From 2ebdcc094a6543e36dc51598780e4dbafa2a98e2 Mon Sep 17 00:00:00 2001 From: spl3g Date: Sun, 24 Aug 2025 00:33:34 +0500 Subject: feat: add secrets via sops-nix --- .sops.yaml | 16 +++++ flake.lock | 155 +++++++++++++++++++++++------------------ flake.nix | 24 ++++++- nixos/server/configuration.nix | 12 +++- secrets/ltrr-home/secrets.yaml | 25 +++++++ secrets/ltrr-tw/secrets.yaml | 25 +++++++ 6 files changed, 187 insertions(+), 70 deletions(-) create mode 100644 .sops.yaml create mode 100644 secrets/ltrr-home/secrets.yaml create mode 100644 secrets/ltrr-tw/secrets.yaml diff --git a/.sops.yaml b/.sops.yaml new file mode 100644 index 0000000..920fae8 --- /dev/null +++ b/.sops.yaml @@ -0,0 +1,16 @@ +keys: + - &primary age1xkajd8seprw2an4uczmq0xjjk0xxctvsst68hgkm0lr4dteucy3snarfhv + - &server_tw age1v55frla7fzursrvuxhznx9kztvlkxasaw98cu5rl5ysktrw8rfwqtfw3ju + - &server_home age1v76swwd0j8c7tzq3av9tftr0mjnmtu36n7h0enwxxzzu38a7uctqvasjw3 +creation_rules: + - path_regex: secrets/ltrr-home/secrets.yaml$ + key_groups: + - age: + - *primary + - *server_home + + - path_regex: secrets/ltrr-tw/secrets.yaml$ + key_groups: + - age: + - *primary + - *server_tw diff --git a/flake.lock b/flake.lock index 6c7be18..a923103 100644 --- a/flake.lock +++ b/flake.lock @@ -103,11 +103,11 @@ "betterfox": { "flake": false, "locked": { - "lastModified": 1753201717, - "narHash": "sha256-gHFA/1PeQ0iNAcjATGwgJOqRlR9YmxD/RJKkYN36QYA=", + "lastModified": 1755724919, + "narHash": "sha256-3xvZAMPdGfj8w2AaepWW5xAX05Ry+pN8peLMORKNTIc=", "owner": "yokoffing", "repo": "Betterfox", - "rev": "9727810114a44ddc4df35b2ef8ee8783ec95cf35", + "rev": "2d81cd4094a665be94cfc309157a8a72a8d0b262", "type": "github" }, "original": { @@ -123,11 +123,11 @@ ] }, "locked": { - "lastModified": 1753140376, - "narHash": "sha256-7lrVrE0jSvZHrxEzvnfHFE/Wkk9DDqb+mYCodI5uuB8=", + "lastModified": 1755519972, + "narHash": "sha256-bU4nqi3IpsUZJeyS8Jk85ytlX61i4b0KCxXX9YcOgVc=", "owner": "nix-community", "repo": "disko", - "rev": "545aba02960caa78a31bd9a8709a0ad4b6320a5c", + "rev": "4073ff2f481f9ef3501678ff479ed81402caae6d", "type": "github" }, "original": { @@ -155,11 +155,11 @@ "flake-compat": { "flake": false, "locked": { - "lastModified": 1696426674, - "narHash": "sha256-kvjfFW7WAETZlt09AgDn1MrtKzP7t90Vf7vypd3OL1U=", + "lastModified": 1747046372, + "narHash": "sha256-CIVLLkVgvHYbgI2UpXvIIBJ12HWgX+fjA8Xf8PUmqCY=", "owner": "edolstra", "repo": "flake-compat", - "rev": "0f9255e01c2351cc7d116c072cb317785dd33b33", + "rev": "9100a0f413b0c601e0533d1d94ffd501ce2e7885", "type": "github" }, "original": { @@ -272,11 +272,11 @@ ] }, "locked": { - "lastModified": 1754225444, - "narHash": "sha256-mv01SQtqlhBMavc1dgNjgqJw4WfZxy+w3xBgwJU3YmU=", + "lastModified": 1755810213, + "narHash": "sha256-QdenO8f0PTg+tC6HuSvngKcbRZA5oZKmjUT+MXKOLQg=", "owner": "nix-community", "repo": "home-manager", - "rev": "0de18bd5c6681280d7ae017fa34ffd91bdcf0557", + "rev": "6911d3e7f475f7b3558b4f5a6aba90fa86099baa", "type": "github" }, "original": { @@ -352,11 +352,11 @@ ] }, "locked": { - "lastModified": 1752149140, - "narHash": "sha256-gbh1HL98Fdqu0jJIWN4OJQN7Kkth7+rbkFpSZLm/62A=", + "lastModified": 1754305013, + "narHash": "sha256-u+M2f0Xf1lVHzIPQ7DsNCDkM1NYxykOSsRr4t3TbSM4=", "owner": "hyprwm", "repo": "hyprgraphics", - "rev": "340494a38b5ec453dfc542c6226481f736cc8a9a", + "rev": "4c1d63a0f22135db123fc789f174b89544c6ec2d", "type": "github" }, "original": { @@ -381,11 +381,11 @@ "xdph": "xdph" }, "locked": { - "lastModified": 1754232492, - "narHash": "sha256-gC/6xCLmDlTgUTc3ncfdPBq1TS8v4s4t1drdPi6Cqkg=", + "lastModified": 1755857635, + "narHash": "sha256-64lx5RFb6e85yY5qGFUjj2aeu+MGjzVDlbkedokgOc4=", "owner": "hyprwm", "repo": "Hyprland", - "rev": "549f5e8dff5263530645f3aa6567f6f7a2ddad24", + "rev": "4e8875b5e9700c81ca4e169dc7b85bb5b3c8cb7a", "type": "github" }, "original": { @@ -528,11 +528,11 @@ ] }, "locked": { - "lastModified": 1753800567, - "narHash": "sha256-W0xgXsaqGa/5/7IBzKNhf0+23MqGPymYYfqT7ECqeTE=", + "lastModified": 1754481650, + "narHash": "sha256-6u6HdEFJh5gY6VfyMQbhP7zDdVcqOrCDTkbiHJmAtMI=", "owner": "hyprwm", "repo": "hyprutils", - "rev": "c65d41d4f4e6ded6fdb9d508a73e2fe90e55cdf7", + "rev": "df6b8820c4a0835d83d0c7c7be86fbc555f1f7fd", "type": "github" }, "original": { @@ -573,11 +573,11 @@ ] }, "locked": { - "lastModified": 1754215936, - "narHash": "sha256-aIk3DNwa9s0cGkeKOtQq/2iMyfhgf+kgmpJflX7sn/A=", + "lastModified": 1755510252, + "narHash": "sha256-IPwAGaR9LO4LasxIFPqOTmIfliDsnzWVgzsaIekzRG4=", "owner": "viperML", "repo": "nh", - "rev": "a38e84e3c51904810189979f6a0ef4439352d65d", + "rev": "8d690296fb3b898da565b33455a4227aed8a3133", "type": "github" }, "original": { @@ -596,11 +596,11 @@ "xwayland-satellite-unstable": "xwayland-satellite-unstable" }, "locked": { - "lastModified": 1754098183, - "narHash": "sha256-xiDTiBJlApXRiuTmOrdGaiJzs33lIdQepyCI8r9hy5w=", + "lastModified": 1755846233, + "narHash": "sha256-1+Jd9Jw4J7zZlaWKN3O5soybRguiOd4+PkkVPc3m5FM=", "owner": "sodiboo", "repo": "niri-flake", - "rev": "f2a7b326dc420360a66a542f2262081763f0f9ab", + "rev": "1cf4c528db26dd5c429ca6807ba47ba79c88dea3", "type": "github" }, "original": { @@ -629,11 +629,11 @@ "niri-unstable": { "flake": false, "locked": { - "lastModified": 1753983552, - "narHash": "sha256-xnPPjASWt4/u+GmRdrHADBKKSCtIhTFY53CSKM+Xtfk=", + "lastModified": 1755842228, + "narHash": "sha256-mEB25RQXApWIQq5RDNtUZgZW7UyT7kVOjAQmPoMopac=", "owner": "YaLTeR", "repo": "niri", - "rev": "91b6a111cf228fadaabba706d8f4d155efc63b3a", + "rev": "210d5e90fe00ae9add5d841e1752b7f8c4a639a7", "type": "github" }, "original": { @@ -644,11 +644,11 @@ }, "nixos-hardware": { "locked": { - "lastModified": 1754229794, - "narHash": "sha256-yOl7REX6O/1mh+tpscJPKgjK6nmXSMOB1xhmDNAMUZM=", + "lastModified": 1755330281, + "narHash": "sha256-aJHFJWP9AuI8jUGzI77LYcSlkA9wJnOIg4ZqftwNGXA=", "owner": "NixOS", "repo": "nixos-hardware", - "rev": "a872d985392ee5b19d8409bfcc3f106de2070070", + "rev": "3dac8a872557e0ca8c083cdcfc2f218d18e113b0", "type": "github" }, "original": { @@ -660,11 +660,11 @@ }, "nixpkgs": { "locked": { - "lastModified": 1753939845, - "narHash": "sha256-K2ViRJfdVGE8tpJejs8Qpvvejks1+A4GQej/lBk5y7I=", + "lastModified": 1754725699, + "narHash": "sha256-iAcj9T/Y+3DBy2J0N+yF9XQQQ8IEb5swLFzs23CdP88=", "owner": "NixOS", "repo": "nixpkgs", - "rev": "94def634a20494ee057c76998843c015909d6311", + "rev": "85dbfc7aaf52ecb755f87e577ddbe6dbbdbc1054", "type": "github" }, "original": { @@ -676,11 +676,11 @@ }, "nixpkgs-small": { "locked": { - "lastModified": 1754196730, - "narHash": "sha256-qwbI79PEvEHdThZh4XMDuzo2de5XyQACr890uMOZQD8=", + "lastModified": 1755852287, + "narHash": "sha256-tFZb2XPBvejMNgeIB20iH/+SsLLeaFqOrhEvSGSJdHM=", "owner": "nixos", "repo": "nixpkgs", - "rev": "b16813baa89e3bf87c62d459e6c8b2c3da57a369", + "rev": "f68e7e745bea059a585e1a831dfbd691f5165bd7", "type": "github" }, "original": { @@ -692,11 +692,11 @@ }, "nixpkgs-stable": { "locked": { - "lastModified": 1754028485, - "narHash": "sha256-IiiXB3BDTi6UqzAZcf2S797hWEPCRZOwyNThJIYhUfk=", + "lastModified": 1755704039, + "narHash": "sha256-gKlP0LbyJ3qX0KObfIWcp5nbuHSb5EHwIvU6UcNBg2A=", "owner": "NixOS", "repo": "nixpkgs", - "rev": "59e69648d345d6e8fef86158c555730fa12af9de", + "rev": "9cb344e96d5b6918e94e1bca2d9f3ea1e9615545", "type": "github" }, "original": { @@ -708,11 +708,11 @@ }, "nixpkgs_2": { "locked": { - "lastModified": 1753939845, - "narHash": "sha256-K2ViRJfdVGE8tpJejs8Qpvvejks1+A4GQej/lBk5y7I=", + "lastModified": 1755615617, + "narHash": "sha256-HMwfAJBdrr8wXAkbGhtcby1zGFvs+StOp19xNsbqdOg=", "owner": "NixOS", "repo": "nixpkgs", - "rev": "94def634a20494ee057c76998843c015909d6311", + "rev": "20075955deac2583bb12f07151c2df830ef346b4", "type": "github" }, "original": { @@ -724,11 +724,11 @@ }, "nixpkgs_3": { "locked": { - "lastModified": 1753939845, - "narHash": "sha256-K2ViRJfdVGE8tpJejs8Qpvvejks1+A4GQej/lBk5y7I=", + "lastModified": 1755615617, + "narHash": "sha256-HMwfAJBdrr8wXAkbGhtcby1zGFvs+StOp19xNsbqdOg=", "owner": "nixos", "repo": "nixpkgs", - "rev": "94def634a20494ee057c76998843c015909d6311", + "rev": "20075955deac2583bb12f07151c2df830ef346b4", "type": "github" }, "original": { @@ -787,11 +787,11 @@ ] }, "locked": { - "lastModified": 1754236287, - "narHash": "sha256-Jr9zVL1Dtu5yPepTgALL+gnB8RL/Z12Xwutf8Dap4iw=", + "lastModified": 1755858315, + "narHash": "sha256-pPsRgiD1m7IOJ0C3lzUzvk7Bq4qLOa7EpQ09QOdcM5g=", "owner": "nix-community", "repo": "NUR", - "rev": "f88a0ce823243512ce9566629725ee358742453e", + "rev": "9055bc8750ab86fb5195f03d826de20450f9cc38", "type": "github" }, "original": { @@ -810,11 +810,11 @@ ] }, "locked": { - "lastModified": 1750779888, - "narHash": "sha256-wibppH3g/E2lxU43ZQHC5yA/7kIKLGxVEnsnVK1BtRg=", + "lastModified": 1754416808, + "narHash": "sha256-c6yg0EQ9xVESx6HGDOCMcyRSjaTpNJP10ef+6fRcofA=", "owner": "cachix", "repo": "git-hooks.nix", - "rev": "16ec914f6fb6f599ce988427d9d94efddf25fe6d", + "rev": "9c52372878df6911f9afc1e2a1391f55e4dfc864", "type": "github" }, "original": { @@ -836,6 +836,7 @@ "nixpkgs-small": "nixpkgs-small", "nurpkgs": "nurpkgs", "shimmer": "shimmer", + "sops-nix": "sops-nix", "stylix": "stylix", "zen-browser": "zen-browser" } @@ -856,6 +857,26 @@ "type": "github" } }, + "sops-nix": { + "inputs": { + "nixpkgs": [ + "nixpkgs" + ] + }, + "locked": { + "lastModified": 1754988908, + "narHash": "sha256-t+voe2961vCgrzPFtZxha0/kmFSHFobzF00sT8p9h0U=", + "owner": "Mic92", + "repo": "sops-nix", + "rev": "3223c7a92724b5d804e9988c6b447a0d09017d48", + "type": "github" + }, + "original": { + "owner": "Mic92", + "repo": "sops-nix", + "type": "github" + } + }, "stylix": { "inputs": { "base16": "base16", @@ -875,11 +896,11 @@ "tinted-zed": "tinted-zed" }, "locked": { - "lastModified": 1753978157, - "narHash": "sha256-sVy8hb71VawSOIsLv/hMGzpvbbWszdP9aSKI5Drbt6Q=", + "lastModified": 1755708361, + "narHash": "sha256-RmqBx2EamhIk0WVhQSNb8iehaVhilO7D0YAnMoFPqJQ=", "owner": "danth", "repo": "stylix", - "rev": "ded4f29a023e0f14506ec16b0e32d129e56341cc", + "rev": "2355da455d7188228aaf20ac16ea9386e5aa6f0c", "type": "github" }, "original": { @@ -1043,16 +1064,16 @@ "xwayland-satellite-stable": { "flake": false, "locked": { - "lastModified": 1748488455, - "narHash": "sha256-IiLr1alzKFIy5tGGpDlabQbe6LV1c9ABvkH6T5WmyRI=", + "lastModified": 1755491097, + "narHash": "sha256-m+9tUfsmBeF2Gn4HWa6vSITZ4Gz1eA1F5Kh62B0N4oE=", "owner": "Supreeeme", "repo": "xwayland-satellite", - "rev": "3ba30b149f9eb2bbf42cf4758d2158ca8cceef73", + "rev": "388d291e82ffbc73be18169d39470f340707edaa", "type": "github" }, "original": { "owner": "Supreeeme", - "ref": "v0.6", + "ref": "v0.7", "repo": "xwayland-satellite", "type": "github" } @@ -1060,11 +1081,11 @@ "xwayland-satellite-unstable": { "flake": false, "locked": { - "lastModified": 1752338000, - "narHash": "sha256-Fxlp/yKtynug0jyuauAmvZU2SzHCfwlwWf85j+IvQ0U=", + "lastModified": 1755491097, + "narHash": "sha256-m+9tUfsmBeF2Gn4HWa6vSITZ4Gz1eA1F5Kh62B0N4oE=", "owner": "Supreeeme", "repo": "xwayland-satellite", - "rev": "ba78881a68182ce338041846164cbfed0d70935c", + "rev": "388d291e82ffbc73be18169d39470f340707edaa", "type": "github" }, "original": { @@ -1081,11 +1102,11 @@ ] }, "locked": { - "lastModified": 1754193284, - "narHash": "sha256-ZGLXnpXy7vcTDLC1yLQSJOclsilvK+RNFVVEeO0ei/0=", + "lastModified": 1755836873, + "narHash": "sha256-kqBx9zxViNZsg7rD2zqzOQgCWJF/VNrAn0/T1Q7RuBM=", "owner": "0xc000022070", "repo": "zen-browser-flake", - "rev": "ac2b25e76f5bfe1e30ae39409dfa450c5c1bc945", + "rev": "a1bb1b39bee59f537799d9937c6919544c841e5b", "type": "github" }, "original": { diff --git a/flake.nix b/flake.nix index 67fc683..3750fd9 100644 --- a/flake.nix +++ b/flake.nix @@ -43,6 +43,13 @@ inputs.nixpkgs.follows = "nixpkgs"; }; + # Secrets + sops-nix = { + url = "github:Mic92/sops-nix"; + inputs.nixpkgs.follows = "nixpkgs"; + }; + + zen-browser = { url = "github:0xc000022070/zen-browser-flake"; inputs.nixpkgs.follows = "nixpkgs"; @@ -68,6 +75,7 @@ , nixos-hardware , hyprland , disko + , sops-nix , ... }@inputs: let inherit (self) outputs; @@ -108,20 +116,33 @@ nixos-hardware.nixosModules.lenovo-thinkpad-t14-amd-gen1 ]; }; + ltrr = nixpkgs.lib.nixosSystem { specialArgs = { inherit inputs outputs; }; modules = [ ./nixos/pc/configuration.nix ]; }; - ltrr-cloud = nixpkgs.lib.nixosSystem { + + ltrr-tw = nixpkgs.lib.nixosSystem { + system = "x86_64-linux"; + modules = [ + disko.nixosModules.disko + sops-nix.nixosModules.sops + ./nixos/tw/configuration.nix + ]; + }; + + ltrr-home = nixpkgs.lib.nixosSystem { system = "x86_64-linux"; modules = [ disko.nixosModules.disko + sops-nix.nixosModules.sops ./nixos/server/configuration.nix ]; }; }; + homeConfigurations = { "jerpo@ltrr-mini" = home-manager.lib.homeManagerConfiguration { pkgs = nixpkgs.legacyPackages.x86_64-linux; @@ -131,6 +152,7 @@ nurpkgs.modules.homeManager.default ]; }; + "jerpo@ltrr" = home-manager.lib.homeManagerConfiguration { pkgs = nixpkgs.legacyPackages.x86_64-linux; extraSpecialArgs = { inherit inputs outputs; }; diff --git a/nixos/server/configuration.nix b/nixos/server/configuration.nix index 97b06c2..75dcec7 100644 --- a/nixos/server/configuration.nix +++ b/nixos/server/configuration.nix @@ -16,6 +16,12 @@ ]; nixpkgs.config.allowUnfree = true; + + sops = { + defaultSopsFile = ../../secrets/ltrr-server/secrets.yaml; + defaultSopsFormat = "yaml"; + age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ]; + }; boot.loader.grub = { efiSupport = true; @@ -87,17 +93,19 @@ }; }; + + sops.secrets.wg_private_key = {}; networking.wg-quick = { interfaces.wg0 = { address = [ "10.1.1.2/32" ]; listenPort = 51820; - privateKeyFile = "/root/wireguard-keys/private"; + privateKeyFile = config.sops.secrets.wg_private_key.path; peers = [ { endpoint = "147.45.40.6:51820"; - publicKey = "12UX8icwCjIfADoX1zhv6QvKrSjMcuoSsKbn51Mr/D8="; + publicKey = "1RwEOL8br97Mujhz3fkfYKcxUFNHYAmt5JbWTbR3ihE="; allowedIPs = ["10.1.1.1/32"]; persistentKeepalive = 25; } diff --git a/secrets/ltrr-home/secrets.yaml b/secrets/ltrr-home/secrets.yaml new file mode 100644 index 0000000..036560a --- /dev/null +++ b/secrets/ltrr-home/secrets.yaml @@ -0,0 +1,25 @@ +wg_secret_key: ENC[AES256_GCM,data:uqyxyiTigdlBr9lOBnvP5CG62V1C+oOXj83JSBGnwCi8FmzXkq9u6VGeNgo=,iv:dG/+7ZNnr2lK7ql0cZajOF4XRsF74AUNv/XJqQFjycY=,tag:yQuoXZXshNndcbtaOxPy6A==,type:str] +sops: + age: + - recipient: age1xkajd8seprw2an4uczmq0xjjk0xxctvsst68hgkm0lr4dteucy3snarfhv + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWSzJnZWk2NEFmSzc5MjR6 + TnFXSUFydEVRcHpiNUEwZVB1S2l5T2pqRmdBCmYrMzhJaHJVTU5oTGZmNU9pRmNt + L1IrZ01zV2FqbXFUOTMwRGVWQlhVLzAKLS0tIHZzVWNQT01ubk5jUExyNkVYcGVZ + RG9hcm5ZMkM1MUZpTnhKOW1pSGVKRlEK29pnaQqC5kVyYDthf24mYxCLWrAgF5PY + gzOuVq+7mEGH0VqG7r0ANmDBCBxhu5+3QDs4mLoeXD6+nB6/8ZUt5w== + -----END AGE ENCRYPTED FILE----- + - recipient: age1v76swwd0j8c7tzq3av9tftr0mjnmtu36n7h0enwxxzzu38a7uctqvasjw3 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTNkRVaVVSWk1uMm14b1Vi + aURQR1Yra2hIMDNuR2cxTDdrMWgwdFp3MGdzCkw4aEhYVEY3NXpqajJvanN3SXdU + WTB3V1NZeXRmRHZvZ0ZnLzlQYUV2c00KLS0tIFhzZW1IaFNOWDlEVTRnK0FTZldh + TllZdkFNbjN3djlKRnpGbjdZYUQyUmMKcrRINZxW3khgcFzuCk5fy9TRufCLXke3 + y/64CTJ4OBMm7dQxPo5LBKw9/ptLI8qRbj0k8MDlaIpD3zTfi23KcQ== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2025-08-23T19:32:57Z" + mac: ENC[AES256_GCM,data:OXb/fg3t3uP8mk0m66l0QV/qNIxCOZA9ZE35S4hQwjbk/PewGElEJl1afD3bzsx6DAXXlA2xP82IOBDVaIbKoB9oM8dqFxn5iIb03ed1GYMDQggMlwIB0ZxTPCOhXqqpUvf4lqKyVRL5bapaPFU/X2l0cEyP7h7+2yKkJ8Vsfgo=,iv:X1WQzjLf/tgi8mHzLQRUdDCyt0kSsBAdufH6OoJOrEw=,tag:LV/1IED5Pim6JN7hGUlU5Q==,type:str] + unencrypted_suffix: _unencrypted + version: 3.10.2 diff --git a/secrets/ltrr-tw/secrets.yaml b/secrets/ltrr-tw/secrets.yaml new file mode 100644 index 0000000..69c9843 --- /dev/null +++ b/secrets/ltrr-tw/secrets.yaml @@ -0,0 +1,25 @@ +wg_secret_key: ENC[AES256_GCM,data:T6s38NRpCJSVsJK2iY7hgI9PnVyrMMAZXa6BfbHcTx4nhcTspTcgUfhEpEs=,iv:bsQyK7z9iJRipClFs/g8GbdaydEB9yHlPDeP2c/Je5Q=,tag:h5SIaTVoxyYc3au2SH06vg==,type:str] +sops: + age: + - recipient: age1xkajd8seprw2an4uczmq0xjjk0xxctvsst68hgkm0lr4dteucy3snarfhv + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhVlZ6dGVPaU05WWF1SkI5 + cXowV0pySG9RcFRTYWVaM080UW4xUDgyZFY4CmtPb05URytRQ2lYMzF3VjVhVG5K + Nmg3NkQ3UTBGMEdDRTdVdW5lVkFLaGsKLS0tIG4vaWI0L253RklJTENCbng1allm + RDFWKzhmYVVFeEVoWGdXV2lIaWkxRjAKGSwLYATR1iTMJHrfXSNUEVcVMvF3OsNM + siP0WgwOpxoXW74sVRdpRxoOQU6bK3LuDyeTXIuP/Bcv37Tt1E01Nw== + -----END AGE ENCRYPTED FILE----- + - recipient: age1v55frla7fzursrvuxhznx9kztvlkxasaw98cu5rl5ysktrw8rfwqtfw3ju + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvVkJJalQ1aEMzN0JrVXVy + WGw5Rkx5Skpsc2dUOGp3ckNxbVBETVJBUzI4CnVJTWRqbDJDZ1lWVTl6ZENsRTVz + YkdSWVA0cWhYclhmQWNOd1AzRFdUaVkKLS0tIEUvWjZaQWlnbFVKQUlhZlhJeTYv + dm5KQUt5bjllM1BVekFmZHc4b21Fb2cKtIO0AGLxWkPbkRcFXWEaw2AzM1Un8WJh + vlYAgyp7qjaeFtjLj/+cL6PH4Xgu06cEm7tkRaLS9dgrZHtDyW23UA== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2025-08-23T19:33:04Z" + mac: ENC[AES256_GCM,data:N4yR+xWhBDEtu0GHhMrIqh9g7k46ocO+BVW5Z6FVa60apA/iuvg3LAE+IEjcC5sROYBT5QeEdutohn1yFrvCNmFpKPFHPgo7qbDWBSophXWZsX+Ti1fuc3OnP3wOsDZ6pXLfk30XxUNCr5Es5clCO5rHtY7INaNEEkHtsasvLSw=,iv:sQBdnR2MbMmqVDZ6wMhfUAXjanyKxqzR/g8XetwHTv4=,tag:W4n4cNhflJX5YagpILx8Mg==,type:str] + unencrypted_suffix: _unencrypted + version: 3.10.2 -- cgit v1.2.3