From e81b3a3ea6454008653a6df41bef66fa7784f273 Mon Sep 17 00:00:00 2001 From: blaknull Date: Sat, 2 Nov 2024 18:36:13 -0500 Subject: [PATCH] sops-nix working --- flake.lock | 28 +++++++++---------- .../configuration/homebox/.sops.yaml | 2 +- .../configuration/homebox/default.nix | 1 + .../homebox/secrets/secrets.yaml | 18 ++++++------ 4 files changed, 25 insertions(+), 24 deletions(-) diff --git a/flake.lock b/flake.lock index b0dbce7..a40cbd9 100644 --- a/flake.lock +++ b/flake.lock @@ -1160,12 +1160,12 @@ }, "locked": { "lastModified": 0, - "narHash": "sha256-vhkyPcraN1gHPR50nUBwPGMdGP1p20/3n4i8uAuragY=", - "path": "/nix/store/pvjjq7d2bcvrfx4jmgnpfj4mzwjjcncf-source/home-manager", + "narHash": "sha256-GNix63XYPLopvFgOUHyouU0d/V9lvKN9h3h1juttDgg=", + "path": "/nix/store/ks4xdinqk8s9sd71shqcy20dbwc3aq83-source/home-manager", "type": "path" }, "original": { - "path": "/nix/store/pvjjq7d2bcvrfx4jmgnpfj4mzwjjcncf-source/home-manager", + "path": "/nix/store/ks4xdinqk8s9sd71shqcy20dbwc3aq83-source/home-manager", "type": "path" } }, @@ -1658,11 +1658,11 @@ "locked": { "lastModified": 1, "narHash": "sha256-oZjb5biv4evAYiQhs7m1WqDt96NMLrGzn4KiYNBP01s=", - "path": "/nix/store/h6akvkf3ind4w4nl87rj4yscvp7cznzs-source/packages", + "path": "/nix/store/h2zmr5ar7lczwqx8yxh5lsqq6q652dkl-source/packages", "type": "path" }, "original": { - "path": "/nix/store/h6akvkf3ind4w4nl87rj4yscvp7cznzs-source/packages", + "path": "/nix/store/h2zmr5ar7lczwqx8yxh5lsqq6q652dkl-source/packages", "type": "path" } }, @@ -1731,11 +1731,11 @@ "locked": { "lastModified": 1, "narHash": "sha256-5gepalTSnDyC1WW11Gp75FAPeex5V9M0xOUn9amViyw=", - "path": "/nix/store/h6akvkf3ind4w4nl87rj4yscvp7cznzs-source/programs", + "path": "/nix/store/h2zmr5ar7lczwqx8yxh5lsqq6q652dkl-source/programs", "type": "path" }, "original": { - "path": "/nix/store/h6akvkf3ind4w4nl87rj4yscvp7cznzs-source/programs", + "path": "/nix/store/h2zmr5ar7lczwqx8yxh5lsqq6q652dkl-source/programs", "type": "path" } }, @@ -1746,11 +1746,11 @@ "locked": { "lastModified": 1, "narHash": "sha256-HAuZ9X84fuwUcit6NWUoJCjHj+29nST/YN6Rs8JQugY=", - "path": "/nix/store/l5fryyz3kpp9643rwvj5x1yhpcnk4rf5-source/programs", + "path": "/nix/store/q4z7hs6sxabks0kgm5xfksnqk0mhpzha-source/programs", "type": "path" }, "original": { - "path": "/nix/store/l5fryyz3kpp9643rwvj5x1yhpcnk4rf5-source/programs", + "path": "/nix/store/q4z7hs6sxabks0kgm5xfksnqk0mhpzha-source/programs", "type": "path" } }, @@ -1832,11 +1832,11 @@ "locked": { "lastModified": 1, "narHash": "sha256-0Ztx5DVQ2I7hvCK/qjGa4XTdRgbzM8rhf19m0al8lVM=", - "path": "/nix/store/l5fryyz3kpp9643rwvj5x1yhpcnk4rf5-source/services/sddm", + "path": "/nix/store/q4z7hs6sxabks0kgm5xfksnqk0mhpzha-source/services/sddm", "type": "path" }, "original": { - "path": "/nix/store/l5fryyz3kpp9643rwvj5x1yhpcnk4rf5-source/services/sddm", + "path": "/nix/store/q4z7hs6sxabks0kgm5xfksnqk0mhpzha-source/services/sddm", "type": "path" } }, @@ -1903,12 +1903,12 @@ }, "locked": { "lastModified": 1, - "narHash": "sha256-S4jXJkYHvv1ssTGJ/TbjZ1OPWjQSZWxjfcuhAMEpNJc=", - "path": "/nix/store/pvjjq7d2bcvrfx4jmgnpfj4mzwjjcncf-source/system-config", + "narHash": "sha256-kbOXpjltLXZf46Wj67cOsRS3RQAIon7A4y6E99ZfC6o=", + "path": "/nix/store/ks4xdinqk8s9sd71shqcy20dbwc3aq83-source/system-config", "type": "path" }, "original": { - "path": "/nix/store/pvjjq7d2bcvrfx4jmgnpfj4mzwjjcncf-source/system-config", + "path": "/nix/store/ks4xdinqk8s9sd71shqcy20dbwc3aq83-source/system-config", "type": "path" } }, diff --git a/system-config/configuration/homebox/.sops.yaml b/system-config/configuration/homebox/.sops.yaml index 88290a5..74a5721 100644 --- a/system-config/configuration/homebox/.sops.yaml +++ b/system-config/configuration/homebox/.sops.yaml @@ -1,5 +1,5 @@ keys: - - &primary age1z20c7s7aw4jwdnfqp85lzx9gg3zk396x5pdw9gwzgvxs932m7d7qlhhwre + - &primary age1xkwq2edchgu3taf2tlvraajxmgymn4vxtnpvl6ywlsswtqcp5sfswv2gzt creation_rules: - path_regex: secrets/secrets.yaml$ key_groups: diff --git a/system-config/configuration/homebox/default.nix b/system-config/configuration/homebox/default.nix index ada94d1..a654ead 100644 --- a/system-config/configuration/homebox/default.nix +++ b/system-config/configuration/homebox/default.nix @@ -163,6 +163,7 @@ }; sops = { + age.keyFile = "/var/lib/sops/age/keys.txt"; defaultSopsFile = ./secrets/secrets.yaml; defaultSopsFormat = "yaml"; diff --git a/system-config/configuration/homebox/secrets/secrets.yaml b/system-config/configuration/homebox/secrets/secrets.yaml index 0fc951d..e00929d 100644 --- a/system-config/configuration/homebox/secrets/secrets.yaml +++ b/system-config/configuration/homebox/secrets/secrets.yaml @@ -1,21 +1,21 @@ -nathan_pass: ENC[AES256_GCM,data:9DUrW2JFWwwscRmMgNoYrMU0nrSDbz37tw+wershMsRxhSavUmQCVEkz8zZ71OguAh+2vIxWBaVk9lzL/wOMFY/vPX7Z5Jq4og==,iv:rDxMkKDVxcrehzM0MKN0nQ/+WW8MA69qiNNoeTHJ2h0=,tag:VMGwTtbPwjIhyfuhc2ArGA==,type:str] +nathan_pass: ENC[AES256_GCM,data:nRmwPPNwVMsDiq2ccKBUnQQ0wikcSA4rpb4lQi1NxfXWvEXhj4okvSRCOcS5vlfj6uCdYc1N5AzeOG9l9Y+bnIgvKLhoaL3drQ==,iv:McSMq7CgWYm4i6F0VcLkvsoErRhwzwvhe75mcwy5pmA=,tag:sJVLP2SrFlhAyEfHTQEHuA==,type:str] sops: kms: [] gcp_kms: [] azure_kv: [] hc_vault: [] age: - - recipient: age1z20c7s7aw4jwdnfqp85lzx9gg3zk396x5pdw9gwzgvxs932m7d7qlhhwre + - recipient: age1xkwq2edchgu3taf2tlvraajxmgymn4vxtnpvl6ywlsswtqcp5sfswv2gzt enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhUnNKWUVkV1d0STBNSFR4 - c2RTRTN4K2x0Q2R2QzZoYzNOd2RGNk10SkFFCkxlTDduZzhZeHNSd2JmVjgwVzVW - SGozTFVpNW9kaUIvWEtWb3BGeGtrTVUKLS0tIHBXYS9xK2ZuUnZ6UTBFV3Y3MWU4 - SGxFWjlLSVVNVDAwRTdXWENLK2x0ekEKh7NiaCQn6yvT6kyYFOXCiGv6C3PSOAky - Od5kW3fBMftfv1qrlhA4svT8s6KeM0ynbfNgb5wKtpZ/nfXYkcrmGw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByZitXYWtDM1BXTk9nZjg4 + ejk2T3YvM0lCMFExekZzWFppZjQ4SWQ0M3kwCi9ZODdsSkJtSkNjdVlUOVJONkRs + Ym03WEVyUXVwWFpVcGcvZTRNc011bFEKLS0tIE43NG1oRFVNSmxhbUhXZ2hRdE9S + cCtyYlEzMm9QeHlHOWo0L0xObXp5c2MKfzoTSt0hI94QaxQsKKOpX7gQcZNtB7zd + WgeBgTwOE30vcIQr/k7a9q77l2bDYe6i71R79YHsKvsFc+7i3gL46g== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-11-02T22:56:51Z" - mac: ENC[AES256_GCM,data:PVwC5OP3CDiCUTxNwPrxSgWbMp9EuAKP88tmHvrrxnT2IQ68V9THFjajnuNiEkkVvHG9FPp/R0in8nT1NoepaDEZkheyUYq1hKzRoGWxjwQwsvrjeTyUP50++Z/zW2KkOdqaB3r+eblpCxzgyd8FH8LcXRCeC9xq4p0mub3MNSs=,iv:jTIgFV0NydDOJ8cESsiY4mvQc76MbNfi8cM4CrWY2P8=,tag:6u90UUoTBA7lXlkfKoiI8g==,type:str] + lastmodified: "2024-11-02T23:33:52Z" + mac: ENC[AES256_GCM,data:BxhVERYHcweBDrR20D2hX+QhTfPiyqo54CQ4YHxhXcvFzkKUTt6XKuzblV+/TGSmCAayyxzp5n8hLxd68H1eYNQGL0ByYgvfkWHbDjFGBYuUcuNWuvm4O3U+kZqVgctWUaNdZGM36ASNcPxbaWLd6A6ey22tA3+swfYfhEVvNT8=,iv:7w7XJ4GfCkQR0XehpmCJT12hBJlgNKkETR47UvWVqqI=,tag:a+p5mV20jObztCVe4rqS/w==,type:str] pgp: [] unencrypted_suffix: _unencrypted version: 3.8.1