lastModified": 1753201717,
- "narHash": "sha256-gHFA/1PeQ0iNAcjATGwgJOqRlR9YmxD/RJKkYN36QYA=",
+ "lastModified": 1755724919,
+ "narHash": "sha256-3xvZAMPdGfj8w2AaepWW5xAX05Ry+pN8peLMORKNTIc=",
"owner": "yokoffing",
"repo": "Betterfox",
- "rev": "9727810114a44ddc4df35b2ef8ee8783ec95cf35",
+ "rev": "2d81cd4094a665be94cfc309157a8a72a8d0b262",
"type": "github"
},
"original": {
@@ -123,11 +123,11 @@
]
},
"locked": {
- "lastModified": 1753140376,
- "narHash": "sha256-7lrVrE0jSvZHrxEzvnfHFE/Wkk9DDqb+mYCodI5uuB8=",
+ "lastModified": 1755519972,
+ "narHash": "sha256-bU4nqi3IpsUZJeyS8Jk85ytlX61i4b0KCxXX9YcOgVc=",
"owner": "nix-community",
"repo": "disko",
- "rev": "545aba02960caa78a31bd9a8709a0ad4b6320a5c",
+ "rev": "4073ff2f481f9ef3501678ff479ed81402caae6d",
"type": "github"
},
"original": {
@@ -155,11 +155,11 @@
"flake-compat": {
"flake": false,
"locked": {
- "lastModified": 1696426674,
- "narHash": "sha256-kvjfFW7WAETZlt09AgDn1MrtKzP7t90Vf7vypd3OL1U=",
+ "lastModified": 1747046372,
+ "narHash": "sha256-CIVLLkVgvHYbgI2UpXvIIBJ12HWgX+fjA8Xf8PUmqCY=",
"owner": "edolstra",
"repo": "flake-compat",
- "rev": "0f9255e01c2351cc7d116c072cb317785dd33b33",
+ "rev": "9100a0f413b0c601e0533d1d94ffd501ce2e7885",
"type": "github"
},
"original": {
@@ -272,11 +272,11 @@
]
},
"locked": {
- "lastModified": 1754225444,
- "narHash": "sha256-mv01SQtqlhBMavc1dgNjgqJw4WfZxy+w3xBgwJU3YmU=",
+ "lastModified": 1755810213,
+ "narHash": "sha256-QdenO8f0PTg+tC6HuSvngKcbRZA5oZKmjUT+MXKOLQg=",
"owner": "nix-community",
"repo": "home-manager",
- "rev": "0de18bd5c6681280d7ae017fa34ffd91bdcf0557",
+ "rev": "6911d3e7f475f7b3558b4f5a6aba90fa86099baa",
"type": "github"
},
"original": {
@@ -352,11 +352,11 @@
]
},
"locked": {
- "lastModified": 1752149140,
- "narHash": "sha256-gbh1HL98Fdqu0jJIWN4OJQN7Kkth7+rbkFpSZLm/62A=",
+ "lastModified": 1754305013,
+ "narHash": "sha256-u+M2f0Xf1lVHzIPQ7DsNCDkM1NYxykOSsRr4t3TbSM4=",
"owner": "hyprwm",
"repo": "hyprgraphics",
- "rev": "340494a38b5ec453dfc542c6226481f736cc8a9a",
+ "rev": "4c1d63a0f22135db123fc789f174b89544c6ec2d",
"type": "github"
},
"original": {
@@ -381,11 +381,11 @@
"xdph": "xdph"
},
"locked": {
- "lastModified": 1754232492,
- "narHash": "sha256-gC/6xCLmDlTgUTc3ncfdPBq1TS8v4s4t1drdPi6Cqkg=",
+ "lastModified": 1755857635,
+ "narHash": "sha256-64lx5RFb6e85yY5qGFUjj2aeu+MGjzVDlbkedokgOc4=",
"owner": "hyprwm",
"repo": "Hyprland",
- "rev": "549f5e8dff5263530645f3aa6567f6f7a2ddad24",
+ "rev": "4e8875b5e9700c81ca4e169dc7b85bb5b3c8cb7a",
"type": "github"
},
"original": {
@@ -528,11 +528,11 @@
]
},
"locked": {
- "lastModified": 1753800567,
- "narHash": "sha256-W0xgXsaqGa/5/7IBzKNhf0+23MqGPymYYfqT7ECqeTE=",
+ "lastModified": 1754481650,
+ "narHash": "sha256-6u6HdEFJh5gY6VfyMQbhP7zDdVcqOrCDTkbiHJmAtMI=",
"owner": "hyprwm",
"repo": "hyprutils",
- "rev": "c65d41d4f4e6ded6fdb9d508a73e2fe90e55cdf7",
+ "rev": "df6b8820c4a0835d83d0c7c7be86fbc555f1f7fd",
"type": "github"
},
"original": {
@@ -573,11 +573,11 @@
]
},
"locked": {
- "lastModified": 1754215936,
- "narHash": "sha256-aIk3DNwa9s0cGkeKOtQq/2iMyfhgf+kgmpJflX7sn/A=",
+ "lastModified": 1755510252,
+ "narHash": "sha256-IPwAGaR9LO4LasxIFPqOTmIfliDsnzWVgzsaIekzRG4=",
"owner": "viperML",
"repo": "nh",
- "rev": "a38e84e3c51904810189979f6a0ef4439352d65d",
+ "rev": "8d690296fb3b898da565b33455a4227aed8a3133",
"type": "github"
},
"original": {
@@ -596,11 +596,11 @@
"xwayland-satellite-unstable": "xwayland-satellite-unstable"
},
"locked": {
- "lastModified": 1754098183,
- "narHash": "sha256-xiDTiBJlApXRiuTmOrdGaiJzs33lIdQepyCI8r9hy5w=",
+ "lastModified": 1755846233,
+ "narHash": "sha256-1+Jd9Jw4J7zZlaWKN3O5soybRguiOd4+PkkVPc3m5FM=",
"owner": "sodiboo",
"repo": "niri-flake",
- "rev": "f2a7b326dc420360a66a542f2262081763f0f9ab",
+ "rev": "1cf4c528db26dd5c429ca6807ba47ba79c88dea3",
"type": "github"
},
"original": {
@@ -629,11 +629,11 @@
"niri-unstable": {
"flake": false,
"locked": {
- "lastModified": 1753983552,
- "narHash": "sha256-xnPPjASWt4/u+GmRdrHADBKKSCtIhTFY53CSKM+Xtfk=",
+ "lastModified": 1755842228,
+ "narHash": "sha256-mEB25RQXApWIQq5RDNtUZgZW7UyT7kVOjAQmPoMopac=",
"owner": "YaLTeR",
"repo": "niri",
- "rev": "91b6a111cf228fadaabba706d8f4d155efc63b3a",
+ "rev": "210d5e90fe00ae9add5d841e1752b7f8c4a639a7",
"type": "github"
},
"original": {
@@ -644,11 +644,11 @@
},
"nixos-hardware": {
"locked": {
- "lastModified": 1754229794,
- "narHash": "sha256-yOl7REX6O/1mh+tpscJPKgjK6nmXSMOB1xhmDNAMUZM=",
+ "lastModified": 1755330281,
+ "narHash": "sha256-aJHFJWP9AuI8jUGzI77LYcSlkA9wJnOIg4ZqftwNGXA=",
"owner": "NixOS",
"repo": "nixos-hardware",
- "rev": "a872d985392ee5b19d8409bfcc3f106de2070070",
+ "rev": "3dac8a872557e0ca8c083cdcfc2f218d18e113b0",
"type": "github"
},
"original": {
@@ -660,11 +660,11 @@
},
"nixpkgs": {
"locked": {
- "lastModified": 1753939845,
- "narHash": "sha256-K2ViRJfdVGE8tpJejs8Qpvvejks1+A4GQej/lBk5y7I=",
+ "lastModified": 1754725699,
+ "narHash": "sha256-iAcj9T/Y+3DBy2J0N+yF9XQQQ8IEb5swLFzs23CdP88=",
"owner": "NixOS",
"repo": "nixpkgs",
- "rev": "94def634a20494ee057c76998843c015909d6311",
+ "rev": "85dbfc7aaf52ecb755f87e577ddbe6dbbdbc1054",
"type": "github"
},
"original": {
@@ -676,11 +676,11 @@
},
"nixpkgs-small": {
"locked": {
- "lastModified": 1754196730,
- "narHash": "sha256-qwbI79PEvEHdThZh4XMDuzo2de5XyQACr890uMOZQD8=",
+ "lastModified": 1755852287,
+ "narHash": "sha256-tFZb2XPBvejMNgeIB20iH/+SsLLeaFqOrhEvSGSJdHM=",
"owner": "nixos",
"repo": "nixpkgs",
- "rev": "b16813baa89e3bf87c62d459e6c8b2c3da57a369",
+ "rev": "f68e7e745bea059a585e1a831dfbd691f5165bd7",
"type": "github"
},
"original": {
@@ -692,11 +692,11 @@
},
"nixpkgs-stable": {
"locked": {
- "lastModified": 1754028485,
- "narHash": "sha256-IiiXB3BDTi6UqzAZcf2S797hWEPCRZOwyNThJIYhUfk=",
+ "lastModified": 1755704039,
+ "narHash": "sha256-gKlP0LbyJ3qX0KObfIWcp5nbuHSb5EHwIvU6UcNBg2A=",
"owner": "NixOS",
"repo": "nixpkgs",
- "rev": "59e69648d345d6e8fef86158c555730fa12af9de",
+ "rev": "9cb344e96d5b6918e94e1bca2d9f3ea1e9615545",
"type": "github"
},
"original": {
@@ -708,11 +708,11 @@
},
"nixpkgs_2": {
"locked": {
- "lastModified": 1753939845,
- "narHash": "sha256-K2ViRJfdVGE8tpJejs8Qpvvejks1+A4GQej/lBk5y7I=",
+ "lastModified": 1755615617,
+ "narHash": "sha256-HMwfAJBdrr8wXAkbGhtcby1zGFvs+StOp19xNsbqdOg=",
"owner": "NixOS",
"repo": "nixpkgs",
- "rev": "94def634a20494ee057c76998843c015909d6311",
+ "rev": "20075955deac2583bb12f07151c2df830ef346b4",
"type": "github"
},
"original": {
@@ -724,11 +724,11 @@
},
"nixpkgs_3": {
"locked": {
- "lastModified": 1753939845,
- "narHash": "sha256-K2ViRJfdVGE8tpJejs8Qpvvejks1+A4GQej/lBk5y7I=",
+ "lastModified": 1755615617,
+ "narHash": "sha256-HMwfAJBdrr8wXAkbGhtcby1zGFvs+StOp19xNsbqdOg=",
"owner": "nixos",
"repo": "nixpkgs",
- "rev": "94def634a20494ee057c76998843c015909d6311",
+ "rev": "20075955deac2583bb12f07151c2df830ef346b4",
"type": "github"
},
"original": {
@@ -787,11 +787,11 @@
]
},
"locked": {
- "lastModified": 1754236287,
- "narHash": "sha256-Jr9zVL1Dtu5yPepTgALL+gnB8RL/Z12Xwutf8Dap4iw=",
+ "lastModified": 1755858315,
+ "narHash": "sha256-pPsRgiD1m7IOJ0C3lzUzvk7Bq4qLOa7EpQ09QOdcM5g=",
"owner": "nix-community",
"repo": "NUR",
- "rev": "f88a0ce823243512ce9566629725ee358742453e",
+ "rev": "9055bc8750ab86fb5195f03d826de20450f9cc38",
"type": "github"
},
"original": {
@@ -810,11 +810,11 @@
]
},
"locked": {
- "lastModified": 1750779888,
- "narHash": "sha256-wibppH3g/E2lxU43ZQHC5yA/7kIKLGxVEnsnVK1BtRg=",
+ "lastModified": 1754416808,
+ "narHash": "sha256-c6yg0EQ9xVESx6HGDOCMcyRSjaTpNJP10ef+6fRcofA=",
"owner": "cachix",
"repo": "git-hooks.nix",
- "rev": "16ec914f6fb6f599ce988427d9d94efddf25fe6d",
+ "rev": "9c52372878df6911f9afc1e2a1391f55e4dfc864",
"type": "github"
},
"original": {
@@ -836,6 +836,7 @@
"nixpkgs-small": "nixpkgs-small",
"nurpkgs": "nurpkgs",
"shimmer": "shimmer",
+ "sops-nix": "sops-nix",
"stylix": "stylix",
"zen-browser": "zen-browser"
}
@@ -856,6 +857,26 @@
"type": "github"
}
},
+ "sops-nix": {
+ "inputs": {
+ "nixpkgs": [
+ "nixpkgs"
+ ]
+ },
+ "locked": {
+ "lastModified": 1754988908,
+ "narHash": "sha256-t+voe2961vCgrzPFtZxha0/kmFSHFobzF00sT8p9h0U=",
+ "owner": "Mic92",
+ "repo": "sops-nix",
+ "rev": "3223c7a92724b5d804e9988c6b447a0d09017d48",
+ "type": "github"
+ },
+ "original": {
+ "owner": "Mic92",
+ "repo": "sops-nix",
+ "type": "github"
+ }
+ },
"stylix": {
"inputs": {
"base16": "base16",
@@ -875,11 +896,11 @@
"tinted-zed": "tinted-zed"
},
"locked": {
- "lastModified": 1753978157,
- "narHash": "sha256-sVy8hb71VawSOIsLv/hMGzpvbbWszdP9aSKI5Drbt6Q=",
+ "lastModified": 1755708361,
+ "narHash": "sha256-RmqBx2EamhIk0WVhQSNb8iehaVhilO7D0YAnMoFPqJQ=",
"owner": "danth",
"repo": "stylix",
- "rev": "ded4f29a023e0f14506ec16b0e32d129e56341cc",
+ "rev": "2355da455d7188228aaf20ac16ea9386e5aa6f0c",
"type": "github"
},
"original": {
@@ -1043,16 +1064,16 @@
"xwayland-satellite-stable": {
"flake": false,
"locked": {
- "lastModified": 1748488455,
- "narHash": "sha256-IiLr1alzKFIy5tGGpDlabQbe6LV1c9ABvkH6T5WmyRI=",
+ "lastModified": 1755491097,
+ "narHash": "sha256-m+9tUfsmBeF2Gn4HWa6vSITZ4Gz1eA1F5Kh62B0N4oE=",
"owner": "Supreeeme",
"repo": "xwayland-satellite",
- "rev": "3ba30b149f9eb2bbf42cf4758d2158ca8cceef73",
+ "rev": "388d291e82ffbc73be18169d39470f340707edaa",
"type": "github"
},
"original": {
"owner": "Supreeeme",
- "ref": "v0.6",
+ "ref": "v0.7",
"repo": "xwayland-satellite",
"type": "github"
}
@@ -1060,11 +1081,11 @@
"xwayland-satellite-unstable": {
"flake": false,
"locked": {
- "lastModified": 1752338000,
- "narHash": "sha256-Fxlp/yKtynug0jyuauAmvZU2SzHCfwlwWf85j+IvQ0U=",
+ "lastModified": 1755491097,
+ "narHash": "sha256-m+9tUfsmBeF2Gn4HWa6vSITZ4Gz1eA1F5Kh62B0N4oE=",
"owner": "Supreeeme",
"repo": "xwayland-satellite",
- "rev": "ba78881a68182ce338041846164cbfed0d70935c",
+ "rev": "388d291e82ffbc73be18169d39470f340707edaa",
"type": "github"
},
"original": {
@@ -1081,11 +1102,11 @@
]
},
"locked": {
- "lastModified": 1754193284,
- "narHash": "sha256-ZGLXnpXy7vcTDLC1yLQSJOclsilvK+RNFVVEeO0ei/0=",
+ "lastModified": 1755836873,
+ "narHash": "sha256-kqBx9zxViNZsg7rD2zqzOQgCWJF/VNrAn0/T1Q7RuBM=",
"owner": "0xc000022070",
"repo": "zen-browser-flake",
- "rev": "ac2b25e76f5bfe1e30ae39409dfa450c5c1bc945",
+ "rev": "a1bb1b39bee59f537799d9937c6919544c841e5b",
"type": "github"
},
"original": {
diff --git a/flake.nix b/flake.nix
index 67fc683..3750fd9 100644
--- a/flake.nix
+++ b/flake.nix
@@ -43,6 +43,13 @@
inputs.nixpkgs.follows = "nixpkgs";
};
+ # Secrets
+ sops-nix = {
+ url = "github:Mic92/sops-nix";
+ inputs.nixpkgs.follows = "nixpkgs";
+ };
+
+
zen-browser = {
url = "github:0xc000022070/zen-browser-flake";
inputs.nixpkgs.follows = "nixpkgs";
@@ -68,6 +75,7 @@
, nixos-hardware
, hyprland
, disko
+ , sops-nix
, ... }@inputs:
let
inherit (self) outputs;
@@ -108,20 +116,33 @@
nixos-hardware.nixosModules.lenovo-thinkpad-t14-amd-gen1
];
};
+
ltrr = nixpkgs.lib.nixosSystem {
specialArgs = { inherit inputs outputs; };
modules = [
./nixos/pc/configuration.nix
];
};
- ltrr-cloud = nixpkgs.lib.nixosSystem {
+
+ ltrr-tw = nixpkgs.lib.nixosSystem {
+ system = "x86_64-linux";
+ modules = [
+ disko.nixosModules.disko
+ sops-nix.nixosModules.sops
+ ./nixos/tw/configuration.nix
+ ];
+ };
+
+ ltrr-home = nixpkgs.lib.nixosSystem {
system = "x86_64-linux";
modules = [
disko.nixosModules.disko
+ sops-nix.nixosModules.sops
./nixos/server/configuration.nix
];
};
};
+
homeConfigurations = {
"jerpo@ltrr-mini" = home-manager.lib.homeManagerConfiguration {
pkgs = nixpkgs.legacyPackages.x86_64-linux;
@@ -131,6 +152,7 @@
nurpkgs.modules.homeManager.default
];
};
+
"jerpo@ltrr" = home-manager.lib.homeManagerConfiguration {
pkgs = nixpkgs.legacyPackages.x86_64-linux;
extraSpecialArgs = { inherit inputs outputs; };
diff --git a/nixos/server/configuration.nix b/nixos/server/configuration.nix
index 97b06c2..75dcec7 100644
--- a/nixos/server/configuration.nix
+++ b/nixos/server/configuration.nix
@@ -16,6 +16,12 @@
];
nixpkgs.config.allowUnfree = true;
+
+ sops = {
+ defaultSopsFile = ../../secrets/ltrr-server/secrets.yaml;
+ defaultSopsFormat = "yaml";
+ age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
+ };
boot.loader.grub = {
efiSupport = true;
@@ -87,17 +93,19 @@
};
};
+
+ sops.secrets.wg_private_key = {};
networking.wg-quick = {
interfaces.wg0 = {
address = [ "10.1.1.2/32" ];
listenPort = 51820;
- privateKeyFile = "/root/wireguard-keys/private";
+ privateKeyFile = config.sops.secrets.wg_private_key.path;
peers = [
{
endpoint = "147.45.40.6:51820";
- publicKey = "12UX8icwCjIfADoX1zhv6QvKrSjMcuoSsKbn51Mr/D8=";
+ publicKey = "1RwEOL8br97Mujhz3fkfYKcxUFNHYAmt5JbWTbR3ihE=";
allowedIPs = ["10.1.1.1/32"];
persistentKeepalive = 25;
}
diff --git a/secrets/ltrr-home/secrets.yaml b/secrets/ltrr-home/secrets.yaml
new file mode 100644
index 0000000..036560a
--- /dev/null
+++ b/secrets/ltrr-home/secrets.yaml
@@ -0,0 +1,25 @@
+wg_secret_key: ENC[AES256_GCM,data:uqyxyiTigdlBr9lOBnvP5CG62V1C+oOXj83JSBGnwCi8FmzXkq9u6VGeNgo=,iv:dG/+7ZNnr2lK7ql0cZajOF4XRsF74AUNv/XJqQFjycY=,tag:yQuoXZXshNndcbtaOxPy6A==,type:str]
+sops:
+ age:
+ - recipient: age1xkajd8seprw2an4uczmq0xjjk0xxctvsst68hgkm0lr4dteucy3snarfhv
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWSzJnZWk2NEFmSzc5MjR6
+ TnFXSUFydEVRcHpiNUEwZVB1S2l5T2pqRmdBCmYrMzhJaHJVTU5oTGZmNU9pRmNt
+ L1IrZ01zV2FqbXFUOTMwRGVWQlhVLzAKLS0tIHZzVWNQT01ubk5jUExyNkVYcGVZ
+ RG9hcm5ZMkM1MUZpTnhKOW1pSGVKRlEK29pnaQqC5kVyYDthf24mYxCLWrAgF5PY
+ gzOuVq+7mEGH0VqG7r0ANmDBCBxhu5+3QDs4mLoeXD6+nB6/8ZUt5w==
+ -----END AGE ENCRYPTED FILE-----
+ - recipient: age1v76swwd0j8c7tzq3av9tftr0mjnmtu36n7h0enwxxzzu38a7uctqvasjw3
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTNkRVaVVSWk1uMm14b1Vi
+ aURQR1Yra2hIMDNuR2cxTDdrMWgwdFp3MGdzCkw4aEhYVEY3NXpqajJvanN3SXdU
+ WTB3V1NZeXRmRHZvZ0ZnLzlQYUV2c00KLS0tIFhzZW1IaFNOWDlEVTRnK0FTZldh
+ TllZdkFNbjN3djlKRnpGbjdZYUQyUmMKcrRINZxW3khgcFzuCk5fy9TRufCLXke3
+ y/64CTJ4OBMm7dQxPo5LBKw9/ptLI8qRbj0k8MDlaIpD3zTfi23KcQ==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-08-23T19:32:57Z"
+ mac: ENC[AES256_GCM,data:OXb/fg3t3uP8mk0m66l0QV/qNIxCOZA9ZE35S4hQwjbk/PewGElEJl1afD3bzsx6DAXXlA2xP82IOBDVaIbKoB9oM8dqFxn5iIb03ed1GYMDQggMlwIB0ZxTPCOhXqqpUvf4lqKyVRL5bapaPFU/X2l0cEyP7h7+2yKkJ8Vsfgo=,iv:X1WQzjLf/tgi8mHzLQRUdDCyt0kSsBAdufH6OoJOrEw=,tag:LV/1IED5Pim6JN7hGUlU5Q==,type:str]
+ unencrypted_suffix: _unencrypted
+ version: 3.10.2
diff --git a/secrets/ltrr-tw/secrets.yaml b/secrets/ltrr-tw/secrets.yaml
new file mode 100644
index 0000000..69c9843
--- /dev/null
+++ b/secrets/ltrr-tw/secrets.yaml
@@ -0,0 +1,25 @@
+wg_secret_key: ENC[AES256_GCM,data:T6s38NRpCJSVsJK2iY7hgI9PnVyrMMAZXa6BfbHcTx4nhcTspTcgUfhEpEs=,iv:bsQyK7z9iJRipClFs/g8GbdaydEB9yHlPDeP2c/Je5Q=,tag:h5SIaTVoxyYc3au2SH06vg==,type:str]
+sops:
+ age:
+ - recipient: age1xkajd8seprw2an4uczmq0xjjk0xxctvsst68hgkm0lr4dteucy3snarfhv
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhVlZ6dGVPaU05WWF1SkI5
+ cXowV0pySG9RcFRTYWVaM080UW4xUDgyZFY4CmtPb05URytRQ2lYMzF3VjVhVG5K
+ Nmg3NkQ3UTBGMEdDRTdVdW5lVkFLaGsKLS0tIG4vaWI0L253RklJTENCbng1allm
+ RDFWKzhmYVVFeEVoWGdXV2lIaWkxRjAKGSwLYATR1iTMJHrfXSNUEVcVMvF3OsNM
+ siP0WgwOpxoXW74sVRdpRxoOQU6bK3LuDyeTXIuP/Bcv37Tt1E01Nw==
+ -----END AGE ENCRYPTED FILE-----
+ - recipient: age1v55frla7fzursrvuxhznx9kztvlkxasaw98cu5rl5ysktrw8rfwqtfw3ju
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvVkJJalQ1aEMzN0JrVXVy
+ WGw5Rkx5Skpsc2dUOGp3ckNxbVBETVJBUzI4CnVJTWRqbDJDZ1lWVTl6ZENsRTVz
+ YkdSWVA0cWhYclhmQWNOd1AzRFdUaVkKLS0tIEUvWjZaQWlnbFVKQUlhZlhJeTYv
+ dm5KQUt5bjllM1BVekFmZHc4b21Fb2cKtIO0AGLxWkPbkRcFXWEaw2AzM1Un8WJh
+ vlYAgyp7qjaeFtjLj/+cL6PH4Xgu06cEm7tkRaLS9dgrZHtDyW23UA==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-08-23T19:33:04Z"
+ mac: ENC[AES256_GCM,data:N4yR+xWhBDEtu0GHhMrIqh9g7k46ocO+BVW5Z6FVa60apA/iuvg3LAE+IEjcC5sROYBT5QeEdutohn1yFrvCNmFpKPFHPgo7qbDWBSophXWZsX+Ti1fuc3OnP3wOsDZ6pXLfk30XxUNCr5Es5clCO5rHtY7INaNEEkHtsasvLSw=,iv:sQBdnR2MbMmqVDZ6wMhfUAXjanyKxqzR/g8XetwHTv4=,tag:W4n4cNhflJX5YagpILx8Mg==,type:str]
+ unencrypted_suffix: _unencrypted
+ version: 3.10.2